last executing test programs: 2m55.970218425s ago: executing program 1 (id=644): ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000040)='[,+//\x00', 0x0, &(0x7f0000000080)={@align=0x8001, {0x8, 0x8000, 0x1, 0x100}}, 0x66c3, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xddd, 0x1ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m55.429475468s ago: executing program 1 (id=649): r0 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (fail_nth: 1) 2m55.285980866s ago: executing program 1 (id=651): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) removexattr(0x0, 0x0) epoll_create(0xfffffbff) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r4, 0x37}, 0x8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r5, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(r6, 0xd, &(0x7f00000001c0)={0x9, 0x3}, &(0x7f0000000200)) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m54.764315072s ago: executing program 1 (id=652): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r1, 0x82000000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x1000, 0x2000007ff) 2m53.149115164s ago: executing program 1 (id=662): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0x6, 0xfdfd}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0xffffffffffffffff, 0xee00) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x62d6881f}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}}, 0x0) 2m52.974147972s ago: executing program 1 (id=665): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(r0, 0x8926, &(0x7f00000029c0)) socket$inet(0x2, 0x2, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x86, &(0x7f0000000200)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd, 0x11, 0x0, @local, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0025aef0ad02b7e6b000", {"35f3c07e0500a2ab3d58ac1500", "63081fe8fe001a08ed082ad7121d566f"}}}}}}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sync() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="1c031c00d3fc14008929bd48031c09a609ff", 0xfffffffffffffe1b, 0x40, &(0x7f0000000140)={0x11, 0x11, r2, 0x1, 0x7c, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$sysctl(r3, &(0x7f0000000100)='4\x00', 0x2) r4 = syz_usb_connect$uac1(0xe1f5ac4ebee40d00, 0xe6, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x582, 0x2f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x3, 0x1, 0x7, 0x30, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x24}, [@extension_unit={0x9, 0x24, 0x8, 0x4, 0xffff, 0xff, 'OP'}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xa8}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x3, 0x6, 0x800, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x2, 0x0, "12e1", '5'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x10, 0x8, 'U\r', "b1"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x824, 0x4, 0x2a}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xf, 0x2, 0x7, 0xb, "d2bf5a", "99cebf"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0x8, "5c9eae", 'F)'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xff, 0x6, 0x8, {0x7, 0x25, 0x1, 0x0, 0xff, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xce, 0x4, 0x6, 0xa, 0xe}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x2, 0x2, 0xf1, "1929", "6a9131"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x89, 0x9, "15"}]}, {{0x9, 0x5, 0x82, 0x9, 0x610, 0x0, 0x5, 0x5, {0x7, 0x25, 0x1, 0xc, 0xb}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x2, 0x1, 0x6, 0x40, 0x7}, 0x2b, &(0x7f0000000280)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x0, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x2, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1a, 0x81, 0x7, 0x3b, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0x2, 0x2}]}, 0x1, [{0x9c, &(0x7f00000002c0)=@string={0x9c, 0x3, "ad41b5964241cb95746a5e19accedafd364ae17fe5a2353674bb2dd1181218a02bf0c574a7c0af4a40825bb6a4858b76bbc5427f3ff91d2b523e274cf63038fae98f44c831b2c452a44fc8e21860a1cbcc0146f62d976377a1fbd399f5741cc5d308a28ae3da280c4ab445085f57c942d41b3e41eeb05dc83a41921cf8cad0c615d77168658f57dcd253d022f262c60ea7ad2753009779175e9f"}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000440)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1010140000001491c4f55773ef070000000000000053612f348b"], &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0x0, 0xb, 0x3f, "1af05fd734856609fe9c6f22c07b15487e03e2080c4d3f77aeb3e70058180fd1b2b30767ff280d8d234e6869ad30652541b2e75c3f8f18896a8aa64123f24a"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xa5}, &(0x7f0000000580)={0x20, 0x81, 0x2, "b8d4"}, &(0x7f00000005c0)={0x20, 0x82, 0x2, "65dd"}, &(0x7f0000000600)={0x20, 0x83, 0x2, "f3f9"}, &(0x7f0000000640)={0x20, 0x84, 0x1, "8c"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "31a359"}}) 2m37.350398503s ago: executing program 32 (id=665): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(r0, 0x8926, &(0x7f00000029c0)) socket$inet(0x2, 0x2, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x86, &(0x7f0000000200)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd, 0x11, 0x0, @local, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0025aef0ad02b7e6b000", {"35f3c07e0500a2ab3d58ac1500", "63081fe8fe001a08ed082ad7121d566f"}}}}}}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sync() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="1c031c00d3fc14008929bd48031c09a609ff", 0xfffffffffffffe1b, 0x40, &(0x7f0000000140)={0x11, 0x11, r2, 0x1, 0x7c, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$sysctl(r3, &(0x7f0000000100)='4\x00', 0x2) r4 = syz_usb_connect$uac1(0xe1f5ac4ebee40d00, 0xe6, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x582, 0x2f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x3, 0x1, 0x7, 0x30, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x24}, [@extension_unit={0x9, 0x24, 0x8, 0x4, 0xffff, 0xff, 'OP'}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xa8}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x3, 0x6, 0x800, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x2, 0x0, "12e1", '5'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x10, 0x8, 'U\r', "b1"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x824, 0x4, 0x2a}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xf, 0x2, 0x7, 0xb, "d2bf5a", "99cebf"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0x8, "5c9eae", 'F)'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xff, 0x6, 0x8, {0x7, 0x25, 0x1, 0x0, 0xff, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xce, 0x4, 0x6, 0xa, 0xe}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x2, 0x2, 0xf1, "1929", "6a9131"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x89, 0x9, "15"}]}, {{0x9, 0x5, 0x82, 0x9, 0x610, 0x0, 0x5, 0x5, {0x7, 0x25, 0x1, 0xc, 0xb}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x2, 0x1, 0x6, 0x40, 0x7}, 0x2b, &(0x7f0000000280)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x0, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x2, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1a, 0x81, 0x7, 0x3b, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0x2, 0x2}]}, 0x1, [{0x9c, &(0x7f00000002c0)=@string={0x9c, 0x3, "ad41b5964241cb95746a5e19accedafd364ae17fe5a2353674bb2dd1181218a02bf0c574a7c0af4a40825bb6a4858b76bbc5427f3ff91d2b523e274cf63038fae98f44c831b2c452a44fc8e21860a1cbcc0146f62d976377a1fbd399f5741cc5d308a28ae3da280c4ab445085f57c942d41b3e41eeb05dc83a41921cf8cad0c615d77168658f57dcd253d022f262c60ea7ad2753009779175e9f"}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000440)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1010140000001491c4f55773ef070000000000000053612f348b"], &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0x0, 0xb, 0x3f, "1af05fd734856609fe9c6f22c07b15487e03e2080c4d3f77aeb3e70058180fd1b2b30767ff280d8d234e6869ad30652541b2e75c3f8f18896a8aa64123f24a"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xa5}, &(0x7f0000000580)={0x20, 0x81, 0x2, "b8d4"}, &(0x7f00000005c0)={0x20, 0x82, 0x2, "65dd"}, &(0x7f0000000600)={0x20, 0x83, 0x2, "f3f9"}, &(0x7f0000000640)={0x20, 0x84, 0x1, "8c"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "31a359"}}) 10.522267957s ago: executing program 5 (id=1613): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x3) fallocate(r1, 0x0, 0x0, 0x200401) syz_open_dev$tty1(0xc, 0x4, 0x1) 10.406133615s ago: executing program 5 (id=1614): openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x4]}, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r4, &(0x7f0000001b40)={0x2020}, 0x205c) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setsig(r8, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 5.622217059s ago: executing program 4 (id=1635): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/mtdblock0\x00', 0x0, 0x1ff) read$alg(r0, &(0x7f0000000080)=""/19, 0xfdef) 5.416378241s ago: executing program 4 (id=1636): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000080), 0x1b, 0x10022, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00 \x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea42, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0xda40, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xb, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x6], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x7fff, 0x2ae, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x1, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x17a1, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 5.189983796s ago: executing program 5 (id=1639): setns(0xc9, 0x0) socketpair(0x9, 0x100000005, 0x0, &(0x7f0000000000)) (fail_nth: 1) 4.657636009s ago: executing program 5 (id=1642): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000140)=[{0x0, 0x3, {0x0, 0xf0, 0x2}, {0x2, 0xff, 0x2}, 0xfd, 0x1}, {0x0, 0x3, {0x1, 0x1, 0x2}, {0x2, 0x1, 0x1}, 0xfe}, {0x0, 0x2, {0x2, 0x0, 0x4}, {0x1, 0xff, 0x1}, 0x1, 0x2}, {0x3, 0x1, {0x0, 0xf0, 0x4}, {0x7fd0032dd0360d23, 0x1}, 0x2}], 0x80) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='raw', 0x3) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) socket$alg(0x26, 0x5, 0x0) 4.620937879s ago: executing program 3 (id=1643): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}}, 0x10) (fail_nth: 1) 4.557091644s ago: executing program 3 (id=1644): r0 = socket(0x9, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000000)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r1], 0x38}}, 0x10) 4.498299575s ago: executing program 5 (id=1645): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sec/tomoyo/profile/file0\x00', &(0x7f0000000140)='esdfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e) recvfrom$unix(r1, &(0x7f00000003c0)=""/86, 0x56, 0x2000, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x0, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r6, &(0x7f00000000c0)='./mnt\x00', r6, &(0x7f0000000000)='./mnt\x00', 0x137) syz_usb_connect$uac2(0x5, 0xa5, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000081e04003040000102030109029300030108100a080b0102010720090904000000010120000924010600031b001a06240b01016e0c2403060204290177977c7e09040100000102200009040101010102200010240107ff030200000002ff010000dd09050109ff0304037f082501800cf70a000904020000010120000904020101010220"], &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r5, 0x804, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2d}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x2400c045) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/profile/file0\x00', 0x1, 0x0) write(r7, &(0x7f0000000040)="3c5c433ecd45036a2762bb626c65640a", 0x10) 4.49814886s ago: executing program 3 (id=1646): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/mtdblock0\x00', 0x0, 0x1ff) read$alg(r0, &(0x7f0000000080)=""/19, 0xfdef) 4.479723123s ago: executing program 3 (id=1647): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0xa180}, {r1, 0x4447}], 0x2, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='\b'], 0x4f0280) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x7900, 0x8a}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r0, &(0x7f0000001380)=[{&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5000008, 0x8010, r4, 0xeabad000) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 4.461203078s ago: executing program 4 (id=1648): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000380)={0x1, 0x1000}, 0x4) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0x0}) migrate_pages(r2, 0x200, &(0x7f0000000200)=0x1, &(0x7f0000000340)=0x3) (async) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002955a4f40f30c19e04ffb0102030109022d00018000200209049409"], 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000004c0)={r6, 0x80000}) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000600)=0xe8) (rerun: 32) mount$9p_unix(&(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='./dev/mapper/control\x00', &(0x7f0000000440), 0x0, &(0x7f0000000640)={'trans=unix,', {[{@cache_none}, {@directio}, {@posixacl}, {@cache_mmap}, {@access_client}, {@access_uid={'access', 0x3d, r7}}, {@ignoreqv}, {@ignoreqv}, {@posixacl}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@appraise}, {@fsname={'fsname', 0x3d, '\''}}, {@uid_eq}]}}) (async, rerun: 32) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") (async, rerun: 32) ioctl(r0, 0xc138fd0c, &(0x7f0000000000)) (async) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f00000007c0)={r3, &(0x7f0000000480)='devtmpfs\x00', 0x40081, &(0x7f0000000700)={@_ha_fsid={[0xc, 0x6]}, {0x0, 0x91b2, 0x4, 0x6}}, 0x3, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x6}) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r8, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x80000000, 0x5, 0x6, 0x7, 0x80, "676f4b30942ace956649525405317cecaf7dce", 0x7}) 4.406511726s ago: executing program 2 (id=1649): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004400)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x7fffffff, 0x10) 4.366605687s ago: executing program 2 (id=1650): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 4.199971909s ago: executing program 4 (id=1651): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = syz_io_uring_complete(0x0, r0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000ffff25bd5000fddbdf2504000000b8c595609b2a4108be2e4063bd352177f8336cec7e1a33f3d6e57ef96db16ea70c5a97ec23e7", @ANYRES32=0x0, @ANYBLOB="210a040023000000240012800b00010062726964676500001400028008000200010200000800030012000000"], 0x44}, 0x1, 0x0, 0x0, 0x4015}, 0x4044) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa900"], 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 3.334334258s ago: executing program 2 (id=1652): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x80, 0x4, 0x100fff}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 3.010201048s ago: executing program 3 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/cpuinfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) read$sequencer(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64$ublk_ch(r1, &(0x7f0000000740), 0x1000, 0x7) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0x4, 0x200, {{0x18, 0x4, 0x3, 0x25, 0x60, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x13, 0xd6, [@loopback, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0x74, [@empty, @empty, @rand_addr=0x64010100, @local]}, @noop, @generic={0x0, 0x5, "fb3e0d"}, @end, @timestamp_addr={0x44, 0x1c, 0xe8, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010100, 0x7}, {@loopback, 0x2}]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000001c0)={@private1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x80, 0x7, 0xbc, 0xda6, {{0x13, 0x4, 0x1, 0x30, 0x4c, 0x67, 0x0, 0x6, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xa}, {[@lsrr={0x83, 0x2b, 0xfa, [@multicast2, @private=0xa010101, @broadcast, @private=0xa010100, @local, @local, @rand_addr=0x64010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, @empty]}, @generic={0x94, 0xa, "e4c9b82f95c2045f"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x7800, 0x8000, 0xffffffff, 0x5, {{0x25, 0x4, 0x2, 0x37, 0x94, 0x67, 0x0, 0xc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1, {[@lsrr={0x83, 0x1f, 0x4, [@multicast2, @local, @rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty]}, @timestamp={0x44, 0x14, 0x19, 0x0, 0x4, [0x6, 0x6, 0xf, 0x9]}, @timestamp={0x44, 0x1c, 0xe1, 0x0, 0x2, [0x59f, 0x8, 0x2, 0x0, 0x6, 0xde]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0xda, 0x0, 0xd, [0xb, 0x5, 0x5, 0x4, 0x6, 0xfffffffd, 0x0, 0x3, 0x8, 0x9]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000001840)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="42082bbd7000fcdbdf250b0000005c0001800800030000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="14000200766c616e30000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x2400c004}, 0x10) 2.734380046s ago: executing program 0 (id=1655): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr(r1, 0x0, &(0x7f0000000140)='[}%[/\\.\'+-]&\x00', 0xd, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0x16, 0x0, &(0x7f00000005c0)="76389e89f0f4b500000000000000eb810074c8893043", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.775607829s ago: executing program 3 (id=1656): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r2, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r3 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xa, 0x2, 0x40, 0x2, 0xd7, 0x1}, {0x9, 0x5, 0x4, 0x2, 0x40, 0xbd, 0xb, 0xe2}, {0x9, 0x5, 0xb, 0x3, 0x8, 0x40, 0x2, 0x70}}}}}}]}}, 0x0) syz_usb_disconnect(r3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x515001) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') setns(r4, 0x0) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1.768537591s ago: executing program 2 (id=1657): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6c5b28}, @in={0x2, 0x4e22, @broadcast}], 0x4c) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3475, 0xe5ea, 0xe8, &(0x7f0000000040)={[0xb78c]}, 0x8) read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0xfdef) 1.578604071s ago: executing program 0 (id=1658): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000400)=""/5, 0x214000, 0x800}, 0x20) 1.390303132s ago: executing program 0 (id=1659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x94, 0x10, 0x44b, 0x70bd26, 0x25dfdc00, {0x7a}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x68, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_ROLE={0x8}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x10}, @IFLA_GTP_LOCAL6={0x14, 0x8, @rand_addr=' \x01\x00'}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000004c5050f1f2734ced00015b00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xdb}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6015}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x800) close_range(r9, r9, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r9, 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x4000800) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000c10200000000e70000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) close(0x3) close(r11) sendto$inet(r5, &(0x7f0000000440)="a1a4036148e3cd71d4b3c7cf8dd58674d2c3e2051260f0a461978f2f449bb4e2136aab788d25b3bf68ec2ccbb0a966af5d78f371e7b01a3a988e7dd3af571bcb3df04da959d0a808f6b01ba8e57d50f74cadaa51c0d3e9eb9dd1a1e748eadf", 0x5f, 0x800, &(0x7f0000000640)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xc}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.309954191s ago: executing program 2 (id=1660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000001280)={&(0x7f00000006c0)={0xbb8, 0x0, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x4}, 0x6, 0x8, 0x0, 0x9, 0xe, 'syz1\x00', "e6a409b74edb50440448f2e19ce98cf7da2ef751d012ff906966c7dfb271d537", "a0da5f66dc9f894a871fe1ad3692be119942f6a51213988d602fe7ab9a12aadb", [{0x6, 0x5, {0x1, 0xffff2f1c}}, {0x4, 0xacb, {0x0, 0x3}}, {0x16, 0x7, {0x3, 0x3}}, {0xd, 0x9, {0x3, 0xf}}, {0x3, 0xe, {0x0, 0x1}}, {0xfff3, 0x8, {0x0, 0x5}}, {0x5, 0xfff8, {0x2, 0xec17}}, {0x5, 0x0, {0x1, 0x8}}, {0x0, 0x4, {0x3, 0x5}}, {0x6, 0xfff, {0x0, 0x3}}, {0x8000, 0x4, {0x1, 0x101}}, {0x1, 0x101, {0xbb9fc9428dd2fbf0, 0x4}}, {0x5, 0x2, {0x2, 0x7ff}}, {0x1, 0xf, {0x0, 0x9}}, {0x6, 0xf39, {0x2, 0xc3}}, {0x5, 0x1ff, {0x2, 0x3}}, {0x3ff, 0x5, {0x1, 0x7}}, {0x184d, 0x5, {0x1, 0x100000}}, {0x9d49, 0xe, {0x1, 0xffff0000}}, {0xfbff, 0x49, {0x2, 0x7}}, {0x9165, 0x7, {0x0, 0x2}}, {0x7, 0x9, {0x3, 0xf}}, {0x8001, 0x7, {0x0, 0x773f8484}}, {0x6, 0x7, {0x3, 0xb1}}, {0x3, 0x6, {0x2, 0xe1}}, {0x7, 0x8, {0x1, 0x7fff}}, {0x73f3, 0x8, {0x0, 0x9}}, {0x6, 0x1, {0x3, 0x9}}, {0x3, 0x6, {0x2, 0x8}}, {0xffff, 0x87e9, {0x0, 0xe}}, {0x6, 0x6, {0x2, 0x400}}, {0x4, 0x800, {0x1, 0x8001}}, {0x80, 0x1, {0x3, 0x8}}, {0x6, 0xbe, {0x3, 0x6646b638}}, {0x4, 0xff35, {0x2, 0x6}}, {0x8, 0x3, {0x3, 0xffff7f80}}, {0x8000, 0x0, {0x2, 0x4}}, {0xc3, 0x100, {0x1, 0xecfd}}, {0x9de, 0x340, {0x3, 0xe5800}}, {0x3ff, 0x71a, {0x1, 0x4e0}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x9, 0x7, 0x4, 0x3, 0x20, 'syz1\x00', "e77788fb0ca6324ada1b7d9d710aaa024bbb53b2428ad6f5723e06218397e5cb", "08c2eef33fe058ff42731526925d394065c718be341ea01d3ace3aa53e8fe559", [{0x1, 0x20, {0x2, 0x1}}, {0x9, 0x6, {0x3, 0xe}}, {0xe724, 0x40, {0x0, 0xd659}}, {0x5, 0x2, {0x0, 0x6}}, {0x200, 0x9, {0x3, 0x101}}, {0x8001, 0xfffd, {0x2, 0x8}}, {0x9, 0x3, {0x0, 0xfe}}, {0x6, 0x5, {0x2, 0x6}}, {0xffff, 0xf, {0x1, 0x8001}}, {0x80, 0x41, {0x1, 0x7}}, {0xb41, 0x8, {0x1, 0x81}}, {0x8, 0x0, {0x3, 0xfffffff7}}, {0x5, 0x0, {0x0, 0x7ff}}, {0x3, 0x7f, {0x3, 0x4d34}}, {0x8, 0x1, {0x2}}, {0x40, 0x3, {0x2, 0x53371970}}, {0x7fff, 0x6, {0x3, 0x401}}, {0x2, 0x6, {0x3, 0xffff0000}}, {0xc3b, 0x200, {0x3, 0xfffffffe}}, {0x9, 0xf31, {0x0, 0x3}}, {0xfff8, 0x2, {0x0, 0xfffff0cb}}, {0x4, 0x3, {0x1, 0x50d}}, {0xab, 0x7, {0x3}}, {0x5, 0x4, {0x1, 0x200}}, {0x7, 0x7, {0x2, 0x81}}, {0x5, 0x3a0, {0x1, 0xc8}}, {0x100, 0x7f, {0x0, 0x10001}}, {0x315d, 0x1000, {0x0, 0x9}}, {0x9, 0x9d3, {0x0, 0x56}}, {0x7, 0x3, {0x0, 0x7}}, {0x3, 0x9, {0x0, 0x81}}, {0x57e, 0x0, {0x2, 0x1}}, {0x6, 0x2, {0x2, 0x6}}, {0x5, 0x8000, {0x3, 0x6}}, {0x5, 0x7, {0x3, 0xf5}}, {0x3, 0x5, {0x0, 0x6}}, {0x101, 0x1, {0x3, 0x6}}, {0x45, 0xc88, {0x2, 0x2fd7aa0b}}, {0xf, 0x9, {0x3, 0x8}}, {0x1, 0xd3, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x10}, 0xb2, 0x9, 0x82, 0x8000, 0x8, 'syz1\x00', "19aad13adde39684bcdcc2cfb396f6e306e1cdd5ac5d03b8cccbe5fc68958c8a", "8ab2e976d93dea5dc4df0819fa1f41f994bf18b7e63f3fe2f5c64bfab1b00631", [{0x4, 0x6, {0x1, 0xe}}, {0x9, 0xd, {0x2, 0x4}}, {0x7a03, 0x800, {0x2, 0x6}}, {0x7, 0x8, {0x2, 0x8001}}, {0x3, 0x5, {0x3, 0x96}}, {0xffff, 0x8c, {0x3, 0x5}}, {0x1, 0x3, {0x2}}, {0x90f3, 0x0, {0x2, 0x401}}, {0x2, 0x2, {0x3, 0x9}}, {0x5, 0xc5, {0x1, 0x77}}, {0x7, 0x5, {0x1, 0x8}}, {0x76cb, 0x10, {0x3, 0x2}}, {0xfffd, 0x1, {0x0, 0x4}}, {0x3ff, 0x6, {0x0, 0x9}}, {0x7f, 0x3, {0x2, 0x30e}}, {0xff, 0x0, {0x2, 0x101}}, {0x5, 0xb, {0x2, 0x2}}, {0x2, 0x8bd5, {0x3, 0x7}}, {0x1b0, 0xff70, {0x2, 0x1ff}}, {0xfff7, 0x8, {0x3, 0x1}}, {0xe43, 0xcf34, {0x0, 0xfff00000}}, {0x0, 0xca, {0x3}}, {0x200, 0x5, {0x1}}, {0xd3e, 0x5, {0x0, 0x9}}, {0x2, 0x5, {0x3, 0x80000000}}, {0x7, 0x10, {0x3, 0x80000000}}, {0x9, 0x9, {0x0, 0xd5}}, {0x7ff, 0x5, {0x0, 0x1}}, {0x1ff, 0x6, {0x1, 0x7}}, {0xffff, 0x9, {0x2, 0xafcb}}, {0x1, 0xe027, {0x2, 0x400}}, {0x2, 0x101, {0x3, 0x3}}, {0x2, 0xdf, {0x3, 0x37}}, {0x5, 0x2, {0x2, 0x9}}, {0x8, 0x3000, {0x0, 0x6}}, {0x6, 0x9, {0x1, 0x800}}, {0x4, 0x3e, {0x1, 0x54}}, {0xa, 0x2, {0x1, 0x4}}, {0x2, 0xcb, {0x3, 0x5}}, {0x9, 0x1c, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0xd}, 0x2, 0x15, 0x4, 0x5, 0x1c, 'syz0\x00', "cbcb23416b7007a2328a9443f1463da301e945adf5331b61434b2cacde1e7642", "b0b5e2d57780147aa5c26737d5dc6642e98decb036a2bb974bdbd4b64202d64c", [{0x7051, 0x1200, {0x1, 0x40}}, {0x7f, 0x7, {0x0, 0x10}}, {0x7f, 0x8000, {0x2}}, {0x4, 0x4, {0x1, 0x409}}, {0x3, 0x3, {0x1, 0x400}}, {0xc, 0x4, {0x1, 0xffffff48}}, {0x0, 0x4, {0x2, 0xd71}}, {0x200, 0x7, {0x1, 0x80}}, {0x101, 0x3, {0x0, 0x8}}, {0x3, 0x1, {0x0, 0x3}}, {0x3, 0x4e43, {0x2, 0x7}}, {0xff, 0xe1, {0x1, 0x5}}, {0x8, 0x7, {0x0, 0x80000000}}, {0x9, 0x9, {0x0, 0x5}}, {0x4, 0x7, {0x0, 0x2}}, {0x2, 0x2, {0x2, 0xefe5}}, {0x1, 0x3ff, {0x3, 0xad}}, {0x200, 0x8, {0x2, 0x100}}, {0x3, 0x8, {0x0, 0x81}}, {0x47, 0xffff, {0x1, 0x800}}, {0x8, 0x4, {0x1, 0x77}}, {0x7, 0x6, {0x1, 0x9}}, {0x6, 0x8, {0x2, 0xf4d5}}, {0xfffa, 0x7f, {0x1, 0x285}}, {0x8000, 0x6, {0x3, 0x6}}, {0x40, 0x0, {0x1, 0xc2}}, {0x101, 0x0, {0x2, 0xe}}, {0x2006, 0x6, {0x3, 0x8}}, {0x0, 0x2, {0x0, 0xfffffffc}}, {0x8d4d, 0x2, {0x0, 0x7}}, {0xfffa, 0x0, {0x2, 0x2}}, {0x9, 0x401, {0x2, 0xffff}}, {0x2, 0x8, {0x0, 0x5}}, {0x693c, 0x3ff, {0x0, 0x7fff}}, {0x8, 0x0, {0x2, 0xa}}, {0x1, 0x6, {0x2, 0x7}}, {0x401, 0x5, {0x3, 0x3}}, {0xf, 0x1, {0x1, 0x5e}}, {0x7, 0x2, {0x2, 0x12}}, {0x101, 0x4b99, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x30}, 0x3, 0xc5, 0x8, 0x1, 0x26, 'syz0\x00', "c321827e82b0098310ad4d65a96b900ff936d0de33cb02f129e87ac869baca72", "2ba4853960834ad85eed58897aab4f682119ad23f0d4728dbd99a6f75c7cea9e", [{0x5, 0x6, {0x0, 0x1}}, {0x2, 0x401, {0x0, 0x6}}, {0x0, 0x4, {0x3, 0x5}}, {0xc, 0x8000, {0x1, 0xb76}}, {0x0, 0xa, {0x1, 0x7}}, {0x3431, 0x497, {0x3}}, {0x0, 0x5, {0x3, 0x8}}, {0x2, 0x5, {0x0, 0x100}}, {0xf, 0x2, {0x0, 0x4afeb6c6}}, {0xb1, 0x3ff, {0x2, 0xf20}}, {0x6, 0x3ff, {0x1, 0x4cf}}, {0x1, 0x5, {0x3}}, {0xffff, 0x1, {0x2, 0x8d}}, {0x200, 0xf, {0x3, 0xfff}}, {0x6, 0x9, {0x2, 0x4}}, {0xc2, 0x5, {0x1, 0x10000}}, {0x1, 0x27, {0x3, 0x8}}, {0x19, 0x9, {0x2, 0x9}}, {0x3ff, 0x5, {0x3, 0xe}}, {0x6000, 0x4, {0x2, 0x6f}}, {0xffff, 0x7e, {0x1, 0x10001}}, {0x7, 0x8, {0x1, 0x80000001}}, {0x401, 0x6, {0x3, 0x3}}, {0x7, 0x2, {0x3, 0x4}}, {0x8000, 0x0, {0x0, 0x3ff}}, {0x38f, 0x8, {0x1, 0x8}}, {0x5, 0x1, {0x1, 0x1ff}}, {0x9, 0x100, {0x0, 0x1}}, {0x4, 0x5bd9, {0x3, 0x2}}, {0xe, 0xf8b2, {0x0, 0x800}}, {0x8, 0x3, {0x0, 0x7}}, {0x9, 0x401, {0x2, 0x6}}, {0xee, 0x4, {0x1, 0xb0}}, {0x5, 0x6, {0x3, 0x1}}, {0x8d73, 0x9, {0x1, 0xfffffffe}}, {0x9, 0x9, {0x2}}, {0x1d19, 0x4, {0x0, 0x5}}, {0x6, 0x6, {0x1, 0xe284}}, {0x7, 0x100, {0x2, 0xb8}}, {0xc, 0x1, {0x0, 0x5}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x24000005}, 0x20040090) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="03030105caf632a6d4a14e"], 0x14}, 0x1, 0x0, 0x0, 0x20000895}, 0x40c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x448}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmmsg$inet(r0, &(0x7f0000000300), 0x0, 0x40004) sendto(r0, 0x0, 0x0, 0x20008004, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x1, 0x3}}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg(r0, &(0x7f0000003c00)={&(0x7f0000000180)=@nfc_llcp={0x27, r5, 0xffffffffffffffff, 0x5, 0x6, 0x7f, "e2e0412df16eb3cdd9ef828a170ab20115e476337f7daebe1d0d1f308355f9da8368b001dde59a065aff00b3c578758c887686fea0beda1eae51bebdd90576", 0xe}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000200)="ae443582f83992acadbc3b0c48ee857372ddfed4708e47f2eb77c3e9e717cc13162ed1aa99877f4ba2f8730a2cce3d9d6fb0133e89a94e", 0x37}, {&(0x7f0000000240)="cf977f0c558ba0673ec38473fd62bb92d5e16a62261ec7e8fbc4bc108ef0f174567781f703acf639ff17d02f4c9349da524f91637e40768959ec0428214eb00a7324daa58f311afc7fd74035cde130646d6e7908f22927e2a85a1dd84c478dfb2335b3d864", 0x65}, {&(0x7f0000001300)="c1dd06b60be686f832bdf856fcebba9b720bf809b94d9d7bf47d9f115b1af3956489e77576280fa43c40aa2987159288e7affd2c9ecbf3408c499fce63a25b32e50c8712dfbbb503e137d9a22750be823e7f34cd97abcaf5af8ed3fbfefe5188213f9198476dbb3cd23da89b6e1df67ba1fb8fc7f8abf25a642cdb2dfb55189059832facde66e2c6369208374b27edc221ca08b48c882de7bac48b4e7fce8c0bd1133dd96390234b992485bb0181812967b88025c195389da9c944dee24dd7b4cf502d6e54bfb146", 0xc8}, {&(0x7f0000001400)="e00a6348ffb897c7262748ee984a44e2713b4ebb40c14a460e962f6a1f7604b482818330220bc8b7d9344af03ccdb2e893d3cc852b270be122d61cf76427cecec0f01f6ebb05ba780f2d014491be06add538a782282bdb9195a9", 0x5a}, {&(0x7f0000001480)="7c0c9f702fe1ff8ef9108f0e30e2cc23d0e570977cdbe25929f9c10cde55c3de6108697bc6", 0x25}, {&(0x7f00000014c0)="6f3f539d34d267b2da2f47d584b1d9702089e1d14675c6e395016bc2818d1d0e9117e97478889badab860b818bf0a80e8653fca4ac6fde72d812ebf93b1b859ce6535db3158e68c0abd19863364cdab33a9656902a1386cda594e33aa03d8b6510474afda86c2567c3d06e96f3b0c5b6ab5ff112d16e5273aaf1b8ca51542ad68940de74603f37", 0x87}, {&(0x7f0000001580)="5a26f420921aa9521e4772ca4161a277121f0eabffcf7f4af4941a729439b7f5100a0e21eb6ee68f3cb53bf0dcc61d37150eb19ab580f0e41c6f12c8904edba8c6d26ce7596dd3d5e9c4a377dc97e1506a2c16ae31db143003b3e35a", 0x5c}, {&(0x7f0000001600)="56b12ea249de7e6539455cef61463a924aed63c0a3bd8ab346d20e546c50e71415e0cdd36afffa6575f65f83bbca9a70d38643c13e4d4c7c18939b1fe3f1ba613412c6dc74238297798d", 0x4a}], 0x8, &(0x7f0000001700)=[{0xe10, 0x1f4, 0xffff0000, "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"}, {0x50, 0x10b, 0x5a, "917f315c9700464d3bd67edc63fb392b2c808ae11bec083b6009f8a39c47d1ae695ef279d59474215d7cdba81886b42a1fbbb644eb240da9703e52032b93"}, {0xc8, 0x107, 0x7f, "39a987ec4c2eb79559a82c710dcf278fb8260ea2c4a9de72a471d62a2a251184db29f3e52b079e6022ddd45507c795957e3ab9694c17057a416ca34649c52ec83096f2edfc4a428fedefddb701499fc22142f5102a6f9b37a8cff3d5aeea1711504900318c758a5090d40b1117827490fde663075bbb9c5f45691b536f548da370558b9e1e55789c110e69704bf79877cac6b530420b8e49f3e4eaf390bc0f2486b1188008360659d5d0747ddad3e11c292243bc4264d8b2"}, {0x88, 0x5, 0x6, "9d39bdace50241d536815d54999881d944db72962532c0b9551c84eb2f9c2410c0b4a4a417f9f9047453175aa47fb7fce239307abefe1c43c6f021bdfcb95611c1f68ea623e56d26b3ccef99e4cadfbf574a087687429076d0947fead5c2e1a4b142c9ec812694de5cafa121a95279927a7b10c1585a51a6"}, {0x108, 0x1, 0x80000001, "8c3c09281829dc04f48bf189f90062068da269d7bfa4ea4712b268c67a85e1acfce4b81ac7b9bf4656ecd982a5a5ae711cb0afda7bdae484cca8a4c741d09ee547cf1b0db3f9c0effe6a317b3d3a8511447ccfe59431d4cf528f48ed33273a008ff1cda023f920ecbe5c3a6405ee6105f5fed05fdf888b834a0783824a604577b3bf04451543d83e06a610f3d0014587409dae23a3c9a0ecf10b9b1706feac3c8ea24b67254e731d0c82ebed2f78e762eb31dd4c56cb54c331948651512b03ed49f9f3246f8d4075fb8e39886e58f6d4f35ebbeb0216c829c5114a69a1733711b1e84b891a6ddb50993e20d31d86d73d0edfa3"}, {0xb0, 0x11, 0x10001, "1d6bc898a3a910e894b0ab40deadd3a259ee55f442d2a0162932ab204b3125726fd6b43222fece46aef1f1250d3750af0cd10e689343ba9eea4df44cfb6079fbb538b2462d143543319cd123e633e416e8ab76984ca4a5e7bd3a40f91f6a1af2865be33ff1288942fe3eeec6f1bc26fde8eba7021eea242aad6148acca3911ff78886a8ece454290e63ee767c9eb65b4b5cc4063749ba0e2f6947f4221023a71"}, {0x68, 0x119, 0x7c, "8efcf0f23cf89dc6d2183dce7c5413dcc0bea3f5c135cc4d076f9a8796280a46cba9969db0de997e3ee186f74dc59c06d7c22b05dbd63534f26d606b62c246eb8f4513095c4371a1a0a59f580bedbe4ee188c12a"}, {0xe8, 0x117, 0x6, "03c5f06907e05e1b880c5f93cacde44e07bc02d43c79c53e5b7ca80fc239fbf3126b78953a9bf9b1662b03b77db91c70d295d64f003d313265ecc543e5db473dc786c777703b531089582a82bb56a7c8a0a2573fcbd8a324b49eb07580aadb482ccaf31fcc217f29c5bbfe9512d055b0a7b540769ed3f9cca3c1cad7a96a81993bcb5170e7821c28374409a82ac75c8fe3aea8998a4afb84e74d176e5b90e061c6fa805b884bb60c4dbea9abbe284c71406d88b636f0822dc63deacb392a8dd88e77e2ae1fa9ebc0062b2c8ffa1dd29dab8d902cef0e"}, {0x1000, 0x10e, 0x5, "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"}], 0x22b8}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_route(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80140, 0x10) pread64(r7, &(0x7f00000000c0)=""/23, 0x17, 0x1) 1.179823817s ago: executing program 0 (id=1661): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x14, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000", @ANYRES32], 0x1c}}, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1.092050256s ago: executing program 2 (id=1662): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000080), 0x1b, 0x10022, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00 \x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea42, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0xda40, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xb, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x6], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x7fff, 0x2ae, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x1, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x17a1, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 1.017620792s ago: executing program 0 (id=1663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000180), 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 365.771315ms ago: executing program 4 (id=1664): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe39b7a35d4fd00be}, {0x9, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x582cd293, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0xcb36, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0x9, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x1, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x43, 0x4b00, 0x0, 0x2, 0x101, 0x3ff, 0x20002, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x5, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x1, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x6, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xed19, 0x207, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x8, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073417, 0x2, 0x9, 0x3, 0x4, 0x40, 0xbff4, 0xa, 0x5, 0x9, 0x0, 0xfffffffe, 0xf1, 0x0, 0x3, 0x2, 0x8000, 0x1, 0x9, 0x7fffffff, 0x9, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0xdd2, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x5, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0xfffffffa, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x1, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x1, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x81, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x2, 0x5, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x401, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0x9, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) statx(0xffffffffffffffff, 0x0, 0x6000, 0x100, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000001) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) syslog(0x9, &(0x7f0000000000)=""/51, 0x33) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbfbbb00000000000008060001080006040001000000000000acbbbbbbac1414bb00000000000061b7994baf0602b0a82a4896123c0a456553bd1696de4e7eb5675264ffa2020fb985b5c3a25c0ce97696f91088ad8974af5122c03bed6732b1fa409945"], 0x0) r9 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x1) 165.771604ms ago: executing program 4 (id=1665): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) dup(r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r1], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="d803216194d87cbe68707513dfbe3a1daaede5b9491e469ea1a2b15c940ef8b35493163492d0c3907e2ef5456acf911e87ce923b531f3138b4f88a68932145230fbf3b3728f99c2b21d354ea6fd62dc0aefe74617294d659046c4cd324c595582234cf4d47eee7d4313f6d171c9bb4ceeeb7261a48bed5c5ba98c85a2ffa6205386e3efcb78926114eada922820b93670ee9051dde030f2ab74b19ba7d94211aa98fef2fd15b71b52e5520250b3adfdb172ce450f90112880a78f9aa6e1ee3f0e8f856", @ANYRESHEX=r6], 0xac}, 0x1, 0x0, 0x0, 0x20040090}, 0x4002080) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247}) r9 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYBLOB="b60d72462838e098b28d7b5197b932531b8f70178cc2b634b8240ea2edd2bce197ac408d020463059a1dc3f5f7db0c63bcfa4fc0235388c3aeda36268a614a9e2d60257e58afcfaea4a1bc7622604090ccf4615f18c3281ff439c148ba4573c818ccef5e25fd70d08cb21b6e69e5b2f6e9589fa4a371795eb70000000000000000", @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond0\x00'}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000500)={{0x2, 0x4e1e, @multicast1}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x30, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 'veth1_vlan\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 148.789002ms ago: executing program 5 (id=1666): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x64000, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000003c0)=0x8000000000000001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './config/usb_gadget/g1\x00'}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000200)={@private, @broadcast, 0x0}, &(0x7f0000000240)=0xc) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008095}, 0x8000) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x7fffffffffffffff, 0x80000000}, 0x4}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000680)={'nat\x00', 0x0, 0x3, 0x9b, [0x6, 0x0, 0x8, 0x3, 0x9, 0x81], 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)=""/155}, &(0x7f0000000700)=0x78) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(0x0, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) 0s ago: executing program 0 (id=1667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 1) kernel console output (not intermixed with test programs): [ T1209] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 328.031341][ T1209] sierra 5-1:183.124: device disconnected [ 328.334521][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 328.366906][ T10] usb 6-1: device descriptor read/8, error -71 [ 328.633809][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 328.666184][ T10] usb 6-1: device descriptor read/8, error -71 [ 328.798614][ T10] usb usb6-port1: unable to enumerate USB device [ 328.838810][ T30] audit: type=1400 audit(1786175461.130:638): avc: denied { getopt } for pid=9616 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 328.949626][ T9626] __nla_validate_parse: 1 callbacks suppressed [ 328.949644][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1014'. [ 329.007862][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 329.093630][ T3343] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.125599][ T3343] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.151167][ T3343] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.189794][ T8161] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.206857][ T9631] FAULT_INJECTION: forcing a failure. [ 329.206857][ T9631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.239086][ T9631] CPU: 0 UID: 0 PID: 9631 Comm: syz.0.1016 Not tainted syzkaller #0 PREEMPT(full) [ 329.239111][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 329.239120][ T9631] Call Trace: [ 329.239126][ T9631] [ 329.239133][ T9631] dump_stack_lvl+0x100/0x190 [ 329.239162][ T9631] should_fail_ex.cold+0x5/0xa [ 329.239186][ T9631] _copy_from_user+0x2e/0xd0 [ 329.239212][ T9631] copy_msghdr_from_user+0x9f/0x4c0 [ 329.239232][ T9631] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 329.239263][ T9631] ___sys_sendmsg+0x106/0x1e0 [ 329.239283][ T9631] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.239298][ T9631] ? __lock_acquire+0x49f/0x1a40 [ 329.239321][ T9631] ? get_pid_task+0x106/0x250 [ 329.239365][ T9631] __sys_sendmsg+0x160/0x210 [ 329.239390][ T9631] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.239429][ T9631] do_syscall_64+0x115/0x870 [ 329.239453][ T9631] ? clear_bhb_loop+0x70/0xc0 [ 329.239476][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.239494][ T9631] RIP: 0033:0x7feedef9e0d9 [ 329.239510][ T9631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.239526][ T9631] RSP: 002b:00007feedfeed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.239545][ T9631] RAX: ffffffffffffffda RBX: 00007feedf225fa0 RCX: 00007feedef9e0d9 [ 329.239556][ T9631] RDX: 00000000000400c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 329.239567][ T9631] RBP: 00007feedfeed090 R08: 0000000000000000 R09: 0000000000000000 [ 329.239578][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.239589][ T9631] R13: 00007feedf226038 R14: 00007feedf225fa0 R15: 00007ffdccac5668 [ 329.239613][ T9631] [ 329.479113][ T5794] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 330.139975][ T5794] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 330.155645][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1020'. [ 330.164681][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.176651][ T5794] usb 3-1: Product: syz [ 330.186999][ T5794] usb 3-1: Manufacturer: syz [ 330.196804][ T5794] usb 3-1: SerialNumber: syz [ 330.253119][ T5794] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.372967][ T9645] fuse: Bad value for 'fd' [ 330.417202][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 330.723105][ T9629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.746320][ T9629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.846401][ T5695] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 330.890076][ T9629] Bluetooth: MGMT ver 1.23 [ 331.028085][ T5695] usb 6-1: Using ep0 maxpacket: 32 [ 331.044579][ T5695] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 331.063129][ T5695] usb 6-1: config 0 has no interface number 0 [ 331.079577][ T5695] usb 6-1: config 0 interface 12 has no altsetting 0 [ 331.098161][ T5695] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 331.113204][ T30] audit: type=1800 audit(1786175463.263:639): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1007" name="bus" dev="ramfs" ino=24699 res=0 errno=0 [ 331.169649][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.202546][ T5695] usb 6-1: Product: syz [ 331.233830][ T5695] usb 6-1: Manufacturer: syz [ 331.249177][ T5695] usb 6-1: SerialNumber: syz [ 331.273087][ T5695] usb 6-1: config 0 descriptor?? [ 331.451870][ T5330] usb 3-1: USB disconnect, device number 27 [ 331.806578][ T9668] FAULT_INJECTION: forcing a failure. [ 331.806578][ T9668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.826544][ T9668] CPU: 1 UID: 0 PID: 9668 Comm: syz.4.1029 Not tainted syzkaller #0 PREEMPT(full) [ 331.826570][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 331.826579][ T9668] Call Trace: [ 331.826586][ T9668] [ 331.826593][ T9668] dump_stack_lvl+0x100/0x190 [ 331.826620][ T9668] should_fail_ex.cold+0x5/0xa [ 331.826642][ T9668] _copy_from_user+0x2e/0xd0 [ 331.826668][ T9668] copy_msghdr_from_user+0x9f/0x4c0 [ 331.826687][ T9668] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 331.826716][ T9668] ___sys_sendmsg+0x106/0x1e0 [ 331.826735][ T9668] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.826749][ T9668] ? __lock_acquire+0x49f/0x1a40 [ 331.826773][ T9668] ? get_pid_task+0x106/0x250 [ 331.826818][ T9668] __sys_sendmsg+0x160/0x210 [ 331.826842][ T9668] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.826878][ T9668] do_syscall_64+0x115/0x870 [ 331.826901][ T9668] ? clear_bhb_loop+0x70/0xc0 [ 331.826923][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.826941][ T9668] RIP: 0033:0x7f1f8119e0d9 [ 331.826955][ T9668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.826971][ T9668] RSP: 002b:00007f1f81fce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.826989][ T9668] RAX: ffffffffffffffda RBX: 00007f1f81425fa0 RCX: 00007f1f8119e0d9 [ 331.827000][ T9668] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 331.827011][ T9668] RBP: 00007f1f81fce090 R08: 0000000000000000 R09: 0000000000000000 [ 331.827020][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.827031][ T9668] R13: 00007f1f81426038 R14: 00007f1f81425fa0 R15: 00007ffedc58e798 [ 331.827055][ T9668] [ 332.019405][ T9648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.028032][ T9648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.052944][ T5695] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 332.060498][ T5695] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 332.068146][ T5695] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 332.075778][ T5695] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 332.085998][ T5695] usb 6-1: USB disconnect, device number 9 [ 332.105909][ T5794] usb 3-1: Service connection timeout for: 256 [ 332.117694][ T30] audit: type=1400 audit(1786175464.199:640): avc: denied { ioctl } for pid=9671 comm="syz.3.1031" path="socket:[24559]" dev="sockfs" ino=24559 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.149504][ T5794] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 332.208672][ T5794] ath9k_htc: Failed to initialize the device [ 332.255756][ T5330] usb 3-1: ath9k_htc: USB layer deinitialized [ 332.355065][ T30] audit: type=1400 audit(1786175464.423:641): avc: denied { write } for pid=9686 comm="syz.4.1035" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 332.610148][ T5330] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 332.793923][ T5330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.817255][ T5330] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 332.848958][ T5330] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 332.871256][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.904372][ T5330] usb 3-1: Product: syz [ 332.924585][ T5330] usb 3-1: Manufacturer: syz [ 332.936868][ T5330] usb 3-1: SerialNumber: syz [ 333.030668][ T9702] : Can't lookup blockdev [ 333.068060][ T30] audit: type=1400 audit(1786175465.087:642): avc: denied { remount } for pid=9701 comm="syz.3.1040" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 333.242374][ T30] audit: type=1400 audit(1786175465.256:643): avc: denied { create } for pid=9678 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 333.313001][ T30] audit: type=1400 audit(1786175465.274:644): avc: denied { bind } for pid=9678 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 333.595334][ T1209] usb 3-1: USB disconnect, device number 28 [ 334.001866][ T9715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.075294][ T9724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=9724 comm=syz.3.1048 [ 335.483758][ T30] audit: type=1400 audit(1786175467.305:645): avc: denied { listen } for pid=9741 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 336.341766][ T30] audit: type=1800 audit(1786175468.156:646): pid=9695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1036" name="bus" dev="ramfs" ino=24880 res=0 errno=0 [ 336.517432][ T9748] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1056'. [ 336.566932][ T9748] unsupported nlmsg_type 40 [ 336.597093][ C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 21010 ms [ 336.606550][ C0] sl0: transmit timed out, driver error? [ 337.088548][ T9766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=9766 comm=syz.4.1061 [ 337.170267][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1061'. [ 337.354981][ T9768] ip_tables: iptables: counters copy to user failed while replacing table [ 337.633211][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 337.947838][ T9784] serial 00:04: in use; can't configure [ 338.020511][ T9784] serial 00:04: in use; can't configure [ 338.095598][ T9789] xt_hashlimit: size too large, truncated to 1048576 [ 338.111530][ T9791] xt_hashlimit: size too large, truncated to 1048576 [ 338.153303][ T9792] xt_hashlimit: size too large, truncated to 1048576 [ 338.168884][ T9793] FAULT_INJECTION: forcing a failure. [ 338.168884][ T9793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.211225][ T9793] CPU: 1 UID: 0 PID: 9793 Comm: syz.4.1071 Not tainted syzkaller #0 PREEMPT(full) [ 338.211253][ T9793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 338.211263][ T9793] Call Trace: [ 338.211269][ T9793] [ 338.211277][ T9793] dump_stack_lvl+0x100/0x190 [ 338.211305][ T9793] should_fail_ex.cold+0x5/0xa [ 338.211328][ T9793] _copy_from_user+0x2e/0xd0 [ 338.211354][ T9793] do_ipv6_setsockopt+0x73d/0x44a0 [ 338.211387][ T9793] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 338.211412][ T9793] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 338.211433][ T9793] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 338.211457][ T9793] ? avc_has_perm_noaudit+0x145/0x3b0 [ 338.211479][ T9793] ? avc_has_perm+0x135/0x1e0 [ 338.211499][ T9793] ? __pfx_avc_has_perm+0x10/0x10 [ 338.211528][ T9793] ? sock_has_perm+0x25a/0x2f0 [ 338.211551][ T9793] ? __pfx_sock_has_perm+0x10/0x10 [ 338.211579][ T9793] ? ipv6_setsockopt+0xcb/0x170 [ 338.211600][ T9793] ipv6_setsockopt+0xcb/0x170 [ 338.211625][ T9793] rawv6_setsockopt+0xee/0x5a0 [ 338.211646][ T9793] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 338.211673][ T9793] ? selinux_socket_setsockopt+0x6a/0x80 [ 338.211696][ T9793] ? sock_common_setsockopt+0x2e/0xf0 [ 338.211723][ T9793] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 338.211751][ T9793] do_sock_setsockopt+0xf3/0x1d0 [ 338.211780][ T9793] __sys_setsockopt+0x195/0x220 [ 338.211806][ T9793] __x64_sys_setsockopt+0xbd/0x160 [ 338.211827][ T9793] ? x64_sys_call+0x11a0/0x1530 [ 338.211854][ T9793] do_syscall_64+0x115/0x870 [ 338.211877][ T9793] ? clear_bhb_loop+0x70/0xc0 [ 338.211899][ T9793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.211917][ T9793] RIP: 0033:0x7f1f8119e0d9 [ 338.211933][ T9793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.211949][ T9793] RSP: 002b:00007f1f81fad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 338.211966][ T9793] RAX: ffffffffffffffda RBX: 00007f1f81426090 RCX: 00007f1f8119e0d9 [ 338.211978][ T9793] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 338.211988][ T9793] RBP: 00007f1f81fad090 R08: 00000000000005c0 R09: 0000000000000000 [ 338.211997][ T9793] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 338.212008][ T9793] R13: 00007f1f81426128 R14: 00007f1f81426090 R15: 00007ffedc58e798 [ 338.212032][ T9793] [ 338.701786][ T9799] xt_hashlimit: size too large, truncated to 1048576 [ 339.239486][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1079'. [ 339.553557][ T9842] fuse: fd is not a fuse device [ 340.417795][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1097'. [ 341.749965][ T29] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 341.933697][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 341.945144][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 341.957859][ T29] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 341.967943][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.976289][ T29] usb 6-1: Product: syz [ 341.980606][ T29] usb 6-1: Manufacturer: syz [ 341.986082][ T29] usb 6-1: SerialNumber: syz [ 341.994289][ T29] usb 6-1: config 0 descriptor?? [ 342.002357][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 342.009187][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 342.020986][ T29] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 342.230121][ T30] audit: type=1400 audit(1786175473.657:647): avc: denied { read } for pid=9883 comm="syz.5.1107" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 342.665545][ T29] usb 6-1: USB disconnect, device number 10 [ 342.911470][ T9935] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 343.003006][ T9938] FAULT_INJECTION: forcing a failure. [ 343.003006][ T9938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.027719][ T9938] CPU: 0 UID: 0 PID: 9938 Comm: syz.4.1131 Not tainted syzkaller #0 PREEMPT(full) [ 343.027742][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 343.027752][ T9938] Call Trace: [ 343.027759][ T9938] [ 343.027765][ T9938] dump_stack_lvl+0x100/0x190 [ 343.027794][ T9938] should_fail_ex.cold+0x5/0xa [ 343.027817][ T9938] _copy_from_user+0x2e/0xd0 [ 343.027843][ T9938] copy_msghdr_from_user+0x9f/0x4c0 [ 343.027863][ T9938] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 343.027885][ T9938] ? __pfx__kstrtoull+0x10/0x10 [ 343.027909][ T9938] ___sys_sendmsg+0x106/0x1e0 [ 343.027926][ T9938] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.027956][ T9938] ? find_held_lock+0x2b/0x80 [ 343.027989][ T9938] __sys_sendmmsg+0x20c/0x440 [ 343.028016][ T9938] ? __pfx___sys_sendmmsg+0x10/0x10 [ 343.028038][ T9938] ? ksys_write+0x190/0x250 [ 343.028073][ T9938] ? fput+0x79/0x100 [ 343.028094][ T9938] ? ksys_write+0x1ac/0x250 [ 343.028110][ T9938] ? __pfx_ksys_write+0x10/0x10 [ 343.028132][ T9938] __x64_sys_sendmmsg+0x9c/0x100 [ 343.028155][ T9938] ? lockdep_hardirqs_on+0x78/0x100 [ 343.028184][ T9938] do_syscall_64+0x115/0x870 [ 343.028206][ T9938] ? clear_bhb_loop+0x70/0xc0 [ 343.028227][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.028245][ T9938] RIP: 0033:0x7f1f8119e0d9 [ 343.028261][ T9938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.028278][ T9938] RSP: 002b:00007f1f81fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 343.028298][ T9938] RAX: ffffffffffffffda RBX: 00007f1f81425fa0 RCX: 00007f1f8119e0d9 [ 343.028309][ T9938] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 343.028319][ T9938] RBP: 00007f1f81fce090 R08: 0000000000000000 R09: 0000000000000000 [ 343.028329][ T9938] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 343.028340][ T9938] R13: 00007f1f81426038 R14: 00007f1f81425fa0 R15: 00007ffedc58e798 [ 343.028364][ T9938] [ 343.470818][ T9946] FAULT_INJECTION: forcing a failure. [ 343.470818][ T9946] name failslab, interval 1, probability 0, space 0, times 0 [ 343.510901][ T9946] CPU: 1 UID: 0 PID: 9946 Comm: syz.2.1135 Not tainted syzkaller #0 PREEMPT(full) [ 343.510927][ T9946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 343.510936][ T9946] Call Trace: [ 343.510942][ T9946] [ 343.510949][ T9946] dump_stack_lvl+0x100/0x190 [ 343.510977][ T9946] should_fail_ex.cold+0x5/0xa [ 343.510999][ T9946] should_failslab+0xc2/0x120 [ 343.511023][ T9946] __kvmalloc_node_noprof+0x116/0x970 [ 343.511046][ T9946] ? traverse.part.0.constprop.0+0x397/0x650 [ 343.511070][ T9946] traverse.part.0.constprop.0+0x397/0x650 [ 343.511097][ T9946] seq_read_iter+0x93f/0x1270 [ 343.511131][ T9946] seq_read+0x344/0x4d0 [ 343.511149][ T9946] ? __pfx_seq_read+0x10/0x10 [ 343.511172][ T9946] ? avc_policy_seqno+0x9/0x20 [ 343.511191][ T9946] ? selinux_file_permission+0x8f/0x6d0 [ 343.511222][ T9946] ? rw_verify_area+0xce/0x6d0 [ 343.511247][ T9946] ? __pfx_seq_read+0x10/0x10 [ 343.511264][ T9946] vfs_read+0x1e4/0xb40 [ 343.511295][ T9946] ? __pfx_vfs_read+0x10/0x10 [ 343.511320][ T9946] ? find_held_lock+0x2b/0x80 [ 343.511337][ T9946] ? __fget_files+0x215/0x3d0 [ 343.511355][ T9946] ? __fget_files+0x215/0x3d0 [ 343.511378][ T9946] ? __fget_files+0x21f/0x3d0 [ 343.511403][ T9946] __x64_sys_pread64+0x1eb/0x250 [ 343.511422][ T9946] ? __pfx___x64_sys_pread64+0x10/0x10 [ 343.511448][ T9946] do_syscall_64+0x115/0x870 [ 343.511471][ T9946] ? clear_bhb_loop+0x70/0xc0 [ 343.511493][ T9946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.511511][ T9946] RIP: 0033:0x7f650959e0d9 [ 343.511525][ T9946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.511541][ T9946] RSP: 002b:00007f650a413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 343.511559][ T9946] RAX: ffffffffffffffda RBX: 00007f6509825fa0 RCX: 00007f650959e0d9 [ 343.511570][ T9946] RDX: 00000000000000ed RSI: 0000200000000080 RDI: 0000000000000004 [ 343.511580][ T9946] RBP: 00007f650a413090 R08: 0000000000000000 R09: 0000000000000000 [ 343.511590][ T9946] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 343.511600][ T9946] R13: 00007f6509826038 R14: 00007f6509825fa0 R15: 00007ffeed2f9c88 [ 343.511626][ T9946] [ 345.687294][ T9970] team0: Device xfrm0 is of different type [ 345.724266][ T9971] tipc: Started in network mode [ 345.751648][ T9971] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 345.798776][ T9971] tipc: Enabled bearer , priority 0 [ 345.947585][ T9983] team0: Device xfrm0 is of different type [ 345.981733][ T9983] FAULT_INJECTION: forcing a failure. [ 345.981733][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.037146][ T9983] CPU: 0 UID: 0 PID: 9983 Comm: syz.2.1149 Not tainted syzkaller #0 PREEMPT(full) [ 346.037172][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 346.037183][ T9983] Call Trace: [ 346.037189][ T9983] [ 346.037196][ T9983] dump_stack_lvl+0x100/0x190 [ 346.037224][ T9983] should_fail_ex.cold+0x5/0xa [ 346.037248][ T9983] _copy_from_user+0x2e/0xd0 [ 346.037275][ T9983] copy_msghdr_from_user+0x9f/0x4c0 [ 346.037294][ T9983] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 346.037324][ T9983] ___sys_sendmsg+0x106/0x1e0 [ 346.037343][ T9983] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.037358][ T9983] ? __lock_acquire+0x49f/0x1a40 [ 346.037382][ T9983] ? get_pid_task+0x106/0x250 [ 346.037427][ T9983] __sys_sendmsg+0x160/0x210 [ 346.037450][ T9983] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.037484][ T9983] do_syscall_64+0x115/0x870 [ 346.037507][ T9983] ? clear_bhb_loop+0x70/0xc0 [ 346.037533][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.037557][ T9983] RIP: 0033:0x7f650959e0d9 [ 346.037571][ T9983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.037587][ T9983] RSP: 002b:00007f650a413028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.037605][ T9983] RAX: ffffffffffffffda RBX: 00007f6509825fa0 RCX: 00007f650959e0d9 [ 346.037616][ T9983] RDX: 0000000020042000 RSI: 0000200000000440 RDI: 0000000000000004 [ 346.037627][ T9983] RBP: 00007f650a413090 R08: 0000000000000000 R09: 0000000000000000 [ 346.037637][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.037646][ T9983] R13: 00007f6509826038 R14: 00007f6509825fa0 R15: 00007ffeed2f9c88 [ 346.037671][ T9983] [ 346.876253][ T30] audit: type=1400 audit(1786175478.007:648): avc: denied { mount } for pid=9992 comm="syz.2.1152" name="/" dev="autofs" ino=26338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 346.972765][ T5330] tipc: Node number set to 11578026 [ 347.261121][ T30] audit: type=1400 audit(1786175478.362:649): avc: denied { read } for pid=10003 comm="syz.3.1156" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.815336][ T5330] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 348.002788][ T5330] usb 3-1: Using ep0 maxpacket: 16 [ 348.009602][ T5330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.033536][ T5330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.063817][ T5330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 348.096237][ T5330] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 348.121093][ T5330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.158216][ T5330] usb 3-1: config 0 descriptor?? [ 348.629910][ T5330] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 348.649985][ T5330] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 348.685719][ T5330] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 348.705506][ T5330] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 348.722987][ T5330] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 348.734697][ T5330] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 348.750874][ T5330] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 348.799455][ T5330] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 348.813247][ T5330] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 348.830955][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.841858][ T5330] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 348.849475][ T30] audit: type=1400 audit(1786175479.841:650): avc: denied { append } for pid=10016 comm="syz.2.1162" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 348.916092][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.935515][ T5330] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input17 [ 349.137696][ T5330] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 349.212576][ T5330] usb 3-1: USB disconnect, device number 29 [ 349.443189][T10044] bond0: entered promiscuous mode [ 349.500095][T10044] bond_slave_0: entered promiscuous mode [ 349.517692][T10044] bond_slave_1: entered promiscuous mode [ 349.599041][T10044] batadv0: entered promiscuous mode [ 349.657886][T10044] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 349.829677][ T30] audit: type=1400 audit(1786175480.767:651): avc: denied { write } for pid=10053 comm="syz.2.1171" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 349.855409][T10054] random: crng reseeded on system resumption [ 349.868293][ T30] audit: type=1400 audit(1786175480.767:652): avc: denied { open } for pid=10053 comm="syz.2.1171" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 350.299697][T10072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10072 comm=syz.3.1176 [ 350.334767][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1176'. [ 351.384539][ T30] audit: type=1800 audit(1786175482.217:653): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1165" name="bus" dev="ramfs" ino=25577 res=0 errno=0 [ 351.420183][ T30] audit: type=1400 audit(1786175482.226:654): avc: denied { watch watch_reads } for pid=10089 comm="syz.5.1183" path="pipe:[20679]" dev="pipefs" ino=20679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 351.770373][ T30] audit: type=1400 audit(1786175482.591:655): avc: denied { read } for pid=10089 comm="syz.5.1183" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 351.824029][ T30] audit: type=1400 audit(1786175482.610:656): avc: denied { open } for pid=10089 comm="syz.5.1183" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 352.230891][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10111 comm=syz.2.1190 [ 352.315753][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1190'. [ 352.413599][T10116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10116 comm=syz.3.1189 [ 352.509948][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1189'. [ 353.250583][T10122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1192'. [ 353.287450][T10144] FAULT_INJECTION: forcing a failure. [ 353.287450][T10144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.291004][T10145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1197'. [ 353.318410][T10144] CPU: 0 UID: 0 PID: 10144 Comm: syz.0.1198 Not tainted syzkaller #0 PREEMPT(full) [ 353.318433][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 353.318441][T10144] Call Trace: [ 353.318446][T10144] [ 353.318452][T10144] dump_stack_lvl+0x100/0x190 [ 353.318476][T10144] should_fail_ex.cold+0x5/0xa [ 353.318495][T10144] _copy_from_user+0x2e/0xd0 [ 353.318515][T10144] copy_msghdr_from_user+0x9f/0x4c0 [ 353.318531][T10144] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 353.318554][T10144] ___sys_sendmsg+0x106/0x1e0 [ 353.318570][T10144] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.318582][T10144] ? __lock_acquire+0x49f/0x1a40 [ 353.318600][T10144] ? get_pid_task+0x106/0x250 [ 353.318636][T10144] __sys_sendmsg+0x160/0x210 [ 353.318659][T10144] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.318688][T10144] do_syscall_64+0x115/0x870 [ 353.318707][T10144] ? clear_bhb_loop+0x70/0xc0 [ 353.318725][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.318739][T10144] RIP: 0033:0x7feedef9e0d9 [ 353.318753][T10144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.318766][T10144] RSP: 002b:00007feedfeed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.318781][T10144] RAX: ffffffffffffffda RBX: 00007feedf225fa0 RCX: 00007feedef9e0d9 [ 353.318789][T10144] RDX: 0000000000000004 RSI: 0000200000000800 RDI: 0000000000000003 [ 353.318798][T10144] RBP: 00007feedfeed090 R08: 0000000000000000 R09: 0000000000000000 [ 353.318805][T10144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.318813][T10144] R13: 00007feedf226038 R14: 00007feedf225fa0 R15: 00007ffdccac5668 [ 353.318832][T10144] [ 353.833680][T10164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10164 comm=syz.4.1204 [ 353.862967][ T30] audit: type=1400 audit(1786175484.546:657): avc: denied { write } for pid=10159 comm="syz.4.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 353.883278][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1204'. [ 354.074568][ T30] audit: type=1400 audit(1786175484.733:658): avc: denied { connect } for pid=10176 comm="syz.4.1210" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.416181][ T5330] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 354.578730][ T5330] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 354.605133][ T5330] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 354.631048][ T5330] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 354.651544][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.265930][ T5330] gud 5-1:1.0: No supported pixel formats found [ 355.284506][ T5330] gud 5-1:1.0: probe with driver gud failed with error -22 [ 355.493070][T10177] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 355.500704][T10177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.536748][T10177] vhci_hcd vhci_hcd.0: Device attached [ 355.564219][T10202] vhci_hcd: connection closed [ 355.565409][ T3304] vhci_hcd vhci_hcd.4: stop threads [ 355.579201][ T5330] usb 5-1: USB disconnect, device number 19 [ 355.603360][ T3304] vhci_hcd vhci_hcd.4: release socket [ 355.621707][T10205] bond0: Error: Cannot enslave bond to itself. [ 355.629728][ T3304] vhci_hcd vhci_hcd.4: disconnect device [ 355.644992][T10205] Device name not specified. [ 355.644992][T10205] [ 355.754543][ T1932] block nbd0: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 90 seconds [ 355.765333][ T1932] block nbd0: Possible stuck request ffff8880275ce1c0: control (read@1024,1024B). Runtime 90 seconds [ 355.776430][ T1932] block nbd0: Possible stuck request ffff8880275ce380: control (read@2048,1024B). Runtime 90 seconds [ 355.788772][ T1932] block nbd0: Possible stuck request ffff8880275ce540: control (read@3072,1024B). Runtime 90 seconds [ 355.946694][T10211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10211 comm=syz.5.1220 [ 355.990829][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1220'. [ 356.337069][T10230] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 356.384364][T10230] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1228'. [ 356.426496][T10230] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1228'. [ 357.791410][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1234'. [ 358.075085][ T30] audit: type=1400 audit(1786175488.485:659): avc: denied { getopt } for pid=10264 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 358.849610][T10284] fuse: Bad value for 'fd' [ 358.966654][T10289] fuse: Bad value for 'fd' [ 358.981001][T10289] FAULT_INJECTION: forcing a failure. [ 358.981001][T10289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.018736][T10289] CPU: 0 UID: 0 PID: 10289 Comm: syz.0.1247 Not tainted syzkaller #0 PREEMPT(full) [ 359.018754][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 359.018760][T10289] Call Trace: [ 359.018764][T10289] [ 359.018768][T10289] dump_stack_lvl+0x100/0x190 [ 359.018786][T10289] should_fail_ex.cold+0x5/0xa [ 359.018800][T10289] strncpy_from_user+0x3b/0x2d0 [ 359.018817][T10289] path_removexattrat+0xc8/0x5f0 [ 359.018830][T10289] ? __pfx_path_removexattrat+0x10/0x10 [ 359.018854][T10289] ? ksys_write+0x1ac/0x250 [ 359.018864][T10289] ? __pfx_ksys_write+0x10/0x10 [ 359.018876][T10289] __x64_sys_removexattr+0x5b/0x80 [ 359.018897][T10289] do_syscall_64+0x115/0x870 [ 359.018912][T10289] ? clear_bhb_loop+0x70/0xc0 [ 359.018925][T10289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.018936][T10289] RIP: 0033:0x7feedef9e0d9 [ 359.018946][T10289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.018956][T10289] RSP: 002b:00007feedfeed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 359.018967][T10289] RAX: ffffffffffffffda RBX: 00007feedf225fa0 RCX: 00007feedef9e0d9 [ 359.018973][T10289] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000080 [ 359.018979][T10289] RBP: 00007feedfeed090 R08: 0000000000000000 R09: 0000000000000000 [ 359.018985][T10289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.018991][T10289] R13: 00007feedf226038 R14: 00007feedf225fa0 R15: 00007ffdccac5668 [ 359.019004][T10289] [ 359.467882][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1250'. [ 359.526723][ T3343] Bluetooth: Error in BCSP hdr checksum [ 361.381720][T10320] FAULT_INJECTION: forcing a failure. [ 361.381720][T10320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.454740][T10320] CPU: 1 UID: 0 PID: 10320 Comm: syz.5.1255 Not tainted syzkaller #0 PREEMPT(full) [ 361.454767][T10320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 361.454778][T10320] Call Trace: [ 361.454784][T10320] [ 361.454796][T10320] dump_stack_lvl+0x100/0x190 [ 361.454821][T10320] should_fail_ex.cold+0x5/0xa [ 361.454838][T10320] _copy_from_user+0x2e/0xd0 [ 361.454854][T10320] do_ipv6_setsockopt+0x73d/0x44a0 [ 361.454873][T10320] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 361.454888][T10320] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 361.454900][T10320] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 361.454915][T10320] ? avc_has_perm_noaudit+0x145/0x3b0 [ 361.454928][T10320] ? avc_has_perm+0x135/0x1e0 [ 361.454941][T10320] ? __pfx_avc_has_perm+0x10/0x10 [ 361.454954][T10320] ? get_pid_task+0x106/0x250 [ 361.454967][T10320] ? sock_has_perm+0x25a/0x2f0 [ 361.454983][T10320] ? __pfx_sock_has_perm+0x10/0x10 [ 361.455000][T10320] ? ipv6_setsockopt+0xcb/0x170 [ 361.455012][T10320] ipv6_setsockopt+0xcb/0x170 [ 361.455028][T10320] rawv6_setsockopt+0xee/0x5a0 [ 361.455040][T10320] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 361.455053][T10320] ? selinux_socket_setsockopt+0x6a/0x80 [ 361.455068][T10320] ? sock_common_setsockopt+0x2e/0xf0 [ 361.455084][T10320] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 361.455105][T10320] do_sock_setsockopt+0xf3/0x1d0 [ 361.455130][T10320] __sys_setsockopt+0x195/0x220 [ 361.455154][T10320] __x64_sys_setsockopt+0xbd/0x160 [ 361.455171][T10320] ? do_syscall_64+0x90/0x870 [ 361.455185][T10320] ? lockdep_hardirqs_on+0x78/0x100 [ 361.455199][T10320] do_syscall_64+0x115/0x870 [ 361.455212][T10320] ? clear_bhb_loop+0x70/0xc0 [ 361.455225][T10320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.455236][T10320] RIP: 0033:0x7fa4c3d9e0d9 [ 361.455246][T10320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.455256][T10320] RSP: 002b:00007fa4c4c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.455267][T10320] RAX: ffffffffffffffda RBX: 00007fa4c4025fa0 RCX: 00007fa4c3d9e0d9 [ 361.455274][T10320] RDX: 0000000000000031 RSI: 0000000000000029 RDI: 0000000000000003 [ 361.455280][T10320] RBP: 00007fa4c4c30090 R08: 0000000000000004 R09: 0000000000000000 [ 361.455287][T10320] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 361.455294][T10320] R13: 00007fa4c4026038 R14: 00007fa4c4025fa0 R15: 00007ffe259e3728 [ 361.455308][T10320] [ 361.937680][ T50] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 361.993410][ T30] audit: type=1800 audit(1786175492.105:660): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1243" name="bus" dev="ramfs" ino=27252 res=0 errno=0 [ 364.913961][T10355] FAULT_INJECTION: forcing a failure. [ 364.913961][T10355] name failslab, interval 1, probability 0, space 0, times 0 [ 364.971866][T10355] CPU: 0 UID: 0 PID: 10355 Comm: syz.2.1265 Not tainted syzkaller #0 PREEMPT(full) [ 364.971890][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 364.971900][T10355] Call Trace: [ 364.971905][T10355] [ 364.971912][T10355] dump_stack_lvl+0x100/0x190 [ 364.971935][T10355] should_fail_ex.cold+0x5/0xa [ 364.971949][T10355] should_failslab+0xc2/0x120 [ 364.971964][T10355] __kmalloc_noprof+0xfc/0x820 [ 364.971976][T10355] ? rcu_is_watching+0x12/0xc0 [ 364.971993][T10355] ? tomoyo_realpath_from_path+0xb6/0x690 [ 364.972007][T10355] tomoyo_realpath_from_path+0xb6/0x690 [ 364.972021][T10355] tomoyo_path_number_perm+0x23c/0x580 [ 364.972035][T10355] ? tomoyo_path_number_perm+0x22e/0x580 [ 364.972051][T10355] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 364.972080][T10355] ? find_held_lock+0x2b/0x80 [ 364.972090][T10355] ? __fget_files+0x215/0x3d0 [ 364.972100][T10355] ? hook_file_ioctl_common+0x140/0x440 [ 364.972112][T10355] ? __fget_files+0x215/0x3d0 [ 364.972125][T10355] ? __fget_files+0x21f/0x3d0 [ 364.972138][T10355] security_file_ioctl+0xd3/0x230 [ 364.972155][T10355] __x64_sys_ioctl+0xb7/0x210 [ 364.972173][T10355] do_syscall_64+0x115/0x870 [ 364.972186][T10355] ? clear_bhb_loop+0x70/0xc0 [ 364.972200][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.972211][T10355] RIP: 0033:0x7f650959e0d9 [ 364.972220][T10355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.972231][T10355] RSP: 002b:00007f650a413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.972242][T10355] RAX: ffffffffffffffda RBX: 00007f6509825fa0 RCX: 00007f650959e0d9 [ 364.972248][T10355] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 364.972255][T10355] RBP: 00007f650a413090 R08: 0000000000000000 R09: 0000000000000000 [ 364.972278][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.972284][T10355] R13: 00007f6509826038 R14: 00007f6509825fa0 R15: 00007ffeed2f9c88 [ 364.972297][T10355] [ 364.972302][T10355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 366.444447][T10387] bridge1: entered promiscuous mode [ 366.473878][T10387] bridge1: entered allmulticast mode [ 366.502712][T10387] team0: Port device bridge1 added [ 366.555574][T10387] bridge0: port 3(team0) entered blocking state [ 366.574480][T10387] bridge0: port 3(team0) entered disabled state [ 366.599686][T10387] team0: entered allmulticast mode [ 366.619180][T10387] team_slave_0: entered allmulticast mode [ 366.668358][T10387] team_slave_1: entered allmulticast mode [ 366.699193][T10387] team0: entered promiscuous mode [ 366.705619][T10387] team_slave_0: entered promiscuous mode [ 366.725870][T10387] team_slave_1: entered promiscuous mode [ 366.766768][T10387] bridge0: port 3(team0) entered blocking state [ 366.774344][T10387] bridge0: port 3(team0) entered forwarding state [ 366.842021][ T30] audit: type=1400 audit(1786175496.680:661): avc: denied { name_connect } for pid=10378 comm="syz.5.1273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 367.991856][ T187] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 368.163452][ T187] usb 3-1: Using ep0 maxpacket: 32 [ 368.183299][ T187] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 368.213982][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.243134][ T187] usb 3-1: config 0 descriptor?? [ 368.271595][ T187] gspca_main: sq930x-2.14.0 probing 041e:403c [ 368.855321][ T30] audit: type=1800 audit(1786175498.570:662): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1268" name="bus" dev="ramfs" ino=27489 res=0 errno=0 [ 369.298146][T10427] bridge3: entered promiscuous mode [ 369.305025][T10427] bridge3: entered allmulticast mode [ 369.313063][T10427] team0: Port device bridge3 added [ 369.330414][T10427] bridge0: port 3(team0) entered blocking state [ 369.337006][T10427] bridge0: port 3(team0) entered disabled state [ 369.405627][T10427] team0: entered allmulticast mode [ 369.461312][T10427] team_slave_0: entered allmulticast mode [ 369.477543][T10427] team_slave_1: entered allmulticast mode [ 370.020244][ T187] gspca_sq930x: ucbus_write failed -110 [ 370.025989][ T187] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 370.057174][T10427] team0: entered promiscuous mode [ 370.075877][T10427] team_slave_0: entered promiscuous mode [ 370.081861][T10427] team_slave_1: entered promiscuous mode [ 370.089651][T10427] bridge0: port 3(team0) entered blocking state [ 370.096088][T10427] bridge0: port 3(team0) entered forwarding state [ 370.213040][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1290'. [ 370.338222][ T30] audit: type=1400 audit(1786175499.954:663): avc: denied { create } for pid=10431 comm="syz.4.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.363024][T10433] netlink: 'syz.4.1290': attribute type 12 has an invalid length. [ 370.371643][T10433] netlink: 'syz.4.1290': attribute type 29 has an invalid length. [ 370.379904][ T30] audit: type=1400 audit(1786175499.973:664): avc: denied { ioctl } for pid=10431 comm="syz.4.1290" path="socket:[27644]" dev="sockfs" ino=27644 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.404992][T10433] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1290'. [ 370.684348][T10446] FAULT_INJECTION: forcing a failure. [ 370.684348][T10446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.700455][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.4.1294 Not tainted syzkaller #0 PREEMPT(full) [ 370.700482][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 370.700492][T10446] Call Trace: [ 370.700498][T10446] [ 370.700506][T10446] dump_stack_lvl+0x100/0x190 [ 370.700534][T10446] should_fail_ex.cold+0x5/0xa [ 370.700557][T10446] _copy_to_user+0x32/0xd0 [ 370.700585][T10446] simple_read_from_buffer+0xcb/0x170 [ 370.700606][T10446] proc_fail_nth_read+0x1af/0x230 [ 370.700636][T10446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.700667][T10446] ? rw_verify_area+0xce/0x6d0 [ 370.700692][T10446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.700720][T10446] vfs_read+0x1e4/0xb40 [ 370.700750][T10446] ? __pfx_vfs_read+0x10/0x10 [ 370.700776][T10446] ? __fget_files+0x215/0x3d0 [ 370.700800][T10446] ? __fget_files+0x21f/0x3d0 [ 370.700825][T10446] ksys_read+0x12a/0x250 [ 370.700841][T10446] ? __pfx_ksys_read+0x10/0x10 [ 370.700865][T10446] do_syscall_64+0x115/0x870 [ 370.700888][T10446] ? clear_bhb_loop+0x70/0xc0 [ 370.700910][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.700929][T10446] RIP: 0033:0x7f1f8115e90e [ 370.700944][T10446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.700961][T10446] RSP: 002b:00007f1f81fcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.700980][T10446] RAX: ffffffffffffffda RBX: 00007f1f81fce6c0 RCX: 00007f1f8115e90e [ 370.700991][T10446] RDX: 000000000000000f RSI: 00007f1f81fce0a0 RDI: 0000000000000004 [ 370.701001][T10446] RBP: 00007f1f81fce090 R08: 0000000000000000 R09: 0000000000000000 [ 370.701011][T10446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.701021][T10446] R13: 00007f1f81426038 R14: 00007f1f81425fa0 R15: 00007ffedc58e798 [ 370.701047][T10446] [ 371.155304][ T5695] usb 3-1: USB disconnect, device number 30 [ 375.561806][ T30] audit: type=1400 audit(1786175504.828:665): avc: denied { nlmsg_read } for pid=10501 comm="syz.4.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 375.657133][ T30] audit: type=1800 audit(1786175504.875:666): pid=10481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1301" name="bus" dev="ramfs" ino=28736 res=0 errno=0 [ 375.815977][ T29] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 375.977609][ T29] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 375.991416][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.081177][ T29] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 376.119111][ T29] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 376.146641][ T29] usb 5-1: Manufacturer: syz [ 376.226522][ T29] usb 5-1: config 0 descriptor?? [ 376.334740][ T29] rc_core: IR keymap rc-hauppauge not found [ 376.357556][ T29] Registered IR keymap rc-empty [ 376.391445][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 376.422043][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 376.493498][ T30] audit: type=1400 audit(1786175505.708:667): avc: denied { setopt } for pid=10534 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 376.522444][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 376.564600][ T29] usb 5-1: USB disconnect, device number 20 [ 377.340135][ T30] audit: type=1400 audit(1786175506.503:668): avc: denied { mounton } for pid=10541 comm="syz.0.1323" path="/proc/887/cgroup" dev="proc" ino=29809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 378.103785][ T187] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 378.119118][ T30] audit: type=1400 audit(1786175507.233:669): avc: denied { listen } for pid=10574 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.177080][ T30] audit: type=1400 audit(1786175507.279:670): avc: denied { connect } for pid=10574 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.216304][ T30] audit: type=1400 audit(1786175507.289:671): avc: denied { accept } for pid=10574 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.274707][ T187] usb 3-1: device descriptor read/64, error -71 [ 378.554478][ T187] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 378.777004][ T187] usb 3-1: device descriptor read/64, error -71 [ 378.930087][ T187] usb usb3-port1: attempt power cycle [ 379.032512][ T5702] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 379.263619][ T5702] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 379.294933][ T5702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 379.325360][ T5702] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 379.336559][ T187] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 379.377411][ T187] usb 3-1: device descriptor read/8, error -71 [ 379.427893][ T5702] usb 6-1: config 0 interface 0 has no altsetting 0 [ 379.585505][ T5702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 379.658955][ T5702] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 379.672182][ T187] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 379.700735][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.707122][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.753277][ T187] usb 3-1: device descriptor read/8, error -71 [ 379.771459][ T5702] usb 6-1: config 0 interface 0 has no altsetting 0 [ 379.933058][ T187] usb usb3-port1: unable to enumerate USB device [ 379.948031][ T5702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 380.063903][ T5702] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 380.298970][ T5702] usb 6-1: config 0 interface 0 has no altsetting 0 [ 380.395188][ T5702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 380.433860][ T5702] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 380.482650][ T5702] usb 6-1: config 0 interface 0 has no altsetting 0 [ 380.503078][ T5702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 380.523132][ T5702] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 380.545740][ T5702] usb 6-1: config 0 interface 0 has no altsetting 0 [ 380.557065][ T5702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 380.569384][ T5702] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 380.592590][ T5702] usb 6-1: config 0 interface 0 has no altsetting 0 [ 380.603008][ T5702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 380.612309][ T5702] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 380.626712][ T5702] usb 6-1: config 0 interface 0 has no altsetting 0 [ 380.636604][ T5702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 380.646700][ T5702] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 380.658197][ T5702] usb 6-1: config 0 interface 0 has no altsetting 0 [ 380.667970][ T5702] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 380.677449][ T5702] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 380.686069][ T5702] usb 6-1: Product: syz [ 380.690609][ T5702] usb 6-1: Manufacturer: syz [ 380.695266][ T5702] usb 6-1: SerialNumber: syz [ 380.709367][ T5702] usb 6-1: config 0 descriptor?? [ 380.738063][ T5702] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 380.911253][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1346'. [ 380.935041][T10600] FAULT_INJECTION: forcing a failure. [ 380.935041][T10600] name failslab, interval 1, probability 0, space 0, times 0 [ 380.957793][T10600] CPU: 1 UID: 0 PID: 10600 Comm: syz.5.1341 Not tainted syzkaller #0 PREEMPT(full) [ 380.957818][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 380.957827][T10600] Call Trace: [ 380.957833][T10600] [ 380.957841][T10600] dump_stack_lvl+0x100/0x190 [ 380.957866][T10600] should_fail_ex.cold+0x5/0xa [ 380.957887][T10600] should_failslab+0xc2/0x120 [ 380.957908][T10600] kmem_cache_alloc_noprof+0x91/0x6a0 [ 380.957922][T10600] ? do_getname+0x35/0x390 [ 380.957939][T10600] do_getname+0x35/0x390 [ 380.957954][T10600] do_sys_openat2+0xc7/0x1e0 [ 380.957970][T10600] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.957992][T10600] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 380.958016][T10600] ? __fget_files+0x21f/0x3d0 [ 380.958037][T10600] __x64_sys_openat+0x12d/0x210 [ 380.958055][T10600] ? __pfx___x64_sys_openat+0x10/0x10 [ 380.958068][T10600] ? ksys_write+0x1ac/0x250 [ 380.958082][T10600] do_syscall_64+0x115/0x870 [ 380.958096][T10600] ? clear_bhb_loop+0x70/0xc0 [ 380.958109][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.958125][T10600] RIP: 0033:0x7fa4c3d5e90e [ 380.958140][T10600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.958155][T10600] RSP: 002b:00007fa4c4c2fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.958171][T10600] RAX: ffffffffffffffda RBX: 00007fa4c4c306c0 RCX: 00007fa4c3d5e90e [ 380.958181][T10600] RDX: 0000000000000002 RSI: 00007fa4c4c2fc00 RDI: ffffffffffffff9c [ 380.958190][T10600] RBP: 00007fa4c4c30090 R08: 0000000000000000 R09: 0000000000000000 [ 380.958197][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.958203][T10600] R13: 00007fa4c4026038 R14: 00007fa4c4025fa0 R15: 00007ffe259e3728 [ 380.958217][T10600] [ 381.210128][ T30] audit: type=1400 audit(1786175510.123:672): avc: denied { setattr } for pid=10614 comm="syz.2.1348" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 381.243034][ T5702] usb 6-1: USB disconnect, device number 11 [ 381.259625][ T5702] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 381.266538][ T30] audit: type=1400 audit(1786175510.179:673): avc: denied { ioctl } for pid=10614 comm="syz.2.1348" path="socket:[28912]" dev="sockfs" ino=28912 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.652324][ T5695] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 381.739812][ T30] audit: type=1800 audit(1786175510.628:674): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1329" name="bus" dev="ramfs" ino=28891 res=0 errno=0 [ 381.835584][ T5695] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 381.853609][ T5695] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 381.882415][ T5695] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 381.922840][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.189931][T10621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.201379][T10621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.125757][T10639] 9pnet_virtio: no channels available for device syz [ 384.549742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 384.669023][ T5695] usb 5-1: USB disconnect, device number 21 [ 387.097442][T10697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10697 comm=syz.3.1371 [ 387.156340][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1371'. [ 387.466903][T10707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10707 comm=syz.4.1372 [ 387.553073][T10702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1372'. [ 387.865093][T10721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10721 comm=syz.3.1376 [ 387.865837][ T30] audit: type=1800 audit(1786175516.326:675): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1362" name="bus" dev="ramfs" ino=29020 res=0 errno=0 [ 388.371813][ T1932] block nbd0: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 120 seconds [ 388.388700][ T1932] block nbd0: Possible stuck request ffff8880275ce1c0: control (read@1024,1024B). Runtime 120 seconds [ 388.400389][ T1932] block nbd0: Possible stuck request ffff8880275ce380: control (read@2048,1024B). Runtime 120 seconds [ 388.412172][ T1932] block nbd0: Possible stuck request ffff8880275ce540: control (read@3072,1024B). Runtime 120 seconds [ 388.485907][T10721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1376'. [ 389.731176][ T30] audit: type=1400 audit(1786175518.075:676): avc: denied { read } for pid=10738 comm="syz.5.1383" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.868224][ T30] audit: type=1400 audit(1786175518.075:677): avc: denied { open } for pid=10738 comm="syz.5.1383" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 390.316592][T10745] tmpfs: Unknown parameter 'usrquota@' [ 391.414043][T10752] overlayfs: conflicting lowerdir path [ 391.555099][T10753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10753 comm=syz.0.1387 [ 391.669035][T10753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1387'. [ 393.231312][ T1209] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 393.400526][ T1209] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 393.426062][ T1209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.441047][ T1209] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.475572][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.499129][ T1209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.510685][ T1209] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.549706][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.576436][ T1209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.595971][ T1209] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.631016][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.650967][ T1209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.664467][ T1209] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.694957][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.728087][ T1209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.746700][ T1209] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.771030][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.794098][ T1209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.809318][ T1209] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.827337][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.840803][ T1209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.866028][ T1209] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.899627][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.921158][ T1209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.931354][ T1209] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.953825][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.980642][ T1209] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 393.995676][ T1209] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 394.017372][ T1209] usb 5-1: Product: syz [ 394.027597][ T1209] usb 5-1: Manufacturer: syz [ 394.041447][ T1209] usb 5-1: SerialNumber: syz [ 394.064235][ T1209] usb 5-1: config 0 descriptor?? [ 394.104906][ T1209] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 394.275311][T10800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10800 comm=syz.0.1400 [ 394.326878][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1400'. [ 394.445384][ T5695] usb 5-1: USB disconnect, device number 22 [ 394.466158][ T5695] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 396.086773][T10844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10844 comm=syz.5.1415 [ 396.123979][T10844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1415'. [ 396.734968][ T30] audit: type=1400 audit(1786175524.568:678): avc: denied { read } for pid=10853 comm="syz.5.1417" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 397.351288][T10864] overlayfs: failed to clone upperpath [ 397.670144][ T30] audit: type=1400 audit(1786175525.522:679): avc: denied { write } for pid=10871 comm="syz.0.1422" lport=40662 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 397.695887][ T30] audit: type=1400 audit(1786175525.550:680): avc: denied { listen } for pid=10871 comm="syz.0.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 397.882456][T10882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10882 comm=syz.0.1427 [ 397.896475][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1427'. [ 398.326192][T10893] FAULT_INJECTION: forcing a failure. [ 398.326192][T10893] name failslab, interval 1, probability 0, space 0, times 0 [ 398.339354][T10893] CPU: 1 UID: 0 PID: 10893 Comm: syz.0.1430 Not tainted syzkaller #0 PREEMPT(full) [ 398.339378][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 398.339388][T10893] Call Trace: [ 398.339394][T10893] [ 398.339401][T10893] dump_stack_lvl+0x100/0x190 [ 398.339428][T10893] should_fail_ex.cold+0x5/0xa [ 398.339451][T10893] should_failslab+0xc2/0x120 [ 398.339475][T10893] kmem_cache_alloc_noprof+0x91/0x6a0 [ 398.339497][T10893] ? vm_area_dup+0x27/0x8e0 [ 398.339519][T10893] vm_area_dup+0x27/0x8e0 [ 398.339537][T10893] __split_vma+0x18c/0xda0 [ 398.339554][T10893] ? is_bpf_text_address+0x8a/0x1a0 [ 398.339579][T10893] ? bpf_ksym_find+0x128/0x1c0 [ 398.339605][T10893] ? __pfx___split_vma+0x10/0x10 [ 398.339620][T10893] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 398.339645][T10893] ? unwind_get_return_address+0x59/0xa0 [ 398.339672][T10893] vms_gather_munmap_vmas+0x1d2/0x1720 [ 398.339692][T10893] ? mtree_range_walk+0x72b/0xb70 [ 398.339716][T10893] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 398.339743][T10893] ? mas_walk+0x6ef/0x9b0 [ 398.339773][T10893] __mmap_region+0x4a7/0x2db0 [ 398.339796][T10893] ? __pfx___mmap_region+0x10/0x10 [ 398.339812][T10893] ? __pfx___might_resched+0x10/0x10 [ 398.339837][T10893] ? find_held_lock+0x2b/0x80 [ 398.339858][T10893] ? process_measurement+0x4c8/0x2350 [ 398.339876][T10893] ? process_measurement+0x4c8/0x2350 [ 398.339894][T10893] ? down_write+0x146/0x1f0 [ 398.339927][T10893] ? process_measurement+0x1f4/0x2350 [ 398.339950][T10893] ? find_held_lock+0x2b/0x80 [ 398.339968][T10893] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 398.340000][T10893] ? __lock_acquire+0x49f/0x1a40 [ 398.340029][T10893] ? __lock_acquire+0x49f/0x1a40 [ 398.340053][T10893] ? find_held_lock+0x2b/0x80 [ 398.340068][T10893] ? is_bpf_text_address+0x8a/0x1a0 [ 398.340122][T10893] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 398.340151][T10893] mmap_region+0x527/0x620 [ 398.340173][T10893] ? __pfx_mmap_region+0x10/0x10 [ 398.340192][T10893] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 398.340218][T10893] ? selinux_mmap_addr+0x2b/0x110 [ 398.340241][T10893] ? bpf_lsm_mmap_addr+0x9/0x30 [ 398.340257][T10893] ? security_mmap_addr+0x71/0x1e0 [ 398.340274][T10893] ? __get_unmapped_area+0x255/0x3e0 [ 398.340301][T10893] do_mmap+0xc63/0x12f0 [ 398.340330][T10893] ? __pfx_do_mmap+0x10/0x10 [ 398.340353][T10893] ? __pfx_down_write_killable+0x10/0x10 [ 398.340383][T10893] vm_mmap_pgoff+0x29e/0x470 [ 398.340412][T10893] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 398.340433][T10893] ? __fget_files+0x215/0x3d0 [ 398.340457][T10893] ? __fget_files+0x21f/0x3d0 [ 398.340480][T10893] ksys_mmap_pgoff+0x3cb/0x610 [ 398.340506][T10893] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 398.340527][T10893] ? fput+0x79/0x100 [ 398.340548][T10893] ? ksys_write+0x1ac/0x250 [ 398.340564][T10893] ? __pfx_ksys_write+0x10/0x10 [ 398.340583][T10893] __x64_sys_mmap+0x125/0x190 [ 398.340612][T10893] do_syscall_64+0x115/0x870 [ 398.340635][T10893] ? clear_bhb_loop+0x70/0xc0 [ 398.340657][T10893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.340675][T10893] RIP: 0033:0x7feedef9e0d9 [ 398.340690][T10893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.340706][T10893] RSP: 002b:00007feedfeab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 398.340723][T10893] RAX: ffffffffffffffda RBX: 00007feedf226180 RCX: 00007feedef9e0d9 [ 398.340734][T10893] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000200000800000 [ 398.340744][T10893] RBP: 00007feedfeab090 R08: 0000000000000007 R09: 0000000000000000 [ 398.340754][T10893] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 398.340765][T10893] R13: 00007feedf226218 R14: 00007feedf226180 R15: 00007ffdccac5668 [ 398.340789][T10893] [ 399.130686][ T30] audit: type=1400 audit(1786175526.897:681): avc: denied { lock } for pid=10902 comm="syz.0.1433" path="socket:[30553]" dev="sockfs" ino=30553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 399.193431][T10856] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 399.200136][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 399.207128][T10856] Bluetooth: hci5: Opcode 0x0406 failed: -110 [ 399.600630][T10856] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 399.673208][ T5607] Bluetooth: hci6: sending frame failed (-49) [ 399.682302][ T50] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 399.953988][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 400.058285][T10917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10917 comm=syz.2.1438 [ 400.089936][T10917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1438'. [ 400.166057][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 400.177035][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 400.186870][ T24] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 400.232032][ T24] usb 5-1: config 0 has no interface number 0 [ 400.262133][ T24] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 400.394134][ T24] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 400.443077][ T24] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 11621, setting to 1024 [ 400.501979][ T24] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 401.129184][ T24] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.416741][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 401.450592][ T24] usb 5-1: string descriptor 0 read error: -71 [ 401.476365][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 401.492293][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 401.564863][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.587833][ C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20400 ms [ 401.595968][ C0] sl0: transmit timed out, driver error? [ 401.645086][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 401.674693][ T24] usb 5-1: config 0 descriptor?? [ 401.783108][ T24] usb 5-1: can't set config #0, error -71 [ 401.824329][ T24] usb 5-1: USB disconnect, device number 23 [ 401.967411][T10924] syz.0.1439 (10924) used greatest stack depth: 20216 bytes left [ 402.678463][ T3304] Bluetooth: Error in BCSP hdr checksum [ 403.446903][T10965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10965 comm=syz.4.1451 [ 403.562069][T10966] gtp0: entered promiscuous mode [ 403.567196][T10966] gtp0: entered allmulticast mode [ 403.629119][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1451'. [ 403.640411][ T5607] Bluetooth: hci5: command 0x0c1a tx timeout [ 403.959157][T10971] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1453'. [ 405.007122][ T5607] Bluetooth: hci6: command 0x1003 tx timeout [ 405.026464][ T50] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 406.392402][T10990] 9p: Bad value for 'rfdno' [ 406.917557][T11006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=11006 comm=syz.0.1463 [ 406.972320][T11006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1463'. [ 407.310566][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1465'. [ 407.340780][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1465'. [ 407.514041][T11017] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1468'. [ 407.545955][T11016] batadv1: entered promiscuous mode [ 407.590461][ T30] audit: type=1400 audit(1786175534.793:682): avc: denied { execute } for pid=11015 comm="syz.2.1467" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 407.665911][T11020] FAULT_INJECTION: forcing a failure. [ 407.665911][T11020] name failslab, interval 1, probability 0, space 0, times 0 [ 407.669264][ T30] audit: type=1400 audit(1786175534.858:683): avc: denied { read write } for pid=11015 comm="syz.2.1467" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 407.750301][ T30] audit: type=1400 audit(1786175534.858:684): avc: denied { open } for pid=11015 comm="syz.2.1467" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 407.823948][T11020] CPU: 1 UID: 0 PID: 11020 Comm: syz.2.1467 Not tainted syzkaller #0 PREEMPT(full) [ 407.823972][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 407.823983][T11020] Call Trace: [ 407.823989][T11020] [ 407.823996][T11020] dump_stack_lvl+0x100/0x190 [ 407.824022][T11020] should_fail_ex.cold+0x5/0xa [ 407.824043][T11020] should_failslab+0xc2/0x120 [ 407.824066][T11020] __kmalloc_noprof+0xfc/0x820 [ 407.824086][T11020] ? rcu_is_watching+0x12/0xc0 [ 407.824112][T11020] ? tomoyo_realpath_from_path+0xb6/0x690 [ 407.824134][T11020] tomoyo_realpath_from_path+0xb6/0x690 [ 407.824156][T11020] tomoyo_path_number_perm+0x23c/0x580 [ 407.824177][T11020] ? tomoyo_path_number_perm+0x22e/0x580 [ 407.824200][T11020] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 407.824247][T11020] ? find_held_lock+0x2b/0x80 [ 407.824262][T11020] ? __fget_files+0x215/0x3d0 [ 407.824279][T11020] ? hook_file_ioctl_common+0x140/0x440 [ 407.824296][T11020] ? __fget_files+0x215/0x3d0 [ 407.824323][T11020] ? __fget_files+0x21f/0x3d0 [ 407.824344][T11020] security_file_ioctl+0xd3/0x230 [ 407.824369][T11020] __x64_sys_ioctl+0xb7/0x210 [ 407.824397][T11020] do_syscall_64+0x115/0x870 [ 407.824419][T11020] ? clear_bhb_loop+0x70/0xc0 [ 407.824439][T11020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.824456][T11020] RIP: 0033:0x7f650959e0d9 [ 407.824471][T11020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.824486][T11020] RSP: 002b:00007f650a3d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.824503][T11020] RAX: ffffffffffffffda RBX: 00007f6509826180 RCX: 00007f650959e0d9 [ 407.824514][T11020] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000009 [ 407.824524][T11020] RBP: 00007f650a3d1090 R08: 0000000000000000 R09: 0000000000000000 [ 407.824534][T11020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.824544][T11020] R13: 00007f6509826218 R14: 00007f6509826180 R15: 00007ffeed2f9c88 [ 407.824569][T11020] [ 407.824577][T11020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.108795][T11026] FAULT_INJECTION: forcing a failure. [ 408.108795][T11026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.193899][T11026] CPU: 1 UID: 0 PID: 11026 Comm: syz.4.1470 Not tainted syzkaller #0 PREEMPT(full) [ 408.193927][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 408.193937][T11026] Call Trace: [ 408.193944][T11026] [ 408.193951][T11026] dump_stack_lvl+0x100/0x190 [ 408.193980][T11026] should_fail_ex.cold+0x5/0xa [ 408.194003][T11026] _copy_from_user+0x2e/0xd0 [ 408.194030][T11026] copy_msghdr_from_user+0x9f/0x4c0 [ 408.194050][T11026] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 408.194080][T11026] ___sys_sendmsg+0x106/0x1e0 [ 408.194100][T11026] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.194116][T11026] ? __lock_acquire+0x49f/0x1a40 [ 408.194139][T11026] ? get_pid_task+0x106/0x250 [ 408.194184][T11026] __sys_sendmsg+0x160/0x210 [ 408.194208][T11026] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.194244][T11026] do_syscall_64+0x115/0x870 [ 408.194268][T11026] ? clear_bhb_loop+0x70/0xc0 [ 408.194290][T11026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.194309][T11026] RIP: 0033:0x7f1f8119e0d9 [ 408.194325][T11026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.194341][T11026] RSP: 002b:00007f1f81fce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.194360][T11026] RAX: ffffffffffffffda RBX: 00007f1f81425fa0 RCX: 00007f1f8119e0d9 [ 408.194371][T11026] RDX: 0000000000004804 RSI: 00002000000005c0 RDI: 0000000000000003 [ 408.194382][T11026] RBP: 00007f1f81fce090 R08: 0000000000000000 R09: 0000000000000000 [ 408.194392][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.194402][T11026] R13: 00007f1f81426038 R14: 00007f1f81425fa0 R15: 00007ffedc58e798 [ 408.194427][T11026] [ 410.829809][T11046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=11046 comm=syz.4.1474 [ 410.896284][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1474'. [ 411.156114][T11054] batadv1: entered promiscuous mode [ 411.274645][ T30] audit: type=1326 audit(1786175538.254:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11063 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feedef9e0d9 code=0x0 [ 411.329946][T11065] FAULT_INJECTION: forcing a failure. [ 411.329946][T11065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.404245][T11065] CPU: 0 UID: 0 PID: 11065 Comm: syz.0.1482 Not tainted syzkaller #0 PREEMPT(full) [ 411.404272][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 411.404282][T11065] Call Trace: [ 411.404288][T11065] [ 411.404297][T11065] dump_stack_lvl+0x100/0x190 [ 411.404323][T11065] should_fail_ex.cold+0x5/0xa [ 411.404345][T11065] _copy_to_user+0x32/0xd0 [ 411.404369][T11065] simple_read_from_buffer+0xcb/0x170 [ 411.404389][T11065] proc_fail_nth_read+0x1af/0x230 [ 411.404418][T11065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.404447][T11065] ? rw_verify_area+0xce/0x6d0 [ 411.404472][T11065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.404501][T11065] vfs_read+0x1e4/0xb40 [ 411.404533][T11065] ? __pfx_vfs_read+0x10/0x10 [ 411.404561][T11065] ? __fget_files+0x215/0x3d0 [ 411.404593][T11065] ? __fget_files+0x21f/0x3d0 [ 411.404625][T11065] ksys_read+0x12a/0x250 [ 411.404644][T11065] ? __pfx_ksys_read+0x10/0x10 [ 411.404673][T11065] do_syscall_64+0x115/0x870 [ 411.404695][T11065] ? clear_bhb_loop+0x70/0xc0 [ 411.404717][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.404734][T11065] RIP: 0033:0x7feedef5e90e [ 411.404748][T11065] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 411.404765][T11065] RSP: 002b:00007feedfecbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 411.404781][T11065] RAX: ffffffffffffffda RBX: 00007feedfecc6c0 RCX: 00007feedef5e90e [ 411.404793][T11065] RDX: 000000000000000f RSI: 00007feedfecc0a0 RDI: 0000000000000003 [ 411.404803][T11065] RBP: 00007feedfecc090 R08: 0000000000000000 R09: 0000000000000000 [ 411.404813][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.404823][T11065] R13: 00007feedf226128 R14: 00007feedf226090 R15: 00007ffdccac5668 [ 411.404848][T11065] [ 412.198983][ T24] libceph: connect (1)[c::]:6789 error -101 [ 412.207353][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 412.234338][T11079] ceph: No mds server is up or the cluster is laggy [ 412.577310][T11091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1491'. [ 412.647348][T11096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=11096 comm=syz.2.1490 [ 412.683814][T11096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1490'. [ 412.987584][ T30] audit: type=1400 audit(1786175539.854:686): avc: denied { accept } for pid=11104 comm="syz.5.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 413.030552][ T5695] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 413.074643][T11121] Invalid argument reading file caps for ./file0 [ 413.082307][T11121] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 413.092833][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'. [ 413.388196][ T5695] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 413.709395][ T5794] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 413.883938][ T5794] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.911486][ T5794] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 413.920884][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.929833][ T5794] usb 6-1: Product: syz [ 413.934424][ T5794] usb 6-1: Manufacturer: syz [ 413.939318][ T5794] usb 6-1: SerialNumber: syz [ 413.990399][ T5695] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 413.995467][ T5794] usb 6-1: config 0 descriptor?? [ 414.105154][T11138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=11138 comm=syz.2.1507 [ 414.113956][ T5794] vmk80xx 6-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 414.167431][T11135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1507'. [ 414.429136][T11149] FAULT_INJECTION: forcing a failure. [ 414.429136][T11149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.443577][T11149] CPU: 1 UID: 0 PID: 11149 Comm: syz.2.1511 Not tainted syzkaller #0 PREEMPT(full) [ 414.443601][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 414.443611][T11149] Call Trace: [ 414.443617][T11149] [ 414.443624][T11149] dump_stack_lvl+0x100/0x190 [ 414.443651][T11149] should_fail_ex.cold+0x5/0xa [ 414.443674][T11149] _copy_from_user+0x2e/0xd0 [ 414.443700][T11149] io_uring_setup+0xc0/0x160 [ 414.443723][T11149] ? __pfx_io_uring_setup+0x10/0x10 [ 414.443739][T11149] ? find_held_lock+0x2b/0x80 [ 414.443749][T11149] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 414.443762][T11149] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 414.443783][T11149] ? ksys_write+0x1ac/0x250 [ 414.443793][T11149] ? __pfx_ksys_write+0x10/0x10 [ 414.443806][T11149] __x64_sys_io_uring_setup+0xc2/0x170 [ 414.443823][T11149] do_syscall_64+0x115/0x870 [ 414.443837][T11149] ? clear_bhb_loop+0x70/0xc0 [ 414.443852][T11149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.443868][T11149] RIP: 0033:0x7f650959e0d9 [ 414.443882][T11149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.443897][T11149] RSP: 002b:00007f650a412ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 414.443909][T11149] RAX: ffffffffffffffda RBX: 0000200000001088 RCX: 00007f650959e0d9 [ 414.443915][T11149] RDX: 0000200000001108 RSI: 0000200000001088 RDI: 00000000000003c9 [ 414.443922][T11149] RBP: 0000200000001080 R08: 0000000000000000 R09: 0000000000000000 [ 414.443928][T11149] R10: 0000200000001110 R11: 0000000000000206 R12: 0000200000001108 [ 414.443934][T11149] R13: 0000200000001110 R14: 00007f650a412fd8 R15: 0000000000000000 [ 414.443948][T11149] [ 414.953978][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 414.986687][T11166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1514'. [ 415.368159][ T24] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 415.661580][T11174] FAULT_INJECTION: forcing a failure. [ 415.661580][T11174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.703618][T11174] CPU: 1 UID: 0 PID: 11174 Comm: syz.0.1516 Not tainted syzkaller #0 PREEMPT(full) [ 415.703637][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 415.703643][T11174] Call Trace: [ 415.703647][T11174] [ 415.703651][T11174] dump_stack_lvl+0x100/0x190 [ 415.703669][T11174] should_fail_ex.cold+0x5/0xa [ 415.703683][T11174] _copy_to_user+0x32/0xd0 [ 415.703699][T11174] simple_read_from_buffer+0xcb/0x170 [ 415.703712][T11174] proc_fail_nth_read+0x1af/0x230 [ 415.703731][T11174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.703749][T11174] ? rw_verify_area+0xce/0x6d0 [ 415.703764][T11174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.703782][T11174] vfs_read+0x1e4/0xb40 [ 415.703800][T11174] ? __pfx_vfs_read+0x10/0x10 [ 415.703816][T11174] ? __fget_files+0x215/0x3d0 [ 415.703831][T11174] ? __fget_files+0x21f/0x3d0 [ 415.703846][T11174] ksys_read+0x12a/0x250 [ 415.703855][T11174] ? __pfx_ksys_read+0x10/0x10 [ 415.703879][T11174] do_syscall_64+0x115/0x870 [ 415.703901][T11174] ? clear_bhb_loop+0x70/0xc0 [ 415.703923][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.703939][T11174] RIP: 0033:0x7feedef5e90e [ 415.703949][T11174] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.703959][T11174] RSP: 002b:00007feedfeecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.703970][T11174] RAX: ffffffffffffffda RBX: 00007feedfeed6c0 RCX: 00007feedef5e90e [ 415.703976][T11174] RDX: 000000000000000f RSI: 00007feedfeed0a0 RDI: 0000000000000003 [ 415.703982][T11174] RBP: 00007feedfeed090 R08: 0000000000000000 R09: 0000000000000000 [ 415.703988][T11174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.703994][T11174] R13: 00007feedf226038 R14: 00007feedf225fa0 R15: 00007ffdccac5668 [ 415.704008][T11174] [ 416.074552][ T5794] usb 6-1: USB disconnect, device number 12 [ 416.197373][T11113] ceph: No mds server is up or the cluster is laggy [ 416.280181][T11183] FAULT_INJECTION: forcing a failure. [ 416.280181][T11183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.312159][T11183] CPU: 0 UID: 0 PID: 11183 Comm: syz.0.1520 Not tainted syzkaller #0 PREEMPT(full) [ 416.312185][T11183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 416.312196][T11183] Call Trace: [ 416.312201][T11183] [ 416.312208][T11183] dump_stack_lvl+0x100/0x190 [ 416.312235][T11183] should_fail_ex.cold+0x5/0xa [ 416.312258][T11183] _copy_to_user+0x32/0xd0 [ 416.312285][T11183] simple_read_from_buffer+0xcb/0x170 [ 416.312308][T11183] proc_fail_nth_read+0x1af/0x230 [ 416.312337][T11183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.312368][T11183] ? rw_verify_area+0xce/0x6d0 [ 416.312393][T11183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.312420][T11183] vfs_read+0x1e4/0xb40 [ 416.312451][T11183] ? __pfx_vfs_read+0x10/0x10 [ 416.312477][T11183] ? __fget_files+0x215/0x3d0 [ 416.312500][T11183] ? __fget_files+0x21f/0x3d0 [ 416.312525][T11183] ksys_read+0x12a/0x250 [ 416.312541][T11183] ? __pfx_ksys_read+0x10/0x10 [ 416.312563][T11183] do_syscall_64+0x115/0x870 [ 416.312586][T11183] ? clear_bhb_loop+0x70/0xc0 [ 416.312609][T11183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.312626][T11183] RIP: 0033:0x7feedef5e90e [ 416.312641][T11183] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 416.312657][T11183] RSP: 002b:00007feedfeecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.312676][T11183] RAX: ffffffffffffffda RBX: 00007feedfeed6c0 RCX: 00007feedef5e90e [ 416.312687][T11183] RDX: 000000000000000f RSI: 00007feedfeed0a0 RDI: 0000000000000003 [ 416.312698][T11183] RBP: 00007feedfeed090 R08: 0000000000000000 R09: 0000000000000000 [ 416.312708][T11183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.312719][T11183] R13: 00007feedf226038 R14: 00007feedf225fa0 R15: 00007ffdccac5668 [ 416.312742][T11183] [ 416.541483][T11187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=11187 comm=syz.2.1519 [ 416.599418][T11180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1519'. [ 416.642628][T11195] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.651056][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.767839][T11195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.786903][T11195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.802415][T11201] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1524'. [ 417.055112][ T758] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.064435][ T758] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.077781][ T758] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.100243][ T758] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.135376][ T758] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.163749][ T758] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.254701][ T3356] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.263713][ T3356] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.975760][T11217] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1528'. [ 418.000061][T11217] netlink: 'syz.5.1528': attribute type 2 has an invalid length. [ 418.024708][T11217] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1528'. [ 418.692635][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1533'. [ 418.839275][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1532'. [ 418.920952][T11230] team0: Port device team_slave_0 removed [ 419.025267][T11238] tmpfs: Unknown parameter 'usrquota@' [ 419.482496][T11241] ipt_ECN: cannot use operation on non-tcp rule [ 419.497184][T11241] netlink: 'syz.0.1536': attribute type 4 has an invalid length. [ 419.521455][T11241] netlink: 'syz.0.1536': attribute type 4 has an invalid length. [ 420.744576][ T1932] block nbd0: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 150 seconds [ 420.755586][ T1932] block nbd0: Possible stuck request ffff8880275ce1c0: control (read@1024,1024B). Runtime 150 seconds [ 420.766734][ T1932] block nbd0: Possible stuck request ffff8880275ce380: control (read@2048,1024B). Runtime 150 seconds [ 420.777884][ T1932] block nbd0: Possible stuck request ffff8880275ce540: control (read@3072,1024B). Runtime 150 seconds [ 421.389081][ T30] audit: type=1400 audit(1786175547.712:687): avc: denied { setopt } for pid=11288 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.018242][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 422.032226][T11297] netlink: 'syz.4.1554': attribute type 1 has an invalid length. [ 422.104492][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 422.131289][T11297] bond1: entered promiscuous mode [ 422.153261][T11297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.232505][ T5695] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 425.394219][T11331] nvme_fabrics: missing parameter 'transport=%s' [ 425.401883][T11331] nvme_fabrics: missing parameter 'nqn=%s' [ 425.428598][ T5695] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.458848][ T5695] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 425.491540][ T5695] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 425.512925][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 425.534773][ T5695] usb 3-1: Product: syz [ 425.547601][ T5695] usb 3-1: Manufacturer: syz [ 425.559472][ T5695] usb 3-1: SerialNumber: syz [ 425.577874][ T5695] usb 3-1: config 0 descriptor?? [ 426.349336][ T24] usb 3-1: USB disconnect, device number 35 [ 426.394186][T11346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1568'. [ 426.605825][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1570'. [ 426.727117][T11355] FAULT_INJECTION: forcing a failure. [ 426.727117][T11355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.741678][T11355] CPU: 1 UID: 0 PID: 11355 Comm: syz.0.1571 Not tainted syzkaller #0 PREEMPT(full) [ 426.741704][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 426.741714][T11355] Call Trace: [ 426.741720][T11355] [ 426.741727][T11355] dump_stack_lvl+0x100/0x190 [ 426.741753][T11355] should_fail_ex.cold+0x5/0xa [ 426.741775][T11355] _copy_from_user+0x2e/0xd0 [ 426.741799][T11355] copy_msghdr_from_user+0x9f/0x4c0 [ 426.741819][T11355] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 426.741842][T11355] ? __pfx__kstrtoull+0x10/0x10 [ 426.741863][T11355] ___sys_sendmsg+0x106/0x1e0 [ 426.741882][T11355] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.741911][T11355] ? find_held_lock+0x2b/0x80 [ 426.741944][T11355] __sys_sendmmsg+0x20c/0x440 [ 426.741970][T11355] ? __pfx___sys_sendmmsg+0x10/0x10 [ 426.741999][T11355] ? ksys_write+0x190/0x250 [ 426.742033][T11355] ? fput+0x79/0x100 [ 426.742055][T11355] ? ksys_write+0x1ac/0x250 [ 426.742070][T11355] ? __pfx_ksys_write+0x10/0x10 [ 426.742091][T11355] __x64_sys_sendmmsg+0x9c/0x100 [ 426.742113][T11355] ? lockdep_hardirqs_on+0x78/0x100 [ 426.742136][T11355] do_syscall_64+0x115/0x870 [ 426.742158][T11355] ? clear_bhb_loop+0x70/0xc0 [ 426.742180][T11355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.742198][T11355] RIP: 0033:0x7feedef9e0d9 [ 426.742213][T11355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.742230][T11355] RSP: 002b:00007feedfeed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 426.742248][T11355] RAX: ffffffffffffffda RBX: 00007feedf225fa0 RCX: 00007feedef9e0d9 [ 426.742259][T11355] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000009 [ 426.742270][T11355] RBP: 00007feedfeed090 R08: 0000000000000000 R09: 0000000000000000 [ 426.742279][T11355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.742288][T11355] R13: 00007feedf226038 R14: 00007feedf225fa0 R15: 00007ffdccac5668 [ 426.742311][T11355] [ 427.137634][T11374] tmpfs: Unknown parameter 'usrquota@' [ 428.376927][ T30] audit: type=1400 audit(1786175554.252:688): avc: denied { kexec_image_load } for pid=11392 comm="syz.0.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 428.626400][T11396] FAULT_INJECTION: forcing a failure. [ 428.626400][T11396] name failslab, interval 1, probability 0, space 0, times 0 [ 428.626437][T11396] CPU: 1 UID: 0 PID: 11396 Comm: syz.0.1582 Not tainted syzkaller #0 PREEMPT(full) [ 428.626450][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 428.626456][T11396] Call Trace: [ 428.626460][T11396] [ 428.626465][T11396] dump_stack_lvl+0x100/0x190 [ 428.626483][T11396] should_fail_ex.cold+0x5/0xa [ 428.626497][T11396] should_failslab+0xc2/0x120 [ 428.626513][T11396] kmem_cache_alloc_noprof+0x91/0x6a0 [ 428.626526][T11396] ? do_getname+0x35/0x390 [ 428.626542][T11396] do_getname+0x35/0x390 [ 428.626558][T11396] __x64_sys_renameat2+0xca/0x140 [ 428.626573][T11396] do_syscall_64+0x115/0x870 [ 428.626587][T11396] ? clear_bhb_loop+0x70/0xc0 [ 428.626600][T11396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.626611][T11396] RIP: 0033:0x7feedef9e0d9 [ 428.626620][T11396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.626631][T11396] RSP: 002b:00007feedfecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 428.626643][T11396] RAX: ffffffffffffffda RBX: 00007feedf226090 RCX: 00007feedef9e0d9 [ 428.626649][T11396] RDX: ffffffffffffff9c RSI: 0000200000000180 RDI: ffffffffffffff9c [ 428.626656][T11396] RBP: 00007feedfecc090 R08: 0000000000000002 R09: 0000000000000000 [ 428.626662][T11396] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.626668][T11396] R13: 00007feedf226128 R14: 00007feedf226090 R15: 00007ffdccac5668 [ 428.626682][T11396] [ 429.232734][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 429.369133][ T24] usb 6-1: device descriptor read/64, error -71 [ 429.431374][ T30] audit: type=1326 audit(1786175555.234:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11409 comm="syz.0.1585" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feedef9e0d9 code=0x0 [ 429.490859][ T30] audit: type=1400 audit(1786175555.299:690): avc: denied { create } for pid=11409 comm="syz.0.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 429.609831][ T30] audit: type=1400 audit(1786175555.402:691): avc: denied { mounton } for pid=11418 comm="syz.3.1589" path="/file0" dev="ramfs" ino=31584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 429.625728][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 429.641101][T11421] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 429.653041][T11421] overlayfs: failed to set xattr on upper [ 429.659666][T11421] overlayfs: ...falling back to redirect_dir=nofollow. [ 429.671809][T11421] overlayfs: ...falling back to index=off. [ 429.681987][T11421] overlayfs: ...falling back to uuid=null. [ 429.687936][T11421] overlayfs: ...falling back to xino=off. [ 429.697648][T11423] FAULT_INJECTION: forcing a failure. [ 429.697648][T11423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.711409][T11423] CPU: 0 UID: 0 PID: 11423 Comm: syz.4.1590 Not tainted syzkaller #0 PREEMPT(full) [ 429.711429][T11423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 429.711438][T11423] Call Trace: [ 429.711443][T11423] [ 429.711448][T11423] dump_stack_lvl+0x100/0x190 [ 429.711472][T11423] should_fail_ex.cold+0x5/0xa [ 429.711491][T11423] _copy_from_user+0x2e/0xd0 [ 429.711512][T11423] __sys_bpf+0x2f5/0x4e80 [ 429.711532][T11423] ? __pfx___sys_bpf+0x10/0x10 [ 429.711546][T11423] ? find_held_lock+0x2b/0x80 [ 429.711559][T11423] ? get_pid_task+0xfc/0x250 [ 429.711571][T11423] ? get_pid_task+0xfc/0x250 [ 429.711589][T11423] ? find_held_lock+0x2b/0x80 [ 429.711605][T11423] ? rcu_read_lock_any_held+0x6a/0xa0 [ 429.711619][T11423] ? find_held_lock+0x2b/0x80 [ 429.711632][T11423] ? ksys_write+0x190/0x250 [ 429.711645][T11423] ? ksys_write+0x190/0x250 [ 429.711674][T11423] ? fput+0x79/0x100 [ 429.711694][T11423] ? __x64_sys_bpf+0xce/0x140 [ 429.711708][T11423] __x64_sys_bpf+0xce/0x140 [ 429.711723][T11423] ? do_syscall_64+0x90/0x870 [ 429.711743][T11423] do_syscall_64+0x115/0x870 [ 429.711760][T11423] ? clear_bhb_loop+0x70/0xc0 [ 429.711778][T11423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.711792][T11423] RIP: 0033:0x7f1f8119e0d9 [ 429.711804][T11423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.711817][T11423] RSP: 002b:00007f1f81fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.711831][T11423] RAX: ffffffffffffffda RBX: 00007f1f81425fa0 RCX: 00007f1f8119e0d9 [ 429.711840][T11423] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 429.711848][T11423] RBP: 00007f1f81fce090 R08: 0000000000000000 R09: 0000000000000000 [ 429.711856][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.711863][T11423] R13: 00007f1f81426038 R14: 00007f1f81425fa0 R15: 00007ffedc58e798 [ 429.711883][T11423] [ 429.712847][ T30] audit: type=1400 audit(1786175555.505:692): avc: denied { mount } for pid=11418 comm="syz.3.1589" name="/" dev="overlay" ino=31584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 429.829378][ T24] usb 6-1: device descriptor read/64, error -71 [ 430.096656][ T24] usb usb6-port1: attempt power cycle [ 430.142614][ T30] audit: type=1400 audit(1786175555.908:693): avc: denied { map } for pid=11436 comm="syz.4.1595" path="/326/file0" dev="tmpfs" ino=1701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 430.165885][ T30] audit: type=1400 audit(1786175555.908:694): avc: denied { execute } for pid=11436 comm="syz.4.1595" path="/326/file0" dev="tmpfs" ino=1701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 430.302917][T11440] FAULT_INJECTION: forcing a failure. [ 430.302917][T11440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.316007][T11440] CPU: 0 UID: 0 PID: 11440 Comm: syz.4.1596 Not tainted syzkaller #0 PREEMPT(full) [ 430.316031][T11440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 430.316041][T11440] Call Trace: [ 430.316046][T11440] [ 430.316051][T11440] dump_stack_lvl+0x100/0x190 [ 430.316069][T11440] should_fail_ex.cold+0x5/0xa [ 430.316083][T11440] _copy_from_user+0x2e/0xd0 [ 430.316099][T11440] do_pages_stat+0x210/0x850 [ 430.316117][T11440] ? __lock_acquire+0x49f/0x1a40 [ 430.316133][T11440] ? __pfx_do_pages_stat+0x10/0x10 [ 430.316148][T11440] ? __lock_acquire+0x49f/0x1a40 [ 430.316170][T11440] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 430.316184][T11440] ? lockdep_hardirqs_on+0x78/0x100 [ 430.316198][T11440] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 430.316212][T11440] kernel_move_pages+0xff8/0x1530 [ 430.316231][T11440] ? __mutex_unlock_slowpath+0x35d/0x930 [ 430.316247][T11440] ? __pfx_kernel_move_pages+0x10/0x10 [ 430.316264][T11440] ? __fget_files+0x21f/0x3d0 [ 430.316278][T11440] ? fput+0x79/0x100 [ 430.316291][T11440] ? ksys_write+0x1ac/0x250 [ 430.316300][T11440] ? __pfx_ksys_write+0x10/0x10 [ 430.316312][T11440] __x64_sys_move_pages+0xe0/0x1c0 [ 430.316328][T11440] ? do_syscall_64+0x90/0x870 [ 430.316341][T11440] ? lockdep_hardirqs_on+0x78/0x100 [ 430.316355][T11440] do_syscall_64+0x115/0x870 [ 430.316368][T11440] ? clear_bhb_loop+0x70/0xc0 [ 430.316381][T11440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.316392][T11440] RIP: 0033:0x7f1f8119e0d9 [ 430.316402][T11440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.316413][T11440] RSP: 002b:00007f1f81fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 430.316425][T11440] RAX: ffffffffffffffda RBX: 00007f1f81425fa0 RCX: 00007f1f8119e0d9 [ 430.316432][T11440] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 430.316438][T11440] RBP: 00007f1f81fce090 R08: 0000200000000040 R09: 0000000000000000 [ 430.316444][T11440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.316450][T11440] R13: 00007f1f81426038 R14: 00007f1f81425fa0 R15: 00007ffedc58e798 [ 430.316463][T11440] [ 430.322006][ T5695] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 430.522017][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.555962][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.587729][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 430.609572][ T24] usb 6-1: device descriptor read/8, error -71 [ 430.690067][ T5695] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 430.700090][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.708238][ T5695] usb 3-1: Product: syz [ 430.712411][ T5695] usb 3-1: Manufacturer: syz [ 430.717045][ T5695] usb 3-1: SerialNumber: syz [ 430.723535][T11452] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 430.744483][ T29] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 430.865709][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 430.888890][ T24] usb 6-1: device descriptor read/8, error -71 [ 430.937252][T11455] xt_hashlimit: overflow, try lower: 0/0 [ 431.005560][ T24] usb usb6-port1: unable to enumerate USB device [ 431.023700][T11457] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1601'. [ 431.112828][T11458] PKCS8: Unsupported PKCS#8 version [ 431.176772][ T30] audit: type=1400 audit(1786175556.880:695): avc: denied { mounton } for pid=11433 comm="syz.2.1594" path="cgroup:[4026532796]" dev="nsfs" ino=4026532796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 431.810516][T11462] FAULT_INJECTION: forcing a failure. [ 431.810516][T11462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.831294][T11462] CPU: 1 UID: 0 PID: 11462 Comm: syz.0.1602 Not tainted syzkaller #0 PREEMPT(full) [ 431.831319][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 431.831330][T11462] Call Trace: [ 431.831335][T11462] [ 431.831342][T11462] dump_stack_lvl+0x100/0x190 [ 431.831369][T11462] should_fail_ex.cold+0x5/0xa [ 431.831392][T11462] _copy_to_user+0x32/0xd0 [ 431.831421][T11462] vhci_read+0x336/0x5b0 [ 431.831444][T11462] ? __pfx_vhci_read+0x10/0x10 [ 431.831461][T11462] ? avc_policy_seqno+0x9/0x20 [ 431.831479][T11462] ? selinux_file_permission+0x8f/0x6d0 [ 431.831506][T11462] ? __pfx_autoremove_wake_function+0x10/0x10 [ 431.831529][T11462] ? bpf_lsm_file_permission+0x9/0x10 [ 431.831561][T11462] ? security_file_permission+0x76/0x210 [ 431.831589][T11462] ? rw_verify_area+0xce/0x6d0 [ 431.831612][T11462] ? __pfx_vhci_read+0x10/0x10 [ 431.831631][T11462] vfs_read+0x1e4/0xb40 [ 431.831661][T11462] ? __pfx_vfs_read+0x10/0x10 [ 431.831683][T11462] ? find_held_lock+0x2b/0x80 [ 431.831699][T11462] ? __fget_files+0x215/0x3d0 [ 431.831716][T11462] ? __fget_files+0x215/0x3d0 [ 431.831737][T11462] ? __fget_files+0x21f/0x3d0 [ 431.831760][T11462] ksys_read+0x12a/0x250 [ 431.831776][T11462] ? __pfx_ksys_read+0x10/0x10 [ 431.831798][T11462] do_syscall_64+0x115/0x870 [ 431.831820][T11462] ? clear_bhb_loop+0x70/0xc0 [ 431.831841][T11462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.831858][T11462] RIP: 0033:0x7feedef9e0d9 [ 431.831873][T11462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.831891][T11462] RSP: 002b:00007feedfeed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.831908][T11462] RAX: ffffffffffffffda RBX: 00007feedf225fa0 RCX: 00007feedef9e0d9 [ 431.831919][T11462] RDX: 0000000000002020 RSI: 00002000000002c0 RDI: 0000000000000003 [ 431.831928][T11462] RBP: 00007feedfeed090 R08: 0000000000000000 R09: 0000000000000000 [ 431.831938][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.831948][T11462] R13: 00007feedf226038 R14: 00007feedf225fa0 R15: 00007ffdccac5668 [ 431.831971][T11462] [ 432.077897][ T29] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 432.100652][ T29] ath9k_htc: Failed to initialize the device [ 432.138826][T11474] FAULT_INJECTION: forcing a failure. [ 432.138826][T11474] name failslab, interval 1, probability 0, space 0, times 0 [ 432.151672][T11474] CPU: 1 UID: 0 PID: 11474 Comm: syz.0.1606 Not tainted syzkaller #0 PREEMPT(full) [ 432.151689][T11474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 432.151695][T11474] Call Trace: [ 432.151699][T11474] [ 432.151703][T11474] dump_stack_lvl+0x100/0x190 [ 432.151721][T11474] should_fail_ex.cold+0x5/0xa [ 432.151735][T11474] should_failslab+0xc2/0x120 [ 432.151749][T11474] kmem_cache_alloc_noprof+0x91/0x6a0 [ 432.151763][T11474] ? do_getname+0x35/0x390 [ 432.151779][T11474] do_getname+0x35/0x390 [ 432.151795][T11474] do_sys_openat2+0xc7/0x1e0 [ 432.151809][T11474] ? __pfx_do_sys_openat2+0x10/0x10 [ 432.151823][T11474] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.151839][T11474] ? __fget_files+0x21f/0x3d0 [ 432.151853][T11474] __x64_sys_openat+0x12d/0x210 [ 432.151867][T11474] ? __pfx___x64_sys_openat+0x10/0x10 [ 432.151880][T11474] ? ksys_write+0x1ac/0x250 [ 432.151894][T11474] do_syscall_64+0x115/0x870 [ 432.151908][T11474] ? clear_bhb_loop+0x70/0xc0 [ 432.151921][T11474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.151933][T11474] RIP: 0033:0x7feedef5e90e [ 432.151942][T11474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 432.151953][T11474] RSP: 002b:00007feedfeecb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 432.151964][T11474] RAX: ffffffffffffffda RBX: 00007feedfeed6c0 RCX: 00007feedef5e90e [ 432.151971][T11474] RDX: 0000000000000201 RSI: 00007feedfeecc00 RDI: ffffffffffffff9c [ 432.151977][T11474] RBP: 00007feedfeecc00 R08: 0000000000000000 R09: 0000000000000000 [ 432.151983][T11474] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 432.151989][T11474] R13: 00007feedf226038 R14: 00007feedf225fa0 R15: 00007ffdccac5668 [ 432.152003][T11474] [ 432.780606][ T29] usb 3-1: ath9k_htc: USB layer deinitialized [ 433.129073][T11494] tmpfs: Unknown parameter 'usrquota@' [ 433.530850][ T5702] usb 3-1: USB disconnect, device number 36 [ 433.992910][ T30] audit: type=1400 audit(1786175559.509:696): avc: denied { write } for pid=11505 comm="syz.4.1616" name="usb_gadget" dev="configfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 434.504581][ T30] audit: type=1400 audit(1786175559.537:697): avc: denied { add_name } for pid=11505 comm="syz.4.1616" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 434.527406][ T30] audit: type=1400 audit(1786175559.537:698): avc: denied { create } for pid=11505 comm="syz.4.1616" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 434.548481][ T30] audit: type=1400 audit(1786175559.584:699): avc: denied { read } for pid=11503 comm="syz.3.1615" name="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 434.575049][ T30] audit: type=1400 audit(1786175559.584:700): avc: denied { read open } for pid=11503 comm="syz.3.1615" path="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 434.598264][ T30] audit: type=1400 audit(1786175559.986:701): avc: denied { write } for pid=11505 comm="syz.4.1616" name="functions" dev="configfs" ino=32826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 434.714627][ T30] audit: type=1400 audit(1786175560.005:702): avc: denied { write } for pid=11505 comm="syz.4.1616" name="configs" dev="configfs" ino=32827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 434.797987][T11514] FAULT_INJECTION: forcing a failure. [ 434.797987][T11514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.811194][T11514] CPU: 1 UID: 0 PID: 11514 Comm: syz.0.1617 Not tainted syzkaller #0 PREEMPT(full) [ 434.811218][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 434.811229][T11514] Call Trace: [ 434.811235][T11514] [ 434.811242][T11514] dump_stack_lvl+0x100/0x190 [ 434.811269][T11514] should_fail_ex.cold+0x5/0xa [ 434.811292][T11514] _copy_from_user+0x2e/0xd0 [ 434.811318][T11514] copy_msghdr_from_user+0x9f/0x4c0 [ 434.811337][T11514] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 434.811359][T11514] ? __lock_acquire+0x49f/0x1a40 [ 434.811393][T11514] ___sys_sendmsg+0x106/0x1e0 [ 434.811413][T11514] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.811429][T11514] ? __lock_acquire+0x49f/0x1a40 [ 434.811450][T11514] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 434.811504][T11514] __sys_sendmsg+0x160/0x210 [ 434.811528][T11514] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.811556][T11514] ? trace_hardirqs_off+0x70/0x170 [ 434.811586][T11514] do_syscall_64+0x115/0x870 [ 434.811609][T11514] ? clear_bhb_loop+0x70/0xc0 [ 434.811631][T11514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.811649][T11514] RIP: 0033:0x7feedef9e0d9 [ 434.811664][T11514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.811681][T11514] RSP: 002b:00007feedfeab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.811700][T11514] RAX: ffffffffffffffda RBX: 00007feedf226180 RCX: 00007feedef9e0d9 [ 434.811711][T11514] RDX: 0000000020000010 RSI: 0000200000000540 RDI: 0000000000000005 [ 434.811722][T11514] RBP: 00007feedfeab090 R08: 0000000000000000 R09: 0000000000000000 [ 434.811733][T11514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.811744][T11514] R13: 00007feedf226218 R14: 00007feedf226180 R15: 00007ffdccac5668 [ 434.811768][T11514] [ 435.002097][T11509] block nbd2: shutting down sockets [ 435.266970][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'. [ 435.791512][T11538] tmpfs: Unknown parameter 'usrquota@' [ 436.337038][T11539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.680344][T11539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.694323][ T5715] IPVS: starting estimator thread 0... [ 436.851682][T11547] IPVS: using max 44 ests per chain, 105600 per kthread [ 436.912494][ T5715] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 437.587648][T11557] overlayfs: failed to clone upperpath [ 437.751482][ T30] audit: type=1400 audit(1786175563.017:703): avc: denied { write } for pid=11558 comm="syz.4.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.797647][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 437.883722][ T30] audit: type=1326 audit(1786175563.148:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.4.1627" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8119e0d9 code=0x7ffc0000 [ 437.981352][ T30] audit: type=1326 audit(1786175563.148:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.4.1627" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8119e0d9 code=0x7ffc0000 [ 438.126638][T11569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1630'. [ 438.607816][T11582] bad cache= option: noneev/vc/0 4 0 system:vtmaster [ 438.607816][T11582] rfcomm /dev/rfcomm 216 0-255 serial [ 438.607816][T11582] g_serial /dev/ttyGS 501 0-7 serial [ 438.607816][T11582] usbserial /dev/ttyUSB 188 0-511 serial [ 438.607816][T11582] acm /dev/ttyACM 166 0-255 serial [ 438.607816][T11582] dbc_serial /dev/ttyDBC 502 0-63 serial [ 438.607816][T11582] hso /dev/ttyHS 506 0-255 serial [ 438.607816][T11582] ttyprintk /dev/ttyprintk 5 3 console [ 438.607816][T11582] ttynull /dev/ttynull 236 0 console [ 438.607816][T11582] nozomi_tty /dev/noz 237 0-255 serial [ 438.607816][T11582] serial_8250 /dev/ttyS 4 64-95 serial [ 438.607816][T11582] gsmtty /dev/gsmtty 238 0-255 serial [ 438.607816][T11582] pty_slave /dev/pts 136 0-1048575 pty:slave [ 438.607816][T11582] pty_master /dev/ptm 128 0-1048575 pty:master [ 438.607816][T11582] pty_slave /dev/ttyp 3 0-255 pty:slave [ 438.607816][T11582] pty_master /dev/pty 2 0-255 pty:master [ 438.607816][T11582] unknown /dev/tty 4 1-63 console [ 438.607816][T11582] [ 438.607816][T11582] [ 438.766959][T11582] CIFS: VFS: bad cache= option: noneev/vc/0 4 0 system:vtmaster [ 438.766959][T11582] rfcomm /dev/rfcomm 216 0-255 serial [ 438.766959][T11582] g_serial /dev/ttyGS 501 0-7 serial [ 438.766959][T11582] usbserial /dev/ttyUSB 188 0-511 serial [ 438.766959][T11582] acm /dev/ttyACM 166 0-255 serial [ 438.766959][T11582] dbc_serial /dev/ttyDBC 502 0-63 serial [ 438.766959][T11582] hso /dev/ttyHS 506 0-255 serial [ 438.766959][T11582] ttyprintk /dev/ttyprintk 5 3 console [ 438.766959][T11582] ttynull /dev/ttynull 236 0 console [ 438.766959][T11582] nozomi_tty /dev/noz 237 0-255 serial [ 438.766959][T11582] serial_8250 /dev/ttyS 4 64-95 serial [ 438.766959][T11582] gsmtty /dev/gsmtty 238 0-255 serial [ 438.766959][T11582] pty_slave /dev/pts 136 0-1048575 pty:slave [ 438.766959][T11582] pty_master /dev/ptm 128 0-1048575 pty:master [ 438.766959][T11582] pty_slave /dev/ttyp 3 0-255 pty:slave [ 438.766959][T11582] pty_master /dev/pty 2 0-255 pty:master [ 438.766959][T11582] unknown /dev/tty 4 1-63 console [ 438.766959][T11582] [ 439.018342][T11595] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1638'. [ 439.045899][T11597] FAULT_INJECTION: forcing a failure. [ 439.045899][T11597] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 439.078444][T11597] CPU: 0 UID: 0 PID: 11597 Comm: syz.5.1639 Not tainted syzkaller #0 PREEMPT(full) [ 439.078470][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 439.078480][T11597] Call Trace: [ 439.078486][T11597] [ 439.078492][T11597] dump_stack_lvl+0x100/0x190 [ 439.078519][T11597] should_fail_ex.cold+0x5/0xa [ 439.078538][T11597] ? prepare_alloc_pages+0x16d/0x5f0 [ 439.078565][T11597] should_fail_alloc_page+0xeb/0x140 [ 439.078590][T11597] prepare_alloc_pages+0x1f0/0x5f0 [ 439.078619][T11597] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 439.078643][T11597] ? find_held_lock+0x2b/0x80 [ 439.078660][T11597] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 439.078685][T11597] ? __lock_acquire+0x49f/0x1a40 [ 439.078710][T11597] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 439.078732][T11597] ? __lock_acquire+0x49f/0x1a40 [ 439.078769][T11597] ? find_held_lock+0x2b/0x80 [ 439.078784][T11597] ? is_bpf_text_address+0x8a/0x1a0 [ 439.078807][T11597] ? is_bpf_text_address+0x8a/0x1a0 [ 439.078827][T11597] ? bpf_ksym_find+0x128/0x1c0 [ 439.078858][T11597] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 439.078876][T11597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 439.078898][T11597] ? policy_nodemask+0xed/0x4f0 [ 439.078923][T11597] alloc_pages_mpol+0x1fb/0x540 [ 439.078947][T11597] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 439.078976][T11597] alloc_pages_noprof+0x1a/0x160 [ 439.079001][T11597] __pud_alloc+0x3b/0x690 [ 439.079028][T11597] __handle_mm_fault+0x13ea/0x2a00 [ 439.079048][T11597] ? mt_find+0x45e/0x8e0 [ 439.079073][T11597] ? __pfx___handle_mm_fault+0x10/0x10 [ 439.079088][T11597] ? __pfx_mt_find+0x10/0x10 [ 439.079126][T11597] ? find_vma+0xbf/0x140 [ 439.079147][T11597] ? __pfx_find_vma+0x10/0x10 [ 439.079171][T11597] handle_mm_fault+0x37b/0xa30 [ 439.079194][T11597] do_user_addr_fault+0x74c/0x12f0 [ 439.079229][T11597] exc_page_fault+0x6f/0xd0 [ 439.079253][T11597] asm_exc_page_fault+0x26/0x30 [ 439.079271][T11597] RIP: 0010:__put_user_4+0xd/0x30 [ 439.079294][T11597] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 439.079311][T11597] RSP: 0018:ffffc90002fa7e08 EFLAGS: 00050206 [ 439.079326][T11597] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000000 [ 439.079337][T11597] RDX: ffff88802ff40000 RSI: ffffffff825dc831 RDI: ffffffff8c400380 [ 439.079347][T11597] RBP: 1ffff920005f4fc5 R08: 0000000000000001 R09: 00000000000001c8 [ 439.079357][T11597] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000004 [ 439.079368][T11597] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 439.079387][T11597] ? __might_fault+0x111/0x140 [ 439.079408][T11597] __sys_socketpair+0x120/0x5b0 [ 439.079430][T11597] ? __pfx___sys_socketpair+0x10/0x10 [ 439.079452][T11597] ? __pfx_ksys_write+0x10/0x10 [ 439.079473][T11597] __x64_sys_socketpair+0x96/0x100 [ 439.079492][T11597] ? lockdep_hardirqs_on+0x78/0x100 [ 439.079514][T11597] do_syscall_64+0x115/0x870 [ 439.079535][T11597] ? clear_bhb_loop+0x70/0xc0 [ 439.079557][T11597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.079574][T11597] RIP: 0033:0x7fa4c3d9e0d9 [ 439.079590][T11597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.079605][T11597] RSP: 002b:00007fa4c4c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 439.079619][T11597] RAX: ffffffffffffffda RBX: 00007fa4c4025fa0 RCX: 00007fa4c3d9e0d9 [ 439.079629][T11597] RDX: 0000000000000000 RSI: 0000000100000005 RDI: 0000000000000009 [ 439.079639][T11597] RBP: 00007fa4c4c30090 R08: 0000000000000000 R09: 0000000000000000 [ 439.079648][T11597] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.079657][T11597] R13: 00007fa4c4026038 R14: 00007fa4c4025fa0 R15: 00007ffe259e3728 [ 439.079680][T11597] [ 439.507106][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 439.516369][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 439.773806][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 439.773822][ T30] audit: type=1400 audit(1786175564.917:935): avc: denied { mounton } for pid=11619 comm="syz.4.1648" path="/337/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 439.809264][T11623] 9pnet_fd: p9_fd_create_unix (11623): problem connecting socket: ./dev: -111 [ 439.943378][ T30] audit: type=1400 audit(1786175565.076:936): avc: denied { map } for pid=11616 comm="syz.3.1647" path="pipe:[33093]" dev="pipefs" ino=33093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 439.975993][T11627] 9p: Bad value for 'wfdno' [ 440.102217][T11634] tmpfs: Unknown parameter 'usrquota@' [ 440.587939][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1651'. [ 440.609922][ T5715] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 441.055754][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 441.132948][ T5715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.189808][ T5715] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.224309][ T5715] usb 6-1: config 1 has no interface number 0 [ 441.243647][ T5715] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.266967][ T5715] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.277481][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.446485][ T5715] usb 6-1: Product: syz [ 441.450956][ T5715] usb 6-1: Manufacturer: syz [ 441.455584][ T5715] usb 6-1: SerialNumber: syz [ 441.468455][ T5715] usb 6-1: selecting invalid altsetting 1 [ 441.476720][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.486902][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.838353][T11645] tmpfs: Unknown parameter 'usrquota@' [ 442.337186][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 442.346573][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.358398][ T24] usb 5-1: config 0 descriptor?? [ 442.370107][ T24] smsusb:smsusb_probe: board id=8, interface number 0 [ 442.376977][ T24] smsusb:smsusb_probe: Device initialized with return code -19 [ 442.414104][ T5715] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 442.443652][ T5715] cdc_ncm 6-1:1.1: bind() failure [ 442.678887][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.757370][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.910516][T11668] netlink: 'syz.2.1660': attribute type 2 has an invalid length. [ 443.022004][T11668] : entered promiscuous mode [ 443.089114][ T30] audit: type=1400 audit(1786175568.013:937): avc: denied { getopt } for pid=11672 comm="syz.0.1661" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 443.789371][ T24] usb 5-1: USB disconnect, device number 24 [ 443.864574][ T30] audit: type=1400 audit(1786175568.743:938): avc: denied { lock } for pid=11684 comm="syz.4.1664" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 443.891967][ T5794] usb 6-1: USB disconnect, device number 17 [ 444.102452][ T30] audit: type=1400 audit(1786175568.967:939): avc: denied { ioctl } for pid=11686 comm="syz.4.1665" path="socket:[33917]" dev="sockfs" ino=33917 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 444.688061][ T31] INFO: task syz.1.665:8488 blocked for more than 143 seconds. [ 444.759945][ T31] Not tainted syzkaller #0 [ 444.835776][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.957056][ T31] task:syz.1.665 state:D stack:26776 pid:8488 tgid:8487 ppid:5594 task_flags:0x400140 flags:0x00080002 [ 445.109432][T11692] FAULT_INJECTION: forcing a failure. [ 445.109432][T11692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.123108][ T31] Call Trace: [ 445.126631][ T31] [ 445.129818][ T31] __schedule+0x125c/0x6730 [ 445.141685][ T31] ? __pfx___schedule+0x10/0x10 [ 445.148569][T11692] CPU: 1 UID: 0 PID: 11692 Comm: syz.0.1667 Not tainted syzkaller #0 PREEMPT(full) [ 445.148592][T11692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 445.148603][T11692] Call Trace: [ 445.148609][T11692] [ 445.148616][T11692] dump_stack_lvl+0x100/0x190 [ 445.148642][T11692] should_fail_ex.cold+0x5/0xa [ 445.148665][T11692] _copy_from_user+0x2e/0xd0 [ 445.148691][T11692] __sys_bpf+0x2f5/0x4e80 [ 445.148717][T11692] ? __pfx___sys_bpf+0x10/0x10 [ 445.148734][T11692] ? find_held_lock+0x2b/0x80 [ 445.148751][T11692] ? get_pid_task+0xfc/0x250 [ 445.148766][T11692] ? get_pid_task+0xfc/0x250 [ 445.148789][T11692] ? find_held_lock+0x2b/0x80 [ 445.148811][T11692] ? rcu_read_lock_any_held+0x6a/0xa0 [ 445.148829][T11692] ? find_held_lock+0x2b/0x80 [ 445.148844][T11692] ? ksys_write+0x190/0x250 [ 445.148860][T11692] ? ksys_write+0x190/0x250 [ 445.148896][T11692] ? fput+0x79/0x100 [ 445.148922][T11692] ? __x64_sys_bpf+0xce/0x140 [ 445.148940][T11692] __x64_sys_bpf+0xce/0x140 [ 445.148960][T11692] ? do_syscall_64+0x90/0x870 [ 445.148985][T11692] do_syscall_64+0x115/0x870 [ 445.149007][T11692] ? clear_bhb_loop+0x70/0xc0 [ 445.149029][T11692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.149046][T11692] RIP: 0033:0x7feedef9e0d9 [ 445.149062][T11692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.149081][T11692] RSP: 002b:00007feedfeed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.149099][T11692] RAX: ffffffffffffffda RBX: 00007feedf225fa0 RCX: 00007feedef9e0d9 [ 445.149110][T11692] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 445.149120][T11692] RBP: 00007feedfeed090 R08: 0000000000000000 R09: 0000000000000000 [ 445.149130][T11692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.149140][T11692] R13: 00007feedf226038 R14: 00007feedf225fa0 R15: 00007ffdccac5668 [ 445.149164][T11692] [ 445.265575][ T31] ? find_held_lock+0x2b/0x80 [ 445.370473][ T31] ? schedule+0x225/0x2c0 [ 445.376500][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.382953][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.389495][ T31] schedule+0xdd/0x2c0 [ 445.393922][ T31] schedule_preempt_disabled+0x13/0x30 [ 445.399416][ T31] __mutex_lock+0xccc/0x1bd0 [ 445.404248][ T31] ? sync_bdevs+0x153/0x480 [ 445.408786][ T31] ? __lock_acquire+0x49f/0x1a40 [ 445.413924][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 445.419088][ T31] ? iput.part.0+0x1a0/0x1050 [ 445.423773][ T31] ? sync_bdevs+0x27/0x480 [ 445.428500][ T31] ? sync_bdevs+0x153/0x480 [ 445.433025][ T31] sync_bdevs+0x153/0x480 [ 445.437385][ T31] ksys_sync+0xb0/0xf0 [ 445.441468][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 445.446337][ T31] ? do_syscall_64+0x90/0x870 [ 445.451041][ T31] __do_sys_sync+0xe/0x20 [ 445.455365][ T31] do_syscall_64+0x115/0x870 [ 445.459993][ T31] ? clear_bhb_loop+0x70/0xc0 [ 445.464829][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.470809][ T31] RIP: 0033:0x7ff38959e0d9 [ 445.475244][ T31] RSP: 002b:00007ff38a3b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 445.483775][ T31] RAX: ffffffffffffffda RBX: 00007ff389825fa0 RCX: 00007ff38959e0d9 [ 445.491842][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.499842][ T31] RBP: 00007ff389825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 445.507814][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.515827][ T31] R13: 00007ff389826038 R14: 00007ff389825fa0 R15: 00007ffe36752a18 [ 445.523859][ T31] [ 445.526885][ T31] [ 445.526885][ T31] Showing all locks held in the system: [ 445.534780][ T31] 3 locks held by rcu_exp_gp_kthr/18: [ 445.546255][ T31] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 445.557651][ T31] #1: ffff8880b8524568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 445.566449][ T31] #2: ffff88801f298a90 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xbd/0x1c90 [ 445.576243][ T31] 1 lock held by khungtaskd/31: [ 445.581368][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 445.591262][ T31] 2 locks held by getty/5353: [ 445.596020][ T31] #0: ffff8880377760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 445.605754][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 445.615872][ T31] 1 lock held by udevd/7790: [ 445.620505][ T31] #0: ffff888026f1d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 445.629919][ T31] 1 lock held by syz.1.665/8488: [ 445.634861][ T31] #0: ffff888026f1d350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 445.644306][ T31] [ 445.646622][ T31] ============================================= [ 445.646622][ T31] [ 445.655083][ T31] NMI backtrace for cpu 0 [ 445.655096][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 445.655114][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 445.655124][ T31] Call Trace: [ 445.655129][ T31] [ 445.655136][ T31] dump_stack_lvl+0x100/0x190 [ 445.655161][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 445.655183][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.655207][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 445.655230][ T31] sys_info+0x141/0x190 [ 445.655257][ T31] watchdog+0xcb1/0x1030 [ 445.655282][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 445.655304][ T31] ? __pfx_watchdog+0x10/0x10 [ 445.655327][ T31] ? __kthread_parkme+0x18c/0x230 [ 445.655357][ T31] ? kthread+0x13a/0x450 [ 445.655374][ T31] ? __pfx_watchdog+0x10/0x10 [ 445.655394][ T31] kthread+0x370/0x450 [ 445.655412][ T31] ? __pfx_kthread+0x10/0x10 [ 445.655431][ T31] ret_from_fork+0x72b/0xd50 [ 445.655457][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 445.655483][ T31] ? __switch_to+0x800/0x10f0 [ 445.655500][ T31] ? __pfx_kthread+0x10/0x10 [ 445.655518][ T31] ret_from_fork_asm+0x1a/0x30 [ 445.655554][ T31] [ 445.655561][ T31] Sending NMI from CPU 0 to CPUs 1: [ 445.780845][ C1] NMI backtrace for cpu 1 [ 445.780859][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 445.780876][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 445.780884][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 445.780906][ C1] Code: 65 8c 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 df 10 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 445.780919][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 445.780933][ C1] RAX: 000000000118462f RBX: ffff88801eac2540 RCX: ffffffff8bbac335 [ 445.780943][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8e56 RDI: ffffffff8c400380 [ 445.780951][ C1] RBP: ffffed1003d584a8 R08: 0000000000000001 R09: ffffed10170a678d [ 445.780960][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 445.780969][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 445.780978][ C1] FS: 0000000000000000(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 445.780992][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.781001][ C1] CR2: 00007fa4c3fef2f8 CR3: 0000000073a63000 CR4: 00000000003526f0 [ 445.781010][ C1] Call Trace: [ 445.781016][ C1] [ 445.781020][ C1] default_idle+0x9/0x10 [ 445.781039][ C1] default_idle_call+0x6c/0xb0 [ 445.781057][ C1] do_idle+0x3a7/0x5b0 [ 445.781077][ C1] ? __pfx_do_idle+0x10/0x10 [ 445.781098][ C1] cpu_startup_entry+0x4f/0x60 [ 445.781117][ C1] start_secondary+0x21d/0x2d0 [ 445.781135][ C1] ? __pfx_start_secondary+0x10/0x10 [ 445.781154][ C1] common_startup_64+0x13e/0x158 [ 445.781173][ C1] [ 445.946684][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 445.953528][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 445.962637][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 445.972682][ T31] Call Trace: [ 445.975947][ T31] [ 445.978859][ T31] dump_stack_lvl+0x100/0x190 [ 445.983524][ T31] vpanic+0x552/0x970 [ 445.987495][ T31] ? __pfx_vpanic+0x10/0x10 [ 445.991988][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 445.998140][ T31] panic+0xd1/0xe0 [ 446.001875][ T31] ? __pfx_panic+0x10/0x10 [ 446.006275][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 446.012412][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 446.018552][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 446.024687][ T31] ? watchdog.cold+0x1ec/0x234 [ 446.029433][ T31] ? watchdog+0xcc1/0x1030 [ 446.033837][ T31] watchdog.cold+0x1fd/0x234 [ 446.038416][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 446.044205][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.048873][ T31] ? __kthread_parkme+0x18c/0x230 [ 446.053887][ T31] ? kthread+0x13a/0x450 [ 446.058108][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.062766][ T31] kthread+0x370/0x450 [ 446.066819][ T31] ? __pfx_kthread+0x10/0x10 [ 446.071392][ T31] ret_from_fork+0x72b/0xd50 [ 446.075985][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 446.081086][ T31] ? __switch_to+0x800/0x10f0 [ 446.085760][ T31] ? __pfx_kthread+0x10/0x10 [ 446.090335][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.095096][ T31] [ 446.098298][ T31] Kernel Offset: disabled [ 446.102600][ T31] Rebooting in 86400 seconds..