last executing test programs: 11.88295539s ago: executing program 1 (id=560): dup(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x559, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x13, 0x2, 0x8}}}}}]}}]}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c"], 0x114}], 0x1}, 0x40014) 11.730706631s ago: executing program 4 (id=561): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r2, r0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000000)="795f5e97072a1f97b030fb00", 0xc, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x6, 0x4, 0x1, 0x0, 0x6}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000003c0)={0x48}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) 11.538628623s ago: executing program 4 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x3c}}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0403d11, 0x0) socket$inet(0xa, 0x801, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000800)={0xffffffffffffffff}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000cc0)=ANY=[@ANYRESDEC=r5, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=r7, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}}, 0x0) execveat(r6, &(0x7f0000000580)='./file0\x00', &(0x7f0000000a40)={[&(0x7f0000000600)='\x00', &(0x7f0000000840)='virt_wifi0\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='#! ', &(0x7f0000000940)='#! ', &(0x7f0000000980)='#! ', &(0x7f00000009c0)='wg1\x00', &(0x7f0000000d00)='HMARK\x00']}, &(0x7f0000000c80)={[&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='raw\x00', &(0x7f0000000b40)='-\x00', &(0x7f0000000b80)='raw\x00', &(0x7f0000000c00)='(-+#\x00', &(0x7f0000000c40)=')+\x1e+\x00']}, 0x0) cachestat(r5, &(0x7f0000000040), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f4, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@empty, [0x1fe, 0xff000000, 0xffffff00, 0xff], 0x4e21, 0x4e23, 0x4e22, 0x4e21, 0xd04, 0x7f, 0x0, 0x6, 0x8}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff], [0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x3, 0x0, 0x50}, 0x0, 0xfc, 0x12c, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'virt_wifi0\x00', {0x0, 0x0, 0x40004, 0x0, 0xffffffff, 0x7, 0x3ff, 0x98}, {0xfffffffffffffffe}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x350) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4000000000000151, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000580), 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000640), 0x8, 0x84, 0x8, 0x45, &(0x7f00000007c0)}}, 0x10) 10.308717338s ago: executing program 4 (id=566): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) copy_file_range(0xffffffffffffffff, &(0x7f0000000180)=0xe, r1, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200010, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 9.878392064s ago: executing program 3 (id=568): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffe0adf2500007400", @ANYRES32=r2, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 9.255908282s ago: executing program 4 (id=570): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x6f2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x800) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.236336081s ago: executing program 2 (id=571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 8.249377438s ago: executing program 1 (id=573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8a00081"], 0x72) (fail_nth: 3) 8.247534124s ago: executing program 4 (id=574): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x800) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=@ipv6_newroute={0x2c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x6}, [@RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x4}]}, 0x2c}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 8.243004588s ago: executing program 2 (id=575): r0 = socket$inet(0x2, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x1c, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) (fail_nth: 3) 7.739970701s ago: executing program 2 (id=576): socket(0xf, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000003735090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.901713734s ago: executing program 2 (id=577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000000000000001, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c00000000000000000000002ffc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac"], 0x184}}, 0x0) 6.828842689s ago: executing program 2 (id=578): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x3, 0x18e}, &(0x7f00000006c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) 6.767259518s ago: executing program 3 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r6, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffc}]}, 0x40}}, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="0100"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000180)={0x0, 0xffffffffffffffcb, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001914"], 0x18}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@ssrr={0x89, 0x1b, 0xb0, [@multicast1, @local, @multicast2, @broadcast, @private=0xa010101, @broadcast]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0xb, "30c804ec7b422c5cf7"}, @timestamp={0x44, 0x8, 0x3d, 0x0, 0x8, [0x1000]}, @lsrr={0x83, 0xb, 0x76, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) 6.006329277s ago: executing program 1 (id=581): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x8000, 0x2ffffffff}, 0x5) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1d62d000"/14], 0x14}, 0x1, 0x0, 0x0, 0x10008001}, 0x24000050) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x100, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40800}, 0x40000c0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) write$binfmt_aout(r9, 0x0, 0xffffffdb) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r10 = socket$kcm(0x2, 0x8, 0x106) setsockopt$sock_attach_bpf(r10, 0x1, 0x46, &(0x7f0000000080), 0x4) (async) syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c20000012aaaaaaaaa1686dd60f53a0400483a00fe880000000000000000000000000001ff020000000000000000000000000001020090780000050260505f5900000000fc010000000000000000000000000000fe800000000000000000000000007c44622f05e06e4a8200bb3a01000000000000000100000100c2"], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 5.950693033s ago: executing program 3 (id=582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x5, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='f2fs_filemap_fault\x00', r0, 0x0, 0x3e3f}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000000c000000", 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r5, &(0x7f0000000000)=""/42, 0x2a) getdents64(r5, &(0x7f0000000080)=""/147, 0x93) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5) lseek(0xffffffffffffffff, 0x2004, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000f00064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0xc050) 5.707927051s ago: executing program 1 (id=583): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000030100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00003be000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x7, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 5.673307077s ago: executing program 0 (id=584): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe800000000000fffffffffffffff5aa0000010100000008"], 0x0) 5.463056951s ago: executing program 0 (id=585): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x6f2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x800) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.34414581s ago: executing program 2 (id=586): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r3, 0x1, 0xc, 0x0, &(0x7f0000000080)=0xe2a8d1d21b84a7f3) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) 3.177621479s ago: executing program 0 (id=587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x5, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='f2fs_filemap_fault\x00', r0, 0x0, 0x3e3f}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000000c000000", 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r5, &(0x7f0000000000)=""/42, 0x2a) getdents64(r5, &(0x7f0000000080)=""/147, 0x93) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5) lseek(0xffffffffffffffff, 0x2004, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a3000009e0064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0xc050) 1.805518878s ago: executing program 4 (id=588): r0 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x40, 0x82, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r5 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="5f1696e66406edc18be81df57c6b38f6633edfdf0322d3da11b93bbe039bd07ee3a4977fe7b58027b04a3563a7a91bb47f3c0ee2dca13a58271610956bfc0b84f6a16da1e513e254a40311010210f864e90ac3bf416c3607ed6b542957cde0e5a4d9b28fa24f7e6b9cfad783b9a2f76ad068e07aceb7a7c3fe45ca", @ANYRESHEX=r2, @ANYRES8=r5, @ANYRES64=r5, @ANYBLOB="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", @ANYRES32=r4], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000000201010000000000000a000a00000001998a4f2453d946d23b5a7c1cc745909dc4f483a39e07756564ca1b45a6d2d7ec086e3127e6de6de84a204339d3e2d8780cbd93b7e94c27887fc1b69a123728021800dafaed000000f130f75d6ee969704f7a8c96d4ddeea26fac5399c55bbb0c4d21598167b745d63ea28f9de47e90568f3b12e566400c21387cebfdbbf9dfd01f3b7af50952ae67aec8677be24c8ad81cc93026b9da7a11cd3aa3769cb4146739ceb645be93f3dc3509000000102ece656a8af22d1eb0b6daa5bf"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66cb881fc1e8ceb14806ae93978f"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000000206050000000000000000000000000005000100cf8c00000000000073797a30000000000c00078008001240000000000000020073797a30000000000900020073797a3000000000050004000100000092ece5fa462df5e6654bff8d1e1bf7cd8b163c00000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x95d, 0xfa39, 0xc1, 0x0, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2000000080000000, 0x140441) r11 = dup(r10) r12 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r11, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r12, 0x47f5, 0x400, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xedd, 0x8acb, 0x41, 0x0, 0x0) 1.696039905s ago: executing program 1 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'bond_slave_1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}}) 1.571043158s ago: executing program 0 (id=590): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.548977672s ago: executing program 3 (id=591): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x1, 0x0, &(0x7f0000000300)) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f00000004c0), 0x0, 0x0, 0x1, 0x1}, 0x28) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000040)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mbind(&(0x7f0000801000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x8, 0x8, 0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0xa5deb000) 1.411973195s ago: executing program 1 (id=592): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r3, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setreuid(r4, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x7fffffff, 0x9, 0x7, 0xa1, 0x3, 0xff, 0x1, 0xffff}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101602, 0x0) fallocate(r8, 0x1, 0x0, 0x140000804000004) getpriority(0x2, r5) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109021b00010000000009040000015883b200090585"], 0x0) 1.094652318s ago: executing program 3 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000002a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x2000, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe}}}}}}, 0x0) 954.920211ms ago: executing program 0 (id=594): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_current_iac_lap={{0xc3a, 0x7}, {0x6, "6634498e0cc7"}}}, 0xb) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x74}}, 0x200000c4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0xc00, 0x0, 0xffffffffffffffff}) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x6, @none, 0x0, 0x2}, 0xe) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x64, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 47.917059ms ago: executing program 3 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f000015bffc)='nfs\x00', 0x1, &(0x7f0000000000)) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect(r3, &(0x7f0000000200)=@ll={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) 0s ago: executing program 0 (id=596): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r3, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r4, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x7fffffff, 0x9, 0x7, 0xa1, 0x3, 0xff, 0x1, 0xffff}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) kernel console output (not intermixed with test programs): "syz.1.72" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.462588][ T6268] netlink: 248 bytes leftover after parsing attributes in process `syz.3.74'. [ 88.547870][ T30] audit: type=1400 audit(1757506135.843:211): avc: denied { mounton } for pid=6257 comm="syz.1.72" path="/10/file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.626368][ T30] audit: type=1400 audit(1757506135.903:212): avc: denied { nlmsg_write } for pid=6257 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.649317][ T30] audit: type=1400 audit(1757506135.933:213): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 89.235794][ T30] audit: type=1400 audit(1757506136.723:214): avc: denied { ioctl } for pid=6274 comm="syz.0.76" path="socket:[8841]" dev="sockfs" ino=8841 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.337406][ T30] audit: type=1400 audit(1757506136.853:215): avc: denied { create } for pid=6287 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.338720][ T30] audit: type=1400 audit(1757506136.853:216): avc: denied { setopt } for pid=6287 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.339467][ T30] audit: type=1400 audit(1757506136.853:217): avc: denied { connect } for pid=6287 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.894746][ T6289] netlink: 56 bytes leftover after parsing attributes in process `syz.3.79'. [ 91.302579][ T6320] netlink: 68 bytes leftover after parsing attributes in process `syz.2.85'. [ 91.338223][ T30] audit: type=1400 audit(1757506138.723:218): avc: denied { mount } for pid=6310 comm="syz.2.85" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 91.608859][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.933883][ T6327] netlink: 144 bytes leftover after parsing attributes in process `syz.0.88'. [ 91.968756][ T6326] tipc: Started in network mode [ 91.973794][ T6326] tipc: Node identity 000000000000000007, cluster identity 4711 [ 91.994586][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 92.029185][ T5897] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 92.061061][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.112002][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.229540][ T5897] usb 2-1: config 0 descriptor?? [ 92.235189][ T10] libceph: connect (1)[c::]:6789 error -101 [ 92.241526][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 92.673703][ T10] libceph: connect (1)[c::]:6789 error -101 [ 92.680004][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 92.682834][ T6337] ceph: No mds server is up or the cluster is laggy [ 92.758330][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 92.770013][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.792374][ T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.815137][ T43] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 92.834742][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.879405][ T43] usb 5-1: config 0 descriptor?? [ 92.984581][ T43] usb 5-1: can't set config #0, error -71 [ 92.998968][ T43] usb 5-1: USB disconnect, device number 4 [ 93.142456][ T6363] netlink: 56 bytes leftover after parsing attributes in process `syz.2.95'. [ 93.664495][ T5969] usb 2-1: USB disconnect, device number 3 [ 94.498283][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 94.498299][ T30] audit: type=1400 audit(1757506142.013:222): avc: denied { create } for pid=6379 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.724357][ T30] audit: type=1400 audit(1757506142.023:223): avc: granted { setsecparam } for pid=6379 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 94.753928][ T6391] netlink: 144 bytes leftover after parsing attributes in process `syz.3.103'. [ 94.882169][ T30] audit: type=1400 audit(1757506142.023:224): avc: denied { create } for pid=6379 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.439879][ T30] audit: type=1400 audit(1757506142.023:225): avc: granted { setsecparam } for pid=6379 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 95.505179][ T30] audit: type=1400 audit(1757506142.023:226): avc: denied { create } for pid=6379 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.598596][ T30] audit: type=1400 audit(1757506142.023:227): avc: denied { read } for pid=6379 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.726888][ T30] audit: type=1400 audit(1757506142.133:228): avc: denied { read append } for pid=6387 comm="syz.4.101" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.030798][ T30] audit: type=1400 audit(1757506142.133:229): avc: denied { open } for pid=6387 comm="syz.4.101" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.514342][ T30] audit: type=1400 audit(1757506142.193:230): avc: denied { map } for pid=6387 comm="syz.4.101" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.587182][ T30] audit: type=1400 audit(1757506142.203:231): avc: denied { write execute } for pid=6387 comm="syz.4.101" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 97.171985][ T5897] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.334884][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 97.423481][ T5897] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 97.448880][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.474627][ T5897] usb 1-1: config 0 descriptor?? [ 97.566974][ T6436] FAULT_INJECTION: forcing a failure. [ 97.566974][ T6436] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.585533][ T6436] CPU: 0 UID: 0 PID: 6436 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT(full) [ 97.585556][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.585565][ T6436] Call Trace: [ 97.585570][ T6436] [ 97.585577][ T6436] dump_stack_lvl+0x16c/0x1f0 [ 97.585602][ T6436] should_fail_ex+0x512/0x640 [ 97.585628][ T6436] _copy_to_user+0x32/0xd0 [ 97.585655][ T6436] simple_read_from_buffer+0xcb/0x170 [ 97.585674][ T6436] proc_fail_nth_read+0x197/0x240 [ 97.585695][ T6436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.585716][ T6436] ? rw_verify_area+0xcf/0x6c0 [ 97.585741][ T6436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.585760][ T6436] vfs_read+0x1e1/0xcf0 [ 97.585780][ T6436] ? __pfx___mutex_lock+0x10/0x10 [ 97.585802][ T6436] ? __pfx_vfs_read+0x10/0x10 [ 97.585825][ T6436] ? __fget_files+0x20e/0x3c0 [ 97.585850][ T6436] ksys_read+0x12a/0x250 [ 97.585866][ T6436] ? __pfx_ksys_read+0x10/0x10 [ 97.585890][ T6436] do_syscall_64+0xcd/0x4c0 [ 97.585913][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.585929][ T6436] RIP: 0033:0x7fc67578d5bc [ 97.585943][ T6436] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.585958][ T6436] RSP: 002b:00007fc67656d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.585974][ T6436] RAX: ffffffffffffffda RBX: 00007fc6759d5fa0 RCX: 00007fc67578d5bc [ 97.585984][ T6436] RDX: 000000000000000f RSI: 00007fc67656d0a0 RDI: 0000000000000004 [ 97.585994][ T6436] RBP: 00007fc67656d090 R08: 0000000000000000 R09: 0000000000000000 [ 97.586003][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.586012][ T6436] R13: 00007fc6759d6038 R14: 00007fc6759d5fa0 R15: 00007ffc5ccfc8a8 [ 97.586034][ T6436] [ 97.953785][ T6442] netlink: 144 bytes leftover after parsing attributes in process `syz.3.115'. [ 99.717640][ T5897] usb 1-1: USB disconnect, device number 2 [ 101.094368][ T5897] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 101.295082][ T5897] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 101.344593][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.354450][ T5897] usb 3-1: Product: syz [ 101.358662][ T5897] usb 3-1: Manufacturer: syz [ 101.363708][ T5897] usb 3-1: SerialNumber: syz [ 101.383125][ T5897] usb 3-1: config 0 descriptor?? [ 101.395401][ T5897] gspca_main: sq930x-2.14.0 probing 2770:930c [ 102.540052][ T2147] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.576877][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 102.576890][ T30] audit: type=1400 audit(1757506150.093:236): avc: denied { read } for pid=6510 comm="syz.3.132" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.637201][ T30] audit: type=1400 audit(1757506150.093:237): avc: denied { open } for pid=6510 comm="syz.3.132" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.714641][ T30] audit: type=1400 audit(1757506150.123:238): avc: denied { ioctl } for pid=6510 comm="syz.3.132" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.742766][ T5897] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 102.795313][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 102.818785][ T2147] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 102.837577][ T2147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.876914][ T2147] usb 1-1: config 0 descriptor?? [ 102.881952][ T5848] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.918045][ T30] audit: type=1400 audit(1757506150.123:239): avc: denied { set_context_mgr } for pid=6510 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.955449][ T30] audit: type=1400 audit(1757506150.133:240): avc: denied { getopt } for pid=6510 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.984150][ T5897] gspca_sq930x: Sensor ov9630 not yet treated [ 102.989535][ T30] audit: type=1400 audit(1757506150.143:241): avc: denied { write } for pid=6510 comm="syz.3.132" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.008173][ T5897] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 103.056789][ T5897] usb 3-1: USB disconnect, device number 3 [ 103.064571][ T5848] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.178012][ T5848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.432268][ T6535] netlink: 144 bytes leftover after parsing attributes in process `syz.1.138'. [ 103.571545][ T5848] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.581481][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.591472][ T5848] usb 4-1: SerialNumber: syz [ 103.804949][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.876600][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.921337][ T5848] usb 4-1: 0:2 : does not exist [ 104.015492][ T5848] usb 4-1: unit 5: unexpected type 0x0d [ 104.131696][ T5848] usb 4-1: USB disconnect, device number 4 [ 104.920896][ T5848] usb 1-1: USB disconnect, device number 3 [ 106.002877][ T6604] netlink: 144 bytes leftover after parsing attributes in process `syz.2.151'. [ 109.245001][ T5859] Bluetooth: Unexpected start frame (len 12) [ 109.258181][ T30] audit: type=1400 audit(1757506156.773:242): avc: denied { ioctl } for pid=6644 comm="syz.3.164" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.290098][ T6645] Zero length message leads to an empty skb [ 109.298199][ T30] audit: type=1400 audit(1757506156.803:243): avc: denied { remount } for pid=6644 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.318575][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.164'. [ 110.205329][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 110.826912][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 111.042048][ T43] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 111.769136][ T43] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 111.794109][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.805433][ T43] usb 4-1: Product: syz [ 111.809605][ T43] usb 4-1: Manufacturer: syz [ 111.836887][ T43] usb 4-1: SerialNumber: syz [ 111.933307][ T43] usb 4-1: config 0 descriptor?? [ 112.045224][ T43] gspca_main: sq930x-2.14.0 probing 2770:930c [ 112.276669][ T30] audit: type=1400 audit(1757506159.793:244): avc: denied { connect } for pid=6665 comm="syz.3.169" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.281989][ T30] audit: type=1400 audit(1757506160.783:245): avc: denied { connect } for pid=6712 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.359363][ T30] audit: type=1400 audit(1757506160.793:246): avc: denied { setopt } for pid=6712 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.603533][ T43] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 113.823040][ T43] gspca_sq930x: Sensor ov9630 not yet treated [ 113.830852][ T43] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 113.868584][ T43] usb 4-1: USB disconnect, device number 5 [ 114.485444][ T5859] Bluetooth: Unexpected start frame (len 12) [ 116.712031][ T6753] netlink: 'syz.4.189': attribute type 1 has an invalid length. [ 116.771906][ T6753] netlink: 144 bytes leftover after parsing attributes in process `syz.4.189'. [ 116.792378][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.189'. [ 117.107819][ T6769] netlink: 56 bytes leftover after parsing attributes in process `syz.4.191'. [ 117.271943][ T5897] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.787895][ T5897] usb 3-1: device descriptor read/all, error -61 [ 117.799528][ T6785] FAULT_INJECTION: forcing a failure. [ 117.799528][ T6785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.838401][ T6785] CPU: 1 UID: 0 PID: 6785 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT(full) [ 117.838432][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.838442][ T6785] Call Trace: [ 117.838448][ T6785] [ 117.838454][ T6785] dump_stack_lvl+0x16c/0x1f0 [ 117.838481][ T6785] should_fail_ex+0x512/0x640 [ 117.838506][ T6785] _copy_from_user+0x2e/0xd0 [ 117.838531][ T6785] copy_msghdr_from_user+0x98/0x160 [ 117.838552][ T6785] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 117.838581][ T6785] ___sys_sendmsg+0xfe/0x1d0 [ 117.838601][ T6785] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.838650][ T6785] __sys_sendmsg+0x16d/0x220 [ 117.838672][ T6785] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.838709][ T6785] do_syscall_64+0xcd/0x4c0 [ 117.838732][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.838748][ T6785] RIP: 0033:0x7f413878eba9 [ 117.838761][ T6785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.838775][ T6785] RSP: 002b:00007f4139588038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.838791][ T6785] RAX: ffffffffffffffda RBX: 00007f41389d5fa0 RCX: 00007f413878eba9 [ 117.838804][ T6785] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 117.838814][ T6785] RBP: 00007f4139588090 R08: 0000000000000000 R09: 0000000000000000 [ 117.838824][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.838833][ T6785] R13: 00007f41389d6038 R14: 00007f41389d5fa0 R15: 00007ffde6a91a98 [ 117.838853][ T6785] [ 118.532170][ T5897] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.672069][ T5897] usb 3-1: device descriptor read/64, error -71 [ 118.726444][ T6793] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 118.754645][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 118.791928][ T30] audit: type=1400 audit(1757506166.293:247): avc: denied { sys_module } for pid=6795 comm="syz.3.198" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.795071][ T5897] usb usb3-port1: attempt power cycle [ 118.873261][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'. [ 118.912290][ T30] audit: type=1400 audit(1757506166.373:248): avc: denied { shutdown } for pid=6795 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.043116][ T30] audit: type=1400 audit(1757506166.383:249): avc: denied { read } for pid=6795 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.297568][ T5897] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.332964][ T5897] usb 3-1: device descriptor read/8, error -71 [ 119.762010][ T5848] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 119.951415][ T5924] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.388899][ T5897] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.529034][ T5848] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.541906][ T5848] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.555949][ T5897] usb 3-1: device descriptor read/8, error -71 [ 120.582826][ T5848] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.597864][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.656301][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 120.711864][ T5897] usb usb3-port1: unable to enumerate USB device [ 120.792960][ T5924] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 120.837354][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.912927][ T5924] usb 2-1: config 0 descriptor?? [ 121.127917][ T5848] usb 5-1: usb_control_msg returned -32 [ 121.135577][ T5848] usbtmc 5-1:16.0: can't read capabilities [ 122.266196][ T5924] usb 2-1: USB disconnect, device number 4 [ 122.403244][ T6865] 9pnet_virtio: no channels available for device syz [ 122.497087][ T6868] FAULT_INJECTION: forcing a failure. [ 122.497087][ T6868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.510401][ T6868] CPU: 1 UID: 0 PID: 6868 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT(full) [ 122.510423][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.510433][ T6868] Call Trace: [ 122.510438][ T6868] [ 122.510445][ T6868] dump_stack_lvl+0x16c/0x1f0 [ 122.510471][ T6868] should_fail_ex+0x512/0x640 [ 122.510496][ T6868] _copy_to_user+0x32/0xd0 [ 122.510523][ T6868] simple_read_from_buffer+0xcb/0x170 [ 122.510543][ T6868] proc_fail_nth_read+0x197/0x240 [ 122.510563][ T6868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.510585][ T6868] ? rw_verify_area+0xcf/0x6c0 [ 122.510611][ T6868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.510630][ T6868] vfs_read+0x1e1/0xcf0 [ 122.510651][ T6868] ? __pfx___mutex_lock+0x10/0x10 [ 122.510673][ T6868] ? __pfx_vfs_read+0x10/0x10 [ 122.510697][ T6868] ? __fget_files+0x20e/0x3c0 [ 122.510724][ T6868] ksys_read+0x12a/0x250 [ 122.510740][ T6868] ? __pfx_ksys_read+0x10/0x10 [ 122.510764][ T6868] do_syscall_64+0xcd/0x4c0 [ 122.510788][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.510805][ T6868] RIP: 0033:0x7f413878d5bc [ 122.510819][ T6868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.510834][ T6868] RSP: 002b:00007f4139546030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.510850][ T6868] RAX: ffffffffffffffda RBX: 00007f41389d6180 RCX: 00007f413878d5bc [ 122.510860][ T6868] RDX: 000000000000000f RSI: 00007f41395460a0 RDI: 0000000000000005 [ 122.510869][ T6868] RBP: 00007f4139546090 R08: 0000000000000000 R09: 0000000000000000 [ 122.510879][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.510888][ T6868] R13: 00007f41389d6218 R14: 00007f41389d6180 R15: 00007ffde6a91a98 [ 122.510911][ T6868] [ 122.757827][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 122.837110][ T30] audit: type=1400 audit(1757506170.273:250): avc: denied { bind } for pid=6852 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 122.964725][ T30] audit: type=1400 audit(1757506170.273:251): avc: denied { write } for pid=6852 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 123.454501][ T10] usb 5-1: USB disconnect, device number 5 [ 126.022168][ T30] audit: type=1400 audit(1757506173.533:252): avc: denied { read } for pid=6897 comm="syz.4.223" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.046402][ T6900] input: syz0 as /devices/virtual/input/input5 [ 126.066663][ T6900] syz.4.223 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.118225][ T30] audit: type=1400 audit(1757506173.573:253): avc: denied { ioctl } for pid=6897 comm="syz.4.223" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.240746][ T30] audit: type=1400 audit(1757506174.753:254): avc: denied { create } for pid=6897 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 127.314103][ T30] audit: type=1400 audit(1757506174.803:255): avc: denied { ioctl } for pid=6897 comm="syz.4.223" path="pid:[4026532785]" dev="nsfs" ino=4026532785 ioctlcmd=0x64c2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.345347][ T30] audit: type=1400 audit(1757506174.813:256): avc: denied { ioctl } for pid=6907 comm="syz.2.226" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.374708][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.645113][ T6923] netlink: 56 bytes leftover after parsing attributes in process `syz.1.227'. [ 127.665377][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 127.709290][ T30] audit: type=1400 audit(1757506175.183:257): avc: denied { ioctl } for pid=6922 comm="syz.4.228" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10806 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.761916][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 127.765030][ T6927] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 127.796679][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.816612][ T43] usb 3-1: config 0 descriptor?? [ 127.825461][ T6927] netlink: 144 bytes leftover after parsing attributes in process `syz.3.229'. [ 127.868713][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.229'. [ 128.879598][ T6940] FAULT_INJECTION: forcing a failure. [ 128.879598][ T6940] name failslab, interval 1, probability 0, space 0, times 0 [ 129.242223][ T6940] CPU: 1 UID: 0 PID: 6940 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT(full) [ 129.242240][ T6940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.242245][ T6940] Call Trace: [ 129.242249][ T6940] [ 129.242253][ T6940] dump_stack_lvl+0x16c/0x1f0 [ 129.242270][ T6940] should_fail_ex+0x512/0x640 [ 129.242283][ T6940] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 129.242296][ T6940] should_failslab+0xc2/0x120 [ 129.242308][ T6940] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 129.242318][ T6940] ? __alloc_skb+0x2b2/0x380 [ 129.242332][ T6940] __alloc_skb+0x2b2/0x380 [ 129.242343][ T6940] ? __pfx___alloc_skb+0x10/0x10 [ 129.242356][ T6940] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 129.242371][ T6940] netlink_alloc_large_skb+0x69/0x130 [ 129.242385][ T6940] netlink_sendmsg+0x6a1/0xdd0 [ 129.242404][ T6940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.242422][ T6940] ____sys_sendmsg+0xa98/0xc70 [ 129.242438][ T6940] ? copy_msghdr_from_user+0x10a/0x160 [ 129.242450][ T6940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.242477][ T6940] ___sys_sendmsg+0x134/0x1d0 [ 129.242490][ T6940] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.242519][ T6940] __sys_sendmsg+0x16d/0x220 [ 129.242531][ T6940] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.242552][ T6940] do_syscall_64+0xcd/0x4c0 [ 129.242566][ T6940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.242577][ T6940] RIP: 0033:0x7f413878eba9 [ 129.242585][ T6940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.242595][ T6940] RSP: 002b:00007f4139588038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.242604][ T6940] RAX: ffffffffffffffda RBX: 00007f41389d5fa0 RCX: 00007f413878eba9 [ 129.242611][ T6940] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 129.242617][ T6940] RBP: 00007f4139588090 R08: 0000000000000000 R09: 0000000000000000 [ 129.242622][ T6940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.242628][ T6940] R13: 00007f41389d6038 R14: 00007f41389d5fa0 R15: 00007ffde6a91a98 [ 129.242640][ T6940] [ 129.503152][ T43] usb 3-1: USB disconnect, device number 8 [ 129.638442][ T30] audit: type=1400 audit(1757506177.153:258): avc: denied { read write } for pid=6948 comm="syz.1.236" name="swradio2" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.731401][ T30] audit: type=1400 audit(1757506177.153:259): avc: denied { open } for pid=6948 comm="syz.1.236" path="/dev/swradio2" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.919512][ T6956] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 129.985007][ T6956] netlink: 184 bytes leftover after parsing attributes in process `syz.3.235'. [ 130.022268][ T6956] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 131.802843][ T7003] netlink: 56 bytes leftover after parsing attributes in process `syz.2.243'. [ 132.334815][ T5848] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.345917][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.352258][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.204135][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 133.221458][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 133.246030][ T5848] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 133.255537][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.278273][ T5848] usb 4-1: config 0 descriptor?? [ 133.598791][ T5969] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.813158][ T5969] usb 3-1: device descriptor read/64, error -71 [ 134.072333][ T5969] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.551953][ T5969] usb 3-1: device descriptor read/64, error -71 [ 134.673969][ T5969] usb usb3-port1: attempt power cycle [ 134.725746][ T5848] usb 4-1: USB disconnect, device number 6 [ 134.871359][ T30] audit: type=1400 audit(1757506182.383:260): avc: denied { read } for pid=7043 comm="syz.4.253" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 134.945309][ T7051] IPVS: set_ctl: invalid protocol: 0 172.20.20.51:20004 [ 134.958687][ T30] audit: type=1400 audit(1757506182.433:261): avc: denied { open } for pid=7043 comm="syz.4.253" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.032017][ T30] audit: type=1400 audit(1757506182.513:262): avc: denied { sqpoll } for pid=7043 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 135.071519][ T5969] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.092389][ T5969] usb 3-1: device descriptor read/8, error -71 [ 135.102123][ T30] audit: type=1400 audit(1757506182.533:263): avc: denied { accept } for pid=7043 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.558488][ T5969] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 135.615033][ T5969] usb 3-1: device descriptor read/8, error -71 [ 135.688875][ T7046] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.733801][ T5969] usb usb3-port1: unable to enumerate USB device [ 135.743007][ T7046] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 135.782415][ T7046] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 135.811541][ T30] audit: type=1400 audit(1757506183.323:264): avc: denied { create } for pid=7067 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.836508][ T7046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.844695][ T7046] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.853755][ T7046] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.875569][ T7046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.881620][ T7046] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.889806][ T7046] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.902390][ T7046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.908500][ T7046] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.024070][ T7046] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.187812][ T7046] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.362668][ T7046] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 136.418404][ T7046] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 137.144385][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.333758][ T30] audit: type=1400 audit(1757506184.853:265): avc: denied { read write } for pid=7089 comm="syz.0.261" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.734293][ T30] audit: type=1400 audit(1757506184.853:266): avc: denied { open } for pid=7089 comm="syz.0.261" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.852602][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.931958][ T5859] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.938094][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.981245][ T30] audit: type=1400 audit(1757506185.493:267): avc: denied { read } for pid=7113 comm="syz.2.268" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 138.030285][ T7119] program syz.2.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.156586][ T30] audit: type=1400 audit(1757506185.493:268): avc: denied { open } for pid=7113 comm="syz.2.268" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 138.259564][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 138.892031][ T5969] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 139.057539][ T5969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.147823][ T5969] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.200236][ T5969] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 139.222004][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.242002][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.271887][ T5969] usb 3-1: Product: syz [ 139.276354][ T5969] usb 3-1: Manufacturer: syz [ 139.280982][ T5969] usb 3-1: SerialNumber: syz [ 139.346181][ T5969] usb 3-1: config 0 descriptor?? [ 139.654990][ T5969] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 139.742021][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.947819][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.965345][ T7143] FAULT_INJECTION: forcing a failure. [ 139.965345][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 139.978030][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.0.272 Not tainted syzkaller #0 PREEMPT(full) [ 139.978053][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.978061][ T7143] Call Trace: [ 139.978065][ T7143] [ 139.978069][ T7143] dump_stack_lvl+0x16c/0x1f0 [ 139.978090][ T7143] should_fail_ex+0x512/0x640 [ 139.978108][ T7143] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 139.978124][ T7143] should_failslab+0xc2/0x120 [ 139.978137][ T7143] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 139.978148][ T7143] ? getname_flags.part.0+0x4c/0x550 [ 139.978165][ T7143] getname_flags.part.0+0x4c/0x550 [ 139.978182][ T7143] getname_flags+0x93/0xf0 [ 139.978192][ T7143] do_sys_openat2+0xb8/0x1d0 [ 139.978206][ T7143] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.978222][ T7143] ? bpf_trace_run2+0x2ab/0x590 [ 139.978235][ T7143] __x64_sys_openat+0x174/0x210 [ 139.978249][ T7143] ? __pfx___x64_sys_openat+0x10/0x10 [ 139.978264][ T7143] ? syscall_trace_enter+0x1cb/0x240 [ 139.978277][ T7143] ? rcu_is_watching+0x12/0xc0 [ 139.978291][ T7143] do_syscall_64+0xcd/0x4c0 [ 139.978305][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.978316][ T7143] RIP: 0033:0x7f9644b8eba9 [ 139.978325][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.978334][ T7143] RSP: 002b:00007f9642df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.978344][ T7143] RAX: ffffffffffffffda RBX: 00007f9644dd6090 RCX: 00007f9644b8eba9 [ 139.978354][ T7143] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 139.978360][ T7143] RBP: 00007f9642df6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.978366][ T7143] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000001 [ 139.978372][ T7143] R13: 00007f9644dd6128 R14: 00007f9644dd6090 R15: 00007ffdbd32edd8 [ 139.978384][ T7143] [ 140.263453][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.273035][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.332013][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 140.873697][ T7153] kAFS: No cell specified [ 141.291892][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.494868][ T7163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=7163 comm=syz.3.279 [ 141.526581][ T7167] FAULT_INJECTION: forcing a failure. [ 141.526581][ T7167] name failslab, interval 1, probability 0, space 0, times 0 [ 141.954073][ T7167] CPU: 0 UID: 0 PID: 7167 Comm: syz.0.278 Not tainted syzkaller #0 PREEMPT(full) [ 141.954089][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.954096][ T7167] Call Trace: [ 141.954100][ T7167] [ 141.954106][ T7167] dump_stack_lvl+0x16c/0x1f0 [ 141.954123][ T7167] should_fail_ex+0x512/0x640 [ 141.954139][ T7167] should_failslab+0xc2/0x120 [ 141.954152][ T7167] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 141.954163][ T7167] ? __alloc_skb+0x2b2/0x380 [ 141.954178][ T7167] __alloc_skb+0x2b2/0x380 [ 141.954189][ T7167] ? __pfx___alloc_skb+0x10/0x10 [ 141.954202][ T7167] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 141.954218][ T7167] netlink_alloc_large_skb+0x69/0x130 [ 141.954233][ T7167] netlink_sendmsg+0x6a1/0xdd0 [ 141.954248][ T7167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.954266][ T7167] ____sys_sendmsg+0xa98/0xc70 [ 141.954282][ T7167] ? copy_msghdr_from_user+0x10a/0x160 [ 141.954295][ T7167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.954316][ T7167] ___sys_sendmsg+0x134/0x1d0 [ 141.954329][ T7167] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.954358][ T7167] ? map_id_range_up+0x380/0x3b0 [ 141.954374][ T7167] __sys_sendmsg+0x16d/0x220 [ 141.954387][ T7167] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.954399][ T7167] ? __pfx_bpf_trace_run2+0x10/0x10 [ 141.954413][ T7167] ? syscall_trace_enter+0x1cb/0x240 [ 141.954426][ T7167] ? rcu_is_watching+0x12/0xc0 [ 141.954441][ T7167] do_syscall_64+0xcd/0x4c0 [ 141.954455][ T7167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.954465][ T7167] RIP: 0033:0x7f9644b8eba9 [ 141.954474][ T7167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.954483][ T7167] RSP: 002b:00007f9645936038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.954493][ T7167] RAX: ffffffffffffffda RBX: 00007f9644dd5fa0 RCX: 00007f9644b8eba9 [ 141.954499][ T7167] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 141.954505][ T7167] RBP: 00007f9645936090 R08: 0000000000000000 R09: 0000000000000000 [ 141.954511][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.954516][ T7167] R13: 00007f9644dd6038 R14: 00007f9644dd5fa0 R15: 00007ffdbd32edd8 [ 141.954529][ T7167] [ 142.209758][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.304099][ T7173] tmpfs: Unknown parameter 'quotÜa•ÝTÉ' [ 142.310801][ T7173] tmpfs: Unknown parameter 'quotÜa•ÝTÉ' [ 142.327657][ T7173] overlayfs: missing 'lowerdir' [ 142.339033][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.339852][ T7175] overlayfs: missing 'lowerdir' [ 142.345156][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.412629][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 143.211747][ T5897] usb 3-1: USB disconnect, device number 13 [ 143.910810][ T30] audit: type=1400 audit(1757506191.423:269): avc: denied { read } for pid=7192 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.017977][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'. [ 144.441611][ T30] audit: type=1400 audit(1757506191.953:270): avc: denied { create } for pid=7205 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.902473][ T30] audit: type=1400 audit(1757506191.953:271): avc: denied { setopt } for pid=7205 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.176704][ T7216] netlink: 56 bytes leftover after parsing attributes in process `syz.1.292'. [ 145.803787][ T30] audit: type=1326 audit(1757506193.313:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67578eba9 code=0x7ffc0000 [ 145.833866][ T7210] pim6reg: entered allmulticast mode [ 145.856872][ T7210] pim6reg: left allmulticast mode [ 145.917444][ T5859] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 146.007584][ T30] audit: type=1326 audit(1757506193.313:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67578eba9 code=0x7ffc0000 [ 146.047942][ T7230] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.549388][ T30] audit: type=1326 audit(1757506193.323:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc67578eba9 code=0x7ffc0000 [ 146.581044][ T30] audit: type=1326 audit(1757506193.323:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67578eba9 code=0x7ffc0000 [ 146.885215][ T30] audit: type=1326 audit(1757506193.343:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67578eba9 code=0x7ffc0000 [ 147.008047][ T30] audit: type=1326 audit(1757506193.343:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc67578eba9 code=0x7ffc0000 [ 147.491960][ T30] audit: type=1326 audit(1757506193.343:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67578eba9 code=0x7ffc0000 [ 147.663068][ T7248] cgroup: fork rejected by pids controller in /syz0 [ 147.980853][ T7299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.052489][ T7316] capability: warning: `syz.4.301' uses deprecated v2 capabilities in a way that may be insecure [ 148.070717][ T5848] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 148.295192][ T5848] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 148.304591][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.344166][ T5848] usb 4-1: Product: syz [ 148.387432][ T5848] usb 4-1: Manufacturer: syz [ 148.402002][ T5848] usb 4-1: SerialNumber: syz [ 148.435973][ T5848] usb 4-1: config 0 descriptor?? [ 148.447852][ T7320] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 148.548082][ T5848] gspca_main: sq930x-2.14.0 probing 2770:930c [ 149.094808][ T5848] gspca_sq930x: reg_r 001f failed -110 [ 149.105583][ T5848] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 149.261725][ T7328] afs: Unknown parameter 'd\nnÈê#½!Àš†daqÎßwøÑ1­]K†m60çÖg±—Êľ줒ƒdëâ&ÑùöÐͬ¶ݾ˜äÝø§¢wÕ¯' [ 149.968390][ T7332] netlink: 56 bytes leftover after parsing attributes in process `syz.1.303'. [ 151.016058][ T5897] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.619836][ T5897] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.086208][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.109524][ T5897] usb 5-1: config 0 descriptor?? [ 152.123493][ T5897] cp210x 5-1:0.0: cp210x converter detected [ 152.319964][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 152.350090][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.362155][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 152.369864][ T30] audit: type=1400 audit(1757506199.833:302): avc: denied { mount } for pid=7370 comm="syz.2.313" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 152.372179][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.425182][ T5969] usb 4-1: USB disconnect, device number 7 [ 152.469808][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 152.483228][ T30] audit: type=1400 audit(1757506199.853:303): avc: denied { mount } for pid=7370 comm="syz.2.313" name="/" dev="autofs" ino=12211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 152.507446][ T5897] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 152.541895][ T5897] usb 5-1: cp210x converter now attached to ttyUSB0 [ 152.659551][ T5897] usb 5-1: USB disconnect, device number 6 [ 152.949393][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.053271][ T5897] cp210x 5-1:0.0: device disconnected [ 154.061596][ T30] audit: type=1400 audit(1757506201.573:304): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 154.294253][ T7401] lo speed is unknown, defaulting to 1000 [ 154.300341][ T7401] lo speed is unknown, defaulting to 1000 [ 154.311592][ T7401] lo speed is unknown, defaulting to 1000 [ 154.332199][ T7401] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.388840][ T7401] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 155.137693][ T30] audit: type=1400 audit(1757506201.753:305): avc: denied { create } for pid=7392 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 155.294346][ T7401] lo speed is unknown, defaulting to 1000 [ 155.341986][ T30] audit: type=1400 audit(1757506202.823:306): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 155.389773][ T7401] lo speed is unknown, defaulting to 1000 [ 155.481568][ T30] audit: type=1400 audit(1757506202.913:307): avc: denied { create } for pid=7406 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 155.664116][ T7401] lo speed is unknown, defaulting to 1000 [ 155.802953][ T7401] lo speed is unknown, defaulting to 1000 [ 155.845134][ T7401] lo speed is unknown, defaulting to 1000 [ 155.851567][ T7401] lo speed is unknown, defaulting to 1000 [ 156.125110][ T7386] syz.1.312 (7386): drop_caches: 2 [ 157.622812][ T7407] netlink: 'syz.4.320': attribute type 2 has an invalid length. [ 157.883777][ T5969] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.085673][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 158.091940][ T5848] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 158.149477][ T5969] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 158.340144][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.383988][ T5969] usb 2-1: config 0 descriptor?? [ 158.621252][ T5848] usb 5-1: device descriptor read/64, error -71 [ 158.932265][ T5848] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 159.129949][ T30] audit: type=1400 audit(1757506206.643:308): avc: denied { block_suspend } for pid=7473 comm="syz.2.333" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.268598][ T30] audit: type=1400 audit(1757506206.683:309): avc: denied { write } for pid=7473 comm="syz.2.333" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.878997][ T5924] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 160.078007][ T5938] usb 2-1: USB disconnect, device number 5 [ 160.310988][ T5924] usb 4-1: device descriptor read/64, error -71 [ 160.690784][ T30] audit: type=1400 audit(1757506208.203:310): avc: denied { lock } for pid=7493 comm="syz.1.338" path="socket:[12554]" dev="sockfs" ino=12554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 160.727773][ T5924] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 161.344505][ T7499] syz.4.337 uses obsolete (PF_INET,SOCK_PACKET) [ 161.484026][ T7508] netlink: 56 bytes leftover after parsing attributes in process `syz.2.340'. [ 161.705457][ T5924] usb 4-1: device descriptor read/64, error -71 [ 161.862063][ T5924] usb usb4-port1: attempt power cycle [ 162.101097][ T7518] netlink: 56 bytes leftover after parsing attributes in process `syz.0.341'. [ 162.140182][ T7521] FAULT_INJECTION: forcing a failure. [ 162.140182][ T7521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.299920][ T7521] CPU: 0 UID: 0 PID: 7521 Comm: syz.3.343 Not tainted syzkaller #0 PREEMPT(full) [ 162.299944][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.299954][ T7521] Call Trace: [ 162.299959][ T7521] [ 162.299966][ T7521] dump_stack_lvl+0x16c/0x1f0 [ 162.299992][ T7521] should_fail_ex+0x512/0x640 [ 162.300015][ T7521] _copy_from_iter+0x29f/0x1720 [ 162.300043][ T7521] ? __pfx__copy_from_iter+0x10/0x10 [ 162.300067][ T7521] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 162.300094][ T7521] copy_page_from_iter+0xde/0x180 [ 162.300121][ T7521] tun_build_skb.constprop.0+0x2e8/0x1500 [ 162.300155][ T7521] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 162.300180][ T7521] ? unwind_get_return_address+0x59/0xa0 [ 162.300200][ T7521] ? arch_stack_walk+0xa6/0x100 [ 162.300235][ T7521] ? _kstrtoull+0x145/0x200 [ 162.300252][ T7521] ? __pfx__kstrtoull+0x10/0x10 [ 162.300272][ T7521] tun_get_user+0x14ae/0x3ce0 [ 162.300314][ T7521] ? __pfx_tun_get_user+0x10/0x10 [ 162.300342][ T7521] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 162.300372][ T7521] ? find_held_lock+0x2b/0x80 [ 162.300394][ T7521] ? tun_get+0x191/0x370 [ 162.300423][ T7521] tun_chr_write_iter+0xdc/0x210 [ 162.300450][ T7521] vfs_write+0x7d3/0x11d0 [ 162.300468][ T7521] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.300494][ T7521] ? __pfx_vfs_write+0x10/0x10 [ 162.300508][ T7521] ? find_held_lock+0x2b/0x80 [ 162.300543][ T7521] ksys_write+0x12a/0x250 [ 162.300559][ T7521] ? __pfx_ksys_write+0x10/0x10 [ 162.300583][ T7521] do_syscall_64+0xcd/0x4c0 [ 162.300608][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.300625][ T7521] RIP: 0033:0x7fc67578d65f [ 162.300639][ T7521] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 162.300654][ T7521] RSP: 002b:00007fc67656d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.300670][ T7521] RAX: ffffffffffffffda RBX: 00007fc6759d5fa0 RCX: 00007fc67578d65f [ 162.300680][ T7521] RDX: 000000000000003e RSI: 0000200000002a40 RDI: 00000000000000c8 [ 162.300690][ T7521] RBP: 00007fc67656d090 R08: 0000000000000000 R09: 0000000000000000 [ 162.300699][ T7521] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 162.300708][ T7521] R13: 00007fc6759d6038 R14: 00007fc6759d5fa0 R15: 00007ffc5ccfc8a8 [ 162.300731][ T7521] [ 162.598798][ T7529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.344'. [ 162.611644][ T7529] bpq0: entered allmulticast mode [ 162.658623][ T30] audit: type=1400 audit(1757506210.143:311): avc: denied { ioctl } for pid=7527 comm="syz.2.344" path="socket:[12605]" dev="sockfs" ino=12605 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 164.684030][ T5924] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 165.433544][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 166.031051][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 166.040285][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.052820][ T5924] usb 4-1: config 0 descriptor?? [ 166.315583][ T7545] Set syz1 is full, maxelem 65536 reached [ 167.629009][ T5848] usb 4-1: USB disconnect, device number 11 [ 167.838287][ T7578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.355'. [ 168.090125][ T5859] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 169.082576][ T5848] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 169.301679][ T30] audit: type=1400 audit(1757506216.783:312): avc: denied { mounton } for pid=7591 comm="syz.3.360" path="/proc/261/task" dev="proc" ino=12692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 169.389279][ T5848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.605802][ T5848] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 169.686737][ T5848] usb 4-1: can't read configurations, error -71 [ 169.719321][ T30] audit: type=1400 audit(1757506217.233:313): avc: denied { write } for pid=7586 comm="syz.4.358" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.764511][ T30] audit: type=1400 audit(1757506217.233:314): avc: denied { open } for pid=7586 comm="syz.4.358" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.816191][ T30] audit: type=1400 audit(1757506217.233:315): avc: denied { read } for pid=7586 comm="syz.4.358" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.831970][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 170.050660][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.065502][ T30] audit: type=1400 audit(1757506217.583:316): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 170.110531][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.134488][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.141701][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 170.657252][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.672759][ T10] usb 2-1: config 0 descriptor?? [ 170.941877][ T5848] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 171.206541][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 171.240471][ T5848] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 171.281125][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.342772][ T5848] usb 4-1: config 0 descriptor?? [ 171.485316][ T30] audit: type=1400 audit(1757506218.993:317): avc: denied { ioctl } for pid=7636 comm="syz.0.369" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 171.595390][ T10] lenovo 0003:17EF:60EE.0001: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 172.058764][ T30] audit: type=1400 audit(1757506219.573:318): avc: denied { map } for pid=7636 comm="syz.0.369" path="/proc/350/net/fib_trie" dev="proc" ino=4026533112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 172.998452][ T5938] usb 4-1: USB disconnect, device number 13 [ 173.023925][ T10] lenovo 0003:17EF:60EE.0001: Failed to switch middle button: -71 [ 173.184233][ T10] lenovo 0003:17EF:60EE.0001: Fn-lock setting failed: -71 [ 173.196532][ T10] lenovo 0003:17EF:60EE.0001: Sensitivity setting failed: -71 [ 173.662596][ T10] usb 2-1: USB disconnect, device number 6 [ 173.746994][ T7682] netlink: 'syz.4.377': attribute type 1 has an invalid length. [ 173.754773][ T7682] netlink: 144 bytes leftover after parsing attributes in process `syz.4.377'. [ 173.802068][ T7682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.377'. [ 173.865654][ T7691] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.302206][ T5848] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 174.341995][ T5938] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 174.577581][ T5938] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 174.620631][ T5938] usb 5-1: config 0 has no interface number 0 [ 174.662090][ T5938] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 174.690777][ T5938] usb 5-1: New USB device found, idVendor=0499, idProduct=6bab, bcdDevice=68.2f [ 174.797971][ T7710] FAULT_INJECTION: forcing a failure. [ 174.797971][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 174.810666][ T7710] CPU: 0 UID: 0 PID: 7710 Comm: syz.3.384 Not tainted syzkaller #0 PREEMPT(full) [ 174.810688][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 174.810697][ T7710] Call Trace: [ 174.810702][ T7710] [ 174.810706][ T7710] dump_stack_lvl+0x16c/0x1f0 [ 174.810723][ T7710] should_fail_ex+0x512/0x640 [ 174.810736][ T7710] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 174.810749][ T7710] should_failslab+0xc2/0x120 [ 174.810761][ T7710] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 174.810772][ T7710] ? getname_flags.part.0+0x4c/0x550 [ 174.810789][ T7710] getname_flags.part.0+0x4c/0x550 [ 174.810806][ T7710] getname_flags+0x93/0xf0 [ 174.810816][ T7710] do_sys_openat2+0xb8/0x1d0 [ 174.810830][ T7710] ? __pfx_do_sys_openat2+0x10/0x10 [ 174.810845][ T7710] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 174.810861][ T7710] __x64_sys_openat+0x174/0x210 [ 174.810875][ T7710] ? __pfx___x64_sys_openat+0x10/0x10 [ 174.810891][ T7710] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 174.810905][ T7710] do_syscall_64+0xcd/0x4c0 [ 174.810919][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.810930][ T7710] RIP: 0033:0x7fc67578eba9 [ 174.810938][ T7710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.810947][ T7710] RSP: 002b:00007fc67654c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 174.810957][ T7710] RAX: ffffffffffffffda RBX: 00007fc6759d6090 RCX: 00007fc67578eba9 [ 174.810963][ T7710] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 174.810969][ T7710] RBP: 00007fc67654c090 R08: 0000000000000000 R09: 0000000000000000 [ 174.810974][ T7710] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000001 [ 174.810980][ T7710] R13: 00007fc6759d6128 R14: 00007fc6759d6090 R15: 00007ffc5ccfc8a8 [ 174.810993][ T7710] [ 175.070239][ T5938] usb 5-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 175.104763][ T5938] usb 5-1: Product: syz [ 175.113199][ T5938] usb 5-1: Manufacturer: syz [ 175.192137][ T5938] usb 5-1: SerialNumber: syz [ 175.192288][ T5848] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 175.207614][ T5848] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 175.218532][ T5848] usb 1-1: config 1 interface 0 has no altsetting 0 [ 175.240672][ T5848] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 175.249773][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.257750][ T5848] usb 1-1: Product: syz [ 175.261894][ T5848] usb 1-1: Manufacturer: syz [ 175.266453][ T5848] usb 1-1: SerialNumber: syz [ 175.276239][ T7691] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.319620][ T7691] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.323644][ T5938] usb 5-1: config 0 descriptor?? [ 175.508716][ T7713] netlink: 'syz.1.385': attribute type 4 has an invalid length. [ 175.547918][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 175.556734][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 175.565590][ T7695] netlink: 'syz.4.380': attribute type 15 has an invalid length. [ 175.573321][ T7695] netlink: 'syz.4.380': attribute type 18 has an invalid length. [ 175.911745][ T5938] usb 5-1: USB disconnect, device number 9 [ 175.942159][ T6368] udevd[6368]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.151985][ T2147] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 176.317364][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.330421][ T2147] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 176.339657][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.352733][ T2147] usb 2-1: config 0 descriptor?? [ 176.553976][ T7729] FAULT_INJECTION: forcing a failure. [ 176.553976][ T7729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.567225][ T7729] CPU: 1 UID: 0 PID: 7729 Comm: syz.2.390 Not tainted syzkaller #0 PREEMPT(full) [ 176.567246][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.567255][ T7729] Call Trace: [ 176.567260][ T7729] [ 176.567266][ T7729] dump_stack_lvl+0x16c/0x1f0 [ 176.567291][ T7729] should_fail_ex+0x512/0x640 [ 176.567316][ T7729] _copy_to_user+0x32/0xd0 [ 176.567341][ T7729] simple_read_from_buffer+0xcb/0x170 [ 176.567360][ T7729] proc_fail_nth_read+0x197/0x240 [ 176.567379][ T7729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.567398][ T7729] ? rw_verify_area+0xcf/0x6c0 [ 176.567421][ T7729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.567439][ T7729] vfs_read+0x1e1/0xcf0 [ 176.567458][ T7729] ? __pfx___mutex_lock+0x10/0x10 [ 176.567480][ T7729] ? __pfx_vfs_read+0x10/0x10 [ 176.567503][ T7729] ? __fget_files+0x20e/0x3c0 [ 176.567527][ T7729] ksys_read+0x12a/0x250 [ 176.567542][ T7729] ? __pfx_ksys_read+0x10/0x10 [ 176.567565][ T7729] do_syscall_64+0xcd/0x4c0 [ 176.567587][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.567602][ T7729] RIP: 0033:0x7f0e6158d5bc [ 176.567615][ T7729] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 176.567628][ T7729] RSP: 002b:00007f0e62486030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.567643][ T7729] RAX: ffffffffffffffda RBX: 00007f0e617d5fa0 RCX: 00007f0e6158d5bc [ 176.567652][ T7729] RDX: 000000000000000f RSI: 00007f0e624860a0 RDI: 0000000000000005 [ 176.567660][ T7729] RBP: 00007f0e62486090 R08: 0000000000000000 R09: 0000000000000000 [ 176.567669][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.567678][ T7729] R13: 00007f0e617d6038 R14: 00007f0e617d5fa0 R15: 00007ffe70192408 [ 176.567701][ T7729] [ 176.944666][ T5848] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 11 proto 2 vid 0x04B8 pid 0x0202 [ 176.967691][ T7734] netlink: 56 bytes leftover after parsing attributes in process `syz.4.391'. [ 176.988704][ T5848] usb 1-1: USB disconnect, device number 4 [ 177.508258][ T5848] usblp0: removed [ 177.791641][ T7746] /dev/nullb0: Can't open blockdev [ 178.313424][ T30] audit: type=1400 audit(1757506225.793:319): avc: denied { name_connect } for pid=7759 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 178.481551][ T2147] usbhid 2-1:0.0: can't add hid device: -71 [ 178.496698][ T2147] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 178.583620][ T30] audit: type=1400 audit(1757506226.093:320): avc: denied { read } for pid=7759 comm="syz.3.398" lport=57592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.628488][ T2147] usb 2-1: USB disconnect, device number 7 [ 179.141928][ T5969] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.311984][ T5969] usb 2-1: Using ep0 maxpacket: 16 [ 179.338277][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.390407][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.424546][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 179.476723][ T7788] syz_tun: entered allmulticast mode [ 179.488233][ T30] audit: type=1400 audit(1757506227.003:321): avc: denied { getopt } for pid=7787 comm="syz.3.403" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.512162][ T5969] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 179.521181][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.543767][ T7791] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 179.574512][ T5969] usb 2-1: config 0 descriptor?? [ 179.692013][ T5938] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 179.902600][ T30] audit: type=1400 audit(1757506227.413:322): avc: denied { create } for pid=7793 comm="syz.2.404" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 179.911868][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 179.948180][ T5938] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 179.965407][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.965601][ T5938] usb 1-1: config 0 has no interface number 0 [ 179.973259][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.982465][ T5938] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 180.001466][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.030377][ T5938] usb 1-1: Product: syz [ 180.045639][ T5938] usb 1-1: Manufacturer: syz [ 180.081948][ T5938] usb 1-1: SerialNumber: syz [ 180.091341][ T5969] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 180.103192][ T5938] usb 1-1: config 0 descriptor?? [ 180.114163][ T5969] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 180.122707][ T5938] net1080 1-1:0.147: probe with driver net1080 failed with error -22 [ 180.131188][ T5969] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 180.143094][ T5969] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 180.158546][ T5969] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 180.173851][ T5969] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 180.245446][ T5969] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 180.254730][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.259918][ T5969] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 180.280456][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.331572][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.343088][ T43] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 180.365183][ T5938] usb 1-1: USB disconnect, device number 5 [ 180.371536][ T5969] usb 2-1: USB disconnect, device number 8 [ 180.383765][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.406411][ T43] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 180.469246][ T43] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 180.510948][ T43] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 180.627146][ T30] audit: type=1400 audit(1757506228.133:323): avc: denied { unlink } for pid=5845 comm="syz-executor" name="file0" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 180.966244][ T30] audit: type=1400 audit(1757506228.433:324): avc: denied { create } for pid=7805 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.349825][ T30] audit: type=1400 audit(1757506228.443:325): avc: denied { bind } for pid=7805 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.369678][ T5958] lo speed is unknown, defaulting to 1000 [ 181.376639][ T3572] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.398272][ T5958] syz2: Port: 1 Link DOWN [ 181.398334][ T3572] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.444779][ T30] audit: type=1400 audit(1757506228.453:326): avc: denied { write } for pid=7805 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.468035][ T5859] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 181.496284][ T30] audit: type=1400 audit(1757506228.463:327): avc: denied { create } for pid=7805 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 181.535856][ T30] audit: type=1400 audit(1757506228.553:328): avc: denied { setopt } for pid=7805 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.585897][ T3572] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.620287][ T6199] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.331249][ T2147] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 183.452926][ T7843] netlink: 56 bytes leftover after parsing attributes in process `syz.4.412'. [ 183.521187][ T7846] FAULT_INJECTION: forcing a failure. [ 183.521187][ T7846] name failslab, interval 1, probability 0, space 0, times 0 [ 183.695184][ T7846] CPU: 1 UID: 0 PID: 7846 Comm: syz.0.415 Not tainted syzkaller #0 PREEMPT(full) [ 183.695209][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.695219][ T7846] Call Trace: [ 183.695225][ T7846] [ 183.695232][ T7846] dump_stack_lvl+0x16c/0x1f0 [ 183.695263][ T7846] should_fail_ex+0x512/0x640 [ 183.695284][ T7846] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 183.695305][ T7846] should_failslab+0xc2/0x120 [ 183.695324][ T7846] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 183.695341][ T7846] ? node_placement+0x2eb/0x380 [ 183.695361][ T7846] ? add+0x128/0x15c0 [ 183.695384][ T7846] add+0x128/0x15c0 [ 183.695407][ T7846] ? __pfx_add+0x10/0x10 [ 183.695428][ T7846] ? __pfx___nla_validate_parse+0x10/0x10 [ 183.695459][ T7846] wg_allowedips_insert_v4+0xdd/0x130 [ 183.695482][ T7846] ? __pfx_wg_allowedips_insert_v4+0x10/0x10 [ 183.695505][ T7846] ? __nla_parse+0x40/0x60 [ 183.695534][ T7846] set_peer+0x1249/0x1460 [ 183.695562][ T7846] ? __pfx_set_peer+0x10/0x10 [ 183.695597][ T7846] ? __nla_parse+0x40/0x60 [ 183.695626][ T7846] wg_set_device+0xa72/0x1360 [ 183.695650][ T7846] ? __pfx___nla_validate_parse+0x10/0x10 [ 183.695676][ T7846] ? __pfx_wg_set_device+0x10/0x10 [ 183.695707][ T7846] ? __nla_parse+0x40/0x60 [ 183.695735][ T7846] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 183.695763][ T7846] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 183.695794][ T7846] genl_family_rcv_msg_doit+0x206/0x2f0 [ 183.695821][ T7846] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.695856][ T7846] ? bpf_lsm_capable+0x9/0x10 [ 183.695878][ T7846] ? security_capable+0x7e/0x260 [ 183.695900][ T7846] ? ns_capable+0xd7/0x110 [ 183.695923][ T7846] genl_rcv_msg+0x55c/0x800 [ 183.695950][ T7846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.695976][ T7846] ? __pfx_wg_set_device+0x10/0x10 [ 183.696009][ T7846] netlink_rcv_skb+0x155/0x420 [ 183.696031][ T7846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.696057][ T7846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.696099][ T7846] genl_rcv+0x28/0x40 [ 183.696121][ T7846] netlink_unicast+0x5aa/0x870 [ 183.696151][ T7846] ? __pfx_netlink_unicast+0x10/0x10 [ 183.696173][ T7846] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 183.696203][ T7846] netlink_sendmsg+0x8d1/0xdd0 [ 183.696230][ T7846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.696270][ T7846] ____sys_sendmsg+0xa98/0xc70 [ 183.696296][ T7846] ? copy_msghdr_from_user+0x10a/0x160 [ 183.696317][ T7846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.696355][ T7846] ___sys_sendmsg+0x134/0x1d0 [ 183.696377][ T7846] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.696432][ T7846] __sys_sendmsg+0x16d/0x220 [ 183.696454][ T7846] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.696493][ T7846] do_syscall_64+0xcd/0x4c0 [ 183.696517][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.696534][ T7846] RIP: 0033:0x7f9644b8eba9 [ 183.696548][ T7846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.696563][ T7846] RSP: 002b:00007f9645936038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.696579][ T7846] RAX: ffffffffffffffda RBX: 00007f9644dd5fa0 RCX: 00007f9644b8eba9 [ 183.696590][ T7846] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 183.696599][ T7846] RBP: 00007f9645936090 R08: 0000000000000000 R09: 0000000000000000 [ 183.696609][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.696619][ T7846] R13: 00007f9644dd6038 R14: 00007f9644dd5fa0 R15: 00007ffdbd32edd8 [ 183.696643][ T7846] [ 184.578840][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 184.607910][ T2147] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 184.617105][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.959804][ T7837] Set syz1 is full, maxelem 65536 reached [ 185.086046][ T2147] usb 2-1: config 0 descriptor?? [ 185.106605][ T2147] usb 2-1: can't set config #0, error -71 [ 185.159809][ T2147] usb 2-1: USB disconnect, device number 9 [ 185.203016][ T5859] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 185.452031][ T5958] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.133808][ T30] audit: type=1400 audit(1757506233.183:329): avc: denied { create } for pid=7870 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.162030][ T30] audit: type=1400 audit(1757506233.183:330): avc: denied { bind } for pid=7870 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.181437][ T30] audit: type=1400 audit(1757506233.183:331): avc: denied { connect } for pid=7870 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.223550][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 186.257777][ T5958] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 186.327864][ T7881] FAULT_INJECTION: forcing a failure. [ 186.327864][ T7881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.341084][ T7881] CPU: 0 UID: 0 PID: 7881 Comm: syz.3.420 Not tainted syzkaller #0 PREEMPT(full) [ 186.341106][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.341113][ T7881] Call Trace: [ 186.341116][ T7881] [ 186.341120][ T7881] dump_stack_lvl+0x16c/0x1f0 [ 186.341140][ T7881] should_fail_ex+0x512/0x640 [ 186.341166][ T7881] strncpy_from_user+0x3b/0x2e0 [ 186.341185][ T7881] getname_flags.part.0+0x8f/0x550 [ 186.341203][ T7881] getname_flags+0x93/0xf0 [ 186.341214][ T7881] do_sys_openat2+0xb8/0x1d0 [ 186.341228][ T7881] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.341243][ T7881] ? __fget_files+0x20e/0x3c0 [ 186.341259][ T7881] __x64_sys_openat+0x174/0x210 [ 186.341273][ T7881] ? __pfx___x64_sys_openat+0x10/0x10 [ 186.341286][ T7881] ? ksys_write+0x1ac/0x250 [ 186.341301][ T7881] do_syscall_64+0xcd/0x4c0 [ 186.341315][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.341326][ T7881] RIP: 0033:0x7fc67578eba9 [ 186.341334][ T7881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.341344][ T7881] RSP: 002b:00007fc67654c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.341353][ T7881] RAX: ffffffffffffffda RBX: 00007fc6759d6090 RCX: 00007fc67578eba9 [ 186.341360][ T7881] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 186.341366][ T7881] RBP: 00007fc67654c090 R08: 0000000000000000 R09: 0000000000000000 [ 186.341371][ T7881] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000001 [ 186.341377][ T7881] R13: 00007fc6759d6128 R14: 00007fc6759d6090 R15: 00007ffc5ccfc8a8 [ 186.341390][ T7881] [ 186.732171][ T5958] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.780337][ T5958] usb 1-1: config 0 has no interface number 0 [ 186.887412][ T5958] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 186.924403][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.954186][ T5958] usb 1-1: Product: syz [ 186.962161][ T5958] usb 1-1: Manufacturer: syz [ 187.006942][ T5969] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 187.064768][ T5958] usb 1-1: SerialNumber: syz [ 187.281609][ T5958] usb 1-1: config 0 descriptor?? [ 187.450716][ T5969] usb 5-1: Using ep0 maxpacket: 16 [ 187.648956][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.703345][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.742428][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.801505][ T5969] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 187.854339][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.918069][ T30] audit: type=1400 audit(1757506235.433:332): avc: denied { ioctl } for pid=7860 comm="syz.0.416" path="socket:[13037]" dev="sockfs" ino=13037 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 187.953974][ T5969] usb 5-1: config 0 descriptor?? [ 187.962585][ T2147] IPVS: starting estimator thread 0... [ 188.152002][ T7898] IPVS: using max 38 ests per chain, 91200 per kthread [ 188.394849][ T5969] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 188.480619][ T5969] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 188.528933][ T5969] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 188.557368][ T5969] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 188.587695][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.600472][ T5969] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 188.627307][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.638775][ T5969] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 188.642987][ T2147] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 188.729975][ T5969] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 188.787484][ T5969] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 188.883238][ T43] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 188.916351][ T5969] usb 5-1: USB disconnect, device number 10 [ 188.986446][ T2147] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 189.012375][ T43] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 189.151253][ T2147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.162694][ T2147] usb 2-1: Product: syz [ 189.166892][ T2147] usb 2-1: Manufacturer: syz [ 189.172194][ T2147] usb 2-1: SerialNumber: syz [ 189.181704][ T2147] usb 2-1: config 0 descriptor?? [ 189.216460][ T2147] gspca_main: sq930x-2.14.0 probing 2770:930c [ 189.239920][ T43] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 189.264483][ T5958] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 189.274238][ T43] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 189.288810][ T5958] usb 1-1: No valid video chain found. [ 189.340546][ T5958] usb 1-1: USB disconnect, device number 6 [ 189.480936][ T5859] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 190.247150][ T7925] sctp: [Deprecated]: syz.2.429 (pid 7925) Use of int in max_burst socket option deprecated. [ 190.247150][ T7925] Use struct sctp_assoc_value instead [ 190.284001][ T7926] netlink: 'syz.4.431': attribute type 1 has an invalid length. [ 190.358541][ T5848] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 190.368679][ T7926] netlink: 224 bytes leftover after parsing attributes in process `syz.4.431'. [ 190.606988][ T7926] netlink: 'syz.4.431': attribute type 39 has an invalid length. [ 190.799624][ T2147] gspca_sq930x: ucbus_write failed -110 [ 190.829519][ T7932] netlink: 'syz.4.431': attribute type 1 has an invalid length. [ 190.839521][ T7932] netlink: 224 bytes leftover after parsing attributes in process `syz.4.431'. [ 190.926496][ T30] audit: type=1400 audit(1757506238.313:333): avc: denied { read } for pid=7903 comm="syz.1.427" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.950391][ T30] audit: type=1400 audit(1757506238.313:334): avc: denied { open } for pid=7903 comm="syz.1.427" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.974103][ T30] audit: type=1400 audit(1757506238.453:335): avc: denied { ioctl } for pid=7903 comm="syz.1.427" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 191.199494][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 191.209303][ T5848] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 191.218373][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.231483][ T5848] usb 1-1: config 0 descriptor?? [ 191.375337][ T2147] gspca_sq930x: Sensor ov9630 not yet treated [ 191.383160][ T2147] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 193.256901][ T7919] Set syz1 is full, maxelem 65536 reached [ 193.324448][ T5969] usb 1-1: USB disconnect, device number 7 [ 193.775235][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.793909][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.598069][ T5958] usb 2-1: USB disconnect, device number 10 [ 195.121883][ T5848] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 195.271868][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 195.290183][ T5848] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 195.300483][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.345289][ T5848] usb 5-1: config 0 has no interface number 0 [ 195.356795][ T5848] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 195.379949][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.410746][ T5848] usb 5-1: Product: syz [ 195.439021][ T5848] usb 5-1: Manufacturer: syz [ 195.451931][ T5848] usb 5-1: SerialNumber: syz [ 195.470615][ T5848] usb 5-1: config 0 descriptor?? [ 195.554847][ T5958] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 195.856589][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 195.864847][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.877092][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.888592][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.914753][ T5958] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 195.937285][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.954594][ T5958] usb 4-1: config 0 descriptor?? [ 196.511113][ T5958] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 196.557271][ T5958] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 196.570575][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.618539][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.665421][ T5958] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 196.717350][ T5958] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 196.753463][ T5958] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 196.790852][ T5958] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 196.921860][ T5958] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 196.960772][ T5958] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 197.046387][ T43] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 197.064786][ T5958] usb 4-1: USB disconnect, device number 14 [ 197.133969][ T43] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 197.178308][ T43] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 197.218323][ T43] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 197.335077][ T5859] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 197.611690][ T5848] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 197.654146][ T5848] usb 5-1: No valid video chain found. [ 197.666938][ T5848] usb 5-1: USB disconnect, device number 11 [ 197.863429][ T8004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.883188][ T30] audit: type=1400 audit(1757506245.383:336): avc: denied { write } for pid=8003 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.991144][ T30] audit: type=1400 audit(1757506245.433:337): avc: denied { bind } for pid=8003 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.028161][ T30] audit: type=1400 audit(1757506245.483:338): avc: denied { write } for pid=8003 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.681183][ T30] audit: type=1400 audit(1757506246.183:339): avc: denied { watch watch_reads } for pid=8013 comm="syz.0.450" path="/99" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 199.135058][ T8019] netlink: 60 bytes leftover after parsing attributes in process `syz.4.451'. [ 199.159785][ T8019] unsupported nlmsg_type 40 [ 199.822157][ T30] audit: type=1400 audit(1757506247.103:340): avc: denied { name_bind 0x1000000 } for pid=8024 comm="syz.3.455" path="socket:[14379]" dev="sockfs" ino=14379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 199.847507][ T5969] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 199.892526][ T30] audit: type=1400 audit(1757506247.103:341): avc: denied { read } for pid=8024 comm="syz.3.455" path="socket:[14382]" dev="sockfs" ino=14382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.041941][ T5969] usb 5-1: Using ep0 maxpacket: 32 [ 200.049772][ T5969] usb 5-1: config 0 has an invalid interface number: 39 but max is 0 [ 200.063859][ T5969] usb 5-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 200.080789][ T5969] usb 5-1: config 0 has no interface number 0 [ 200.098450][ T5969] usb 5-1: too many endpoints for config 0 interface 39 altsetting 221: 155, using maximum allowed: 30 [ 200.133837][ T8024] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 200.163694][ T5969] usb 5-1: config 0 interface 39 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 155 [ 200.178400][ T5969] usb 5-1: config 0 interface 39 has no altsetting 0 [ 200.188274][ T5969] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 200.198905][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 200.210287][ T5969] usb 5-1: Product: syz [ 200.232006][ T5958] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.319581][ T5969] usb 5-1: Manufacturer: syz [ 200.370345][ T5969] usb 5-1: config 0 descriptor?? [ 200.422569][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 200.451031][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.463640][ T8048] FAULT_INJECTION: forcing a failure. [ 200.463640][ T8048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.480903][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.501975][ T8048] CPU: 0 UID: 0 PID: 8048 Comm: syz.3.459 Not tainted syzkaller #0 PREEMPT(full) [ 200.501997][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 200.502005][ T8048] Call Trace: [ 200.502010][ T8048] [ 200.502016][ T8048] dump_stack_lvl+0x16c/0x1f0 [ 200.502044][ T8048] should_fail_ex+0x512/0x640 [ 200.502067][ T8048] _copy_to_user+0x32/0xd0 [ 200.502089][ T8048] simple_read_from_buffer+0xcb/0x170 [ 200.502106][ T8048] proc_fail_nth_read+0x197/0x240 [ 200.502123][ T8048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.502140][ T8048] ? rw_verify_area+0xcf/0x6c0 [ 200.502161][ T8048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.502177][ T8048] vfs_read+0x1e1/0xcf0 [ 200.502195][ T8048] ? __pfx___mutex_lock+0x10/0x10 [ 200.502213][ T8048] ? __pfx_vfs_read+0x10/0x10 [ 200.502232][ T8048] ? __fget_files+0x20e/0x3c0 [ 200.502254][ T8048] ksys_read+0x12a/0x250 [ 200.502267][ T8048] ? __pfx_ksys_read+0x10/0x10 [ 200.502281][ T8048] ? __pfx_handle_softirqs+0x10/0x10 [ 200.502303][ T8048] do_syscall_64+0xcd/0x4c0 [ 200.502324][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.502342][ T8048] RIP: 0033:0x7fc67578d5bc [ 200.502353][ T8048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 200.502367][ T8048] RSP: 002b:00007fc67656d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.502381][ T8048] RAX: ffffffffffffffda RBX: 00007fc6759d5fa0 RCX: 00007fc67578d5bc [ 200.502390][ T8048] RDX: 000000000000000f RSI: 00007fc67656d0a0 RDI: 0000000000000004 [ 200.502397][ T8048] RBP: 00007fc67656d090 R08: 0000000000000000 R09: 0000000000000000 [ 200.502405][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.502413][ T8048] R13: 00007fc6759d6038 R14: 00007fc6759d5fa0 R15: 00007ffc5ccfc8a8 [ 200.502432][ T8048] [ 200.502873][ T5848] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 200.521896][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 200.802364][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 200.809331][ T5848] usb 1-1: unable to get BOS descriptor or descriptor too short [ 200.823771][ T8052] tmpfs: Bad value for 'huge' [ 200.832681][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.841356][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.841424][ T5848] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.900726][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.914682][ T5958] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 200.938826][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.941253][ T5848] usb 1-1: Product: syz [ 200.976702][ T5848] usb 1-1: Manufacturer: syz [ 200.987710][ T5848] usb 1-1: SerialNumber: syz [ 201.035024][ T5969] usb 5-1: USB disconnect, device number 12 [ 201.074039][ T5958] usb 2-1: config 0 descriptor?? [ 201.245734][ T8046] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 201.255454][ T8046] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 201.264963][ T30] audit: type=1400 audit(1757506248.773:342): avc: denied { firmware_load } for pid=8045 comm="syz.0.458" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 201.499091][ T5958] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 201.509640][ T5958] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 201.676801][ T5958] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 201.706282][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.722291][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.738698][ T5958] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 201.827679][ T5958] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 201.865064][ T5958] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 201.961990][ T2147] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 202.060977][ T5958] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 202.086240][ T5958] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 202.121900][ T2147] usb 5-1: Using ep0 maxpacket: 8 [ 202.137223][ T2147] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 202.176725][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 202.188030][ T5958] usb 2-1: USB disconnect, device number 11 [ 202.196471][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 202.219028][ T2147] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.246613][ T2147] usb 5-1: config 0 has no interface number 0 [ 202.260376][ T2147] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 202.283527][ T2147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.291628][ T2147] usb 5-1: Product: syz [ 202.300488][ T2147] usb 5-1: Manufacturer: syz [ 202.308478][ T2147] usb 5-1: SerialNumber: syz [ 202.309458][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 202.339262][ T2147] usb 5-1: config 0 descriptor?? [ 202.374703][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 203.717709][ T5848] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 203.775189][ T5848] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 203.801180][ T5848] usb 1-1: USB disconnect, device number 8 [ 203.994479][ T30] audit: type=1400 audit(1757506251.493:343): avc: denied { append } for pid=8078 comm="syz.2.467" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 204.792483][ T5859] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3 [ 205.662197][ T2147] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 206.252079][ T5958] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 206.256828][ T2147] usb 5-1: No valid video chain found. [ 206.267727][ T2147] usb 5-1: USB disconnect, device number 13 [ 206.837198][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 206.849347][ T5958] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 206.864671][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.913289][ T5958] usb 2-1: config 0 descriptor?? [ 206.942132][ T2147] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 208.571880][ T2147] usb 5-1: Using ep0 maxpacket: 16 [ 208.661719][ T2147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.726180][ T43] usb 2-1: USB disconnect, device number 12 [ 208.774428][ T2147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.791705][ T2147] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 208.840456][ T2147] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 208.879149][ T30] audit: type=1400 audit(1757506256.373:344): avc: denied { name_bind } for pid=8114 comm="syz.1.476" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 208.910461][ T2147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.923393][ T2147] usb 5-1: config 0 descriptor?? [ 208.928744][ T2147] usb 5-1: can't set config #0, error -71 [ 209.055914][ T30] audit: type=1400 audit(1757506256.503:345): avc: denied { create } for pid=8122 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.076913][ T2147] usb 5-1: USB disconnect, device number 14 [ 209.083216][ T30] audit: type=1400 audit(1757506256.503:346): avc: denied { map } for pid=8122 comm="syz.3.479" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.328653][ T5859] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 210.731941][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 210.864767][ T8146] netlink: 56 bytes leftover after parsing attributes in process `syz.0.484'. [ 210.984874][ T43] usb 5-1: device descriptor read/64, error -71 [ 211.263044][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.442000][ T43] usb 5-1: device descriptor read/64, error -71 [ 211.992901][ T43] usb usb5-port1: attempt power cycle [ 212.262496][ T2147] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 212.371941][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.426710][ T43] usb 5-1: device descriptor read/8, error -71 [ 212.501914][ T5958] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 212.513671][ T2147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 212.542626][ T2147] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 212.581505][ T2147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.608399][ T2147] usb 3-1: config 0 descriptor?? [ 212.685527][ T8168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.698995][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 212.712162][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.723213][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 212.735234][ T8168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.747468][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.757545][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 212.770522][ T5958] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 212.779662][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.788191][ T43] usb 5-1: device descriptor read/8, error -71 [ 212.826743][ T5958] usb 2-1: config 0 descriptor?? [ 212.912508][ T43] usb usb5-port1: unable to enumerate USB device [ 213.263386][ T5958] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 213.272822][ T5958] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 213.289843][ T5958] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 213.343677][ T5958] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 213.359931][ T5958] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 213.409304][ T5958] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 213.493051][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.574274][ T5958] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 213.579422][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.582500][ T5958] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 214.044794][ T8164] netlink: 220 bytes leftover after parsing attributes in process `syz.1.488'. [ 214.363775][ T8173] Set syz1 is full, maxelem 65536 reached [ 214.420766][ T5938] usb 3-1: USB disconnect, device number 14 [ 214.484501][ T5969] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 214.497974][ T5958] usb 2-1: USB disconnect, device number 13 [ 214.518128][ T5969] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.343500][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 215.365876][ T5969] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.571236][ T5969] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.691045][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 216.337730][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 216.579319][ T5859] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 216.639289][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.023449][ T24] usb 1-1: config 0 descriptor?? [ 217.048083][ T24] usb 1-1: can't set config #0, error -71 [ 217.108288][ T24] usb 1-1: USB disconnect, device number 9 [ 217.925140][ T8212] netlink: 56 bytes leftover after parsing attributes in process `syz.3.500'. [ 222.405931][ T5859] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 223.181475][ T30] audit: type=1400 audit(1757506270.693:347): avc: denied { getopt } for pid=8252 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 223.345066][ T8255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.360064][ T8255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.415402][ T8255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.423029][ T8255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.601910][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 227.079713][ T8293] netlink: 56 bytes leftover after parsing attributes in process `syz.2.520'. [ 227.330277][ T5859] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 229.387289][ T5958] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 229.396004][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 229.551863][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 229.557027][ T5958] usb 1-1: Using ep0 maxpacket: 16 [ 229.586937][ T5958] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 229.611127][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.622304][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.641027][ T5958] usb 1-1: Product: syz [ 229.672230][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.716165][ T5958] usb 1-1: Manufacturer: syz [ 229.741594][ T5958] usb 1-1: SerialNumber: syz [ 229.748928][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 229.950919][ T5958] r8152-cfgselector 1-1: Unknown version 0x0000 [ 230.129625][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 230.249987][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.505883][ T24] usb 5-1: config 0 descriptor?? [ 230.821902][ T5897] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 231.063355][ T24] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 231.136668][ T24] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 231.167054][ T24] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 231.225542][ T24] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 231.236566][ T8313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.251853][ T24] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 231.272137][ T8313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.305570][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 231.371042][ T8313] netlink: 220 bytes leftover after parsing attributes in process `syz.4.524'. [ 231.390655][ T24] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 231.595061][ T30] audit: type=1400 audit(1757506279.103:348): avc: denied { name_bind } for pid=8337 comm="syz.0.531" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 231.752113][ T24] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 231.856000][ T8345] lo speed is unknown, defaulting to 1000 [ 231.995093][ T30] audit: type=1400 audit(1757506279.333:349): avc: denied { watch watch_reads } for pid=8337 comm="syz.0.531" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 232.179369][ T24] usb 5-1: USB disconnect, device number 19 [ 232.185528][ T5938] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 232.345737][ T5938] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 232.443623][ T8350] netlink: 56 bytes leftover after parsing attributes in process `syz.4.533'. [ 232.479305][ T5938] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 232.525369][ T5938] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 233.148373][ T8362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.306366][ T30] audit: type=1400 audit(1757506280.823:350): avc: denied { read write } for pid=8363 comm="syz.2.537" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 233.333903][ T30] audit: type=1400 audit(1757506280.823:351): avc: denied { open } for pid=8363 comm="syz.2.537" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 237.490120][ T30] audit: type=1400 audit(1757506285.003:352): avc: denied { write } for pid=8387 comm="syz.3.544" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.643067][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.544'. [ 237.652855][ T30] audit: type=1400 audit(1757506285.173:353): avc: denied { read } for pid=8387 comm="syz.3.544" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.241501][ T8408] netlink: 56 bytes leftover after parsing attributes in process `syz.1.548'. [ 238.751103][ T30] audit: type=1400 audit(1757506286.233:354): avc: denied { write } for pid=8416 comm="syz.2.546" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 238.964125][ T5897] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 239.161951][ T5897] usb 3-1: device descriptor read/64, error -71 [ 239.432369][ T5897] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 239.632008][ T5897] usb 3-1: device descriptor read/64, error -71 [ 240.126697][ T5897] usb usb3-port1: attempt power cycle [ 240.870309][ T5897] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 242.441701][ T5897] usb 3-1: device descriptor read/8, error -71 [ 242.946551][ T30] audit: type=1400 audit(1757506290.463:355): avc: denied { write } for pid=8449 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 243.111961][ T30] audit: type=1400 audit(1757506290.563:356): avc: denied { connect } for pid=8447 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 243.121852][ T5897] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 243.401848][ T5897] usb 3-1: device not accepting address 18, error -71 [ 243.421979][ T5897] usb usb3-port1: unable to enumerate USB device [ 243.593585][ T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 243.777185][ T24] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 243.786680][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.797779][ T24] usb 1-1: Product: syz [ 243.802223][ T24] usb 1-1: Manufacturer: syz [ 243.810168][ T24] usb 1-1: SerialNumber: syz [ 243.851698][ T5897] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 243.853769][ T24] usb 1-1: config 0 descriptor?? [ 243.870856][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 243.941966][ T5958] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 244.079417][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.141903][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 244.143991][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 244.156306][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.227023][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.236642][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.244994][ T5897] usb 3-1: Product: syz [ 244.249401][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.270552][ T5897] usb 3-1: Manufacturer: syz [ 244.275335][ T5897] usb 3-1: SerialNumber: syz [ 244.451944][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.551832][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 244.581912][ T5958] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 244.595260][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.605543][ T5958] usb 2-1: config 0 descriptor?? [ 245.038327][ T5958] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 245.063838][ T5958] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 245.084959][ T5958] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 245.116112][ T5958] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 245.147064][ T5958] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 245.171615][ T5958] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 245.179560][ T8506] v: renamed from ipvlan1 [ 245.231751][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.240695][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.273980][ T5958] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 245.295432][ T24] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 245.301632][ T5958] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 245.318475][ T8475] netlink: 244 bytes leftover after parsing attributes in process `syz.1.560'. [ 245.329503][ T5938] usb 3-1: USB disconnect, device number 19 [ 245.465974][ T43] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 245.498355][ T5958] usb 2-1: USB disconnect, device number 14 [ 245.511865][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 245.531155][ T24] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 245.539666][ T43] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 245.626394][ T43] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 245.642949][ T24] usb 1-1: USB disconnect, device number 11 [ 245.660934][ T43] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 245.837152][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 245.879821][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.571'. [ 246.088324][ T8518] geneve2: entered promiscuous mode [ 246.151970][ T8518] geneve2: entered allmulticast mode [ 246.714081][ T8529] FAULT_INJECTION: forcing a failure. [ 246.714081][ T8529] name failslab, interval 1, probability 0, space 0, times 0 [ 246.726698][ T8529] CPU: 0 UID: 0 PID: 8529 Comm: syz.2.575 Not tainted syzkaller #0 PREEMPT(full) [ 246.726713][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 246.726719][ T8529] Call Trace: [ 246.726723][ T8529] [ 246.726727][ T8529] dump_stack_lvl+0x16c/0x1f0 [ 246.726745][ T8529] should_fail_ex+0x512/0x640 [ 246.726761][ T8529] should_failslab+0xc2/0x120 [ 246.726773][ T8529] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 246.726784][ T8529] ? find_held_lock+0x2b/0x80 [ 246.726797][ T8529] ? dst_alloc+0x99/0x1a0 [ 246.726810][ T8529] dst_alloc+0x99/0x1a0 [ 246.726822][ T8529] rt_dst_alloc+0x35/0x3a0 [ 246.726837][ T8529] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 246.726853][ T8529] ip_route_output_key_hash+0x137/0x2e0 [ 246.726864][ T8529] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 246.726888][ T8529] ? find_held_lock+0x2b/0x80 [ 246.726906][ T8529] ip_route_output_flow+0x27/0x150 [ 246.726918][ T8529] raw_sendmsg+0xd5b/0x37e0 [ 246.726935][ T8529] ? __pfx_raw_sendmsg+0x10/0x10 [ 246.726946][ T8529] ? avc_has_perm_noaudit+0x149/0x3b0 [ 246.726959][ T8529] ? avc_has_perm+0x144/0x1f0 [ 246.726976][ T8529] ? sock_has_perm+0x259/0x2f0 [ 246.726994][ T8529] ? __import_iovec+0x1dd/0x650 [ 246.727010][ T8529] ? __pfx_raw_sendmsg+0x10/0x10 [ 246.727021][ T8529] inet_sendmsg+0x11c/0x140 [ 246.727032][ T8529] ____sys_sendmsg+0x973/0xc70 [ 246.727048][ T8529] ? copy_msghdr_from_user+0x10a/0x160 [ 246.727061][ T8529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.727078][ T8529] ? __pfx__kstrtoull+0x10/0x10 [ 246.727092][ T8529] ___sys_sendmsg+0x134/0x1d0 [ 246.727105][ T8529] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.727124][ T8529] ? find_held_lock+0x2b/0x80 [ 246.727144][ T8529] __sys_sendmmsg+0x200/0x420 [ 246.727158][ T8529] ? __pfx___sys_sendmmsg+0x10/0x10 [ 246.727180][ T8529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.727199][ T8529] ? fput+0x9b/0xd0 [ 246.727213][ T8529] ? ksys_write+0x1ac/0x250 [ 246.727223][ T8529] ? __pfx_ksys_write+0x10/0x10 [ 246.727236][ T8529] __x64_sys_sendmmsg+0x9c/0x100 [ 246.727248][ T8529] ? lockdep_hardirqs_on+0x7c/0x110 [ 246.727261][ T8529] do_syscall_64+0xcd/0x4c0 [ 246.727275][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.727285][ T8529] RIP: 0033:0x7f0e6158eba9 [ 246.727294][ T8529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.727304][ T8529] RSP: 002b:00007f0e62486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 246.727314][ T8529] RAX: ffffffffffffffda RBX: 00007f0e617d5fa0 RCX: 00007f0e6158eba9 [ 246.727320][ T8529] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 246.727326][ T8529] RBP: 00007f0e62486090 R08: 0000000000000000 R09: 0000000000000000 [ 246.727332][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.727337][ T8529] R13: 00007f0e617d6038 R14: 00007f0e617d5fa0 R15: 00007ffe70192408 [ 246.727350][ T8529] [ 247.041419][ T8527] FAULT_INJECTION: forcing a failure. [ 247.041419][ T8527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.321917][ T8527] CPU: 0 UID: 0 PID: 8527 Comm: syz.1.573 Not tainted syzkaller #0 PREEMPT(full) [ 247.321940][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.321949][ T8527] Call Trace: [ 247.321954][ T8527] [ 247.321960][ T8527] dump_stack_lvl+0x16c/0x1f0 [ 247.321985][ T8527] should_fail_ex+0x512/0x640 [ 247.322007][ T8527] _copy_from_iter+0x29f/0x1720 [ 247.322033][ T8527] ? __asan_memset+0x23/0x50 [ 247.322065][ T8527] ? __pfx__copy_from_iter+0x10/0x10 [ 247.322088][ T8527] ? __alloc_skb+0x200/0x380 [ 247.322107][ T8527] ? __pfx___alloc_skb+0x10/0x10 [ 247.322124][ T8527] ? __pfx___mutex_lock+0x10/0x10 [ 247.322148][ T8527] skb_copy_datagram_from_iter+0x124/0x740 [ 247.322172][ T8527] tun_get_user+0x185c/0x3ce0 [ 247.322208][ T8527] ? __pfx_tun_get_user+0x10/0x10 [ 247.322231][ T8527] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 247.322259][ T8527] ? find_held_lock+0x2b/0x80 [ 247.322280][ T8527] ? tun_get+0x191/0x370 [ 247.322308][ T8527] tun_chr_write_iter+0xdc/0x210 [ 247.322334][ T8527] vfs_write+0x7d3/0x11d0 [ 247.322352][ T8527] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 247.322380][ T8527] ? __pfx_vfs_write+0x10/0x10 [ 247.322394][ T8527] ? find_held_lock+0x2b/0x80 [ 247.322429][ T8527] ksys_write+0x12a/0x250 [ 247.322446][ T8527] ? __pfx_ksys_write+0x10/0x10 [ 247.322468][ T8527] do_syscall_64+0xcd/0x4c0 [ 247.322490][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.322506][ T8527] RIP: 0033:0x7f413878eba9 [ 247.322520][ T8527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.322536][ T8527] RSP: 002b:00007f4139588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.322551][ T8527] RAX: ffffffffffffffda RBX: 00007f41389d5fa0 RCX: 00007f413878eba9 [ 247.322561][ T8527] RDX: 0000000000000072 RSI: 0000200000000e00 RDI: 0000000000000003 [ 247.322571][ T8527] RBP: 00007f4139588090 R08: 0000000000000000 R09: 0000000000000000 [ 247.322580][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.322590][ T8527] R13: 00007f41389d6038 R14: 00007f41389d5fa0 R15: 00007ffde6a91a98 [ 247.322611][ T8527] [ 247.584440][ T8536] FAULT_INJECTION: forcing a failure. [ 247.584440][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 247.600686][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.0.572 Not tainted syzkaller #0 PREEMPT(full) [ 247.600710][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.600720][ T8536] Call Trace: [ 247.600726][ T8536] [ 247.600732][ T8536] dump_stack_lvl+0x16c/0x1f0 [ 247.600758][ T8536] should_fail_ex+0x512/0x640 [ 247.600779][ T8536] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 247.600819][ T8536] should_failslab+0xc2/0x120 [ 247.600839][ T8536] __kmalloc_cache_noprof+0x6a/0x3e0 [ 247.600868][ T8536] ? afs_find_cell+0x1d3/0x380 [ 247.600885][ T8536] ? afs_lookup_cell+0x61d/0x1680 [ 247.600905][ T8536] afs_lookup_cell+0x61d/0x1680 [ 247.600928][ T8536] ? __pfx_afs_lookup_cell+0x10/0x10 [ 247.600948][ T8536] ? find_held_lock+0x2b/0x80 [ 247.600970][ T8536] ? net_generic+0xea/0x2a0 [ 247.600993][ T8536] afs_dynroot_lookup+0x2e2/0xa90 [ 247.601010][ T8536] ? __pfx_d_alloc_parallel+0xe/0x10 [ 247.601036][ T8536] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 247.601055][ T8536] ? __d_lookup+0x266/0x4a0 [ 247.601085][ T8536] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 247.601101][ T8536] lookup_open.isra.0+0x4d7/0x1580 [ 247.601124][ T8536] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 247.601167][ T8536] ? lookup_fast+0x156/0x610 [ 247.601187][ T8536] path_openat+0x893/0x2cb0 [ 247.601215][ T8536] ? __pfx_path_openat+0x10/0x10 [ 247.601240][ T8536] do_filp_open+0x20b/0x470 [ 247.601260][ T8536] ? __pfx_do_filp_open+0x10/0x10 [ 247.601297][ T8536] ? alloc_fd+0x471/0x7d0 [ 247.601323][ T8536] do_sys_openat2+0x11b/0x1d0 [ 247.601346][ T8536] ? __pfx_do_sys_openat2+0x10/0x10 [ 247.601372][ T8536] ? __fget_files+0x20e/0x3c0 [ 247.601396][ T8536] __x64_sys_openat+0x174/0x210 [ 247.601419][ T8536] ? __pfx___x64_sys_openat+0x10/0x10 [ 247.601454][ T8536] do_syscall_64+0xcd/0x4c0 [ 247.601478][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.601496][ T8536] RIP: 0033:0x7f9644b8eba9 [ 247.601510][ T8536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.601526][ T8536] RSP: 002b:00007f9642df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.601544][ T8536] RAX: ffffffffffffffda RBX: 00007f9644dd6090 RCX: 00007f9644b8eba9 [ 247.601554][ T8536] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 247.601565][ T8536] RBP: 00007f9642df6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.601575][ T8536] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000001 [ 247.601584][ T8536] R13: 00007f9644dd6128 R14: 00007f9644dd6090 R15: 00007ffdbd32edd8 [ 247.601608][ T8536] [ 247.652582][ T5897] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 248.218552][ T8553] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 248.248342][ T30] audit: type=1400 audit(1757506295.763:357): avc: denied { read } for pid=8546 comm="syz.2.578" path="socket:[16110]" dev="sockfs" ino=16110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 248.718419][ T30] audit: type=1400 audit(1757506295.843:358): avc: denied { write } for pid=8545 comm="syz.0.579" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 248.752613][ T30] audit: type=1800 audit(1757506295.873:359): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.579" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 248.774356][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 248.842826][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.880644][ T5897] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 248.927753][ T30] audit: type=1400 audit(1757506296.443:360): avc: denied { map } for pid=8561 comm="syz.1.581" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 249.051839][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.142318][ T5897] usb 5-1: Product: syz [ 249.146585][ T5897] usb 5-1: Manufacturer: syz [ 249.151153][ T5897] usb 5-1: SerialNumber: syz [ 249.188120][ T5897] usb 5-1: config 0 descriptor?? [ 249.214126][ T5897] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 251.620360][ T8533] IPv6: NLM_F_REPLACE set, but no existing node found! [ 252.349924][ T5897] snd_usb_toneport 5-1:0.0: set_interface failed [ 252.360106][ T5897] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 252.464580][ T5897] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 252.494935][ T5897] usb 5-1: USB disconnect, device number 20 [ 253.130515][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 253.453743][ T8617] netlink: 56 bytes leftover after parsing attributes in process `syz.4.588'. [ 254.670823][ T8634] Set syz1 is full, maxelem 65536 reached [ 254.801929][ T5897] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 255.802569][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.808997][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.851750][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 359.858714][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8524/1:b..l [ 359.866857][ C0] rcu: (detected by 0, t=10502 jiffies, g=22057, q=761 ncpus=2) [ 359.874540][ C0] task:syz.4.570 state:R running task stack:23688 pid:8524 tgid:8524 ppid:5850 task_flags:0x40064c flags:0x00004002 [ 359.888279][ C0] Call Trace: [ 359.891534][ C0] [ 359.894444][ C0] __schedule+0x1190/0x5de0 [ 359.898932][ C0] ? __pfx___schedule+0x10/0x10 [ 359.903763][ C0] preempt_schedule_irq+0x51/0x90 [ 359.908761][ C0] irqentry_exit+0x36/0x90 [ 359.913145][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.919095][ C0] RIP: 0010:__reset_page_owner+0x5f/0x1a0 [ 359.924782][ C0] Code: 89 c3 e8 84 7b 8f ff 4c 8b 3d 0d 10 4f 0c 48 b8 00 00 00 00 00 fc ff df 49 01 df 49 8d 7f 08 48 89 fa 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 2a 01 00 00 48 89 df 45 8b 7f 08 0f b7 dd [ 359.944361][ C0] RSP: 0018:ffffc9001d067268 EFLAGS: 00000a06 [ 359.950395][ C0] RAX: 0000000000000000 RBX: ffff88801e02ce20 RCX: ffffffff822d979b [ 359.958342][ C0] RDX: 1ffff11003c059c6 RSI: ffffffff822c134c RDI: ffff88801e02ce30 [ 359.966285][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 359.974226][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0001223e80 [ 359.982167][ C0] R13: 0000003b557383cd R14: 0000000000000000 R15: ffff88801e02ce28 [ 359.990121][ C0] ? lookup_page_ext+0x13b/0x1d0 [ 359.995028][ C0] ? __reset_page_owner+0x3c/0x1a0 [ 360.000112][ C0] ? __reset_page_owner+0x3c/0x1a0 [ 360.005194][ C0] free_unref_folios+0xa61/0x16b0 [ 360.010191][ C0] ? rcu_is_watching+0x12/0xc0 [ 360.014937][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 360.020725][ C0] folios_put_refs+0x56f/0x740 [ 360.025463][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 360.030724][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 360.037026][ C0] shmem_undo_range+0x58f/0x1150 [ 360.041936][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 360.047285][ C0] ? find_held_lock+0x2b/0x80 [ 360.051942][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 360.057121][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 360.061865][ C0] ? stack_trace_save+0x8e/0xc0 [ 360.066694][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 360.071602][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 360.077028][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 360.083071][ C0] ? find_held_lock+0x2b/0x80 [ 360.087730][ C0] ? evict+0x3a2/0x920 [ 360.091777][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 360.097202][ C0] evict+0x3e3/0x920 [ 360.101070][ C0] ? __pfx_evict+0x10/0x10 [ 360.105461][ C0] ? iput+0x519/0x880 [ 360.109427][ C0] iput+0x521/0x880 [ 360.113207][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 360.118896][ C0] dentry_unlink_inode+0x29c/0x480 [ 360.123994][ C0] __dentry_kill+0x1d0/0x600 [ 360.128558][ C0] dput.part.0+0x4b1/0x9b0 [ 360.132947][ C0] dput+0x1f/0x30 [ 360.136556][ C0] __fput+0x51c/0xb70 [ 360.140512][ C0] task_work_run+0x150/0x240 [ 360.145076][ C0] ? __pfx_task_work_run+0x10/0x10 [ 360.150162][ C0] do_exit+0x86f/0x2bf0 [ 360.154291][ C0] ? rcu_is_watching+0x12/0xc0 [ 360.159026][ C0] ? irqentry_exit+0x3b/0x90 [ 360.163589][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 360.169191][ C0] ? __pfx_do_exit+0x10/0x10 [ 360.173758][ C0] do_group_exit+0xd3/0x2a0 [ 360.178235][ C0] get_signal+0x2673/0x26d0 [ 360.182712][ C0] ? force_sig_fault+0xc4/0x100 [ 360.187533][ C0] ? __pfx_get_signal+0x10/0x10 [ 360.192366][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 360.197882][ C0] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 360.203928][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 360.210078][ C0] irqentry_exit_to_user_mode+0x12a/0x270 [ 360.215784][ C0] asm_exc_page_fault+0x26/0x30 [ 360.220610][ C0] RIP: 0033:0x7f87a638eba9 [ 360.224995][ C0] RSP: 002b:00007f87a714efe8 EFLAGS: 00010246 [ 360.231028][ C0] RAX: 0000000000000000 RBX: 00007f87a65d6090 RCX: 00007f87a638eba9 [ 360.238970][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.247086][ C0] RBP: 00007f87a6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 360.255026][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.262977][ C0] R13: 00007f87a65d6128 R14: 00007f87a65d6090 R15: 00007ffcb793ac58 [ 360.270924][ C0] [ 360.273916][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10442 jiffies! g22057 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 360.286205][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=17181 [ 360.294058][ C0] rcu: rcu_preempt kthread starved for 10443 jiffies! g22057 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 360.305396][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 360.315340][ C0] rcu: RCU grace-period kthread stack dump: [ 360.321202][ C0] task:rcu_preempt state:I stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 360.333088][ C0] Call Trace: [ 360.336348][ C0] [ 360.339251][ C0] __schedule+0x1190/0x5de0 [ 360.343728][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 360.349078][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 360.353991][ C0] ? __pfx___schedule+0x10/0x10 [ 360.358826][ C0] ? find_held_lock+0x2b/0x80 [ 360.363472][ C0] ? schedule+0x2d7/0x3a0 [ 360.367784][ C0] schedule+0xe7/0x3a0 [ 360.371822][ C0] schedule_timeout+0x123/0x290 [ 360.376643][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 360.381982][ C0] ? __pfx_process_timeout+0x10/0x10 [ 360.387240][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 360.393027][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 360.398480][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 360.403239][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 360.408504][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.413684][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 360.418606][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 360.423425][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 360.429205][ C0] rcu_gp_kthread+0x270/0x380 [ 360.433852][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 360.439017][ C0] ? rcu_is_watching+0x12/0xc0 [ 360.443770][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.448939][ C0] ? __kthread_parkme+0x19e/0x250 [ 360.453941][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 360.459108][ C0] kthread+0x3c2/0x780 [ 360.463147][ C0] ? __pfx_kthread+0x10/0x10 [ 360.467708][ C0] ? rcu_is_watching+0x12/0xc0 [ 360.472440][ C0] ? __pfx_kthread+0x10/0x10 [ 360.476997][ C0] ret_from_fork+0x5d4/0x6f0 [ 360.481553][ C0] ? __pfx_kthread+0x10/0x10 [ 360.486111][ C0] ret_from_fork_asm+0x1a/0x30 [ 360.490852][ C0] [ 360.493843][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 360.500134][ C0] CPU: 0 UID: 0 PID: 1297 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 360.509120][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 360.519146][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 360.525551][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 be 00 f6 48 89 df e8 0e 12 01 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 0e f1 f5 65 8b 05 be ab 3f 08 85 c0 74 16 5b [ 360.545128][ C0] RSP: 0018:ffffc900047af978 EFLAGS: 00000246 [ 360.551162][ C0] RAX: 0000000000000016 RBX: ffffffff9b115ba0 RCX: 0000000000000002 [ 360.559101][ C0] RDX: 0000000000000000 RSI: ffffffff8de522e8 RDI: ffffffff8c162d80 [ 360.567042][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 360.574982][ C0] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: ffffffff9b115ca8 [ 360.582928][ C0] R13: 0000000000000003 R14: 0000000000000001 R15: 0000000000000003 [ 360.590884][ C0] FS: 0000000000000000(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 360.599810][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.606370][ C0] CR2: 000020000037f030 CR3: 000000005fdd7000 CR4: 00000000003526f0 [ 360.614319][ C0] Call Trace: [ 360.617573][ C0] [ 360.620493][ C0] uart_write+0x4c1/0xb30 [ 360.624809][ C0] handle_tx+0x204/0x630 [ 360.629023][ C0] dev_hard_start_xmit+0x94/0x740 [ 360.634020][ C0] __dev_queue_xmit+0xa46/0x4490 [ 360.638940][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 360.644719][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 360.650062][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 360.654990][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 360.659984][ C0] ? find_held_lock+0x2b/0x80 [ 360.664633][ C0] ? skb_dequeue+0x126/0x180 [ 360.669196][ C0] ? find_held_lock+0x2b/0x80 [ 360.673844][ C0] ? rcu_is_watching+0x12/0xc0 [ 360.678582][ C0] tx+0xcc/0x190 [ 360.682102][ C0] ? __pfx_tx+0x10/0x10 [ 360.686227][ C0] kthread+0x1e4/0x3e0 [ 360.690263][ C0] ? find_held_lock+0x2b/0x80 [ 360.694908][ C0] ? __pfx_kthread+0x10/0x10 [ 360.699480][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 360.705257][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.710427][ C0] ? __kthread_parkme+0x19e/0x250 [ 360.715438][ C0] ? __pfx_kthread+0x10/0x10 [ 360.719999][ C0] kthread+0x3c2/0x780 [ 360.724049][ C0] ? __pfx_kthread+0x10/0x10 [ 360.728614][ C0] ? rcu_is_watching+0x12/0xc0 [ 360.733361][ C0] ? __pfx_kthread+0x10/0x10 [ 360.737920][ C0] ret_from_fork+0x5d4/0x6f0 [ 360.742479][ C0] ? __pfx_kthread+0x10/0x10 [ 360.747038][ C0] ret_from_fork_asm+0x1a/0x30 [ 360.751786][ C0]