last executing test programs: 9m58.193216108s ago: executing program 0 (id=207): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = syz_ublk_setup_io_uring(0x14a3, &(0x7f0000000000)={0x0, 0xefae, 0x40, 0x1, 0x171}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) syz_ublk_setup_io_uring(0x1eb9, &(0x7f0000000140)={0x0, 0x2da9, 0x20000, 0x1, 0x67}, &(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r3 = mmap$IORING_OFF_SQES(0x0, 0x8b, 0x200000f, 0x100010, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x24, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x4, 0xf53}}}, &(0x7f0000000340)) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r6}, 0x4) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f00000003c0)={0x2e, 0x24, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x1, 0xbff, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x100}}}, &(0x7f0000000440)) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 9m55.660727734s ago: executing program 0 (id=216): ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x7ffffffe, r2, &(0x7f0000000180)={0x3000001d}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xc}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x403}, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f00000001c0)) write(r0, &(0x7f0000000780)='t', 0x1) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @any, 0x9}, 0xa) 9m55.572054992s ago: executing program 0 (id=217): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00007a0000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000964000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m55.131157058s ago: executing program 0 (id=218): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00007a0000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000964000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m53.792692938s ago: executing program 0 (id=219): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000240)={0x22800000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) close(r3) write(r2, &(0x7f0000000100)='\x00', 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x0, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 9m52.327338047s ago: executing program 0 (id=228): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f250a00000000000034ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x7, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c7351181a15d8f7a28bf04c5a4ee342b6847cb70588f8f84cf676d0afca0f2e6f4d82e4208ca4c5f7365d431", "b31f22c9080873366b499607be231200bc798b00", [0x2, 0x2000005e8]}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x2) pwrite64(r0, &(0x7f0000000000)="5f9d4d2070857c347f7a73b91e618e4be66082728a501e3fb2dd6ea64e65412287f9", 0x22, 0x7) close(0x3) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 9m36.920154467s ago: executing program 32 (id=228): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f250a00000000000034ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x7, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c7351181a15d8f7a28bf04c5a4ee342b6847cb70588f8f84cf676d0afca0f2e6f4d82e4208ca4c5f7365d431", "b31f22c9080873366b499607be231200bc798b00", [0x2, 0x2000005e8]}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x2) pwrite64(r0, &(0x7f0000000000)="5f9d4d2070857c347f7a73b91e618e4be66082728a501e3fb2dd6ea64e65412287f9", 0x22, 0x7) close(0x3) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 2m47.19292777s ago: executing program 2 (id=1171): mount(0x0, &(0x7f0000000400)='./cgroup/../file0\x00', &(0x7f0000000440)='devtmpfs\x00', 0x1010, 0x0) r0 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000110)=0x0) r4 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_FGETXATTR={0x2b, 0x54, 0x0, r4, 0x0, &(0x7f000000ae00)="95cf"}) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') (fail_nth: 4) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000400)={0x0, 0x2, 0x7ffffffffffffffc, 0x2}) sched_setaffinity(0x0, 0x0, 0x0) mkdir(0x0, 0x1fc) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, 0x0, 0x0) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) 2m46.867178023s ago: executing program 2 (id=1173): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 2m45.845766279s ago: executing program 2 (id=1176): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000ebf8ffffffffffff000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_io_uring_setup(0x40f00, &(0x7f0000000400)={0x0, 0x10000, 0x10000, 0x0, 0x40158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0xfffffc, 0xfffffffd, 0x4b, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r4, r0, &(0x7f0000002080)=0x264, 0x23b) pipe(0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r7 = inotify_init1(0x80800) inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x610003d5) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000001980)=""/1016, 0x3f8) openat(r8, &(0x7f0000000143), 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000040)={0xffffffffffff80e7, 0x2}) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) sendto$inet(r5, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x2000000000d2ba, 0x101000) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x2) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 2m40.971561704s ago: executing program 2 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = syz_io_uring_complete(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\"\x00'], 0x0}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1}, 0x36, 0x3, 0x0, 0x0, "836527d70470408aa0b4eef83b1b0adec127001dac2345b6d513789e398a6a2e08134539e15aec31c02c807c5fb8e5166be5c9f353f17e33c8a9f731c5d1767a"}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x4001) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000006ffc)=0x4000000000000200, 0x4) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xc626000) r4 = eventfd2(0xfffffe01, 0x80001) write$eventfd(r4, &(0x7f0000000140)=0xffffffff000001fe, 0x8) read(r4, &(0x7f0000000480)=""/82, 0x52) mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x75) unshare(0x6020400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/trace\x00', 0x1, 0x0) lseek(r5, 0x5, 0x3) getsockname$packet(r5, 0x0, &(0x7f00000001c0)) bind$packet(r3, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0xfd, 0x6, @link_local}, 0x14) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0), 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast1, 0x4}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000030000104000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000240012800b00010067656e657665000014000280060005004e2000000500080000000000"], 0x44}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40800) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x7f, 0x8, 0x8}) 2m33.121550347s ago: executing program 2 (id=1189): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/196, 0xc4}], 0x1, 0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r9 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r9, &(0x7f0000000600), 0xfec8) recvmmsg(r9, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000027c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0xcb, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="02"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x87a0f}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008a5}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0xd, 0x0, 0x40480d1}, 0x240480d4) 2m31.812954169s ago: executing program 2 (id=1195): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x2a0141, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000971000/0x2000)=nil}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x9, 0x2}) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x3d2c, 0xfffffff5, 0x1, 0xffffffffffffffff, 0x8ad6}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x200, 0xffd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x2, 0x1000, @rand_addr=' \x01\x00'}, 0x1c) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) mremap(&(0x7f0000680000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f00003f3000/0x3000)=nil) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40010, r8, 0xc082a000) preadv(r8, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2m16.131926267s ago: executing program 33 (id=1195): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x2a0141, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000971000/0x2000)=nil}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x9, 0x2}) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x3d2c, 0xfffffff5, 0x1, 0xffffffffffffffff, 0x8ad6}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x200, 0xffd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x2, 0x1000, @rand_addr=' \x01\x00'}, 0x1c) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) mremap(&(0x7f0000680000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f00003f3000/0x3000)=nil) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40010, r8, 0xc082a000) preadv(r8, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1m0.581485584s ago: executing program 5 (id=1374): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) write(r1, &(0x7f00000003c0)='file0', 0x5) 1m0.269093347s ago: executing program 5 (id=1375): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x17bb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) 1m0.160384534s ago: executing program 5 (id=1376): r0 = userfaultfd(0x801) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x5c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="da3533804fd0b1aad462518151068d66db84636259acb1e9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "25c50dfcb9439c14"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2c0b3d673c432f9b8b40d9562d861894"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000790000/0x9000)=nil, 0x9000}, 0x2}) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00003ff000/0x2000)=nil, 0x2000}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) 59.604821118s ago: executing program 5 (id=1378): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/pids.max\x00', 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x1, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080), &(0x7f0000000080)=ANY=[@ANYBLOB="ad27d4723e5c5c731343c330f1c9ffc0a3b5df3dc42e007bbb6466d320674211b0b6574f22219fdfb2a9e305ce31a5afd7ef9b25fd03695a98ffc50a6f6f0183dfcca392c085e3378a24a7bbcd26b2d44a45f84157"], 0x2, 0x1) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x3a, &(0x7f0000001480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x7, 0x2c, 0x64, 0x0, 0x0, 0x11, 0x0, @broadcast, @empty}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0xa662, 0x100}}}}}}, 0x0) write$binfmt_format(r0, &(0x7f0000000a00)='1\x00', 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x6f78, &(0x7f00000001c0)={0x0, 0xb463, 0x40, 0x1, 0x8001a6}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 56.892178637s ago: executing program 5 (id=1381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0xe8, 0x398, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@remote, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @mcast2, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xff, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x7000000, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048000}, 0xc890) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_oob_ext_data={{}, {0xd, "f75ba784ea29630c0000003ee62100", "77b806d1c1e667739b9067136bb6e23b", "949ea1282b1764248aa8d89e22eef9b5", "842cc729cb5e9f490be8c39dac68186f"}}}}, 0x47) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000880)="36c177b5ac0f01ca66b91d03000066b8bb9b000066ba000000000f300f20c06635020000000f22c06766c7442400fcffffff6766c7442402e7f387bc6766c744240600000000670f0114243e0f01cb0f229dea00804100f0836000003e0f72d0f8", 0x61}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55.392469339s ago: executing program 5 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00'}) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000300)=0xfffffd7c, 0x4) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r3, &(0x7f00000006c0)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup(0x66a4, &(0x7f0000000380)={0x0, 0x417c, 0x2, 0x1, 0x2b8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c814) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0xfd, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 18.349063477s ago: executing program 3 (id=1438): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, 0x0) exit(0xffff) exit(0x9) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xffffffff, 0x51}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80000, 0x20002100, 0x33, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6a8, 0x1, 0x0, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4, 0x0, 0x2eb, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8000, 0x40002, 0x294}}], 0x1, &(0x7f00000003c0)={0x2e, 0x52, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) 15.235033961s ago: executing program 3 (id=1440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)=r0}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000240021002dbd700000000000000400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@loopback, @loopback, 0xf003, "c7af449dff8273998486ef76b803d160797bef5659aef33d01a9abf999ad764a", 0x200, 0xffff, 0x8, 0x11}, 0x3c) sendmsg$kcm(r0, &(0x7f0000002800)={&(0x7f0000000140)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0x80, &(0x7f0000001640)=[{&(0x7f00000003c0)="091d1b88272272fad8658400a6b838699b689dd46121b714362e2beb7251af6b23dcc2309cce96f4e1872261d22b1fccf29173c5350834d86a21e7b98802f6fd9f0fbac02e652a96b7840d63394448ccc50d7e5eb8ce310f7209ea55fea1125231331ce29faa0042d63ee1b527c3990e5d93b4ce5b63", 0x76}, {&(0x7f0000000440)="8376de4d3110339e11e036c5c61f7e11c51e90d73c19f17b890df40ee12f0d9dbe756fcbf430a02a3d67da28a38653fe12a108617c393757f203095f11285acf5b7d6d28546470417ff74e93a469bc34f95c7865ecfa8fdc010895c3bd624d7c2c1e9012fbc4533d65e7f98ecd3e5259f3357c853037d2815e2d034bee2f5d977e864bbc18894050ac0733a8626668f06d77093906c7c6112872c059bd0eb531cb69f44a0866f0faf0b377139673c079cda5325a78", 0xb5}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="48be77c9fea0291508eba526c42d4bd44de9efc9f7f6", 0x16}, {&(0x7f0000001540)="8a94f4b1905abfa2586a61b6218b10f0cc15f652fb421ae098a531c340967082403d2013df6129eb0cdb65c7dd1d31efe1b7ee755e79de472099442b4461e99a3d294aa7fdf32edf06a59275894316781800510288918e7706f1fe6b441527865d35bb509a1fa44236c1bee5e03a67a9e5ded4fe7400fc7d2b1e2830822add446ed6ff220cd91909a95448767712c5899d009c9abb25e052488f5290e05e912dbc3f7eb7f176b795139c89554997b0ff2b5568f94d0c62e7f323c49851400a3819bf8d8daabcd3289cf72016c0", 0xcd}], 0x5, &(0x7f00000016c0)=[{0x18, 0x29, 0x1ee200, "d0"}, {0x1010, 0x108, 0x6, "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"}, {0x10, 0x108, 0x7fff}, {0xe0, 0x10b, 0x3, "651695cf40c1e0aa6017da91d1b96a45f8ca576d2080e519af5b5497834d324ce47bcb44a043965598f3a296eed9de6f1330f8c567d028576542d7543bfbd2160f0215d014edb32089ba3e2b71c0347bb7ba6999266996bd0f350e1afcf46e31374a6f9ad9996f077a2cbada6c791c520178afe9d4451f955d7615504d1719d11fa8203afe6fb44b9254ebec395ab9a60737763004f2aa730ea1a953ed9fff95ae26fc19cabeee14a6da1ffe350de5cdd60cc89e30c7cbf1a3e38d2196d6d186e0815f72b607d3d46a2b54d9698a28cf"}], 0x1118}, 0xc800) ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000000080)) write$FUSE_STATX(r0, &(0x7f00000028c0)={0x130, 0x0, 0x0, {0x7fff, 0x1, 0x0, '\x00', {0x20, 0x8, 0x1, 0x6, 0x0, 0x0, 0x8000, '\x00', 0x6, 0xffffffffffffff4b, 0x1, 0x3, {0x7, 0x7}, {0xb0, 0x311}, {0x7, 0xb}, {0x25360000000, 0xbb7e}, 0x65d, 0xf, 0x5, 0xd}}}, 0x130) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) 10.617066s ago: executing program 6 (id=1444): pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) (fail_nth: 14) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9.050951709s ago: executing program 4 (id=1445): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x2}}, 0x24, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x48081, 0x120) 8.927019936s ago: executing program 6 (id=1446): kexec_load(0x8, 0x0, 0x0, 0x3e0000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kexec_load(0x0, 0x0, 0x0, 0x30000) 8.797004341s ago: executing program 1 (id=1447): ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x17bb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) 8.104157219s ago: executing program 4 (id=1448): userfaultfd(0x80001) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x449) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7edce6f7a3f6ed82c38a14736ab557b6011da34bffab0482edfd435fa0f3d02a2e10627e2df4c6aec11dab62c274723d0ad4d48177461be"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 8.00577023s ago: executing program 1 (id=1449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='1', 0x1) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x6a3, 0xccd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xe0, 0x6, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0xd, 0x7, 0x1, {0x22, 0xfb6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0xc5, 0x4e}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xa8, 0x8, 0x69, 0xff, 0x80}, 0x9c, &(0x7f0000000140)={0x5, 0xf, 0x9c, 0x2, [@generic={0x8c, 0x10, 0x3, "b31a0639f3b53e20c9d8972ffcec51ce92ddaab0c4b524a59d35047a0ea84c6587ad3a3cd1d7561bc175a3a9507b30c1630ba097ee4c4106b210d28ce7c93ec5ffe1a137560c0cb8a1a24fd67a3c51119a710008e628ff797edc5e562b0d2d0a2a118341f4aff6a44e700ce8897846cdf09eda27b69b67c346a3c65db44d834b9a3d606a4797b35ea9"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x6, 0x8, 0x401, 0xf}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x59, &(0x7f0000000280)=@string={0x59, 0x3, "1a0cde59c408560e8b222af029dd8d90450a37b596df2ff2bb0b9e4ffab62fc38099d5e1047b317d1ec3b2da314925c23777fbabbae12a528b913dc7a8e327b58d902f19937eea8d01b4533f0a23d35b6dc7ee5ced7ce6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x459}}]}) 7.669166504s ago: executing program 4 (id=1450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9c010000100001002cbc700000000008fc000000000000000000000000000001fe8800000000000000000000000000010000ecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x44050) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f53a0400483a00fe8000000000000000000000000000bbff02c66228da5b7dc1cc000000000001020090780000050060f19f0000000000fc010000000000000000000000000000fc0200000000000000000000000000003a0100000000000007080000000000008000000000000000"], 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x2000}, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1b) 6.649079859s ago: executing program 6 (id=1451): socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) eventfd(0xd5) eventfd2(0x7, 0x80001) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="201dc6a319bb4182301cf5b40b68234c001ea685a8011c", @ANYRES64=r0], 0x0) 6.628320397s ago: executing program 3 (id=1452): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7fff, 0x25, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x42, 0xfd}}}}}]}}]}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xb, 0x7ffffffe}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0011280000002804de2a2317a42d999cbe38ab6f7e8aa852ed1fbe19c88a50150000000000a8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.980375678s ago: executing program 6 (id=1453): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)="eebda195cfeb2fb97d7d222dd3446f13f08f5f245b37ede92cc2e5434d33c750b92871c92330419755d17bab06ceb0f91ed87fc44abea822a58c65a4e26cadc763c086fb311b3f3d758d6260188a036a6600ed89ee58874b3d4dc83a70d17003ae3a9fb246bed484ca566be66a92f90a41418418d446839b0d7ad2c3ee35e57c4913b05d3f4f17a2864bfc669eae3c5dc5797552fe952b4283472f839fb54f515e54fa5808fe6f192e541a3f150945fa9c1964a921cd1104a4957521fe180e066ab7ff3e79720562cd7edc8d52eb06dbe6afbfb792496c6dc116b2c70b37818196ae16df34da9bfff8c2a2adaaf6699e80835f612a16219e220dc973505e", 0xfe, r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_settime(0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='mydomain / 64\n', 0xe) sendmsg$kcm(r2, &(0x7f0000000980)={&(0x7f0000000300)=@llc={0x1a, 0x338, 0x1, 0x6, 0x4, 0x1, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)="a43da182b9ab4471cbdfdc85d300e875f4ac95ef318c64abf32bca834a8fe9b618a8b9a71d654c8b00c28556036118674e66848327713e162fd92be3ec158c44d7dd0b2cc0bf385a7b932baa34625c5dd919d83dcc00f0dad219c9a788ea145ccd14bc2d4679778eb3e55ecafcfd341af2055d7c005a7574f72835eff2808ffea3d75f04f24f0230b527b493d976e96eea03ddca596d860232290ef3833c6a7378ba8cfc62d3b8cdd0e7b5cffe3a2448a019346709", 0xb5}, {&(0x7f0000000480)="810deba1abdabcc792b6b9f7a97d07e587a890a8994762eb597f9c7f2d1941654ca0a1b5736b011580855bebcbd256fb5f9884f3351cc476a278dfd5293a6928a067f75842df7540d467a4d20481dbade3a039fde2d34cea07e09f2c4483358c79588d7d3a6d81b8ab142926825128d0d36c2ad461329f3dbf67bf643bfe1ca3f3cd", 0x82}], 0x2, &(0x7f0000000880)=[{0xe8, 0x110, 0x80000000, "f99e846eb98eb92adfa0434e65c4f9fb9b884eee73e3bfc485207aa52630e86404379057d391df2a9b1195fe22c63dd8bafb2728d4a32b066347cd57d07c93a5e11c6b80e2d574cfcef4e9355333516301c633f13b2f70e48f4941bdb6f52ab09a762dac24c6aa667f5fb02db1712bb39f487500481962037451cd5807f422faa43c2f43bd1c299df216ecefbc6306151773dce6ffbf6d00c6118b09e1ebfdfb52b4c0f7f1ee8ac72d125ba58232d6c173529e043bd5fb5758e3ae81076e67d0afdb360c90857a7aed231d78fffb31ca84"}], 0xe8}, 0x804) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x121}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x2, 0x10001, 0x28, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, 0x700, 0x8, 0x2, 0x9}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xa7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10015}, 0x8c0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r11, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r10, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf25020000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468305f746f5f7465616d0000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006e696376663000000000000000000000500001801400020064766d7270310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08e40200020c000076000100", @ANYRES32=r10, @ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x80c4}, 0x44040) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000100)=0x2, 0x4) 5.979418622s ago: executing program 1 (id=1454): r0 = syz_open_dev$admmidi(0x0, 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f00000000c0)={0x0, 0x401}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYBLOB="815ed31d0ba05e71bb39687c0903b130eaecf78ed98d028db0e9bc5017cdcfd38a0f7a791d661d82945ebe12234bda10c5c3a933b378ed42ebf6a56cb78590887f72b53f7aa74f6ae565f60d2e31cc49ba42c8bcd6f4b9993249af3e6a0dde269486ecf0538e8e2a9870f982483c549627170dd9558a35ec7449b54194e5d3e2b3caef983b6d53d6448aea6a44839062e7a6c649a369ad79dc5f0df9ea12cbc48c3f560edcd40c4ca58539c1c9d7cc7cb0c9d1d849068b1f2f3d2ff02783ec5dc9203aec34daeb88900abef22b9d168f19a005400b8d942ad3c68cb9fc615e583312371035687dff720809c516"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x815) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004900)=ANY=[@ANYBLOB="480000000d0a050000000000000000000a0000020900020073797a3131000000001c000380180000800c00018006000100eb010000080003400000000100"/72], 0x48}}, 0x8000) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioprio_set$pid(0x0, 0x0, 0x2000) socketpair$unix(0x1, 0x9156026d10d4726b, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)={0x4, 0x7, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0x28) 3.748577307s ago: executing program 3 (id=1456): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r1, &(0x7f0000000580)=""/174, 0xff56) r2 = dup(r0) mount(0x0, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', &(0x7f0000000380)='openpromfs\x00', 0x220000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x18) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="0cb05622b81d4667bc39d339b4ef6792b7613bb7742931b98be8933e03260ebe86f3627147c12a8077f1a1142ba749876cc37db3e165e04d870d62e1325445ac0934c5899b52bfa30f724ff87e6fdf116affa7904b175382325789bf17b274c8aca5caf634b33040b685ef5736dd1f4891690befbc3f85c01313a4bc0f1c3d", @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r6 = creat(&(0x7f0000001180)='./config\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="88dd030000720100140003006272696467655f736c6176655f30000008001680040001800a000100aaaaaaaaaa1c0000", @ANYRESHEX], 0x48}, 0x1, 0x8100, 0x0, 0x10}, 0x2800804c) r7 = getpid() sched_setscheduler(r7, 0x1, 0x0) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000240)=r7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="f5", 0x1}], 0x1, 0x0, 0x0, 0x44040}}, {{&(0x7f0000001400)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffe44, 0x0, 0x0, 0x0, 0x0, 0x990c061a29fd03a}}], 0x2, 0x40050) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r9 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_SUBDEV_S_SELECTION(r9, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x103, 0x0, {0x1, 0x1, 0x1, 0x1}}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYRES32=r4, @ANYRESDEC, @ANYRESOCT=r3, @ANYRESHEX=r8, @ANYRES8=r5, @ANYRES32=r2, @ANYRES64=r7, @ANYRES64=r9], 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f000000"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b90800000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x6, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2.29139031s ago: executing program 1 (id=1457): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xbda87d9a], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x200, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x700, 0xf4240, 0x0, 0x0, 0x1}]}) 1.82756487s ago: executing program 3 (id=1458): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'pimreg0\x00', {'virt_wifi0\x00'}, 0x2}) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x0, @random="2c68210c1e1d", 'macvlan0\x00'}}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000180)={0x3, 0x307d}) r4 = dup3(r1, r2, 0x80000) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0x3}, 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0/file0\x00'}) sendmsg$kcm(r5, &(0x7f0000000380)={&(0x7f0000000240)=@sco, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="d62a9c3eb65ca0fd130809af80216213ac3390320daeafe4abb6ff1b4268955c85f6cb99faf678646d9fd5c45e6e125071d7d54d2e61d238bee422493d988aa355b2cc6555f9206a67a9de20f494ca75d70da94d2a9fdabc5db2ea773d9533cc00", 0x61}], 0x1}, 0x20000000) vmsplice(r2, &(0x7f0000000780)=[{&(0x7f00000003c0)="5bfe2a4edead188c73aaaf95d9ba978e33e07881dac7cb40af59a0ced56b6e9332f7e078c2dfe9ff312684fda442343f1acff6ca87910eaf9e22b46022fda7e60205d8ea25363db1036d4616d8f344012f17a672ab73c3f97867a808cfaeaede09b6d9decb6bd4a4b8b6ea45fcae9dc84114eb54e3a6f2b89d0d86625637e49f9004a1957f6e77388000b51bdd9fb57f9b3e6ffb39f772601d4826f95c", 0x9d}, {&(0x7f0000000480)="6af80e3fa29ca055e22cc8490e616acb42358e0bdd64c8a82e52da9783800773a693f9ac087fba58fd2c2733285d2d86578e0eb601f3216dc3db0e93fb774959335560571b07a66e6190f61662de0d35ea89cf7db3692130988894f2b00fad50376d88990a4a2fac358cc101896a7caa65f3c2f583aa765881401f128fc54b81233b915141fa4f47e05a5cf76891037cf94c86c4e4ea55db8fec04b9393dab38", 0xa0}, {&(0x7f0000000540)="f315895dd110b3216424c861c1269e263e8fa9b2aff1f12d26cd07d2c4abd1deb3f54ad33a872dd8fa6b00e99e5d2f1fe90b348de1c2d53e992e8cd62f5174d9c6c439394a5599cfd423634275920318f7c3286ef24a7322c048830a69dbcecfc6296ba177236ff8f8b49e57156215494694961f72f04a1a714f8935a7d5ae357ce6e32eb372853ab00f70911d4a1966ee5658c99630d3d96a4cb06d1e2b10c9d8a62b38d2286211eaf5d1a1e697eab100542e10b01ee2b1582a0f129d68f7387e625e1f214cdbf1294e360679ea326400fe78e9057094fbd452fa4251f89454942e428f98a1bfd9aab5e577", 0xec}, {&(0x7f0000000640)="34b1bca9a42e67d5ee266c3f9fadca23ec6081429c3f52cc8138853a59c7fb234263ea877647b35053f6a9ba65bdbf51ed05eba835265aa18707e0649506a52353b87bc08a839327fbad66d9931c953ea8e2c9f533be0846d2e2db62cbf0ff473e6157d3e8d76c09f9f2d2ca4a447b6aee3e2d00d9716090", 0x78}, {&(0x7f00000006c0)="8d853a8181417b39ec641adecb78c7a6627d60cc3cf415b2693ad729db8f1620ed5277bcc1021923d99bcbc1f9e890e7f40f2121ebaee65ccd904996e6eeb7090230085d9a0c03cf188b561b4e5b6e1aff720cdea629549df584f3dce62bc0ba94db54d2f70315e22a074d73267274aa56aaad0ce3de6c7fb8d1e73198c824317f8199e0064b56884fb05273b052d421ff3eab6d47d050b9631705be5eec51057975893699a19fcaa27335c8e7bf3148338b90", 0xb3}], 0x5, 0x2) read$FUSE(r5, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000800)='./file0/../file0\x00', &(0x7f0000000840), 0x884049, &(0x7f00000028c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x100}}, {@cache_fscache}, {@access_any}, {@access_user}, {@dfltgid={'dfltgid', 0x3d, r6}}], [{@appraise}, {@subj_user={'subj_user', 0x3d, ')'}}]}}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) futex$unlock_wake_list64(&(0x7f00000029c0)=0x1, 0x281, 0x3, &(0x7f0000002a00)={0x77359400}, &(0x7f0000002a40)=0x6, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000002a80)=0x0) connect$nfc_llcp(r5, &(0x7f0000002ac0)={0x27, r8, 0x0, 0x1, 0xff, 0xa, "34c4494f01ba0b0315d49e9eacaaaadff182c022d8b5859a48a6c3e5d6951f48247ec91335e870b716601816de816e1703fee9c3bf11b9100d684fac75c399", 0x4}, 0x60) r9 = getpgrp(r7) prlimit64(r9, 0x8, &(0x7f0000002b40)={0xfffffffffffffcc2, 0x1000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r5, &(0x7f0000002b80)={0x2020}, 0x2020) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f00000053c0)={&(0x7f0000004bc0)=0x6, 0x4f76e753, &(0x7f0000004c00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000005380)}) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000005400), 0x400000, 0x0) write(r10, &(0x7f0000005440)="3b3490fa5e83a0d63e6ee50c13790f72e93c206c47b45bc4c04eee8d17a79a22d48a6e7a3ddced728bd1e110153da02826949150cd0c78679c67f972052197c394dc9f74bc3ebf77f45d96e075592e015593e6e7a9c20c1705a6fb47b6adae0a0d163e2611f4b54718cfc47dbf73e51a02bcef1c133171ab3b6de9d58484f92e063637e6832ebb6412fcb858a1050473977e513d08f47b24583c", 0x9a) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000005500)={0x5, 0xc000}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000005540)=0x4) 1.412939173s ago: executing program 1 (id=1459): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x17bb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) 775.653202ms ago: executing program 6 (id=1460): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ptrace(0x10, 0x0) socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x44, 0x4, 0xbe}]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x2342, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 650.98841ms ago: executing program 4 (id=1461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x23, 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004"], 0xbc}}, 0x0) 476.922253ms ago: executing program 1 (id=1462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x74, 0x21, 0xe0, 0x40, 0x16c0, 0x5df, 0xa276, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x5, 0xd0, 0x7f, "", [{{0x9, 0x4, 0x20, 0xc, 0x0, 0x3, 0x0, 0x0, 0x9, [@uac_as]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1744}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x8}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000008, 0x0, 0x2, 0x8, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 267.740877ms ago: executing program 4 (id=1463): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) writev(r1, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x4800) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006800010000000000000000000000000000000000060003000000000008000100000000001c000200010081ffffff"], 0x44}}, 0x0) r3 = socket(0x29, 0x1, 0x3c8d) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x20, 0x40, 0x4, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000280), 0x1ff, 0x2000) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001280)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="92decce8a9cd0cada1a6f27482212963ac3b0600f8600220754d32120926a02467699d90aa7ab23183936116f7f83b166dbb61032a10427156b837aafd907656f016eec57ca9ba90dd09168cf1842c7197d4fef2", 0x54}], 0x2, &(0x7f0000001240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x26}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6c}}], 0x30}, 0x40805) 225.952803ms ago: executing program 3 (id=1464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x800001, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) 0s ago: executing program 6 (id=1465): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) kernel console output (not intermixed with test programs): tclass=netlink_fib_lookup_socket permissive=1 [ 573.615489][ T31] audit: type=1400 audit(1788085610.804:1014): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 573.993193][ T5600] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 574.149065][ T5600] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.159258][ T5600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.159296][ T5600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.159321][ T5600] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.159357][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.214533][ T5600] usb 2-1: config 0 descriptor?? [ 574.661626][ T5600] usbhid 2-1:0.0: can't add hid device: -71 [ 574.661719][ T5600] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 574.696776][ T5600] usb 2-1: USB disconnect, device number 65 [ 577.329597][ T1221] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 577.427882][T11935] Bluetooth: hci3: command 0x0405 tx timeout [ 577.490688][ T1221] usb 2-1: unable to get BOS descriptor or descriptor too short [ 577.490741][ T1221] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 577.508632][ T1221] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 577.531159][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.531194][ T1221] usb 2-1: Product: syz [ 577.531222][ T1221] usb 2-1: Manufacturer: syz [ 577.531241][ T1221] usb 2-1: SerialNumber: syz [ 577.767801][ T1221] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 577.775098][ T1221] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 577.788975][ T1221] usb 2-1: failed to enable PITCH for EP 0x1 [ 577.795629][ T1221] usb 2-1: unit 2 not found! [ 577.800318][ T1221] usb 2-1: unit 0 not found! [ 577.883240][ T1221] usb 2-1: USB disconnect, device number 66 [ 577.933511][T12207] udevd[12207]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.767873][ T5730] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 579.935638][ T5730] usb 2-1: unable to get BOS descriptor or descriptor too short [ 579.935829][ T5730] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 579.938367][ T5730] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 579.943271][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.943291][ T5730] usb 2-1: Product: syz [ 579.943304][ T5730] usb 2-1: Manufacturer: syz [ 579.943316][ T5730] usb 2-1: SerialNumber: syz [ 580.169072][ T5730] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 580.169656][ T5730] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 580.182077][ T5730] usb 2-1: failed to enable PITCH for EP 0x1 [ 580.185968][ T5730] usb 2-1: unit 2 not found! [ 580.185984][ T5730] usb 2-1: unit 0 not found! [ 580.317892][ T5730] usb 2-1: USB disconnect, device number 67 [ 580.391754][T12207] udevd[12207]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.933483][T12359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.960149][T12371] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 580.964662][T12380] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1182'. [ 581.478313][T12411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 581.502225][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 582.404221][ T31] audit: type=1400 audit(1788085619.604:1015): avc: denied { append } for pid=12419 comm="syz.5.1193" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 582.658046][ T31] audit: type=1400 audit(1788085619.854:1016): avc: denied { write } for pid=12425 comm="syz.1.1187" name="usb_gadget" dev="configfs" ino=3399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 582.714041][ T31] audit: type=1400 audit(1788085619.914:1017): avc: denied { write } for pid=12425 comm="syz.1.1187" name="functions" dev="configfs" ino=45278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 582.746741][ T5715] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 582.796121][ T5715] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 582.808010][ T5730] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 582.816349][ T31] audit: type=1400 audit(1788085620.014:1018): avc: denied { bind } for pid=12421 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 582.816388][ T31] audit: type=1400 audit(1788085620.014:1019): avc: denied { name_bind } for pid=12421 comm="syz.2.1195" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 582.816417][ T31] audit: type=1400 audit(1788085620.014:1020): avc: denied { node_bind } for pid=12421 comm="syz.2.1195" saddr=::ffff:100.1.1.1 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 582.831268][ T5835] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 582.997863][ T5730] usb 5-1: Using ep0 maxpacket: 16 [ 583.009598][ T5730] usb 5-1: New USB device found, idVendor=0b57, idProduct=dfc7, bcdDevice=1a.f7 [ 583.021260][ T5730] usb 5-1: config 255 has an invalid interface number: 209 but max is 0 [ 583.029978][ T5730] usb 5-1: config 255 has no interface number 0 [ 583.036748][ T5730] usb 5-1: config 255 interface 209 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 583.048013][ T5730] usb 5-1: config 255 interface 209 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 32 [ 583.058196][ T5730] usb 5-1: config 255 interface 209 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 583.070332][ T5730] usb 5-1: config 255 interface 209 altsetting 2 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 583.070530][ T5730] usb 5-1: config 255 interface 209 altsetting 2 endpoint 0x85 has an invalid bInterval 122, changing to 10 [ 583.070692][ T5730] usb 5-1: config 255 interface 209 altsetting 2 endpoint 0x85 has invalid maxpacket 9497, setting to 1024 [ 583.070853][ T5730] usb 5-1: config 255 interface 209 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 583.071020][ T5730] usb 5-1: config 255 interface 209 has no altsetting 0 [ 583.080398][ T5835] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 583.147930][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.148102][ T5730] usb 5-1: Product: syz [ 583.148260][ T5730] usb 5-1: Manufacturer: syz [ 583.148413][ T5730] usb 5-1: SerialNumber: syz [ 583.180386][T12429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 583.181857][T12429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 583.190194][ T5835] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 583.579304][ T5600] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 583.619974][T12420] ceph: No mds server is up or the cluster is laggy [ 583.628089][T12423] ceph: No mds server is up or the cluster is laggy [ 583.811544][ T5600] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 584.258205][T12429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.298305][T12429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.542998][ T5730] usb 5-1: USB disconnect, device number 39 [ 584.581012][ T5600] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 584.709901][T12464] FAULT_INJECTION: forcing a failure. [ 584.709901][T12464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.710080][T12464] CPU: 0 UID: 0 PID: 12464 Comm: syz.5.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.710108][T12464] Tainted: [L]=SOFTLOCKUP [ 584.710115][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 584.710125][T12464] Call Trace: [ 584.710132][T12464] [ 584.710140][T12464] dump_stack_lvl+0x100/0x190 [ 584.710170][T12464] should_fail_ex.cold+0x5/0xa [ 584.710196][T12464] _copy_from_user+0x2e/0xd0 [ 584.710225][T12464] copy_msghdr_from_user+0x9f/0x4c0 [ 584.710249][T12464] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 584.710278][T12464] ? lock_acquire+0x1d1/0x380 [ 584.710296][T12464] ? get_pid_task+0x2a/0x250 [ 584.710320][T12464] ___sys_sendmsg+0x106/0x1e0 [ 584.710342][T12464] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.710365][T12464] ? get_pid_task+0x106/0x250 [ 584.710396][T12464] ? find_held_lock+0x2b/0x80 [ 584.710434][T12464] __sys_sendmsg+0x160/0x210 [ 584.710463][T12464] ? __pfx___sys_sendmsg+0x10/0x10 [ 584.710504][T12464] do_syscall_64+0x123/0x790 [ 584.710524][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.710539][T12464] RIP: 0033:0x7f24d619e159 [ 584.710552][T12464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.710566][T12464] RSP: 002b:00007f24d711e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.710581][T12464] RAX: ffffffffffffffda RBX: 00007f24d6425fa0 RCX: 00007f24d619e159 [ 584.710591][T12464] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 584.710600][T12464] RBP: 00007f24d711e090 R08: 0000000000000000 R09: 0000000000000000 [ 584.710609][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.710618][T12464] R13: 00007f24d6426038 R14: 00007f24d6425fa0 R15: 00007ffe7588aaf8 [ 584.710638][T12464] [ 584.749645][ T5600] usb 2-1: unable to get BOS descriptor or descriptor too short [ 584.749688][ T5600] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 584.750667][ T5600] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 584.752544][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.752565][ T5600] usb 2-1: Product: syz [ 584.752579][ T5600] usb 2-1: Manufacturer: syz [ 584.752591][ T5600] usb 2-1: SerialNumber: syz [ 584.964037][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 585.028291][ T5600] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 585.028336][ T5600] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 585.041166][ T5600] usb 2-1: failed to enable PITCH for EP 0x1 [ 585.045382][ T5600] usb 2-1: unit 2 not found! [ 585.045402][ T5600] usb 2-1: unit 0 not found! [ 585.117956][ T10] usb 4-1: device descriptor read/64, error -71 [ 585.363645][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 585.363692][ T5600] usb 2-1: USB disconnect, device number 68 [ 585.507937][ T10] usb 4-1: device descriptor read/64, error -71 [ 585.726492][ T31] audit: type=1800 audit(1788085622.914:1021): pid=12476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1202" name="file0" dev="overlay" ino=838 res=0 errno=0 [ 585.996671][ T10] usb usb4-port1: attempt power cycle [ 586.186965][T12207] udevd[12207]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.352479][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 586.379518][ T10] usb 4-1: device descriptor read/8, error -71 [ 587.008708][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 587.040578][ T10] usb 4-1: device descriptor read/8, error -71 [ 587.129798][T12483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 587.151827][ T10] usb usb4-port1: unable to enumerate USB device [ 587.921467][T12487] FAULT_INJECTION: forcing a failure. [ 587.921467][T12487] name failslab, interval 1, probability 0, space 0, times 0 [ 587.942157][T12487] CPU: 1 UID: 0 PID: 12487 Comm: syz.4.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.942189][T12487] Tainted: [L]=SOFTLOCKUP [ 587.942196][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 587.942207][T12487] Call Trace: [ 587.942214][T12487] [ 587.942223][T12487] dump_stack_lvl+0x100/0x190 [ 587.942254][T12487] should_fail_ex.cold+0x5/0xa [ 587.942276][T12487] ? __netlink_lookup+0x652/0x900 [ 587.942302][T12487] should_failslab+0xc2/0x120 [ 587.942325][T12487] kmem_cache_alloc_noprof+0x92/0x6a0 [ 587.942344][T12487] ? skb_clone+0x190/0x400 [ 587.942366][T12487] skb_clone+0x190/0x400 [ 587.942384][T12487] netlink_deliver_tap+0xaed/0xcc0 [ 587.942414][T12487] netlink_unicast+0x62b/0x850 [ 587.942443][T12487] ? __pfx_netlink_unicast+0x10/0x10 [ 587.942476][T12487] netlink_sendmsg+0x8b0/0xda0 [ 587.942505][T12487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.942533][T12487] ? selinux_socket_sendmsg+0x198/0x2f0 [ 587.942563][T12487] sock_write_iter+0x53a/0x5b0 [ 587.942584][T12487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.942609][T12487] ? __pfx_sock_write_iter+0x10/0x10 [ 587.942638][T12487] ? __pfx___file_has_perm+0x10/0x10 [ 587.942662][T12487] ? __lock_acquire+0x4c5/0x1ec0 [ 587.942684][T12487] do_iter_readv_writev+0x6f7/0x930 [ 587.942713][T12487] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 587.942737][T12487] ? selinux_file_permission+0x8f/0x6d0 [ 587.942768][T12487] ? bpf_lsm_file_permission+0x9/0x10 [ 587.942789][T12487] ? security_file_permission+0x76/0x210 [ 587.942809][T12487] ? rw_verify_area+0xce/0x6d0 [ 587.942836][T12487] vfs_writev+0x360/0xdd0 [ 587.942863][T12487] ? __lock_acquire+0x4c5/0x1ec0 [ 587.942887][T12487] ? __pfx_vfs_writev+0x10/0x10 [ 587.942918][T12487] ? lock_acquire+0x1d1/0x380 [ 587.942935][T12487] ? __fget_files+0x34/0x3d0 [ 587.942964][T12487] ? __fget_files+0x21f/0x3d0 [ 587.942990][T12487] ? do_writev+0x28a/0x340 [ 587.943019][T12487] do_writev+0x28a/0x340 [ 587.943045][T12487] ? __pfx_do_writev+0x10/0x10 [ 587.943078][T12487] do_syscall_64+0x123/0x790 [ 587.943102][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.943121][T12487] RIP: 0033:0x7fa59399e159 [ 587.943137][T12487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.943155][T12487] RSP: 002b:00007fa591bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 587.943174][T12487] RAX: ffffffffffffffda RBX: 00007fa593c26090 RCX: 00007fa59399e159 [ 587.943185][T12487] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 587.943195][T12487] RBP: 00007fa591bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 587.943206][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.943216][T12487] R13: 00007fa593c26128 R14: 00007fa593c26090 R15: 00007ffecad07478 [ 587.943242][T12487] [ 590.629430][T11935] Bluetooth: hci3: command 0x0405 tx timeout [ 591.576098][T12508] jffs2: notice: (12508) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 593.257868][ T5730] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 593.426950][ T5730] usb 2-1: unable to get BOS descriptor or descriptor too short [ 593.427132][ T5730] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 593.596909][ T5730] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 593.652174][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.652354][ T5730] usb 2-1: Product: syz [ 593.652521][ T5730] usb 2-1: Manufacturer: syz [ 593.652668][ T5730] usb 2-1: SerialNumber: syz [ 593.730567][T12505] qnx6: unable to read the first superblock [ 593.911894][ T5730] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 593.912058][ T5730] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 593.924555][ T5730] usb 2-1: failed to enable PITCH for EP 0x1 [ 593.941162][ T5730] usb 2-1: unit 2 not found! [ 593.941318][ T5730] usb 2-1: unit 0 not found! [ 594.156876][ T5730] usb 2-1: USB disconnect, device number 69 [ 594.358433][ T8521] udevd[8521]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.415325][T12524] FAULT_INJECTION: forcing a failure. [ 594.415325][T12524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.438694][T12524] CPU: 1 UID: 0 PID: 12524 Comm: syz.5.1211 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.438727][T12524] Tainted: [L]=SOFTLOCKUP [ 594.438734][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 594.438745][T12524] Call Trace: [ 594.438752][T12524] [ 594.438760][T12524] dump_stack_lvl+0x100/0x190 [ 594.438791][T12524] should_fail_ex.cold+0x5/0xa [ 594.438815][T12524] _copy_from_iter+0x43a/0x1690 [ 594.438846][T12524] ? __pfx__copy_from_iter+0x10/0x10 [ 594.438874][T12524] ? __sk_mem_raise_allocated+0x789/0x1570 [ 594.438912][T12524] mptcp_sendmsg+0xf52/0x2210 [ 594.438946][T12524] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 594.438973][T12524] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 594.438995][T12524] inet_sendmsg+0x11c/0x140 [ 594.439018][T12524] sock_write_iter+0x4ea/0x5b0 [ 594.439039][T12524] ? __pfx_inet_sendmsg+0x10/0x10 [ 594.439059][T12524] ? __pfx_sock_write_iter+0x10/0x10 [ 594.439087][T12524] ? __pfx___file_has_perm+0x10/0x10 [ 594.439119][T12524] do_iter_readv_writev+0x6f7/0x930 [ 594.439150][T12524] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 594.439176][T12524] ? selinux_file_permission+0x8f/0x6d0 [ 594.439209][T12524] ? bpf_lsm_file_permission+0x9/0x10 [ 594.439232][T12524] ? security_file_permission+0x76/0x210 [ 594.439252][T12524] ? rw_verify_area+0xce/0x6d0 [ 594.439281][T12524] vfs_writev+0x360/0xdd0 [ 594.439310][T12524] ? __lock_acquire+0x4c5/0x1ec0 [ 594.439333][T12524] ? __pfx_vfs_writev+0x10/0x10 [ 594.439365][T12524] ? lock_acquire+0x1d1/0x380 [ 594.439384][T12524] ? __fget_files+0x34/0x3d0 [ 594.439410][T12524] ? __fget_files+0x21f/0x3d0 [ 594.439438][T12524] ? do_writev+0x28a/0x340 [ 594.439463][T12524] do_writev+0x28a/0x340 [ 594.439491][T12524] ? __pfx_do_writev+0x10/0x10 [ 594.439525][T12524] do_syscall_64+0x123/0x790 [ 594.439548][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.439571][T12524] RIP: 0033:0x7f24d619e159 [ 594.439588][T12524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.439607][T12524] RSP: 002b:00007f24d711e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 594.439626][T12524] RAX: ffffffffffffffda RBX: 00007f24d6425fa0 RCX: 00007f24d619e159 [ 594.439639][T12524] RDX: 0000000000000011 RSI: 0000200000000200 RDI: 0000000000000003 [ 594.439650][T12524] RBP: 00007f24d711e090 R08: 0000000000000000 R09: 0000000000000000 [ 594.439661][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.439672][T12524] R13: 00007f24d6426038 R14: 00007f24d6425fa0 R15: 00007ffe7588aaf8 [ 594.439698][T12524] [ 601.178615][T11935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 601.189729][T11935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.194211][T11935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 601.211755][T11935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 601.223097][T11935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 603.268073][T11935] Bluetooth: hci5: command tx timeout [ 603.654745][T12560] lo speed is unknown, defaulting to 1000 [ 604.088869][T12560] wg0 speed is unknown, defaulting to 1000 [ 604.440709][T12583] 9p: Bad value for 'version' [ 605.350741][T11935] Bluetooth: hci5: command tx timeout [ 605.925577][T12602] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 607.432029][T11935] Bluetooth: hci5: command tx timeout [ 608.806439][T12602] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 609.508022][T11935] Bluetooth: hci5: command tx timeout [ 609.847703][T12612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'. [ 610.015023][T12560] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.028067][T12560] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.036583][T12560] bridge_slave_0: entered allmulticast mode [ 610.053203][T12560] bridge_slave_0: entered promiscuous mode [ 610.157936][T12560] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.158003][T12560] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.158099][T12560] bridge_slave_1: entered allmulticast mode [ 610.158826][T12560] bridge_slave_1: entered promiscuous mode [ 610.404129][T12560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.413744][T12560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.559152][T12560] team0: Port device team_slave_0 added [ 610.565861][T12560] team0: Port device team_slave_1 added [ 610.829497][T12560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.836589][T12560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.861232][T12560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.870504][T12560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.870519][T12560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.870538][T12560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.920206][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 611.004500][ T31] audit: type=1400 audit(1788085648.204:1022): avc: denied { getopt } for pid=12617 comm="syz.1.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 611.084241][T12622] FAULT_INJECTION: forcing a failure. [ 611.084241][T12622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.084294][T12622] CPU: 1 UID: 0 PID: 12622 Comm: syz.1.1235 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.084321][T12622] Tainted: [L]=SOFTLOCKUP [ 611.084328][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 611.084339][T12622] Call Trace: [ 611.084346][T12622] [ 611.084355][T12622] dump_stack_lvl+0x100/0x190 [ 611.084390][T12622] should_fail_ex.cold+0x5/0xa [ 611.084419][T12622] _copy_from_iter+0x1f4/0x1690 [ 611.084451][T12622] ? __asan_memset+0x23/0x50 [ 611.084480][T12622] ? __pfx__copy_from_iter+0x10/0x10 [ 611.084507][T12622] ? __pfx___alloc_skb+0x10/0x10 [ 611.084546][T12622] netlink_sendmsg+0x808/0xda0 [ 611.084579][T12622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.084609][T12622] ? selinux_socket_sendmsg+0x198/0x2f0 [ 611.084641][T12622] ____sys_sendmsg+0xa4d/0xbe0 [ 611.084662][T12622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.084689][T12622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.084715][T12622] ? __lock_acquire+0x4c5/0x1ec0 [ 611.084744][T12622] ___sys_sendmsg+0x190/0x1e0 [ 611.084768][T12622] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.084791][T12622] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 611.084823][T12622] ? find_held_lock+0x2b/0x80 [ 611.084864][T12622] __sys_sendmsg+0x160/0x210 [ 611.084891][T12622] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.084925][T12622] ? trace_hardirqs_off+0x70/0x170 [ 611.084953][T12622] do_syscall_64+0x123/0x790 [ 611.084976][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.084996][T12622] RIP: 0033:0x7f7e2d39e159 [ 611.085013][T12622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.085031][T12622] RSP: 002b:00007f7e2e2cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.085051][T12622] RAX: ffffffffffffffda RBX: 00007f7e2d626180 RCX: 00007f7e2d39e159 [ 611.085064][T12622] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 000000000000000b [ 611.085076][T12622] RBP: 00007f7e2e2cc090 R08: 0000000000000000 R09: 0000000000000000 [ 611.085089][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.085100][T12622] R13: 00007f7e2d626218 R14: 00007f7e2d626180 R15: 00007fffd7cadee8 [ 611.085126][T12622] [ 611.328096][T12619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1236'. [ 612.641522][T12560] hsr_slave_0: entered promiscuous mode [ 612.657439][T12560] hsr_slave_1: entered promiscuous mode [ 612.666028][T12560] debugfs: 'hsr0' already exists in 'hsr' [ 612.674088][T12560] Cannot create hsr debugfs directory [ 612.681051][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 612.863452][T12632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1232'. [ 614.245194][T12640] netlink: 'syz.4.1240': attribute type 4 has an invalid length. [ 617.050106][T12560] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 617.079693][T12560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 617.080390][T12560] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 617.131345][T12560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.152982][T12560] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 617.182674][T12560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 617.192094][T12560] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 617.251851][T12560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.284833][T12657] macvlan0: entered promiscuous mode [ 617.598992][T12560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.644802][T12560] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.671486][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.671590][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.712564][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.712659][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.829863][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.264463][T12711] netlink: 'syz.3.1251': attribute type 4 has an invalid length. [ 622.497587][ T31] audit: type=1400 audit(1788085659.694:1023): avc: denied { setattr } for pid=12719 comm="syz.1.1254" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 622.756726][T12725] input: syz1 as /devices/virtual/input/input32 [ 622.818694][T12560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.885925][ T170] Bluetooth: (null): Invalid header checksum [ 622.978867][ T170] Bluetooth: (null): Invalid header checksum [ 623.125866][ T55] Bluetooth: (null): Invalid header checksum [ 623.288982][T12734] netlink: 'syz.4.1259': attribute type 4 has an invalid length. [ 623.375124][ T13] Bluetooth: (null): Invalid header checksum [ 623.423309][ T13] Bluetooth: (null): Invalid header checksum [ 623.524619][ T13] Bluetooth: (null): Invalid header checksum [ 623.581800][ T55] Bluetooth: (null): Invalid header checksum [ 623.614566][T12725] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.617326][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.679703][ T170] Bluetooth: (null): Invalid header checksum [ 623.788947][ T170] Bluetooth: (null): Invalid header checksum [ 623.877205][T12725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.891691][T12725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.907733][T10510] Bluetooth: (null): Invalid header checksum [ 624.018703][T10510] Bluetooth: (null): Invalid header checksum [ 624.118177][ T170] Bluetooth: (null): Invalid header checksum [ 624.235512][T10511] Bluetooth: (null): Invalid header checksum [ 624.340805][T10511] Bluetooth: (null): Invalid header checksum [ 624.458227][T10512] Bluetooth: (null): Invalid header checksum [ 624.572575][ T1153] Bluetooth: (null): Invalid header checksum [ 624.680247][ T1153] Bluetooth: (null): Invalid header checksum [ 624.742431][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.742492][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.742527][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.742562][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.793950][ T13] Bluetooth: (null): Invalid header checksum [ 624.818620][ T5835] wg0 speed is unknown, defaulting to 1000 [ 624.824996][ T5835] syz2: Port: 1 Link DOWN [ 624.837246][ T5835] wg0 speed is unknown, defaulting to 1000 [ 625.408314][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 625.561141][T12560] veth0_vlan: entered promiscuous mode [ 625.570257][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 625.574428][ T10] usb 5-1: config 0 has an invalid interface number: 97 but max is 0 [ 625.574451][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.574467][ T10] usb 5-1: config 0 has no interface number 0 [ 625.574488][ T10] usb 5-1: too many endpoints for config 0 interface 97 altsetting 116: 101, using maximum allowed: 30 [ 625.574519][ T10] usb 5-1: config 0 interface 97 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 625.574542][ T10] usb 5-1: config 0 interface 97 has no altsetting 0 [ 625.574566][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.598978][ T10] usb 5-1: config 0 descriptor?? [ 625.634511][T12560] veth1_vlan: entered promiscuous mode [ 625.777748][ T31] audit: type=1400 audit(1788085662.974:1024): avc: denied { audit_read } for pid=12747 comm="syz.1.1261" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 625.796863][T12560] veth0_macvtap: entered promiscuous mode [ 625.857411][T12560] veth1_macvtap: entered promiscuous mode [ 625.881264][ T31] audit: type=1400 audit(1788085663.074:1025): avc: denied { create } for pid=12740 comm="syz.4.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 625.881593][ T31] audit: type=1400 audit(1788085663.074:1026): avc: denied { write } for pid=12740 comm="syz.4.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 626.023815][T12560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.130071][T12750] hpfs: Bad magic ... probably not HPFS [ 626.483274][ T5723] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 626.520594][T12560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.589739][T10510] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.600124][T10510] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.609272][T10510] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.622441][ T170] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.938287][ T5723] usb 2-1: Invalid ep0 maxpacket: 64 [ 627.107886][ T5723] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 627.170736][T12752] FAULT_INJECTION: forcing a failure. [ 627.170736][T12752] name failslab, interval 1, probability 0, space 0, times 0 [ 627.170911][T12752] CPU: 0 UID: 0 PID: 12752 Comm: syz.3.1262 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.170935][T12752] Tainted: [L]=SOFTLOCKUP [ 627.170942][T12752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 627.170952][T12752] Call Trace: [ 627.170958][T12752] [ 627.170965][T12752] dump_stack_lvl+0x100/0x190 [ 627.170994][T12752] should_fail_ex.cold+0x5/0xa [ 627.171018][T12752] should_failslab+0xc2/0x120 [ 627.171038][T12752] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 627.171057][T12752] ? __alloc_skb+0x140/0x710 [ 627.171085][T12752] __alloc_skb+0x140/0x710 [ 627.171107][T12752] ? __alloc_skb+0x5b7/0x710 [ 627.171129][T12752] ? __pfx___alloc_skb+0x10/0x10 [ 627.171159][T12752] rtmsg_fib+0x13e/0x500 [ 627.171181][T12752] ? __pfx_rtmsg_fib+0x10/0x10 [ 627.171204][T12752] ? lockdep_rtnl_is_held+0x26/0x40 [ 627.171226][T12752] ? fib_find_node+0x209/0x280 [ 627.171249][T12752] fib_table_delete+0x600/0x8e0 [ 627.171280][T12752] ? __pfx_fib_table_delete+0x10/0x10 [ 627.171302][T12752] ? find_held_lock+0x2b/0x80 [ 627.171324][T12752] ? fib_magic+0x1a7/0x5c0 [ 627.171339][T12752] ? fib_new_table+0x109/0x5d0 [ 627.171359][T12752] fib_magic+0x362/0x5c0 [ 627.171376][T12752] ? __pfx_fib_magic+0x10/0x10 [ 627.171401][T12752] ? fib_del_ifaddr+0x884/0x14d0 [ 627.171418][T12752] ? fib_del_ifaddr+0x884/0x14d0 [ 627.171440][T12752] fib_del_ifaddr+0xcdf/0x14d0 [ 627.171459][T12752] ? inetaddr_event+0xf3/0x150 [ 627.171482][T12752] ? __pfx_inetaddr_event+0x10/0x10 [ 627.171507][T12752] fib_inetaddr_event+0xb9/0x270 [ 627.171527][T12752] notifier_call_chain+0x99/0x3f0 [ 627.171554][T12752] blocking_notifier_call_chain+0x69/0xa0 [ 627.171585][T12752] __inet_del_ifa+0x3df/0xf40 [ 627.171609][T12752] ? full_name_hash+0xbc/0x100 [ 627.171636][T12752] devinet_ioctl+0xa02/0x1f10 [ 627.171657][T12752] ? __pfx_devinet_ioctl+0x10/0x10 [ 627.171674][T12752] ? _copy_from_user+0x59/0xd0 [ 627.171702][T12752] inet_ioctl+0x3aa/0x3f0 [ 627.171720][T12752] ? __pfx_inet_ioctl+0x10/0x10 [ 627.171750][T12752] ? tomoyo_path_number_perm+0x188/0x580 [ 627.171780][T12752] sock_do_ioctl+0x118/0x280 [ 627.171800][T12752] ? __pfx_sock_do_ioctl+0x10/0x10 [ 627.171818][T12752] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 627.171840][T12752] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 627.171863][T12752] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 627.171891][T12752] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 627.171920][T12752] sock_ioctl+0x599/0x6b0 [ 627.171941][T12752] ? __pfx_sock_ioctl+0x10/0x10 [ 627.171967][T12752] ? selinux_file_ioctl+0x13b/0x290 [ 627.171990][T12752] ? selinux_file_ioctl+0xb6/0x290 [ 627.172015][T12752] ? __pfx_sock_ioctl+0x10/0x10 [ 627.172036][T12752] __x64_sys_ioctl+0x18e/0x210 [ 627.172063][T12752] do_syscall_64+0x123/0x790 [ 627.172083][T12752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.172101][T12752] RIP: 0033:0x7fe44e59e159 [ 627.172116][T12752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.172131][T12752] RSP: 002b:00007fe44f4c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.172148][T12752] RAX: ffffffffffffffda RBX: 00007fe44e825fa0 RCX: 00007fe44e59e159 [ 627.172159][T12752] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 627.172169][T12752] RBP: 00007fe44f4c0090 R08: 0000000000000000 R09: 0000000000000000 [ 627.172179][T12752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.172189][T12752] R13: 00007fe44e826038 R14: 00007fe44e825fa0 R15: 00007ffe884395e8 [ 627.172211][T12752] [ 627.225695][T10512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.225714][T10512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.273542][ T5723] usb 2-1: Invalid ep0 maxpacket: 64 [ 627.277200][ T5723] usb usb2-port1: attempt power cycle [ 627.976682][ T31] audit: type=1400 audit(1788085665.164:1027): avc: denied { write } for pid=12759 comm="syz.3.1264" name="functions" dev="configfs" ino=12161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 628.247872][ T5723] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 628.268855][ T5723] usb 2-1: Invalid ep0 maxpacket: 64 [ 628.276019][ T10] usb 5-1: USB disconnect, device number 40 [ 628.555990][ T5723] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 628.917918][ T5723] usb 2-1: device descriptor read/8, error -71 [ 628.981259][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.981292][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.039711][ T5723] usb usb2-port1: unable to enumerate USB device [ 631.883470][ T31] audit: type=1400 audit(1788085669.084:1028): avc: denied { setopt } for pid=12791 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 633.454463][ T31] audit: type=1326 audit(1788085670.604:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d39e159 code=0x7ffc0000 [ 633.482383][ T31] audit: type=1326 audit(1788085670.604:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d39e159 code=0x7ffc0000 [ 633.515450][ T31] audit: type=1326 audit(1788085670.604:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d39e159 code=0x7ffc0000 [ 633.515600][ T31] audit: type=1326 audit(1788085670.604:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d39e159 code=0x7ffc0000 [ 633.515736][ T31] audit: type=1326 audit(1788085670.604:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f7e2d39e159 code=0x7ffc0000 [ 633.515867][ T31] audit: type=1326 audit(1788085670.604:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d39e159 code=0x7ffc0000 [ 633.516012][ T31] audit: type=1326 audit(1788085670.614:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d39e159 code=0x7ffc0000 [ 633.516157][ T31] audit: type=1326 audit(1788085670.614:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d39e159 code=0x7ffc0000 [ 633.517046][ T31] audit: type=1326 audit(1788085670.614:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d39e159 code=0x7ffc0000 [ 633.517178][ T31] audit: type=1326 audit(1788085670.614:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f7e2d39e159 code=0x7ffc0000 [ 634.780530][T12815] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 634.848139][ T25] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 634.941820][T12816] syzkaller0: entered promiscuous mode [ 634.942104][T12816] syzkaller0: entered allmulticast mode [ 635.009475][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 635.009534][ T25] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 635.032764][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.032801][ T25] usb 4-1: Product: syz [ 635.032818][ T25] usb 4-1: Manufacturer: syz [ 635.032835][ T25] usb 4-1: SerialNumber: syz [ 635.107155][T12816] tipc: Enabled bearer , priority 0 [ 635.127715][T12816] tipc: Resetting bearer [ 635.178575][T12819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1269'. [ 635.368508][T12810] tipc: Resetting bearer [ 635.381848][ T5723] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 635.477502][ T25] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 635.487329][ T25] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 635.588947][T12810] tipc: Disabling bearer [ 635.629463][ T5723] usb 7-1: Using ep0 maxpacket: 8 [ 635.637936][ T5723] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 635.640024][ T5723] usb 7-1: config 0 has no interfaces? [ 635.648322][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.648350][ T5723] usb 7-1: Product: syz [ 635.648364][ T5723] usb 7-1: Manufacturer: syz [ 635.648378][ T5723] usb 7-1: SerialNumber: syz [ 635.676141][ T5723] usb 7-1: config 0 descriptor?? [ 635.705626][ T25] usb 4-1: USB disconnect, device number 51 [ 635.837613][T12814] 9pnet_fd: p9_fd_create_tcp (12814): problem connecting socket to 127.0.0.1 [ 635.920037][ T8540] udevd[8540]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.970204][ T5723] usb 7-1: USB disconnect, device number 2 [ 636.204422][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 636.243434][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 636.411355][T12833] veth0_macvtap: left promiscuous mode [ 637.597908][ T5881] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 637.727934][ T5881] usb 4-1: device descriptor read/64, error -71 [ 637.969239][ T5881] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 638.101314][ T5881] usb 4-1: device descriptor read/64, error -71 [ 638.209482][ T5881] usb usb4-port1: attempt power cycle [ 638.436988][ T5262] veth0_macvtap: entered promiscuous mode [ 638.549438][ T5881] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 638.568550][ T5881] usb 4-1: device descriptor read/8, error -71 [ 638.764603][T12870] netlink: 'syz.1.1289': attribute type 4 has an invalid length. [ 639.297997][ T5881] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 639.318576][ T5881] usb 4-1: device descriptor read/8, error -71 [ 639.429114][ T5881] usb usb4-port1: unable to enumerate USB device [ 640.867558][T12893] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 640.926646][ T31] kauditd_printk_skb: 343 callbacks suppressed [ 640.926678][ T31] audit: type=1400 audit(1788085678.064:1382): avc: denied { append } for pid=12884 comm="syz.3.1295" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 643.217930][ T31] audit: type=1400 audit(1788085680.414:1383): avc: denied { write } for pid=12879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.327862][ T5835] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 643.457978][ T31] audit: type=1400 audit(1788085680.654:1384): avc: denied { write } for pid=12915 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.507981][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 643.510065][ T5835] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 643.511290][ T5835] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 643.511311][ T5835] usb 4-1: config 0 has no interface number 0 [ 643.511340][ T5835] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 643.511361][ T5835] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 643.516591][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.516612][ T5835] usb 4-1: Product: syz [ 643.516624][ T5835] usb 4-1: Manufacturer: syz [ 643.516638][ T5835] usb 4-1: SerialNumber: syz [ 643.527087][ T5835] usb 4-1: config 0 descriptor?? [ 643.528183][T12909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 643.528275][T12909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 643.766711][T12909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 643.766840][T12909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 644.266970][T12920] FAULT_INJECTION: forcing a failure. [ 644.266970][T12920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.267157][T12920] CPU: 0 UID: 0 PID: 12920 Comm: syz.4.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.267183][T12920] Tainted: [L]=SOFTLOCKUP [ 644.267190][T12920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 644.267202][T12920] Call Trace: [ 644.267208][T12920] [ 644.267216][T12920] dump_stack_lvl+0x100/0x190 [ 644.267247][T12920] should_fail_ex.cold+0x5/0xa [ 644.267270][T12920] _copy_to_user+0x32/0xd0 [ 644.267298][T12920] simple_read_from_buffer+0xcb/0x170 [ 644.267322][T12920] proc_fail_nth_read+0x1af/0x230 [ 644.267345][T12920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.267367][T12920] ? rw_verify_area+0xce/0x6d0 [ 644.267391][T12920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.267410][T12920] vfs_read+0x1e4/0xb40 [ 644.267437][T12920] ? lock_acquire+0x1d1/0x380 [ 644.267455][T12920] ? __fget_files+0x34/0x3d0 [ 644.267474][T12920] ? __pfx_vfs_read+0x10/0x10 [ 644.267498][T12920] ? find_held_lock+0x2b/0x80 [ 644.267524][T12920] ? __fget_files+0x215/0x3d0 [ 644.267549][T12920] ? __fget_files+0x21f/0x3d0 [ 644.267576][T12920] ksys_read+0x12a/0x250 [ 644.267604][T12920] ? __pfx_ksys_read+0x10/0x10 [ 644.267639][T12920] do_syscall_64+0x123/0x790 [ 644.267664][T12920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.267685][T12920] RIP: 0033:0x7fa59395e98e [ 644.267701][T12920] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 644.267719][T12920] RSP: 002b:00007fa591bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 644.267738][T12920] RAX: ffffffffffffffda RBX: 00007fa591bf66c0 RCX: 00007fa59395e98e [ 644.267754][T12920] RDX: 000000000000000f RSI: 00007fa591bf60a0 RDI: 0000000000000004 [ 644.267765][T12920] RBP: 00007fa591bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 644.267775][T12920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.267785][T12920] R13: 00007fa593c26038 R14: 00007fa593c25fa0 R15: 00007ffecad07478 [ 644.267810][T12920] [ 644.395437][T12909] overlayfs: failed to resolve './file1/file0': -2 [ 644.421233][ T5835] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 644.421464][ T5835] asix 4-1:0.34: probe with driver asix failed with error -61 [ 644.597503][T12927] tmpfs: Unknown parameter 'grpquota' [ 644.624710][T12922] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 645.018836][T12935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1305'. [ 645.018897][T12935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1305'. [ 646.789230][ T5835] usb 4-1: USB disconnect, device number 56 [ 648.337568][T12956] netlink: 'syz.3.1307': attribute type 4 has an invalid length. [ 649.108902][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'. [ 649.108969][T12963] FAULT_INJECTION: forcing a failure. [ 649.108969][T12963] name failslab, interval 1, probability 0, space 0, times 0 [ 649.109006][T12963] CPU: 1 UID: 0 PID: 12963 Comm: syz.4.1311 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.109032][T12963] Tainted: [L]=SOFTLOCKUP [ 649.109039][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 649.109051][T12963] Call Trace: [ 649.109058][T12963] [ 649.109066][T12963] dump_stack_lvl+0x100/0x190 [ 649.109099][T12963] should_fail_ex.cold+0x5/0xa [ 649.109127][T12963] should_failslab+0xc2/0x120 [ 649.109150][T12963] kmem_cache_alloc_noprof+0x92/0x6a0 [ 649.109172][T12963] ? skb_clone+0x190/0x400 [ 649.109195][T12963] skb_clone+0x190/0x400 [ 649.109214][T12963] netlink_deliver_tap+0xaed/0xcc0 [ 649.109246][T12963] netlink_unicast+0x6a5/0x850 [ 649.109277][T12963] ? __pfx_netlink_unicast+0x10/0x10 [ 649.109311][T12963] netlink_ack+0x655/0xb80 [ 649.109346][T12963] netlink_rcv_skb+0x333/0x420 [ 649.109371][T12963] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.109394][T12963] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.109430][T12963] ? netlink_deliver_tap+0x1ae/0xcc0 [ 649.109461][T12963] netlink_unicast+0x585/0x850 [ 649.109491][T12963] ? __pfx_netlink_unicast+0x10/0x10 [ 649.109525][T12963] netlink_sendmsg+0x8b0/0xda0 [ 649.109554][T12963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.109581][T12963] ? selinux_socket_sendmsg+0x198/0x2f0 [ 649.109613][T12963] ____sys_sendmsg+0xa4d/0xbe0 [ 649.109634][T12963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.109662][T12963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.109690][T12963] ? lock_acquire+0x1d1/0x380 [ 649.109710][T12963] ? get_pid_task+0x2a/0x250 [ 649.109737][T12963] ___sys_sendmsg+0x190/0x1e0 [ 649.109763][T12963] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.109786][T12963] ? get_pid_task+0x106/0x250 [ 649.109819][T12963] ? find_held_lock+0x2b/0x80 [ 649.109868][T12963] __sys_sendmsg+0x160/0x210 [ 649.109898][T12963] ? __pfx___sys_sendmsg+0x10/0x10 [ 649.109942][T12963] do_syscall_64+0x123/0x790 [ 649.109966][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.109985][T12963] RIP: 0033:0x7fa59399e159 [ 649.110001][T12963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.110019][T12963] RSP: 002b:00007fa591bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.110038][T12963] RAX: ffffffffffffffda RBX: 00007fa593c25fa0 RCX: 00007fa59399e159 [ 649.110051][T12963] RDX: 0000000000000000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 649.110063][T12963] RBP: 00007fa591bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 649.110073][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.110085][T12963] R13: 00007fa593c26038 R14: 00007fa593c25fa0 R15: 00007ffecad07478 [ 649.110107][T12963] [ 649.598189][ T31] audit: type=1400 audit(1788085686.744:1385): avc: denied { module_load } for pid=12964 comm="syz.5.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 650.225918][T12975] tmpfs: Bad value for 'mpol' [ 650.921500][ T31] audit: type=1400 audit(1788085688.124:1386): avc: denied { bind } for pid=12979 comm="syz.5.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 651.235728][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.236073][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.960198][ T5881] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 652.158413][T12998] netlink: 'syz.5.1319': attribute type 4 has an invalid length. [ 652.518638][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 652.521180][ T5881] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 652.524936][ T5881] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 652.525011][ T5881] usb 4-1: config 1 has no interface number 0 [ 652.525161][ T5881] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 652.525244][ T5881] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 652.525332][ T5881] usb 4-1: config 1 interface 105 has no altsetting 0 [ 652.534953][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 652.534978][ T5881] usb 4-1: Product: syz [ 652.534991][ T5881] usb 4-1: Manufacturer: syz [ 652.535004][ T5881] usb 4-1: SerialNumber: syz [ 652.731902][T12989] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 652.732433][T12989] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 653.242482][T13005] Invalid source name [ 653.316704][T12988] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 653.324539][T12988] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 653.498261][ T5835] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 653.536259][T12989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.536778][T12989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.551727][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.552029][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.658055][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 653.660704][ T5835] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 653.678026][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.678073][ T5835] usb 6-1: Product: syz [ 653.678106][ T5835] usb 6-1: Manufacturer: syz [ 653.678118][ T5835] usb 6-1: SerialNumber: syz [ 653.716645][T13014] syzkaller1: entered promiscuous mode [ 653.716721][T13014] syzkaller1: entered allmulticast mode [ 653.786389][ T5881] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 653.797729][ T5881] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 653.810457][ T5881] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 653.851142][ T5881] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 0e:10:7d:77:be:47 [ 653.886079][ T5881] usb 4-1: USB disconnect, device number 57 [ 653.902006][ T5881] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 653.955168][ T5835] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 653.955505][ T5835] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 654.029042][ T5835] usb 6-1: USB disconnect, device number 30 [ 654.058423][ T5881] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 654.058581][ T5881] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 654.058739][ T5881] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 654.842962][ T31] audit: type=1400 audit(1788085692.044:1387): avc: denied { ioctl } for pid=13027 comm="syz.6.1328" path="socket:[48543]" dev="sockfs" ino=48543 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 654.869574][ T31] audit: type=1400 audit(1788085692.074:1388): avc: denied { connect } for pid=13027 comm="syz.6.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 654.869831][ T31] audit: type=1400 audit(1788085692.074:1389): avc: denied { ioctl } for pid=13027 comm="syz.6.1328" path="socket:[48546]" dev="sockfs" ino=48546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 655.001492][T13032] netlink: 'syz.5.1327': attribute type 10 has an invalid length. [ 655.070280][T13032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.079443][T13032] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 655.079618][T13032] netlink: 'syz.5.1327': attribute type 10 has an invalid length. [ 655.113508][T13032] netlink: 'syz.5.1327': attribute type 10 has an invalid length. [ 655.113703][T13032] netlink: 'syz.5.1327': attribute type 10 has an invalid length. [ 655.113795][T13032] netlink: 'syz.5.1327': attribute type 10 has an invalid length. [ 655.113886][T13032] netlink: 'syz.5.1327': attribute type 10 has an invalid length. [ 655.113973][T13032] netlink: 'syz.5.1327': attribute type 10 has an invalid length. [ 655.114061][T13032] netlink: 'syz.5.1327': attribute type 10 has an invalid length. [ 655.114151][T13032] netlink: 'syz.5.1327': attribute type 10 has an invalid length. [ 655.114241][T13032] netlink: 'syz.5.1327': attribute type 10 has an invalid length. [ 655.143792][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 656.710925][ T31] audit: type=1400 audit(1788085693.914:1390): avc: denied { write } for pid=13015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.992756][ T31] audit: type=1400 audit(1788085694.194:1391): avc: denied { write } for pid=13050 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.825085][ T31] audit: type=1400 audit(1788085696.024:1392): avc: denied { setopt } for pid=13057 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 659.961349][T13095] FAULT_INJECTION: forcing a failure. [ 659.961349][T13095] name failslab, interval 1, probability 0, space 0, times 0 [ 659.962321][T13095] CPU: 0 UID: 0 PID: 13095 Comm: syz.4.1341 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.962352][T13095] Tainted: [L]=SOFTLOCKUP [ 659.962360][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 659.962371][T13095] Call Trace: [ 659.962379][T13095] [ 659.962387][T13095] dump_stack_lvl+0x100/0x190 [ 659.962420][T13095] should_fail_ex.cold+0x5/0xa [ 659.962446][T13095] should_failslab+0xc2/0x120 [ 659.962469][T13095] __kmalloc_cache_noprof+0x91/0x6d0 [ 659.962498][T13095] ? snd_rawmidi_open+0x39e/0xb90 [ 659.962528][T13095] snd_rawmidi_open+0x39e/0xb90 [ 659.962558][T13095] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 659.962593][T13095] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 659.962618][T13095] snd_open+0x201/0x450 [ 659.962639][T13095] ? __pfx_snd_open+0x10/0x10 [ 659.962659][T13095] chrdev_open+0x234/0x6a0 [ 659.962682][T13095] ? __pfx_chrdev_open+0x10/0x10 [ 659.962701][T13095] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 659.962731][T13095] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 659.962763][T13095] do_dentry_open+0x6ab/0x14d0 [ 659.962781][T13095] ? __pfx_chrdev_open+0x10/0x10 [ 659.962807][T13095] vfs_open+0x82/0x3f0 [ 659.962834][T13095] path_openat+0x19fa/0x2440 [ 659.962860][T13095] ? __pfx_path_openat+0x10/0x10 [ 659.962888][T13095] do_file_open+0x20e/0x430 [ 659.962912][T13095] ? __pfx_do_file_open+0x10/0x10 [ 659.962934][T13095] ? __pfx___schedule+0x10/0x10 [ 659.962969][T13095] ? _raw_spin_unlock+0x3e/0x50 [ 659.962997][T13095] ? alloc_fd+0x471/0x7a0 [ 659.963027][T13095] do_sys_openat2+0x10f/0x1e0 [ 659.963051][T13095] ? __pfx_do_sys_openat2+0x10/0x10 [ 659.963077][T13095] ? __rcu_read_unlock+0x27f/0x5e0 [ 659.963105][T13095] __x64_sys_openat+0x12d/0x210 [ 659.963130][T13095] ? __pfx___x64_sys_openat+0x10/0x10 [ 659.963164][T13095] do_syscall_64+0x123/0x790 [ 659.963188][T13095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.963207][T13095] RIP: 0033:0x7fa59395e98e [ 659.963223][T13095] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 659.963242][T13095] RSP: 002b:00007fa591bb3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 659.963261][T13095] RAX: ffffffffffffffda RBX: 00007fa591bb46c0 RCX: 00007fa59395e98e [ 659.963274][T13095] RDX: 0000000000143102 RSI: 00007fa591bb3c00 RDI: ffffffffffffff9c [ 659.963287][T13095] RBP: 00007fa591bb3c00 R08: 0000000000000000 R09: 0000000000000000 [ 659.963298][T13095] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 659.963310][T13095] R13: 00007fa593c26218 R14: 00007fa593c26180 R15: 00007ffecad07478 [ 659.963337][T13095] [ 660.163876][ T5881] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 660.384410][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 660.393383][ T5881] usb 6-1: not running at top speed; connect to a high speed hub [ 660.401324][ T5881] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 660.414323][ T5881] usb 6-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config [ 660.414501][ T5881] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 660.414699][ T5881] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.457594][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.466817][ T5881] usb 6-1: Product: syz [ 660.471224][ T5881] usb 6-1: Manufacturer: syz [ 660.475983][ T5881] usb 6-1: SerialNumber: syz [ 660.913080][ T5881] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 661.065779][ T5881] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 661.092421][ T5881] usb 6-1: USB disconnect, device number 31 [ 661.176013][ T31] audit: type=1400 audit(1788085698.374:1393): avc: denied { write } for pid=13076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.187215][ T8540] udevd[8540]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.241143][ T31] audit: type=1800 audit(1788085698.444:1394): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1340" name="bus" dev="tmpfs" ino=651 res=0 errno=0 [ 661.985450][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 662.065030][ T31] audit: type=1400 audit(1788085699.264:1395): avc: denied { write } for pid=13117 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.408504][T10275] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 662.482633][T13124] FAULT_INJECTION: forcing a failure. [ 662.482633][T13124] name failslab, interval 1, probability 0, space 0, times 0 [ 662.482683][T13124] CPU: 1 UID: 0 PID: 13124 Comm: syz.6.1347 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.482711][T13124] Tainted: [L]=SOFTLOCKUP [ 662.482718][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 662.482729][T13124] Call Trace: [ 662.482736][T13124] [ 662.482744][T13124] dump_stack_lvl+0x100/0x190 [ 662.482775][T13124] should_fail_ex.cold+0x5/0xa [ 662.482800][T13124] should_failslab+0xc2/0x120 [ 662.482823][T13124] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 662.482846][T13124] ? v9fs_init_fs_context+0x17f/0x5c0 [ 662.482876][T13124] kstrdup+0x51/0xe0 [ 662.482903][T13124] v9fs_init_fs_context+0x17f/0x5c0 [ 662.482927][T13124] alloc_fs_context+0x60c/0xf40 [ 662.482957][T13124] path_mount+0xdbd/0x24c0 [ 662.482985][T13124] ? __pfx_path_mount+0x10/0x10 [ 662.483008][T13124] ? lockdep_hardirqs_on+0x7d/0x110 [ 662.483031][T13124] ? putname+0xb1/0x110 [ 662.483052][T13124] ? kmem_cache_free+0x127/0x6c0 [ 662.483085][T13124] ? __x64_sys_mount+0x293/0x310 [ 662.483108][T13124] __x64_sys_mount+0x293/0x310 [ 662.483133][T13124] ? __pfx___x64_sys_mount+0x10/0x10 [ 662.483164][T13124] do_syscall_64+0x123/0x790 [ 662.483187][T13124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.483206][T13124] RIP: 0033:0x7fd55f59e159 [ 662.483223][T13124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.483240][T13124] RSP: 002b:00007fd560540028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 662.483258][T13124] RAX: ffffffffffffffda RBX: 00007fd55f825fa0 RCX: 00007fd55f59e159 [ 662.483270][T13124] RDX: 0000200000000480 RSI: 0000200000000040 RDI: 0000000000000000 [ 662.483282][T13124] RBP: 00007fd560540090 R08: 0000200000000180 R09: 0000000000000000 [ 662.483299][T13124] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000002 [ 662.483311][T13124] R13: 00007fd55f826038 R14: 00007fd55f825fa0 R15: 00007ffc1c93c668 [ 662.483335][T13124] [ 662.578965][T10275] usb 2-1: Using ep0 maxpacket: 8 [ 662.583122][T10275] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 662.585322][T10275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 662.585359][T10275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.594126][T10275] usb 2-1: config 0 descriptor?? [ 662.717527][ T31] audit: type=1400 audit(1788085699.914:1396): avc: denied { setopt } for pid=13128 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 662.845446][ T31] audit: type=1400 audit(1788085700.044:1397): avc: denied { read write } for pid=13128 comm="syz.3.1350" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 662.845524][ T31] audit: type=1400 audit(1788085700.044:1398): avc: denied { open } for pid=13128 comm="syz.3.1350" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 662.869195][T10275] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 663.002568][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 663.056292][ T25] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 663.240726][ T25] usb 2-1: USB disconnect, device number 74 [ 663.638661][ T5835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 663.812407][ T5835] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 663.815990][ T5835] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.816028][ T5835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 663.816047][ T5835] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 663.816066][ T5835] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.816099][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.918515][ T5881] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 663.926382][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 664.028910][T13137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.029385][T13137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.108498][ T5881] usb 5-1: device descriptor read/64, error -32 [ 664.228338][T10275] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 664.274116][ T25] usb 7-1: USB disconnect, device number 3 [ 664.390555][T10275] usb 2-1: Using ep0 maxpacket: 16 [ 664.391027][T10275] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 664.392184][T10275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.393813][T10275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.393833][T10275] usb 2-1: Product: syz [ 664.393847][T10275] usb 2-1: Manufacturer: syz [ 664.393860][T10275] usb 2-1: SerialNumber: syz [ 664.395936][T10275] usb 2-1: config 0 descriptor?? [ 664.400457][T10275] asix 2-1:0.0: probe with driver asix failed with error -22 [ 664.433167][ T5881] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 664.673273][ T5694] usb 2-1: USB disconnect, device number 75 [ 666.348321][ T5881] usb 5-1: device descriptor read/all, error -71 [ 666.368682][ T5881] usb usb5-port1: attempt power cycle [ 666.587852][ T5694] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 666.791731][ T5694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 666.791937][ T5694] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 666.822141][ T5694] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 666.841042][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.841229][ T5694] usb 6-1: Product: syz [ 666.841395][ T5694] usb 6-1: Manufacturer: syz [ 666.841548][ T5694] usb 6-1: SerialNumber: syz [ 667.092017][ T5694] usb 6-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 667.102592][ T5694] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 667.119498][ T5694] usb 6-1: failed to enable PITCH for EP 0x1 [ 667.129577][ T5694] usb 6-1: unit 2 not found! [ 667.129758][ T5694] usb 6-1: unit 0 not found! [ 667.242127][ T5694] usb 6-1: USB disconnect, device number 32 [ 667.435541][T12207] udevd[12207]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.677947][ T5881] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 667.818061][T13174] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1364'. [ 667.843115][ T5881] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 667.853814][ T5881] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 667.862403][ T5881] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 667.862600][ T5881] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 667.862787][ T5881] usb 5-1: config 220 has no interface number 2 [ 667.862979][ T5881] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 667.863143][ T5881] usb 5-1: config 220 interface 0 has no altsetting 0 [ 667.863300][ T5881] usb 5-1: config 220 interface 76 has no altsetting 0 [ 667.863457][ T5881] usb 5-1: config 220 interface 1 has no altsetting 0 [ 667.937191][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.937330][ T5881] usb 5-1: Product: syz [ 667.937476][ T5881] usb 5-1: Manufacturer: syz [ 667.937631][ T5881] usb 5-1: SerialNumber: syz [ 670.076581][T13186] FAULT_INJECTION: forcing a failure. [ 670.076581][T13186] name failslab, interval 1, probability 0, space 0, times 0 [ 670.076630][T13186] CPU: 1 UID: 0 PID: 13186 Comm: syz.1.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.076655][T13186] Tainted: [L]=SOFTLOCKUP [ 670.076663][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 670.076674][T13186] Call Trace: [ 670.076681][T13186] [ 670.076689][T13186] dump_stack_lvl+0x100/0x190 [ 670.076720][T13186] should_fail_ex.cold+0x5/0xa [ 670.076746][T13186] should_failslab+0xc2/0x120 [ 670.076770][T13186] __kvmalloc_node_noprof+0x113/0x9b0 [ 670.076790][T13186] ? __pfx___mutex_lock+0x10/0x10 [ 670.076812][T13186] ? nf_hook_entries_grow+0x255/0x870 [ 670.076850][T13186] nf_hook_entries_grow+0x255/0x870 [ 670.076885][T13186] __nf_register_net_hook+0x112/0x780 [ 670.076915][T13186] nf_register_net_hook+0xdb/0x170 [ 670.076942][T13186] nf_register_net_hooks+0x5d/0xd0 [ 670.076970][T13186] nf_ct_netns_do_get+0x387/0x610 [ 670.076998][T13186] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 670.077027][T13186] ? xt_find_match+0x1dc/0x280 [ 670.077062][T13186] nf_ct_netns_get+0x3d/0x160 [ 670.077088][T13186] conntrack_mt_check+0x60/0xd0 [ 670.077116][T13186] ? __pfx_conntrack_mt_check+0x10/0x10 [ 670.077143][T13186] xt_check_match+0x117/0x1c0 [ 670.077164][T13186] find_check_entry.isra.0+0x323/0x990 [ 670.077193][T13186] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 670.077224][T13186] ? kasan_quarantine_put+0x104/0x240 [ 670.077243][T13186] ? lockdep_hardirqs_on+0x7d/0x110 [ 670.077264][T13186] ? translate_table+0xa30/0x1630 [ 670.077285][T13186] ? translate_table+0xaf2/0x1630 [ 670.077305][T13186] ? kfree+0x22b/0x6d0 [ 670.077329][T13186] ? xt_check_table_hooks+0x206/0x330 [ 670.077360][T13186] translate_table+0xbcd/0x1630 [ 670.077392][T13186] ? __pfx_translate_table+0x10/0x10 [ 670.077421][T13186] do_ipt_set_ctl+0x689/0xcf0 [ 670.077442][T13186] ? nf_sockopt_find.isra.0+0x222/0x290 [ 670.077460][T13186] ? nf_sockopt_find.isra.0+0x222/0x290 [ 670.077482][T13186] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 670.077504][T13186] ? __mutex_unlock_slowpath+0x35d/0x930 [ 670.077527][T13186] ? sockopt_release_sock+0x5c/0x70 [ 670.077547][T13186] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 670.077578][T13186] ? nf_sockopt_find.isra.0+0x222/0x290 [ 670.077600][T13186] nf_setsockopt+0x8d/0xf0 [ 670.077621][T13186] ip_setsockopt+0xcb/0xf0 [ 670.077647][T13186] udp_setsockopt+0x64/0xb0 [ 670.077665][T13186] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 670.077689][T13186] do_sock_setsockopt+0xf3/0x1d0 [ 670.077713][T13186] __sys_setsockopt+0x195/0x220 [ 670.077744][T13186] __x64_sys_setsockopt+0xbd/0x160 [ 670.077768][T13186] ? do_syscall_64+0xae/0x790 [ 670.077787][T13186] ? lockdep_hardirqs_on+0x7d/0x110 [ 670.077807][T13186] do_syscall_64+0x123/0x790 [ 670.077829][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.077853][T13186] RIP: 0033:0x7f7e2d39e159 [ 670.077870][T13186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.077888][T13186] RSP: 002b:00007f7e2e30e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 670.077908][T13186] RAX: ffffffffffffffda RBX: 00007f7e2d625fa0 RCX: 00007f7e2d39e159 [ 670.077920][T13186] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 670.077932][T13186] RBP: 00007f7e2e30e090 R08: 0000000000000510 R09: 0000000000000000 [ 670.077944][T13186] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.077956][T13186] R13: 00007f7e2d626038 R14: 00007f7e2d625fa0 R15: 00007fffd7cadee8 [ 670.077981][T13186] [ 670.097657][T13186] xt_conntrack: cannot load conntrack support for proto=2 [ 670.736550][T13169] syz.4.1361 (13169): drop_caches: 2 [ 671.014104][ T5881] usb 5-1: selecting invalid altsetting 0 [ 671.014679][ T5881] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 671.014843][ T5881] uvcvideo 5-1:220.0: No valid video chain found. [ 671.034266][ T5881] usb 5-1: selecting invalid altsetting 0 [ 671.034292][ T5881] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 671.044868][ T5881] usb 5-1: USB disconnect, device number 44 [ 672.257972][T10275] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 673.088043][T10275] usb 2-1: Using ep0 maxpacket: 16 [ 673.097943][T10275] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 673.128271][T10275] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 673.128312][T10275] usb 2-1: config 0 has no interface number 0 [ 673.128358][T10275] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 673.128385][T10275] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 673.167170][T10275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.167209][T10275] usb 2-1: Product: syz [ 673.167238][T10275] usb 2-1: Manufacturer: syz [ 673.167256][T10275] usb 2-1: SerialNumber: syz [ 673.181557][ T5881] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 673.199258][T10275] usb 2-1: config 0 descriptor?? [ 673.204937][T13193] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 673.213205][T13193] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 673.452919][ T5881] usb 4-1: unable to get BOS descriptor or descriptor too short [ 673.453109][ T5881] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 673.455094][ T5881] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 673.456932][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.456952][ T5881] usb 4-1: Product: syz [ 673.456965][ T5881] usb 4-1: Manufacturer: syz [ 673.456978][ T5881] usb 4-1: SerialNumber: syz [ 673.468356][T13193] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 673.468435][T13193] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 673.699201][ T5881] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 673.705940][ T5881] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 673.717217][ T5881] usb 4-1: failed to enable PITCH for EP 0x1 [ 673.718538][ T5881] usb 4-1: unit 2 not found! [ 673.718555][ T5881] usb 4-1: unit 0 not found! [ 673.968322][ T5881] usb 4-1: USB disconnect, device number 58 [ 674.236218][ T8521] udevd[8521]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 674.304604][T13193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.309653][T13193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.910893][ T25] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 675.113944][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 675.122659][ T25] usb 6-1: not running at top speed; connect to a high speed hub [ 675.131072][ T25] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 675.141669][ T25] usb 6-1: config 3 has an invalid interface number: 5 but max is 0 [ 675.141693][ T25] usb 6-1: config 3 has no interface number 0 [ 675.141709][ T25] usb 6-1: config 3 interface 5 has no altsetting 0 [ 675.167853][ T5881] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 675.176900][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.176927][ T25] usb 6-1: Product: syz [ 675.176948][ T25] usb 6-1: Manufacturer: syz [ 675.176985][ T25] usb 6-1: SerialNumber: syz [ 675.241029][T10275] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 675.241090][T10275] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 675.241316][T10275] asix 2-1:0.34: probe with driver asix failed with error -71 [ 675.284255][T10275] usb 2-1: USB disconnect, device number 76 [ 675.342981][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 675.343178][ T5881] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 675.347238][ T5881] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 675.374731][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.374757][ T5881] usb 5-1: Product: syz [ 675.374770][ T5881] usb 5-1: Manufacturer: syz [ 675.374784][ T5881] usb 5-1: SerialNumber: syz [ 675.595253][T13214] ip_tables: iptables: counters copy to user failed while replacing table [ 675.833645][ T5881] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 675.833813][ T5881] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 675.842966][ T5881] usb 5-1: failed to enable PITCH for EP 0x1 [ 675.843559][ T5881] usb 5-1: unit 2 not found! [ 675.843573][ T5881] usb 5-1: unit 0 not found! [ 676.129180][ T5881] usb 5-1: USB disconnect, device number 45 [ 677.780011][ T31] audit: type=1400 audit(1788085714.964:1399): avc: denied { execute } for pid=13231 comm="syz.3.1380" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 677.784251][ T8520] udevd[8520]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.900649][ T25] msi2500 6-1:3.5: Registered as swradio24 [ 677.900675][ T25] msi2500 6-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 677.919830][ T25] usb 6-1: USB disconnect, device number 33 [ 678.068042][ T5881] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 678.221564][ T5881] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 678.223309][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.223349][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.231440][ T5881] usb 2-1: config 0 descriptor?? [ 678.311157][ T5881] pwc: Askey VC010 type 2 USB webcam detected. [ 678.750993][ T5881] pwc: recv_control_msg error -32 req 02 val 2b00 [ 678.826601][ T5881] pwc: recv_control_msg error -32 req 02 val 2700 [ 678.931531][ T5881] pwc: recv_control_msg error -32 req 02 val 2c00 [ 678.967667][ T5881] pwc: recv_control_msg error -32 req 04 val 1000 [ 679.069200][ T5881] pwc: recv_control_msg error -32 req 04 val 1300 [ 679.093974][ T5881] pwc: recv_control_msg error -32 req 04 val 1400 [ 679.109127][ T5881] pwc: recv_control_msg error -32 req 02 val 2000 [ 679.122081][ T5881] pwc: recv_control_msg error -32 req 02 val 2100 [ 679.134557][ T5881] pwc: recv_control_msg error -32 req 04 val 1500 [ 679.143338][ T5881] pwc: recv_control_msg error -32 req 02 val 2500 [ 679.152944][ T5881] pwc: recv_control_msg error -32 req 02 val 2400 [ 679.163941][ T5881] pwc: recv_control_msg error -32 req 02 val 2600 [ 679.173257][ T5881] pwc: recv_control_msg error -32 req 02 val 2900 [ 679.182614][ T5881] pwc: recv_control_msg error -32 req 02 val 2800 [ 679.195387][ T5881] pwc: recv_control_msg error -32 req 04 val 1100 [ 679.202720][ T5881] pwc: recv_control_msg error -32 req 04 val 1200 [ 679.251696][ T5881] pwc: Registered as video103. [ 679.266773][ T5881] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 679.915164][T10514] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.242491][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.078601][ T25] usb 2-1: USB disconnect, device number 77 [ 681.227870][ T5881] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 681.861928][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 681.862106][ T5881] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 681.864762][ T5881] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 681.870388][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.870547][ T5881] usb 5-1: Product: syz [ 681.870703][ T5881] usb 5-1: Manufacturer: syz [ 681.870844][ T5881] usb 5-1: SerialNumber: syz [ 681.935883][T10514] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.051558][T11935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 682.074228][T11935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 682.096837][T11935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 682.114602][ T5881] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 682.114781][ T5881] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 682.130482][ T5881] usb 5-1: failed to enable PITCH for EP 0x1 [ 682.131403][ T5881] usb 5-1: unit 2 not found! [ 682.131561][ T5881] usb 5-1: unit 0 not found! [ 682.178127][T11935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 682.270042][T13278] FAULT_INJECTION: forcing a failure. [ 682.270042][T13278] name failslab, interval 1, probability 0, space 0, times 0 [ 682.270085][T13278] CPU: 1 UID: 0 PID: 13278 Comm: syz.3.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.270111][T13278] Tainted: [L]=SOFTLOCKUP [ 682.270118][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 682.270128][T13278] Call Trace: [ 682.270135][T13278] [ 682.270142][T13278] dump_stack_lvl+0x100/0x190 [ 682.270173][T13278] should_fail_ex.cold+0x5/0xa [ 682.270199][T13278] should_failslab+0xc2/0x120 [ 682.270223][T13278] __kmalloc_noprof+0xfc/0x840 [ 682.270242][T13278] ? tcf_gate_offload_act_setup+0x46a/0xc30 [ 682.270276][T13278] tcf_gate_offload_act_setup+0x46a/0xc30 [ 682.270305][T13278] ? __pfx_tcf_gate_offload_act_setup+0x10/0x10 [ 682.270335][T13278] tc_setup_action+0x33c/0xac0 [ 682.270368][T13278] ? __pfx_tc_setup_action+0x10/0x10 [ 682.270396][T13278] ? __local_bh_enable_ip+0xa5/0x120 [ 682.270418][T13278] tcf_action_offload_add_ex+0x38c/0x7b0 [ 682.270447][T13278] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 682.270494][T13278] ? tcf_action_fill_size+0x110/0x340 [ 682.270521][T13278] ? tcf_action_fill_size+0x110/0x340 [ 682.270555][T13278] tcf_action_init+0x679/0xa60 [ 682.270581][T13278] ? __pfx_tcf_action_init+0x10/0x10 [ 682.270598][T13278] ? unwind_next_frame+0xbd/0x2090 [ 682.270640][T13278] ? clockevents_program_event+0x23e/0x820 [ 682.270665][T13278] ? clockevents_program_event+0x23e/0x820 [ 682.270719][T13278] ? __lock_acquire+0x4c5/0x1ec0 [ 682.270742][T13278] tcf_action_add+0xed/0x5c0 [ 682.270764][T13278] ? __pfx_tcf_action_add+0x10/0x10 [ 682.270816][T13278] ? __nla_parse+0x40/0x60 [ 682.270843][T13278] tc_ctl_action+0x2e3/0x470 [ 682.270862][T13278] ? __pfx_tc_ctl_action+0x10/0x10 [ 682.270889][T13278] ? __pfx_tc_ctl_action+0x10/0x10 [ 682.270908][T13278] rtnetlink_rcv_msg+0x3c9/0xe90 [ 682.270930][T13278] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.270953][T13278] ? __lock_acquire+0x4c5/0x1ec0 [ 682.270973][T13278] ? __netlink_lookup+0xa9/0x900 [ 682.270999][T13278] netlink_rcv_skb+0x159/0x420 [ 682.271025][T13278] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.271045][T13278] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.271079][T13278] ? netlink_deliver_tap+0x1ae/0xcc0 [ 682.271109][T13278] netlink_unicast+0x585/0x850 [ 682.271137][T13278] ? __pfx_netlink_unicast+0x10/0x10 [ 682.271170][T13278] netlink_sendmsg+0x8b0/0xda0 [ 682.271199][T13278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.271227][T13278] ? selinux_socket_sendmsg+0x198/0x2f0 [ 682.271257][T13278] __sys_sendto+0x48b/0x4e0 [ 682.271282][T13278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.271308][T13278] ? __pfx___sys_sendto+0x10/0x10 [ 682.271341][T13278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 682.271373][T13278] ? ksys_write+0x1ac/0x250 [ 682.271391][T13278] ? __pfx_ksys_write+0x10/0x10 [ 682.271412][T13278] __x64_sys_sendto+0xe0/0x1c0 [ 682.271437][T13278] ? do_syscall_64+0xae/0x790 [ 682.271456][T13278] ? lockdep_hardirqs_on+0x7d/0x110 [ 682.271476][T13278] do_syscall_64+0x123/0x790 [ 682.271497][T13278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.271517][T13278] RIP: 0033:0x7fe44e59e159 [ 682.271533][T13278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.271550][T13278] RSP: 002b:00007fe44f4c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 682.271569][T13278] RAX: ffffffffffffffda RBX: 00007fe44e825fa0 RCX: 00007fe44e59e159 [ 682.271581][T13278] RDX: 0000000000000068 RSI: 0000200000000000 RDI: 0000000000000003 [ 682.271593][T13278] RBP: 00007fe44f4c0090 R08: 0000000000000000 R09: 0000000000000000 [ 682.271604][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.271615][T13278] R13: 00007fe44e826038 R14: 00007fe44e825fa0 R15: 00007ffe884395e8 [ 682.271640][T13278] [ 682.342355][T11935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 682.915820][ T5881] usb 5-1: USB disconnect, device number 46 [ 683.045152][T13285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.045510][T13285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.066047][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.066412][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.085756][T10514] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.134051][T13290] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1393'. [ 683.199273][ T8554] udevd[8554]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 683.257846][ T25] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 683.428022][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 683.434506][ T25] usb 2-1: New USB device found, idVendor=1a8d, idProduct=100f, bcdDevice=27.04 [ 683.435507][ T25] usb 2-1: config 3 has an invalid interface number: 208 but max is 3 [ 683.435530][ T25] usb 2-1: config 3 has an invalid interface number: 171 but max is 3 [ 683.435551][ T25] usb 2-1: config 3 has an invalid interface number: 201 but max is 3 [ 683.435571][ T25] usb 2-1: config 3 has an invalid interface number: 105 but max is 3 [ 683.435590][ T25] usb 2-1: config 3 has an invalid interface number: 79 but max is 3 [ 683.435610][ T25] usb 2-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 683.435630][ T25] usb 2-1: config 3 has no interface number 0 [ 683.435645][ T25] usb 2-1: config 3 has no interface number 1 [ 683.435661][ T25] usb 2-1: config 3 has no interface number 2 [ 683.435675][ T25] usb 2-1: config 3 has no interface number 3 [ 683.435691][ T25] usb 2-1: config 3 has no interface number 4 [ 683.435767][ T25] usb 2-1: config 3 interface 208 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 683.435788][ T25] usb 2-1: config 3 interface 208 altsetting 9 bulk endpoint 0x7 has invalid maxpacket 8 [ 683.435808][ T25] usb 2-1: config 3 interface 208 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 683.435831][ T25] usb 2-1: config 3 interface 208 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 683.435852][ T25] usb 2-1: config 3 interface 208 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 683.435878][ T25] usb 2-1: config 3 interface 171 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 683.435896][ T25] usb 2-1: config 3 interface 171 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 683.435916][ T25] usb 2-1: config 3 interface 171 altsetting 3 endpoint 0x83 has an invalid bInterval 77, changing to 7 [ 683.435939][ T25] usb 2-1: config 3 interface 171 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 683.435958][ T25] usb 2-1: config 3 interface 171 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 683.435977][ T25] usb 2-1: config 3 interface 171 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 683.435996][ T25] usb 2-1: config 3 interface 171 altsetting 3 has an endpoint descriptor with address 0x3A, changing to 0xA [ 683.436017][ T25] usb 2-1: config 3 interface 171 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 683.436035][ T25] usb 2-1: config 3 interface 171 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 683.436069][ T25] usb 2-1: config 3 interface 201 altsetting 135 has a duplicate endpoint with address 0x2, skipping [ 683.436088][ T25] usb 2-1: config 3 interface 201 altsetting 135 has a duplicate endpoint with address 0x1, skipping [ 683.436108][ T25] usb 2-1: config 3 interface 201 altsetting 135 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 683.436133][ T25] usb 2-1: config 3 interface 201 altsetting 135 has a duplicate endpoint with address 0x8, skipping [ 683.436152][ T25] usb 2-1: config 3 interface 201 altsetting 135 has a duplicate endpoint with address 0x7, skipping [ 683.436171][ T25] usb 2-1: config 3 interface 201 altsetting 135 has a duplicate endpoint with address 0x7, skipping [ 683.436189][ T25] usb 2-1: config 3 interface 201 altsetting 135 has a duplicate endpoint with address 0x1, skipping [ 683.436214][ T25] usb 2-1: config 3 interface 201 altsetting 135 has a duplicate endpoint with address 0x7, skipping [ 683.436234][ T25] usb 2-1: config 3 interface 201 altsetting 135 has a duplicate endpoint with address 0x4, skipping [ 683.436254][ T25] usb 2-1: config 3 interface 201 altsetting 135 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 683.436276][ T25] usb 2-1: config 3 interface 201 altsetting 135 has a duplicate endpoint with address 0x9, skipping [ 683.436303][ T25] usb 2-1: config 3 interface 105 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 683.436321][ T25] usb 2-1: config 3 interface 105 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 683.436362][ T25] usb 2-1: too many endpoints for config 3 interface 79 altsetting 19: 89, using maximum allowed: 30 [ 683.436392][ T25] usb 2-1: config 3 interface 79 altsetting 19 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 683.436416][ T25] usb 2-1: config 3 interface 79 altsetting 19 has an invalid descriptor for endpoint zero, skipping [ 683.436435][ T25] usb 2-1: config 3 interface 79 altsetting 19 has a duplicate endpoint with address 0xE, skipping [ 683.436453][ T25] usb 2-1: config 3 interface 79 altsetting 19 has an invalid descriptor for endpoint zero, skipping [ 683.436470][ T25] usb 2-1: config 3 interface 79 altsetting 19 has an invalid descriptor for endpoint zero, skipping [ 683.436488][ T25] usb 2-1: config 3 interface 79 altsetting 19 has a duplicate endpoint with address 0xC, skipping [ 683.436506][ T25] usb 2-1: config 3 interface 79 altsetting 19 has an invalid descriptor for endpoint zero, skipping [ 683.436525][ T25] usb 2-1: config 3 interface 79 altsetting 19 has a duplicate endpoint with address 0xC, skipping [ 683.436545][ T25] usb 2-1: config 3 interface 79 altsetting 19 has a duplicate endpoint with address 0x6, skipping [ 683.436564][ T25] usb 2-1: config 3 interface 79 altsetting 19 has a duplicate endpoint with address 0xB, skipping [ 683.436585][ T25] usb 2-1: config 3 interface 79 altsetting 19 has a duplicate endpoint with address 0x8, skipping [ 683.436606][ T25] usb 2-1: config 3 interface 79 altsetting 19 has a duplicate endpoint with address 0xA, skipping [ 683.436626][ T25] usb 2-1: config 3 interface 79 altsetting 19 has 12 endpoint descriptors, different from the interface descriptor's value: 89 [ 683.436651][ T25] usb 2-1: config 3 interface 208 has no altsetting 0 [ 683.436667][ T25] usb 2-1: config 3 interface 171 has no altsetting 0 [ 683.436683][ T25] usb 2-1: config 3 interface 201 has no altsetting 0 [ 683.436699][ T25] usb 2-1: config 3 interface 105 has no altsetting 0 [ 683.436714][ T25] usb 2-1: config 3 interface 79 has no altsetting 0 [ 683.679996][T13296] kernel profiling enabled (shift: 7) [ 683.831111][ T25] usb 2-1: Dual-Role OTG device on HNP port [ 683.831361][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.831379][ T25] usb 2-1: Product: Р [ 683.831393][ T25] usb 2-1: Manufacturer: ᶑ굯竵淵䕮ȏ৪ἥ辦ﴏ⯨뭡䪹撆ㇰꕷꢌ࿝䢀䎵伦闉铘팲殬﹌୅谰⣩豋탣魷ህᖳ㊪茈Յ懣쯟偘匮枳꽗잪뤋檔䂤ꇚ薜ᮕ顀㧚菒ↇ㭵꠫㞲㨶㞶榷ԝ⌢충桦܊濰閭팾ꘝ轜랯먲徲꛰㦘ᶚ퇞씾㬌꼼 [ 683.831434][ T25] usb 2-1: SerialNumber: Б [ 683.838243][T13286] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 684.103234][ T25] option 2-1:3.208: GSM modem (1-port) converter detected [ 684.492057][T11935] Bluetooth: hci3: command tx timeout [ 684.550178][T13299] comedi comedi3: das16m1: I/O port conflict (0x100,16) [ 684.892732][T13300] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 684.988127][ T25] usb 2-1: USB disconnect, device number 78 [ 685.005538][ T25] option 2-1:3.208: device disconnected [ 685.075157][T10514] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.548129][T11935] Bluetooth: hci3: command tx timeout [ 686.696138][T13276] lo speed is unknown, defaulting to 1000 [ 686.750041][T13276] wg0 speed is unknown, defaulting to 1000 [ 686.790278][T10514] bridge_slave_1: left allmulticast mode [ 686.790319][T10514] bridge_slave_1: left promiscuous mode [ 686.790477][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.814904][T10514] bridge_slave_0: left allmulticast mode [ 686.814947][T10514] bridge_slave_0: left promiscuous mode [ 686.815098][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.898681][ T25] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 688.047814][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 688.053426][ T25] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 688.066091][ T25] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 688.066126][ T25] usb 4-1: config 0 has no interface number 0 [ 688.066160][ T25] usb 4-1: config 0 interface 153 has no altsetting 0 [ 688.114007][ T25] usb 4-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 688.114048][ T25] usb 4-1: Product: syz [ 688.114074][ T25] usb 4-1: Manufacturer: syz [ 688.114093][ T25] usb 4-1: SerialNumber: syz [ 688.124725][ T25] usb 4-1: config 0 descriptor?? [ 688.259722][ T31] audit: type=1400 audit(1788085725.464:1400): avc: denied { write } for pid=13338 comm="syz.1.1404" name="mjpeg" dev="configfs" ino=47772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 688.336916][ T31] audit: type=1800 audit(1788085725.534:1401): pid=13339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1404" name="bmaControls" dev="configfs" ino=50256 res=0 errno=0 [ 688.395143][T13328] smpboot: CPU 1 is now offline [ 688.587059][ T25] hub 4-1:0.153: bad descriptor, ignoring hub [ 688.587170][ T25] hub 4-1:0.153: probe with driver hub failed with error -5 [ 688.587724][ T25] sierra 4-1:0.153: Sierra USB modem converter detected [ 688.627901][T11935] Bluetooth: hci3: command tx timeout [ 688.791828][ T25] usb 4-1: USB disconnect, device number 59 [ 688.798289][ T25] sierra 4-1:0.153: device disconnected [ 689.639243][ T5881] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 689.846824][ T5881] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 689.857966][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 689.858078][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 689.922176][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 689.922289][ T5881] usb 2-1: Product: syz [ 689.922389][ T5881] usb 2-1: Manufacturer: syz [ 689.955290][ T5881] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 690.143868][T10514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.567851][ T5723] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 690.708038][T11935] Bluetooth: hci3: command tx timeout [ 691.457828][ T5723] usb 7-1: device descriptor read/64, error -71 [ 691.648714][T10514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.777811][ T5723] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 692.033168][ T31] audit: type=1400 audit(1788085729.234:1402): avc: denied { write } for pid=13341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.088293][ T5723] usb 7-1: device descriptor read/64, error -71 [ 692.162483][T10514] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 692.177263][T10514] bond0 (unregistering): Released all slaves [ 692.199279][ T5723] usb usb7-port1: attempt power cycle [ 692.250687][T10514] bond1 (unregistering): Released all slaves [ 692.548148][ T5723] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 692.575238][ T5723] usb 7-1: device descriptor read/8, error -71 [ 692.784829][ T5881] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 692.807514][ T5881] usb 2-1: USB disconnect, device number 79 [ 692.814062][ T5723] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 692.861329][ T31] audit: type=1400 audit(1788085730.064:1403): avc: denied { write } for pid=13367 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.926149][ T5881] mos7840 2-1:1.0: device disconnected [ 693.409565][ T5723] usb 7-1: device descriptor read/8, error -71 [ 693.544673][ T5723] usb usb7-port1: unable to enumerate USB device [ 693.794196][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 695.769038][ T31] audit: type=1326 audit(1788085732.974:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13375 comm="syz.4.1403" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59399e159 code=0x7ffc0000 [ 695.827701][ T31] audit: type=1326 audit(1788085733.024:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13375 comm="syz.4.1403" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59399e159 code=0x7ffc0000 [ 696.007322][T13374] netdevsim netdevsim6: Direct firmware load for g failed with error -2 [ 696.026780][T13379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 696.133542][T13374] netdevsim netdevsim6: Falling back to sysfs fallback for: g [ 696.513665][ T5730] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 696.675731][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short [ 696.675852][ T5730] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 696.696364][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 696.696478][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 696.696585][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 696.696682][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 696.696779][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 696.775757][ T5730] usb 4-1: string descriptor 0 read error: -22 [ 696.775912][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.347665][ T5730] usb 4-1: config 0 descriptor?? [ 697.418897][ T5730] usb 4-1: can't set config #0, error -71 [ 697.544736][ T5730] usb 4-1: USB disconnect, device number 60 [ 697.657253][T13393] FAULT_INJECTION: forcing a failure. [ 697.657253][T13393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.657369][T13393] CPU: 0 UID: 0 PID: 13393 Comm: syz.6.1416 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.657386][T13393] Tainted: [L]=SOFTLOCKUP [ 697.657390][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 697.657397][T13393] Call Trace: [ 697.657401][T13393] [ 697.657406][T13393] dump_stack_lvl+0x100/0x190 [ 697.657427][T13393] should_fail_ex.cold+0x5/0xa [ 697.657444][T13393] _copy_from_iter+0x1f4/0x1690 [ 697.657463][T13393] ? __asan_memset+0x23/0x50 [ 697.657480][T13393] ? __pfx__copy_from_iter+0x10/0x10 [ 697.657496][T13393] ? __pfx___alloc_skb+0x10/0x10 [ 697.657514][T13393] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 697.657531][T13393] ? sock_has_perm+0x25a/0x2f0 [ 697.657545][T13393] ? __pfx_sock_has_perm+0x10/0x10 [ 697.657563][T13393] netlink_sendmsg+0x808/0xda0 [ 697.657588][T13393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.657605][T13393] ? selinux_socket_sendmsg+0x198/0x2f0 [ 697.657623][T13393] ____sys_sendmsg+0xa4d/0xbe0 [ 697.657637][T13393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.657654][T13393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.657670][T13393] ? lock_acquire+0x1d1/0x380 [ 697.657682][T13393] ? get_pid_task+0x2a/0x250 [ 697.657698][T13393] ___sys_sendmsg+0x190/0x1e0 [ 697.657712][T13393] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.657726][T13393] ? get_pid_task+0x106/0x250 [ 697.657748][T13393] ? find_held_lock+0x2b/0x80 [ 697.657771][T13393] __sys_sendmsg+0x160/0x210 [ 697.657789][T13393] ? __pfx___sys_sendmsg+0x10/0x10 [ 697.657813][T13393] do_syscall_64+0x123/0x790 [ 697.657827][T13393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.657839][T13393] RIP: 0033:0x7fd55f59e159 [ 697.657850][T13393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.657861][T13393] RSP: 002b:00007fd560540028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.657872][T13393] RAX: ffffffffffffffda RBX: 00007fd55f825fa0 RCX: 00007fd55f59e159 [ 697.657879][T13393] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 697.657886][T13393] RBP: 00007fd560540090 R08: 0000000000000000 R09: 0000000000000000 [ 697.657893][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.657899][T13393] R13: 00007fd55f826038 R14: 00007fd55f825fa0 R15: 00007ffc1c93c668 [ 697.657913][T13393] [ 697.748860][ T5723] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 698.014154][ T5723] usb 5-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 698.034305][ T5723] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.034418][ T5723] usb 5-1: config 1 interface 0 has no altsetting 0 [ 698.070570][ T5723] usb 5-1: string descriptor 0 read error: -22 [ 698.070721][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.764841][ T5723] apple 0003:05AC:021A.0014: unknown main item tag 0x0 [ 699.774316][ T5723] apple 0003:05AC:021A.0014: unknown main item tag 0x0 [ 699.781293][ T5723] apple 0003:05AC:021A.0014: unknown main item tag 0x0 [ 699.781308][ T5723] apple 0003:05AC:021A.0014: unknown main item tag 0x0 [ 699.781321][ T5723] apple 0003:05AC:021A.0014: unknown main item tag 0x0 [ 699.781333][ T5723] apple 0003:05AC:021A.0014: unknown main item tag 0x0 [ 699.781346][ T5723] apple 0003:05AC:021A.0014: unknown main item tag 0x0 [ 699.781358][ T5723] apple 0003:05AC:021A.0014: unknown main item tag 0x0 [ 699.781372][ T5723] apple 0003:05AC:021A.0014: unknown main item tag 0x0 [ 699.781384][ T5723] apple 0003:05AC:021A.0014: unknown main item tag 0x0 [ 700.626316][ T5723] apple 0003:05AC:021A.0014: hidraw0: USB HID v0.05 Device [HID 05ac:021a] on usb-dummy_hcd.4-1/input0 [ 700.937841][ T5723] usb 5-1: USB disconnect, device number 47 [ 701.246418][T10514] hsr_slave_0: left promiscuous mode [ 701.281706][T10514] hsr_slave_1: left promiscuous mode [ 701.289830][T10514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.297474][T10514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.315983][T10514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.316174][T10514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.483344][T10514] veth1_macvtap: left promiscuous mode [ 701.483908][T10514] veth1_vlan: left promiscuous mode [ 701.484609][T10514] veth0_vlan: left promiscuous mode [ 701.807867][T13414] fido_id[13414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 702.034149][ T31] audit: type=1400 audit(1788085739.234:1406): avc: denied { write } for pid=13389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.154880][T13429] validate_nla: 56 callbacks suppressed [ 703.154993][T13429] netlink: 'syz.1.1422': attribute type 4 has an invalid length. [ 704.220290][ T31] audit: type=1400 audit(1788085741.394:1407): avc: denied { write } for pid=13440 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.247562][ T31] audit: type=1400 audit(1788085741.444:1408): avc: denied { write } for pid=13430 comm="syz.4.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 705.227804][ T5730] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 705.408549][ T5730] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 705.419086][ T5730] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 705.419192][ T5730] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.419291][ T5730] usb 7-1: config 0 has no interface number 0 [ 705.419395][ T5730] usb 7-1: config 0 interface 205 has no altsetting 0 [ 705.505179][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.505287][ T5730] usb 7-1: Product: syz [ 705.505391][ T5730] usb 7-1: Manufacturer: syz [ 705.505484][ T5730] usb 7-1: SerialNumber: syz [ 705.563788][ T5730] usb 7-1: config 0 descriptor?? [ 705.585757][ T5730] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 705.604718][ T5730] dvb-usb: bulk message failed: -22 (3/0) [ 705.685195][ T5730] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 705.713956][ T5730] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 705.714084][ T5730] usb 7-1: media controller created [ 705.743432][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.261209][ T5730] dvb-usb: bulk message failed: -22 (6/0) [ 706.261339][ T5730] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 706.295444][ T5730] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 706.433689][ T5730] dvb-usb: schedule remote query interval to 150 msecs. [ 706.433815][ T5730] dvb-usb: bulk message failed: -22 (3/0) [ 706.454272][ T5730] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 706.590208][ T5730] dvb-usb: bulk message failed: -22 (1/0) [ 706.590335][ T5730] dvb-usb: error while querying for an remote control event. [ 706.722652][ T5730] usb 7-1: USB disconnect, device number 8 [ 706.914302][ T5730] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 707.326551][ T31] audit: type=1400 audit(1788085744.524:1409): avc: denied { mounton } for pid=13448 comm="syz.4.1426" path="/myproc" dev="autofs" ino=50649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 707.941470][T10514] team0 (unregistering): Port device team_slave_1 removed [ 708.027415][T10514] team0 (unregistering): Port device team_slave_0 removed [ 710.428990][T13437] pim6reg: entered allmulticast mode [ 710.473627][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 710.786635][T13276] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.804487][T13276] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.804753][T13276] bridge_slave_0: entered allmulticast mode [ 710.805921][T13276] bridge_slave_0: entered promiscuous mode [ 710.863994][T13276] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.864300][T13276] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.864478][T13276] bridge_slave_1: entered allmulticast mode [ 710.865642][T13276] bridge_slave_1: entered promiscuous mode [ 712.826337][T13276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.081084][T13276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.036246][T13276] team0: Port device team_slave_0 added [ 715.061965][T13276] team0: Port device team_slave_1 added [ 715.620619][T13276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.620733][T13276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.620838][T13276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.693016][T13276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.693120][T13276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.693230][T13276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.321484][T13276] hsr_slave_0: entered promiscuous mode [ 717.347260][T13276] hsr_slave_1: entered promiscuous mode [ 717.348147][T13276] debugfs: 'hsr0' already exists in 'hsr' [ 717.348261][T13276] Cannot create hsr debugfs directory [ 717.517988][ T5694] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 718.972623][ T5694] usb 7-1: unable to get BOS descriptor or descriptor too short [ 718.980908][ T5694] usb 7-1: not running at top speed; connect to a high speed hub [ 718.981017][ T5694] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 719.037856][ T5694] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.037966][ T5694] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 719.117517][ T5694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.117629][ T5694] usb 7-1: Product: syz [ 719.117747][ T5694] usb 7-1: Manufacturer: syz [ 719.119593][ T5694] usb 7-1: SerialNumber: syz [ 719.296779][ T31] audit: type=1400 audit(1788085756.494:1410): avc: denied { write } for pid=13476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.093821][ T5694] usb 7-1: USB disconnect, device number 9 [ 720.157977][ T31] audit: type=1400 audit(1788085757.354:1411): avc: denied { write } for pid=13511 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.267209][ T8553] udevd[8553]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.770469][T13514] openvswitch: netlink: IP tunnel dst address not specified [ 721.207067][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 721.997901][ T5694] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 722.415336][ T5694] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 722.442726][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.343900][ T5694] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 723.551238][T13528] FAULT_INJECTION: forcing a failure. [ 723.551238][T13528] name failslab, interval 1, probability 0, space 0, times 0 [ 723.551356][T13528] CPU: 0 UID: 0 PID: 13528 Comm: syz.1.1443 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.551373][T13528] Tainted: [L]=SOFTLOCKUP [ 723.551378][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 723.551385][T13528] Call Trace: [ 723.551389][T13528] [ 723.551394][T13528] dump_stack_lvl+0x100/0x190 [ 723.551417][T13528] should_fail_ex.cold+0x5/0xa [ 723.551434][T13528] should_failslab+0xc2/0x120 [ 723.551449][T13528] kmem_cache_alloc_noprof+0x92/0x6a0 [ 723.551461][T13528] ? security_file_alloc+0x34/0x2c0 [ 723.551475][T13528] security_file_alloc+0x34/0x2c0 [ 723.551486][T13528] init_file+0x95/0x480 [ 723.551501][T13528] alloc_empty_file+0x79/0x1c0 [ 723.551516][T13528] path_openat+0xdb/0x2440 [ 723.551532][T13528] ? __pfx_path_openat+0x10/0x10 [ 723.551548][T13528] do_file_open+0x20e/0x430 [ 723.551562][T13528] ? __pfx_do_file_open+0x10/0x10 [ 723.551587][T13528] ? _raw_spin_unlock+0x28/0x50 [ 723.551605][T13528] ? alloc_fd+0x471/0x7a0 [ 723.551622][T13528] do_sys_openat2+0x10f/0x1e0 [ 723.551636][T13528] ? __pfx_do_sys_openat2+0x10/0x10 [ 723.551651][T13528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 723.551665][T13528] ? __fget_files+0x21f/0x3d0 [ 723.551679][T13528] __x64_sys_openat+0x12d/0x210 [ 723.551694][T13528] ? __pfx___x64_sys_openat+0x10/0x10 [ 723.551708][T13528] ? ksys_write+0x1ac/0x250 [ 723.551723][T13528] do_syscall_64+0x123/0x790 [ 723.551737][T13528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.551749][T13528] RIP: 0033:0x7f7e2d39e159 [ 723.551759][T13528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.551770][T13528] RSP: 002b:00007f7e2e30e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 723.551782][T13528] RAX: ffffffffffffffda RBX: 00007f7e2d625fa0 RCX: 00007f7e2d39e159 [ 723.551789][T13528] RDX: 00000000001aff80 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 723.551796][T13528] RBP: 00007f7e2e30e090 R08: 0000000000000000 R09: 0000000000000000 [ 723.551803][T13528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.551810][T13528] R13: 00007f7e2d626038 R14: 00007f7e2d625fa0 R15: 00007fffd7cadee8 [ 723.551824][T13528] [ 723.919498][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 724.075010][ T5723] usb 2-1: USB disconnect, device number 80 [ 724.645763][T13539] jffs2: notice: (13539) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 725.887845][ T31] audit: type=1400 audit(1788085763.014:1412): avc: denied { kexec_image_load } for pid=13552 comm="syz.6.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 726.006990][T13543] netlink: 'syz.3.1440': attribute type 10 has an invalid length. [ 726.238501][ T31] audit: type=1400 audit(1788085763.444:1413): avc: denied { write } for pid=13531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.392242][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 726.665311][ T31] audit: type=1400 audit(1788085763.864:1414): avc: denied { write } for pid=13568 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.753036][ T5730] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 726.978355][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 727.138942][ T31] audit: type=1400 audit(1788085764.344:1415): avc: denied { name_bind } for pid=13569 comm="syz.4.1450" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 727.235429][ T5730] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.40 [ 727.250383][ T5730] usb 2-1: config 1 interface 0 has no altsetting 0 [ 727.261084][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.261192][ T5730] usb 2-1: Product: చ姞ࣄ๖⊋邍੅딷஻侞뛺쌯馀笄紱쌞䤱숥眷꯻刪醋윽딧邍᤯纓跪됁㽓⌊寓읭峮糭 [ 727.275057][ T5730] usb 2-1: Manufacturer:  [ 727.275072][ T5730] usb 2-1: SerialNumber: љ [ 727.582173][ T5730] usbhid 2-1:1.0: can't add hid device: -71 [ 727.645555][ T5730] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 727.752148][ T5730] usb 2-1: USB disconnect, device number 81 [ 728.347922][ T5730] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 728.517889][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 728.524326][ T5730] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 728.538334][ T5730] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.538446][ T5730] usb 4-1: config 0 interface 0 has no altsetting 0 [ 728.538555][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.569487][ T5730] usb 4-1: config 0 descriptor?? [ 728.589466][T13584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1454'. [ 728.878770][ T5694] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 728.947146][T13276] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 728.974464][T13276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.983068][T13276] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 729.093486][ T5694] usb 2-1: device descriptor read/64, error -71 [ 729.118237][T13276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.152800][T13276] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 729.252867][ T5730] hid_parser_main: 1452 callbacks suppressed [ 729.260054][ T5730] pantherlord 0003:0810:0001.0015: unknown main item tag 0x0 [ 729.260083][ T5730] pantherlord 0003:0810:0001.0015: unknown main item tag 0x0 [ 729.260096][ T5730] pantherlord 0003:0810:0001.0015: unknown main item tag 0x0 [ 729.260110][ T5730] pantherlord 0003:0810:0001.0015: unknown main item tag 0x0 [ 729.260128][ T5730] pantherlord 0003:0810:0001.0015: unknown main item tag 0x0 [ 729.260140][ T5730] pantherlord 0003:0810:0001.0015: bogus close delimiter [ 729.260147][ T5730] pantherlord 0003:0810:0001.0015: item 0 0 2 10 parsing failed [ 729.260425][ T5730] pantherlord 0003:0810:0001.0015: parse failed [ 729.260456][ T5730] pantherlord 0003:0810:0001.0015: probe with driver pantherlord failed with error -22 [ 729.357042][T13276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.370640][T13276] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 729.378506][ T5694] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 729.396173][ T5730] usb 4-1: USB disconnect, device number 61 [ 729.434877][T13276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 729.517840][ T5694] usb 2-1: device descriptor read/64, error -71 [ 729.737826][ T5694] usb usb2-port1: attempt power cycle [ 729.829722][ T31] audit: type=1400 audit(1788085767.024:1416): avc: denied { write } for pid=13574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.346633][ T5694] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 730.387006][ T5694] usb 2-1: device descriptor read/8, error -71 [ 730.686004][ T5694] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 730.715254][ T5694] usb 2-1: device descriptor read/8, error -71 [ 730.838142][ T5694] usb usb2-port1: unable to enumerate USB device [ 731.412806][T13606] overlayfs: overlapping lowerdir path [ 731.456855][ T31] audit: type=1400 audit(1788085768.654:1417): avc: denied { write } for pid=13603 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.484702][T13276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.693854][T13276] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.829888][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.829946][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.992728][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.992788][ T5865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.530946][T13585] bridge: RTM_NEWNEIGH with invalid ether address [ 733.821881][T13628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1461'. [ 734.329943][ T5694] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 734.568576][ T5694] usb 2-1: not running at top speed; connect to a high speed hub [ 734.568690][ T5694] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 734.590573][ T5694] usb 2-1: config 5 has an invalid interface number: 32 but max is 0 [ 734.590683][ T5694] usb 2-1: config 5 has no interface number 0 [ 734.590878][ T5694] usb 2-1: config 5 interface 32 has no altsetting 0 [ 734.626315][ T5694] usb 2-1: string descriptor 0 read error: -22 [ 734.626474][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.087360][ T5694] usb 2-1: USB disconnect, device number 86 [ 735.966868][ T31] audit: type=1400 audit(1788085773.114:1418): avc: denied { write } for pid=13610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.188717][ T32] INFO: task syz.2.1195:12435 blocked for more than 144 seconds. [ 737.188824][ T32] Tainted: G L syzkaller #0 [ 737.188920][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.189013][ T32] task:syz.2.1195 state:D stack:28728 pid:12435 tgid:12421 ppid:10386 task_flags:0x400040 flags:0x00080002 [ 737.189309][ T32] Call Trace: [ 737.189396][ T32] [ 737.189486][ T32] __schedule+0x1259/0x6920 [ 737.189584][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 737.189683][ T32] ? lock_acquire+0x1d1/0x380 [ 737.189781][ T32] ? __pfx___schedule+0x10/0x10 [ 737.189874][ T32] ? find_held_lock+0x2b/0x80 [ 737.189973][ T32] ? schedule+0x225/0x2c0 [ 737.190071][ T32] schedule+0xdd/0x2c0 [ 737.190165][ T32] schedule_preempt_disabled+0x13/0x30 [ 737.190260][ T32] __mutex_lock+0xcbf/0x1bc0 [ 737.190357][ T32] ? blk_trace_startstop+0x7f/0x490 [ 737.190460][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 737.190556][ T32] ? kasan_quarantine_put+0x104/0x240 [ 737.190653][ T32] ? find_held_lock+0x2b/0x80 [ 737.190759][ T32] ? blk_trace_startstop+0x7f/0x490 [ 737.190858][ T32] blk_trace_startstop+0x7f/0x490 [ 737.190958][ T32] ? __pfx_blk_trace_startstop+0x10/0x10 [ 737.191064][ T32] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 737.191162][ T32] sg_ioctl+0xf4b/0x26d0 [ 737.191264][ T32] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 737.191367][ T32] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 737.191470][ T32] ? __pfx_sg_ioctl+0x10/0x10 [ 737.191570][ T32] ? __fget_files+0x34/0x3d0 [ 737.191672][ T32] ? selinux_file_ioctl+0x13b/0x290 [ 737.191772][ T32] ? selinux_file_ioctl+0xb6/0x290 [ 737.191873][ T32] ? __pfx_sg_ioctl+0x10/0x10 [ 737.191977][ T32] __x64_sys_ioctl+0x18e/0x210 [ 737.192083][ T32] do_syscall_64+0x123/0x790 [ 737.192181][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.192276][ T32] RIP: 0033:0x7f065119e159 [ 737.192369][ T32] RSP: 002b:00007f064f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.192546][ T32] RAX: ffffffffffffffda RBX: 00007f0651426180 RCX: 00007f065119e159 [ 737.192636][ T32] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003 [ 737.192726][ T32] RBP: 00007f0651235024 R08: 0000000000000000 R09: 0000000000000000 [ 737.192816][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.192906][ T32] R13: 00007f0651426218 R14: 00007f0651426180 R15: 00007fff316867d8 [ 737.193003][ T32] [ 737.193104][ T32] [ 737.193104][ T32] Showing all locks held in the system: [ 737.193194][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 737.193285][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 737.193817][ T32] locks held by kswapd0/86: 2, last CPU#0: [ 737.193908][ T32] #0: ffffffff8efc9d20 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xbce/0x1f00 [ 737.264101][ T32] #1: ffffe8ffffc27b68 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xd16/0x2e70 [ 737.264137][ T32] locks held by kworker/u8:5/170: 3, last CPU#0: [ 737.264145][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 737.264178][ T32] #1: ffffc9000306fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 737.264210][ T32] #2: ffff8880275cb258 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 737.264258][ T32] locks held by kworker/u9:1/4918: 2, on CPU#1: [ 737.264267][ T32] #0: ffff888028891140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 737.264299][ T32] #1: ffffc90006727d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 737.264332][ T32] locks held by getty/5352: 2, on CPU#1: [ 737.264340][ T32] #0: ffff8880381cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 737.264371][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 737.264400][ T32] locks held by kworker/u9:3/5608: 2, on CPU#1: [ 737.264408][ T32] #0: ffff888028891140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 737.264439][ T32] #1: ffffc90004457d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 737.264470][ T32] locks held by kworker/u9:4/5609: 2, on CPU#1: [ 737.264478][ T32] #0: ffff888028891140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 737.264510][ T32] #1: ffffc90004477d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 737.264543][ T32] locks held by kworker/u8:11/5865: 3, on CPU#0: [ 737.269112][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 737.269233][ T32] #1: ffffc900056b7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 737.269266][ T32] #2: ffffffff90ccee80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 737.269305][ T32] locks held by syz.2.1195/12430: 3, last CPU#0: [ 737.269313][ T32] #0: ffff8880292cb738 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 [ 737.269345][ T32] #1: ffffffff8ee7aa60 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3a2/0xa00 [ 737.269377][ T32] #2: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 737.269407][ T32] locks held by syz.2.1195/12435: 1, on CPU#1: [ 737.269415][ T32] #0: ffff8880292cb738 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0x7f/0x490 [ 737.269447][ T32] locks held by syz-executor/13276: 1, on CPU#0: [ 737.269455][ T32] #0: ffffffff90ccee80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 737.269489][ T32] locks held by syz.1.1462/13630: 2, last CPU#0: [ 737.269497][ T32] #0: ffffffff90ccee80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 737.269527][ T32] #1: ffff88802bfe6d08 (&net->mpls.platform_mutex){+.+.}-{4:4}, at: mpls_dev_notify+0x7b/0x920 [ 737.269555][ T32] locks held by syz.4.1463/13635: 2, last CPU#0: [ 737.269563][ T32] #0: ffff88807eb9d038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 737.269590][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 737.269620][ T32] locks held by syz.3.1464/13637: 1, on CPU#0: [ 737.269628][ T32] #0: ffffffff90ccee80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 737.269658][ T32] locks held by syz.6.1465/13644: 2, on CPU#0: [ 737.269666][ T32] #0: ffffffff90d7e408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 737.269696][ T32] #1: ffffffff90ccee80 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xae0 [ 737.269725][ T32] [ 737.269728][ T32] ============================================= [ 737.269728][ T32] [ 737.269733][ T32] NMI backtrace for cpu 0 [ 737.269742][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 737.269757][ T32] Tainted: [L]=SOFTLOCKUP [ 737.269761][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 737.269767][ T32] Call Trace: [ 737.269772][ T32] [ 737.269777][ T32] dump_stack_lvl+0x100/0x190 [ 737.269794][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 737.269812][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 737.269824][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 737.269842][ T32] sys_info+0x141/0x190 [ 737.269856][ T32] watchdog+0xcb1/0x1030 [ 737.269870][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 737.269889][ T32] ? __pfx_watchdog+0x10/0x10 [ 737.269901][ T32] ? __kthread_parkme+0x18f/0x230 [ 737.269915][ T32] ? kthread+0x13a/0x450 [ 737.269929][ T32] ? __pfx_watchdog+0x10/0x10 [ 737.269940][ T32] kthread+0x373/0x450 [ 737.269954][ T32] ? __pfx_kthread+0x10/0x10 [ 737.269969][ T32] ret_from_fork+0x730/0xd60 [ 737.269982][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 737.269995][ T32] ? __switch_to+0x800/0x10f0 [ 737.270015][ T32] ? __pfx_kthread+0x10/0x10 [ 737.270030][ T32] ret_from_fork_asm+0x1a/0x30 [ 737.270047][ T32] [ 737.270054][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 737.971370][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 737.982018][ T32] Tainted: [L]=SOFTLOCKUP [ 737.986320][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 737.996344][ T32] Call Trace: [ 737.999595][ T32] [ 738.002500][ T32] dump_stack_lvl+0x100/0x190 [ 738.007157][ T32] vpanic+0x553/0x970 [ 738.011108][ T32] ? __pfx_vpanic+0x10/0x10 [ 738.015585][ T32] panic+0xd1/0xe0 [ 738.019283][ T32] ? __pfx_panic+0x10/0x10 [ 738.023675][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 738.028677][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 738.034812][ T32] ? watchdog.cold+0x1ec/0x234 [ 738.039559][ T32] watchdog.cold+0x1fd/0x234 [ 738.044123][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 738.049916][ T32] ? __pfx_watchdog+0x10/0x10 [ 738.054565][ T32] ? __kthread_parkme+0x18f/0x230 [ 738.059562][ T32] ? kthread+0x13a/0x450 [ 738.063780][ T32] ? __pfx_watchdog+0x10/0x10 [ 738.068428][ T32] kthread+0x373/0x450 [ 738.072471][ T32] ? __pfx_kthread+0x10/0x10 [ 738.077036][ T32] ret_from_fork+0x730/0xd60 [ 738.081606][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 738.086689][ T32] ? __switch_to+0x800/0x10f0 [ 738.091340][ T32] ? __pfx_kthread+0x10/0x10 [ 738.095916][ T32] ret_from_fork_asm+0x1a/0x30 [ 738.100657][ T32] [ 738.103688][ T32] Kernel Offset: disabled [ 738.107993][ T32] Rebooting in 86400 seconds..