last executing test programs: 2m42.780229309s ago: executing program 1 (id=118): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x4d10, 0x2, 0x2, 0x0, 0x0) 2m39.674543543s ago: executing program 1 (id=126): sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0xfffffffffffffffd, 0x4004000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}]}, 0x24}}, 0x5d932ab277e89691) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x4000) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040010}, 0x20008040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4280}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '/\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000580)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x300069}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r8, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x80) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r7) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r10, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc2, 0x7f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4040044) recvmmsg(r7, &(0x7f0000005d80)=[{{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000001040)=[{&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f0000000ac0)=""/95, 0x5f}, {&(0x7f0000000b40)=""/6, 0x6}, {&(0x7f0000000b80)=""/212, 0xd4}, {&(0x7f0000000c80)=""/93, 0x5d}, {&(0x7f0000000d00)=""/30, 0x1e}, {&(0x7f0000000d40)=""/138, 0x8a}, {&(0x7f0000000e00)=""/247, 0xf7}, {&(0x7f0000000f00)=""/238, 0xee}, {&(0x7f0000001000)=""/52, 0x34}], 0xa, &(0x7f0000001100)=""/160, 0xa0}, 0x9}, {{&(0x7f00000011c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/14, 0xe}, {&(0x7f0000001340)=""/231, 0xe7}, {&(0x7f0000001440)=""/3, 0x3}, {&(0x7f0000001480)=""/74, 0x4a}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/29, 0x1d}], 0x7, &(0x7f00000025c0)=""/208, 0xd0}, 0x6e}, {{&(0x7f00000026c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002740)=""/68, 0x44}, {&(0x7f00000027c0)=""/150, 0x96}, {&(0x7f0000002880)=""/22, 0x16}, {&(0x7f00000028c0)=""/74, 0x4a}, {&(0x7f0000002940)=""/222, 0xde}, {&(0x7f0000002a40)=""/162, 0xa2}, {&(0x7f0000002b00)=""/190, 0xbe}], 0x7, &(0x7f0000002c40)=""/92, 0x5c}, 0x6}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000002cc0)=""/171, 0xab}, {&(0x7f0000002d80)=""/6, 0x6}, {&(0x7f0000002dc0)=""/187, 0xbb}, {&(0x7f0000002e80)=""/41, 0x29}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x5}, 0xd}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003f40)=""/91, 0x5b}, {&(0x7f0000003fc0)=""/185, 0xb9}, {&(0x7f0000004080)=""/116, 0x74}, {&(0x7f0000004100)=""/106, 0x6a}, {&(0x7f0000004180)=""/18, 0x12}, {&(0x7f00000041c0)=""/137, 0x89}], 0x6, &(0x7f0000004300)=""/187, 0xbb}, 0x5}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f00000043c0)=""/147, 0x93}, {&(0x7f0000004480)=""/190, 0xbe}], 0x2, &(0x7f0000004580)}, 0x1}, {{&(0x7f00000045c0)=@phonet, 0x80, &(0x7f0000004840)=[{&(0x7f0000004640)=""/29, 0x1d}, {&(0x7f0000004680)=""/178, 0xb2}, {&(0x7f0000004740)=""/203, 0xcb}], 0x3, &(0x7f0000004880)=""/120, 0x78}, 0x8}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000004900)=""/167, 0xa7}, {&(0x7f00000049c0)=""/242, 0xf2}, {&(0x7f0000004ac0)=""/114, 0x72}], 0x3}, 0x8}, {{&(0x7f0000004b80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/27, 0x1b}, {&(0x7f0000005c40)=""/43, 0x2b}, {&(0x7f0000005c80)=""/174, 0xae}], 0x4}, 0xfffffffa}], 0x9, 0x141, &(0x7f0000005fc0)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000006000)) r12 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000065c0), 0x40, 0x0) r13 = getpgrp(0x0) r14 = geteuid() lstat(&(0x7f0000006600)='./file0\x00', &(0x7f0000006640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = openat$urandom(0xffffffffffffff9c, &(0x7f00000066c0), 0x20002, 0x0) r17 = accept4$alg(r11, 0x0, 0x0, 0x80000) sendmmsg$unix(r11, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000006200)=[{&(0x7f0000006040)="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", 0xfd}, {&(0x7f0000006140)="9c307d22bc167b36ea236a861215bd3560e34802eb6c25f334eb6408510653a8564eea7895f97fb7278f5cd8b0ab6754c5ea11d4a7958b3726a08289cb5df6de9044b5649e637f5cc73829069d1e47926befaf198554689d029933ea73ac02e787e14e0108a09e341e5f4052aa161edc54df22211b7164ce048d4e5a456d6f38925b076d245d71499e33668ea0d80ee4bc", 0x91}], 0x2, &(0x7f0000006240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40000}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000006280)="ef1a0d35307fb76378ef846aa70a21cd2c0906535cbc4dce39785678b554179de4e141871e9523af8e6f299e3da61525c3035823840a39c152031e330a95e36f8a432738fd9f7b9266c1b52eab5675d6151d46899506de8ab906ee7d71295401deba08bfa6a771c351bafb35d7c9d6ae51d2a83728b504e32b441c83f5e519aeb77279509f1d33af7b0270033c4cf96f76aca82fd054bc386d4bc6ed2953dc5abd7d52a67f3bc272004ffa25d7a3caf66edd96ba78718cd21ba1b884a9169309859163702ae28a037cdd9aecff08e9d6", 0xd0}, {&(0x7f0000006380)="2ac1c59ca248bdf47c7e51ca3da9ad27ab15e92d176e59a89643bce5062fd4d723733849140b7e09f73c3fbc393d2f55e4db73a26b778ce7989acfe113c340ff77cc8d45bca94e74be170a6b991f6f39c19f796c6811c89bf353cf6fa1523609d881cc062c645d3bec0e36db5b1b85f732611e2448945b5af4f83fc77399e01779f3439959db991466a5f79277d083bed2663a", 0x93}, {&(0x7f0000006440)="a90b062c2d6e3d17a14eb1aafb9f613320f02cc19f2272bf62068ee787063846a28a111d77bca44eefdda39074d4cb1e7ab6ff8b01c3448a40ae52687def153e38042576c64cbeebfae30d3044132d049c7f774793b9452d580101418b874a087c8501879582b8fdba7dc8787be9deabd32b85649402698d83c3ef02727104f60da8055126e65674d04eaa34e04724f5", 0x90}, {&(0x7f0000006500)="fae2206463f60c002a115691a7776eb911c29324d740c889cf4e20a553ff6d3699a3708048e19f3fca77a46499fd2d96e0337bcf6823fd871be4e7dba0a323a361772ce0ebf069706721a5141020441eaec360a1384a540310850395cd", 0x5d}], 0x4, &(0x7f0000009d40)=[@rights={{0x2c, 0x1, 0x1, [r7, r11, r11, 0xffffffffffffffff, r11, 0xffffffffffffffff, r12]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x30, 0x1, 0x1, [r11, r11, r7, r7, r7, r7, r16, r11]}}, @rights={{0x1c, 0x1, 0x1, [r17, r7, r11]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0xf8, 0x20040000}}, {{&(0x7f0000009e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000009f40)=[{&(0x7f0000009ec0)="c1c43defff42de2801d42943f28fd4de9817fe7f9758437b8feb778e29cf82b497cee95979a3ff4d8d53fe4e42abc9072c41b3597cd5bcbeca663cecbcaad10df39999ccdf620a2fd02af890c54f6a2bc070", 0x52}], 0x1, &(0x7f000000a240)=[@rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r7, r7, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r11, 0xffffffffffffffff, r11, 0xffffffffffffffff, r7, r11]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r11, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r11, r7, r7]}}], 0x110, 0x20000010}}], 0x3, 0x4) 2m38.36840163s ago: executing program 1 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x4a}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m35.917884886s ago: executing program 1 (id=132): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x1, 0x0, 0x0) getsockname(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x2, 0xffd, @mcast1}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private2, @loopback, [0xff, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'ipvlan1\x00', {}, {}, 0x3a, 0x79, 0x5, 0x4d}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2m33.151828473s ago: executing program 1 (id=139): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x408280) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r0, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0xc0403d11, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) 2m32.153217692s ago: executing program 1 (id=141): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000080904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) timerfd_create(0x0, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000200)='GPL\x00'}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0xef7, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @loopback, 0xb9cd}, @ib={0x1b, 0x0, 0xbf, {"8535b62c8126bba5623b4b416408a797"}, 0x9, 0x1, 0xff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) pselect6(0x0, 0x0, 0x0, &(0x7f00000045c0)={0x3, 0x79c, 0x708, 0x4, 0x81, 0x5, 0xa83, 0x7}, &(0x7f0000004600), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m16.823667361s ago: executing program 32 (id=141): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000080904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) timerfd_create(0x0, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000200)='GPL\x00'}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0xef7, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @loopback, 0xb9cd}, @ib={0x1b, 0x0, 0xbf, {"8535b62c8126bba5623b4b416408a797"}, 0x9, 0x1, 0xff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) pselect6(0x0, 0x0, 0x0, &(0x7f00000045c0)={0x3, 0x79c, 0x708, 0x4, 0x81, 0x5, 0xa83, 0x7}, &(0x7f0000004600), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 14.057553497s ago: executing program 0 (id=635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0d000000010001", 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x1, 0x1000000}, 0x50) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 13.200394218s ago: executing program 4 (id=640): syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r0, 0x800, 0x70bd6a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8900}, 0x4081) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100627be7000fbdbdfd26b8876e0e5e695ea06488167d8d1318c2e78"], 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x40010) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f97", 0x67}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)}, {&(0x7f0000000d00)}], 0x6, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.432870117s ago: executing program 4 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x38f9, 0x0) ioctl$sock_TIOCINQ(r6, 0x5760, 0x0) fcntl$setstatus(r5, 0x4, 0x42c00) r7 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) syz_emit_vhci(0x0, 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r9, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x12) write(r3, &(0x7f0000000040), 0xffffff4a) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c) 11.347668793s ago: executing program 4 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8) setuid(0xee00) (async) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) (async) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 11.294859347s ago: executing program 2 (id=650): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.920242056s ago: executing program 0 (id=652): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100024e9e094099041a1026440102030109021b00010380800009043d05010402f9000000000000000000"], &(0x7f0000000b00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0xd9, 0x4e, 0x8, 0x4}, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x42080, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x5) 8.127791043s ago: executing program 5 (id=654): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x2, 0x1}, 0x10000d, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r3, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) 8.084481501s ago: executing program 2 (id=655): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f00000ba000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000180)={0x20000000}) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000140)='\x00fh', 0x3}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x0, 0xfffffffd, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x44, 0x0, [0x800, 0xfffffff7]}}) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2201}, 0x18, 0x0) r3 = syz_io_uring_setup(0x531b, &(0x7f0000000200)={0x0, 0xb62c, 0x4000, 0x5, 0x240}, &(0x7f0000000280), &(0x7f0000001e00)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x4000000, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}], 0x1, 0x48094) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x334, 0x4, 0x81, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) landlock_restrict_self(r2, 0xf) 8.074889867s ago: executing program 4 (id=657): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) getrlimit(0xd, &(0x7f0000000100)) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0xc, 0x4, 0x6, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000100), 0x0, 0x18040) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x1000008, @loopback, 0xa557}}, 0x0, 0x0, 0x3fc, 0x5}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01100000000000000a004e2400000003ff0100000000000000000000000000010d000000000000000000000000000000000000000000000000000000000000000000000032b59090875b1d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a004e240000010100000000000000000000000000000001009c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22ffffffc000000000000000000000ffffe000000201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23000003ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000007fc02000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220000000bff02000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000002e28dc26a50ccfd0000000000000000aa0100"/912], 0x390) 7.910546212s ago: executing program 0 (id=658): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x27) syz_usb_connect$hid(0x6, 0x5d, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) chdir(0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = creat(0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev, @dev}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0xfc, 0x4, 0xb, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8000, 0x3, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7, 0x40, 0x96e, 0x2, {{0x18, 0x4, 0x3, 0x3a, 0x60, 0x65, 0x0, 0x3, 0x2f, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x2e, 0x3, 0x3, [{@rand_addr=0x64010102, 0x5d6c}, {@local}]}, @ra={0x94, 0x4}, @generic={0x44, 0x4, "aa5c"}, @generic={0x83, 0x4, "d65a"}, @ssrr={0x89, 0xb, 0x7, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x20, 0x3, [{0x6, 0x2}, {0x6, 0xb, "17fac9f425815ab037"}, {0x2, 0xd, "2e5649b16b38f24e5eebed"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf25010000002800018008000700", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB="14000400ff0100000000000000000000000000011c0006800800060000000000060005004e20000006000100020000001c000180060001000a000000060005004e230000080006001200000005000500fc00000044000680060001000200000014000400fe8000000000000000000000000000aa0800060000000000140004000000000000000000000000000000000108000700", @ANYRES32=r6, @ANYBLOB="0c0006800500020003000000080004004f00006c0500ad0f2f05000100ffffda2c84f2574a4c747ebe5ab8187ab0d8b1107b2e9327060ccd292471c8d9b72bf153f1727af417aff71751f7a5b5d079e756de3771490d14a1f1fb0bd652e2e51d3452889a36d41777b666c9adf6ff269786acff8fc94b67f004bb3c62c8a8aa7348e4039878b9a9cf919a03729c770c7b8a"], 0xdc}, 0x1, 0x0, 0x0, 0x8841}, 0x200400c0) mknod$loop(0x0, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(r7, &(0x7f0000000700)=""/224, 0xe0) mknod$loop(0x0, 0x800, 0x1) creat(0x0, 0x175) creat(0x0, 0x0) creat(0x0, 0x185) 6.736433647s ago: executing program 2 (id=660): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = fanotify_init(0x2, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2fca01, 0x21) fanotify_mark(r0, 0x0, 0x1, r1, &(0x7f0000000140)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfd61) prlimit64(0x0, 0xf, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3a8}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 6.352570651s ago: executing program 5 (id=662): getpgrp(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, 0x0, &(0x7f0000000080)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb6}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xfe, 0x80, '\x00', 0x22}, @multicast, @empty}}}}, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000005340)={0x78, 0x0, 0x0, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, 0x0, 0x0, 0xb, 0x8, 0x1000000}}}, 0x78) 5.97593651s ago: executing program 4 (id=663): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-ce\x00'}, 0x2c) 5.776159944s ago: executing program 2 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xf6, &(0x7f0000000440)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0xbc, 0x6, 0x0, @mcast2, @local, {[@srh={0x8, 0x14, 0x4, 0xa, 0x0, 0x40, 0x704c, [@rand_addr=' \x01\x00', @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}]}], {{0x0, 0x4003, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x20084884) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e1e}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000000080), 0x186, 0x904) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) 5.442948737s ago: executing program 3 (id=665): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x540}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) 5.233314201s ago: executing program 5 (id=666): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(r0, 0x40087101, 0x20001100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x8, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 4.591980357s ago: executing program 5 (id=667): syz_socket_connect_nvme_tcp() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioprio_get$pid(0x1, r0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x7e, 0xf69}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @default, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r3, 0x5452, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000080)) capset(&(0x7f0000000580)={0x20080522}, &(0x7f0000000040)={0x200000, 0x4200003, 0x9, 0x0, 0x20000006}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000180)={'ip6tnl0\x00', {0x2, 0x0, @empty}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.53293482s ago: executing program 4 (id=668): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) getrlimit(0xd, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, 0x0, 0x5}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02007f00040000000600000005003f7c88740b5d40d3000000100000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) 4.509185893s ago: executing program 3 (id=669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r1, r1, r3, 0xffffffffffffffff, r2, r2, r1, r2], 0x8) 4.388279282s ago: executing program 5 (id=670): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.712631443s ago: executing program 0 (id=671): syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r0, 0x800, 0x70bd6a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8900}, 0x4081) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100627be7000fbdbdfd26b8876e0e5e695ea06488167d8d1318c2e78"], 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x40010) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f97", 0x67}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)}, {&(0x7f0000000d00)}], 0x6, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.711704536s ago: executing program 3 (id=672): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x2, 0x1}, 0x10000d, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r3, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) 3.464420701s ago: executing program 3 (id=673): openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x6, 0x6) syz_emit_vhci(0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x2, 0x48080) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x97}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100)=0x4, 0x4) 3.311942156s ago: executing program 0 (id=674): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x80040) ioctl$I2C_PEC(r0, 0x708, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2102, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002200)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000840)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000008c0)=[@iv={0x0, 0x117, 0x2, 0x0, "fbdfd89d6de95fb1765f3610c4a13d5e00de1067f4a54115c1305e968263c5c358512cacf92e481329dbef9c84b9aecf81915519c556681ea7d490fdcc56e3fe49c5effbf9b4f7ce594e8e9539153d2b880452b8cf5c01b4168e4dd4c354d5001bf30bf4c0b34337a97f04e125e95b09023ff6847fd6bd9fbd77e01243b5d4c222f5cc828295bc0b4951483766e1b639a5bf437aee6eacc84e016f22ac1dd2a0322facf12893272145d8636f6b41d67664c8b2469743cc8d876d75e20419808741e3c36c291973954594ba27315bb7c5987616826525"}], 0x18}], 0x1, 0x40800) sched_setaffinity(r4, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = syz_open_dev$sndpcmp(0x0, 0x0, 0x14b000) close(r10) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 3.277722117s ago: executing program 5 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) io_uring_setup(0x40b3, &(0x7f0000000400)={0x0, 0xf6b8, 0x40, 0x2, 0x6f}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0x6, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(r0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae5ad00ff0000000000000017"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) syz_emit_ethernet(0x3e, 0x0, 0x0) getpid() semop(0x0, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1) semop(0x0, 0x0, 0x0) socket$inet(0x2, 0x4, 0x2) unshare(0x24020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.228223578s ago: executing program 3 (id=676): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x4001}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x5, 0x0, 0x0, 0x5}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xc) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) r7 = fanotify_init(0x200, 0x800) fanotify_mark(r7, 0x201, 0x40000036, r0, 0x0) fanotify_mark(r7, 0x441, 0x8000001, r0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup(r9) 2.26386231s ago: executing program 0 (id=677): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000644000/0x4000)=nil}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1, &(0x7f0000001d80)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x3}) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000080)) syz_open_procfs$pagemap(r1, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4c602, 0xee) socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = dup3(r6, r5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x20) r8 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0}}], 0x1, 0x810) 606.292308ms ago: executing program 3 (id=678): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x4000007, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000665000/0x3000)=nil, 0x3000, 0x2) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024e0001010020000904000003020200fe05240700000524005a170d240f00000000000000000000042402020624070272590905810300040503fa0905610220000000020905030208"], 0x0) 172.342215ms ago: executing program 2 (id=679): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r5], 0x1, r3, r4, 0x3, 0x1f000000, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 0s ago: executing program 2 (id=680): syz_socket_connect_nvme_tcp() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioprio_get$pid(0x1, r0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x7e, 0xf69}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @default, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r3, 0x5452, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000080)) capset(&(0x7f0000000580)={0x20080522}, &(0x7f0000000040)={0x200000, 0x4200003, 0x9, 0x0, 0x20000006}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000180)={'ip6tnl0\x00', {0x2, 0x0, @empty}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): MIDI 1.0 [ 138.631674][ T5853] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 138.710530][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 138.710545][ T30] audit: type=1400 audit(1771817967.792:327): avc: denied { ioctl } for pid=6836 comm="syz.4.238" path="socket:[14366]" dev="sockfs" ino=14366 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 138.785249][ T29] usb 3-1: device descriptor read/8, error -71 [ 138.812394][ T5853] usb 6-1: config 3 has an invalid interface number: 61 but max is 0 [ 138.824055][ T5866] usb 5-1: USB disconnect, device number 6 [ 138.832367][ T5853] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 138.852942][ T5853] usb 6-1: config 3 has no interface number 0 [ 138.870759][ T5853] usb 6-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.877235][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.901093][ T5853] usb 6-1: config 3 interface 61 has no altsetting 0 [ 138.916827][ T5853] usb 6-1: string descriptor 0 read error: -22 [ 138.920742][ T5881] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.934512][ T5853] usb 6-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 138.943874][ T29] usb usb3-port1: unable to enumerate USB device [ 138.985785][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.996401][ T30] audit: type=1400 audit(1771817968.082:328): avc: denied { ioctl } for pid=6840 comm="syz.4.240" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 139.005168][ T5853] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.070999][ T30] audit: type=1400 audit(1771817968.082:329): avc: denied { setopt } for pid=6840 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.130988][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 139.142707][ T5881] usb 4-1: config 5 has an invalid interface number: 128 but max is 0 [ 139.171521][ T5881] usb 4-1: config 5 has no interface number 0 [ 139.177702][ T5881] usb 4-1: config 5 interface 128 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 139.187053][ T5853] snd-usb-audio 6-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 139.213240][ T30] audit: type=1400 audit(1771817968.292:330): avc: denied { unlink } for pid=6844 comm="syz.2.241" name="#1" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 139.247133][ T5881] usb 4-1: config 5 interface 128 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 139.270286][ T5881] usb 4-1: config 5 interface 128 has no altsetting 0 [ 139.284497][ T30] audit: type=1400 audit(1771817968.292:331): avc: denied { mount } for pid=6844 comm="syz.2.241" name="/" dev="overlay" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 139.348333][ T5881] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=ab.9e [ 139.457719][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.469194][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 139.510532][ T5881] usb 4-1: Product: syz [ 139.518496][ T30] audit: type=1400 audit(1771817968.382:332): avc: denied { block_suspend } for pid=6844 comm="syz.2.241" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.587971][ T5881] usb 4-1: Manufacturer: syz [ 139.637868][ T5881] usb 4-1: SerialNumber: syz [ 139.649118][ T30] audit: type=1400 audit(1771817968.392:333): avc: denied { module_load } for pid=6844 comm="syz.2.241" path="/sys/power/wakeup_count" dev="sysfs" ino=1410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 139.680733][ T6833] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 139.714800][ T5882] usb 6-1: USB disconnect, device number 2 [ 140.085170][ T5881] redrat3 4-1:5.128: Couldn't find all endpoints [ 140.119670][ T5881] usb 4-1: USB disconnect, device number 10 [ 140.684362][ T5882] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 140.841276][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 140.860140][ T5882] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 140.884448][ T5882] usb 1-1: config 1 has no interface number 1 [ 140.895534][ T5882] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.918750][ T5882] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 140.947804][ T5882] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.978989][ T5882] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.994770][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.010490][ T5882] usb 1-1: Product: syz [ 141.016385][ T5882] usb 1-1: Manufacturer: syz [ 141.032823][ T5882] usb 1-1: SerialNumber: syz [ 141.270813][ T5882] usb 1-1: failed to enable PITCH for EP 0x82 [ 141.277433][ T30] audit: type=1400 audit(1771817970.352:334): avc: denied { connect } for pid=6863 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.301847][ T6875] SELinux: failed to load policy [ 141.308580][ T5882] usb 1-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 141.320509][ T5853] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 141.343696][ T5882] usb 1-1: USB disconnect, device number 7 [ 141.423888][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.492410][ T5853] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 141.510468][ T5853] usb 3-1: config 0 has no interface number 0 [ 141.526854][ T5853] usb 3-1: config 0 interface 41 has no altsetting 0 [ 141.539716][ T5853] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 141.556647][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.591901][ T5853] usb 3-1: Product: syz [ 141.596076][ T5853] usb 3-1: Manufacturer: syz [ 141.611013][ T5853] usb 3-1: SerialNumber: syz [ 141.618788][ T5853] usb 3-1: config 0 descriptor?? [ 141.877391][ T30] audit: type=1400 audit(1771817970.962:335): avc: denied { getopt } for pid=6884 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.256557][ T6891] tmpfs: Bad value for 'mpol' [ 142.473022][ T5853] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 142.633642][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 142.740623][ T5882] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.890621][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 142.898246][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 142.916188][ T5853] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 142.938484][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 142.949731][ T5853] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 142.967534][ T5882] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 142.977015][ T5853] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 142.985891][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.000453][ T5882] usb 5-1: Product: syz [ 143.006940][ T5882] usb 5-1: Manufacturer: syz [ 143.013439][ T5853] usb 3-1: USB disconnect, device number 22 [ 143.029924][ T5882] usb 5-1: SerialNumber: syz [ 143.055168][ T5882] usb 5-1: config 0 descriptor?? [ 143.072344][ T5882] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.091866][ T5882] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 144.200587][ T5853] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 144.252823][ T30] audit: type=1400 audit(1771817973.312:336): avc: denied { listen } for pid=6899 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.440721][ T5882] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 144.468595][ T30] audit: type=1400 audit(1771817973.312:337): avc: denied { accept } for pid=6899 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.502838][ T5882] em28xx 5-1:0.0: Config register raw data: 0x41 [ 144.519944][ T30] audit: type=1400 audit(1771817973.552:338): avc: denied { ioctl } for pid=6914 comm="syz.0.259" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 144.522142][ T5853] usb 3-1: config 3 has an invalid interface number: 61 but max is 0 [ 144.546550][ T30] audit: type=1400 audit(1771817973.582:339): avc: denied { create } for pid=6914 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 144.611373][ T5853] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 144.636973][ T30] audit: type=1400 audit(1771817973.662:340): avc: denied { sys_admin } for pid=6914 comm="syz.0.259" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 144.685176][ T5853] usb 3-1: config 3 has no interface number 0 [ 144.706214][ T5853] usb 3-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.756512][ T5853] usb 3-1: config 3 interface 61 has no altsetting 0 [ 144.817217][ T5853] usb 3-1: string descriptor 0 read error: -22 [ 144.824397][ T5853] usb 3-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 144.865316][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.931252][ T30] audit: type=1400 audit(1771817974.022:341): avc: denied { watch } for pid=6925 comm="syz.5.260" path="/9/control" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 144.934949][ T5853] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.021488][ T6927] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 145.081628][ T30] audit: type=1400 audit(1771817974.172:342): avc: denied { map } for pid=6925 comm="syz.5.260" path="/proc/mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 145.157140][ T5853] snd-usb-audio 3-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 146.041600][ T5873] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 146.155906][ T5882] usb 5-1: USB disconnect, device number 7 [ 146.162390][ T5882] em28xx 5-1:0.0: Disconnecting em28xx [ 146.214101][ T5882] em28xx 5-1:0.0: Freeing device [ 146.216464][ T5853] usb 3-1: USB disconnect, device number 23 [ 146.226880][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.265513][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 146.296070][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 146.340434][ T5873] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 146.351235][ T6936] input: syz1 as /devices/virtual/input/input21 [ 146.380350][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.396774][ T5873] usb 6-1: Product: syz [ 146.400981][ T30] audit: type=1400 audit(1771817975.482:343): avc: denied { setopt } for pid=6935 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.424822][ T5873] usb 6-1: Manufacturer: syz [ 146.438564][ T5873] usb 6-1: SerialNumber: syz [ 146.479381][ T5873] usb 6-1: config 0 descriptor?? [ 146.486037][ T6926] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 146.510930][ T30] audit: type=1400 audit(1771817975.592:344): avc: denied { append } for pid=6938 comm="syz.0.264" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 146.671881][ T5873] hub 6-1:0.0: bad descriptor, ignoring hub [ 146.678218][ T5873] hub 6-1:0.0: probe with driver hub failed with error -5 [ 146.687677][ T5873] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input22 [ 147.155767][ T5873] usb 6-1: USB disconnect, device number 3 [ 147.876616][ T30] audit: type=1400 audit(1771817976.962:345): avc: denied { wake_alarm } for pid=6948 comm="syz.4.266" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.274979][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 149.274995][ T30] audit: type=1400 audit(1771817978.362:348): avc: denied { read write } for pid=6970 comm="syz.2.272" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 149.351197][ T30] audit: type=1400 audit(1771817978.402:349): avc: denied { open } for pid=6970 comm="syz.2.272" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 149.835266][ T30] audit: type=1400 audit(1771817978.922:350): avc: denied { append } for pid=6979 comm="syz.0.274" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 150.141462][ T5925] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 150.282467][ T30] audit: type=1400 audit(1771817979.352:351): avc: denied { write } for pid=6983 comm="syz.3.263" path="socket:[14750]" dev="sockfs" ino=14750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.322987][ T5925] usb 1-1: config 3 has an invalid interface number: 61 but max is 0 [ 150.335796][ T5925] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 150.351278][ T5925] usb 1-1: config 3 has no interface number 0 [ 150.357443][ T5925] usb 1-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.371514][ T30] audit: type=1400 audit(1771817979.442:352): avc: denied { ioctl } for pid=6989 comm="syz.2.277" path="socket:[13740]" dev="sockfs" ino=13740 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 150.398162][ T5925] usb 1-1: config 3 interface 61 has no altsetting 0 [ 150.405515][ T30] audit: type=1400 audit(1771817979.462:353): avc: denied { mount } for pid=6989 comm="syz.2.277" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 150.429815][ T5925] usb 1-1: string descriptor 0 read error: -22 [ 150.436620][ T5925] usb 1-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 150.446682][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.468132][ T5925] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.548430][ T5925] snd-usb-audio 1-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 151.142498][ T5881] usb 1-1: USB disconnect, device number 8 [ 151.696320][ T7022] FAULT_INJECTION: forcing a failure. [ 151.696320][ T7022] name failslab, interval 1, probability 0, space 0, times 0 [ 151.696356][ T7022] CPU: 1 UID: 0 PID: 7022 Comm: syz.3.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.696378][ T7022] Tainted: [L]=SOFTLOCKUP [ 151.696384][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.696393][ T7022] Call Trace: [ 151.696398][ T7022] [ 151.696405][ T7022] dump_stack_lvl+0x100/0x190 [ 151.696431][ T7022] should_fail_ex.cold+0x5/0xa [ 151.696452][ T7022] ? tomoyo_encode2+0xfb/0x3c0 [ 151.696469][ T7022] should_failslab+0xc2/0x120 [ 151.696495][ T7022] __kmalloc_noprof+0xe0/0x850 [ 151.696516][ T7022] ? d_absolute_path+0x136/0x1b0 [ 151.696543][ T7022] tomoyo_encode2+0xfb/0x3c0 [ 151.696565][ T7022] tomoyo_encode+0x29/0x50 [ 151.696582][ T7022] tomoyo_realpath_from_path+0x18c/0x690 [ 151.696607][ T7022] tomoyo_path_number_perm+0x23c/0x580 [ 151.696632][ T7022] ? tomoyo_path_number_perm+0x22e/0x580 [ 151.696658][ T7022] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.696707][ T7022] ? find_held_lock+0x2b/0x80 [ 151.696727][ T7022] ? __fget_files+0x215/0x3d0 [ 151.696740][ T7022] ? hook_file_ioctl_common+0x146/0x410 [ 151.696768][ T7022] ? __fget_files+0x21f/0x3d0 [ 151.696787][ T7022] security_file_ioctl+0xd3/0x230 [ 151.696805][ T7022] __x64_sys_ioctl+0xb7/0x210 [ 151.696830][ T7022] do_syscall_64+0x106/0xf80 [ 151.696847][ T7022] ? clear_bhb_loop+0x40/0x90 [ 151.696867][ T7022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.696892][ T7022] RIP: 0033:0x7f418379c629 [ 151.696905][ T7022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.696920][ T7022] RSP: 002b:00007f4184695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.696935][ T7022] RAX: ffffffffffffffda RBX: 00007f4183a16090 RCX: 00007f418379c629 [ 151.696945][ T7022] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004 [ 151.696954][ T7022] RBP: 00007f4184695090 R08: 0000000000000000 R09: 0000000000000000 [ 151.696967][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.696976][ T7022] R13: 00007f4183a16128 R14: 00007f4183a16090 R15: 00007ffdd0c11678 [ 151.696999][ T7022] [ 151.698914][ T7022] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.958803][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 152.187415][ T7042] FAULT_INJECTION: forcing a failure. [ 152.187415][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 152.187446][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.2.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.187471][ T7042] Tainted: [L]=SOFTLOCKUP [ 152.187476][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.187487][ T7042] Call Trace: [ 152.187492][ T7042] [ 152.187499][ T7042] dump_stack_lvl+0x100/0x190 [ 152.187531][ T7042] should_fail_ex.cold+0x5/0xa [ 152.187554][ T7042] ? tomoyo_encode2+0xfb/0x3c0 [ 152.187574][ T7042] should_failslab+0xc2/0x120 [ 152.187602][ T7042] __kmalloc_noprof+0xe0/0x850 [ 152.187623][ T7042] ? d_absolute_path+0x136/0x1b0 [ 152.187651][ T7042] tomoyo_encode2+0xfb/0x3c0 [ 152.187675][ T7042] tomoyo_encode+0x29/0x50 [ 152.187694][ T7042] tomoyo_realpath_from_path+0x18c/0x690 [ 152.187721][ T7042] tomoyo_path_number_perm+0x23c/0x580 [ 152.187749][ T7042] ? tomoyo_path_number_perm+0x22e/0x580 [ 152.187778][ T7042] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.187833][ T7042] ? find_held_lock+0x2b/0x80 [ 152.187856][ T7042] ? __fget_files+0x215/0x3d0 [ 152.187878][ T7042] ? hook_file_ioctl_common+0x146/0x410 [ 152.187907][ T7042] ? __fget_files+0x21f/0x3d0 [ 152.187928][ T7042] security_file_ioctl+0xd3/0x230 [ 152.187949][ T7042] __x64_sys_ioctl+0xb7/0x210 [ 152.187975][ T7042] do_syscall_64+0x106/0xf80 [ 152.187993][ T7042] ? clear_bhb_loop+0x40/0x90 [ 152.188015][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.188033][ T7042] RIP: 0033:0x7f275759c629 [ 152.188051][ T7042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.188068][ T7042] RSP: 002b:00007f2758410028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.188086][ T7042] RAX: ffffffffffffffda RBX: 00007f2757815fa0 RCX: 00007f275759c629 [ 152.188097][ T7042] RDX: 00002000000011c0 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 152.188108][ T7042] RBP: 00007f2758410090 R08: 0000000000000000 R09: 0000000000000000 [ 152.188118][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.188128][ T7042] R13: 00007f2757816038 R14: 00007f2757815fa0 R15: 00007ffc59b93e48 [ 152.188152][ T7042] [ 152.193087][ T7042] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.608593][ T30] audit: type=1400 audit(1771817982.692:354): avc: denied { create } for pid=7060 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 153.636590][ T30] audit: type=1400 audit(1771817982.722:355): avc: denied { ioctl } for pid=7061 comm="syz.5.294" path="socket:[14918]" dev="sockfs" ino=14918 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.643778][ T30] audit: type=1400 audit(1771817982.732:356): avc: denied { connect } for pid=7061 comm="syz.5.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.645444][ T7062] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 153.645537][ T7062] Error validating options; rc = [-22] [ 153.839241][ T30] audit: type=1400 audit(1771817982.922:357): avc: denied { name_bind } for pid=7060 comm="syz.2.296" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 153.933244][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 154.270504][ T5873] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 154.470890][ T5873] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 154.470909][ T5873] usb 6-1: config 0 has no interface number 0 [ 154.470931][ T5873] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 154.470944][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.472230][ T5873] usb 6-1: config 0 descriptor?? [ 154.704941][ T5812] Bluetooth: hci5: Malformed LE Event: 0x0d [ 154.717673][ T7081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7081 comm=syz.0.302 [ 154.727984][ T5873] usb 6-1: string descriptor 0 read error: -71 [ 154.729612][ T5873] usb-storage 6-1:0.168: USB Mass Storage device detected [ 154.749900][ T5873] usb-storage 6-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 154.784624][ T7086] net_ratelimit: 10 callbacks suppressed [ 154.784657][ T7086] netlink: zone id is out of range [ 154.784693][ T7086] netlink: zone id is out of range [ 154.784790][ T7086] netlink: zone id is out of range [ 154.784872][ T7086] netlink: zone id is out of range [ 154.784935][ T7086] netlink: zone id is out of range [ 154.784993][ T7086] netlink: zone id is out of range [ 154.785012][ T7086] netlink: zone id is out of range [ 154.785072][ T7086] netlink: zone id is out of range [ 154.785113][ T7086] netlink: zone id is out of range [ 154.785189][ T7086] netlink: zone id is out of range [ 154.823727][ T5873] usb 6-1: USB disconnect, device number 4 [ 154.894653][ T7086] batadv_slave_0: entered promiscuous mode [ 154.907169][ T7086] batadv_slave_0: left promiscuous mode [ 154.922045][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.303'. [ 155.663240][ T7098] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 155.663277][ T7098] SELinux: failed to load policy [ 155.710127][ T30] audit: type=1400 audit(1771817984.792:358): avc: denied { getopt } for pid=7092 comm="syz.5.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.710160][ T30] audit: type=1400 audit(1771817984.792:359): avc: denied { bind } for pid=7092 comm="syz.5.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.710181][ T30] audit: type=1400 audit(1771817984.792:360): avc: denied { name_bind } for pid=7092 comm="syz.5.306" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 155.710201][ T30] audit: type=1400 audit(1771817984.792:361): avc: denied { node_bind } for pid=7092 comm="syz.5.306" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 155.710222][ T30] audit: type=1400 audit(1771817984.792:362): avc: denied { name_connect } for pid=7092 comm="syz.5.306" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 157.737172][ T30] audit: type=1400 audit(1771817986.822:363): avc: denied { append } for pid=7132 comm="syz.4.315" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 157.806998][ T7133] binder: BC_ATTEMPT_ACQUIRE not supported [ 157.813334][ T30] audit: type=1400 audit(1771817986.882:364): avc: denied { read } for pid=7131 comm="syz.2.314" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.837834][ T7133] binder: 7131:7133 ioctl c0306201 200000000c00 returned -22 [ 157.846425][ T30] audit: type=1400 audit(1771817986.882:365): avc: denied { open } for pid=7131 comm="syz.2.314" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.953185][ T30] audit: type=1400 audit(1771817986.892:366): avc: denied { ioctl } for pid=7131 comm="syz.2.314" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.956385][ T7133] trusted_key: syz.2.314 sent an empty control message without MSG_MORE. [ 157.979077][ T30] audit: type=1400 audit(1771817987.012:367): avc: denied { read } for pid=7136 comm="syz.3.317" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 158.191508][ T7140] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.575927][ T7142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.651338][ T7142] bond0: (slave rose0): Enslaving as an active interface with an up link [ 159.650587][ T792] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 159.820443][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 159.841456][ T792] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 159.876864][ T792] usb 3-1: config 0 has no interface number 0 [ 159.887209][ T792] usb 3-1: config 0 interface 128 has no altsetting 0 [ 159.915993][ T792] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=21.4b [ 159.930543][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.031184][ T7188] net_ratelimit: 10 callbacks suppressed [ 160.031204][ T7188] Set syz1 is full, maxelem 14 reached [ 160.267207][ T792] usb 3-1: Product: syz [ 160.271452][ T792] usb 3-1: Manufacturer: syz [ 160.276173][ T792] usb 3-1: SerialNumber: syz [ 160.286867][ T792] usb 3-1: config 0 descriptor?? [ 160.639103][ T792] usb 3-1: USB disconnect, device number 24 [ 161.755924][ T7222] Bluetooth: MGMT ver 1.23 [ 161.765800][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 161.765817][ T30] audit: type=1400 audit(1771817990.842:393): avc: denied { write } for pid=7221 comm="syz.3.330" path="socket:[15143]" dev="sockfs" ino=15143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.976878][ T7176] SELinux: failed to load policy [ 163.011789][ T7257] xt_hashlimit: max too large, truncated to 1048576 [ 163.583844][ T7260] capability: warning: `syz.3.335' uses deprecated v2 capabilities in a way that may be insecure [ 163.623941][ T7263] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 163.645113][ T30] audit: type=1400 audit(1771818248.729:394): avc: denied { ioctl } for pid=7265 comm="syz.2.338" path="socket:[14305]" dev="sockfs" ino=14305 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.709366][ T7263] SELinux: failed to load policy [ 164.089414][ T30] audit: type=1400 audit(1771818249.169:395): avc: denied { create } for pid=7265 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 164.133194][ T30] audit: type=1400 audit(1771818249.209:396): avc: denied { execute } for pid=7265 comm="syz.2.338" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.188311][ T7278] FAULT_INJECTION: forcing a failure. [ 165.188311][ T7278] name failslab, interval 1, probability 0, space 0, times 0 [ 165.236008][ T7278] CPU: 1 UID: 0 PID: 7278 Comm: syz.5.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.236041][ T7278] Tainted: [L]=SOFTLOCKUP [ 165.236046][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.236054][ T7278] Call Trace: [ 165.236059][ T7278] [ 165.236066][ T7278] dump_stack_lvl+0x100/0x190 [ 165.236096][ T7278] should_fail_ex.cold+0x5/0xa [ 165.236117][ T7278] should_failslab+0xc2/0x120 [ 165.236144][ T7278] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 165.236167][ T7278] ? __alloc_skb+0x140/0x710 [ 165.236199][ T7278] __alloc_skb+0x140/0x710 [ 165.236222][ T7278] ? __alloc_skb+0x5b7/0x710 [ 165.236247][ T7278] ? __pfx___alloc_skb+0x10/0x10 [ 165.236280][ T7278] netlink_alloc_large_skb+0x69/0x150 [ 165.236304][ T7278] netlink_sendmsg+0x680/0xda0 [ 165.236328][ T7278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.236345][ T7278] ? __might_fault+0x20/0x140 [ 165.236376][ T7278] ____sys_sendmsg+0xa54/0xc30 [ 165.236401][ T7278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.236434][ T7278] ___sys_sendmsg+0x190/0x1e0 [ 165.236460][ T7278] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.236511][ T7278] __sys_sendmsg+0x170/0x220 [ 165.236529][ T7278] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.236561][ T7278] do_syscall_64+0x106/0xf80 [ 165.236578][ T7278] ? clear_bhb_loop+0x40/0x90 [ 165.236600][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.236618][ T7278] RIP: 0033:0x7f330799c629 [ 165.236633][ T7278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.236650][ T7278] RSP: 002b:00007f33087a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.236667][ T7278] RAX: ffffffffffffffda RBX: 00007f3307c15fa0 RCX: 00007f330799c629 [ 165.236678][ T7278] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 165.236688][ T7278] RBP: 00007f33087a6090 R08: 0000000000000000 R09: 0000000000000000 [ 165.236698][ T7278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.236708][ T7278] R13: 00007f3307c16038 R14: 00007f3307c15fa0 R15: 00007ffed2fb14e8 [ 165.236732][ T7278] [ 165.577280][ T30] audit: type=1400 audit(1771818250.660:397): avc: denied { name_bind } for pid=7270 comm="syz.4.340" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 165.985950][ T7280] process 'syz.4.340' launched './file0' with NULL argv: empty string added [ 166.403699][ T30] audit: type=1400 audit(1771818251.490:398): avc: denied { write } for pid=7296 comm="syz.5.346" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.580225][ T30] audit: type=1400 audit(1771818251.490:399): avc: denied { open } for pid=7296 comm="syz.5.346" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.584849][ T7288] SELinux: failed to load policy [ 166.707310][ T7299] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.347'. [ 168.816344][ T3512] Bluetooth: hci6: Frame reassembly failed (-90) [ 168.970291][ T30] audit: type=1326 audit(1771818254.062:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7335 comm="syz.5.354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f330799c629 code=0x0 [ 170.456948][ T5873] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 170.607654][ T5873] usb 6-1: device descriptor read/64, error -71 [ 170.856810][ T5873] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 170.886836][ T5812] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 170.907373][ T5881] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 170.996818][ T5873] usb 6-1: device descriptor read/64, error -71 [ 171.066619][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 171.074337][ T5881] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.087127][ T5881] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.095677][ T5881] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 171.106082][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.115216][ T5873] usb usb6-port1: attempt power cycle [ 171.122830][ T5881] usb 5-1: config 0 descriptor?? [ 171.466404][ T5873] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 171.543130][ T7369] FAULT_INJECTION: forcing a failure. [ 171.543130][ T7369] name failslab, interval 1, probability 0, space 0, times 0 [ 171.556022][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.2.364 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.556049][ T7369] Tainted: [L]=SOFTLOCKUP [ 171.556055][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.556065][ T7369] Call Trace: [ 171.556072][ T7369] [ 171.556079][ T7369] dump_stack_lvl+0x100/0x190 [ 171.556110][ T7369] should_fail_ex.cold+0x5/0xa [ 171.556133][ T7369] ? io_cache_alloc_new+0x45/0xe0 [ 171.556152][ T7369] should_failslab+0xc2/0x120 [ 171.556178][ T7369] __kmalloc_noprof+0xe0/0x850 [ 171.556206][ T7369] io_cache_alloc_new+0x45/0xe0 [ 171.556226][ T7369] io_arm_apoll+0x8c9/0xa80 [ 171.556249][ T7369] ? __fget_files+0x215/0x3d0 [ 171.556269][ T7369] ? __pfx_io_arm_apoll+0x10/0x10 [ 171.556303][ T7369] ? __io_issue_sqe+0x14a/0x7a0 [ 171.556329][ T7369] io_arm_poll_handler+0x21f/0x2b0 [ 171.556371][ T7369] io_queue_async+0x159/0x290 [ 171.556396][ T7369] io_submit_sqes+0x17ab/0x22f0 [ 171.556434][ T7369] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 171.556467][ T7369] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 171.556496][ T7369] ? fput+0x79/0x100 [ 171.556514][ T7369] ? ksys_write+0x1ac/0x250 [ 171.556538][ T7369] ? __pfx_ksys_write+0x10/0x10 [ 171.556570][ T7369] do_syscall_64+0x106/0xf80 [ 171.556586][ T7369] ? clear_bhb_loop+0x40/0x90 [ 171.556608][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.556625][ T7369] RIP: 0033:0x7f275759c629 [ 171.556639][ T7369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.556655][ T7369] RSP: 002b:00007f27583ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 171.556673][ T7369] RAX: ffffffffffffffda RBX: 00007f2757816180 RCX: 00007f275759c629 [ 171.556684][ T7369] RDX: 0000000000000000 RSI: 00000000000047f5 RDI: 0000000000000006 [ 171.556694][ T7369] RBP: 00007f27583ce090 R08: 0000000000000000 R09: 0000000000000000 [ 171.556704][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.556714][ T7369] R13: 00007f2757816218 R14: 00007f2757816180 R15: 00007ffc59b93e48 [ 171.556739][ T7369] [ 171.819713][ T30] audit: type=1400 audit(1771818256.863:401): avc: denied { accept } for pid=7365 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.840096][ T5873] usb 6-1: device descriptor read/8, error -71 [ 171.866019][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 171.886213][ T792] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 171.898770][ T30] audit: type=1400 audit(1771818256.993:402): avc: denied { ioctl } for pid=7368 comm="syz.0.365" path="socket:[16513]" dev="sockfs" ino=16513 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.979440][ T30] audit: type=1400 audit(1771818257.073:403): avc: denied { write } for pid=7368 comm="syz.0.365" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.010950][ T30] audit: type=1400 audit(1771818257.073:404): avc: denied { open } for pid=7368 comm="syz.0.365" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.035188][ T792] usb 4-1: device descriptor read/64, error -71 [ 172.045631][ T30] audit: type=1400 audit(1771818257.073:405): avc: denied { ioctl } for pid=7368 comm="syz.0.365" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.080785][ T30] audit: type=1400 audit(1771818257.173:406): avc: denied { ioctl } for pid=7355 comm="syz.4.361" path="socket:[16521]" dev="sockfs" ino=16521 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.107198][ T5873] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 172.114721][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 172.120896][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 172.130525][ T5881] usb 5-1: USB disconnect, device number 8 [ 172.216115][ T5873] usb 6-1: device descriptor read/8, error -71 [ 172.345497][ T5873] usb usb6-port1: unable to enumerate USB device [ 172.365962][ T792] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 172.534509][ T30] audit: type=1400 audit(1771818257.623:407): avc: denied { append } for pid=7381 comm="syz.2.367" name="sg0" dev="devtmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.735863][ T792] usb 4-1: device descriptor read/64, error -71 [ 172.847190][ T792] usb usb4-port1: attempt power cycle [ 173.235600][ T792] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 173.250045][ T30] audit: type=1400 audit(1771818258.344:408): avc: denied { read } for pid=7394 comm="syz.2.369" path="socket:[15853]" dev="sockfs" ino=15853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.546911][ T792] usb 4-1: device descriptor read/8, error -71 [ 173.593025][ T7403] netlink: 'syz.0.368': attribute type 21 has an invalid length. [ 173.606088][ T7403] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.953460][ T792] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 174.165558][ T30] audit: type=1400 audit(1771818259.224:409): avc: denied { write } for pid=7413 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.284397][ T792] usb 4-1: device descriptor read/8, error -71 [ 174.299968][ T7421] Bluetooth: MGMT ver 1.23 [ 174.415377][ T792] usb usb4-port1: unable to enumerate USB device [ 174.704818][ T5881] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 174.890083][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 174.921547][ T5881] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 175.004723][ T5881] usb 3-1: config 0 has no interface number 0 [ 175.380909][ T7440] FAULT_INJECTION: forcing a failure. [ 175.380909][ T7440] name failslab, interval 1, probability 0, space 0, times 0 [ 175.393519][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.4.376 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.393537][ T7440] Tainted: [L]=SOFTLOCKUP [ 175.393541][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.393547][ T7440] Call Trace: [ 175.393551][ T7440] [ 175.393556][ T7440] dump_stack_lvl+0x100/0x190 [ 175.393581][ T7440] should_fail_ex.cold+0x5/0xa [ 175.393595][ T7440] ? sock_kmalloc+0x111/0x170 [ 175.393607][ T7440] should_failslab+0xc2/0x120 [ 175.393624][ T7440] __kmalloc_noprof+0xe0/0x850 [ 175.393638][ T7440] ? do_raw_spin_lock+0x128/0x260 [ 175.393653][ T7440] sock_kmalloc+0x111/0x170 [ 175.393666][ T7440] af_alg_alloc_areq+0xbc/0x240 [ 175.393679][ T7440] aead_recvmsg+0x400/0x16b0 [ 175.393700][ T7440] ? __pfx_aead_recvmsg+0x10/0x10 [ 175.393718][ T7440] sock_recvmsg+0x1f9/0x250 [ 175.393732][ T7440] ____sys_recvmsg+0x218/0x6b0 [ 175.393747][ T7440] ? __pfx_____sys_recvmsg+0x10/0x10 [ 175.393765][ T7440] ? __lock_acquire+0x4a5/0x2630 [ 175.393784][ T7440] ___sys_recvmsg+0x16a/0x1a0 [ 175.393798][ T7440] ? __pfx____sys_recvmsg+0x10/0x10 [ 175.393823][ T7440] __sys_recvmsg+0x16d/0x220 [ 175.393834][ T7440] ? __pfx___sys_recvmsg+0x10/0x10 [ 175.393853][ T7440] do_syscall_64+0x106/0xf80 [ 175.393863][ T7440] ? clear_bhb_loop+0x40/0x90 [ 175.393876][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.393887][ T7440] RIP: 0033:0x7f049279c629 [ 175.393896][ T7440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.393907][ T7440] RSP: 002b:00007f04909f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 175.393917][ T7440] RAX: ffffffffffffffda RBX: 00007f0492a16180 RCX: 00007f049279c629 [ 175.393924][ T7440] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 175.393930][ T7440] RBP: 00007f04909f6090 R08: 0000000000000000 R09: 0000000000000000 [ 175.393936][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.393942][ T7440] R13: 00007f0492a16218 R14: 00007f0492a16180 R15: 00007fff65d3e818 [ 175.393955][ T7440] [ 175.617128][ T5881] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.676167][ T5881] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.686464][ T5881] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 175.698143][ T5881] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 175.709208][ T5881] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 175.719135][ T5881] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.747045][ T5881] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 175.756133][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.764115][ T5881] usb 3-1: Product: syz [ 175.768448][ T5881] usb 3-1: Manufacturer: syz [ 175.773039][ T5881] usb 3-1: SerialNumber: syz [ 175.778948][ T5881] usb 3-1: config 0 descriptor?? [ 176.014033][ T5881] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 176.042455][ T5881] usb 3-1: USB disconnect, device number 25 [ 176.083398][ T30] audit: type=1400 audit(1771818261.175:410): avc: denied { create } for pid=7442 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.405844][ T5818] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 176.414777][ T5818] Bluetooth: hci2: command 0x0401 tx timeout [ 176.457865][ T7450] syz.5.380 (7450): /proc/7448/oom_adj is deprecated, please use /proc/7448/oom_score_adj instead. [ 176.664124][ T30] audit: type=1400 audit(1771818261.766:411): avc: denied { setopt } for pid=7448 comm="syz.5.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.046391][ T30] audit: type=1400 audit(1771818262.026:412): avc: denied { bind } for pid=7456 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.169741][ T30] audit: type=1400 audit(1771818262.026:413): avc: denied { ioctl } for pid=7456 comm="syz.2.382" path="socket:[15927]" dev="sockfs" ino=15927 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.141859][ T30] audit: type=1400 audit(1771818263.236:414): avc: denied { set_context_mgr } for pid=7471 comm="syz.5.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 178.174661][ T30] audit: type=1400 audit(1771818263.276:415): avc: denied { map } for pid=7471 comm="syz.5.387" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.202671][ T30] audit: type=1400 audit(1771818263.296:416): avc: denied { call } for pid=7471 comm="syz.5.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 178.830814][ T7465] SELinux: failed to load policy [ 179.017952][ T30] audit: type=1400 audit(1771818264.117:417): avc: denied { setopt } for pid=7479 comm="syz.5.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.065934][ T30] audit: type=1400 audit(1771818265.137:418): avc: denied { setopt } for pid=7481 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.571232][ T5809] Bluetooth: hci2: command 0x0401 tx timeout [ 180.581523][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 180.588122][ T7477] Bluetooth: hci3: command 0x0406 tx timeout [ 180.594325][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 180.621152][ T7477] Bluetooth: hci0: command 0x0406 tx timeout [ 181.070245][ T7512] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 181.788352][ T30] audit: type=1400 audit(1771818266.888:419): avc: denied { write } for pid=7520 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.943932][ T7526] xt_TCPMSS: Only works on TCP SYN packets [ 181.964645][ T30] audit: type=1400 audit(1771818267.068:420): avc: denied { execute } for pid=7529 comm="syz.2.401" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.074080][ T7530] netlink: 120 bytes leftover after parsing attributes in process `syz.2.401'. [ 182.083146][ T7530] netlink: 64 bytes leftover after parsing attributes in process `syz.2.401'. [ 182.313103][ T30] audit: type=1400 audit(1771818267.408:421): avc: denied { write } for pid=7536 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.195189][ T7542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7542 comm=syz.4.402 [ 183.248184][ T30] audit: type=1400 audit(1771818268.279:422): avc: denied { transfer } for pid=7533 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 183.490679][ T7544] netlink: 'syz.5.406': attribute type 1 has an invalid length. [ 183.588103][ T7544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.611712][ T30] audit: type=1400 audit(1771818268.709:423): avc: denied { create } for pid=7543 comm="syz.5.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 183.640412][ T30] audit: type=1400 audit(1771818268.709:424): avc: denied { write } for pid=7543 comm="syz.5.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 183.689797][ T7544] FAULT_INJECTION: forcing a failure. [ 183.689797][ T7544] name failslab, interval 1, probability 0, space 0, times 0 [ 183.730887][ T7544] CPU: 0 UID: 0 PID: 7544 Comm: syz.5.406 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.730917][ T7544] Tainted: [L]=SOFTLOCKUP [ 183.730923][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.730933][ T7544] Call Trace: [ 183.730939][ T7544] [ 183.730946][ T7544] dump_stack_lvl+0x100/0x190 [ 183.730979][ T7544] should_fail_ex.cold+0x5/0xa [ 183.731002][ T7544] should_failslab+0xc2/0x120 [ 183.731030][ T7544] __kmalloc_cache_noprof+0x7a/0x6f0 [ 183.731051][ T7544] ? alloc_netdev_mqs+0xd95/0x14f0 [ 183.731067][ T7544] ? __asan_memset+0x23/0x50 [ 183.731093][ T7544] alloc_netdev_mqs+0xd95/0x14f0 [ 183.731116][ T7544] rtnl_create_link+0xc13/0xf80 [ 183.731149][ T7544] rtnl_newlink+0x13b8/0x2380 [ 183.731177][ T7544] ? __pfx_rtnl_newlink+0x10/0x10 [ 183.731193][ T7544] ? find_held_lock+0x2b/0x80 [ 183.731214][ T7544] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 183.731238][ T7544] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 183.731267][ T7544] ? avc_has_perm_noaudit+0x145/0x3b0 [ 183.731318][ T7544] ? find_held_lock+0x2b/0x80 [ 183.731340][ T7544] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 183.731356][ T7544] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 183.731375][ T7544] ? __pfx_rtnl_newlink+0x10/0x10 [ 183.731393][ T7544] rtnetlink_rcv_msg+0x95e/0xe90 [ 183.731413][ T7544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.731438][ T7544] ? ref_tracker_free+0x37e/0x6c0 [ 183.731468][ T7544] netlink_rcv_skb+0x159/0x420 [ 183.731489][ T7544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.731508][ T7544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.731538][ T7544] ? netlink_deliver_tap+0x1ae/0xcc0 [ 183.731560][ T7544] netlink_unicast+0x5aa/0x870 [ 183.731584][ T7544] ? __pfx_netlink_unicast+0x10/0x10 [ 183.731614][ T7544] netlink_sendmsg+0x8b0/0xda0 [ 183.731638][ T7544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.731657][ T7544] ? __might_fault+0x20/0x140 [ 183.731689][ T7544] ____sys_sendmsg+0xa54/0xc30 [ 183.731714][ T7544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.731748][ T7544] ___sys_sendmsg+0x190/0x1e0 [ 183.731773][ T7544] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.731828][ T7544] __sys_sendmsg+0x170/0x220 [ 183.731846][ T7544] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.731880][ T7544] do_syscall_64+0x106/0xf80 [ 183.731898][ T7544] ? clear_bhb_loop+0x40/0x90 [ 183.731924][ T7544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.731942][ T7544] RIP: 0033:0x7f330799c629 [ 183.731957][ T7544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.731972][ T7544] RSP: 002b:00007f33087a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.731989][ T7544] RAX: ffffffffffffffda RBX: 00007f3307c15fa0 RCX: 00007f330799c629 [ 183.732000][ T7544] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 183.732010][ T7544] RBP: 00007f33087a6090 R08: 0000000000000000 R09: 0000000000000000 [ 183.732020][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.732029][ T7544] R13: 00007f3307c16038 R14: 00007f3307c15fa0 R15: 00007ffed2fb14e8 [ 183.732054][ T7544] [ 184.151268][ T30] audit: type=1400 audit(1771818269.149:425): avc: denied { getopt } for pid=7551 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.665024][ T7561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.410'. [ 184.957409][ T30] audit: type=1400 audit(1771818270.050:426): avc: denied { setopt } for pid=7571 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.986311][ T30] audit: type=1400 audit(1771818270.050:427): avc: denied { bind } for pid=7571 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 185.899448][ T5925] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 185.984030][ T7586] Set syz1 is full, maxelem 14 reached [ 186.309201][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 186.337763][ T5925] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 186.349444][ T5925] usb 4-1: config 0 has no interface number 0 [ 186.355605][ T5925] usb 4-1: config 0 interface 128 has no altsetting 0 [ 186.375747][ T5925] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=21.4b [ 186.384963][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.399309][ T5925] usb 4-1: Product: syz [ 186.403484][ T5925] usb 4-1: Manufacturer: syz [ 186.411971][ T5925] usb 4-1: SerialNumber: syz [ 186.469572][ T5925] usb 4-1: config 0 descriptor?? [ 186.549343][ T7594] netlink: 120 bytes leftover after parsing attributes in process `syz.2.421'. [ 186.567020][ T7592] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 186.591517][ T7594] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 186.617460][ T7592] File: /dev/nullb0 PID: 7592 Comm: syz.2.421 [ 186.627542][ T7594] netlink: 64 bytes leftover after parsing attributes in process `syz.2.421'. [ 186.811159][ T5925] usb 4-1: USB disconnect, device number 15 [ 186.903317][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 186.920502][ T30] audit: type=1400 audit(1771818272.001:428): avc: denied { bind } for pid=7589 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.469122][ T7600] netlink: 'syz.5.418': attribute type 1 has an invalid length. [ 187.822794][ T30] audit: type=1400 audit(1771818272.921:429): avc: denied { execute_no_trans } for pid=7562 comm="syz.0.411" path="/84/file0" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 187.855541][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 187.902698][ T7602] netlink: 164 bytes leftover after parsing attributes in process `syz.0.411'. [ 188.644730][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.284940][ T7621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 189.405328][ T30] audit: type=1326 audit(1771818274.502:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330799c629 code=0x7ffc0000 [ 189.491177][ T30] audit: type=1326 audit(1771818274.502:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330799c629 code=0x7ffc0000 [ 189.557371][ T30] audit: type=1326 audit(1771818274.502:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330799c629 code=0x7ffc0000 [ 189.599541][ T5925] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 189.770805][ T30] audit: type=1326 audit(1771818274.502:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f330799c629 code=0x7ffc0000 [ 189.811928][ T5925] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 189.822953][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.840953][ T30] audit: type=1326 audit(1771818274.872:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330799c629 code=0x7ffc0000 [ 189.867307][ T5925] usb 3-1: Product: syz [ 189.871519][ T5925] usb 3-1: Manufacturer: syz [ 189.877171][ T30] audit: type=1326 audit(1771818274.872:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330799c629 code=0x7ffc0000 [ 189.878515][ T5925] usb 3-1: SerialNumber: syz [ 189.923332][ T30] audit: type=1326 audit(1771818274.872:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330799c629 code=0x7ffc0000 [ 189.973593][ T30] audit: type=1326 audit(1771818274.872:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330799c629 code=0x7ffc0000 [ 190.087162][ T5881] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 190.267945][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 190.277742][ T5881] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 190.286741][ T5881] usb 6-1: config 1 has no interface number 1 [ 190.297210][ T5881] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.312066][ T5881] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 190.330798][ T5881] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.470092][ T5925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 190.483677][ T5925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 190.516091][ T5881] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.530007][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.538668][ T7639] 9p: Bad value for 'cachetag' [ 190.543817][ T5881] usb 6-1: Product: syz [ 190.548268][ T5881] usb 6-1: Manufacturer: syz [ 190.553019][ T5881] usb 6-1: SerialNumber: syz [ 190.895142][ T7642] xt_hashlimit: max too large, truncated to 1048576 [ 190.948251][ T7623] Cannot find set identified by id 0 to match [ 191.926643][ T30] kauditd_printk_skb: 216 callbacks suppressed [ 191.926660][ T30] audit: type=1326 audit(1771818277.033:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f330795cece code=0x7ffc0000 [ 191.957771][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 191.969831][ T30] audit: type=1326 audit(1771818277.073:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f330795cece code=0x7ffc0000 [ 191.993687][ T30] audit: type=1326 audit(1771818277.073:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f330795cece code=0x7ffc0000 [ 192.017679][ T30] audit: type=1326 audit(1771818277.073:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f330795cece code=0x7ffc0000 [ 192.041659][ T30] audit: type=1326 audit(1771818277.073:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f330795cece code=0x7ffc0000 [ 192.127557][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.153039][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.374627][ T30] audit: type=1326 audit(1771818277.073:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f330795cece code=0x7ffc0000 [ 192.417038][ T5876] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.426303][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.434478][ T30] audit: type=1326 audit(1771818277.073:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f330795cece code=0x7ffc0000 [ 192.457987][ T5876] usb 5-1: SerialNumber: syz [ 192.463690][ T30] audit: type=1326 audit(1771818277.073:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f330795cece code=0x7ffc0000 [ 192.490430][ T30] audit: type=1326 audit(1771818277.073:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f330795cece code=0x7ffc0000 [ 192.515918][ T30] audit: type=1326 audit(1771818277.073:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f330795cece code=0x7ffc0000 [ 192.600965][ T5925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 192.617030][ T5925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 192.627507][ T5925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 192.674661][ T5925] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 192.718502][ T5925] usb 3-1: USB disconnect, device number 26 [ 193.481766][ T7669] vivid-007: disconnect [ 193.497813][ T7669] vivid-007: reconnect [ 194.075187][ T5873] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 194.166269][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 194.195949][ T7681] openvswitch: netlink: Message has 16 unknown bytes. [ 194.265191][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 194.272980][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.282668][ T5873] usb 3-1: config 6 has an invalid interface number: 63 but max is 0 [ 194.291228][ T5873] usb 3-1: config 6 has no interface number 0 [ 194.301235][ T5873] usb 3-1: config 6 interface 63 has no altsetting 0 [ 194.313462][ T5873] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=80.c8 [ 194.323416][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.334928][ T5873] usb 3-1: Product: syz [ 194.339110][ T5873] usb 3-1: Manufacturer: syz [ 194.354121][ T5873] usb 3-1: SerialNumber: syz [ 195.224911][ T5873] usb 3-1: Firmware version (0.0) predates our first public release. [ 195.233839][ T5873] usb 3-1: Please update to version 0.2 or newer [ 195.318098][ T5873] usb 3-1: USB disconnect, device number 27 [ 195.522118][ T7699] xt_hashlimit: max too large, truncated to 1048576 [ 195.760952][ T7708] xt_addrtype: ipv6 does not support BROADCAST matching [ 196.110920][ T5881] usb 6-1: failed to enable PITCH for EP 0x82 [ 196.120730][ T5881] usb 6-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 196.189758][ T5876] usb 5-1: 0:2 : does not exist [ 196.258791][ T5876] usb 5-1: USB disconnect, device number 9 [ 196.274185][ T5881] usb 6-1: USB disconnect, device number 9 [ 196.387131][ T7718] binder: 7714:7718 ioctl c0306201 0 returned -14 [ 196.395043][ T7718] binder: 7714:7718 unknown command 3 [ 196.400448][ T7718] binder: 7714:7718 ioctl c0306201 200000000180 returned -22 [ 196.778861][ T5876] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.803547][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 197.378219][ T7740] fuse: Bad value for 'fd' [ 197.487435][ T7740] block nbd4: shutting down sockets [ 197.627323][ T7721] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.633732][ T7721] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.643847][ T7721] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.650217][ T7721] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.658226][ T7721] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.664849][ T7721] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 197.671580][ T7721] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.677573][ T7721] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 197.684381][ T7721] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 197.690934][ T7721] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 197.875491][ T7750] tipc: Enabled bearer , priority 0 [ 197.911884][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 197.911901][ T30] audit: type=1400 audit(1771818283.016:757): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 197.925768][ T7747] netlink: 120 bytes leftover after parsing attributes in process `syz.5.467'. [ 197.954335][ T5873] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 197.967978][ T7750] syzkaller0: entered promiscuous mode [ 197.985309][ T7750] syzkaller0: entered allmulticast mode [ 198.283060][ T5853] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 198.443007][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 198.449610][ T5853] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 198.462940][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 198.485442][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 33174, setting to 64 [ 198.502883][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.518402][ T5853] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 198.532908][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.587618][ T5853] usb 3-1: config 0 descriptor?? [ 198.607044][ T5853] pxrc 3-1:0.0: Could not find endpoint [ 198.617895][ T5853] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 198.682881][ T7747] netlink: 'syz.5.467': attribute type 1 has an invalid length. [ 198.690721][ T7747] netlink: 64 bytes leftover after parsing attributes in process `syz.5.467'. [ 198.766203][ T7750] tipc: Resetting bearer [ 198.850779][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 198.952802][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 198.954753][ T5882] tipc: Node number set to 4083688320 [ 199.043182][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.085430][ T5873] usb 4-1: config 8 has an invalid interface number: 255 but max is 8 [ 199.106473][ T5873] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 9 [ 199.129506][ T5873] usb 4-1: config 8 has no interface number 0 [ 199.149081][ T5873] usb 4-1: config 8 interface 255 has no altsetting 0 [ 199.193666][ T5873] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 199.207267][ T5873] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 199.232609][ T5873] usb 4-1: Product: syz [ 199.246954][ T5873] usb 4-1: Manufacturer: syz [ 199.250110][ T30] audit: type=1400 audit(1771818284.357:758): avc: denied { map } for pid=7749 comm="syz.2.466" path="socket:[17713]" dev="sockfs" ino=17713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 199.262530][ T5873] usb 4-1: SerialNumber: syz [ 199.288376][ T5853] usb 3-1: USB disconnect, device number 28 [ 199.372608][ T7749] tipc: Resetting bearer [ 199.484203][ T30] audit: type=1400 audit(1771818284.597:759): avc: denied { create } for pid=7763 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 199.527645][ T30] audit: type=1400 audit(1771818284.617:760): avc: denied { read write } for pid=7766 comm="syz.4.472" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 199.536237][ T5873] catc 4-1:8.255: Can't set altsetting 1. [ 199.572700][ T5873] catc 4-1:8.255: probe with driver catc failed with error -5 [ 199.578684][ T30] audit: type=1400 audit(1771818284.617:761): avc: denied { open } for pid=7766 comm="syz.4.472" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 199.598803][ T5873] usb 4-1: USB disconnect, device number 16 [ 199.603313][ T30] audit: type=1400 audit(1771818284.617:762): avc: denied { ioctl } for pid=7766 comm="syz.4.472" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 199.672702][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 199.678734][ T5820] Bluetooth: hci2: command 0x0401 tx timeout [ 199.684832][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 199.755057][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 199.792332][ T7774] xt_hashlimit: max too large, truncated to 1048576 [ 201.031633][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 201.053777][ T7749] tipc: Disabling bearer [ 201.163513][ T7793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.477'. [ 201.802260][ T5820] Bluetooth: hci2: command 0x0401 tx timeout [ 201.808346][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 201.814411][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 201.831327][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 202.252292][ T30] audit: type=1400 audit(1771818287.358:763): avc: denied { setattr } for pid=7808 comm="syz.3.482" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 202.278545][ T7814] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.483'. [ 202.305400][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 202.321547][ T30] audit: type=1400 audit(1771818287.408:764): avc: denied { mount } for pid=7808 comm="syz.3.482" name="/" dev="ramfs" ino=18747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 202.326215][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 202.391204][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 202.490235][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 202.638185][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.050954][ T7818] netlink: 'syz.0.484': attribute type 3 has an invalid length. [ 203.254665][ T7826] overlayfs: overlapping lowerdir path [ 203.993955][ T7837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.507659][ T7851] xt_hashlimit: max too large, truncated to 1048576 [ 205.216831][ T7847] SELinux: failed to load policy [ 206.589331][ T5881] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 206.751994][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.763565][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.775001][ T5881] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.784395][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.792806][ T5881] usb 3-1: Product: syz [ 206.798112][ T5881] usb 3-1: Manufacturer: syz [ 206.802714][ T5881] usb 3-1: SerialNumber: syz [ 207.016344][ T5881] usb 3-1: 0:2 : does not exist [ 207.040116][ T5881] usb 3-1: USB disconnect, device number 29 [ 207.067203][ T7886] udevd[7886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.098617][ T5853] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 207.249770][ T5853] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 207.260001][ T5853] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 207.269106][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.284054][ T5853] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 207.560645][ T7888] netlink: zone id is out of range [ 207.565842][ T7888] netlink: zone id is out of range [ 207.571192][ T7888] netlink: zone id is out of range [ 207.576737][ T7888] netlink: zone id is out of range [ 207.582382][ T7888] netlink: zone id is out of range [ 207.587476][ T7888] netlink: zone id is out of range [ 207.592645][ T7888] netlink: zone id is out of range [ 207.597740][ T7888] netlink: zone id is out of range [ 207.602989][ T7888] netlink: zone id is out of range [ 207.608126][ T7888] netlink: zone id is out of range [ 207.946448][ T7867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.946675][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.028633][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.112795][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.502'. [ 208.306551][ T30] audit: type=1400 audit(1771818293.401:765): avc: denied { bind } for pid=7895 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.362788][ T5853] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 208.371786][ T5853] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 208.378592][ T5853] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 208.387571][ T5853] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 208.400394][ T5853] usb 6-1: USB disconnect, device number 10 [ 208.528867][ T7913] block device autoloading is deprecated and will be removed. [ 208.662415][ T30] audit: type=1400 audit(1771818293.571:766): avc: denied { write } for pid=7897 comm="syz.3.509" name="file0" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 208.799291][ T5881] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 208.838641][ T30] audit: type=1400 audit(1771818293.571:767): avc: denied { open } for pid=7897 comm="syz.3.509" path="/103/file0" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 208.870391][ T30] audit: type=1400 audit(1771818293.742:768): avc: denied { ioctl } for pid=7897 comm="syz.3.509" path="/103/file0" dev="tmpfs" ino=564 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 208.980774][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.861653][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.907824][ T5881] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 210.018493][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.027637][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.036650][ T5881] usb 5-1: Product: syz [ 210.102917][ T5881] usb 5-1: Manufacturer: syz [ 210.112062][ T5881] usb 5-1: SerialNumber: syz [ 210.194513][ T7927] netlink: 36 bytes leftover after parsing attributes in process `syz.0.514'. [ 210.386766][ T5881] usb 5-1: 0:2 : does not exist [ 210.529649][ T5881] usb 5-1: USB disconnect, device number 11 [ 210.772878][ T7886] udevd[7886]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.133031][ T30] audit: type=1400 audit(1771818296.153:769): avc: denied { mount } for pid=7943 comm="syz.3.521" name="/" dev="autofs" ino=19229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 211.386237][ T7938] SELinux: failed to load policy [ 211.410965][ T30] audit: type=1400 audit(1771818296.163:770): avc: denied { read } for pid=7943 comm="syz.3.521" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 211.731735][ T30] audit: type=1400 audit(1771818296.833:771): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 211.878454][ T3512] Bluetooth: Error in BCSP hdr checksum [ 212.137675][ T3537] Bluetooth: Error in BCSP hdr checksum [ 212.397650][ T3512] Bluetooth: Error in BCSP hdr checksum [ 212.652564][ T7985] xt_hashlimit: max too large, truncated to 1048576 [ 212.748418][ T30] audit: type=1400 audit(1771818297.864:772): avc: denied { setopt } for pid=7986 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 212.963550][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.5.533'. [ 212.972521][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.5.533'. [ 213.665304][ T5820] Bluetooth: hci6: command 0x1003 tx timeout [ 213.665379][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 214.372605][ T8009] FAULT_INJECTION: forcing a failure. [ 214.372605][ T8009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.395848][ T8009] CPU: 0 UID: 0 PID: 8009 Comm: syz.4.537 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.395883][ T8009] Tainted: [L]=SOFTLOCKUP [ 214.395889][ T8009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.395899][ T8009] Call Trace: [ 214.395905][ T8009] [ 214.395912][ T8009] dump_stack_lvl+0x100/0x190 [ 214.395945][ T8009] should_fail_ex.cold+0x5/0xa [ 214.395968][ T8009] _copy_from_user+0x2e/0xd0 [ 214.395992][ T8009] copy_msghdr_from_user+0x9f/0x4f0 [ 214.396017][ T8009] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 214.396044][ T8009] ? __pfx__kstrtoull+0x10/0x10 [ 214.396065][ T8009] ___sys_sendmsg+0x106/0x1e0 [ 214.396088][ T8009] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.396118][ T8009] ? find_held_lock+0x2b/0x80 [ 214.396155][ T8009] __sys_sendmmsg+0x205/0x430 [ 214.396175][ T8009] ? __pfx___sys_sendmmsg+0x10/0x10 [ 214.396200][ T8009] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.396230][ T8009] ? fput+0x79/0x100 [ 214.396248][ T8009] ? ksys_write+0x1ac/0x250 [ 214.396272][ T8009] ? __pfx_ksys_write+0x10/0x10 [ 214.396301][ T8009] __x64_sys_sendmmsg+0x9c/0x100 [ 214.396317][ T8009] ? lockdep_hardirqs_on+0x78/0x100 [ 214.396335][ T8009] do_syscall_64+0x106/0xf80 [ 214.396350][ T8009] ? clear_bhb_loop+0x40/0x90 [ 214.396372][ T8009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.396389][ T8009] RIP: 0033:0x7f049279c629 [ 214.396405][ T8009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.396421][ T8009] RSP: 002b:00007f0493576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 214.396439][ T8009] RAX: ffffffffffffffda RBX: 00007f0492a16090 RCX: 00007f049279c629 [ 214.396450][ T8009] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000005 [ 214.396460][ T8009] RBP: 00007f0493576090 R08: 0000000000000000 R09: 0000000000000000 [ 214.396470][ T8009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.396479][ T8009] R13: 00007f0492a16128 R14: 00007f0492a16090 R15: 00007fff65d3e818 [ 214.396503][ T8009] [ 214.702872][ T30] audit: type=1400 audit(1771818299.815:773): avc: denied { watch_sb watch_reads } for pid=8006 comm="syz.2.538" path="/110" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.728539][ T30] audit: type=1400 audit(1771818299.815:774): avc: denied { ioctl } for pid=8006 comm="syz.2.538" path="socket:[19329]" dev="sockfs" ino=19329 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.504128][ T8017] netlink: 'syz.5.541': attribute type 1 has an invalid length. [ 215.511843][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.541'. [ 216.060330][ T8027] netlink: 120 bytes leftover after parsing attributes in process `syz.2.545'. [ 216.087696][ T8026] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 216.104051][ T8027] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 216.117835][ T8027] netlink: 64 bytes leftover after parsing attributes in process `syz.2.545'. [ 216.139225][ T8026] File: /dev/nullb0 PID: 8026 Comm: syz.2.545 [ 216.595503][ T8038] xt_hashlimit: max too large, truncated to 1048576 [ 217.636720][ T8054] mkiss: ax0: crc mode is auto. [ 217.694246][ T30] audit: type=1400 audit(1771818302.776:775): avc: denied { nlmsg_read } for pid=8049 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.983238][ T5853] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 218.122002][ T8036] SELinux: failed to load policy [ 218.152747][ T5853] usb 6-1: device descriptor read/64, error -71 [ 218.200751][ T8048] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 218.211377][ T8048] SELinux: failed to load policy [ 218.313455][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.552'. [ 218.404227][ T5853] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 218.544572][ T5853] usb 6-1: device descriptor read/64, error -71 [ 218.653963][ T5853] usb usb6-port1: attempt power cycle [ 218.675737][ T8062] FAULT_INJECTION: forcing a failure. [ 218.675737][ T8062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 218.689279][ T8062] CPU: 0 UID: 0 PID: 8062 Comm: syz.2.553 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.689301][ T8062] Tainted: [L]=SOFTLOCKUP [ 218.689305][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.689311][ T8062] Call Trace: [ 218.689315][ T8062] [ 218.689320][ T8062] dump_stack_lvl+0x100/0x190 [ 218.689340][ T8062] should_fail_ex.cold+0x5/0xa [ 218.689351][ T8062] ? prepare_alloc_pages+0x16d/0x5f0 [ 218.689363][ T8062] should_fail_alloc_page+0xeb/0x140 [ 218.689381][ T8062] prepare_alloc_pages+0x1f0/0x5f0 [ 218.689394][ T8062] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 218.689409][ T8062] ? find_held_lock+0x2b/0x80 [ 218.689422][ T8062] ? __schedule+0x2fa6/0x60e0 [ 218.689439][ T8062] ? rcu_is_watching+0x12/0xc0 [ 218.689452][ T8062] ? trace_sched_exit_tp+0x13a/0x180 [ 218.689468][ T8062] ? __schedule+0x1000/0x60e0 [ 218.689485][ T8062] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 218.689505][ T8062] ? __pfx___schedule+0x10/0x10 [ 218.689525][ T8062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.689540][ T8062] ? policy_nodemask+0xed/0x4f0 [ 218.689559][ T8062] alloc_pages_mpol+0x1fb/0x550 [ 218.689576][ T8062] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 218.689592][ T8062] ? get_vma_policy+0x121/0x3b0 [ 218.689601][ T8062] ? get_vma_policy+0x12c/0x3b0 [ 218.689613][ T8062] folio_alloc_mpol_noprof+0x36/0x340 [ 218.689625][ T8062] vma_alloc_folio_noprof+0xed/0x1d0 [ 218.689636][ T8062] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 218.689647][ T8062] ? rcu_read_unlock+0x2d/0xb0 [ 218.689660][ T8062] ? rcu_read_unlock+0x2d/0xb0 [ 218.689673][ T8062] ? __lock_acquire+0x4a5/0x2630 [ 218.689691][ T8062] do_wp_page+0xf28/0x4f00 [ 218.689705][ T8062] ? __pfx_do_wp_page+0x10/0x10 [ 218.689717][ T8062] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.689733][ T8062] __handle_mm_fault+0x1ac8/0x2b60 [ 218.689749][ T8062] ? __pfx___handle_mm_fault+0x10/0x10 [ 218.689762][ T8062] ? pte_offset_map_lock+0x174/0x320 [ 218.689777][ T8062] ? vm_normal_page+0x1b6/0x330 [ 218.689793][ T8062] ? find_held_lock+0x2b/0x80 [ 218.689815][ T8062] ? follow_page_pte+0x5b3/0x1400 [ 218.689828][ T8062] handle_mm_fault+0x36d/0xa20 [ 218.689843][ T8062] __get_user_pages+0xf9c/0x34d0 [ 218.689857][ T8062] ? down_read_killable+0x30e/0x4c0 [ 218.689870][ T8062] ? __pfx___get_user_pages+0x10/0x10 [ 218.689881][ T8062] ? __pfx___schedule+0x10/0x10 [ 218.689899][ T8062] __gup_longterm_locked+0x87d/0x16f0 [ 218.689913][ T8062] ? __pfx___gup_longterm_locked+0x10/0x10 [ 218.689927][ T8062] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 218.689944][ T8062] ? gup_fast_fallback+0x1d18/0x2460 [ 218.689956][ T8062] gup_fast_fallback+0x18c6/0x2460 [ 218.689976][ T8062] ? __pfx_gup_fast_fallback+0x10/0x10 [ 218.689987][ T8062] ? arch_stack_walk+0xa6/0xf0 [ 218.690005][ T8062] pin_user_pages_fast+0xa7/0xf0 [ 218.690015][ T8062] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 218.690025][ T8062] ? __pfx_stack_trace_save+0x10/0x10 [ 218.690039][ T8062] ? stack_depot_save_flags+0x27/0x9d0 [ 218.690057][ T8062] iov_iter_extract_pages+0xa0d/0x1ef0 [ 218.690074][ T8062] ? skcipher_recvmsg+0x375/0x1020 [ 218.690086][ T8062] ? sock_recvmsg+0x1f9/0x250 [ 218.690098][ T8062] ? ____sys_recvmsg+0x218/0x6b0 [ 218.690109][ T8062] ? ___sys_recvmsg+0x16a/0x1a0 [ 218.690122][ T8062] ? __sys_recvmsg+0x16d/0x220 [ 218.690130][ T8062] ? do_syscall_64+0x106/0xf80 [ 218.690140][ T8062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.690152][ T8062] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 218.690174][ T8062] extract_iter_to_sg+0x638/0x21d0 [ 218.690191][ T8062] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 218.690203][ T8062] ? rcu_is_watching+0x12/0xc0 [ 218.690215][ T8062] ? __kasan_kmalloc+0xaa/0xb0 [ 218.690230][ T8062] ? __kmalloc_noprof+0x320/0x850 [ 218.690250][ T8062] af_alg_get_rsgl+0x2b3/0x7f0 [ 218.690266][ T8062] skcipher_recvmsg+0x375/0x1020 [ 218.690285][ T8062] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 218.690302][ T8062] sock_recvmsg+0x1f9/0x250 [ 218.690315][ T8062] ____sys_recvmsg+0x218/0x6b0 [ 218.690330][ T8062] ? __pfx_____sys_recvmsg+0x10/0x10 [ 218.690349][ T8062] ? __lock_acquire+0x4a5/0x2630 [ 218.690367][ T8062] ___sys_recvmsg+0x16a/0x1a0 [ 218.690381][ T8062] ? __pfx____sys_recvmsg+0x10/0x10 [ 218.690407][ T8062] __sys_recvmsg+0x16d/0x220 [ 218.690417][ T8062] ? __pfx___sys_recvmsg+0x10/0x10 [ 218.690437][ T8062] do_syscall_64+0x106/0xf80 [ 218.690447][ T8062] ? clear_bhb_loop+0x40/0x90 [ 218.690460][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.690470][ T8062] RIP: 0033:0x7f275759c629 [ 218.690480][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.690490][ T8062] RSP: 002b:00007f27583ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 218.690501][ T8062] RAX: ffffffffffffffda RBX: 00007f2757816090 RCX: 00007f275759c629 [ 218.690507][ T8062] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000008 [ 218.690514][ T8062] RBP: 00007f27583ef090 R08: 0000000000000000 R09: 0000000000000000 [ 218.690520][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.690525][ T8062] R13: 00007f2757816128 R14: 00007f2757816090 R15: 00007ffc59b93e48 [ 218.690540][ T8062] [ 219.762294][ T5876] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 219.770028][ T5853] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 219.803027][ T5853] usb 6-1: device descriptor read/8, error -71 [ 219.890886][ T5925] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 220.343907][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 220.351605][ T5853] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 220.359252][ T5925] usb 4-1: device descriptor read/64, error -71 [ 220.371931][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.424740][ T5876] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 220.434959][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.443261][ T5853] usb 6-1: device descriptor read/8, error -71 [ 220.457161][ T5876] usb 3-1: config 0 descriptor?? [ 220.475270][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 220.512766][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 220.519742][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.531635][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.543015][ T29] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 220.552365][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.560631][ T5853] usb usb6-port1: unable to enumerate USB device [ 220.596761][ T29] usb 5-1: config 0 descriptor?? [ 220.601905][ T5925] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 220.727146][ T8079] syz.0.560 (8079) used greatest stack depth: 19296 bytes left [ 220.741790][ T5925] usb 4-1: device descriptor read/64, error -71 [ 220.852937][ T5925] usb usb4-port1: attempt power cycle [ 220.940399][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00 [ 220.957378][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 221.203591][ T8088] : renamed from lo (while UP) [ 221.221529][ T5925] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 221.253229][ T5925] usb 4-1: device descriptor read/8, error -71 [ 221.269869][ T8065] fuse: root generation should be zero [ 221.277893][ T5876] pwc: recv_control_msg error -71 req 04 val 1000 [ 221.288921][ T5876] pwc: recv_control_msg error -71 req 04 val 1300 [ 221.295819][ T5876] pwc: recv_control_msg error -71 req 04 val 1400 [ 221.306987][ T5876] pwc: recv_control_msg error -71 req 02 val 2000 [ 221.314724][ T5876] pwc: recv_control_msg error -71 req 02 val 2100 [ 221.321629][ T5876] pwc: recv_control_msg error -71 req 04 val 1500 [ 221.329505][ T5876] pwc: recv_control_msg error -71 req 02 val 2500 [ 221.339736][ T5876] pwc: recv_control_msg error -71 req 02 val 2400 [ 221.347028][ T5876] pwc: recv_control_msg error -71 req 02 val 2600 [ 221.355312][ T5876] pwc: recv_control_msg error -71 req 02 val 2900 [ 221.364860][ T5876] pwc: recv_control_msg error -71 req 02 val 2800 [ 221.372108][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 221.379166][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 221.394159][ T5876] pwc: Registered as video103. [ 221.413731][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 221.451220][ T30] audit: type=1400 audit(1771818306.568:776): avc: denied { read } for pid=5162 comm="acpid" name="event4" dev="devtmpfs" ino=3044 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.485156][ T5876] usb 3-1: USB disconnect, device number 30 [ 221.561361][ T5925] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 221.564874][ T30] audit: type=1400 audit(1771818306.568:777): avc: denied { open } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3044 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.610270][ T30] audit: type=1400 audit(1771818306.568:778): avc: denied { ioctl } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3044 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.610276][ T5925] usb 4-1: device descriptor read/8, error -71 [ 221.753822][ T8103] xt_hashlimit: max too large, truncated to 1048576 [ 221.791749][ T5925] usb usb4-port1: unable to enumerate USB device [ 222.560515][ T8123] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 222.863451][ T8140] dummy0: entered allmulticast mode [ 222.885534][ T8140] dummy0: left allmulticast mode [ 223.105800][ T30] audit: type=1400 audit(1771818308.219:779): avc: denied { create } for pid=8147 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 223.135597][ T30] audit: type=1400 audit(1771818308.219:780): avc: denied { ioctl } for pid=8147 comm="syz.3.570" path="socket:[20632]" dev="sockfs" ino=20632 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 223.175729][ T8149] netlink: 'syz.3.570': attribute type 10 has an invalid length. [ 223.435416][ T5873] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 223.591579][ T5873] usb 6-1: not running at top speed; connect to a high speed hub [ 223.603271][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.633320][ T5873] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.656414][ T5873] usb 6-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 223.669146][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.681533][ T5873] usb 6-1: Product: syz [ 223.691370][ T5873] usb 6-1: Manufacturer: syz [ 223.702631][ T5873] usb 6-1: SerialNumber: syz [ 223.722680][ T5873] usb 6-1: config 0 descriptor?? [ 223.818840][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 223.830709][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 223.886021][ T29] usb 5-1: USB disconnect, device number 12 [ 224.317243][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 224.360029][ T5873] usb 6-1: USB disconnect, device number 15 [ 226.165284][ T8212] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 226.173967][ T8212] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 226.191475][ T8212] FAULT_INJECTION: forcing a failure. [ 226.191475][ T8212] name failslab, interval 1, probability 0, space 0, times 0 [ 226.204667][ T8212] CPU: 0 UID: 0 PID: 8212 Comm: syz.3.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.204694][ T8212] Tainted: [L]=SOFTLOCKUP [ 226.204700][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.204706][ T8212] Call Trace: [ 226.204710][ T8212] [ 226.204714][ T8212] dump_stack_lvl+0x100/0x190 [ 226.204739][ T8212] should_fail_ex.cold+0x5/0xa [ 226.204753][ T8212] should_failslab+0xc2/0x120 [ 226.204770][ T8212] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 226.204784][ T8212] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 226.204804][ T8212] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 226.204821][ T8212] idr_get_free+0x52e/0xa00 [ 226.204842][ T8212] idr_alloc_u32+0x1ac/0x320 [ 226.204860][ T8212] ? __pfx_idr_alloc_u32+0x10/0x10 [ 226.204880][ T8212] ? idr_alloc_u32+0xa/0x320 [ 226.204898][ T8212] tcf_idr_check_alloc+0x136/0x7a0 [ 226.204913][ T8212] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 226.204931][ T8212] tcf_ife_init+0x52f/0x14d0 [ 226.204945][ T8212] ? __pfx_tcf_ife_init+0x10/0x10 [ 226.204956][ T8212] ? irqentry_exit+0x180/0x670 [ 226.204973][ T8212] ? __asan_memcpy+0x3c/0x60 [ 226.204987][ T8212] tcf_action_init_1+0x466/0x6c0 [ 226.205003][ T8212] ? __pfx_tcf_action_init_1+0x10/0x10 [ 226.205016][ T8212] ? tc_action_load_ops+0x1f5/0x3e0 [ 226.205038][ T8212] ? __nla_parse+0x40/0x60 [ 226.205050][ T8212] tcf_action_init+0x43f/0xa60 [ 226.205069][ T8212] ? __pfx_tcf_action_init+0x10/0x10 [ 226.205094][ T8212] ? __lock_acquire+0x4a5/0x2630 [ 226.205125][ T8212] ? __lock_acquire+0x4a5/0x2630 [ 226.205143][ T8212] tcf_action_add+0xed/0x5c0 [ 226.205160][ T8212] ? __pfx_tcf_action_add+0x10/0x10 [ 226.205195][ T8212] ? __nla_parse+0x40/0x60 [ 226.205207][ T8212] tc_ctl_action+0x2e3/0x470 [ 226.205221][ T8212] ? __pfx_tc_ctl_action+0x10/0x10 [ 226.205241][ T8212] ? __pfx_tc_ctl_action+0x10/0x10 [ 226.205256][ T8212] rtnetlink_rcv_msg+0x3c9/0xe90 [ 226.205268][ T8212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.205280][ T8212] ? __pfx___schedule+0x10/0x10 [ 226.205300][ T8212] netlink_rcv_skb+0x159/0x420 [ 226.205312][ T8212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.205323][ T8212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.205340][ T8212] ? rcu_is_watching+0x12/0xc0 [ 226.205356][ T8212] netlink_unicast+0x5aa/0x870 [ 226.205369][ T8212] ? __pfx_netlink_unicast+0x10/0x10 [ 226.205386][ T8212] netlink_sendmsg+0x8b0/0xda0 [ 226.205400][ T8212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.205411][ T8212] ? __might_fault+0x20/0x140 [ 226.205429][ T8212] ____sys_sendmsg+0xa54/0xc30 [ 226.205444][ T8212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.205463][ T8212] ___sys_sendmsg+0x190/0x1e0 [ 226.205478][ T8212] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.205490][ T8212] ? find_held_lock+0x2b/0x80 [ 226.205503][ T8212] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 226.205526][ T8212] ? __rcu_read_unlock+0x26a/0x5e0 [ 226.205552][ T8212] __sys_sendmsg+0x170/0x220 [ 226.205562][ T8212] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.205581][ T8212] do_syscall_64+0x106/0xf80 [ 226.205591][ T8212] ? clear_bhb_loop+0x40/0x90 [ 226.205604][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.205615][ T8212] RIP: 0033:0x7f418379c629 [ 226.205625][ T8212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.205635][ T8212] RSP: 002b:00007f4184695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.205646][ T8212] RAX: ffffffffffffffda RBX: 00007f4183a16090 RCX: 00007f418379c629 [ 226.205652][ T8212] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 226.205658][ T8212] RBP: 00007f4184695090 R08: 0000000000000000 R09: 0000000000000000 [ 226.205664][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.205670][ T8212] R13: 00007f4183a16128 R14: 00007f4183a16090 R15: 00007ffdd0c11678 [ 226.205684][ T8212] [ 228.091998][ T30] audit: type=1400 audit(1771818313.211:781): avc: denied { bind } for pid=8230 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.212162][ T30] audit: type=1400 audit(1771818313.331:782): avc: denied { write } for pid=8230 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.486998][ T8255] hfsplus: unable to find HFS+ superblock [ 230.119834][ T30] audit: type=1400 audit(1771818315.162:783): avc: denied { append } for pid=8270 comm="syz.3.588" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 230.177056][ T8252] net_ratelimit: 27 callbacks suppressed [ 230.177072][ T8252] Set syz1 is full, maxelem 14 reached [ 230.516878][ T5853] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 230.535420][ T8281] netlink: 64 bytes leftover after parsing attributes in process `syz.4.591'. [ 230.677942][ T5853] usb 6-1: not running at top speed; connect to a high speed hub [ 230.691929][ T5853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.708380][ T5853] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.722065][ T5853] usb 6-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 230.731603][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.870581][ T5853] usb 6-1: Product: syz [ 230.874768][ T5853] usb 6-1: Manufacturer: syz [ 230.887296][ T5853] usb 6-1: SerialNumber: syz [ 230.894160][ T5853] usb 6-1: config 0 descriptor?? [ 230.936507][ T30] audit: type=1400 audit(1771818316.033:784): avc: denied { mounton } for pid=8288 comm="syz.3.593" path="/proc/454/map_files" dev="proc" ino=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 231.487766][ T5806] usb 6-1: USB disconnect, device number 16 [ 231.501447][ T30] audit: type=1400 audit(1771818316.623:785): avc: denied { create } for pid=8297 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 231.684547][ T5925] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 231.710476][ T30] audit: type=1400 audit(1771818316.833:786): avc: denied { read } for pid=8302 comm="syz.0.596" path="socket:[20083]" dev="sockfs" ino=20083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.024077][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.035247][ T5925] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.046173][ T5925] usb 4-1: config 1 has no interface number 1 [ 232.059024][ T5925] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 232.128545][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.269930][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.278130][ T5925] usb 4-1: Product: syz [ 232.287153][ T5925] usb 4-1: Manufacturer: syz [ 232.291760][ T5925] usb 4-1: SerialNumber: syz [ 232.867969][ T5925] usbhid 4-1:1.2: couldn't find an input interrupt endpoint [ 232.890579][ T5925] usb 4-1: USB disconnect, device number 21 [ 233.025346][ T7886] udevd[7886]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.266662][ T8324] Set syz1 is full, maxelem 14 reached [ 233.485504][ T5925] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 233.638657][ T8328] tipc: Started in network mode [ 233.644216][ T5925] usb 6-1: not running at top speed; connect to a high speed hub [ 233.645796][ T8328] tipc: Node identity a6088ded05a2, cluster identity 4711 [ 233.685388][ T8328] tipc: Enabled bearer , priority 0 [ 233.694299][ T5925] usb 6-1: config 10 has an invalid interface number: 105 but max is 1 [ 233.705302][ T5925] usb 6-1: config 10 has an invalid interface number: 187 but max is 1 [ 233.713557][ T5925] usb 6-1: config 10 has no interface number 0 [ 233.732687][ T5925] usb 6-1: config 10 has no interface number 1 [ 233.756195][ T5925] usb 6-1: config 10 interface 105 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 233.793634][ T5925] usb 6-1: config 10 interface 105 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 233.823815][ T5925] usb 6-1: config 10 interface 105 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 233.840913][ T5925] usb 6-1: config 10 interface 105 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 233.843846][ T8329] syzkaller0: entered promiscuous mode [ 233.875315][ T8329] syzkaller0: entered allmulticast mode [ 233.882757][ T8329] tipc: Resetting bearer [ 233.888863][ T5925] usb 6-1: config 10 interface 187 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 233.902314][ T8327] tipc: Resetting bearer [ 233.923032][ T5925] usb 6-1: config 10 interface 187 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 233.941777][ T5925] usb 6-1: config 10 interface 187 altsetting 3 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 233.981937][ T5925] usb 6-1: config 10 interface 105 has no altsetting 0 [ 233.992677][ T5925] usb 6-1: config 10 interface 187 has no altsetting 0 [ 234.006531][ T5925] usb 6-1: New USB device found, idVendor=1a8d, idProduct=1010, bcdDevice=d4.0e [ 234.015718][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.031115][ T5925] usb 6-1: Product: syz [ 234.035433][ T5925] usb 6-1: Manufacturer: 抒⮦뇾둅ⅉ纒큧ᓳඞꔌ툰ᱰ﻽䰳냠ࠣꨁ㍙邗එ蛓鈲嶙笠햘৒ႇ揺깐䄜☮亯Ćꞔￏ匥챦䃂鄐⪈ഽ럢⁠緕Ɵꍋ庲䒁퐠㌦꯻቙侲列벀슎絃煷 [ 234.081637][ T5925] usb 6-1: SerialNumber: syz [ 234.886531][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.899047][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.927024][ T30] audit: type=1400 audit(1771818320.055:787): avc: denied { write } for pid=8325 comm="syz.5.601" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 235.008977][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.046113][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.072802][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.082747][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.104878][ T5925] option 6-1:10.105: GSM modem (1-port) converter detected [ 235.135315][ T5925] usb 6-1: USB disconnect, device number 17 [ 235.148532][ T5925] option 6-1:10.105: device disconnected [ 235.903010][ T5925] IPVS: starting estimator thread 0... [ 236.023508][ T8348] IPVS: using max 50 ests per chain, 120000 per kthread [ 236.104907][ T5881] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 236.274092][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 236.286290][ T5881] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 236.294575][ T5881] usb 6-1: config 0 has no interface number 0 [ 236.300670][ T5881] usb 6-1: config 0 interface 196 has no altsetting 0 [ 236.328012][ T5881] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 236.344002][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.352004][ T5881] usb 6-1: Product: syz [ 236.356241][ T5881] usb 6-1: Manufacturer: syz [ 236.360819][ T5881] usb 6-1: SerialNumber: syz [ 236.378177][ T5881] usb 6-1: config 0 descriptor?? [ 236.409476][ T8327] tipc: Disabling bearer [ 236.420400][ T5873] tipc: Node number set to 2745863661 [ 237.023095][ T5881] ipheth 6-1:0.196: Unable to find endpoints [ 237.050322][ T5881] usb 6-1: USB disconnect, device number 18 [ 237.187601][ T8363] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 237.197349][ T30] audit: type=1400 audit(1771818322.326:788): avc: denied { ioctl } for pid=8361 comm="syz.3.611" path="socket:[20206]" dev="sockfs" ino=20206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.230462][ T5806] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 237.263002][ T8366] ======================================================= [ 237.263002][ T8366] WARNING: The mand mount option has been deprecated and [ 237.263002][ T8366] and is ignored by this kernel. Remove the mand [ 237.263002][ T8366] option from the mount to silence this warning. [ 237.263002][ T8366] ======================================================= [ 237.317965][ T8366] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.441007][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.458047][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.473502][ T5806] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 237.482643][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.508837][ T5806] usb 3-1: config 0 descriptor?? [ 238.089009][ T30] audit: type=1400 audit(1771818323.216:789): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 238.269782][ T30] audit: type=1400 audit(1771818323.396:790): avc: denied { shutdown } for pid=8370 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.321056][ T5806] usbhid 3-1:0.0: can't add hid device: -71 [ 238.327181][ T5806] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 238.339081][ T5806] usb 3-1: USB disconnect, device number 31 [ 239.728265][ T8386] kernel read not supported for file /! (pid: 8386 comm: syz.3.617) [ 239.729722][ T30] audit: type=1400 audit(1771818324.857:791): avc: denied { map } for pid=8387 comm="syz.2.618" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.762602][ T30] audit: type=1400 audit(1771818324.897:792): avc: denied { execute } for pid=8387 comm="syz.2.618" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.816501][ T30] audit: type=1800 audit(1771818324.947:793): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.617" name=217F dev="mqueue" ino=21211 res=0 errno=0 [ 239.847816][ T30] audit: type=1400 audit(1771818324.947:794): avc: denied { remount } for pid=8385 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.072105][ T5881] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 240.321947][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 240.333402][ T5881] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.342153][ T5881] usb 3-1: config 7 has an invalid interface number: 142 but max is 0 [ 240.351038][ T5881] usb 3-1: config 7 has no interface number 0 [ 240.362708][ T5881] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 240.373915][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 240.381697][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.389769][ T5881] usb 3-1: Product: syz [ 240.399421][ T5881] usb 3-1: Manufacturer: syz [ 240.405449][ T5881] usb 3-1: SerialNumber: syz [ 240.796371][ T5881] usb 3-1: USB disconnect, device number 32 [ 241.000065][ T30] audit: type=1400 audit(1771818326.128:795): avc: denied { create } for pid=8425 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 241.106946][ T8428] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 241.176667][ T30] audit: type=1326 audit(1771818326.308:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049279c629 code=0x7ffc0000 [ 241.641360][ T30] audit: type=1326 audit(1771818326.308:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049279c629 code=0x7ffc0000 [ 241.683079][ T30] audit: type=1326 audit(1771818326.308:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049279c629 code=0x7ffc0000 [ 241.720376][ T30] audit: type=1326 audit(1771818326.308:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049279c629 code=0x7ffc0000 [ 241.751942][ T30] audit: type=1326 audit(1771818326.308:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f049279c629 code=0x7ffc0000 [ 241.790818][ T30] audit: type=1326 audit(1771818326.358:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049279c629 code=0x7ffc0000 [ 241.814506][ T30] audit: type=1326 audit(1771818326.358:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049279c629 code=0x7ffc0000 [ 241.844012][ T30] audit: type=1326 audit(1771818326.358:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049279c629 code=0x7ffc0000 [ 241.867922][ T30] audit: type=1326 audit(1771818326.358:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f049279c392 code=0x7ffc0000 [ 241.964508][ T5882] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 242.080227][ T8435] FAULT_INJECTION: forcing a failure. [ 242.080227][ T8435] name failslab, interval 1, probability 0, space 0, times 0 [ 242.093097][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.2.630 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.093114][ T8435] Tainted: [L]=SOFTLOCKUP [ 242.093117][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.093123][ T8435] Call Trace: [ 242.093127][ T8435] [ 242.093131][ T8435] dump_stack_lvl+0x100/0x190 [ 242.093152][ T8435] should_fail_ex.cold+0x5/0xa [ 242.093166][ T8435] ? lsm_blob_alloc+0x68/0x90 [ 242.093180][ T8435] should_failslab+0xc2/0x120 [ 242.093196][ T8435] __kmalloc_noprof+0xe0/0x850 [ 242.093210][ T8435] ? trace_kmem_cache_alloc+0xf3/0x120 [ 242.093228][ T8435] lsm_blob_alloc+0x68/0x90 [ 242.093242][ T8435] security_sk_alloc+0x2d/0x290 [ 242.093260][ T8435] sk_prot_alloc+0x1d1/0x2a0 [ 242.093273][ T8435] sk_alloc+0x36/0xe80 [ 242.093289][ T8435] kcm_ioctl+0x442/0x1290 [ 242.093308][ T8435] ? __pfx_kcm_ioctl+0x10/0x10 [ 242.093323][ T8435] ? tomoyo_path_number_perm+0x188/0x580 [ 242.093345][ T8435] sock_do_ioctl+0x118/0x280 [ 242.093357][ T8435] ? __pfx_sock_do_ioctl+0x10/0x10 [ 242.093373][ T8435] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 242.093388][ T8435] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 242.093403][ T8435] sock_ioctl+0x599/0x6b0 [ 242.093417][ T8435] ? __pfx_sock_ioctl+0x10/0x10 [ 242.093429][ T8435] ? hook_file_ioctl_common+0x146/0x410 [ 242.093447][ T8435] ? selinux_file_ioctl+0x139/0x290 [ 242.093458][ T8435] ? selinux_file_ioctl+0xb4/0x290 [ 242.093474][ T8435] ? __pfx_sock_ioctl+0x10/0x10 [ 242.093490][ T8435] __x64_sys_ioctl+0x18e/0x210 [ 242.093513][ T8435] do_syscall_64+0x106/0xf80 [ 242.093528][ T8435] ? clear_bhb_loop+0x40/0x90 [ 242.093542][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.093553][ T8435] RIP: 0033:0x7f275759c629 [ 242.093562][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.093573][ T8435] RSP: 002b:00007f2758410028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.093583][ T8435] RAX: ffffffffffffffda RBX: 00007f2757815fa0 RCX: 00007f275759c629 [ 242.093590][ T8435] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 242.093596][ T8435] RBP: 00007f2758410090 R08: 0000000000000000 R09: 0000000000000000 [ 242.093601][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.093607][ T8435] R13: 00007f2757816038 R14: 00007f2757815fa0 R15: 00007ffc59b93e48 [ 242.093621][ T8435] [ 242.385061][ T5873] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 242.410946][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 242.417593][ T5882] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 242.425760][ T5882] usb 6-1: config 0 has no interface number 0 [ 242.431974][ T5882] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.443114][ T5882] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 242.455666][ T5882] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.466790][ T5882] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 242.479945][ T5882] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 242.489156][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.518460][ T8440] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.632'. [ 242.523402][ T5882] usb 6-1: config 0 descriptor?? [ 242.546556][ T5882] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 242.660816][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 242.668407][ T5873] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 242.679809][ T5873] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 242.694016][ T5873] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 242.710751][ T5873] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.773554][ T5873] usb 4-1: config 1 interface 0 has no altsetting 0 [ 242.783428][ T5882] usb 6-1: USB disconnect, device number 19 [ 242.794454][ T5882] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 242.808963][ T5873] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.833332][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.846892][ T5873] usb 4-1: Product: syz [ 242.854483][ T5873] usb 4-1: Manufacturer: syz [ 242.859095][ T5873] usb 4-1: SerialNumber: syz [ 242.872829][ T8433] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 242.891741][ T8433] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 243.137073][ T5873] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 243.156328][ T5873] usb 4-1: USB disconnect, device number 22 [ 244.677672][ T8477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.643'. [ 244.876032][ T8489] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.644'. [ 245.553964][ T8495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.646'. [ 245.575711][ T8495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.646'. [ 245.661288][ T8499] futex_wake_op: syz.4.648 tries to shift op by -1; fix this program [ 245.661342][ T8500] syzkaller0: entered promiscuous mode [ 245.661358][ T8500] syzkaller0: entered allmulticast mode [ 245.999141][ T5882] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 246.209076][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 246.237757][ T5882] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 246.248942][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.256917][ T5882] usb 4-1: Product: syz [ 246.278990][ T5882] usb 4-1: Manufacturer: syz [ 246.283607][ T5882] usb 4-1: SerialNumber: syz [ 246.302503][ T5882] usb 4-1: config 0 descriptor?? [ 246.312237][ T5882] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 247.017907][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.043374][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.248530][ T5882] usb 4-1: USB disconnect, device number 23 [ 250.135949][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.172193][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 250.172207][ T30] audit: type=1400 audit(1771818335.302:876): avc: denied { connect } for pid=8524 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.517012][ T8545] netlink: zone id is out of range [ 250.522176][ T8545] netlink: zone id is out of range [ 250.528359][ T8545] netlink: zone id is out of range [ 250.533504][ T8545] netlink: zone id is out of range [ 250.538689][ T8545] netlink: zone id is out of range [ 250.543810][ T8545] netlink: zone id is out of range [ 250.548969][ T8545] netlink: zone id is out of range [ 250.554088][ T8545] netlink: zone id is out of range [ 250.559247][ T8545] netlink: zone id is out of range [ 250.564376][ T8545] netlink: zone id is out of range [ 250.747818][ T8547] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.661'. [ 250.832033][ T8523] SELinux: failed to load policy [ 250.842768][ T30] audit: type=1400 audit(1771818335.973:877): avc: denied { mounton } for pid=8548 comm="syz.5.662" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 251.557404][ T30] audit: type=1400 audit(1771818336.593:878): avc: denied { read } for pid=8552 comm="syz.4.663" dev="nsfs" ino=4026533083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 251.602566][ T30] audit: type=1400 audit(1771818336.603:879): avc: denied { open } for pid=8552 comm="syz.4.663" path="cgroup:[4026533083]" dev="nsfs" ino=4026533083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 251.633109][ T30] audit: type=1400 audit(1771818336.763:880): avc: denied { map_create } for pid=8556 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 251.657480][ T30] audit: type=1400 audit(1771818336.783:881): avc: denied { bpf } for pid=8556 comm="syz.2.664" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 251.734916][ T30] audit: type=1400 audit(1771818336.783:882): avc: denied { map_read map_write } for pid=8556 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 251.761025][ T30] audit: type=1400 audit(1771818336.793:883): avc: denied { prog_load } for pid=8556 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 251.897303][ T30] audit: type=1400 audit(1771818336.863:884): avc: denied { unmount } for pid=6602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 251.917975][ T30] audit: type=1400 audit(1771818336.893:885): avc: denied { create } for pid=8558 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.535747][ T8571] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 252.546050][ T8571] SELinux: failed to load policy [ 254.590329][ T8600] vivid-001: kernel_thread() failed [ 255.163069][ T8610] input: syz1 as /devices/virtual/input/input41 [ 255.171579][ T8610] input: failed to attach handler leds to device input41, error: -6 [ 255.270388][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 255.270407][ T30] audit: type=1400 audit(1771818340.265:977): avc: denied { create } for pid=8605 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.601884][ T30] audit: type=1400 audit(1771818340.275:978): avc: denied { read write } for pid=8605 comm="syz.3.676" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 255.634406][ T30] audit: type=1400 audit(1771818340.285:979): avc: denied { open } for pid=8605 comm="syz.3.676" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 255.683801][ T30] audit: type=1400 audit(1771818340.285:980): avc: denied { ioctl } for pid=8605 comm="syz.3.676" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 255.727794][ T30] audit: type=1400 audit(1771818340.355:981): avc: denied { ioctl } for pid=8605 comm="syz.3.676" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 255.762823][ T30] audit: type=1400 audit(1771818340.435:982): avc: denied { create } for pid=8605 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.782855][ T30] audit: type=1400 audit(1771818340.445:983): avc: denied { setopt } for pid=8605 comm="syz.3.676" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.803901][ T30] audit: type=1400 audit(1771818340.455:984): avc: denied { watch watch_reads } for pid=8605 comm="syz.3.676" path="/148" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 255.870362][ T30] audit: type=1400 audit(1771818340.465:985): avc: denied { read } for pid=8605 comm="syz.3.676" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 256.403613][ T30] audit: type=1400 audit(1771818340.465:986): avc: denied { open } for pid=8605 comm="syz.3.676" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 257.344122][ T31] INFO: task kworker/1:2:1204 blocked for more than 143 seconds. [ 257.362931][ T31] Tainted: G L syzkaller #0 [ 257.370329][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.391311][ T31] task:kworker/1:2 state:D stack:22424 pid:1204 tgid:1204 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 257.411574][ T31] Workqueue: usb_hub_wq hub_event [ 257.423401][ T31] Call Trace: [ 257.426701][ T31] [ 257.432097][ T31] __schedule+0xfee/0x60e0 [ 257.441571][ T31] ? __lock_acquire+0x4a5/0x2630 [ 257.449202][ T31] ? __pfx___schedule+0x10/0x10 [ 257.454745][ T31] ? find_held_lock+0x2b/0x80 [ 257.460021][ T31] ? schedule+0x2bf/0x390 [ 257.464748][ T31] schedule+0xdd/0x390 [ 257.468906][ T31] schedule_timeout+0x1b2/0x280 [ 257.474061][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 257.479584][ T31] ? mark_held_locks+0x40/0x70 [ 257.484715][ T31] __wait_for_common+0x2e7/0x4c0 [ 257.489789][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 257.495393][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 257.500968][ T31] ? __pfx_device_del+0x10/0x10 [ 257.506123][ T31] ? kobject_put+0xb9/0x640 [ 257.510645][ T31] i2c_del_adapter+0x62d/0x820 [ 257.524213][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 257.529632][ T31] ? dvb_usb_device_exit+0x29a/0x520 [ 257.535423][ T31] ? rcu_is_watching+0x12/0xc0 [ 257.543451][ T31] ? dvb_usb_device_exit+0x29a/0x520 [ 257.548860][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 257.553664][ T31] dvb_usb_device_exit+0x313/0x520 [ 257.563471][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 257.569226][ T31] ? _raw_spin_lock_irqsave+0x52/0x60 [ 257.574651][ T31] cxusb_probe.cold+0x4d/0xc2 [ 257.583274][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 257.589100][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 257.603323][ T31] ? __pm_runtime_set_status+0x13c/0x970 [ 257.609104][ T31] usb_probe_interface+0x303/0x8f0 [ 257.614260][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 257.620117][ T31] really_probe+0x241/0xa60 [ 257.624676][ T31] __driver_probe_device+0x1de/0x400 [ 257.630133][ T31] driver_probe_device+0x4c/0x1b0 [ 257.635252][ T31] __device_attach_driver+0x1ff/0x3e0 [ 257.640809][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 257.646778][ T31] bus_for_each_drv+0x159/0x1e0 [ 257.651846][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 257.657279][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 257.662658][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 257.668525][ T31] __device_attach+0x1e4/0x4d0 [ 257.673616][ T31] ? __pfx___device_attach+0x10/0x10 [ 257.678909][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 257.684337][ T31] device_initial_probe+0xaf/0xd0 [ 257.689366][ T31] bus_probe_device+0x64/0x160 [ 257.694171][ T31] device_add+0x11d9/0x1950 [ 257.698893][ T31] ? __pfx_device_add+0x10/0x10 [ 257.703794][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 257.709789][ T31] usb_set_configuration+0xd97/0x1c60 [ 257.715224][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 257.721477][ T31] usb_generic_driver_probe+0xa1/0xe0 [ 257.727530][ T31] usb_probe_device+0xef/0x400 [ 257.732400][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 257.737806][ T31] really_probe+0x241/0xa60 [ 257.742552][ T31] __driver_probe_device+0x1de/0x400 [ 257.747875][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 257.753540][ T31] driver_probe_device+0x4c/0x1b0 [ 257.758575][ T31] __device_attach_driver+0x1ff/0x3e0 [ 257.764096][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 257.770111][ T31] bus_for_each_drv+0x159/0x1e0 [ 257.775096][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 257.780570][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 257.786116][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 257.791937][ T31] __device_attach+0x1e4/0x4d0 [ 257.796814][ T31] ? __pfx___device_attach+0x10/0x10 [ 257.802231][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 257.807891][ T31] device_initial_probe+0xaf/0xd0 [ 257.812929][ T31] bus_probe_device+0x64/0x160 [ 257.817908][ T31] device_add+0x11d9/0x1950 [ 257.822422][ T31] ? __pfx_device_add+0x10/0x10 [ 257.827317][ T31] ? add_device_randomness+0xb7/0xf0 [ 257.832819][ T31] usb_new_device.cold+0x685/0x115c [ 257.838057][ T31] ? do_raw_spin_lock+0x128/0x260 [ 257.843179][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 257.848373][ T31] ? mark_held_locks+0x40/0x70 [ 257.853178][ T31] hub_event+0x314d/0x4af0 [ 257.857658][ T31] ? __pfx_hub_event+0x10/0x10 [ 257.862422][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 257.868146][ T31] ? sched_core_enqueue+0x320/0xc00 [ 257.873386][ T31] ? rcu_is_watching+0x12/0xc0 [ 257.878156][ T31] process_one_work+0x9d7/0x1920 [ 257.883792][ T31] ? __pfx_process_one_work+0x10/0x10 [ 257.889182][ T31] ? __pfx_hub_event+0x10/0x10 [ 257.894161][ T31] worker_thread+0x5da/0xe40 [ 257.898757][ T31] ? __pfx_worker_thread+0x10/0x10 [ 257.903957][ T31] ? kthread+0x13a/0x450 [ 257.908267][ T31] ? __pfx_worker_thread+0x10/0x10 [ 257.913440][ T31] kthread+0x370/0x450 [ 257.917554][ T31] ? __pfx_kthread+0x10/0x10 [ 257.922215][ T31] ret_from_fork+0x754/0xd80 [ 257.926900][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 257.932055][ T31] ? __switch_to+0x7b4/0x1120 [ 257.936848][ T31] ? __pfx_kthread+0x10/0x10 [ 257.941483][ T31] ret_from_fork_asm+0x1a/0x30 [ 257.946365][ T31] [ 257.950291][ T31] INFO: task syz.1.141:6457 blocked for more than 144 seconds. [ 257.958905][ T31] Tainted: G L syzkaller #0 [ 257.969361][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.978098][ T31] task:syz.1.141 state:D stack:28792 pid:6457 tgid:6439 ppid:5811 task_flags:0x400040 flags:0x00080002 [ 257.990131][ T31] Call Trace: [ 257.993469][ T31] [ 257.996454][ T31] __schedule+0xfee/0x60e0 [ 258.000958][ T31] ? __lock_acquire+0x4a5/0x2630 [ 258.006110][ T31] ? __pfx___schedule+0x10/0x10 [ 258.011043][ T31] ? find_held_lock+0x2b/0x80 [ 258.015807][ T31] ? schedule+0x2bf/0x390 [ 258.020185][ T31] schedule+0xdd/0x390 [ 258.024366][ T31] schedule_preempt_disabled+0x13/0x30 [ 258.029874][ T31] __mutex_lock+0xc9a/0x1b90 [ 258.034541][ T31] ? do_raw_spin_lock+0x128/0x260 [ 258.039620][ T31] ? usbdev_open+0x1b6/0x870 [ 258.044274][ T31] ? klist_put+0xcb/0x1d0 [ 258.048678][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 258.053771][ T31] ? _raw_spin_unlock+0x28/0x50 [ 258.058675][ T31] ? kobject_put+0xb9/0x640 [ 258.063273][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 258.068786][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 258.074185][ T31] ? usbdev_open+0x1b6/0x870 [ 258.078832][ T31] usbdev_open+0x1b6/0x870 [ 258.083332][ T31] ? do_raw_spin_lock+0x128/0x260 [ 258.088425][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 258.093420][ T31] ? chrdev_open+0x589/0x6a0 [ 258.098052][ T31] ? chrdev_open+0x589/0x6a0 [ 258.102706][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 258.107735][ T31] chrdev_open+0x234/0x6a0 [ 258.112181][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 258.117361][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 258.123754][ T31] do_dentry_open+0x6d8/0x1660 [ 258.128600][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 258.133603][ T31] vfs_open+0x82/0x3f0 [ 258.137712][ T31] path_openat+0x208c/0x31a0 [ 258.142367][ T31] ? __pfx_path_openat+0x10/0x10 [ 258.147393][ T31] do_file_open+0x20e/0x430 [ 258.151934][ T31] ? __pfx_do_file_open+0x10/0x10 [ 258.157069][ T31] ? alloc_fd+0x476/0x790 [ 258.161440][ T31] ? do_getname+0x191/0x390 [ 258.166013][ T31] do_sys_openat2+0x10d/0x1e0 [ 258.170755][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.176023][ T31] ? do_raw_spin_lock+0x128/0x260 [ 258.181122][ T31] ? kcov_ioctl+0x16a/0x720 [ 258.185691][ T31] __x64_sys_openat+0x12d/0x210 [ 258.190584][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 258.196057][ T31] ? kcov_ioctl+0x16a/0x720 [ 258.200612][ T31] do_syscall_64+0x106/0xf80 [ 258.205306][ T31] ? clear_bhb_loop+0x40/0x90 [ 258.210070][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.216027][ T31] RIP: 0033:0x7fea83b5cece [ 258.220525][ T31] RSP: 002b:00007fea84995b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 258.229167][ T31] RAX: ffffffffffffffda RBX: 00007fea849966c0 RCX: 00007fea83b5cece [ 258.237253][ T31] RDX: 0000000000103301 RSI: 00007fea84995c00 RDI: ffffffffffffff9c [ 258.245315][ T31] RBP: 00007fea84995c00 R08: 0000000000000000 R09: 0000000000000000 [ 258.253523][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 258.261548][ T31] R13: 00007fea83e16128 R14: 00007fea83e16090 R15: 00007ffcfc9f0a58 [ 258.269637][ T31] [ 258.272729][ T31] [ 258.272729][ T31] Showing all locks held in the system: [ 258.280557][ T31] 3 locks held by kworker/u8:0/12: [ 258.285838][ T31] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 258.297473][ T31] #1: ffffc90000117d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 258.307969][ T31] #2: ffffffff9060f268 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 258.317099][ T31] 3 locks held by kworker/1:0/24: [ 258.322192][ T31] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 258.332757][ T31] #1: ffffc900001e7d08 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 258.343199][ T31] #2: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 258.353355][ T31] 1 lock held by khungtaskd/31: [ 258.358253][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 258.372890][ T31] 5 locks held by kworker/1:2/1204: [ 258.378075][ T31] #0: ffff888022efd948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 258.392867][ T31] #1: ffffc900047f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 258.412875][ T31] #2: ffff88802b38b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 258.421767][ T31] #3: ffff888077e50198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 258.432845][ T31] #4: ffff888045135160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 258.442109][ T31] 2 locks held by getty/5563: [ 258.446916][ T31] #0: ffff88803903a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 258.456868][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 258.467031][ T31] 2 locks held by syz-executor/5802: [ 258.472314][ T31] 3 locks held by syz-executor/5816: [ 258.477624][ T31] 1 lock held by syz.1.141/6457: [ 258.482549][ T31] #0: ffff88802b38b198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 258.491566][ T31] 2 locks held by syz.0.677/8607: [ 258.496591][ T31] #0: ffffffff9060f268 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 258.505592][ T31] #1: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 258.515624][ T31] 1 lock held by syz.2.680/8624: [ 258.520546][ T31] #0: ffffffff9060f268 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x4a2/0x47c0 [ 258.529929][ T31] [ 258.532261][ T31] ============================================= [ 258.532261][ T31] [ 258.544651][ T31] NMI backtrace for cpu 0 [ 258.544667][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 258.544691][ T31] Tainted: [L]=SOFTLOCKUP [ 258.544697][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.544707][ T31] Call Trace: [ 258.544712][ T31] [ 258.544719][ T31] dump_stack_lvl+0x100/0x190 [ 258.544751][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 258.544771][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 258.544799][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 258.544827][ T31] sys_info+0x141/0x190 [ 258.544847][ T31] watchdog+0xd25/0x1050 [ 258.544877][ T31] ? __pfx_watchdog+0x10/0x10 [ 258.544901][ T31] ? __kthread_parkme+0x18c/0x230 [ 258.544928][ T31] ? kthread+0x13a/0x450 [ 258.544943][ T31] ? __pfx_watchdog+0x10/0x10 [ 258.544964][ T31] kthread+0x370/0x450 [ 258.544979][ T31] ? __pfx_kthread+0x10/0x10 [ 258.544997][ T31] ret_from_fork+0x754/0xd80 [ 258.545015][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 258.545034][ T31] ? __switch_to+0x7b4/0x1120 [ 258.545055][ T31] ? __pfx_kthread+0x10/0x10 [ 258.545073][ T31] ret_from_fork_asm+0x1a/0x30 [ 258.545105][ T31] [ 258.545111][ T31] Sending NMI from CPU 0 to CPUs 1: [ 258.670456][ C1] NMI backtrace for cpu 1 [ 258.670473][ C1] CPU: 1 UID: 0 PID: 5802 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 258.670492][ C1] Tainted: [L]=SOFTLOCKUP [ 258.670497][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.670505][ C1] RIP: 0010:__orc_find+0x70/0xf0 [ 258.670530][ C1] Code: ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a <48> 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 [ 258.670543][ C1] RSP: 0018:ffffc90003d5f2e0 EFLAGS: 00000a07 [ 258.670555][ C1] RAX: ffffffff9188c9a4 RBX: ffffffff90fc96ec RCX: dffffc0000000000 [ 258.670564][ C1] RDX: 1ffffffff21f92dd RSI: 0000000000000000 RDI: ffffffff90fc96cc [ 258.670573][ C1] RBP: ffffffff90fc96cc R08: ffffffff9188ca10 R09: 0000000000000007 [ 258.670582][ C1] R10: 0000000000000200 R11: 0000000000018e05 R12: ffffffff90fc9710 [ 258.670590][ C1] R13: ffffffff828e0535 R14: ffffffff90fc96cc R15: ffffffff90fc96cc [ 258.670599][ C1] FS: 00005555796f0500(0000) GS:ffff88812444a000(0000) knlGS:0000000000000000 [ 258.670613][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.670622][ C1] CR2: 00007f27577e82f8 CR3: 0000000061842000 CR4: 00000000003526f0 [ 258.670631][ C1] Call Trace: [ 258.670635][ C1] [ 258.670641][ C1] ? __x64_sys_unlink+0x45/0x70 [ 258.670656][ C1] unwind_next_frame+0x2ec/0x1ea0 [ 258.670671][ C1] ? __x64_sys_unlink+0x46/0x70 [ 258.670686][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 258.670704][ C1] arch_stack_walk+0x94/0xf0 [ 258.670720][ C1] ? __x64_sys_unlink+0x46/0x70 [ 258.670736][ C1] stack_trace_save+0x8e/0xc0 [ 258.670751][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 258.670768][ C1] ? __lock_acquire+0x4a5/0x2630 [ 258.670788][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 258.670807][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 258.670821][ C1] save_stack+0x162/0x1e0 [ 258.670838][ C1] ? __pfx_save_stack+0x10/0x10 [ 258.670855][ C1] ? free_unref_folios+0xaea/0x1790 [ 258.670871][ C1] ? folios_put_refs+0x53c/0x840 [ 258.670887][ C1] ? shmem_undo_range+0x5e5/0x1570 [ 258.670904][ C1] ? shmem_evict_inode+0x39e/0xbd0 [ 258.670920][ C1] ? evict+0x3c2/0xad0 [ 258.670934][ C1] ? iput.part.0+0x605/0xf50 [ 258.670948][ C1] ? iput+0x35/0x40 [ 258.670961][ C1] ? filename_unlinkat+0x466/0x730 [ 258.670974][ C1] ? __x64_sys_unlink+0x46/0x70 [ 258.670989][ C1] ? page_ext_put+0x3e/0xd0 [ 258.671008][ C1] __reset_page_owner+0x84/0x190 [ 258.671027][ C1] free_unref_folios+0xaea/0x1790 [ 258.671044][ C1] ? mark_held_locks+0x40/0x70 [ 258.671062][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 258.671083][ C1] folios_put_refs+0x53c/0x840 [ 258.671101][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 258.671120][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 258.671141][ C1] shmem_undo_range+0x5e5/0x1570 [ 258.671162][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 258.671187][ C1] ? unwind_get_return_address+0x59/0xa0 [ 258.671202][ C1] ? arch_stack_walk+0xa6/0xf0 [ 258.671225][ C1] ? kasan_save_stack+0x3f/0x50 [ 258.671245][ C1] ? kasan_save_stack+0x30/0x50 [ 258.671261][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 258.671275][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 258.671295][ C1] ? dentry_free+0xc2/0x170 [ 258.671308][ C1] ? __dentry_kill+0x49a/0x600 [ 258.671322][ C1] ? dput.part.0+0x456/0x570 [ 258.671339][ C1] shmem_evict_inode+0x39e/0xbd0 [ 258.671357][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 258.671376][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 258.671393][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 258.671412][ C1] ? find_held_lock+0x2b/0x80 [ 258.671427][ C1] ? evict+0x37e/0xad0 [ 258.671441][ C1] ? evict+0x37e/0xad0 [ 258.671457][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 258.671474][ C1] evict+0x3c2/0xad0 [ 258.671490][ C1] ? __pfx_evict+0x10/0x10 [ 258.671507][ C1] ? iput.part.0+0x5fd/0xf50 [ 258.671529][ C1] iput.part.0+0x605/0xf50 [ 258.671544][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 258.671564][ C1] iput+0x35/0x40 [ 258.671578][ C1] filename_unlinkat+0x466/0x730 [ 258.671593][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 258.671610][ C1] ? do_getname+0x191/0x390 [ 258.671626][ C1] __x64_sys_unlink+0x46/0x70 [ 258.671640][ C1] do_syscall_64+0x106/0xf80 [ 258.671652][ C1] ? clear_bhb_loop+0x40/0x90 [ 258.671668][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.671680][ C1] RIP: 0033:0x7f418379b717 [ 258.671691][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 258.671703][ C1] RSP: 002b:00007ffdd0c108e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 258.671715][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f418379b717 [ 258.671723][ C1] RDX: 00007ffdd0c10910 RSI: 00007ffdd0c109a0 RDI: 00007ffdd0c109a0 [ 258.671732][ C1] RBP: 00007ffdd0c109a0 R08: 00007ffdd0c119a0 R09: 00000000ffffffff [ 258.671740][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdd0c11a30 [ 258.671748][ C1] R13: 00007f4183831ef0 R14: 000000000003e9e2 R15: 00007ffdd0c11a70 [ 258.671762][ C1] [ 259.187107][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 259.193951][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 259.204606][ T31] Tainted: [L]=SOFTLOCKUP [ 259.208914][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.218937][ T31] Call Trace: [ 259.222188][ T31] [ 259.225094][ T31] dump_stack_lvl+0x100/0x190 [ 259.229752][ T31] vpanic+0x552/0x970 [ 259.233704][ T31] ? __pfx_vpanic+0x10/0x10 [ 259.238177][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 259.244309][ T31] panic+0xd1/0xe0 [ 259.248000][ T31] ? __pfx_panic+0x10/0x10 [ 259.252387][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 259.258520][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 259.264647][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 259.270774][ T31] ? watchdog.cold+0x198/0x1ca [ 259.275509][ T31] ? watchdog+0xd35/0x1050 [ 259.279902][ T31] watchdog.cold+0x1a9/0x1ca [ 259.284467][ T31] ? __pfx_watchdog+0x10/0x10 [ 259.289120][ T31] ? __kthread_parkme+0x18c/0x230 [ 259.294123][ T31] ? kthread+0x13a/0x450 [ 259.298342][ T31] ? __pfx_watchdog+0x10/0x10 [ 259.302998][ T31] kthread+0x370/0x450 [ 259.307044][ T31] ? __pfx_kthread+0x10/0x10 [ 259.311610][ T31] ret_from_fork+0x754/0xd80 [ 259.316185][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 259.321292][ T31] ? __switch_to+0x7b4/0x1120 [ 259.325960][ T31] ? __pfx_kthread+0x10/0x10 [ 259.330530][ T31] ret_from_fork_asm+0x1a/0x30 [ 259.335287][ T31] [ 259.338538][ T31] Kernel Offset: disabled [ 259.342847][ T31] Rebooting in 86400 seconds..