last executing test programs: 2m53.089787107s ago: executing program 0 (id=1): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x118) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044801}, 0x20000014) sendto$inet(r2, 0x0, 0x0, 0x4000040, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1=0xac14142a}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000004c0)="bd", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x2, 0xfbffffff}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x7fff, 0x141800) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f00000001c0)) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000300)=""/251, &(0x7f0000000400)=0xfb) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) close(r1) 2m52.905883677s ago: executing program 0 (id=7): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x3) sched_setscheduler(r0, 0x0, &(0x7f00000001c0)=0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x34833562) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) listen(r2, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x6, 0x9b, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x1, 0x5, 0x68, 0x10, 0xe6}, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="058f0f0209"], 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x7f, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2403}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e50305d0ba8cc2c927effa70bcf1982f4f4bb0f1a124a5c8c843cb84d4defc68ba6d199c1e73ce861d458a7799d6280b04b2a30c630d565a8a8f350ed48a5678b41141884023dcdb06b8b825bec23d6dcd44a296562973e97ce46e8eb0f0e55e4707aa36983acb09a9c5f3ef59790bada1ca0a52b4feb5b802f095948fc552055d7373aeee791308355e9ebef52e8727303548fe8616bd62d024ef5ad3f200f6daf4e419ffc17b8ec13eafa5bca2731e6d6689cd58e8ed0ab715662108555c383b83f57b25486db9a351fcc3d3953067c0a60671ace09d49963cfb7eb87b571e73fc3969fa"]}]}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$packet(0x11, 0x3, 0x300) listen(r5, 0x5) socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x7, "84189d406dbc0bb37ff5e986d1e2ec7ad73be23c9612fbade39d5039562d247e"}) 2m45.890605144s ago: executing program 0 (id=19): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x301) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc8000, &(0x7f0000000100)={[{@verity_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on}, {@redirect_dir_on}], [{@uid_eq}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 2m30.720574495s ago: executing program 32 (id=19): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x301) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc8000, &(0x7f0000000100)={[{@verity_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on}, {@redirect_dir_on}], [{@uid_eq}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 13.766650652s ago: executing program 2 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000800)={0x28, 0x3, 0x0, 0x0, 0x5, 0xf, 0xffffffffffffffff}) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)="2933cb00000000000000004660aa128492500dc2cb0a3fd3582f307ec29a83f9593338e847c55cde8176607334f61b", 0x0, 0x2f}) (async) r3 = gettid() setns(0xc9, 0x0) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x4855}, 0x48000) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0), 0x0) (async) ioctl$XFS_IOC_FSBULKSTAT(r4, 0xc0205865, &(0x7f00000005c0)={&(0x7f0000000080)=0x4, 0x3c, &(0x7f0000000280)=[{}, {}, {}, {}], &(0x7f0000000580)}) (async) r5 = syz_open_procfs(r3, &(0x7f0000000000)='net/llc/core\x00') pread64(r5, &(0x7f0000001340)=""/102378, 0x18fea, 0x97) (async) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.418149603s ago: executing program 2 (id=412): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x424e, &(0x7f0000000180)={0x0, 0xa39c, 0x4, 0x20000, 0x397}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 10.239987265s ago: executing program 2 (id=414): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000400)="840100"/64) nanosleep(&(0x7f0000000480)={0x0, 0x10000000}, 0x0) setns(0xc9, 0x40000000) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000500)="0100000000000000000000000000000000000000ffff0000000000000000000000000000000000000100000000000000000000000000000000000000ffff00000000000000000000000000000000000005000000", 0x54) connect(r1, &(0x7f0000000200), 0xc) write(r1, &(0x7f0000000600)="11223344", 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x48, 0x28, 0x575ac7824d421509, 0x60bd29, 0x4, {0x0, 0x0, 0x0, r5, {0xd}, {0xffff}, {0xc, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x40) r6 = socket(0x10, 0x3, 0x0) rt_sigtimedwait(&(0x7f0000000180)={[0x2]}, &(0x7f0000000340), &(0x7f0000000440)={0x0, 0x3938700}, 0x8) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) close(r1) 9.005911057s ago: executing program 5 (id=420): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) dup2(r0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f00000002c0)) 8.919529579s ago: executing program 5 (id=421): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x181001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x6, 0x10000) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000075b2bade4dabbe6088459c690a0e6cb3a67a822e860878314d44457e9aabdd10e59a09d46b6eda5f755ee36243c1c3617db20537bc7dca4a2b05f36a5f31f543fcb489f22445f15bef5bf965e96cea33402c35be9067c8d8bc61cf57920cf6", @ANYRES16=r4, @ANYBLOB="0d0300000000000000001300000024000980080001000800000000000200740c000033000100000000000800020004000000"], 0x38}}, 0x4050) move_mount(r0, 0x0, r0, 0x0, 0x289) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='.\x00', &(0x7f00000001c0), 0x1090, 0x0) 8.569173243s ago: executing program 4 (id=423): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x7f, 0xe, 0x7ffffffe}]}) init_module(0x0, 0x17b0, 0x0) (fail_nth: 7) 8.568499628s ago: executing program 1 (id=424): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x101000, 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x88a0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r5, @ANYBLOB="050033007755a46c080034"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) sendfile(r1, r0, 0x0, 0x80) 8.518670717s ago: executing program 4 (id=425): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x3, 0xa54, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f00000000c0)=0x0) r3 = io_uring_setup(0x1777, &(0x7f0000000180)={0x0, 0x93b2, 0x2, 0x1, 0x194}) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x44000, 0x0) (async) r5 = syz_ublk_setup_io_uring(0x353b, &(0x7f0000000240)={0x0, 0xe932, 0x8, 0x2, 0x3a0}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x88080) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r0, r2, &(0x7f0000000100)={0x0, 0xb3d4, 0x80, 0x2, 0x24e}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7eb9, 0x4000, 0x1, 0x392, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4b83, 0x8000, 0x1, 0x3db, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb895, 0x20, 0x3, 0x3, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x97b1, 0x4, 0x0, 0x37d}}], 0x4, &(0x7f0000001640)={0x2e, 0x40, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, r7, '\x00', {0x4, 0xc3d, 0x0, &(0x7f0000000640)=@buf_max_buf="4932521db0d6cbf1764ca593e821dfabfcbdb72f874fea663a4688ae0fd1cb58d67a8808fba8112be2f5a6d3e468b0313cc73e167f23d0ed224ee50b2fdfc0411f401d2419c119bd28a806ba94e3542f47c43c968490915848d02f178b0645cc2a2befa923f1f50418f1f22f23b501e86162b8cf96d8c930902200adccbadfb2fef658c63ae26b2deccaf6331cbafd41036e694cf9e305a79a63d1a5375ada9eb59d87e59a11a0bcb1d4776a5db5afb2b067dc8f3cd2430a8d9a0a5d82d7f6322afc6954e2ab307c774cab182c35e6b784fb008fda8e45da581f9304262eeeba3ce252f344c3ce42a06786a30a3152f5969d667abd7eb1bf1cf158609389be290af506882dce4717a7bc16345cb62d21c5dfda62702818cecb9ae7087d7ce72870f069a5a82983b60f66e8bbd786b0e0306cde72b1342b20a0cd4739bcc9de16a1b2d2313cf32b7698ae57338b83321a36c3080a71912b36c416f8d7e6b8a64fe959d8ed7cdbf1f1e747bd40d4a9d3a62f7b91aa5b285fceacdc8e52060ee5fa1ab10e10ff5d89997f76a824c6247c3b1dd7be72ddb5b76b384b8771bb7bc80e248aabdcc7de847f4dfdebdad0974953eff700fa9623c5dd05d4a4c0ed61c33f75957405d4e60fe81fe4795c42a0907099e8e6e78cc2a19a6ddd3a6872408f238bc872229600fe262373eb89394df9f30a864a4e542691c7ad470d1b6a2b8e576188ec058105073ab9d6dcf5e4f3d05527eb1501108f3fb53619673f0cbe7c5876239b317c10d3488fc6c80e466fdc9754c330e2583462f9e88036a3380cabe4a088f9549d78e97e5676f225f156762fccdaa94a14a3bc636cae3cf60c9d907b4d88e0b8e03d83a18269aae1f8c563a30ca188603c67412b386ff5cd119f01aa21b8848c536c5341c352af72bab64022c158c78d33d04aace86482d70386659c7c3bfbd734f772df143e051b5410ab10d36120306d5836cc4f7c1476e11564747edfa123ec8c27ddcff704c775ee4924a22e640bde9d179f0b1f92461721538e66f2ae20caf7ef8d656410572370829392f4156b059ca7998af51822e414ebae91916be55ff5e3429b25b16bd119dd3fbf3d1829d7c51094d5c3345eccda25fa529040f7ad410bb602e1319374f275015476b375c0c2eb2b6723cbef3d342a1979a7b675a5267602616f2441d48b0142820603b7d34e370570afd786aeb07f8125d263d6195bba641f82e399ad39be555a28eb51e1f80c4f3c6971285de0edd3937646318abf1e5191202bcc54c17f3116002a35c07f8df40e0b8c6c3b99cde1d4938a03815f46e25a3f970d5a35a19c5f84456c685f2d37f60d16ecd4fb60946aab4e9d0c5e4a1e140dbce91fb5bc94ef0f8afc4b4b5ad4ba5d4a0bd65be864d6b03e646868379715b343586b935c706524658cd5816327d9ecd5ccd2eb7ea61d3dd0dc498a1bf49775cfe9ba2d67dba6918c020824d2e9173fe59fcc945953d43343ec10e7ae30794e2076fe5c4bbfe33877ccb94fdc79933d4aa4d4041600cac6984975bee80e9e52ad043c3728349fc4f50b9c37ee23496e8b8e6c63e263ca6f0b85bcda89f0dc4ca4bb797e05a76c3ad473665811f07d87c2ef5729923479f5596862b4419b150478b7973a774297c4599f65ecb906d2c8c364d900a620ba1054c8aea9fde36a01307ec2b2c999bb7ddd9ea73ec3b2919735a4aaebb1ef253f3d25a9ec00b0a0a0ef0eb1379e6c36f30c8b044e89838e09dbcd882160dd4c739cdd699f8c1d2669cf04c1167daabd9d3e7234b2141ffb988b47ded12fd9ab60fb998448607865df072adc7dfc51083d6e3d3580566b71acecb1fe1ea1e6ba47b5788e3002a1e01b075b8e16b9fb81383f21892886ba4f0b95379751ebb1b2925942c3a8dd41dda4946d145697a8f4df329ee51d577203b775911928e6b9c60ba954017f7a8a49fada5ca84aa2a2a0e399e34acd6e5eb410aa71959f795737ad3181b4720f14d2af1a36e2cd2be6ab2c6b192a4de0a8bee0f3b5ecc253f1e94e39ffc6dcef1a76f60998efdb422826bdc72716e5af6e924187de2e4233ee6b1e54f7fa61a2e3357431e2dd69400b1711911e1eb53b3d1911c84cee9f0b32e37d24964b22a01ba3b9d62f8f085377dd77a95c5cf6939b28b3d60b9e8ff7513d48a1bfd27a956f5e93a5e67d806d8e5df0cd64f8b17f57857ccbdb263c1266fd57da7a9b809e6a782e950b66bbb291f6444400c3e904bcfe2b26deb6777b8facc09da78ac1bf9c6d936400cbf4c250d6171f2ec326d0b62db370675993fdb4e6c4bc7b280112eee8d3a02fbe81038c4b520db179d36891ca2e9aa6f1029e77d5e4cfa9cbf9fde7add587a9cde05e5d90af79ebd190eba3511d54ee3af8cdf5ad4475e1d8135c7efb6be530ec14f7f2b5df59d536b5003889018476fcd23e0d9732428401a0d68cba37fc005d34eaa0294092ba4f0c52206af763880c6f9db9017179f3d35f51514191c9608766e1a2f63d1c8a83042972e3671eb02f35280d88323f57065adafd9c593199bd6728b3ce1be748fd952d2606943750d12e6f93ce9b167651f9611ff7748a7d13c4a9485909e3dfc925032d7453fb1d2dc798ff049222ada04f072a26ce30e8f43321382cea32d15a9fe0ba34f9db43d1facd6db1d2b0a376249e369535dd4de455e405f15502f1fc7f6c839ad4859f4e6067bed400ca9ce17b7549add28928bcaafd1faf150659d251b34cf3420d1efbb99210efe9f23c94aed2c947e58b6944d2a1c2d5dfe25bfe2f86603671fdfe58d2cebdfe5e345b54b13f4933635e2dc19f74dff031168d5170ff8b9c65a8929fd78c214d5ac2462c5f2025d0842e4556385649e66c8aa340b30810323547b523da57cbf0303ce366721fa069ec000d8b725e4ecb5059563db6c96d3f23385fdcf15694d12212e1a9a078629a377715b9123a86a45fba342c8d367b31c0c1791c1ef78dc57da02e026940a7e64b838a25803e7676aeee7fa433eb30defcd9ce77ec845e80ceaa054cf00e3f4edadf58c33e892b5e7f37a855f67b24b261110389f7bce25cccd09d719be9e4b130e0ec5a01f25d0218018d85e5377474d4b0409f3739aadf4cbd901a91ee21e05743d812bd0a69270e18b5636464ff7cb84ce5fc41868887915b0b5d101e6e33d6a1bc805c5f19100b0fad2ebd420978cd094f2f5f164ac3bfdae1864e58ad61230e7673fe341cd1c74693d7180271422473693e232d038d5b4d63b69d32047c176533c91bcd0caa4a05739867aba8a1ee63fddfca7ff6810dd45af7134283a43b249594c6927fd464dd62eefcc1e259fec0838557cc3bf71d528d937ddf780dfb2148dffec1edcae20723332bdb230f04fbb3c04d8dc6a8b605f5da7e3187890f969636a0a0537a6816a89a791715d3852bb18732d257c674f689a2b71673993dde24c8334015ec3fab99c374c85e38ad4d0eb3f300f7ef25c6a1dd8c105d42a4bca573c0706694121e182ffb4c231abb9a14d3e02abb3bd8b28fda029bfa355a05313be14777dd8982588bc994b943b976ef1ce71b341adaa7f128a406f0dc02f6c6f92d7fc65fc919ac333a9b4bef6e42092f050f2306c304da41a9e14a57ce8eb83be0e602e370b74c933dfd68757916be0598d8cb6adfa55a24d7b1de0cff1b249c53a97027979b26cbf69fdfe94dcdc46c20e8e0da96aa09c20e219167874317bcdba1b2a882c193419b8e11ad54b0442336cab21e07c56e9652cb44100f1287261e9c5816020c42aba3ec70aac16f72878c3472768c49c04813dbb14d4b9be4c3c1b876b781a92217d93248345ab7fb43bfc105928d6ead02031cafa9bc38738ef16a77a5dea46ad5c8bcee5a1b723492f81ff1353f176a083e3a9afdfa135e535c0b893b7381078556264d5c465d8f28f7c3a344ad27f3f374ae46e924a5d0f10f451e4d1c682cd760187ac48c4295fe33d75f121c5a333e215b7ca3324755c7396f37321e79673fa6a95e02a4b38af9c1686d933f7c145db1ab313f1635961b65b2e9d77a8cd41766e129ac164e4a84b29e6d2f0178227523a30003f8c340c2a03dbaa720298222c48064b6daf0823ae9df2e0ef6e5783073a00a2813887a5ff14375fc237a5dd641fb6d32740cf151a5141e66eb5c0356ed2791abce570339190b08d653ef38bd0af635b00ecf203c8ffdb0940a0e3ca0f651404355a396f905ad8be89ab1a1d9de272bb4a470f9c11cb8122daad47ee9065046fef0b1a9d4324c99594ce7b2e31f530e2028ab9b9025b3d2fd31fc23be9bcac08b3a6b26c3680cb0e3ef46ea68bcd2e7f4373259c4f206354313bd46b9e7bd5a1f8132b6566f9a6c713134892f8a4476373e471a35f2f5ab0fe4ad546adaa1deb808d6ef6b413946f6169707def16befeab506527e3699ccc37e6bb5791d57be2ca2dc48770379fd3649aeab5c106e936f4502f246d2c4437eabfb6b2c030fd83344922b6221ecc29fc54278b52edc15833fd28e1238bcad54a27d9e358820076c4e99a945fb153bb5021127faf5cd10de7992c32422fae69f815db146de9b5dbcf4258bfbdd41a532569e4fd82e07fe94f499c7cdc4b7cb92ad0947f4a523383bc62c96175e75cf143aed7f21d576fa076d62393508a5c226a30c30c6bfd1a059bb0d6e5c499c6b53a65314fcf1e3fe1b4236afe5846e9f3d519d49ee846b7ca42cabc14b2e69ab14e77e920f76d6177592b6c5ae7560cfab899b3dc8692542704b9c9a76417b301e90eb33aa9028fd251697ffe62fe57df31e0a8b7c8c3855139086f861c454e6e82cab421591981b4b6e38db7c4e638c1a917ceccdb88d12c6b69ac92cb509f662f8133a12d662127de7cf8cedcb8e7f021bda9f2a615f1b2cb8d6edf3c5219327e077940517b1cc1dbb981e5ce468453d2e24874b9df6d008a1ba556461dca106c9037f76c7435238ad766074da0c509b17cecfc3783830121c6ef9b81139b4ef0d0bdf88ef1256ac47b87d3c2c7cdbba713e436d486622c95e719c5341117b1615dbca3abcf481af29dc4afd5af9307562e3f40a4d312753bed92fb49310573aeff3762715b01f2014256ddd03409756e86667995fbcd507273b8af8fa0fba1b923b7f5d1b78466b1be62dc02a1378611bb4aace7451b338903c5a68f2e0c86d3a0872484f742c8d46e94aea68f997faa673642ad3ecb79d7d248e4a17bbd4bd4e1bab77122ec4510dd1d0bb216019da104c7d15b3b51a1a54d63bcd261185969923b89195504ad1320a54248d92e5129296f0b25cd5dd6ff9041022d5e19f8eecda8198ba3165150a94012728a55a4c0134308385a07697cbd8d981619dab15de9083fd9f8ebc6fe4aa813174be8e576cab4167a8f67fa445f1fe79526831decc9938393a58449c5b2295be4d27b1fc73c622a8d51ab175d4b4d7283fff2c8613b2bc22114cc61bed85a7f46b5fa2054336e71c4a4debe64dab3dcb52d255d14468873c105ac3426a6170939dbd355d28c2013f2ebcd202798943765c95671fb52fb09bb2726cf66e4022ded7921e1a0a84f6f7b3cb18593807347853140e7f783982da00ea62495343d304abe6665d588ce3159d549e10eda8471136517fa9c643f60d3eb1da30b253bc6ab2a405a3a0259f45c9eb64da572a6c1878737b12bdd5ab824b78204ca7d5805f8561fb300bd9a73a25ccf71cb0d3c0b6311f08525f3c4607e5981e5d6657c5a50fe09fc7f07dbae55dbbba7445d19e475208e66fce01b0581975133b3d634de2e197a6"}}, &(0x7f00000016c0)) getdents64(r6, &(0x7f0000001700)=""/60, 0x3c) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r9, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, r10, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x60040084) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x68, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$bt_hci(r11, 0x0, 0x2, &(0x7f00000019c0)=""/157, &(0x7f0000001a80)=0x9d) (async) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0xa) (async) r12 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000001ac0)=0x62) (async) ioctl$VT_ACTIVATE(r1, 0x5606, 0xffffffffffff7fff) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000001b00)={0x0, 0x40, 0x400, 0xa30a}, &(0x7f0000001b40)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001b80)={r13, 0xfffffffc}, &(0x7f0000001bc0)=0x8) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x2c, r10, 0x2906029089d1c1e3, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c840}, 0x0) (async) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, &(0x7f0000001d80)={&(0x7f0000001d00)='nl80211\x00', &(0x7f0000001d40)='syz0\x00', 0xbd}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x14, 0xa, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}}, 0x40000) (async) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001ec0)={'veth0_vlan\x00', {0x2, 0x4e21, @remote}}) bind$inet(r6, &(0x7f0000001f00)={0x2, 0x4e24, @remote}, 0x10) (async) r14 = syz_usb_connect$uac2(0x5, 0x11a, &(0x7f0000001f40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x3, 0x1, 0x9, 0x10, 0xfa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0xff, 0x53, 0x74}, [@extension_unit={0xc, 0x24, 0x9, 0x3, 0x1, 0x81, "e778bef0f4"}, @processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x2, 0x3]}, @effect_unit={0x13, 0x24, 0x7, 0x4, 0x3, 0x2, [0x2, 0x1, 0x1, 0x0, 0x2, 0x1]}, @extension_unit={0x9, 0x24, 0x9, 0x5, 0x9, 0x5, "7bdc"}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x302, 0xd, 0x2, 0x3, 0x7, 0x1}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, [0x5, 0xc, 0x9, 0xff]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x6, 0x1, 0xd9, 0x2}, @as_header={0x10, 0x24, 0x1, 0x5, 0x3, 0x1, 0x3, 0x2, 0x2, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xc1, 0xff, {0x8, 0x25, 0x1, 0x0, 0xc, 0x84, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0x1, 0x7}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3ff, 0x4, 0x2, 'y'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfa, 0x0, 0x0, 0x4}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x52, 0x4, 0x8, 0x9, "598993", "e1f29e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x2, 0x4, 0xd, "bbaf3953bd6608fe5e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x6f, 0x3, {0x8, 0x25, 0x1, 0x80, 0x30, 0x3, 0x5}}}}}}}}]}}, &(0x7f0000002140)={0xa, &(0x7f0000002080)={0xa, 0x6, 0x201, 0x9, 0x6, 0x7, 0x20, 0xe}, 0x37, &(0x7f00000020c0)={0x5, 0xf, 0x37, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8d, 0x7, 0x8, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d0adc8aeb90bf905f6bda77211f6733a"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xd1, 0x1, 0x505, 0xf00, 0x100, [0xff00af]}]}, 0x1, [{0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x4c50}}]}) syz_usb_disconnect(r14) 8.475372304s ago: executing program 1 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = memfd_secret(0x0) recvfrom$llc(r5, &(0x7f0000000140)=""/60, 0x3c, 0x10000, &(0x7f0000000180)={0x1a, 0x338, 0xff, 0x9, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x2, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xfdef) 8.32625506s ago: executing program 5 (id=427): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = syz_io_uring_setup(0x363, &(0x7f0000000280)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000f4, 0x0, 0x81}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r4, 0x4) r8 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f00000000c0)=0xd, 0x4) 8.325409278s ago: executing program 1 (id=428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [0x0, 0x0, 0xff], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {0xff}, 0x89, 0xfc}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a2e2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @common=@ipv6header={{0x28}, {0x74, 0x4a}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x91, 0x5, 'syz0\x00', {0x6}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0x6, 0x6, 0xff, 0x7, 0x10c0, 0x5}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x3, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) arch_prctl$ARCH_SET_GS(0x1001, 0x0) syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1509, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x40, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0x204aed9fa89b51ee, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffff, 0x1, 0x15, 0x3}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x404, 0xfc, 0x2, 0x8b, 0x7, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0xf9, 0xeb, 0x4, 0x7}, @as_header={0x10, 0x24, 0x1, 0x2, 0xf1, 0x1, 0x0, 0x3, 0x7e2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0xff, 0xf, {0x8, 0x25, 0x1, 0x80, 0x33, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x40, 0x2, {0x8, 0x25, 0x1, 0x2, 0x30, 0x9, 0x5}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x4000000080000001, 0x0, 0x6, 0x0, 0x10, 0xffffffff, 0x0, 0x80000001, 0x0, 0x0, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd632}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5d}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x4) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r4, &(0x7f0000fb0000/0x1000)=nil, 0xb000) shmctl$IPC_RMID(r4, 0x0) 8.195826139s ago: executing program 5 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x24, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x2}]}]}, 0x24}}, 0x0) (fail_nth: 1) 7.828387465s ago: executing program 5 (id=430): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x5c, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20080844}, 0x4044004) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2b, 0x8000a, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8], 0x0, 0x0}, 0x94) 6.854933939s ago: executing program 3 (id=433): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xec}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000280)=0x4, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x1d, r1, 0x2, {0x0, 0xec}, 0x2}, 0x18, &(0x7f0000000180)={0x0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00030062"], 0xc041) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/asound/devices\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x11) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffff7, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0xffff8001, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x2003], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6.70189326s ago: executing program 4 (id=434): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x2200, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x10, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x14088, 0x2, 0x10000002, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2, 0x10040000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x3, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x3, 0x367, 0x0, r3}}], 0x1, &(0x7f0000000400)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfffc, 0x4, 0x0, 0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000280)={0x3}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r5, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) write(r5, &(0x7f0000000100)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 6.573253468s ago: executing program 1 (id=435): r0 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x860}}, {0x77, &(0x7f0000000980)=@string={0x77, 0x3, "8eb3109e03f606a9f672e024788839770a8503890d585d143dbfacf1d4eec27b46e28e9b868d49f4d5cb10fba33e6e2e3b70a61dfb8bd41c2977c6b886a2a4c7490a3916f463ed0cc94a8666aa13a0f23cc2ac6a7f51c9227402e18b214a964106d1e433341639b560e51a994aa2ac3838eaabd5c2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3048}}, {0xe3, &(0x7f0000000480)=@string={0xe3, 0x3, "60fd8d44f72829897cda6789018c3baf9061f17b87199de0668bdbab9cafac3c440b899845c5e9fde769259e06c75e9abe4b7900abd6bf4dfdc09f1841af7a24510f9ee3b43de6fc3b19cdd1d4351283d0406107b74dcdf1904011d52646fbcde3a7f7c52fdc1f9836850a3c9fb43174b563b4467bf5b7aaaced5673e32eb27cd770b3bda095a69bd910104641a4abf2c25f75f8d8c405dc0300871ac635d844a109eb98d37c28c1ec3c2aeeeb360618186f06ce03b9f21d37b37ab13d06fca2490c0df07c0dd17712ba1f0fb36a94d49f97c90ef93cebb3364f6262ba6d44e448"}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x97, @string={0x97, 0x3, "ec1407486430e6b509cf07db9d7ec3cbfd3abbd27fa0b76b82b792d9a678c0ff4db9060945f6620e7e6754c7a0542a32a89b7487282ab030ec30a883225a66c1d68b08781e496f1b1fb988307cacfee998f85341561703b32fa7e122aa2fca15658bdd1af2506f6c62d74f84560512cc5bcba1db1b97faf10b540467a42e2eec8fc7fb2228b73e30cf7c82156c0133e8d4e0a50f60"}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000002d80)={0x14, 0x0, &(0x7f0000002d40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000180)) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r3, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000240)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008004}, 0x20040815) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000800)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x83c0550b, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) unshare(0x26020480) r7 = socket$packet(0x11, 0x2, 0x300) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)=""/137, 0x89}, {&(0x7f0000000700)=""/119, 0x77}, {0x0}, {&(0x7f0000000840)=""/145, 0x91}], 0x4}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x2}) 6.274209803s ago: executing program 2 (id=436): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x20, 0x4014}, 0x2c0408d0) (fail_nth: 1) 4.489826733s ago: executing program 2 (id=437): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) r1 = fcntl$dupfd(r0, 0x406, r0) (rerun: 64) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0xa88, 0x30}, 0x2c) (async) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wlc\x00', 0x23, 0x81, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async, rerun: 32) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) (async) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)={[{@dyn}]}) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) (rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) (async, rerun: 32) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) (rerun: 32) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x120c002, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = gettid() (async) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) tkill(r5, 0x4) (async, rerun: 64) shutdown(r0, 0x1) (rerun: 64) 4.488722754s ago: executing program 3 (id=438): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) msgget$private(0x0, 0x240) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x31}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000240)=0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d08000640ffffff00080003"], 0xc0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a1ab000000000200000032"], 0x30}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000095) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.400831208s ago: executing program 5 (id=439): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00004fb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x33, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000f5e000/0x2000)=nil, 0x2000, 0x3000007, 0x38011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0xc004080) r3 = userfaultfd(0x80001) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.353826237s ago: executing program 4 (id=440): r0 = epoll_create1(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0x1f, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}, 0x6}, 0x1c, 0x0}}], 0x1, 0x240800d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300"], 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000002100)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000900)=[{&(0x7f00000006c0)="d4219a64478216eed02d7ab8dc62cddbdee5de1c951b82cdf7f2f86f4686bd5e6f18ce57d8835306f7efbac4fce640b0e61b6bf129c7d54b54397bfbfcd02b0d42764d96242d234a8401ccf0217b910c8792e69a5fe457fc032da49e109ab82e13", 0x61}, {&(0x7f0000000740)="375101514c791939193da592f2938ce9cbca7220fa6434c4e62e281eb0bb26ea47b06a62a687e3d2b0e62349c7243edf35810a0114fada98aecc89890283d00906730885a47c519ae49e10c0bdbe0fdaddb7b392b9be2ef1d8b051a775", 0x5d}, {&(0x7f00000007c0)="1cb39deede8a3cfab5f91ff3b3b52c9b090c0f8c5845c949b8c869c2c9903c06fecf8c6500aa387db5b2bf6801335e6e6fae674462344d70f04b7e", 0x3b}, {&(0x7f0000000800)="f9c867babf17be45aa41c4d8f683ab4880007a92424259749ad0839e53db4b0b146756947dd88b92b2a2006df796c735a4f7f9bf3c8b0a7da7cb8985565116f30042f4c88fd3a131b484cac3bb86f3606a439da0d889479b202181dfa606c5e397d579e5dbe8a73f500dcbf6ea6cc8ea523b0d956d1eeb2ec3b6b2e6dcaab34e43659ddee1469f08d856372a23efc0ea6b24995953f785324c223de23c7bf7f7ffa3661c887fc24e3db1d348d427eb16b0ec34466c8b6298fdb5bbaf02983e9e4b3943050a81ff4cae7171151f3b10b1f113d62d6f8439791480da0545f85b0b6228eca0acd183a61eb07480837ca1f4d72c1ce807a6d756634e439b8d9960", 0xff}], 0x4, &(0x7f0000000940)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xfffffffd}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}], 0x80, 0x4000004}, {&(0x7f00000009c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000a00)="b07ee0da83c9bed9dd1fc9a3069ffbb0f9dab47915cf5cb2254b2490a88ec5b2c6b48ea9b7c254fd844ebb85eba3ff2cf1fbb2d3dba0af979388555a8496422bbf619b640da6f2c09cf397c3c51f3f6c2c7329357f1a03d427623866650e809052bda4d7f852226d9eceeec30edd915e88be198cad66ed4d4c8c76e77dfa74e73d3697b9057bd116f36142f42ccb871603b52605e6331094a09933cff6369b38c34090150c1d4cc4", 0xa8}, {&(0x7f0000000ac0)="0c1d9aeb98aaf7a1c1cc5d3ecd7cfd0a85ff71fedda0256dab2328f148ec535b4b577085332ef5a9d12e0c80fbb7cbe829966e5fd2232b129fdffa17701dd1f3b449becdbce0e88c97c9cda07f18a1", 0x4f}, {&(0x7f0000000b40)="5de4aa", 0x3}, {&(0x7f0000000b80)="c746618b9faccce8427c4d9d9a5717c2420ed139af245b1160a20067626bb8f172bfbf11218a1bcecfd8288f404408f6e81e5192d89bd82a0690ff0b56c16ed43d658e43af048b1f1c8f298e3ceafceca6e2b4727b45f345aeb7c562", 0x5c}, {&(0x7f0000000c00)="47cb67349fcd97e2e92cc7d0511e302b47ec731974a34d45d5b3a7a5b20b4363a7c1ccfd73b84436f83fd2d036817cab5483e7c93284fdd00bf6426f3025f4e4fcc50dbe8a48bfc488f3ba625b359217381548584089a6a37a46041c3d51b533766310090f12155025f69baf5e33240cb0d04420deadf8eeec9ae9a2a9c8393977a81edc7ef111d706f8db878235ff92af4c18f47bf27562ca4fc0ace6ba5c8db9103ee87e14ff9b1da32edb8a009373c7341eaaafce3a3a6549ed", 0xbb}, {&(0x7f0000000cc0)="b16f87a0d131d8b3efd953f8845870f5862b0eb08f79e4c2218bae60018afc6740848dfa3fe4a1ca170b4b4be43d9b9f4d8809fd4a50884f2f45d40e4cb9d23ebacad6706fa18e4f9a0f964b4db3765b0fe9355c9bc3e6c418bc7292ba8c8317d3bfd4feaec716f8f208cac057a6d2a406f53782627b94074199907dd614fcf5e318106229d989ce779493d01582dc5c981e1a7cdf1192b1abf72aee023bf2adf236ee31686ac6de5895668823957bc60fcfbf24cafd565b9f8c38a3f00f979c6abcc5b54c1636d10e3ae3186570b9ac7e5f3e5ddb2f711e8b45a7fd2f76c0", 0xdf}, {&(0x7f0000000dc0)="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", 0x1000}], 0x7, 0x0, 0x0, 0x60}, {&(0x7f0000001e40)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000020c0), 0x0, 0x0, 0x0, 0x48894}], 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x2b}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r5, 0x6248, 0x7721, 0x94, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000021c0), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000022c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x5c, r6, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x51}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0xc0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000040c0)={0x2020}, 0x2020) 2.917978501s ago: executing program 1 (id=441): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x29ae, 0x80000}) 2.837658376s ago: executing program 3 (id=442): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) dup2(r1, r0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 2.725740663s ago: executing program 3 (id=443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) syz_open_dev$media(&(0x7f0000000340), 0x387, 0x54b780) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, 0x0, 0x4044983) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x109002, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x8, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x4000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x7}, 0x0) sendmsg$kcm(r5, &(0x7f0000000700)={0x0, 0x7c2181f960591978, &(0x7f0000000680), 0x3}, 0x20000004) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x52793b65bbe28704) 1.959761188s ago: executing program 3 (id=444): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x4000000, 0x0, 0x0, 0x0, 0xe}, 0x18, 0x0) r0 = socket(0x2, 0x80805, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @ax25={0x3, @default, 0x2}, @nfc={0x27, r1, 0x1, 0x5}, @llc={0x1a, 0x1, 0x3, 0x5, 0x4, 0x4b, @multicast}, 0x401, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)='dvmrp0\x00', 0x4, 0x0, 0x6}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) inotify_init1(0x80000) 1.8017383s ago: executing program 3 (id=445): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x222080, 0x0) (async) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x222080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x13) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) file_getattr(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x18, 0x1000) (async) file_getattr(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x18, 0x1000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r3, 0x8}, 0x8) listen(r0, 0xfffffffc) (async) listen(r0, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) (async) sendto$inet(r8, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 1.389350696s ago: executing program 4 (id=446): open_tree(0xffffffffffffffff, &(0x7f0000000000)='./tracing\x00', 0x81800) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xca}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) 130.445769ms ago: executing program 4 (id=447): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000040000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x9, 0xfffffffffffffff7, 0x80000000, 0x100000001]}, &(0x7f0000000080)=0x78) (fail_nth: 1) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x2) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000480)) 38.049563ms ago: executing program 1 (id=448): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 0s ago: executing program 2 (id=449): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000208510000003000000180000000000000000000000000000019500000000000000010100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffffeffe85000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000146000/0x2000)=nil, 0x2000, 0xb, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000146000/0x2000)=nil, 0x2000, 0xb, 0x28011, r0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@loopback, @initdev}, &(0x7f0000000240)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000540)={&(0x7f00000003c0)="892876767f79f7b8c2946fd15360319eaf53ade8b0c85cf174b34d7b1cd4f188d93dc2ed1d7b8267c8caf65cb7cadfcf0f09e7d1e462d992dcb987523c0b357fa15e31dc73cb01428bf74d58fc816ac35422a4c1e8a15c04f57b0966cfc739078f679cb52bc896a337e2a42b40284dd9bf11aecb690535f7cbefc5047dcc3952c0d7e94098a52cde133331fd63d605c2a66e9c73b4a2bb25281cb9b1a0a05d1e78b847599f654bbe8b152b217a77b8c7e3cc39d0b90b97f683ef79233e1a4b56b30a2d40fa37844696a6ecfc9da306dbfa7fc7833b1ad7167a959ab09334844183fd0ffe880eaf903623cd36cbe07d45ee7d9737b2b469e8", 0xf8}) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) (async) r2 = getpgrp(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x60}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x4000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x854) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x60}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x4000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x854) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) (async) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): 28 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.520924][ T6349] RAX: ffffffffffffffda RBX: 00007fd2a9a25fa0 RCX: 00007fd2a979e159 [ 139.520932][ T6349] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 139.520939][ T6349] RBP: 00007fd2aa621090 R08: 0000000000000000 R09: 0000000000000000 [ 139.520946][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.520952][ T6349] R13: 00007fd2a9a26038 R14: 00007fd2a9a25fa0 R15: 00007ffd4cbca968 [ 139.520968][ T6349] [ 140.051037][ T6356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32798 sclass=netlink_route_socket pid=6356 comm=syz.3.161 [ 140.134801][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 140.394207][ T31] audit: type=1400 audit(1791057040.293:461): avc: denied { ioctl } for pid=6362 comm="syz.5.164" path="socket:[12675]" dev="sockfs" ino=12675 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.433026][ T6364] netlink: 'syz.5.164': attribute type 8 has an invalid length. [ 140.433039][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.164'. [ 140.960930][ T6369] binder: 6365:6369 ioctl 4018620d 0 returned -22 [ 140.963346][ T6369] binder: 6365:6369 ioctl c018937b 0 returned -22 [ 141.037115][ T31] audit: type=1400 audit(1791057040.943:462): avc: denied { read } for pid=6371 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.226157][ T31] audit: type=1400 audit(1791057042.133:463): avc: denied { getopt } for pid=6381 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.262027][ T31] audit: type=1400 audit(1791057042.163:464): avc: denied { read write } for pid=6381 comm="syz.3.172" dev="sockfs" ino=12742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.306190][ T31] audit: type=1400 audit(1791057042.213:465): avc: denied { connect } for pid=6379 comm="syz.5.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.345406][ T1866] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.495523][ T1866] usb 2-1: Using ep0 maxpacket: 32 [ 142.497449][ T1866] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 142.498241][ T1866] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 142.498259][ T1866] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.498275][ T1866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 142.498293][ T1866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.572349][ T1866] usb 2-1: config 0 descriptor?? [ 143.556128][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 143.556144][ T31] audit: type=1400 audit(1791057043.403:468): avc: denied { read } for pid=6391 comm="syz.2.175" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.556189][ T31] audit: type=1400 audit(1791057043.403:469): avc: denied { open } for pid=6391 comm="syz.2.175" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.556214][ T31] audit: type=1400 audit(1791057043.403:470): avc: denied { ioctl } for pid=6391 comm="syz.2.175" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.556540][ T191] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 143.737259][ T191] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 0.00 [ 143.738058][ T191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.738107][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.959881][ T31] audit: type=1400 audit(1791057043.863:471): avc: denied { create } for pid=6394 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.988534][ T31] audit: type=1400 audit(1791057043.893:472): avc: denied { create } for pid=6376 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.398487][ T191] usb 4-1: USB disconnect, device number 4 [ 144.510365][ T6406] FAULT_INJECTION: forcing a failure. [ 144.510365][ T6406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.510389][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.4.171 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.510405][ T6406] Tainted: [L]=SOFTLOCKUP [ 144.510409][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.510417][ T6406] Call Trace: [ 144.510421][ T6406] [ 144.510425][ T6406] dump_stack_lvl+0x100/0x190 [ 144.510449][ T6406] should_fail_ex.cold+0x5/0xa [ 144.510467][ T6406] _copy_from_user+0x2e/0xd0 [ 144.510482][ T6406] video_usercopy+0xe71/0x1730 [ 144.510495][ T6406] ? __pfx___video_do_ioctl+0x10/0x10 [ 144.510515][ T6406] ? __pfx_video_usercopy+0x10/0x10 [ 144.510535][ T6406] v4l2_ioctl+0x1bd/0x250 [ 144.510547][ T6406] ? __pfx_v4l2_ioctl+0x10/0x10 [ 144.510559][ T6406] __x64_sys_ioctl+0x18e/0x210 [ 144.510574][ T6406] do_syscall_64+0x123/0x790 [ 144.510589][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.510600][ T6406] RIP: 0033:0x7f6f1a99e159 [ 144.510610][ T6406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.510621][ T6406] RSP: 002b:00007f6f1b8ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.510633][ T6406] RAX: ffffffffffffffda RBX: 00007f6f1ac25fa0 RCX: 00007f6f1a99e159 [ 144.510640][ T6406] RDX: 0000200000000040 RSI: 00000000c008561c RDI: 0000000000000003 [ 144.510647][ T6406] RBP: 00007f6f1b8ac090 R08: 0000000000000000 R09: 0000000000000000 [ 144.510654][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.510660][ T6406] R13: 00007f6f1ac26038 R14: 00007f6f1ac25fa0 R15: 00007ffeb336c758 [ 144.510676][ T6406] [ 146.336782][ T1866] usbhid 2-1:0.0: can't add hid device: -71 [ 146.336863][ T1866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 146.364500][ T1866] usb 2-1: USB disconnect, device number 7 [ 146.436925][ T31] audit: type=1400 audit(1791057046.343:473): avc: denied { write } for pid=6407 comm="syz.4.179" path="socket:[12826]" dev="sockfs" ino=12826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.529974][ T6409] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 146.606297][ T31] audit: type=1400 audit(1791057046.513:474): avc: denied { connect } for pid=6414 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.833029][ T31] audit: type=1400 audit(1791057046.733:475): avc: denied { mount } for pid=6427 comm="syz.3.183" name="/" dev="autofs" ino=12888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 147.008321][ T31] audit: type=1400 audit(1791057046.913:476): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 147.170848][ T31] audit: type=1400 audit(1791057047.073:477): avc: denied { mount } for pid=6429 comm="syz.2.184" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 147.221998][ T6438] ip_tables: iptables: counters copy to user failed while replacing table [ 148.271653][ T6449] ip_tables: iptables: counters copy to user failed while replacing table [ 148.305005][ T6443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6443 comm=syz.5.187 [ 148.625219][ T1866] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.737413][ T6460] xt_CT: No such helper "snmp" [ 148.781665][ T1866] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 148.794503][ T1866] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.794523][ T1866] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.820293][ T1866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.820310][ T1866] usb 5-1: Product: syz [ 148.820319][ T1866] usb 5-1: Manufacturer: syz [ 148.820329][ T1866] usb 5-1: SerialNumber: syz [ 148.854043][ T1866] symbolserial 5-1:1.0: symbol converter detected [ 148.875883][ T1866] usb 5-1: symbol converter now attached to ttyUSB0 [ 148.977317][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 148.977330][ T31] audit: type=1400 audit(1791057048.883:482): avc: denied { setopt } for pid=6466 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.139111][ T1866] usb 5-1: USB disconnect, device number 12 [ 149.170147][ T1866] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 149.174853][ T1866] symbolserial 5-1:1.0: device disconnected [ 149.302644][ T5922] IPVS: starting estimator thread 0... [ 149.386822][ T6473] IPVS: using max 65 ests per chain, 156000 per kthread [ 149.435191][ T31] audit: type=1400 audit(1791057049.333:483): avc: denied { ioctl } for pid=6474 comm="syz.5.197" path="socket:[13219]" dev="sockfs" ino=13219 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.435380][ T6475] syzkaller1: entered promiscuous mode [ 149.435392][ T6475] syzkaller1: entered allmulticast mode [ 149.542244][ T6478] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 149.542244][ T6478] The task syz.5.197 (6478) triggered the difference, watch for misbehavior. [ 149.802956][ T31] audit: type=1400 audit(1791057049.703:484): avc: denied { setopt } for pid=6487 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.851017][ T31] audit: type=1400 audit(1791057049.753:485): avc: denied { bind } for pid=6487 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.970004][ T31] audit: type=1400 audit(1791057050.873:486): avc: denied { bind } for pid=6493 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.329865][ T6502] netlink: 14 bytes leftover after parsing attributes in process `syz.3.205'. [ 152.957380][ T5606] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 152.957425][ T5606] Bluetooth: hci4: Injecting HCI hardware error event [ 152.963554][ T5606] Bluetooth: hci4: hardware error 0x00 [ 154.010289][ T6522] __vm_enough_memory: pid: 6522, comm: syz.3.209, bytes: 4503599627366400 not enough memory for the allocation [ 154.156665][ T6524] FAULT_INJECTION: forcing a failure. [ 154.156665][ T6524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.156687][ T6524] CPU: 0 UID: 0 PID: 6524 Comm: syz.4.213 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.156704][ T6524] Tainted: [L]=SOFTLOCKUP [ 154.156708][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.156715][ T6524] Call Trace: [ 154.156719][ T6524] [ 154.156724][ T6524] dump_stack_lvl+0x100/0x190 [ 154.156747][ T6524] should_fail_ex.cold+0x5/0xa [ 154.156764][ T6524] _copy_from_user+0x2e/0xd0 [ 154.156781][ T6524] csum_and_copy_from_iter_full+0x700/0x1fd0 [ 154.156802][ T6524] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 154.156815][ T6524] ? sock_alloc_send_pskb+0x751/0x980 [ 154.156832][ T6524] ? __pfx_ipv6_dev_get_saddr+0x10/0x10 [ 154.156850][ T6524] ip_generic_getfrag+0x172/0x270 [ 154.156868][ T6524] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 154.156890][ T6524] __ip6_append_data+0x29f0/0x4bd0 [ 154.156910][ T6524] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 154.156934][ T6524] ? __pfx___ip6_append_data+0x10/0x10 [ 154.156949][ T6524] ? ip6_dst_mtu_maybe_forward.constprop.0+0x259/0x550 [ 154.156966][ T6524] ? __pfx_ip6_mtu+0x10/0x10 [ 154.156979][ T6524] ? ip6_setup_cork+0x619/0x15b0 [ 154.156997][ T6524] ip6_append_data+0x10b/0x410 [ 154.157013][ T6524] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 154.157032][ T6524] l2tp_ip6_sendmsg+0xff7/0x1fe0 [ 154.157052][ T6524] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 154.157065][ T6524] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 154.157098][ T6524] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 154.157113][ T6524] ? inet_sendmsg+0x11c/0x140 [ 154.157125][ T6524] inet_sendmsg+0x11c/0x140 [ 154.157138][ T6524] ____sys_sendmsg+0x9c9/0xbe0 [ 154.157149][ T6524] ? __pfx_inet_sendmsg+0x10/0x10 [ 154.157163][ T6524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.157179][ T6524] ? lock_acquire+0x1d1/0x380 [ 154.157192][ T6524] ? get_pid_task+0x2a/0x250 [ 154.157209][ T6524] ___sys_sendmsg+0x190/0x1e0 [ 154.157223][ T6524] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.157236][ T6524] ? get_pid_task+0x106/0x250 [ 154.157257][ T6524] ? find_held_lock+0x2b/0x80 [ 154.157285][ T6524] __sys_sendmsg+0x160/0x210 [ 154.157301][ T6524] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.157326][ T6524] do_syscall_64+0x123/0x790 [ 154.157341][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.157353][ T6524] RIP: 0033:0x7f6f1a99e159 [ 154.157363][ T6524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.157374][ T6524] RSP: 002b:00007f6f1b8ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.157386][ T6524] RAX: ffffffffffffffda RBX: 00007f6f1ac25fa0 RCX: 00007f6f1a99e159 [ 154.157393][ T6524] RDX: 0000000000008f0a RSI: 0000200000001180 RDI: 0000000000000003 [ 154.157400][ T6524] RBP: 00007f6f1b8ac090 R08: 0000000000000000 R09: 0000000000000000 [ 154.157407][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.157413][ T6524] R13: 00007f6f1ac26038 R14: 00007f6f1ac25fa0 R15: 00007ffeb336c758 [ 154.157429][ T6524] [ 155.138110][ T6526] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 155.138183][ T6526] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 155.368268][ T6534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6534 comm=syz.4.216 [ 155.369687][ T31] audit: type=1400 audit(1791057055.273:487): avc: denied { connect } for pid=6533 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.421392][ T31] audit: type=1400 audit(1791057055.323:488): avc: denied { ioctl } for pid=6533 comm="syz.4.216" path="socket:[13584]" dev="sockfs" ino=13584 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.596356][ T5606] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 155.924486][ T6542] can0: slcan on ptm0. [ 155.987009][ T6542] can0 (unregistered): slcan off ptm0. [ 157.157323][ T31] audit: type=1400 audit(1791057057.063:489): avc: denied { mount } for pid=6544 comm="syz.3.220" name="/" dev="hugetlbfs" ino=13663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 157.161073][ T31] audit: type=1400 audit(1791057057.063:490): avc: denied { mounton } for pid=6544 comm="syz.3.220" path="/" dev="hugetlbfs" ino=13663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 157.263863][ T31] audit: type=1400 audit(1791057057.163:491): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 157.310230][ T31] audit: type=1400 audit(1791057057.213:492): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.905300][ T1866] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.002908][ T31] audit: type=1400 audit(1791057057.903:493): avc: denied { ioctl } for pid=6556 comm="syz.5.217" path="mnt:[4026533922]" dev="nsfs" ino=4026533922 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 158.055848][ T1866] usb 3-1: Using ep0 maxpacket: 16 [ 158.056920][ T1866] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 158.058307][ T1866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.058346][ T1866] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.058361][ T1866] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.058374][ T1866] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 158.058389][ T1866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.058406][ T1866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.130811][ T1866] usb 3-1: config 0 descriptor?? [ 158.351231][ T31] audit: type=1400 audit(1791057058.253:494): avc: denied { create } for pid=6561 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.353897][ T31] audit: type=1400 audit(1791057058.253:495): avc: denied { getopt } for pid=6561 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.689511][ T1866] logitech-djreceiver 0003:046D:C53A.0002: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 158.807850][ T6567] process 'syz.1.225' launched './file2' with NULL argv: empty string added [ 158.809041][ T31] audit: type=1400 audit(1791057058.713:496): avc: denied { execute } for pid=6566 comm="syz.1.225" name="file2" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.878275][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.880994][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.936486][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.936775][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.941987][ T1866] usb 3-1: USB disconnect, device number 7 [ 159.042305][ T6575] : renamed from bond_slave_0 (while UP) [ 159.757889][ T5606] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 159.758162][ T5606] Bluetooth: hci3: Injecting HCI hardware error event [ 159.761313][ T5606] Bluetooth: hci3: hardware error 0x00 [ 159.953899][ T6602] FAULT_INJECTION: forcing a failure. [ 159.953899][ T6602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.953922][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.4.233 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.953938][ T6602] Tainted: [L]=SOFTLOCKUP [ 159.953942][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.953949][ T6602] Call Trace: [ 159.953954][ T6602] [ 159.953959][ T6602] dump_stack_lvl+0x100/0x190 [ 159.953983][ T6602] should_fail_ex.cold+0x5/0xa [ 159.954000][ T6602] _copy_to_user+0x32/0xd0 [ 159.954016][ T6602] simple_read_from_buffer+0xcb/0x170 [ 159.954040][ T6602] proc_fail_nth_read+0x1af/0x230 [ 159.954057][ T6602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.954074][ T6602] ? rw_verify_area+0xce/0x6d0 [ 159.954086][ T6602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.954101][ T6602] vfs_read+0x1e4/0xb40 [ 159.954116][ T6602] ? __pfx_vfs_read+0x10/0x10 [ 159.954131][ T6602] ? ktime_get_ts64+0x306/0x420 [ 159.954146][ T6602] ? ktime_get_ts64+0x318/0x420 [ 159.954158][ T6602] ? ktime_get_ts64+0x257/0x420 [ 159.954177][ T6602] ksys_read+0x12a/0x250 [ 159.954190][ T6602] ? __pfx_ksys_read+0x10/0x10 [ 159.954207][ T6602] do_syscall_64+0x123/0x790 [ 159.954221][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.954233][ T6602] RIP: 0033:0x7f6f1a95e98e [ 159.954243][ T6602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.954254][ T6602] RSP: 002b:00007f6f1b8abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.954266][ T6602] RAX: ffffffffffffffda RBX: 00007f6f1b8ac6c0 RCX: 00007f6f1a95e98e [ 159.954273][ T6602] RDX: 000000000000000f RSI: 00007f6f1b8ac0a0 RDI: 0000000000000005 [ 159.954280][ T6602] RBP: 00007f6f1b8ac090 R08: 0000000000000000 R09: 0000000000000000 [ 159.954287][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.954293][ T6602] R13: 00007f6f1ac26038 R14: 00007f6f1ac25fa0 R15: 00007ffeb336c758 [ 159.954309][ T6602] [ 160.256139][ T6604] input: syz0 as /devices/virtual/input/input5 [ 160.388247][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.536688][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 160.537338][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 160.542781][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.542810][ T9] usb 3-1: Product: syz [ 160.542819][ T9] usb 3-1: Manufacturer: syz [ 160.542828][ T9] usb 3-1: SerialNumber: syz [ 160.591829][ T9] usb 3-1: config 0 descriptor?? [ 160.638192][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 160.638205][ T31] audit: type=1400 audit(1791057060.543:507): avc: denied { write } for pid=6610 comm="syz.3.236" name="nullb" dev="configfs" ino=3548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.643173][ T31] audit: type=1400 audit(1791057060.543:508): avc: denied { accept } for pid=6610 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.643505][ T31] audit: type=1400 audit(1791057060.543:509): avc: denied { ioctl } for pid=6610 comm="syz.3.236" path="/55/config/nullb/nullb1/power" dev="configfs" ino=14060 ioctlcmd=0x3b80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 160.794924][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 160.794949][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.238'. [ 161.367540][ T9] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 161.836006][ T5606] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 162.206958][ T31] audit: type=1400 audit(1791057062.113:510): avc: denied { bind } for pid=6624 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.208598][ T31] audit: type=1400 audit(1791057062.113:511): avc: denied { accept } for pid=6624 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.209999][ T31] audit: type=1400 audit(1791057062.113:512): avc: denied { read } for pid=6624 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.428574][ T6635] veth1_macvtap: left promiscuous mode [ 163.428594][ T6635] macsec0: entered allmulticast mode [ 163.434395][ T6635] veth1_macvtap: entered promiscuous mode [ 163.434417][ T6635] veth1_macvtap: entered allmulticast mode [ 163.434486][ T6635] macsec0: left allmulticast mode [ 163.434494][ T6635] veth1_macvtap: left allmulticast mode [ 163.490053][ T1866] usb 3-1: USB disconnect, device number 8 [ 164.526308][ T6646] FAULT_INJECTION: forcing a failure. [ 164.526308][ T6646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.526330][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz.5.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.526347][ T6646] Tainted: [L]=SOFTLOCKUP [ 164.526351][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.526359][ T6646] Call Trace: [ 164.526364][ T6646] [ 164.526369][ T6646] dump_stack_lvl+0x100/0x190 [ 164.526391][ T6646] should_fail_ex.cold+0x5/0xa [ 164.526409][ T6646] strncpy_from_user+0x3b/0x2d0 [ 164.526427][ T6646] do_getname+0x78/0x390 [ 164.526441][ T6646] path_setxattrat+0x360/0x3b0 [ 164.526459][ T6646] ? __pfx_path_setxattrat+0x10/0x10 [ 164.526479][ T6646] ? ksys_write+0x190/0x250 [ 164.526492][ T6646] ? ksys_write+0x190/0x250 [ 164.526516][ T6646] ? fput+0x7c/0x100 [ 164.526532][ T6646] ? ksys_write+0x1ac/0x250 [ 164.526547][ T6646] ? __pfx_ksys_write+0x10/0x10 [ 164.526564][ T6646] __x64_sys_setxattr+0xc6/0x140 [ 164.526581][ T6646] ? do_syscall_64+0xae/0x790 [ 164.526594][ T6646] ? lockdep_hardirqs_on+0x7d/0x110 [ 164.526606][ T6646] do_syscall_64+0x123/0x790 [ 164.526619][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.526632][ T6646] RIP: 0033:0x7f5c8159e159 [ 164.526642][ T6646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.526653][ T6646] RSP: 002b:00007f5c8252d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 164.526664][ T6646] RAX: ffffffffffffffda RBX: 00007f5c81825fa0 RCX: 00007f5c8159e159 [ 164.526672][ T6646] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000800 [ 164.526679][ T6646] RBP: 00007f5c8252d090 R08: 0000000000000001 R09: 0000000000000000 [ 164.526686][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.526693][ T6646] R13: 00007f5c81826038 R14: 00007f5c81825fa0 R15: 00007ffd975ce238 [ 164.526709][ T6646] [ 164.599321][ T31] audit: type=1400 audit(1791057064.423:513): avc: denied { bind } for pid=6644 comm="syz.5.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.599353][ T31] audit: type=1400 audit(1791057064.433:514): avc: denied { name_bind } for pid=6644 comm="syz.5.247" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 165.045219][ T1866] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 165.195925][ T1866] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.16 [ 165.196699][ T1866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.196734][ T1866] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid wMaxPacketSize 0 [ 165.196747][ T1866] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 0 [ 165.198419][ T1866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.198434][ T1866] usb 4-1: Product: syz [ 165.198442][ T1866] usb 4-1: Manufacturer: syz [ 165.198451][ T1866] usb 4-1: SerialNumber: syz [ 165.277229][ T1866] usb-storage 4-1:1.0: USB Mass Storage device detected [ 165.321343][ T1866] scsi host1: usb-storage 4-1:1.0 [ 165.362575][ T31] audit: type=1400 audit(1791057065.263:515): avc: denied { setopt } for pid=6654 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.366611][ T6117] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 165.397659][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 165.535749][ T6117] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 165.536607][ T6117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.536646][ T6117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.536668][ T6117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.542250][ T6117] usb 2-1: config 0 descriptor?? [ 165.556242][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 165.567703][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 165.588984][ T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 165.589026][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 165.589048][ T9] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 165.589063][ T9] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 165.589079][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.663103][ T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 165.663122][ T9] usb 3-1: Product: syz [ 165.663131][ T9] usb 3-1: Manufacturer: syz [ 165.663139][ T9] usb 3-1: SerialNumber: syz [ 165.704910][ T9] usb 3-1: config 0 descriptor?? [ 165.729866][ T9] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 165.774193][ T9] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 165.824031][ T31] audit: type=1400 audit(1791057065.723:516): avc: denied { read } for pid=5265 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 165.925820][ T9] usb 3-1: USB disconnect, device number 9 [ 165.925894][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 165.950736][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 166.122414][ T6653] ldusb: No device or device unplugged -19 [ 166.949394][ T6653] input: syz0 as /devices/virtual/input/input6 [ 167.140620][ T6639] syzkaller0: entered promiscuous mode [ 167.140637][ T6639] syzkaller0: entered allmulticast mode [ 167.337999][ T6117] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71 [ 168.294612][ T6117] usb 2-1: USB disconnect, device number 8 [ 168.957902][ T6117] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 169.008405][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.249'. [ 169.008428][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.5.249'. [ 169.108255][ T6117] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.109519][ T6117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.109554][ T6117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.109568][ T6117] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.109592][ T6117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.177123][ T6117] usb 2-1: config 0 descriptor?? [ 169.756678][ T6117] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 169.791262][ T31] audit: type=1400 audit(1791057069.693:517): avc: denied { write } for pid=6678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.918353][ T6117] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 169.966464][ T6707] FAULT_INJECTION: forcing a failure. [ 169.966464][ T6707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.966507][ T6707] CPU: 0 UID: 0 PID: 6707 Comm: syz.4.259 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.966524][ T6707] Tainted: [L]=SOFTLOCKUP [ 169.966528][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.966535][ T6707] Call Trace: [ 169.966540][ T6707] [ 169.966545][ T6707] dump_stack_lvl+0x100/0x190 [ 169.966567][ T6707] should_fail_ex.cold+0x5/0xa [ 169.966584][ T6707] _copy_to_user+0x32/0xd0 [ 169.966600][ T6707] __rhtab_map_lookup_and_delete_batch+0x9f5/0x1280 [ 169.966618][ T6707] ? __fget_files+0x160/0x3d0 [ 169.966641][ T6707] ? __pfx_rhtab_map_lookup_batch+0x10/0x10 [ 169.966655][ T6707] bpf_map_do_batch+0x5b2/0x6d0 [ 169.966671][ T6707] ? bpf_lsm_bpf+0x9/0x10 [ 169.966690][ T6707] __sys_bpf+0xa79/0x4a30 [ 169.966706][ T6707] ? __pfx___sys_bpf+0x10/0x10 [ 169.966718][ T6707] ? find_held_lock+0x2b/0x80 [ 169.966735][ T6707] ? get_pid_task+0xfc/0x250 [ 169.966751][ T6707] ? get_pid_task+0xfc/0x250 [ 169.966770][ T6707] ? find_held_lock+0x2b/0x80 [ 169.966790][ T6707] ? rcu_read_lock_any_held+0x6a/0x90 [ 169.966808][ T6707] ? find_held_lock+0x2b/0x80 [ 169.966825][ T6707] ? ksys_write+0x190/0x250 [ 169.966837][ T6707] ? ksys_write+0x190/0x250 [ 169.966850][ T6707] ? lock_acquire+0x1d1/0x380 [ 169.966873][ T6707] ? fput+0x7c/0x100 [ 169.966888][ T6707] ? ksys_write+0x1ac/0x250 [ 169.966903][ T6707] ? __x64_sys_bpf+0xce/0x140 [ 169.966914][ T6707] __x64_sys_bpf+0xce/0x140 [ 169.966927][ T6707] ? do_syscall_64+0xae/0x790 [ 169.966941][ T6707] do_syscall_64+0x123/0x790 [ 169.966954][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.966967][ T6707] RIP: 0033:0x7f6f1a99e159 [ 169.966977][ T6707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.966988][ T6707] RSP: 002b:00007f6f1b88b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.966999][ T6707] RAX: ffffffffffffffda RBX: 00007f6f1ac26090 RCX: 00007f6f1a99e159 [ 169.967007][ T6707] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 0000000000000018 [ 169.967014][ T6707] RBP: 00007f6f1b88b090 R08: 0000000000000000 R09: 0000000000000000 [ 169.967021][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.967027][ T6707] R13: 00007f6f1ac26128 R14: 00007f6f1ac26090 R15: 00007ffeb336c758 [ 169.967043][ T6707] [ 170.066123][ T6117] usb 6-1: Using ep0 maxpacket: 16 [ 170.078307][ T6117] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.099592][ T6117] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.099613][ T6117] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 170.099627][ T6117] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 170.099641][ T6117] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 170.315152][ T6117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 170.315170][ T6117] usb 6-1: SerialNumber: syz [ 170.355469][ T6697] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 170.355544][ T6697] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 170.359314][ T6117] hub 6-1:1.0: bad descriptor, ignoring hub [ 170.359338][ T6117] hub 6-1:1.0: probe with driver hub failed with error -5 [ 170.526109][ T31] audit: type=1400 audit(1791057070.433:518): avc: denied { write } for pid=6709 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.561604][ T6697] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 170.561700][ T6697] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 171.071251][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.071811][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.074923][ T31] audit: type=1400 audit(1791057070.973:519): avc: denied { getopt } for pid=6695 comm="syz.5.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.165397][ T31] audit: type=1400 audit(1791057071.073:520): avc: denied { setopt } for pid=6695 comm="syz.5.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.170623][ T31] audit: type=1400 audit(1791057071.073:521): avc: denied { connect } for pid=6695 comm="syz.5.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.195733][ T1865] usb 2-1: reset full-speed USB device number 9 using dummy_hcd [ 171.236922][ T6723] netlink: 40 bytes leftover after parsing attributes in process `syz.5.257'. [ 171.236993][ T6723] block nbd0: not configured, cannot reconfigure [ 171.396948][ T1865] usb 2-1: device descriptor read/64, error -32 [ 171.665686][ T1865] usb 2-1: reset full-speed USB device number 9 using dummy_hcd [ 171.795384][ T1865] usb 2-1: device descriptor read/64, error -32 [ 172.038436][ T1865] usb 2-1: reset full-speed USB device number 9 using dummy_hcd [ 172.055443][ T1865] usb 2-1: device descriptor read/8, error -32 [ 173.890602][ T1866] usb 2-1: USB disconnect, device number 9 [ 175.162910][ T6753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.266'. [ 175.240933][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 175.240957][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.267'. [ 175.338297][ T6117] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 175.424588][ T6117] usb 6-1: USB disconnect, device number 7 [ 175.542017][ T31] audit: type=1400 audit(1791057075.443:522): avc: denied { write } for pid=6750 comm="syz.2.265" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 175.718291][ T9] usb 4-1: USB disconnect, device number 5 [ 175.799201][ T6768] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 175.886174][ T987] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 175.935309][ T6117] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 176.043254][ T987] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 176.043282][ T987] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 176.076064][ T6117] usb 6-1: device descriptor read/64, error -71 [ 176.080797][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.080814][ T987] usb 2-1: Product: syz [ 176.080822][ T987] usb 2-1: Manufacturer: syz [ 176.080831][ T987] usb 2-1: SerialNumber: syz [ 177.185184][ T6117] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 177.186593][ T31] audit: type=1400 audit(1791057077.093:523): avc: denied { write } for pid=6756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.198939][ T1865] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 177.315679][ T6117] usb 6-1: device descriptor read/64, error -71 [ 177.345623][ T1865] usb 5-1: Using ep0 maxpacket: 8 [ 177.346314][ T1865] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 177.348253][ T1865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.348279][ T1865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.406204][ T1865] usb 5-1: config 0 descriptor?? [ 177.425772][ T6117] usb usb6-port1: attempt power cycle [ 177.523136][ T987] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 177.523188][ T987] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 177.523200][ T987] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 177.572505][ T987] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 177.602645][ T987] usb 2-1: USB disconnect, device number 10 [ 177.621147][ T31] audit: type=1400 audit(1791057077.523:524): avc: denied { write } for pid=6793 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.681693][ T1865] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 177.765910][ T6117] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 177.789244][ T6117] usb 6-1: device descriptor read/8, error -71 [ 177.870382][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.870654][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.025615][ T6117] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 178.049537][ T6117] usb 6-1: device descriptor read/8, error -71 [ 178.129140][ T1865] usb 5-1: USB disconnect, device number 13 [ 178.157002][ T6117] usb usb6-port1: unable to enumerate USB device [ 178.361849][ T6806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.277'. [ 178.569794][ T6806] FAULT_INJECTION: forcing a failure. [ 178.569794][ T6806] name failslab, interval 1, probability 0, space 0, times 0 [ 178.569828][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.1.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.569845][ T6806] Tainted: [L]=SOFTLOCKUP [ 178.569849][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 178.569858][ T6806] Call Trace: [ 178.569863][ T6806] [ 178.569868][ T6806] dump_stack_lvl+0x100/0x190 [ 178.569892][ T6806] should_fail_ex.cold+0x5/0xa [ 178.569909][ T6806] should_failslab+0xc2/0x120 [ 178.569927][ T6806] __kvmalloc_node_noprof+0x113/0x9b0 [ 178.569943][ T6806] ? alloc_netdev_mqs+0xd7/0x15c0 [ 178.569963][ T6806] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 178.569979][ T6806] alloc_netdev_mqs+0xd7/0x15c0 [ 178.569999][ T6806] rtnl_create_link+0xc13/0xf80 [ 178.570020][ T6806] rtnl_newlink+0x15bc/0x2620 [ 178.570044][ T6806] ? __pfx_rtnl_newlink+0x10/0x10 [ 178.570060][ T6806] ? avc_has_perm_noaudit+0x56/0x470 [ 178.570080][ T6806] ? find_held_lock+0x2b/0x80 [ 178.570097][ T6806] ? avc_has_perm_noaudit+0x11e/0x470 [ 178.570115][ T6806] ? avc_has_perm_noaudit+0x11e/0x470 [ 178.570148][ T6806] ? lock_acquire+0x1d1/0x380 [ 178.570161][ T6806] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 178.570178][ T6806] ? find_held_lock+0x2b/0x80 [ 178.570195][ T6806] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 178.570212][ T6806] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 178.570230][ T6806] ? __pfx_rtnl_newlink+0x10/0x10 [ 178.570248][ T6806] rtnetlink_rcv_msg+0x95e/0xe90 [ 178.570267][ T6806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.570289][ T6806] ? ref_tracker_free+0x37e/0x6c0 [ 178.570309][ T6806] netlink_rcv_skb+0x159/0x420 [ 178.570325][ T6806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.570344][ T6806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.570365][ T6806] ? netlink_deliver_tap+0x1ae/0xcc0 [ 178.570383][ T6806] netlink_unicast+0x585/0x850 [ 178.570400][ T6806] ? __pfx_netlink_unicast+0x10/0x10 [ 178.570420][ T6806] netlink_sendmsg+0x8b0/0xda0 [ 178.570438][ T6806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.570455][ T6806] ? selinux_socket_sendmsg+0x198/0x2f0 [ 178.570472][ T6806] ____sys_sendmsg+0xa4d/0xbe0 [ 178.570484][ T6806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.570500][ T6806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.570516][ T6806] ? lock_acquire+0x1d1/0x380 [ 178.570529][ T6806] ? get_pid_task+0x2a/0x250 [ 178.570546][ T6806] ___sys_sendmsg+0x190/0x1e0 [ 178.570561][ T6806] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.570573][ T6806] ? irqentry_exit+0x24d/0xa10 [ 178.570593][ T6806] ? find_held_lock+0x2b/0x80 [ 178.570620][ T6806] __sys_sendmsg+0x160/0x210 [ 178.570637][ T6806] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.570663][ T6806] do_syscall_64+0x123/0x790 [ 178.570677][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.570689][ T6806] RIP: 0033:0x7fd2a979e159 [ 178.570699][ T6806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.570710][ T6806] RSP: 002b:00007fd2aa621028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.570730][ T6806] RAX: ffffffffffffffda RBX: 00007fd2a9a25fa0 RCX: 00007fd2a979e159 [ 178.570737][ T6806] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 178.570745][ T6806] RBP: 00007fd2aa621090 R08: 0000000000000000 R09: 0000000000000000 [ 178.570751][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.570758][ T6806] R13: 00007fd2a9a26038 R14: 00007fd2a9a25fa0 R15: 00007ffd4cbca968 [ 178.570774][ T6806] [ 178.574129][ T31] audit: type=1400 audit(1791057078.473:525): avc: denied { write } for pid=6797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.084139][ T31] audit: type=1400 audit(1791057078.983:526): avc: denied { map } for pid=6810 comm="syz.3.278" path="socket:[15044]" dev="sockfs" ino=15044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 179.222356][ T31] audit: type=1400 audit(1791057079.123:527): avc: denied { listen } for pid=6816 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.332910][ T6823] netlink: 360 bytes leftover after parsing attributes in process `syz.5.280'. [ 180.360427][ T31] audit: type=1400 audit(1791057080.263:528): avc: denied { write } for pid=6825 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.542426][ T6839] netlink: 48 bytes leftover after parsing attributes in process `syz.2.283'. [ 182.004238][ T6843] netlink: 596 bytes leftover after parsing attributes in process `syz.3.284'. [ 182.078504][ T6843] netlink: 288 bytes leftover after parsing attributes in process `syz.3.284'. [ 182.296875][ T1866] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 182.985402][ T1866] usb 2-1: Using ep0 maxpacket: 16 [ 183.016547][ T1866] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 183.079478][ T1866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.079513][ T1866] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.079529][ T1866] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.079541][ T1866] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 183.079556][ T1866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.079593][ T1866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.456697][ T1866] usb 2-1: config 0 descriptor?? [ 183.764689][ T31] audit: type=1400 audit(1791057083.663:529): avc: denied { create } for pid=6841 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.962966][ T1866] logitech-djreceiver 0003:046D:C53A.0005: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 184.173159][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.173426][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.203284][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 184.229481][ T31] audit: type=1400 audit(1791057084.133:530): avc: denied { write } for pid=6842 comm="syz.1.285" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 184.229512][ T31] audit: type=1400 audit(1791057084.133:531): avc: denied { open } for pid=6842 comm="syz.1.285" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 184.287460][ T31] audit: type=1400 audit(1791057084.193:532): avc: denied { ioctl } for pid=6842 comm="syz.1.285" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 184.327084][ T31] audit: type=1400 audit(1791057084.233:533): avc: denied { write } for pid=6840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.328848][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.329138][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.333118][ T191] usb 2-1: USB disconnect, device number 11 [ 184.705416][ T31] audit: type=1400 audit(1791057084.613:534): avc: denied { write } for pid=6870 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.015238][ T191] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 185.038366][ T6875] mmap: syz.1.291 (6875) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.146685][ T191] usb 5-1: device descriptor read/64, error -71 [ 186.109875][ T31] audit: type=1400 audit(1791057086.013:535): avc: denied { create } for pid=6879 comm="syz.5.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.109908][ T31] audit: type=1400 audit(1791057086.013:536): avc: denied { setopt } for pid=6879 comm="syz.5.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.162201][ T6883] netlink: 165 bytes leftover after parsing attributes in process `syz.5.286'. [ 186.162806][ T31] audit: type=1400 audit(1791057086.063:537): avc: denied { ioctl } for pid=6879 comm="syz.5.286" path="socket:[15256]" dev="sockfs" ino=15256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.174044][ T191] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 186.335393][ T191] usb 5-1: device descriptor read/64, error -71 [ 186.445589][ T191] usb usb5-port1: attempt power cycle [ 187.669349][ T191] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 187.686976][ T191] usb 5-1: device descriptor read/8, error -71 [ 187.793693][ T31] audit: type=1400 audit(1791057087.683:538): avc: denied { create } for pid=6881 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.820675][ T6878] F2FS-fs: Conflicting test_dummy_encryption options [ 188.839252][ T6893] netlink: 164 bytes leftover after parsing attributes in process `syz.1.295'. [ 188.886337][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.886956][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.877847][ T4970] udevd[4970]: worker [5602] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 191.068423][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 191.068436][ T31] audit: type=1400 audit(1791057090.973:540): avc: denied { ioctl } for pid=6904 comm="syz.3.301" path="socket:[15322]" dev="sockfs" ino=15322 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.285232][ T6900] ======================================================= [ 191.285232][ T6900] WARNING: The mand mount option has been deprecated and [ 191.285232][ T6900] and is ignored by this kernel. Remove the mand [ 191.285232][ T6900] option from the mount to silence this warning. [ 191.285232][ T6900] ======================================================= [ 191.285949][ T6900] jffs2: notice: (6900) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 3 of xref (0 dead, 3 orphan) found. [ 191.381789][ T6912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.384590][ T6912] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 193.620354][ T31] audit: type=1400 audit(1791057093.523:541): avc: denied { bind } for pid=6924 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 193.703035][ T1866] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 193.703163][ T987] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 193.825269][ T987] usb 3-1: device descriptor read/64, error -71 [ 193.845617][ T1866] usb 6-1: Using ep0 maxpacket: 8 [ 193.846056][ T1866] usb 6-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 193.846893][ T1866] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.846907][ T1866] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.860591][ T1866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.860613][ T1866] usb 6-1: Product: syz [ 193.860622][ T1866] usb 6-1: Manufacturer: syz [ 193.860630][ T1866] usb 6-1: SerialNumber: syz [ 194.065368][ T987] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 194.142511][ T6932] syzkaller1: entered promiscuous mode [ 194.142543][ T6932] syzkaller1: entered allmulticast mode [ 194.179061][ T31] audit: type=1400 audit(1791057094.083:542): avc: denied { write } for pid=6913 comm="syz.5.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.207797][ T987] usb 3-1: device descriptor read/64, error -71 [ 194.318738][ T987] usb usb3-port1: attempt power cycle [ 194.717452][ T987] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 194.950185][ T987] usb 3-1: device descriptor read/8, error -71 [ 195.309650][ T987] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 195.588074][ T31] audit: type=1400 audit(1791057095.493:543): avc: denied { bind } for pid=6935 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.546164][ T5604] Bluetooth: hci2: command 0x0406 tx timeout [ 196.546236][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 196.824409][ T987] usb 3-1: device descriptor read/8, error -71 [ 196.935336][ T987] usb usb3-port1: unable to enumerate USB device [ 198.862907][ T31] audit: type=1326 audit(1791057098.763:544): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a979e159 code=0x7ffc0000 [ 198.862942][ T31] audit: type=1326 audit(1791057098.763:545): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a979e159 code=0x7ffc0000 [ 198.934139][ T31] audit: type=1326 audit(1791057098.833:546): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2a979e159 code=0x7ffc0000 [ 198.934173][ T31] audit: type=1326 audit(1791057098.833:547): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a979e159 code=0x7ffc0000 [ 198.934211][ T31] audit: type=1326 audit(1791057098.833:548): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a979e159 code=0x7ffc0000 [ 199.028103][ T31] audit: type=1326 audit(1791057098.933:549): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd2a979e159 code=0x7ffc0000 [ 199.028149][ T31] audit: type=1326 audit(1791057098.933:550): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a979e159 code=0x7ffc0000 [ 199.028173][ T31] audit: type=1326 audit(1791057098.933:551): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a979e159 code=0x7ffc0000 [ 199.033543][ T31] audit: type=1326 audit(1791057098.933:552): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd2a979e159 code=0x7ffc0000 [ 199.033575][ T31] audit: type=1326 audit(1791057098.933:553): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a979e159 code=0x7ffc0000 [ 199.285850][ T6946] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 199.326675][ T1866] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 199.370724][ T1866] usb 6-1: USB disconnect, device number 12 [ 199.470728][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.078958][ T6963] lo: entered promiscuous mode [ 200.104716][ T6963] tunl0: entered promiscuous mode [ 200.131752][ T6963] gre0: entered promiscuous mode [ 200.177914][ T6963] gretap0: entered promiscuous mode [ 200.245012][ T6963] erspan0: entered promiscuous mode [ 200.263888][ T6963] ip_vti0: entered promiscuous mode [ 200.277121][ T6963] ip6_vti0: entered promiscuous mode [ 200.292614][ T6963] sit0: entered promiscuous mode [ 201.021606][ T6963] ip6tnl0: entered promiscuous mode [ 201.422245][ T6963] ip6gre0: entered promiscuous mode [ 201.461942][ T6963] syz_tun: entered promiscuous mode [ 201.489478][ T6963] ip6gretap0: entered promiscuous mode [ 201.514788][ T6963] vcan0: entered promiscuous mode [ 201.549608][ T6963] bond0: entered promiscuous mode [ 201.549625][ T6963] bond_slave_0: entered promiscuous mode [ 201.549771][ T6963] bond_slave_1: entered promiscuous mode [ 201.579352][ T6963] team0: entered promiscuous mode [ 201.579366][ T6963] team_slave_0: entered promiscuous mode [ 201.580746][ T6963] team_slave_1: entered promiscuous mode [ 201.614477][ T6963] dummy0: entered promiscuous mode [ 201.651431][ T6963] nlmon0: entered promiscuous mode [ 201.667868][ T6963] batadv0: entered promiscuous mode [ 201.681944][ T6963] vxcan0: entered promiscuous mode [ 201.682608][ T6963] vxcan1: entered promiscuous mode [ 201.684857][ T6963] veth0: entered promiscuous mode [ 201.707743][ T6963] veth1: entered promiscuous mode [ 201.726680][ T1866] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 201.728337][ T6963] wg0: entered promiscuous mode [ 201.733678][ T6963] wg1: entered promiscuous mode [ 201.757964][ T6963] wg2: entered promiscuous mode [ 201.760569][ T6963] veth0_to_bridge: entered promiscuous mode [ 201.781989][ T6963] bridge_slave_0: entered promiscuous mode [ 201.784189][ T6963] veth1_to_bridge: entered promiscuous mode [ 201.810576][ T6963] bridge_slave_1: entered promiscuous mode [ 201.812024][ T6963] veth0_to_bond: entered promiscuous mode [ 201.829832][ T6963] veth1_to_bond: entered promiscuous mode [ 201.847602][ T6963] veth0_to_team: entered promiscuous mode [ 201.854900][ T6963] veth1_to_team: entered promiscuous mode [ 201.881972][ T6963] veth0_to_batadv: entered promiscuous mode [ 201.894318][ T1866] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.904891][ T1866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.904911][ T1866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.904924][ T1866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.904947][ T1866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.943863][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.943900][ T6963] batadv_slave_0: entered promiscuous mode [ 201.978953][ T6963] veth1_to_batadv: entered promiscuous mode [ 201.984777][ T1866] usb 2-1: config 0 descriptor?? [ 202.002167][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.002208][ T6963] batadv_slave_1: entered promiscuous mode [ 202.004502][ T6963] xfrm0: entered promiscuous mode [ 202.034095][ T6963] veth0_to_hsr: entered promiscuous mode [ 202.052634][ T6963] veth1_to_hsr: entered promiscuous mode [ 202.074244][ T6963] hsr0: entered promiscuous mode [ 202.094148][ T6963] veth1_virt_wifi: entered promiscuous mode [ 202.109803][ T6963] veth0_virt_wifi: entered promiscuous mode [ 202.114809][ T6963] virt_wifi0: entered promiscuous mode [ 202.137434][ T6963] vlan0: entered promiscuous mode [ 202.142427][ T6963] vlan1: entered promiscuous mode [ 202.161769][ T6963] macvlan0: entered promiscuous mode [ 202.171304][ T6963] macvlan1: entered promiscuous mode [ 202.188535][ T6963] ipvlan0: entered promiscuous mode [ 202.188662][ T6963] ipvlan1: entered promiscuous mode [ 202.222846][ T6963] macvtap0: entered promiscuous mode [ 202.233433][ T6963] macsec0: entered promiscuous mode [ 202.234989][ T6963] geneve0: entered promiscuous mode [ 202.248411][ T6963] geneve1: entered promiscuous mode [ 202.252929][ T6963] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 202.273853][ T6963] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 202.287551][ T6963] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 202.290419][ T6963] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 202.319559][ T6963] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 202.335043][ T6963] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 202.346498][ T6963] syzkaller0: entered promiscuous mode [ 202.367337][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.367369][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.367389][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.367409][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.450400][ T1866] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 202.475691][ T6117] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 203.338412][ T6984] netlink: 165 bytes leftover after parsing attributes in process `syz.5.325'. [ 203.339409][ T6117] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 203.340171][ T6117] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.340185][ T6117] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.340219][ T6117] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 203.425506][ T6117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.425524][ T6117] usb 5-1: Product: syz [ 203.425533][ T6117] usb 5-1: Manufacturer: syz [ 203.425541][ T6117] usb 5-1: SerialNumber: syz [ 203.460501][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 203.597887][ T9] usb 4-1: device descriptor read/64, error -71 [ 204.756460][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 204.847666][ T1865] usb 2-1: reset full-speed USB device number 12 using dummy_hcd [ 204.885455][ T9] usb 4-1: device descriptor read/64, error -71 [ 204.970028][ T6991] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.997426][ T9] usb usb4-port1: attempt power cycle [ 205.335344][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 205.357109][ T9] usb 4-1: device descriptor read/8, error -71 [ 205.536401][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 205.536414][ T31] audit: type=1400 audit(1791057105.443:560): avc: denied { getopt } for pid=6996 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.618711][ T987] usb 2-1: USB disconnect, device number 12 [ 205.689984][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 205.690000][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 205.695488][ T191] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 205.725929][ T7000] ubi: bad wear-leveling threshold 813332851 [ 205.879045][ T191] usb 6-1: Using ep0 maxpacket: 16 [ 205.880019][ T191] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 206.052397][ T191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.052420][ T191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.052433][ T191] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.052469][ T191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.316330][ T31] audit: type=1400 audit(1791057106.223:561): avc: denied { write } for pid=6999 comm="syz.2.328" name="sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 206.526191][ T191] usb 6-1: config 0 descriptor?? [ 206.719847][ T31] audit: type=1400 audit(1791057106.623:562): avc: denied { open } for pid=6999 comm="syz.2.328" path="/dev/sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 207.175767][ T987] usb 5-1: USB disconnect, device number 18 [ 207.437975][ T31] audit: type=1400 audit(1791057107.343:563): avc: denied { create } for pid=6998 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.439840][ T31] audit: type=1400 audit(1791057107.343:564): avc: denied { create } for pid=7005 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.540763][ T7000] ipvlan2: entered allmulticast mode [ 207.540780][ T7000] macvlan1: entered allmulticast mode [ 207.540788][ T7000] veth1_vlan: entered allmulticast mode [ 207.543985][ T7000] batman_adv: batadv0: Adding interface: ipvlan2 [ 207.543996][ T7000] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.544013][ T7000] batman_adv: batadv0: Interface activated: ipvlan2 [ 207.626750][ T31] audit: type=1400 audit(1791057107.533:565): avc: denied { create } for pid=7005 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.678974][ T31] audit: type=1400 audit(1791057107.583:566): avc: denied { bind } for pid=7009 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 207.681058][ T7006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.744726][ T31] audit: type=1400 audit(1791057107.643:567): avc: denied { getopt } for pid=7009 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 207.841131][ T191] hid_parser_main: 30 callbacks suppressed [ 207.841147][ T191] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 207.841164][ T191] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 207.841179][ T191] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 207.841194][ T191] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 207.841210][ T191] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 207.841237][ T191] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 207.841254][ T191] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 207.841269][ T191] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 207.841284][ T191] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 207.841299][ T191] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 207.959585][ T191] hid-multitouch 0003:0457:07DA.0007: hidraw0: USB HID v0.00 Joystick [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 207.990068][ T7016] syzkaller1: entered promiscuous mode [ 207.990084][ T7016] syzkaller1: entered allmulticast mode [ 208.750217][ T987] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 208.775706][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.775961][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.828319][ T7026] netlink: 165 bytes leftover after parsing attributes in process `syz.4.336'. [ 208.848936][ T31] audit: type=1400 audit(1791057108.753:568): avc: denied { mounton } for pid=6994 comm="syz.5.326" path="/41/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 209.845660][ T987] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.849657][ T987] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.849673][ T987] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.849685][ T987] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.849708][ T987] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.851390][ T987] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.851405][ T987] usb 3-1: Product: syz [ 209.851413][ T987] usb 3-1: Manufacturer: syz [ 209.896718][ T31] audit: type=1400 audit(1791057109.793:569): avc: denied { sqpoll } for pid=7018 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 209.936181][ T987] cdc_wdm 3-1:1.0: skipping garbage [ 209.936194][ T987] cdc_wdm 3-1:1.0: skipping garbage [ 210.007410][ T987] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 210.007424][ T987] cdc_wdm 3-1:1.0: Unknown control protocol [ 211.066798][ T31] audit: type=1400 audit(1791057110.963:570): avc: denied { shutdown } for pid=7011 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 211.066832][ T31] audit: type=1400 audit(1791057110.963:571): avc: denied { write } for pid=7011 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.066854][ T31] audit: type=1400 audit(1791057110.963:572): avc: denied { read write } for pid=7011 comm="syz.2.334" name="cdc-wdm0" dev="devtmpfs" ino=2928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 211.066877][ T31] audit: type=1400 audit(1791057110.963:573): avc: denied { open } for pid=7011 comm="syz.2.334" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 211.189337][ T987] usb 3-1: USB disconnect, device number 14 [ 211.240791][ T31] audit: type=1400 audit(1791057111.143:574): avc: denied { setopt } for pid=7033 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 211.292378][ T6117] usb 6-1: USB disconnect, device number 13 [ 211.311058][ T31] audit: type=1400 audit(1791057111.213:575): avc: denied { write } for pid=7033 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 211.368366][ T7042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=7042 comm=syz.3.339 [ 211.471523][ T31] audit: type=1400 audit(1791057111.373:576): avc: denied { read } for pid=7033 comm="syz.3.339" name="sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.474864][ T31] audit: type=1400 audit(1791057111.373:577): avc: denied { map } for pid=7033 comm="syz.3.339" path="/dev/sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.475030][ T31] audit: type=1400 audit(1791057111.373:578): avc: denied { execute } for pid=7033 comm="syz.3.339" path="/dev/sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 212.765260][ T6117] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 212.937974][ T6117] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.939329][ T6117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.939357][ T6117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.944186][ T6117] usb 2-1: config 0 descriptor?? [ 213.168272][ T7056] comedi comedi3: unsupported base address 0xcf7 [ 213.203462][ T6117] usbhid 2-1:0.0: can't add hid device: -71 [ 213.203524][ T6117] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 213.230114][ T6117] usb 2-1: USB disconnect, device number 13 [ 215.448670][ T7063] netlink: 165 bytes leftover after parsing attributes in process `syz.1.348'. [ 215.572598][ T7064] syzkaller1: entered promiscuous mode [ 215.572614][ T7064] syzkaller1: entered allmulticast mode [ 216.044362][ T31] audit: type=1400 audit(1791057115.823:579): avc: denied { bind } for pid=7052 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.091824][ T7072] netlink: 40 bytes leftover after parsing attributes in process `syz.5.351'. [ 216.092290][ T31] audit: type=1400 audit(1791057115.993:580): avc: denied { write } for pid=7069 comm="syz.5.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 217.791020][ T31] audit: type=1400 audit(1791057117.693:581): avc: denied { create } for pid=7077 comm="syz.5.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 217.826662][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 218.245152][ T987] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 218.507921][ T191] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 218.970546][ T191] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 219.123289][ T191] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.123312][ T191] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.332945][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.332963][ T191] usb 3-1: Product: syz [ 219.332972][ T191] usb 3-1: Manufacturer: syz [ 219.332980][ T191] usb 3-1: SerialNumber: syz [ 219.344585][ T987] usb 4-1: Using ep0 maxpacket: 16 [ 219.346082][ T987] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 219.347094][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.399146][ T191] symbolserial 3-1:1.0: symbol converter detected [ 219.413170][ T987] usb 4-1: config 0 descriptor?? [ 219.422700][ T987] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 219.434560][ T7095] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 219.457100][ T191] usb 3-1: symbol converter now attached to ttyUSB0 [ 219.531744][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 219.532617][ T31] audit: type=1400 audit(1791057119.433:582): avc: denied { node_bind } for pid=7092 comm="syz.5.355" src=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 219.644555][ T987] usb 4-1: Detected FT232A [ 219.693516][ T987] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 219.712289][ T987] usb 4-1: USB disconnect, device number 10 [ 219.733277][ T987] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 219.733581][ T987] ftdi_sio 4-1:0.0: device disconnected [ 219.765845][ T6117] usb 3-1: USB disconnect, device number 15 [ 219.841505][ T6117] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 219.841823][ T6117] symbolserial 3-1:1.0: device disconnected [ 220.870995][ T31] audit: type=1400 audit(1791057120.773:583): avc: denied { write } for pid=7101 comm="syz.5.358" name="core" dev="configfs" ino=3561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.935898][ T7102] vlan2: entered promiscuous mode [ 220.935913][ T7102] hsr0: entered promiscuous mode [ 220.936106][ T7102] vlan2: entered allmulticast mode [ 220.936115][ T7102] hsr0: entered allmulticast mode [ 220.936122][ T7102] hsr_slave_0: entered allmulticast mode [ 220.936130][ T7102] hsr_slave_1: entered allmulticast mode [ 220.942031][ T31] audit: type=1400 audit(1791057120.843:584): avc: denied { write } for pid=7101 comm="syz.5.358" name="rd_mcp_0" dev="configfs" ino=16220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.016138][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 221.070988][ T31] audit: type=1400 audit(1791057120.973:585): avc: denied { write } for pid=7101 comm="syz.5.358" name="configs" dev="configfs" ino=6907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.073135][ T31] audit: type=1400 audit(1791057120.973:586): avc: denied { write } for pid=7101 comm="syz.5.358" name="c.1" dev="configfs" ino=16228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.073180][ T31] audit: type=1400 audit(1791057120.973:587): avc: denied { create } for pid=7101 comm="syz.5.358" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 221.100268][ T7108] Config c/1 of g1 needs at least one function. [ 221.100444][ T7108] udc usbip-vudc.0: failed to start g1: -22 [ 221.100458][ T7108] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 221.101908][ T7108] UDC core: g1: couldn't find an available UDC or it's busy [ 221.396090][ T7112] syzkaller1: entered promiscuous mode [ 221.396119][ T7112] syzkaller1: entered allmulticast mode [ 221.397462][ T7113] netlink: 10492 bytes leftover after parsing attributes in process `syz.1.360'. [ 221.397537][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.457943][ T31] audit: type=1400 audit(1791057121.363:588): avc: denied { mounton } for pid=7114 comm="syz.5.362" path=2F35302FE91F7189591E9233614B dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 221.507305][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.544962][ T7118] FAULT_INJECTION: forcing a failure. [ 221.544962][ T7118] name failslab, interval 1, probability 0, space 0, times 0 [ 221.544986][ T7118] CPU: 0 UID: 0 PID: 7118 Comm: syz.5.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.545004][ T7118] Tainted: [L]=SOFTLOCKUP [ 221.545009][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.545016][ T7118] Call Trace: [ 221.545020][ T7118] [ 221.545026][ T7118] dump_stack_lvl+0x100/0x190 [ 221.545049][ T7118] should_fail_ex.cold+0x5/0xa [ 221.545072][ T7118] should_failslab+0xc2/0x120 [ 221.545091][ T7118] __kmalloc_cache_noprof+0x91/0x6d0 [ 221.545105][ T7118] ? copy_mount_options+0x55/0x190 [ 221.545123][ T7118] copy_mount_options+0x55/0x190 [ 221.545138][ T7118] __x64_sys_mount+0x1ab/0x310 [ 221.545150][ T7118] ? __pfx___x64_sys_mount+0x10/0x10 [ 221.545166][ T7118] do_syscall_64+0x123/0x790 [ 221.545181][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.545193][ T7118] RIP: 0033:0x7f5c8159e159 [ 221.545205][ T7118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.545217][ T7118] RSP: 002b:00007f5c8250c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 221.545229][ T7118] RAX: ffffffffffffffda RBX: 00007f5c81826090 RCX: 00007f5c8159e159 [ 221.545237][ T7118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.545244][ T7118] RBP: 00007f5c8163506b R08: 00002000000002c0 R09: 0000000000000000 [ 221.545251][ T7118] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 221.545258][ T7118] R13: 00007f5c81826128 R14: 00007f5c81826090 R15: 00007ffd975ce238 [ 221.545273][ T7118] [ 222.185330][ T191] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 222.376467][ T191] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 222.380507][ T191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.380527][ T191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.423072][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.423100][ T191] usb 5-1: Product: syz [ 222.423109][ T191] usb 5-1: Manufacturer: syz [ 222.423118][ T191] usb 5-1: SerialNumber: syz [ 222.471071][ T191] symbolserial 5-1:1.0: symbol converter detected [ 222.495824][ T191] usb 5-1: symbol converter now attached to ttyUSB0 [ 223.817438][ T7131] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 223.818746][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.818836][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.818865][ T1160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.818884][ T1160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.836831][ T31] audit: type=1400 audit(1791057123.723:589): avc: denied { getopt } for pid=7130 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.910903][ T31] audit: type=1400 audit(1791057123.813:590): avc: denied { setopt } for pid=7130 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.048596][ T1865] usb 5-1: USB disconnect, device number 19 [ 224.086165][ T1865] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 224.090014][ T1865] symbolserial 5-1:1.0: device disconnected [ 225.878941][ T1865] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 226.230239][ T1865] usb 2-1: Using ep0 maxpacket: 32 [ 226.268013][ T1865] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 226.273405][ T1865] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 226.273423][ T1865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.273434][ T1865] usb 2-1: config 0 has no interface number 0 [ 226.319588][ T1865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.319606][ T1865] usb 2-1: Product: syz [ 226.319615][ T1865] usb 2-1: Manufacturer: syz [ 226.319623][ T1865] usb 2-1: SerialNumber: syz [ 226.523767][ T1865] usb 2-1: config 0 descriptor?? [ 226.583602][ T1865] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 226.795168][ T4919] Bluetooth: hci5: command 0x0406 tx timeout [ 226.873924][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.373'. [ 226.918580][ T7154] ipvlan2: entered allmulticast mode [ 226.918597][ T7154] syz_tun: entered allmulticast mode [ 226.989757][ T1865] usb 2-1: qt2_attach - failed to power on unit: -71 [ 226.989863][ T1865] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 227.031611][ T1865] usb 2-1: USB disconnect, device number 15 [ 227.252522][ T31] audit: type=1400 audit(1791057127.153:591): avc: denied { read } for pid=7159 comm="syz.5.375" name="trace_pipe" dev="tracefs" ino=4242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 227.324457][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 227.324494][ T7162] openvswitch: netlink: EtherType 0 is less than min 600 [ 227.735166][ T1865] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 228.194113][ T1865] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.544391][ T1865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.544414][ T1865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.544428][ T1865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.544465][ T1865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.969554][ T1865] usb 4-1: config 0 descriptor?? [ 229.091484][ T7171] input: syz1 as /devices/virtual/input/input9 [ 229.308370][ T31] audit: type=1400 audit(1791057129.213:592): avc: denied { shutdown } for pid=7177 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.426998][ T1865] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 229.461830][ T7178] xt_hashlimit: max too large, truncated to 1048576 [ 230.346630][ T31] audit: type=1400 audit(1791057130.243:593): avc: denied { execute } for pid=7177 comm="syz.1.381" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 230.694485][ T31] audit: type=1400 audit(1791057130.593:594): avc: denied { ioctl } for pid=7177 comm="syz.1.381" path="/87/tracing/events/sched/filter" dev="tracefs" ino=19680823 ioctlcmd=0x55d1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 231.363742][ T31] audit: type=1400 audit(1791057131.263:595): avc: denied { setopt } for pid=7191 comm="syz.2.386" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.987808][ T1865] usb 4-1: reset full-speed USB device number 11 using dummy_hcd [ 232.205200][ T1865] usb 4-1: device descriptor read/64, error -32 [ 232.565147][ T1865] usb 4-1: reset full-speed USB device number 11 using dummy_hcd [ 232.987905][ T1865] usb 4-1: device descriptor read/64, error -32 [ 233.054355][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 233.067043][ T7209] FAULT_INJECTION: forcing a failure. [ 233.067043][ T7209] name failslab, interval 1, probability 0, space 0, times 0 [ 233.067068][ T7209] CPU: 0 UID: 0 PID: 7209 Comm: syz.5.392 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.067087][ T7209] Tainted: [L]=SOFTLOCKUP [ 233.067091][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.067098][ T7209] Call Trace: [ 233.067102][ T7209] [ 233.067107][ T7209] dump_stack_lvl+0x100/0x190 [ 233.067131][ T7209] should_fail_ex.cold+0x5/0xa [ 233.067149][ T7209] should_failslab+0xc2/0x120 [ 233.067166][ T7209] __kmalloc_noprof+0xfc/0x840 [ 233.067180][ T7209] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 233.067203][ T7209] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 233.067225][ T7209] genl_family_rcv_msg_doit+0xc7/0x300 [ 233.067243][ T7209] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.067266][ T7209] ? bpf_lsm_capable+0x9/0x10 [ 233.067276][ T7209] ? security_capable+0x80/0x260 [ 233.067290][ T7209] ? ns_capable+0xd2/0xf0 [ 233.067304][ T7209] genl_rcv_msg+0x560/0x800 [ 233.067323][ T7209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.067340][ T7209] ? __lock_acquire+0x5c0/0x1f40 [ 233.067353][ T7209] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 233.067376][ T7209] netlink_rcv_skb+0x159/0x420 [ 233.067395][ T7209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.067412][ T7209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.067434][ T7209] ? netlink_deliver_tap+0x1ae/0xcc0 [ 233.067451][ T7209] genl_rcv+0x28/0x40 [ 233.067466][ T7209] netlink_unicast+0x585/0x850 [ 233.067483][ T7209] ? __pfx_netlink_unicast+0x10/0x10 [ 233.067498][ T7209] ? __pfx_sock_has_perm+0x10/0x10 [ 233.067514][ T7209] netlink_sendmsg+0x8b0/0xda0 [ 233.067532][ T7209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.067549][ T7209] ? selinux_socket_sendmsg+0x198/0x2f0 [ 233.067566][ T7209] ____sys_sendmsg+0xa4d/0xbe0 [ 233.067577][ T7209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.067594][ T7209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.067610][ T7209] ? lock_acquire+0x1d1/0x380 [ 233.067622][ T7209] ? get_pid_task+0x2a/0x250 [ 233.067639][ T7209] ___sys_sendmsg+0x190/0x1e0 [ 233.067653][ T7209] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.067666][ T7209] ? get_pid_task+0x106/0x250 [ 233.067688][ T7209] ? find_held_lock+0x2b/0x80 [ 233.067715][ T7209] __sys_sendmsg+0x160/0x210 [ 233.067733][ T7209] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.067761][ T7209] do_syscall_64+0x123/0x790 [ 233.067775][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.067787][ T7209] RIP: 0033:0x7f5c8159e159 [ 233.067797][ T7209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.067808][ T7209] RSP: 002b:00007f5c8252d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.067819][ T7209] RAX: ffffffffffffffda RBX: 00007f5c81825fa0 RCX: 00007f5c8159e159 [ 233.067827][ T7209] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 233.067845][ T7209] RBP: 00007f5c8252d090 R08: 0000000000000000 R09: 0000000000000000 [ 233.067851][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.067858][ T7209] R13: 00007f5c81826038 R14: 00007f5c81825fa0 R15: 00007ffd975ce238 [ 233.067874][ T7209] [ 233.448112][ T9] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 233.558911][ T7216] FAULT_INJECTION: forcing a failure. [ 233.558911][ T7216] name failslab, interval 1, probability 0, space 0, times 0 [ 233.558948][ T7216] CPU: 0 UID: 0 PID: 7216 Comm: syz.3.394 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.558965][ T7216] Tainted: [L]=SOFTLOCKUP [ 233.558969][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.558975][ T7216] Call Trace: [ 233.558979][ T7216] [ 233.558984][ T7216] dump_stack_lvl+0x100/0x190 [ 233.559006][ T7216] should_fail_ex.cold+0x5/0xa [ 233.559023][ T7216] should_failslab+0xc2/0x120 [ 233.559040][ T7216] __kvmalloc_node_noprof+0x113/0x9b0 [ 233.559054][ T7216] ? __kmalloc_cache_noprof+0x201/0x6d0 [ 233.559068][ T7216] ? percpu_ref_init+0xec/0x3f0 [ 233.559079][ T7216] ? io_alloc_cache_init+0x38/0x170 [ 233.559093][ T7216] io_alloc_cache_init+0x38/0x170 [ 233.559105][ T7216] io_uring_setup.cold+0x48c/0x1cde [ 233.559118][ T7216] ? lock_acquire+0x1d1/0x380 [ 233.559131][ T7216] ? avc_has_perm_noaudit+0x56/0x470 [ 233.559150][ T7216] ? __pfx_io_uring_setup+0x10/0x10 [ 233.559165][ T7216] ? find_held_lock+0x2b/0x80 [ 233.559182][ T7216] ? avc_has_perm_noaudit+0x11e/0x470 [ 233.559199][ T7216] ? avc_has_perm_noaudit+0x11e/0x470 [ 233.559227][ T7216] ? ksys_write+0x1ac/0x250 [ 233.559240][ T7216] ? __pfx_ksys_write+0x10/0x10 [ 233.559256][ T7216] __x64_sys_io_uring_setup+0xc2/0x170 [ 233.559273][ T7216] do_syscall_64+0x123/0x790 [ 233.559287][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.559299][ T7216] RIP: 0033:0x7f20bb99e159 [ 233.559309][ T7216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.559320][ T7216] RSP: 002b:00007f20bc93ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 233.559331][ T7216] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f20bb99e159 [ 233.559339][ T7216] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 000000000000424e [ 233.559346][ T7216] RBP: 00007f20bc940090 R08: 0000000000000000 R09: 0000000000000101 [ 233.559353][ T7216] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 233.559360][ T7216] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffd345ae718 [ 233.559375][ T7216] [ 234.523452][ T987] usb 4-1: USB disconnect, device number 11 [ 234.962985][ T7213] fido_id[7213]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 235.317226][ T7234] FAULT_INJECTION: forcing a failure. [ 235.317226][ T7234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.317248][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.2.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.317264][ T7234] Tainted: [L]=SOFTLOCKUP [ 235.317268][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.317276][ T7234] Call Trace: [ 235.317280][ T7234] [ 235.317285][ T7234] dump_stack_lvl+0x100/0x190 [ 235.317307][ T7234] should_fail_ex.cold+0x5/0xa [ 235.317324][ T7234] _copy_from_user+0x2e/0xd0 [ 235.317341][ T7234] kstrtouint_from_user+0xd6/0x1d0 [ 235.317359][ T7234] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 235.317380][ T7234] ? lock_acquire+0x1d1/0x380 [ 235.317397][ T7234] proc_fail_nth_write+0x83/0x220 [ 235.317414][ T7234] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 235.317435][ T7234] vfs_write+0x2aa/0x1050 [ 235.317449][ T7234] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 235.317464][ T7234] ? lock_acquire+0x1d1/0x380 [ 235.317477][ T7234] ? __fget_files+0x34/0x3d0 [ 235.317494][ T7234] ? __pfx_vfs_write+0x10/0x10 [ 235.317505][ T7234] ? find_held_lock+0x2b/0x80 [ 235.317523][ T7234] ? __fget_files+0x215/0x3d0 [ 235.317541][ T7234] ? __fget_files+0x21f/0x3d0 [ 235.317561][ T7234] ksys_write+0x12a/0x250 [ 235.317574][ T7234] ? __pfx_ksys_write+0x10/0x10 [ 235.317592][ T7234] do_syscall_64+0x123/0x790 [ 235.317608][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.317620][ T7234] RIP: 0033:0x7f90cbd5e98e [ 235.317630][ T7234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.317641][ T7234] RSP: 002b:00007f90ccd3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.317652][ T7234] RAX: ffffffffffffffda RBX: 00007f90ccd3b6c0 RCX: 00007f90cbd5e98e [ 235.317660][ T7234] RDX: 0000000000000001 RSI: 00007f90ccd3b0a0 RDI: 0000000000000005 [ 235.317667][ T7234] RBP: 00007f90ccd3b090 R08: 0000000000000000 R09: 0000000000000000 [ 235.317674][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.317680][ T7234] R13: 00007f90cc026038 R14: 00007f90cc025fa0 R15: 00007fff0ea2be58 [ 235.317697][ T7234] [ 235.596269][ T987] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 236.671730][ T987] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.674886][ T987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.674905][ T987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.674918][ T987] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.674943][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.740297][ T987] usb 4-1: config 0 descriptor?? [ 237.889509][ T7239] FAULT_INJECTION: forcing a failure. [ 237.889509][ T7239] name failslab, interval 1, probability 0, space 0, times 0 [ 237.889534][ T7239] CPU: 0 UID: 0 PID: 7239 Comm: syz.5.400 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.889550][ T7239] Tainted: [L]=SOFTLOCKUP [ 237.889556][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 237.889564][ T7239] Call Trace: [ 237.889568][ T7239] [ 237.889573][ T7239] dump_stack_lvl+0x100/0x190 [ 237.889594][ T7239] should_fail_ex.cold+0x5/0xa [ 237.889609][ T7239] ? lock_acquire+0x1d1/0x380 [ 237.889624][ T7239] should_failslab+0xc2/0x120 [ 237.889640][ T7239] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 237.889656][ T7239] ? zswap_store+0xc6d/0x2e70 [ 237.889671][ T7239] zswap_store+0xc6d/0x2e70 [ 237.889689][ T7239] ? __pfx_zswap_store+0x10/0x10 [ 237.889701][ T7239] ? lock_acquire+0x1d1/0x380 [ 237.889714][ T7239] ? do_raw_spin_lock+0x128/0x260 [ 237.889730][ T7239] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 237.889745][ T7239] ? find_held_lock+0x2b/0x80 [ 237.889762][ T7239] ? swap_writeout+0xdd8/0x1b20 [ 237.889773][ T7239] ? swap_writeout+0xdd8/0x1b20 [ 237.889788][ T7239] swap_writeout+0xde0/0x1b20 [ 237.889805][ T7239] shrink_folio_list+0x4ffb/0x5e40 [ 237.889827][ T7239] ? rcu_is_watching+0x13/0xc0 [ 237.889845][ T7239] ? __pfx_shrink_folio_list+0x10/0x10 [ 237.889859][ T7239] ? lockdep_hardirqs_on+0x7d/0x110 [ 237.889873][ T7239] ? enqueue_to_backlog+0x430/0x1130 [ 237.889894][ T7239] ? netif_rx_internal+0x109/0x600 [ 237.889910][ T7239] ? sock_wfree+0x2cc/0x7f0 [ 237.889925][ T7239] ? __pfx_netif_rx_internal+0x10/0x10 [ 237.889941][ T7239] ? find_held_lock+0x2b/0x80 [ 237.889957][ T7239] ? sock_wfree+0x3fd/0x7f0 [ 237.889971][ T7239] ? sock_wfree+0x3fd/0x7f0 [ 237.890001][ T7239] ? __lock_acquire+0x5c0/0x1f40 [ 237.890014][ T7239] ? __css_rstat_updated+0x1ce/0x590 [ 237.890030][ T7239] ? __pfx___css_rstat_updated+0x10/0x10 [ 237.890047][ T7239] reclaim_folio_list+0xe9/0x5e0 [ 237.890065][ T7239] ? __pfx_reclaim_folio_list+0x10/0x10 [ 237.890081][ T7239] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 237.890103][ T7239] ? lru_gen_update_size+0x431/0xe20 [ 237.890122][ T7239] ? lru_gen_del_folio+0x382/0x5f0 [ 237.890138][ T7239] reclaim_pages+0x428/0x5e0 [ 237.890156][ T7239] ? __pfx_reclaim_pages+0x10/0x10 [ 237.890172][ T7239] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 237.890191][ T7239] ? folio_isolate_lru+0xd6/0xe90 [ 237.890210][ T7239] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 237.890233][ T7239] ? rcu_read_unlock+0x17/0x60 [ 237.890245][ T7239] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 237.890263][ T7239] ? __mod_zone_page_state+0xdb/0x190 [ 237.890285][ T7239] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 237.890304][ T7239] walk_pgd_range+0xbef/0x1e00 [ 237.890321][ T7239] ? find_held_lock+0x2b/0x80 [ 237.890343][ T7239] ? __pfx_walk_pgd_range+0x10/0x10 [ 237.890357][ T7239] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 237.890377][ T7239] __walk_page_range+0x171/0x850 [ 237.890398][ T7239] walk_page_range_vma_unsafe+0x209/0x8f0 [ 237.890414][ T7239] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 237.890430][ T7239] ? find_held_lock+0x2b/0x80 [ 237.890446][ T7239] ? mlock_drain_local+0x254/0x4e0 [ 237.890458][ T7239] ? mlock_drain_local+0x254/0x4e0 [ 237.890472][ T7239] walk_page_range_vma+0x63/0x90 [ 237.890487][ T7239] madvise_pageout+0x29e/0x5b0 [ 237.890509][ T7239] ? __pfx_madvise_pageout+0x10/0x10 [ 237.890537][ T7239] madvise_vma_behavior+0x48b/0x2350 [ 237.890556][ T7239] ? mas_prev+0xa4/0x100 [ 237.890571][ T7239] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 237.890590][ T7239] ? mas_walk+0x260/0x310 [ 237.890602][ T7239] ? find_vma_prev+0xd8/0x150 [ 237.890617][ T7239] ? __pfx_find_vma_prev+0x10/0x10 [ 237.890635][ T7239] ? __pfx__kstrtoull+0x10/0x10 [ 237.890654][ T7239] ? lock_acquire+0x1d1/0x380 [ 237.890669][ T7239] madvise_walk_vmas+0x30e/0xc50 [ 237.890689][ T7239] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 237.890712][ T7239] ? lock_acquire+0x1d1/0x380 [ 237.890727][ T7239] madvise_do_behavior+0x1ea/0x510 [ 237.890745][ T7239] ? __pfx_madvise_do_behavior+0x10/0x10 [ 237.890763][ T7239] ? down_read+0x13b/0x4c0 [ 237.890785][ T7239] do_madvise+0x238/0x290 [ 237.890801][ T7239] ? __pfx_do_madvise+0x10/0x10 [ 237.890822][ T7239] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.890842][ T7239] ? ksys_write+0x1ac/0x250 [ 237.890855][ T7239] ? __pfx_ksys_write+0x10/0x10 [ 237.890871][ T7239] __x64_sys_madvise+0xa9/0x110 [ 237.890888][ T7239] ? lockdep_hardirqs_on+0x7d/0x110 [ 237.890900][ T7239] do_syscall_64+0x123/0x790 [ 237.890914][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.890926][ T7239] RIP: 0033:0x7f5c8159e159 [ 237.890937][ T7239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.890948][ T7239] RSP: 002b:00007f5c8252d028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 237.890959][ T7239] RAX: ffffffffffffffda RBX: 00007f5c81825fa0 RCX: 00007f5c8159e159 [ 237.890967][ T7239] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 237.890974][ T7239] RBP: 00007f5c8252d090 R08: 0000000000000000 R09: 0000000000000000 [ 237.890981][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.890987][ T7239] R13: 00007f5c81826038 R14: 00007f5c81825fa0 R15: 00007ffd975ce238 [ 237.891003][ T7239] [ 238.541846][ T987] usbhid 4-1:0.0: can't add hid device: -71 [ 238.541926][ T987] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 238.569810][ T987] usb 4-1: USB disconnect, device number 12 [ 238.949938][ T1865] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 239.096342][ T1865] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.098678][ T1865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.098704][ T1865] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 239.098742][ T1865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.101820][ T1865] usb 2-1: config 0 descriptor?? [ 239.168580][ T1865] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 239.220116][ T7259] FAULT_INJECTION: forcing a failure. [ 239.220116][ T7259] name failslab, interval 1, probability 0, space 0, times 0 [ 239.220138][ T7259] CPU: 0 UID: 0 PID: 7259 Comm: syz.5.407 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.220157][ T7259] Tainted: [L]=SOFTLOCKUP [ 239.220161][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.220168][ T7259] Call Trace: [ 239.220172][ T7259] [ 239.220177][ T7259] dump_stack_lvl+0x100/0x190 [ 239.220199][ T7259] should_fail_ex.cold+0x5/0xa [ 239.220217][ T7259] should_failslab+0xc2/0x120 [ 239.220234][ T7259] __kmalloc_noprof+0xfc/0x840 [ 239.220248][ T7259] ? tomoyo_encode2+0xfb/0x3c0 [ 239.220267][ T7259] tomoyo_encode2+0xfb/0x3c0 [ 239.220285][ T7259] tomoyo_encode+0x29/0x50 [ 239.220300][ T7259] tomoyo_realpath_from_path+0x18c/0x690 [ 239.220321][ T7259] tomoyo_path_number_perm+0x23c/0x580 [ 239.220334][ T7259] ? tomoyo_path_number_perm+0x22e/0x580 [ 239.220348][ T7259] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 239.220368][ T7259] ? __lock_acquire+0x5c0/0x1f40 [ 239.220389][ T7259] ? __fget_files+0x34/0x3d0 [ 239.220406][ T7259] ? find_held_lock+0x2b/0x80 [ 239.220422][ T7259] ? hook_file_ioctl_common+0x140/0x440 [ 239.220443][ T7259] ? __fget_files+0x21f/0x3d0 [ 239.220461][ T7259] security_file_ioctl+0xd3/0x230 [ 239.220477][ T7259] __x64_sys_ioctl+0xb7/0x210 [ 239.220492][ T7259] do_syscall_64+0x123/0x790 [ 239.220507][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.220519][ T7259] RIP: 0033:0x7f5c8159e159 [ 239.220528][ T7259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.220539][ T7259] RSP: 002b:00007f5c8252d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.220550][ T7259] RAX: ffffffffffffffda RBX: 00007f5c81825fa0 RCX: 00007f5c8159e159 [ 239.220558][ T7259] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 239.220565][ T7259] RBP: 00007f5c8252d090 R08: 0000000000000000 R09: 0000000000000000 [ 239.220572][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.220579][ T7259] R13: 00007f5c81826038 R14: 00007f5c81825fa0 R15: 00007ffd975ce238 [ 239.220595][ T7259] [ 239.220620][ T7259] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.538560][ T31] audit: type=1400 audit(1791057139.443:596): avc: denied { mount } for pid=7261 comm="syz.3.408" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 239.582997][ T31] audit: type=1400 audit(1791057139.483:597): avc: denied { watch } for pid=7261 comm="syz.3.408" path="/87/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 239.616383][ T31] audit: type=1400 audit(1791057139.523:598): avc: denied { create } for pid=7261 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 239.971298][ T7280] syzkaller0: entered promiscuous mode [ 239.971312][ T7280] syzkaller0: entered allmulticast mode [ 240.023253][ T31] audit: type=1400 audit(1791057139.923:599): avc: denied { create } for pid=7279 comm="syz.5.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.023663][ T31] audit: type=1400 audit(1791057139.923:600): avc: denied { setopt } for pid=7279 comm="syz.5.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.023878][ T31] audit: type=1400 audit(1791057139.923:601): avc: denied { write } for pid=7279 comm="syz.5.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.116241][ T7282] fuse: root generation should be zero [ 240.372577][ T31] audit: type=1400 audit(1791057140.273:602): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 240.476752][ T31] audit: type=1400 audit(1791057140.383:603): avc: denied { map } for pid=7286 comm="syz.4.413" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 240.485621][ T987] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 240.821048][ T7301] FAULT_INJECTION: forcing a failure. [ 240.821048][ T7301] name failslab, interval 1, probability 0, space 0, times 0 [ 240.821085][ T7301] CPU: 0 UID: 0 PID: 7301 Comm: syz.5.417 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.821102][ T7301] Tainted: [L]=SOFTLOCKUP [ 240.821106][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.821113][ T7301] Call Trace: [ 240.821118][ T7301] [ 240.821123][ T7301] dump_stack_lvl+0x100/0x190 [ 240.821145][ T7301] should_fail_ex.cold+0x5/0xa [ 240.821163][ T7301] should_failslab+0xc2/0x120 [ 240.821180][ T7301] kmem_cache_alloc_noprof+0x92/0x6a0 [ 240.821195][ T7301] ? seq_open+0x55/0x170 [ 240.821213][ T7301] seq_open+0x55/0x170 [ 240.821226][ T7301] ftrace_event_set_open+0x146/0x380 [ 240.821246][ T7301] do_dentry_open+0x6ab/0x14d0 [ 240.821260][ T7301] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 240.821280][ T7301] vfs_open+0x82/0x3f0 [ 240.821299][ T7301] path_openat+0x19fa/0x2440 [ 240.821318][ T7301] ? __pfx_path_openat+0x10/0x10 [ 240.821339][ T7301] do_file_open+0x20e/0x430 [ 240.821356][ T7301] ? __pfx_do_file_open+0x10/0x10 [ 240.821383][ T7301] ? _raw_spin_unlock+0x28/0x50 [ 240.821402][ T7301] ? alloc_fd+0x471/0x7a0 [ 240.821423][ T7301] do_sys_openat2+0x10f/0x1e0 [ 240.821440][ T7301] ? __pfx_do_sys_openat2+0x10/0x10 [ 240.821458][ T7301] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 240.821472][ T7301] ? __fget_files+0x21f/0x3d0 [ 240.821490][ T7301] __x64_sys_openat+0x12d/0x210 [ 240.821508][ T7301] ? __pfx___x64_sys_openat+0x10/0x10 [ 240.821525][ T7301] ? ksys_write+0x1ac/0x250 [ 240.821543][ T7301] do_syscall_64+0x123/0x790 [ 240.821558][ T7301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.821570][ T7301] RIP: 0033:0x7f5c8159e159 [ 240.821581][ T7301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.821592][ T7301] RSP: 002b:00007f5c8250c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.821603][ T7301] RAX: ffffffffffffffda RBX: 00007f5c81826090 RCX: 00007f5c8159e159 [ 240.821611][ T7301] RDX: 0000000000121302 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 240.821618][ T7301] RBP: 00007f5c8250c090 R08: 0000000000000000 R09: 0000000000000000 [ 240.821625][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.821632][ T7301] R13: 00007f5c81826128 R14: 00007f5c81826090 R15: 00007ffd975ce238 [ 240.821648][ T7301] [ 240.878535][ T7302] ip_tables: iptables: counters copy to user failed while replacing table [ 240.975563][ T987] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 240.997686][ T987] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.997732][ T987] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 240.997753][ T987] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 240.997777][ T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.555871][ T1865] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 241.580330][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'. [ 241.695659][ T7313] xt_TPROXY: Can be used only with -p tcp or -p udp [ 241.706035][ T1865] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.708915][ T1865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.708935][ T1865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.708947][ T1865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.708971][ T1865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.713103][ T1865] usb 4-1: config 0 descriptor?? [ 241.804780][ T10] usb 2-1: USB disconnect, device number 16 [ 241.870199][ T31] audit: type=1400 audit(1791057141.773:604): avc: denied { module_load } for pid=7314 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 241.981710][ T31] audit: type=1400 audit(1791057141.883:605): avc: denied { getopt } for pid=7318 comm="syz.4.425" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.159908][ T1865] usbhid 4-1:0.0: can't add hid device: -71 [ 242.159967][ T1865] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 242.180150][ T1865] usb 4-1: USB disconnect, device number 13 [ 242.245870][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 242.265270][ T6117] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 242.303828][ T7333] FAULT_INJECTION: forcing a failure. [ 242.303828][ T7333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.303868][ T7333] CPU: 0 UID: 0 PID: 7333 Comm: syz.5.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.303884][ T7333] Tainted: [L]=SOFTLOCKUP [ 242.303888][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.303895][ T7333] Call Trace: [ 242.303900][ T7333] [ 242.303904][ T7333] dump_stack_lvl+0x100/0x190 [ 242.303925][ T7333] should_fail_ex.cold+0x5/0xa [ 242.303943][ T7333] _copy_from_user+0x2e/0xd0 [ 242.303958][ T7333] copy_msghdr_from_user+0x9f/0x4c0 [ 242.303972][ T7333] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 242.303991][ T7333] ? lock_acquire+0x1d1/0x380 [ 242.304004][ T7333] ? get_pid_task+0x2a/0x250 [ 242.304022][ T7333] ___sys_sendmsg+0x106/0x1e0 [ 242.304036][ T7333] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.304048][ T7333] ? get_pid_task+0x106/0x250 [ 242.304070][ T7333] ? find_held_lock+0x2b/0x80 [ 242.304096][ T7333] __sys_sendmsg+0x160/0x210 [ 242.304113][ T7333] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.304138][ T7333] do_syscall_64+0x123/0x790 [ 242.304152][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.304164][ T7333] RIP: 0033:0x7f5c8159e159 [ 242.304174][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.304185][ T7333] RSP: 002b:00007f5c8252d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.304196][ T7333] RAX: ffffffffffffffda RBX: 00007f5c81825fa0 RCX: 00007f5c8159e159 [ 242.304209][ T7333] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 242.304216][ T7333] RBP: 00007f5c8252d090 R08: 0000000000000000 R09: 0000000000000000 [ 242.304223][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.304230][ T7333] R13: 00007f5c81826038 R14: 00007f5c81825fa0 R15: 00007ffd975ce238 [ 242.304245][ T7333] [ 242.442791][ T6117] usb 5-1: Using ep0 maxpacket: 16 [ 242.464776][ T6117] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 242.473489][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 242.550456][ T6117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.550473][ T6117] usb 5-1: Product: syz [ 242.550481][ T6117] usb 5-1: Manufacturer: syz [ 242.550490][ T6117] usb 5-1: SerialNumber: syz [ 242.627131][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 242.630990][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 242.631040][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 242.650268][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.650285][ T10] usb 2-1: Product: syz [ 242.650294][ T10] usb 2-1: Manufacturer: syz [ 242.650323][ T10] usb 2-1: SerialNumber: syz [ 242.704682][ T10] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 242.704700][ T10] usb 2-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 242.704721][ T10] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 243.025348][ T10] usb 2-1: failed to enable PITCH for EP 0x1 [ 243.031159][ T10] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 243.180678][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 243.180710][ T7346] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 243.218243][ T7349] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 243.279544][ T7349] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 243.521223][ T6117] usb 5-1: 1:1 : bogus bTerminalLink 5 [ 243.522143][ T6117] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 243.565283][ T10] usb 2-1: USB disconnect, device number 17 [ 244.135513][ T987] usb 3-1: USB disconnect, device number 16 [ 245.024424][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 245.024440][ T31] audit: type=1400 audit(1791057144.788:618): avc: denied { map } for pid=7365 comm="syz.1.435" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 245.024472][ T31] audit: type=1400 audit(1791057144.788:619): avc: denied { execute } for pid=7365 comm="syz.1.435" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 245.503413][ T6117] usb 5-1: USB disconnect, device number 20 [ 245.508975][ T31] audit: type=1400 audit(1791057145.246:620): avc: denied { write } for pid=7369 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.593384][ T7374] FAULT_INJECTION: forcing a failure. [ 245.593384][ T7374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.593409][ T7374] CPU: 0 UID: 0 PID: 7374 Comm: syz.2.436 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.593427][ T7374] Tainted: [L]=SOFTLOCKUP [ 245.593431][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 245.593439][ T7374] Call Trace: [ 245.593442][ T7374] [ 245.593448][ T7374] dump_stack_lvl+0x100/0x190 [ 245.593469][ T7374] should_fail_ex.cold+0x5/0xa [ 245.593486][ T7374] _copy_from_user+0x2e/0xd0 [ 245.593501][ T7374] copy_msghdr_from_user+0x9f/0x4c0 [ 245.593517][ T7374] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 245.593534][ T7374] ? lock_acquire+0x1d1/0x380 [ 245.593547][ T7374] ? get_pid_task+0x2a/0x250 [ 245.593565][ T7374] ___sys_sendmsg+0x106/0x1e0 [ 245.593578][ T7374] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.593591][ T7374] ? get_pid_task+0x106/0x250 [ 245.593612][ T7374] ? find_held_lock+0x2b/0x80 [ 245.593639][ T7374] __sys_sendmsg+0x160/0x210 [ 245.593656][ T7374] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.593680][ T7374] do_syscall_64+0x123/0x790 [ 245.593695][ T7374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.593707][ T7374] RIP: 0033:0x7f90cbd9e159 [ 245.593717][ T7374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.593728][ T7374] RSP: 002b:00007f90ccd3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.593740][ T7374] RAX: ffffffffffffffda RBX: 00007f90cc025fa0 RCX: 00007f90cbd9e159 [ 245.593747][ T7374] RDX: 000000002c0408d0 RSI: 0000200000000400 RDI: 0000000000000003 [ 245.593754][ T7374] RBP: 00007f90ccd3b090 R08: 0000000000000000 R09: 0000000000000000 [ 245.593761][ T7374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.593768][ T7374] R13: 00007f90cc026038 R14: 00007f90cc025fa0 R15: 00007fff0ea2be58 [ 245.593783][ T7374] [ 246.118121][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118144][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118157][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118170][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118183][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118196][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118209][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118222][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118234][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118714][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118729][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118743][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118756][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118769][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118781][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118794][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118807][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118819][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118846][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118859][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118872][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118885][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118898][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118910][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118923][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118936][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118948][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118967][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.118993][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.119006][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.119018][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.119031][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.119044][ T7379] IPVS: set_ctl: invalid protocol: 1 108.101.48.0:32770 [ 246.597992][ T5920] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.598024][ T5920] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.598043][ T5920] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.598062][ T5920] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.661335][ T7383] 9p: Bad value for 'rfdno' [ 246.745068][ T7387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'. [ 246.779024][ T31] audit: type=1400 audit(1791057146.434:621): avc: denied { read } for pid=7365 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.554868][ T6117] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 247.716453][ T6117] usb 5-1: Using ep0 maxpacket: 32 [ 247.716913][ T6117] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 247.717728][ T6117] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 247.717743][ T6117] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.717753][ T6117] usb 5-1: config 0 has no interface number 0 [ 247.724629][ T6117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.724644][ T6117] usb 5-1: Product: syz [ 247.724652][ T6117] usb 5-1: Manufacturer: syz [ 247.724661][ T6117] usb 5-1: SerialNumber: syz [ 247.818272][ T6117] usb 5-1: config 0 descriptor?? [ 247.822760][ T1865] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 247.840306][ T6117] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 247.979004][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'. [ 247.979058][ T7399] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 248.009406][ T31] audit: type=1400 audit(1791057147.585:622): avc: denied { read } for pid=7397 comm="syz.3.443" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 248.009455][ T31] audit: type=1400 audit(1791057147.585:623): avc: denied { open } for pid=7397 comm="syz.3.443" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 248.097731][ T1865] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.110658][ T1865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.110679][ T1865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.110693][ T1865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.110732][ T1865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.181019][ T1865] usb 2-1: config 0 descriptor?? [ 248.255598][ T31] audit: type=1400 audit(1791057147.818:624): avc: denied { rmdir } for pid=5963 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.345061][ T6117] usb 5-1: qt2_attach - failed to power on unit: -71 [ 248.345157][ T6117] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 248.395805][ T6117] usb 5-1: USB disconnect, device number 21 [ 248.774785][ T1865] usbhid 2-1:0.0: can't add hid device: -71 [ 248.774852][ T1865] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 248.800564][ T1865] usb 2-1: USB disconnect, device number 18 [ 248.876209][ T7407] Device name cannot be null; rc = [-22] [ 250.432919][ T31] audit: type=1400 audit(1791057149.848:625): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 250.540100][ T31] audit: type=1400 audit(1791057149.951:626): avc: denied { cmd } for pid=7413 comm="iou-wrk-7414" path="socket:[17876]" dev="sockfs" ino=17876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 250.830976][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.831011][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.831481][ T32] INFO: task syz.0.19:5858 blocked for more than 143 seconds. [ 250.831494][ T32] Tainted: G L syzkaller #0 [ 250.831501][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.831506][ T32] task:syz.0.19 state:D stack:26544 pid:5858 tgid:5857 ppid:5600 task_flags:0x400140 flags:0x00080002 [ 250.831560][ T32] Call Trace: [ 250.831564][ T32] [ 250.831571][ T32] __schedule+0x1259/0x6920 [ 250.831587][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 250.831606][ T32] ? do_raw_spin_lock+0x128/0x260 [ 250.831632][ T32] ? __pfx___schedule+0x10/0x10 [ 250.831642][ T32] ? find_held_lock+0x2b/0x80 [ 250.831660][ T32] ? schedule+0x225/0x2c0 [ 250.831692][ T32] schedule+0xdd/0x2c0 [ 250.831704][ T32] schedule_preempt_disabled+0x13/0x30 [ 250.831716][ T32] __mutex_lock+0xccb/0x1bd0 [ 250.831729][ T32] ? usbdev_ioctl+0x1a7/0x3a90 [ 250.831748][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 250.831761][ T32] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 250.831782][ T32] ? kasan_quarantine_put+0x104/0x240 [ 250.831799][ T32] ? find_held_lock+0x2b/0x80 [ 250.831827][ T32] ? tomoyo_path_number_perm+0x28f/0x580 [ 250.831847][ T32] ? usbdev_ioctl+0x1a7/0x3a90 [ 250.831860][ T32] usbdev_ioctl+0x1a7/0x3a90 [ 250.831877][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 250.831895][ T32] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.831912][ T32] ? do_vfs_ioctl+0x226/0x13e0 [ 250.831926][ T32] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 250.831938][ T32] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 250.831972][ T32] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 250.831999][ T32] ? selinux_file_ioctl+0x13b/0x290 [ 250.832013][ T32] ? selinux_file_ioctl+0xb6/0x290 [ 250.832030][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 250.832045][ T32] __x64_sys_ioctl+0x18e/0x210 [ 250.832060][ T32] do_syscall_64+0x123/0x790 [ 250.832075][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.832088][ T32] RIP: 0033:0x7f248279e159 [ 250.832110][ T32] RSP: 002b:00007f24836f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.832122][ T32] RAX: ffffffffffffffda RBX: 00007f2482a25fa0 RCX: 00007f248279e159 [ 250.832130][ T32] RDX: 9999999999999999 RSI: 000000004004550c RDI: 0000000000000003 [ 250.832137][ T32] RBP: 00007f248283506b R08: 0000000000000000 R09: 0000000000000000 [ 250.832145][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.832152][ T32] R13: 00007f2482a26038 R14: 00007f2482a25fa0 R15: 00007ffc90f57188 [ 250.832168][ T32] [ 250.832173][ T32] INFO: task syz.0.19:5861 blocked for more than 143 seconds. [ 250.832182][ T32] Tainted: G L syzkaller #0 [ 250.832189][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.832193][ T32] task:syz.0.19 state:D stack:28728 pid:5861 tgid:5857 ppid:5600 task_flags:0x400140 flags:0x00080002 [ 250.832228][ T32] Call Trace: [ 250.832238][ T32] [ 250.832256][ T32] __schedule+0x1259/0x6920 [ 250.832268][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 250.832285][ T32] ? do_raw_spin_lock+0x128/0x260 [ 250.832305][ T32] ? __pfx___schedule+0x10/0x10 [ 250.832315][ T32] ? find_held_lock+0x2b/0x80 [ 250.832332][ T32] ? schedule+0x225/0x2c0 [ 250.832346][ T32] schedule+0xdd/0x2c0 [ 250.832356][ T32] schedule_preempt_disabled+0x13/0x30 [ 250.832368][ T32] __mutex_lock+0xccb/0x1bd0 [ 250.832401][ T32] ? usbdev_ioctl+0x1a7/0x3a90 [ 250.832420][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 250.832433][ T32] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 250.832453][ T32] ? kasan_quarantine_put+0x104/0x240 [ 250.832469][ T32] ? find_held_lock+0x2b/0x80 [ 250.832485][ T32] ? tomoyo_path_number_perm+0x28f/0x580 [ 250.832503][ T32] ? usbdev_ioctl+0x1a7/0x3a90 [ 250.832516][ T32] usbdev_ioctl+0x1a7/0x3a90 [ 250.832546][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 250.832564][ T32] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.832580][ T32] ? do_vfs_ioctl+0x226/0x13e0 [ 250.832593][ T32] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 250.832605][ T32] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 250.832627][ T32] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 250.832645][ T32] ? __fget_files+0x34/0x3d0 [ 250.832686][ T32] ? selinux_file_ioctl+0x13b/0x290 [ 250.832701][ T32] ? selinux_file_ioctl+0xb6/0x290 [ 250.832717][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 250.832733][ T32] __x64_sys_ioctl+0x18e/0x210 [ 250.832748][ T32] do_syscall_64+0x123/0x790 [ 250.832762][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.832773][ T32] RIP: 0033:0x7f248279e159 [ 250.832783][ T32] RSP: 002b:00007f24836d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.832793][ T32] RAX: ffffffffffffffda RBX: 00007f2482a26090 RCX: 00007f248279e159 [ 250.832801][ T32] RDX: 0000200000000280 RSI: 000000008038550a RDI: 0000000000000003 [ 250.832824][ T32] RBP: 00007f248283506b R08: 0000000000000000 R09: 0000000000000000 [ 250.832832][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.832839][ T32] R13: 00007f2482a26128 R14: 00007f2482a26090 R15: 00007ffc90f57188 [ 250.832855][ T32] [ 250.832880][ T32] [ 250.832880][ T32] Showing all locks held in the system: [ 250.832889][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 250.832898][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 250.832941][ T32] locks held by kworker/0:3/987: 5, on CPU#0: [ 250.832966][ T32] #0: ffff888021e88d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 250.833002][ T32] #1: ffffc90004ccfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 250.833036][ T32] #2: ffff888022b041d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 250.833069][ T32] #3: ffff8880274e71d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 250.833111][ T32] #4: ffff88801cf6b1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 250.892217][ T32] locks held by getty/5359: 2, on CPU#0: [ 250.892229][ T32] #0: ffff888037b540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 250.892265][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 250.892293][ T32] locks held by udevd/5602: 4, on CPU#0: [ 250.892301][ T32] #0: ffff88802bea82d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 250.892344][ T32] #1: ffff888030183480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 250.892378][ T32] #2: ffff8880246b1698 (kn->active#19){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 250.892408][ T32] #3: ffff88802707c1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 250.892439][ T32] locks held by syz-executor/5608: 1, last CPU#0: [ 250.892447][ T32] #0: ffff88807cc26460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 250.892500][ T32] locks held by syz-executor/5610: 2, last CPU#0: [ 250.892509][ T32] #0: ffff888028f42460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 250.892543][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 250.892582][ T32] locks held by kworker/0:7/5726: 5, on CPU#0: [ 250.892590][ T32] #0: ffff888021e88d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 250.900241][ T32] #1: ffffc900046f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 250.900285][ T32] #2: ffff8880233011d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 250.900339][ T32] #3: ffff88802707c1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 250.900371][ T32] #4: ffff888022eba1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 250.900403][ T32] locks held by syz.0.19/5858: 1, on CPU#0: [ 250.900411][ T32] #0: ffff8880233011d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a7/0x3a90 [ 250.900441][ T32] locks held by syz.0.19/5861: 1, on CPU#0: [ 250.900462][ T32] #0: ffff8880233011d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a7/0x3a90 [ 250.900493][ T32] locks held by syz-executor/5963: 2, last CPU#0: [ 250.900501][ T32] #0: ffff888038374460 (sb_writers#5){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 250.900536][ T32] #1: ffff888037110c90 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730 [ 250.900575][ T32] locks held by cxacru/7349: 1, on CPU#0: [ 250.900589][ T32] #0: ffffffff8ec8fde8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 250.900629][ T32] locks held by syz.5.430/7354: 2, last CPU#0: [ 250.900642][ T32] #0: ffff888038374460 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 250.900672][ T32] #1: ffff8880750b30d0 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_buffered_write_iter+0xab/0x3c0 [ 250.900708][ T32] locks held by syz.3.445/7405: 1, last CPU#0: [ 250.900715][ T32] #0: ffff8880262cf470 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 250.900765][ T32] locks held by syz.1.448/7414: 2, last CPU#0: [ 250.900773][ T32] #0: ffff888033adc0a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __do_sys_io_uring_enter+0xa7e/0x1b10 [ 250.900805][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 250.965393][ T32] [ 250.965400][ T32] ============================================= [ 250.965400][ T32] [ 250.965419][ T32] NMI backtrace for cpu 0 [ 250.965430][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 250.965446][ T32] Tainted: [L]=SOFTLOCKUP [ 250.965450][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.965457][ T32] Call Trace: [ 250.965462][ T32] [ 250.965468][ T32] dump_stack_lvl+0x100/0x190 [ 250.965491][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 250.965510][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 250.965525][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 250.965544][ T32] sys_info+0x141/0x190 [ 250.965558][ T32] watchdog+0xcb1/0x1030 [ 250.965576][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 250.965595][ T32] ? __pfx_watchdog+0x10/0x10 [ 250.965609][ T32] ? __kthread_parkme+0x18f/0x230 [ 250.965625][ T32] ? kthread+0x13a/0x450 [ 250.965655][ T32] ? __pfx_watchdog+0x10/0x10 [ 250.965668][ T32] kthread+0x373/0x450 [ 250.965683][ T32] ? __pfx_kthread+0x10/0x10 [ 250.965700][ T32] ret_from_fork+0x730/0xd60 [ 250.965714][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 250.965728][ T32] ? __switch_to+0x800/0x10f0 [ 250.965745][ T32] ? __pfx_kthread+0x10/0x10 [ 250.965762][ T32] ret_from_fork_asm+0x1a/0x30 [ 250.965781][ T32] [ 251.071180][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 251.896550][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 251.907200][ T32] Tainted: [L]=SOFTLOCKUP [ 251.911495][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 251.921522][ T32] Call Trace: [ 251.924777][ T32] [ 251.927686][ T32] dump_stack_lvl+0x100/0x190 [ 251.932347][ T32] vpanic+0x553/0x970 [ 251.936301][ T32] ? __pfx_vpanic+0x10/0x10 [ 251.940778][ T32] panic+0xd1/0xe0 [ 251.944471][ T32] ? __pfx_panic+0x10/0x10 [ 251.948862][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 251.954998][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 251.961142][ T32] ? watchdog.cold+0x1ec/0x234 [ 251.965883][ T32] watchdog.cold+0x1fd/0x234 [ 251.970452][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 251.976239][ T32] ? __pfx_watchdog+0x10/0x10 [ 251.980969][ T32] ? __kthread_parkme+0x18f/0x230 [ 251.985975][ T32] ? kthread+0x13a/0x450 [ 251.990280][ T32] ? __pfx_watchdog+0x10/0x10 [ 251.994930][ T32] kthread+0x373/0x450 [ 251.998989][ T32] ? __pfx_kthread+0x10/0x10 [ 252.003556][ T32] ret_from_fork+0x730/0xd60 [ 252.008211][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 252.013296][ T32] ? __switch_to+0x800/0x10f0 [ 252.017957][ T32] ? __pfx_kthread+0x10/0x10 [ 252.022539][ T32] ret_from_fork_asm+0x1a/0x30 [ 252.027285][ T32] [ 252.030329][ T32] Kernel Offset: disabled [ 252.034632][ T32] Rebooting in 86400 seconds..