last executing test programs: 3m46.198717107s ago: executing program 0 (id=601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x20, 0x200, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100}}, 0x1c}, 0x1, 0x0, 0x0, 0x200408c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m44.057222163s ago: executing program 0 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) io_uring_enter(r3, 0x3516, 0x483, 0x0, 0x0, 0x0) 3m42.47891734s ago: executing program 0 (id=608): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r2, 0x0, 0x40080) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x6, 0x1}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x9d, 0x2}}, @l2cap_conf_req={{0x4, 0x1, 0x1d}, {0x1, 0xfff, [@l2cap_conf_efs={0x6, 0x10, {0xd, 0x0, 0x9, 0x401, 0x401, 0x101}}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x9bb6, 0x3}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x1}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0xfffb, 0x5}}]}}, 0x50) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 3m41.177771802s ago: executing program 0 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x48) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendfile(r1, r0, 0x0, 0x110000) bind$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0xfffffffe}, 0x10) chdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000001140)=[@increfs={0x40086303, 0x1}], 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0xa00}]) 3m39.124156165s ago: executing program 0 (id=614): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) r5 = io_uring_setup(0x6de1, &(0x7f0000000240)={0x0, 0x4c3, 0x20, 0x3, 0x2cb}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20041, 0x0) writev(r6, &(0x7f0000001e80)=[{&(0x7f00000019c0)="5cf1", 0x2}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x6, 0x1e3315bcaadf3565, 0x4, 0x5d8b}, &(0x7f0000000400)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000500)={r7, @in6={{0xa, 0x4e21, 0x12163220, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x186}}, 0x4, 0x80, 0x5, 0x2, 0x2, 0x80, 0x29}, 0x9c) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_icmp(0x2, 0x2, 0x1) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000000600)={0x0, &(0x7f0000000840)}) 3m37.740654403s ago: executing program 0 (id=616): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r5, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf32(r6, &(0x7f0000002200)=ANY=[@ANYBLOB="7f454c46040b02050f0000000000000002003e00f7267d0eee0000003800000012020000000000000700200001000700040001800000000005000000feffffff010000000b020000090000000900000005000000000000003c1175a6d1455202fc177fa38df73ddbe280186a8218ec2c58669d656d6b40d88717a112398c3348540bf4627bb4193217f6322f0bae8000000000000000257d63f813db712367e368fd19d804e3b55a0347e02038d22b65fd7f33b81e9950dde694b862cfb79903596fdd649cc119601223fd32eb0932e86e62bddff35dfd6c8744cdb9d7d4bb2d93afc436bb66a0d1b341000000000000"], 0xf0) getpriority(0x2, r7) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56559, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0xf, 0x3, 0x2, 0x10, 0x6, 0x3, 0x7, 0xb, 0x4, 0x10], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0xfc], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x4, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3m36.853147383s ago: executing program 32 (id=616): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r5, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf32(r6, &(0x7f0000002200)=ANY=[@ANYBLOB="7f454c46040b02050f0000000000000002003e00f7267d0eee0000003800000012020000000000000700200001000700040001800000000005000000feffffff010000000b020000090000000900000005000000000000003c1175a6d1455202fc177fa38df73ddbe280186a8218ec2c58669d656d6b40d88717a112398c3348540bf4627bb4193217f6322f0bae8000000000000000257d63f813db712367e368fd19d804e3b55a0347e02038d22b65fd7f33b81e9950dde694b862cfb79903596fdd649cc119601223fd32eb0932e86e62bddff35dfd6c8744cdb9d7d4bb2d93afc436bb66a0d1b341000000000000"], 0xf0) getpriority(0x2, r7) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56559, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0xf, 0x3, 0x2, 0x10, 0x6, 0x3, 0x7, 0xb, 0x4, 0x10], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0xfc], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x4, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 13.198763013s ago: executing program 4 (id=1269): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000100)=0x8) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1803081e29126ae010541105a5ffff00000000ffffffcfe1712cb7a97a4e000000003f1fff2e14a81483fa9cf3ed56bd4829da0167a54d75a3ab86c63a783e9ac7bfe29c80814569b324639ba392027d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000040)={""/32, 0x0, 0x0, 0xe, 0x0, 0x0}) 13.067045385s ago: executing program 3 (id=1272): r0 = socket(0x2, 0x80805, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000800000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="540000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000000000000002c0012800e0001006970366772be1b03549bcf74830002801400070000000000000000c6db2a297bf1d6ae840f00000000000000000108000d0006000020"], 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="7901000000007e00000000000000"], 0x14}}, 0x4000054) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', 0x1000, 0x200, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=@polexpire={0x164, 0x1b, 0x810, 0x70bd29, 0x25dfdbfb, {{{@in=@loopback, @in=@remote, 0x4e24, 0x0, 0x4e20, 0x9, 0x2, 0x80, 0x20, 0x1e, 0x0, r6}, {0xffffffffffffffff, 0x2, 0x3, 0x8, 0xc82, 0x7f, 0x3}, {0x6, 0x1, 0xffffffffffffffff, 0x8}, 0x7, 0x6e6bb1, 0x2, 0x0, 0x2, 0x2}, 0x81}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @etimer_thresh={0x8, 0xc, 0xfffffff9}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2a, 0x5}}, @algo_comp={0x49, 0x3, {{'lzjh\x00'}, 0x8, "ab"}}, @extra_flags={0x8, 0x18, 0x117}, @lifetime_val={0x24, 0x9, {0x5, 0x3, 0x0, 0x401}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20040004}, 0x803) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000070a010100000000000000000200400034000480010001800c9340e7826f756e74657200140001800c0001006e6f74726163040002800c00018008000100636d70000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r9 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r10 = fanotify_init(0xf00, 0x1) fanotify_mark(r10, 0x105, 0x40009975, r9, 0x0) 11.945381357s ago: executing program 4 (id=1275): sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.895992939s ago: executing program 3 (id=1277): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0) r8 = syz_io_uring_setup(0x4a5c, &(0x7f0000001040)={0x0, 0xd99d, 0x80, 0x0, 0x3be, 0x0, r7}, &(0x7f00000010c0), &(0x7f0000001100)) io_uring_register$IORING_REGISTER_CLOCK(r8, 0x1d, &(0x7f0000001180), 0x0) 9.898717454s ago: executing program 3 (id=1278): syz_init_net_socket$ax25(0x3, 0x4, 0xf0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x10a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(0x0, 0x0) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600)) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000008) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "ccac2066bd6f85b1", "e4e9e0e1028bfedc978aa9d8bafb4535", "df67c7ea", "00fe4df90dd86740"}, 0x28) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffe}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x9c}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) 9.057145393s ago: executing program 5 (id=1280): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl726\x00', [0x5c22, 0x4, 0x1, 0x1, 0xfffffffe, 0x7, 0xb, 0x7, 0x5, 0x800, 0x8001, 0x2, 0x1000003d, 0x403, 0x7, 0xdc78, 0x5, 0x0, 0x0, 0xf675, 0x6, 0x1007fff, 0x200006, 0x7, 0x8004, 0x8, 0x2, 0x5, 0x8, 0x23]}) (fail_nth: 1) 8.530794337s ago: executing program 5 (id=1283): syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000400)=""/209, 0xd1) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x10000000, 0x1, 0x0, r2, 0x0}]) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x604a}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 8.529598017s ago: executing program 4 (id=1284): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/2, 0x2}], 0x1, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x1, 0x12141, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000240)=""/249, 0xf9}], 0x1, 0x5e, 0xfffffff8) 5.559929297s ago: executing program 2 (id=1289): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004079004318000000000001090224000100001009000000000033012205000905810308000c0907"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) r3 = getpid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRESOCT=r2], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000009402000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000000e000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000999000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x13, r1, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) pwrite64(r1, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}}, 0x8005c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32, @ANYBLOB="000040000000000000000000000100000000000018ca2b11c83decfb1d8d95a9d858f35191ca61673b1b279629077c0a5ee34fb0fc22fcf19282c0e7a3e3a5fb7a599a8d59e17157cd60a6238dfd302f63d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r8}, 0x7a) mremap(&(0x7f000096f000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) write(r9, &(0x7f0000000280), 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf908000400"], 0x10) 5.292874323s ago: executing program 5 (id=1290): add_key$user(&(0x7f0000000440), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)='7\f', 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000016000100fcfffffffbdbdf25017c00006ee8ffffff00000000310000"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x86f5c55736f7a5b) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r7, 0x29, 0x1, 0x0, &(0x7f00000013c0)) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc}) 5.168792238s ago: executing program 1 (id=1292): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = dup(r6) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) sendfile(r7, r8, 0x0, 0x80001d00c0d1) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x20000000) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xc, 0x77}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) 4.399502985s ago: executing program 4 (id=1293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 4.317252999s ago: executing program 4 (id=1294): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000380)=0x1, 0x4) r2 = dup(r0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x2) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f0000000040), 0x4001) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000001080)={0xa, 0x0, 0x4000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4000}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 4.207035789s ago: executing program 1 (id=1295): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = socket(0x2b, 0x1, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4a21, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xe1}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000810) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="6f73780e2f295ec252bb00d1b5bdd6a200"]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x6e2a, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) 3.152846887s ago: executing program 1 (id=1296): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.084800953s ago: executing program 3 (id=1297): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900674c000100000000000000000000000000002300000000000000fe8000000000000020000000000000bb00c600000000001c0a000000000000001bd9e676456ddfc6f89703498f3e37abcaf9bceb0c974a3765ef83", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000002d8800000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffff"], 0xc4}}, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)) 3.037054369s ago: executing program 4 (id=1298): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x1}, {}, {}, {0x9}, {0x1, 0x100003}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000002c0)={{0xdddd2000, 0xdddd1000, 0xd, 0xf7, 0x6, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0xffff1000, 0x1000, 0xe, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0xb, 0x1}, {0x0, 0xa002, 0x19, 0x8, 0x29, 0x6, 0xf5, 0x7, 0xf4, 0x6, 0x0, 0xc8}, {0x4, 0xdddd1000, 0xf, 0xc, 0x1, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xb, 0xc, 0x8, 0x6, 0x2, 0x14}, {0x4, 0x9000, 0x10, 0x0, 0xfc, 0x3, 0xf8, 0x81, 0x1, 0x8, 0x0, 0x81}, {0x166672000, 0x0, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0x6000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xffff1000, 0x5}, {0xeeeeb000, 0x1}, 0x1, 0x0, 0x6000, 0x404, 0x9, 0x9801, 0x1000, [0x9, 0x1, 0x5f, 0x3c4]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000000fedbdf2581000000000020000000000008000f"], 0x24}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2b13"}, @global=@item_012={0x2, 0x1, 0x0, '/?'}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x1, 'u@'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "d460fc85"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 2.981746685s ago: executing program 1 (id=1299): socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd(0x6e9) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.266657584s ago: executing program 3 (id=1300): socket$igmp(0x2, 0x3, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000100002800c0001"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x8, "cc7bc99aebba087aaff0fa0f4658ca556b2280b486f02c32dc99ea830b66a5e7", 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x25, &(0x7f0000000040)=0xffff7997, 0x4) gettimeofday(0x0, &(0x7f0000000040)) gettimeofday(&(0x7f0000000080), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) r8 = dup3(r5, r4, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"db0bbced01eb0100000082f8ffffff0700000006000000c100000000cf00dd00", r2}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$KDGKBENT(r8, 0x4b46, &(0x7f00000002c0)={0x4, 0xf6, 0x9}) ioctl$FBIOPAN_DISPLAY(r9, 0x4606, &(0x7f00000001c0)={0xe16, 0x0, 0xca0, 0x800, 0x3, 0x4, 0x4, 0x0, {0x2, 0xfffffffc}, {0x1, 0x2, 0x1}, {0x806000, 0xfffffffe}, {0x6, 0x6}, 0x0, 0x0, 0x181ffc35, 0x7ff, 0x0, 0x5, 0x7, 0x4, 0x4, 0x7, 0x9, 0x1, 0x7, 0x0, 0x2, 0x1}) 2.220935128s ago: executing program 2 (id=1301): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000380)=0x1, 0x4) r2 = dup(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x2) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f0000000040), 0x4001) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000001080)={0xa, 0x0, 0x4000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4000}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 2.027732596s ago: executing program 1 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f0000002300)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)="4ad7767e04673ef8b9598af9ae39c5210e4b126f7aa5", 0x16}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000020002c000000000000000100000001080000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x40}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="fcf207575570cdb0c65eb93fe2b3cd69e03287b7f89688a5b4e14a83af595cf205b35d148be2c5bc3701e46ea4ff614a6cf13012e06cb30a8353c8ca2b4808a88a8966399759fb7dc57d65fc24025e5ff54658080602ba53b771dbf8dcb7ca1f9d1f3a8fcac2ae761f8ce6ff0f3b17931bff26a4684ee4ad235a51d57fbbf05dc8769e0dc309e83f754e1310450d4f3e2cbda5983e7c54fb67900f8db373e348ee2fa64c7bb603e8919dd281a185366a8ee757bdb1f8f1", 0xb7}, {&(0x7f0000000b80)="7ad6e1fffc2ec9dc3818abfeec2f6202253cfb5eeb26e69748c90d63fc1a7562b235b9e755aa52bca5b9bbcabb4ad36e1f0cf7de8d6ac2ed4eced25e8a28c74c66b8", 0x42}, {&(0x7f0000000c00)="9c6471d6e9de7b72c5f1cf611694b3a6861ca53d7e72b338a4a19f8b832e95f11f9dd04cc3ccf4c6d3c3311c3a014fdaa85f02926167586cb0cf9015bd5f8b88f3af0d4936b5950180a49c870099a3b1f421c1cfdbb22e88da815cfad9eb1c9d805f41161f6c07822c2b3370cef10a6e85dff714a3a84f410df4185cece188a8a59d55090893bc71c26be9683d645884e48220bd6a6d73c96c191a32f7ab449734d35d19eb60e9312ec1ecefff0f510db32245ad18c4a31d039cddc2fc84192387a1404b2f194581c2d6c44e85295cd2edccbb5c68115accc65fc0b93d7e16de2691157a4265c47453", 0xe9}, {&(0x7f0000000d00)="0c42623e9fc567079abe394857dacab4f960452103c28bb19819def6b0274dd0549f147702c8fceac009016591129a170155effa73f69404838a1e4947369c4e254a811421fd1cad5844f0786861b351a7aab0a4", 0x54}, {&(0x7f0000000d80)="7d223101614e270209ef5cb6a6247bd03aa3ec687a7b56ae1bf8b15e5bade72819254b80de4e383b9bdc8db9857db3e6f80fb5f4ac360e76b71f274efc74393d0c9f856e0b790fd98701eb42d31496cd68ea7447c6f51633b494856c010e6ee85a55c368f08ee97f1656f90aa48d7b2b6620ed1b3de8a09de5ccb7d971abd35cd578db731a3d8f83ddd1389bac3f86c7e5b37efdf3a41d289ace4019ba9b646ac92071fa99421573d1fe4bcd550be336aeb9beb9bfdbe46e2f088026ab2dcf6cb38250c222d9f4ad4b567f97b0afeb194862900b0446f2a124b2539c4241df001596bef531c79438d713604116e00a3f5d12", 0xf2}], 0x5, &(0x7f0000000f00)=[@cred={{0x1c}}], 0x20, 0x80}}, {{&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000fc0)="7e8fc1f1d811916d74b67189f8f50ecc7d6479b35baf99c37b3a459aebcdb9f4f06e5be9953216aef9b5fd78eb21ca7d3319223682467fc456e426774ec201aeb62892e069f5a2fe45b136dfaf1fa20e3923bd8a0b22a3d7592af5", 0x5b}, {&(0x7f0000002200)="240562da4c375b33d1fb2dd6091a34f55c8bbd73dc57459878c190692ebd8fde141f51c51f9e750bdb95b24f681d48ba724afea98061eedd6bb92d9a33fec45a1a746ca71d0237b3efaabf23dc1d8b6766e208b3a445fe622bcd806622301c208dbd90dc63b29d4a4691f66fe879aac04c7dc6e1b7efc87eb116fcf1407253f9298f461d67e853b36e0d34065aa8289768121f41706517923bd73a9e0cd84078d526f8c23f0d2ed5e7069fd23f07f6bfbde1f455d7ccfe4f50859d1827996d21db3bc2449f1ece8541fde5de9286fd5aa2eced027c2872b46a", 0xd9}], 0x2}}], 0x3, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%-010d \x00'}, 0x1c) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff06000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r6 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x4000002, 0x0, 0x1}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x1, 0x0, 0xe}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x17, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000f0000000000000001010000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=0x0, @ANYBLOB="ec4ca36025a20000000000000000b70500000800000085000000a50000001867000008001e0000000000949b000095000000000000001800000051118159000000000200000018444000fcffffff10ffffffffffffff9500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x1000, &(0x7f0000001200)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x40}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000200)=[r4], &(0x7f0000000340)=[{0x4, 0xff, 0xe, 0x7}, {0x0, 0x4, 0xe, 0x5}, {0x0, 0x3, 0x3, 0x2}, {0x7fff, 0x4, 0xb, 0x5}, {0x2, 0x1, 0x8, 0xa}, {0x2, 0x1, 0xc, 0x3}], 0x10, 0x3}, 0x94) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x9000, 0x0, 0xfffffffffffffd5e, 0x0, 0x0, 0x0) wait4(r6, &(0x7f0000001100), 0x0, &(0x7f0000001140)) sendmsg$NFT_BATCH(r0, 0x0, 0x20040040) 1.922022389s ago: executing program 5 (id=1303): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x0, 0xb1000000}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffff001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x717}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x11) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0xc}, 0x4}}}, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) (async) epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYRES64=r5], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) (async) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYRES64=r5], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) 1.315455404s ago: executing program 2 (id=1304): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x40000}}], 0x18}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000940)=@newtaction={0x140, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x12c, 0x1, [@m_mirred={0xd8, 0x8, 0x0, 0x0, {{0xb}, {0x4}, {0xac, 0x6, "1ae9416b012d27818ee57265c323dd6ed5f3acd9074c029ff832d6bc235b3e6453a5fab4d3d3c0ac7c6aa61639d0c07bdcc8c4f09a32845b88f97a138945774252826dd5b9eca0e7702243bcb5803290bfd27e4a0f95a4a403a55d3773f1f9dc117dcd3ba6c878fe720beb902e9e44d25709941d95eb7f47f9cfb5d855089c7dd69c1dac5751ffd1003919435b30bdacbe793aa00f837d03fc61394b0a26be744e113b54aa708c15"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0x7f) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) r6 = dup(r4) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x104, 0x2c, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xd0, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x7, 0x1, 0x8, 0x0, 0xfff, 0x5, 0x58f}}, @TCA_U32_LINK={0x8, 0x3, 0xffffffff}, @TCA_U32_HASH={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x39}, @TCA_U32_POLICE={0xa0, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x20000000, 0xe1c7, 0x1ff, 0x7f, {0x2, 0x0, 0xb71, 0x401, 0x401, 0x80000000}, {0x2, 0x3, 0x2f2, 0x7, 0x4, 0xf}, 0x5, 0x400, 0x80000000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xde5, 0x7, 0x67, 0xfffffff8, 0x5, {0x7, 0x2, 0x3, 0x5, 0x6, 0x1}, {0x7, 0x0, 0x7f, 0x4, 0x7ff, 0x7fffffff}, 0x4, 0x7, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="0142d90a740caf5be7262ea0cc9915873f6a4884b81c5c7a741989336fab6e5d4fae19cbd057f59350b57c0edac5dc346c76912a22c62d7929b31f3a10514b91457642140b1fce26b2f99a25c62e7baee13afab6818cf8880942121d4929663a4759aa805d1736c702c2b9b208f85c965cde013db73b1352dcf19d481894a7a521442bd23abf669b5b3f75fd7a95ce17805d4ff4ea43ef38d82517443b17ef4f539851d25fe3e5fa63d4fd18d22e1b372b03ff095d91727549a034cdcaf49c3d50fe3f5ccd88ca", 0xc7}, {&(0x7f0000000100)="5623a55397d2d21e09a0be6e7b37f3b4f7792f96d5ea1c0f0703efc97bccfbc45bc6386df2300b0c6b77954ef109bfe040e4cd908d251f7be34266e5439d94c24fba420d1729425a6b0f18716e61b9708c97d8cb2cbee2c37dc2acaad9aa63e3a0849f92ade20f45d67fc161ed898c2797a9a948830cc53839d1695b673f644f92fc59a5ecea9db46a599ebef12a35dbd0750974edc5e494a67d41018e08ff678794cd9fdde863620924d0ad7d0d98dc3637225fdcc0b3e46738e43e18c2ea6b1e06b2edabf803b946df9c24ef3431c64f91b0a4919f3162c0bd6a53b1892a7a1397b1b8145fb42a8ab0214900", 0xed}, {&(0x7f0000000440)="3fff2096a966a1411b4bd88abb36493193a9b3b2769671b38897b90c9ec7c6601c03f69b88583eceffd0cfaec1a366fcb6cb9f1198a55e61db8e8922f59e4eb60ddfd98810a4e13d9f40f889fff9f9a473e496a6f7c9f8c88e34abf1d8fbdd3837eb97305b52efa3efa9cfb1ca276b5b8178e701b354bc7d03d0d21265f4046ca25e3a85dcb1b19cf144e634c06b7b46b1f85b7b95a543f407fd9a47113e43dc9099d51428ba64ce382fa18d6ade3083907c7fe1c3cb503d03b04956f6c7ca02ba9b2965ba1a7847", 0xc8}, {&(0x7f00000002c0)="8ea63dbda4c19ca9e6c824f045b6316cee2c76bede654d19d850647c13698a91b4580d694cc2dabb76a79133d632032aef8b022f32611a64fd3289a6b6fc1457cc5351de072e655d67cbe1257c6f524333223b18c466adc2d6e9cf578c7d0d5e86cb9ae8e44db5f35df39c48c33dfeeb006e0a3588a2e7e84b65574547f77c2c0545a27ed387ebdc9727e779ab3d5a5898db9d86c25720a8f9073c5e9698c5b209b68ec2ea14bee79ac8", 0xaa}], 0x4) 1.257127388s ago: executing program 5 (id=1305): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = dup(r6) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) sendfile(r7, r8, 0x0, 0x80001d00c0d1) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x20000000) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xc, 0x77}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) 619.989372ms ago: executing program 1 (id=1306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001021}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80000000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x592}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]]}, 0xe4}, 0x1, 0x0, 0x0, 0x80d5}, 0x20000810) r2 = socket$inet6(0xa, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000000)='0') socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xb, &(0x7f0000000000)) timer_create(0x3, 0x0, 0x0) r4 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x1eb, @loopback, 0x7f}, 0x1c) 605.658256ms ago: executing program 3 (id=1307): syz_init_net_socket$ax25(0x3, 0x4, 0xf0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x10a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(0x0, 0x0) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600)) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000008) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "ccac2066bd6f85b1", "e4e9e0e1028bfedc978aa9d8bafb4535", "df67c7ea", "00fe4df90dd86740"}, 0x28) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffe}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x9c}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) 508.750721ms ago: executing program 2 (id=1308): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xf) socket(0xa, 0x3, 0xff) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x3c) 417.519634ms ago: executing program 2 (id=1309): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 338.14313ms ago: executing program 5 (id=1310): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) (fail_nth: 1) 0s ago: executing program 2 (id=1311): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) socket$inet6(0xa, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000036c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x478, 0x0, 0x1c0, 0x2a8, 0x2a8, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, &(0x7f0000000380), {[{{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x23}, 0xffffffff, 0xff, 'syz_tun\x00', 'veth0_vlan\x00', {}, {0xff}, 0x2, 0x1, 0x4a}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfff, @broadcast, 0x4e24}}}, {{@ip={@multicast2, @private=0xa010102, 0xff000000, 0xff, 'dvmrp0\x00', 'vcan0\x00', {}, {}, 0x38, 0x3, 0x20}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x4, 0xfb8d09d3905bd9dd, 0x0, 0x1], 0x5}, {0x2, [0x0, 0x6, 0x3, 0x1, 0x0, 0x6], 0x6, 0x4}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x2f}, 0xff, 0x0, 'batadv_slave_1\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x5c, 0x3, 0x22}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x4, @local, 0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x10a, 0x2) kernel console output (not intermixed with test programs): evice descriptor read/64, error -71 [ 352.252441][ T5874] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 352.300938][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 352.310335][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 352.358470][ T29] audit: type=1400 audit(1771230091.940:563): avc: denied { read write } for pid=9191 comm="syz.5.811" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 352.416903][ T29] audit: type=1400 audit(1771230091.940:564): avc: denied { open } for pid=9191 comm="syz.5.811" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 352.460894][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 352.460896][ T9] usb 4-1: device descriptor read/64, error -71 [ 352.463134][ T5874] usb 5-1: unable to get BOS descriptor or descriptor too short [ 352.481941][ T5874] usb 5-1: config 8 has an invalid interface number: 184 but max is 0 [ 352.497432][ T5874] usb 5-1: config 8 has no interface number 0 [ 352.504000][ T5874] usb 5-1: config 8 interface 184 has no altsetting 0 [ 352.513054][ T5874] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= d.3d [ 352.522937][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.531126][ T5874] usb 5-1: Product: syz [ 352.535437][ T5874] usb 5-1: Manufacturer: syz [ 352.540053][ T5874] usb 5-1: SerialNumber: syz [ 352.679206][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 352.694613][ T9] usb usb4-port1: attempt power cycle [ 352.759597][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.771676][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.875141][ T5874] usb 5-1: USB disconnect, device number 24 [ 353.050575][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 353.093475][ T9] usb 4-1: device descriptor read/8, error -71 [ 353.611148][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 353.820173][ T9] usb 4-1: device not accepting address 29, error -71 [ 353.827425][ T9] usb usb4-port1: unable to enumerate USB device [ 354.150056][ T5874] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 354.391625][ T5874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.403648][ T5874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58398, setting to 1024 [ 354.423839][ T5874] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 354.444121][ T5874] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.462521][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.499261][ T9220] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 354.512162][ T5874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.757827][ T9227] binder: BINDER_SET_CONTEXT_MGR already set [ 354.765480][ T5923] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 354.827608][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 354.836695][ T9227] binder: 9226:9227 ioctl 4018620d 200000004a80 returned -16 [ 354.928032][ T9231] fuse: Unknown parameter 'group_id00000000000000000000' [ 354.957244][ T5923] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 355.093786][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 355.120005][ T5923] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 355.129170][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 355.140333][ T5923] usb 4-1: Product: syz [ 355.202652][ T5874] usb 5-1: USB disconnect, device number 25 [ 355.278085][ T5923] usb 4-1: Manufacturer: syz [ 355.290749][ T5923] usb 4-1: SerialNumber: syz [ 355.300620][ T5923] usb 4-1: config 0 descriptor?? [ 355.361303][ T5923] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 355.472435][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.429878][ T29] audit: type=1400 audit(1771230096.032:565): avc: denied { ioctl } for pid=9243 comm="syz.4.826" path="socket:[21858]" dev="sockfs" ino=21858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 356.513343][ T9249] binder: 9248:9249 ioctl 4018620d 0 returned -22 [ 357.205300][ T9256] Bluetooth: MGMT ver 1.23 [ 357.218677][ T5874] usb 4-1: USB disconnect, device number 30 [ 357.323221][ T9259] netlink: 'syz.2.831': attribute type 2 has an invalid length. [ 357.614125][ T29] audit: type=1400 audit(1771230097.223:566): avc: denied { mounton } for pid=9262 comm="syz.3.833" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 357.639686][ T9263] 9pnet_fd: p9_fd_create_tcp (9263): problem connecting socket to 127.0.0.1 [ 358.148353][ T5923] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 358.912821][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 358.931523][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 358.950735][ T5923] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 358.965940][ T5923] usb 5-1: config 1 interface 0 has no altsetting 1 [ 358.976040][ T5923] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 358.993278][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.004409][ T5923] usb 5-1: Product: syz [ 359.074688][ T5923] usb 5-1: Manufacturer: syz [ 359.094787][ T5923] usb 5-1: SerialNumber: syz [ 359.120155][ T5923] smsusb:smsusb_probe: board id=8, interface number 0 [ 359.267464][ T5874] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 359.302036][ T29] audit: type=1400 audit(1771230098.914:567): avc: denied { write } for pid=9285 comm="syz.5.841" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 359.360173][ T29] audit: type=1400 audit(1771230098.944:568): avc: denied { open } for pid=9285 comm="syz.5.841" path="/38/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 359.417476][ T29] audit: type=1400 audit(1771230098.984:569): avc: denied { ioctl } for pid=9285 comm="syz.5.841" path="/38/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 359.467404][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 359.474714][ T5874] usb 4-1: config 39 has an invalid interface number: 251 but max is 0 [ 359.487589][ T5874] usb 4-1: config 39 contains an unexpected descriptor of type 0x2, skipping [ 359.507275][ T5874] usb 4-1: config 39 has no interface number 0 [ 359.527389][ T5874] usb 4-1: config 39 interface 251 altsetting 127 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 359.563416][ T5874] usb 4-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 359.587657][ T5874] usb 4-1: config 39 interface 251 altsetting 127 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 359.641751][ T5874] usb 4-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 359.683017][ T5874] usb 4-1: config 39 interface 251 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 359.781894][ T5874] usb 4-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 359.794220][ T5874] usb 4-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 359.807161][ T5874] usb 4-1: config 39 interface 251 altsetting 127 bulk endpoint 0x9 has invalid maxpacket 1024 [ 359.824656][ T5874] usb 4-1: config 39 interface 251 has no altsetting 0 [ 359.833729][ T5874] usb 4-1: New USB device found, idVendor=0c52, idProduct=2883, bcdDevice=2e.84 [ 359.844669][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.852863][ T5874] usb 4-1: Product: 嵂潩ꀤ웦谌旿鵆ఫҶë†ì°„뛴㥭그깒뺌ëºä‚¦é«é“¿è¿®æ•­â¥±æ§½ä•€á‚뜽á组æ«è‡†è¨„鷤⡌猯햠ꭜሕ惌╂㱧ë›ï‚žæµìª¿ë¼žç–è·©â•êª«åƒ¼â§£æŽ†â‡¢å±¡ì€¯ì«“ë±å¡­â•â›ã°‡à¹¡âª¢ã¿–氥䡗䔪矠ã䇂쑒臛䮭ڰ벡᳅ﭑ῱â¤â°çŸ‘鳄à§åˆ®æµ’çž“é”ᢒݷᮘ鰤澟猸ଭ딯Þ祕䫴ê­Íˆç§“ [ 359.926285][ T5874] usb 4-1: Manufacturer: ⷜ俰≡숣펜í“꼟å©â°§í’°âƒ¥ã–Ÿáµã†žæ€ä’›ç¨Œæ±‚㈡뤕嵻ﯴਜ袣ׄæ·ä³‰æ©§äžé˜ë²ï“©ì»¥ï§›ê•®æ¾‚ᵳꋺ翑꦳쒳ç¬ä”¥ëŠ‡ [ 359.977190][ T5874] usb 4-1: SerialNumber: Д [ 359.994992][ T5923] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 360.008712][ T5923] smsusb 5-1:1.0: probe with driver smsusb failed with error -71 [ 360.058916][ T9284] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 360.382079][ T5923] usb 5-1: USB disconnect, device number 26 [ 360.503846][ T9284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.524287][ T9284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.584013][ T5874] ftdi_sio 4-1:39.251: FTDI USB Serial Device converter detected [ 360.605533][ T29] audit: type=1400 audit(1771230100.214:570): avc: denied { create } for pid=9296 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 360.736474][ T5806] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 360.835211][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.843930][ T5874] ftdi_sio ttyUSB0: unknown device type: 0x2e84 [ 360.862055][ T5874] usb 4-1: USB disconnect, device number 31 [ 360.878620][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.878840][ T5874] ftdi_sio 4-1:39.251: device disconnected [ 361.968084][ T9308] 9p: Unknown uid 00000000004294967295 [ 362.264370][ T5806] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 362.286129][ T9311] syzkaller0: entered promiscuous mode [ 362.306033][ T9311] syzkaller0: entered allmulticast mode [ 362.354057][ T9315] 0: reclassify loop, rule prio 0, protocol 700 [ 362.906300][ T9322] Invalid ELF header type: 3 != 1 [ 362.987950][ T29] audit: type=1400 audit(1771230102.496:571): avc: denied { watch watch_reads } for pid=9319 comm="syz.5.850" path="pipe:[17351]" dev="pipefs" ino=17351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 363.975770][ T29] audit: type=1400 audit(1771230102.506:572): avc: denied { module_load } for pid=9319 comm="syz.5.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 366.305321][ T9362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.371764][ T9362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.053693][ T29] audit: type=1400 audit(1771230106.257:573): avc: denied { listen } for pid=9364 comm="syz.5.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.103576][ T9] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 367.193978][ T29] audit: type=1400 audit(1771230106.257:574): avc: denied { accept } for pid=9364 comm="syz.5.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.358486][ T9] usb 5-1: config 65 has an invalid interface number: 95 but max is 0 [ 367.366813][ T9] usb 5-1: config 65 has no interface number 0 [ 367.529527][ T9] usb 5-1: string descriptor 0 read error: -22 [ 367.536647][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 367.602338][ T9374] netlink: 68 bytes leftover after parsing attributes in process `syz.5.863'. [ 368.083773][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.269028][ T9] usbtest 5-1:65.95: Linux gadget zero [ 368.277980][ T9] usbtest 5-1:65.95: low-speed {control in/out} tests (+alt) [ 368.495304][ T9360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.031789][ T29] audit: type=1400 audit(1771230108.168:575): avc: denied { setopt } for pid=9381 comm="syz.5.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.079599][ T29] audit: type=1326 audit(1771230108.669:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0a99bf79 code=0x7ffc0000 [ 369.121334][ T29] audit: type=1326 audit(1771230108.669:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d0a95c84e code=0x7ffc0000 [ 369.196569][ T29] audit: type=1326 audit(1771230108.669:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0a99bf79 code=0x7ffc0000 [ 369.222027][ T29] audit: type=1326 audit(1771230108.679:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d0a95c84e code=0x7ffc0000 [ 369.251862][ T29] audit: type=1326 audit(1771230108.689:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d0a95c84e code=0x7ffc0000 [ 369.293663][ T29] audit: type=1326 audit(1771230108.689:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d0a95c84e code=0x7ffc0000 [ 369.317625][ T29] audit: type=1326 audit(1771230108.689:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d0a95c84e code=0x7ffc0000 [ 369.441408][ T29] audit: type=1326 audit(1771230108.689:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d0a95c84e code=0x7ffc0000 [ 369.754597][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.772361][ T29] audit: type=1326 audit(1771230108.689:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d0a95c84e code=0x7ffc0000 [ 370.298550][ T9404] xt_socket: unknown flags 0x4 [ 370.520902][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.875'. [ 370.530321][ T9411] netlink: 44 bytes leftover after parsing attributes in process `syz.1.873'. [ 371.941426][ T5853] usb 5-1: USB disconnect, device number 27 [ 372.025506][ T9423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.208137][ T9429] netlink: 'syz.2.879': attribute type 11 has an invalid length. [ 372.217588][ T9423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.395265][ T9436] netlink: 'syz.5.877': attribute type 1 has an invalid length. [ 373.548108][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.565566][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.150274][ T9423] syz.1.876 (9423) used greatest stack depth: 19672 bytes left [ 375.161482][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 375.161495][ T29] audit: type=1400 audit(1771230114.782:786): avc: denied { accept } for pid=9433 comm="syz.4.881" lport=54898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 378.977614][ T29] audit: type=1400 audit(1771230118.574:787): avc: denied { bind } for pid=9465 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 379.335167][ T29] audit: type=1400 audit(1771230118.954:788): avc: denied { read } for pid=9477 comm="syz.5.892" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 379.357930][ T29] audit: type=1400 audit(1771230118.954:789): avc: denied { open } for pid=9477 comm="syz.5.892" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 379.438344][ T5923] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 379.457479][ T5874] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 379.597538][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 379.629066][ T5923] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 379.669292][ T29] audit: type=1400 audit(1771230119.274:790): avc: denied { ioctl } for pid=9459 comm="syz.1.886" path="socket:[22479]" dev="sockfs" ino=22479 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.698108][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.706623][ T5923] usb 4-1: Product: syz [ 379.750876][ T5923] usb 4-1: Manufacturer: syz [ 379.797395][ T5874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.817142][ T5923] usb 4-1: SerialNumber: syz [ 379.827196][ T5874] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 379.858330][ T5874] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.877791][ T5923] usb 4-1: config 0 descriptor?? [ 379.894677][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.948125][ T9475] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 379.994552][ T5874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.218166][ T5923] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 380.248828][ T5874] usb 5-1: USB disconnect, device number 28 [ 380.430573][ T9473] xt_TPROXY: Can be used only with -p tcp or -p udp [ 380.843036][ T5923] usb write operation failed. (-71) [ 380.882040][ T5923] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 380.977057][ T5923] dvbdev: DVB: registering new adapter (Terratec H7) [ 380.983785][ T5923] usb 4-1: media controller created [ 381.023178][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 381.132194][ T5923] usb read operation failed. (-71) [ 381.208270][ T5923] usb write operation failed. (-71) [ 381.363666][ T5923] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 381.542529][ T5923] usb 4-1: USB disconnect, device number 32 [ 382.388891][ T9511] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 382.396345][ T9511] ALSA: mixer_oss: invalid index 1374389 [ 382.484277][ T9518] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 382.490804][ T9518] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 382.524310][ T9518] vhci_hcd vhci_hcd.0: Device attached [ 382.655784][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 382.715793][ T5923] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 382.795692][ T5853] usb 42-1: SetAddress Request (2) to port 0 [ 382.803093][ T5853] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 382.822420][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 382.841679][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 382.861879][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 382.875755][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 382.885304][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 382.894618][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 382.895438][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 382.912496][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.921395][ T5923] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 382.938112][ T5923] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 382.942641][ T9] usb 4-1: config 0 descriptor?? [ 382.961669][ T5923] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 382.980537][ T5923] usb 5-1: config 128 has no interface number 0 [ 382.994055][ T5923] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 383.016865][ T5923] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.037627][ T5923] usb 5-1: config 128 interface 127 has no altsetting 0 [ 383.116110][ T5923] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 383.131673][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.150037][ T5923] usb 5-1: Product: syz [ 383.176799][ T5923] usb 5-1: Manufacturer: syz [ 383.197839][ T5923] usb 5-1: SerialNumber: syz [ 383.247142][ T29] audit: type=1400 audit(1771230122.866:791): avc: denied { call } for pid=9528 comm="syz.5.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 383.416329][ T9520] vhci_hcd: connection reset by peer [ 383.471141][ T35] vhci_hcd vhci_hcd.4: stop threads [ 383.495307][ T35] vhci_hcd vhci_hcd.4: release socket [ 383.621180][ T35] vhci_hcd vhci_hcd.4: disconnect device [ 384.177267][ T5923] usb 5-1: USB disconnect, device number 29 [ 384.271186][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.662790][ T9536] NILFS (nullb0): couldn't find nilfs on the device [ 385.085337][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 385.800819][ T9568] Scaler: ================= START STATUS ================= [ 385.854370][ T9568] Scaler: ================== END STATUS ================== [ 386.122567][ T9574] xt_TPROXY: Can be used only with -p tcp or -p udp [ 386.226320][ T9568] vti0: entered promiscuous mode [ 386.552924][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 386.611245][ T9577] FAULT_INJECTION: forcing a failure. [ 386.611245][ T9577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.723756][ T9577] CPU: 1 UID: 0 PID: 9577 Comm: syz.4.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.723785][ T9577] Tainted: [L]=SOFTLOCKUP [ 386.723791][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.723801][ T9577] Call Trace: [ 386.723807][ T9577] [ 386.723813][ T9577] dump_stack_lvl+0x100/0x190 [ 386.723846][ T9577] should_fail_ex.cold+0x5/0xa [ 386.723870][ T9577] _copy_to_user+0x32/0xd0 [ 386.723891][ T9577] simple_read_from_buffer+0xcb/0x170 [ 386.723919][ T9577] proc_fail_nth_read+0x1af/0x230 [ 386.723937][ T9577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.723967][ T9577] ? rw_verify_area+0xce/0x6d0 [ 386.723987][ T9577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.724015][ T9577] vfs_read+0x1e4/0xb30 [ 386.724040][ T9577] ? __pfx_vfs_read+0x10/0x10 [ 386.724062][ T9577] ? __fget_files+0x215/0x3d0 [ 386.724092][ T9577] ? __fget_files+0x21f/0x3d0 [ 386.724124][ T9577] ksys_read+0x12a/0x250 [ 386.724145][ T9577] ? __pfx_ksys_read+0x10/0x10 [ 386.724175][ T9577] do_syscall_64+0x106/0xf80 [ 386.724195][ T9577] ? clear_bhb_loop+0x40/0x90 [ 386.724217][ T9577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.724240][ T9577] RIP: 0033:0x7f2d0a95c84e [ 386.724254][ T9577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 386.724270][ T9577] RSP: 002b:00007f2d08bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.724287][ T9577] RAX: ffffffffffffffda RBX: 00007f2d08bf66c0 RCX: 00007f2d0a95c84e [ 386.724298][ T9577] RDX: 000000000000000f RSI: 00007f2d08bf60a0 RDI: 0000000000000004 [ 386.724308][ T9577] RBP: 00007f2d08bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 386.724318][ T9577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.724328][ T9577] R13: 00007f2d0ac16038 R14: 00007f2d0ac15fa0 R15: 00007ffe07e8f3f8 [ 386.724352][ T9577] [ 387.941876][ T5853] usb 42-1: device descriptor read/8, error -110 [ 388.222989][ T9] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 388.232935][ T9] hdpvr 4-1:0.0: device init failed [ 388.260389][ T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 388.405836][ T9] usb 4-1: USB disconnect, device number 33 [ 388.572916][ T29] audit: type=1400 audit(1771230128.168:792): avc: denied { listen } for pid=9597 comm="syz.5.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 388.598087][ T5853] usb usb42-port1: attempt power cycle [ 388.628322][ T9604] FAULT_INJECTION: forcing a failure. [ 388.628322][ T9604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.658469][ T9604] CPU: 0 UID: 0 PID: 9604 Comm: syz.5.924 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.658496][ T9604] Tainted: [L]=SOFTLOCKUP [ 388.658500][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.658507][ T9604] Call Trace: [ 388.658511][ T9604] [ 388.658515][ T9604] dump_stack_lvl+0x100/0x190 [ 388.658536][ T9604] should_fail_ex.cold+0x5/0xa [ 388.658550][ T9604] _copy_from_user+0x2e/0xd0 [ 388.658569][ T9604] restore_altstack+0x98/0x170 [ 388.658586][ T9604] ? __pfx_restore_altstack+0x10/0x10 [ 388.658604][ T9604] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.658616][ T9604] ? lockdep_hardirqs_on+0x78/0x100 [ 388.658628][ T9604] ? _raw_spin_unlock_irq+0x2e/0x50 [ 388.658641][ T9604] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 388.658657][ T9604] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 388.658672][ T9604] ? __rcu_read_unlock+0x27f/0x5e0 [ 388.658692][ T9604] do_syscall_64+0x106/0xf80 [ 388.658706][ T9604] ? clear_bhb_loop+0x40/0x90 [ 388.658719][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.658730][ T9604] RIP: 0033:0x7f851a53d399 [ 388.658740][ T9604] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 388.658751][ T9604] RSP: 002b:00007f851b501300 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 388.658762][ T9604] RAX: ffffffffffffffda RBX: 00007f851b5026c0 RCX: 00007f851a53d399 [ 388.658768][ T9604] RDX: 00007f851b501300 RSI: 00007f851b501430 RDI: 0000000000000021 [ 388.658775][ T9604] RBP: 00007f851b502090 R08: 0000000000000000 R09: 0000000000000000 [ 388.658781][ T9604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 388.658787][ T9604] R13: 00007f851a816128 R14: 00007f851a816090 R15: 00007ffdf6209d98 [ 388.658800][ T9604] [ 389.125422][ T9617] FAULT_INJECTION: forcing a failure. [ 389.125422][ T9617] name failslab, interval 1, probability 0, space 0, times 0 [ 389.192765][ T9617] CPU: 0 UID: 0 PID: 9617 Comm: syz.3.930 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.192785][ T9617] Tainted: [L]=SOFTLOCKUP [ 389.192789][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.192795][ T9617] Call Trace: [ 389.192799][ T9617] [ 389.192804][ T9617] dump_stack_lvl+0x100/0x190 [ 389.192826][ T9617] should_fail_ex.cold+0x5/0xa [ 389.192840][ T9617] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 389.192858][ T9617] should_failslab+0xc2/0x120 [ 389.192875][ T9617] __kmalloc_noprof+0xe0/0x850 [ 389.192891][ T9617] genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 389.192912][ T9617] genl_family_rcv_msg_doit+0xc7/0x300 [ 389.192930][ T9617] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 389.192952][ T9617] ? bpf_lsm_capable+0x9/0x10 [ 389.192968][ T9617] ? security_capable+0x80/0x260 [ 389.192984][ T9617] genl_rcv_msg+0x560/0x800 [ 389.193003][ T9617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 389.193020][ T9617] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 389.193036][ T9617] ? __lock_acquire+0x4a5/0x2630 [ 389.193055][ T9617] netlink_rcv_skb+0x159/0x420 [ 389.193070][ T9617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 389.193087][ T9617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 389.193108][ T9617] ? netlink_deliver_tap+0x1ae/0xcc0 [ 389.193123][ T9617] genl_rcv+0x28/0x40 [ 389.193138][ T9617] netlink_unicast+0x5aa/0x870 [ 389.193155][ T9617] ? __pfx_netlink_unicast+0x10/0x10 [ 389.193174][ T9617] netlink_sendmsg+0x8b0/0xda0 [ 389.193192][ T9617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.193206][ T9617] ? __might_fault+0x20/0x140 [ 389.193224][ T9617] ____sys_sendmsg+0xa54/0xc30 [ 389.193241][ T9617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.193264][ T9617] ___sys_sendmsg+0x190/0x1e0 [ 389.193281][ T9617] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.193318][ T9617] __sys_sendmsg+0x170/0x220 [ 389.193331][ T9617] ? __pfx___sys_sendmsg+0x10/0x10 [ 389.193352][ T9617] do_syscall_64+0x106/0xf80 [ 389.193366][ T9617] ? clear_bhb_loop+0x40/0x90 [ 389.193380][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.193392][ T9617] RIP: 0033:0x7f121f59bf79 [ 389.193402][ T9617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.193412][ T9617] RSP: 002b:00007f12204ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.193423][ T9617] RAX: ffffffffffffffda RBX: 00007f121f815fa0 RCX: 00007f121f59bf79 [ 389.193430][ T9617] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 389.193436][ T9617] RBP: 00007f12204ee090 R08: 0000000000000000 R09: 0000000000000000 [ 389.193442][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.193448][ T9617] R13: 00007f121f816038 R14: 00007f121f815fa0 R15: 00007ffddd44fe78 [ 389.193462][ T9617] [ 389.902545][ T5853] usb usb42-port1: unable to enumerate USB device [ 390.443161][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.469205][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.491457][ T29] audit: type=1400 audit(1771230130.109:793): avc: denied { ioctl } for pid=9629 comm="syz.3.935" path="socket:[23585]" dev="sockfs" ino=23585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 390.562169][ T9] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 390.603318][ T9636] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 390.671806][ T5853] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 390.723555][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 390.744729][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 390.769522][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 390.791716][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 19, changing to 4 [ 390.811632][ T5853] usb 4-1: device descriptor read/64, error -71 [ 390.819022][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 479, setting to 0 [ 390.839141][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 390.855611][ T9] usb 5-1: string descriptor 0 read error: -22 [ 390.862126][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.873259][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.916304][ T9624] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 390.926579][ T9] usb 5-1: low speed audio streaming not supported [ 391.027881][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.044687][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.092193][ T5853] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 391.502428][ T9] usb 5-1: USB disconnect, device number 30 [ 391.641314][ T5853] usb 4-1: device descriptor read/64, error -71 [ 391.751347][ T5853] usb usb4-port1: attempt power cycle [ 392.033291][ T9652] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 392.111500][ T5853] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 392.151579][ T5853] usb 4-1: device descriptor read/8, error -71 [ 392.362127][ T29] audit: type=1400 audit(1771230131.990:794): avc: denied { ioctl } for pid=9659 comm="syz.1.946" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 392.420929][ T5853] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 392.440551][ T9661] netlink: 60 bytes leftover after parsing attributes in process `syz.2.943'. [ 392.522341][ T5853] usb 4-1: device descriptor read/8, error -71 [ 392.905433][ T9672] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.912597][ T9672] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.059803][ T5853] usb usb4-port1: unable to enumerate USB device [ 393.344523][ T9672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.417319][ T9672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.572550][ T9672] batman_adv: batadv0: Interface deactivated: vlan1 [ 393.715856][ T29] audit: type=1400 audit(1771230133.311:795): avc: denied { mount } for pid=9681 comm="syz.3.950" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 393.742533][ T29] audit: type=1400 audit(1771230133.321:796): avc: denied { read } for pid=9681 comm="syz.3.950" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 393.764629][ T29] audit: type=1400 audit(1771230133.321:797): avc: denied { open } for pid=9681 comm="syz.3.950" path="/170/file0" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 393.950710][ T5874] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 394.037703][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.044991][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.129085][ T9679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.151574][ T9679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.208947][ T5874] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 394.237668][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.257988][ T5874] usb 4-1: Product: syz [ 394.268314][ T5874] usb 4-1: Manufacturer: syz [ 394.285400][ T5874] usb 4-1: SerialNumber: syz [ 394.310881][ T5874] usb 4-1: config 0 descriptor?? [ 394.374646][ T9689] fuse: Bad value for 'user_id' [ 394.380105][ T5806] Bluetooth: hci5: urb ffff88802a017700 submission failed (2) [ 394.409985][ T9689] fuse: Bad value for 'user_id' [ 394.859037][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.868055][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.005910][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.209435][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.228539][ T9054] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.249140][ T9054] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.239290][ T9054] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.266934][ T9054] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.866581][ T24] usb 4-1: USB disconnect, device number 38 [ 396.890530][ T29] audit: type=1400 audit(1771230136.523:798): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 398.105814][ T29] audit: type=1400 audit(1771230137.733:799): avc: denied { ioctl } for pid=9715 comm="syz.1.961" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 398.395044][ T29] audit: type=1400 audit(1771230138.023:800): avc: denied { ioctl } for pid=9726 comm="syz.4.955" path="socket:[23094]" dev="sockfs" ino=23094 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 399.649507][ T29] audit: type=1400 audit(1771230139.284:801): avc: denied { search } for pid=9741 comm="syz.2.968" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 399.737240][ T29] audit: type=1400 audit(1771230139.314:802): avc: denied { search } for pid=9741 comm="syz.2.968" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 399.828402][ T29] audit: type=1400 audit(1771230139.314:803): avc: denied { search } for pid=9741 comm="syz.2.968" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 399.857389][ T9745] FAULT_INJECTION: forcing a failure. [ 399.857389][ T9745] name failslab, interval 1, probability 0, space 0, times 0 [ 399.877392][ T29] audit: type=1400 audit(1771230139.314:804): avc: denied { search } for pid=9741 comm="syz.2.968" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 399.905906][ T29] audit: type=1400 audit(1771230139.314:805): avc: denied { add_name } for pid=9741 comm="syz.2.968" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 400.008050][ T29] audit: type=1400 audit(1771230139.314:806): avc: denied { create } for pid=9741 comm="syz.2.968" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 400.113886][ T9745] CPU: 1 UID: 0 PID: 9745 Comm: syz.5.969 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.113915][ T9745] Tainted: [L]=SOFTLOCKUP [ 400.113921][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.113930][ T9745] Call Trace: [ 400.113936][ T9745] [ 400.113943][ T9745] dump_stack_lvl+0x100/0x190 [ 400.113972][ T9745] should_fail_ex.cold+0x5/0xa [ 400.113995][ T9745] should_failslab+0xc2/0x120 [ 400.114020][ T9745] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 400.114040][ T9745] ? do_getname+0x35/0x390 [ 400.114057][ T9745] ? ksys_write+0x190/0x250 [ 400.114082][ T9745] do_getname+0x35/0x390 [ 400.114102][ T9745] do_sys_openat2+0xc5/0x1e0 [ 400.114120][ T9745] ? __pfx_do_sys_openat2+0x10/0x10 [ 400.114139][ T9745] ? __fget_files+0x21f/0x3d0 [ 400.114179][ T9745] __x64_sys_creat+0xcc/0x120 [ 400.114197][ T9745] ? __pfx___x64_sys_creat+0x10/0x10 [ 400.114215][ T9745] ? __pfx_ksys_write+0x10/0x10 [ 400.114240][ T9745] ? do_syscall_64+0x95/0xf80 [ 400.114262][ T9745] do_syscall_64+0x106/0xf80 [ 400.114282][ T9745] ? clear_bhb_loop+0x40/0x90 [ 400.114302][ T9745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.114319][ T9745] RIP: 0033:0x7f851a59bf79 [ 400.114333][ T9745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.114349][ T9745] RSP: 002b:00007f851b523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 400.114366][ T9745] RAX: ffffffffffffffda RBX: 00007f851a815fa0 RCX: 00007f851a59bf79 [ 400.114377][ T9745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001940 [ 400.114387][ T9745] RBP: 00007f851b523090 R08: 0000000000000000 R09: 0000000000000000 [ 400.114396][ T9745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.114406][ T9745] R13: 00007f851a816038 R14: 00007f851a815fa0 R15: 00007ffdf6209d98 [ 400.114428][ T9745] [ 400.116596][ T9753] fuse: Bad value for 'user_id' [ 400.408218][ T9743] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 400.427004][ T29] audit: type=1400 audit(1771230139.424:807): avc: denied { lock } for pid=9736 comm="syz.4.966" path="socket:[23110]" dev="sockfs" ino=23110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.487144][ T5806] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 400.487206][ T5806] Bluetooth: hci2: connection err: -111 [ 400.522754][ T29] audit: type=1400 audit(1771230139.624:808): avc: denied { read } for pid=9746 comm="syz.2.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.540354][ T9753] fuse: Bad value for 'user_id' [ 400.547121][ T29] audit: type=1400 audit(1771230140.054:809): avc: denied { setopt } for pid=9749 comm="syz.1.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 400.675417][ T9759] bridge1: entered promiscuous mode [ 400.696898][ T9759] bridge1: entered allmulticast mode [ 400.966122][ T9774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.453476][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.982'. [ 401.604789][ T29] audit: type=1400 audit(1771230141.235:810): avc: denied { map } for pid=9776 comm="syz.1.980" path="socket:[23205]" dev="sockfs" ino=23205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 401.918538][ T9802] FAULT_INJECTION: forcing a failure. [ 401.918538][ T9802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.066801][ T9802] CPU: 0 UID: 0 PID: 9802 Comm: syz.5.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.066829][ T9802] Tainted: [L]=SOFTLOCKUP [ 402.066834][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.066843][ T9802] Call Trace: [ 402.066849][ T9802] [ 402.066855][ T9802] dump_stack_lvl+0x100/0x190 [ 402.066887][ T9802] should_fail_ex.cold+0x5/0xa [ 402.066909][ T9802] strncpy_from_user+0x3b/0x2d0 [ 402.066930][ T9802] path_removexattrat+0xc8/0x5f0 [ 402.066958][ T9802] ? __pfx_path_removexattrat+0x10/0x10 [ 402.067001][ T9802] ? ksys_write+0x1ac/0x250 [ 402.067023][ T9802] ? __pfx_ksys_write+0x10/0x10 [ 402.067044][ T9802] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 402.067070][ T9802] __x64_sys_lremovexattr+0x5e/0x80 [ 402.067090][ T9802] do_syscall_64+0x106/0xf80 [ 402.067109][ T9802] ? clear_bhb_loop+0x40/0x90 [ 402.067130][ T9802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.067148][ T9802] RIP: 0033:0x7f851a59bf79 [ 402.067162][ T9802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.067176][ T9802] RSP: 002b:00007f851b523028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 402.067193][ T9802] RAX: ffffffffffffffda RBX: 00007f851a815fa0 RCX: 00007f851a59bf79 [ 402.067203][ T9802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.067213][ T9802] RBP: 00007f851b523090 R08: 0000000000000000 R09: 0000000000000000 [ 402.067222][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.067231][ T9802] R13: 00007f851a816038 R14: 00007f851a815fa0 R15: 00007ffdf6209d98 [ 402.067252][ T9802] [ 402.253134][ T9806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.266299][ T1025] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 402.338937][ T9806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.448831][ T9809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.987'. [ 402.486034][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 402.499513][ T9806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.518886][ T9806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.679556][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.705704][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.735942][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 402.753418][ T24] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 402.771984][ T24] usb 4-1: Manufacturer: syz [ 402.788595][ T24] usb 4-1: config 0 descriptor?? [ 402.795873][ T5874] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 402.990046][ T5874] usb 5-1: config 27 has an invalid descriptor of length 142, skipping remainder of the config [ 403.005597][ T5874] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 32 [ 403.014820][ T5874] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 403.024138][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.072583][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 403.092217][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 404.044048][ T24] usb 4-1: USB disconnect, device number 39 [ 404.283330][ T9825] netlink: 'syz.2.992': attribute type 10 has an invalid length. [ 404.346680][ T9825] batman_adv: batadv0: Adding interface: netdevsim0 [ 404.372622][ T9825] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.427884][ T5874] usb 5-1: string descriptor 0 read error: -71 [ 404.456052][ T5874] usb 5-1: USB disconnect, device number 31 [ 404.464947][ T9825] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 406.014421][ T9853] ipt_ECN: cannot use operation on non-tcp rule [ 406.016314][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.997'. [ 406.090940][ T9853] atomic_op ffff88807c83e998 conn xmit_atomic 0000000000000000 [ 406.693810][ T5965] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 406.853663][ T5965] usb 6-1: Using ep0 maxpacket: 32 [ 406.867756][ T5965] usb 6-1: config 39 has an invalid interface number: 251 but max is 0 [ 406.889488][ T5965] usb 6-1: config 39 contains an unexpected descriptor of type 0x2, skipping [ 406.921611][ T5965] usb 6-1: config 39 has no interface number 0 [ 406.953694][ T5965] usb 6-1: config 39 interface 251 altsetting 127 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 407.042333][ T5965] usb 6-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 407.071478][ T5965] usb 6-1: config 39 interface 251 altsetting 127 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 407.089635][ T9885] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 407.106344][ T5965] usb 6-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 407.133705][ T5965] usb 6-1: config 39 interface 251 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 407.158344][ T5965] usb 6-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 407.189547][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1005'. [ 407.201963][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 407.211820][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.219104][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.233561][ T5965] usb 6-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 407.259547][ T5965] usb 6-1: config 39 interface 251 altsetting 127 bulk endpoint 0x9 has invalid maxpacket 1024 [ 408.239455][ T5965] usb 6-1: config 39 interface 251 has no altsetting 0 [ 408.247232][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 408.247246][ T29] audit: type=1400 audit(1771230147.868:816): avc: denied { read } for pid=9875 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 408.295758][ T5965] usb 6-1: New USB device found, idVendor=0c52, idProduct=2883, bcdDevice=2e.84 [ 408.304851][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.312806][ T5965] usb 6-1: Product: 嵂潩ꀤ웦谌旿鵆ఫҶë†ì°„뛴㥭그깒뺌ëºä‚¦é«é“¿è¿®æ•­â¥±æ§½ä•€á‚뜽á组æ«è‡†è¨„鷤⡌猯햠ꭜሕ惌╂㱧ë›ï‚žæµìª¿ë¼žç–è·©â•êª«åƒ¼â§£æŽ†â‡¢å±¡ì€¯ì«“ë±å¡­â•â›ã°‡à¹¡âª¢ã¿–氥䡗䔪矠ã䇂쑒臛䮭ڰ벡᳅ﭑ῱â¤â°çŸ‘鳄à§åˆ®æµ’çž“é”ᢒݷᮘ鰤澟猸ଭ딯Þ祕䫴ê­Íˆç§“ [ 408.345550][ T5965] usb 6-1: Manufacturer: ⷜ俰≡숣펜í“꼟å©â°§í’°âƒ¥ã–Ÿáµã†žæ€ä’›ç¨Œæ±‚㈡뤕嵻ﯴਜ袣ׄæ·ä³‰æ©§äžé˜ë²ï“©ì»¥ï§›ê•®æ¾‚ᵳꋺ翑꦳쒳ç¬ä”¥ëŠ‡ [ 408.361733][ T5965] usb 6-1: SerialNumber: Д [ 408.468569][ T9867] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 408.577638][ T9896] loop7: detected capacity change from 0 to 7 [ 408.604104][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.613755][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.648457][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.658047][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.692208][ T9867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.700616][ T6829] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.713239][ T9867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.722247][ T6829] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.723586][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.742037][ T6829] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.755574][ T5965] ftdi_sio 6-1:39.251: FTDI USB Serial Device converter detected [ 408.763099][ T6829] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.769097][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.779914][ T5965] ftdi_sio ttyUSB0: unknown device type: 0x2e84 [ 408.790598][ T5965] usb 6-1: USB disconnect, device number 6 [ 408.798019][ T6829] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.806026][ T6829] ldm_validate_partition_table(): Disk read failed. [ 408.809919][ T5965] ftdi_sio 6-1:39.251: device disconnected [ 408.819142][ T6829] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.835589][ T6829] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.859182][ T6829] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.878016][ T6829] Dev loop7: unable to read RDB block 0 [ 408.887457][ T6829] loop7: unable to read partition table [ 408.897707][ T6829] loop7: partition table beyond EOD, truncated [ 408.908546][ T9896] ldm_validate_partition_table(): Disk read failed. [ 408.925092][ T9896] Dev loop7: unable to read RDB block 0 [ 408.932650][ T9896] loop7: unable to read partition table [ 408.939574][ T9896] loop7: partition table beyond EOD, truncated [ 408.946136][ T9896] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 409.118125][ T9885] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 409.122650][ T1025] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.163352][ T1025] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.195533][ T1025] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.212053][ T1025] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.186439][ T29] audit: type=1400 audit(1771230149.819:817): avc: denied { ioctl } for pid=9907 comm="syz.5.1010" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 410.256791][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.303752][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.346352][ T9908] syzkaller0: entered promiscuous mode [ 410.394225][ T9908] syzkaller0: entered allmulticast mode [ 410.720123][ T9918] FAULT_INJECTION: forcing a failure. [ 410.720123][ T9918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.748172][ T29] audit: type=1400 audit(1771230150.379:818): avc: denied { accept } for pid=9910 comm="syz.3.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 410.788214][ T9918] CPU: 1 UID: 0 PID: 9918 Comm: syz.4.1013 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.788243][ T9918] Tainted: [L]=SOFTLOCKUP [ 410.788249][ T9918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.788259][ T9918] Call Trace: [ 410.788264][ T9918] [ 410.788270][ T9918] dump_stack_lvl+0x100/0x190 [ 410.788298][ T9918] should_fail_ex.cold+0x5/0xa [ 410.788319][ T9918] _copy_from_user+0x2e/0xd0 [ 410.788337][ T9918] copy_msghdr_from_user+0x9f/0x4f0 [ 410.788362][ T9918] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 410.788396][ T9918] ___sys_sendmsg+0x106/0x1e0 [ 410.788421][ T9918] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.788472][ T9918] __sys_sendmsg+0x170/0x220 [ 410.788491][ T9918] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.788523][ T9918] do_syscall_64+0x106/0xf80 [ 410.788545][ T9918] ? clear_bhb_loop+0x40/0x90 [ 410.788565][ T9918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.788582][ T9918] RIP: 0033:0x7f2d0a99bf79 [ 410.788596][ T9918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.788612][ T9918] RSP: 002b:00007f2d08bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.788628][ T9918] RAX: ffffffffffffffda RBX: 00007f2d0ac15fa0 RCX: 00007f2d0a99bf79 [ 410.788639][ T9918] RDX: 0000000000008820 RSI: 0000200000000080 RDI: 0000000000000003 [ 410.788649][ T9918] RBP: 00007f2d08bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 410.788658][ T9918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.788667][ T9918] R13: 00007f2d0ac16038 R14: 00007f2d0ac15fa0 R15: 00007ffe07e8f3f8 [ 410.788688][ T9918] [ 411.547372][ T9931] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 411.625520][ T9931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.666389][ T9931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.704182][ T9931] fuse: Bad value for 'fd' [ 411.710014][ T5965] kernel read not supported for file /727/task (pid: 5965 comm: kworker/0:7) [ 413.268169][ T29] audit: type=1400 audit(1771230152.901:819): avc: denied { bind } for pid=9947 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 413.500659][ T29] audit: type=1400 audit(1771230153.131:820): avc: denied { mount } for pid=9947 comm="syz.4.1025" name="/" dev="autofs" ino=24173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 413.537480][ T9956] FAULT_INJECTION: forcing a failure. [ 413.537480][ T9956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.806956][ T9956] CPU: 0 UID: 0 PID: 9956 Comm: syz.1.1027 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.806984][ T9956] Tainted: [L]=SOFTLOCKUP [ 413.806989][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 413.806999][ T9956] Call Trace: [ 413.807005][ T9956] [ 413.807012][ T9956] dump_stack_lvl+0x100/0x190 [ 413.807037][ T9956] should_fail_ex.cold+0x5/0xa [ 413.807052][ T9956] _copy_to_user+0x32/0xd0 [ 413.807065][ T9956] simple_read_from_buffer+0xcb/0x170 [ 413.807083][ T9956] proc_fail_nth_read+0x1af/0x230 [ 413.807095][ T9956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.807120][ T9956] ? rw_verify_area+0xce/0x6d0 [ 413.807133][ T9956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.807152][ T9956] vfs_read+0x1e4/0xb30 [ 413.807168][ T9956] ? __pfx_vfs_read+0x10/0x10 [ 413.807182][ T9956] ? __fget_files+0x215/0x3d0 [ 413.807202][ T9956] ? __fget_files+0x21f/0x3d0 [ 413.807223][ T9956] ksys_read+0x12a/0x250 [ 413.807237][ T9956] ? __pfx_ksys_read+0x10/0x10 [ 413.807256][ T9956] do_syscall_64+0x106/0xf80 [ 413.807270][ T9956] ? clear_bhb_loop+0x40/0x90 [ 413.807283][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.807295][ T9956] RIP: 0033:0x7f88aa95c84e [ 413.807304][ T9956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.807315][ T9956] RSP: 002b:00007f88ab85bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.807326][ T9956] RAX: ffffffffffffffda RBX: 00007f88ab85c6c0 RCX: 00007f88aa95c84e [ 413.807333][ T9956] RDX: 000000000000000f RSI: 00007f88ab85c0a0 RDI: 0000000000000003 [ 413.807339][ T9956] RBP: 00007f88ab85c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.807345][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.807356][ T9956] R13: 00007f88aac16128 R14: 00007f88aac16090 R15: 00007ffe08c927d8 [ 413.807370][ T9956] [ 414.125285][ T29] audit: type=1400 audit(1771230153.761:821): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 415.859116][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 418.195227][T10008] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 421.402632][T10049] fuse: Bad value for 'rootmode' [ 422.580539][T10069] FAULT_INJECTION: forcing a failure. [ 422.580539][T10069] name failslab, interval 1, probability 0, space 0, times 0 [ 422.615902][T10069] CPU: 0 UID: 0 PID: 10069 Comm: syz.3.1057 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.615931][T10069] Tainted: [L]=SOFTLOCKUP [ 422.615936][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.615946][T10069] Call Trace: [ 422.615952][T10069] [ 422.615958][T10069] dump_stack_lvl+0x100/0x190 [ 422.615990][T10069] should_fail_ex.cold+0x5/0xa [ 422.616014][T10069] should_failslab+0xc2/0x120 [ 422.616040][T10069] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 422.616061][T10069] ? vm_area_dup+0x27/0x8e0 [ 422.616084][T10069] vm_area_dup+0x27/0x8e0 [ 422.616104][T10069] __split_vma+0x18c/0xd90 [ 422.616128][T10069] ? __pfx___split_vma+0x10/0x10 [ 422.616153][T10069] ? __pfx___vma_start_write+0x10/0x10 [ 422.616169][T10069] ? __pfx_mas_prev+0x10/0x10 [ 422.616199][T10069] vms_gather_munmap_vmas+0x39f/0x1500 [ 422.616227][T10069] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 422.616251][T10069] ? mas_walk+0x6ef/0x9b0 [ 422.616279][T10069] __mmap_region+0x46e/0x2760 [ 422.616300][T10069] ? find_held_lock+0x2b/0x80 [ 422.616327][T10069] ? __pfx_css_rstat_updated+0x10/0x10 [ 422.616353][T10069] ? __pfx___mmap_region+0x10/0x10 [ 422.616379][T10069] ? __lock_acquire+0x4a5/0x2630 [ 422.616415][T10069] ? lock_acquire+0x1cf/0x380 [ 422.616440][T10069] ? find_held_lock+0x2b/0x80 [ 422.616473][T10069] ? trace_sched_exit_tp+0x13a/0x180 [ 422.616536][T10069] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 422.616572][T10069] mmap_region+0x180/0x3e0 [ 422.616598][T10069] do_mmap+0xc63/0x12f0 [ 422.616629][T10069] ? __pfx_do_mmap+0x10/0x10 [ 422.616655][T10069] ? __pfx_down_write_killable+0x10/0x10 [ 422.616686][T10069] vm_mmap_pgoff+0x29e/0x470 [ 422.616718][T10069] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 422.616742][T10069] ? __fget_files+0x215/0x3d0 [ 422.616773][T10069] ? __fget_files+0x21f/0x3d0 [ 422.616803][T10069] ksys_mmap_pgoff+0x328/0x5b0 [ 422.616827][T10069] ? __pfx_ksys_write+0x10/0x10 [ 422.616854][T10069] __x64_sys_mmap+0x125/0x190 [ 422.616874][T10069] do_syscall_64+0x106/0xf80 [ 422.616895][T10069] ? clear_bhb_loop+0x40/0x90 [ 422.616917][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.616935][T10069] RIP: 0033:0x7f121f59bf79 [ 422.616949][T10069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.616964][T10069] RSP: 002b:00007f12204ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 422.616981][T10069] RAX: ffffffffffffffda RBX: 00007f121f815fa0 RCX: 00007f121f59bf79 [ 422.616992][T10069] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 422.617002][T10069] RBP: 00007f12204ee090 R08: 0000000000000003 R09: 0000000000000000 [ 422.617012][T10069] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 422.617029][T10069] R13: 00007f121f816038 R14: 00007f121f815fa0 R15: 00007ffddd44fe78 [ 422.617054][T10069] [ 423.403689][T10091] FAULT_INJECTION: forcing a failure. [ 423.403689][T10091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.421018][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.5.1066 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.421047][T10091] Tainted: [L]=SOFTLOCKUP [ 423.421053][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 423.421063][T10091] Call Trace: [ 423.421068][T10091] [ 423.421075][T10091] dump_stack_lvl+0x100/0x190 [ 423.421107][T10091] should_fail_ex.cold+0x5/0xa [ 423.421130][T10091] _copy_from_user+0x2e/0xd0 [ 423.421151][T10091] copy_msghdr_from_user+0x9f/0x4f0 [ 423.421178][T10091] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 423.421216][T10091] ___sys_sendmsg+0x106/0x1e0 [ 423.421244][T10091] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.421303][T10091] __sys_sendmsg+0x170/0x220 [ 423.421323][T10091] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.421358][T10091] do_syscall_64+0x106/0xf80 [ 423.421379][T10091] ? clear_bhb_loop+0x40/0x90 [ 423.421400][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.421417][T10091] RIP: 0033:0x7f851a59bf79 [ 423.421432][T10091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.421448][T10091] RSP: 002b:00007f851b523028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.421465][T10091] RAX: ffffffffffffffda RBX: 00007f851a815fa0 RCX: 00007f851a59bf79 [ 423.421477][T10091] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 423.421487][T10091] RBP: 00007f851b523090 R08: 0000000000000000 R09: 0000000000000000 [ 423.421497][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.421506][T10091] R13: 00007f851a816038 R14: 00007f851a815fa0 R15: 00007ffdf6209d98 [ 423.421530][T10091] [ 423.475592][ T29] audit: type=1400 audit(1771230163.066:822): avc: denied { create } for pid=10094 comm="syz.2.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 423.751761][ T29] audit: type=1400 audit(1771230163.066:823): avc: denied { bind } for pid=10094 comm="syz.2.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 423.914489][ T5965] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 424.087173][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.109959][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.121716][ T5965] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 424.140280][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.160405][ T5965] usb 4-1: config 0 descriptor?? [ 424.165951][ T29] audit: type=1400 audit(1771230163.806:824): avc: denied { write } for pid=10111 comm="syz.1.1073" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 424.299977][T10114] FAULT_INJECTION: forcing a failure. [ 424.299977][T10114] name failslab, interval 1, probability 0, space 0, times 0 [ 424.313163][T10114] CPU: 0 UID: 0 PID: 10114 Comm: syz.1.1074 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.313182][T10114] Tainted: [L]=SOFTLOCKUP [ 424.313186][T10114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 424.313192][T10114] Call Trace: [ 424.313196][T10114] [ 424.313200][T10114] dump_stack_lvl+0x100/0x190 [ 424.313224][T10114] should_fail_ex.cold+0x5/0xa [ 424.313238][T10114] ? tomoyo_realpath_from_path+0xb6/0x690 [ 424.313256][T10114] should_failslab+0xc2/0x120 [ 424.313274][T10114] __kmalloc_noprof+0xe0/0x850 [ 424.313291][T10114] tomoyo_realpath_from_path+0xb6/0x690 [ 424.313312][T10114] tomoyo_path_number_perm+0x23c/0x580 [ 424.313326][T10114] ? tomoyo_path_number_perm+0x22e/0x580 [ 424.313341][T10114] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.313370][T10114] ? find_held_lock+0x2b/0x80 [ 424.313383][T10114] ? __fget_files+0x215/0x3d0 [ 424.313400][T10114] ? hook_file_ioctl_common+0x146/0x410 [ 424.313414][T10114] ? __fget_files+0x21f/0x3d0 [ 424.313433][T10114] security_file_ioctl+0xd3/0x230 [ 424.313450][T10114] __x64_sys_ioctl+0xb7/0x210 [ 424.313473][T10114] do_syscall_64+0x106/0xf80 [ 424.313493][T10114] ? clear_bhb_loop+0x40/0x90 [ 424.313513][T10114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.313531][T10114] RIP: 0033:0x7f88aa99bf79 [ 424.313542][T10114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.313552][T10114] RSP: 002b:00007f88ab87d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.313563][T10114] RAX: ffffffffffffffda RBX: 00007f88aac15fa0 RCX: 00007f88aa99bf79 [ 424.313570][T10114] RDX: 0000200000000100 RSI: 000000004140aecd RDI: 0000000000000005 [ 424.313576][T10114] RBP: 00007f88ab87d090 R08: 0000000000000000 R09: 0000000000000000 [ 424.313582][T10114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.313588][T10114] R13: 00007f88aac16038 R14: 00007f88aac15fa0 R15: 00007ffe08c927d8 [ 424.313602][T10114] [ 424.313623][T10114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 424.681376][T10121] syzkaller0: entered promiscuous mode [ 424.687480][T10121] syzkaller0: entered allmulticast mode [ 424.788480][ T5965] hid (null): invalid report_size -1421280949 [ 424.814847][ T5965] stadia 0003:18D1:9400.000C: invalid report_size -1421280949 [ 424.907598][ T5965] stadia 0003:18D1:9400.000C: item 0 4 1 7 parsing failed [ 424.926611][ T5965] stadia 0003:18D1:9400.000C: parse failed [ 424.933271][ T5965] stadia 0003:18D1:9400.000C: probe with driver stadia failed with error -22 [ 425.268097][ T5965] usb 4-1: USB disconnect, device number 40 [ 425.471164][T10134] FAULT_INJECTION: forcing a failure. [ 425.471164][T10134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.486105][T10134] CPU: 0 UID: 0 PID: 10134 Comm: syz.4.1080 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.486133][T10134] Tainted: [L]=SOFTLOCKUP [ 425.486139][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.486149][T10134] Call Trace: [ 425.486155][T10134] [ 425.486162][T10134] dump_stack_lvl+0x100/0x190 [ 425.486195][T10134] should_fail_ex.cold+0x5/0xa [ 425.486218][T10134] _copy_from_user+0x2e/0xd0 [ 425.486237][T10134] copy_msghdr_from_user+0x9f/0x4f0 [ 425.486272][T10134] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 425.486303][T10134] ? __pfx__kstrtoull+0x10/0x10 [ 425.486331][T10134] ___sys_sendmsg+0x106/0x1e0 [ 425.486359][T10134] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.486396][T10134] ? find_held_lock+0x2b/0x80 [ 425.486434][T10134] __sys_sendmmsg+0x205/0x430 [ 425.486458][T10134] ? __pfx___sys_sendmmsg+0x10/0x10 [ 425.486486][T10134] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 425.486521][T10134] ? fput+0x79/0x100 [ 425.486538][T10134] ? ksys_write+0x1ac/0x250 [ 425.486561][T10134] ? __pfx_ksys_write+0x10/0x10 [ 425.486588][T10134] __x64_sys_sendmmsg+0x9c/0x100 [ 425.486608][T10134] ? lockdep_hardirqs_on+0x78/0x100 [ 425.486630][T10134] do_syscall_64+0x106/0xf80 [ 425.486651][T10134] ? clear_bhb_loop+0x40/0x90 [ 425.486673][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.486691][T10134] RIP: 0033:0x7f2d0a99bf79 [ 425.486706][T10134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.486722][T10134] RSP: 002b:00007f2d08bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 425.486740][T10134] RAX: ffffffffffffffda RBX: 00007f2d0ac15fa0 RCX: 00007f2d0a99bf79 [ 425.486751][T10134] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 425.486761][T10134] RBP: 00007f2d08bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 425.486771][T10134] R10: 00000000240040a2 R11: 0000000000000246 R12: 0000000000000001 [ 425.486782][T10134] R13: 00007f2d0ac16038 R14: 00007f2d0ac15fa0 R15: 00007ffe07e8f3f8 [ 425.486805][T10134] [ 426.160948][T10142] fuse: Unknown parameter 'use00000000000000000000' [ 426.686293][T10152] FAULT_INJECTION: forcing a failure. [ 426.686293][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 426.722145][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.3.1085 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.722164][T10152] Tainted: [L]=SOFTLOCKUP [ 426.722168][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.722174][T10152] Call Trace: [ 426.722178][T10152] [ 426.722183][T10152] dump_stack_lvl+0x100/0x190 [ 426.722205][T10152] should_fail_ex.cold+0x5/0xa [ 426.722219][T10152] ? tomoyo_realpath_from_path+0xb6/0x690 [ 426.722236][T10152] should_failslab+0xc2/0x120 [ 426.722253][T10152] __kmalloc_noprof+0xe0/0x850 [ 426.722270][T10152] tomoyo_realpath_from_path+0xb6/0x690 [ 426.722294][T10152] tomoyo_path_number_perm+0x23c/0x580 [ 426.722308][T10152] ? tomoyo_path_number_perm+0x22e/0x580 [ 426.722324][T10152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 426.722352][T10152] ? find_held_lock+0x2b/0x80 [ 426.722365][T10152] ? __fget_files+0x215/0x3d0 [ 426.722381][T10152] ? hook_file_ioctl_common+0x146/0x410 [ 426.722396][T10152] ? __fget_files+0x21f/0x3d0 [ 426.722414][T10152] security_file_ioctl+0xd3/0x230 [ 426.722431][T10152] __x64_sys_ioctl+0xb7/0x210 [ 426.722446][T10152] do_syscall_64+0x106/0xf80 [ 426.722460][T10152] ? clear_bhb_loop+0x40/0x90 [ 426.722473][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.722485][T10152] RIP: 0033:0x7f121f59bf79 [ 426.722494][T10152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.722505][T10152] RSP: 002b:00007f12204ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.722515][T10152] RAX: ffffffffffffffda RBX: 00007f121f815fa0 RCX: 00007f121f59bf79 [ 426.722522][T10152] RDX: 0000200000000000 RSI: 00000000000089e3 RDI: 0000000000000005 [ 426.722528][T10152] RBP: 00007f12204ee090 R08: 0000000000000000 R09: 0000000000000000 [ 426.722534][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.722540][T10152] R13: 00007f121f816038 R14: 00007f121f815fa0 R15: 00007ffddd44fe78 [ 426.722554][T10152] [ 426.722559][T10152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.072882][T10154] FAULT_INJECTION: forcing a failure. [ 427.072882][T10154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.083878][ T29] audit: type=1400 audit(1771230166.708:825): avc: denied { setopt } for pid=10153 comm="syz.3.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 427.103507][T10154] CPU: 0 UID: 0 PID: 10154 Comm: syz.3.1087 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.103537][T10154] Tainted: [L]=SOFTLOCKUP [ 427.103542][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.103551][T10154] Call Trace: [ 427.103556][T10154] [ 427.103562][T10154] dump_stack_lvl+0x100/0x190 [ 427.103590][T10154] should_fail_ex.cold+0x5/0xa [ 427.103610][T10154] _copy_from_user+0x2e/0xd0 [ 427.103628][T10154] move_addr_to_kernel+0x65/0x170 [ 427.103651][T10154] __sys_connect+0xb5/0x170 [ 427.103666][T10154] ? __pfx___sys_connect+0x10/0x10 [ 427.103680][T10154] ? __fget_files+0x21f/0x3d0 [ 427.103710][T10154] ? __pfx_ksys_write+0x10/0x10 [ 427.103734][T10154] __x64_sys_connect+0x72/0xb0 [ 427.103748][T10154] ? lockdep_hardirqs_on+0x78/0x100 [ 427.103768][T10154] do_syscall_64+0x106/0xf80 [ 427.103785][T10154] ? clear_bhb_loop+0x40/0x90 [ 427.103804][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.103819][T10154] RIP: 0033:0x7f121f59bf79 [ 427.103832][T10154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.103846][T10154] RSP: 002b:00007f12204ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 427.103862][T10154] RAX: ffffffffffffffda RBX: 00007f121f815fa0 RCX: 00007f121f59bf79 [ 427.103872][T10154] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 427.103881][T10154] RBP: 00007f12204ee090 R08: 0000000000000000 R09: 0000000000000000 [ 427.103890][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.103899][T10154] R13: 00007f121f816038 R14: 00007f121f815fa0 R15: 00007ffddd44fe78 [ 427.103920][T10154] [ 427.289380][T10160] ipt_ECN: cannot use operation on non-tcp rule [ 427.304005][T10158] syzkaller0: entered promiscuous mode [ 427.309643][T10158] syzkaller0: entered allmulticast mode [ 427.390460][ T29] audit: type=1400 audit(1771230167.028:826): avc: denied { read } for pid=10155 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 427.525209][ T29] audit: type=1400 audit(1771230167.078:827): avc: denied { write } for pid=10155 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.105194][ T29] audit: type=1400 audit(1771230167.738:828): avc: denied { listen } for pid=10167 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 428.179522][ T29] audit: type=1400 audit(1771230167.738:829): avc: denied { accept } for pid=10167 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 428.246438][ T29] audit: type=1400 audit(1771230167.858:830): avc: denied { ioctl } for pid=10165 comm="syz.2.1091" path="socket:[24933]" dev="sockfs" ino=24933 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.307895][T10178] CIFS mount error: No usable UNC path provided in device string! [ 428.307895][T10178] [ 428.321289][T10178] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 428.331580][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 428.883100][ T29] audit: type=1400 audit(1771230168.428:831): avc: denied { create } for pid=10187 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 429.166111][ T29] audit: type=1400 audit(1771230168.438:832): avc: denied { bind } for pid=10187 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 429.355478][ T29] audit: type=1400 audit(1771230168.999:833): avc: denied { name_bind } for pid=10195 comm="syz.2.1098" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 431.701694][T10217] FAULT_INJECTION: forcing a failure. [ 431.701694][T10217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.751681][T10217] CPU: 1 UID: 0 PID: 10217 Comm: syz.3.1107 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.751713][T10217] Tainted: [L]=SOFTLOCKUP [ 431.751719][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.751729][T10217] Call Trace: [ 431.751734][T10217] [ 431.751740][T10217] dump_stack_lvl+0x100/0x190 [ 431.751772][T10217] should_fail_ex.cold+0x5/0xa [ 431.751795][T10217] _copy_from_user+0x2e/0xd0 [ 431.751815][T10217] copy_msghdr_from_user+0x9f/0x4f0 [ 431.751842][T10217] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 431.751879][T10217] ___sys_sendmsg+0x106/0x1e0 [ 431.751906][T10217] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.751960][T10217] __sys_sendmsg+0x170/0x220 [ 431.751980][T10217] ? __pfx___sys_sendmsg+0x10/0x10 [ 431.752015][T10217] do_syscall_64+0x106/0xf80 [ 431.752037][T10217] ? clear_bhb_loop+0x40/0x90 [ 431.752058][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.752076][T10217] RIP: 0033:0x7f121f59bf79 [ 431.752090][T10217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.752105][T10217] RSP: 002b:00007f12204ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.752122][T10217] RAX: ffffffffffffffda RBX: 00007f121f815fa0 RCX: 00007f121f59bf79 [ 431.752133][T10217] RDX: 0000000000008820 RSI: 0000200000000080 RDI: 0000000000000003 [ 431.752143][T10217] RBP: 00007f12204ee090 R08: 0000000000000000 R09: 0000000000000000 [ 431.752154][T10217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.752164][T10217] R13: 00007f121f816038 R14: 00007f121f815fa0 R15: 00007ffddd44fe78 [ 431.752187][T10217] [ 434.243883][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 434.259460][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.266958][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.453874][ T29] audit: type=1400 audit(1771230174.101:834): avc: denied { create } for pid=10259 comm="syz.4.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 434.506776][T10262] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 434.522601][ T29] audit: type=1400 audit(1771230174.161:835): avc: denied { mount } for pid=10259 comm="syz.4.1108" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 434.558888][T10260] netlink: 'syz.4.1108': attribute type 39 has an invalid length. [ 435.581203][T10268] syzkaller0: entered promiscuous mode [ 435.586734][T10268] syzkaller0: entered allmulticast mode [ 435.818250][T10274] FAULT_INJECTION: forcing a failure. [ 435.818250][T10274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.833485][ T29] audit: type=1400 audit(1771230175.482:836): avc: denied { write } for pid=10271 comm="syz.2.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 435.851797][T10274] CPU: 0 UID: 0 PID: 10274 Comm: syz.1.1120 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.851822][T10274] Tainted: [L]=SOFTLOCKUP [ 435.851827][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.851836][T10274] Call Trace: [ 435.851842][T10274] [ 435.851847][T10274] dump_stack_lvl+0x100/0x190 [ 435.851876][T10274] should_fail_ex.cold+0x5/0xa [ 435.851896][T10274] _copy_from_user+0x2e/0xd0 [ 435.851914][T10274] io_submit_one+0xbd/0x1fb0 [ 435.851933][T10274] ? __lock_acquire+0x4a5/0x2630 [ 435.851957][T10274] ? irqentry_exit+0x180/0x670 [ 435.851975][T10274] ? lockdep_hardirqs_on+0x78/0x100 [ 435.851993][T10274] ? __pfx_io_submit_one+0x10/0x10 [ 435.852016][T10274] ? __might_fault+0xc5/0x140 [ 435.852038][T10274] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 435.852054][T10274] __x64_sys_io_submit+0x1b1/0x3a0 [ 435.852078][T10274] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 435.852094][T10274] ? fput+0x79/0x100 [ 435.852117][T10274] do_syscall_64+0x106/0xf80 [ 435.852134][T10274] ? clear_bhb_loop+0x40/0x90 [ 435.852154][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.852169][T10274] RIP: 0033:0x7f88aa99bf79 [ 435.852182][T10274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.852196][T10274] RSP: 002b:00007f88ab87d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 435.852212][T10274] RAX: ffffffffffffffda RBX: 00007f88aac15fa0 RCX: 00007f88aa99bf79 [ 435.852222][T10274] RDX: 0000200000001300 RSI: 0000000000000001 RDI: 00007f88ab85c000 [ 435.852230][T10274] RBP: 00007f88ab87d090 R08: 0000000000000000 R09: 0000000000000000 [ 435.852240][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.852248][T10274] R13: 00007f88aac16038 R14: 00007f88aac15fa0 R15: 00007ffe08c927d8 [ 435.852269][T10274] [ 436.299541][ T5965] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 437.321401][ T29] audit: type=1400 audit(1771230175.482:837): avc: denied { ioctl } for pid=10271 comm="syz.2.1122" path="socket:[25876]" dev="sockfs" ino=25876 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 439.904021][ T5175] udevd[5175]: worker [6546] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 440.081994][ T5965] usb 5-1: Using ep0 maxpacket: 8 [ 440.088494][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 440.099026][ T5965] usb 5-1: device descriptor read/all, error -71 [ 440.225685][T10303] syzkaller0: entered promiscuous mode [ 440.238827][T10303] syzkaller0: entered allmulticast mode [ 440.493564][ T29] audit: type=1400 audit(1771230180.144:838): avc: denied { accept } for pid=10308 comm="syz.1.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 441.546990][T10315] FAULT_INJECTION: forcing a failure. [ 441.546990][T10315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.560096][T10315] CPU: 1 UID: 0 PID: 10315 Comm: syz.1.1132 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.560122][T10315] Tainted: [L]=SOFTLOCKUP [ 441.560127][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.560137][T10315] Call Trace: [ 441.560143][T10315] [ 441.560149][T10315] dump_stack_lvl+0x100/0x190 [ 441.560180][T10315] should_fail_ex.cold+0x5/0xa [ 441.560209][T10315] _copy_from_user+0x2e/0xd0 [ 441.560228][T10315] copy_msghdr_from_user+0x9f/0x4f0 [ 441.560255][T10315] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 441.560292][T10315] ___sys_sendmsg+0x106/0x1e0 [ 441.560319][T10315] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.560372][T10315] __sys_sendmsg+0x170/0x220 [ 441.560393][T10315] ? __pfx___sys_sendmsg+0x10/0x10 [ 441.560429][T10315] do_syscall_64+0x106/0xf80 [ 441.560450][T10315] ? clear_bhb_loop+0x40/0x90 [ 441.560471][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.560488][T10315] RIP: 0033:0x7f88aa99bf79 [ 441.560503][T10315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.560520][T10315] RSP: 002b:00007f88ab87d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.560537][T10315] RAX: ffffffffffffffda RBX: 00007f88aac15fa0 RCX: 00007f88aa99bf79 [ 441.560548][T10315] RDX: 0000000000040020 RSI: 0000200000000000 RDI: 0000000000000003 [ 441.560558][T10315] RBP: 00007f88ab87d090 R08: 0000000000000000 R09: 0000000000000000 [ 441.560568][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.560578][T10315] R13: 00007f88aac16038 R14: 00007f88aac15fa0 R15: 00007ffe08c927d8 [ 441.560602][T10315] [ 443.505979][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 443.634487][T10340] netlink: 'syz.5.1138': attribute type 1 has an invalid length. [ 443.693731][T10345] FAULT_INJECTION: forcing a failure. [ 443.693731][T10345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.745629][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1138'. [ 443.762236][T10345] CPU: 0 UID: 0 PID: 10345 Comm: syz.3.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.762262][T10345] Tainted: [L]=SOFTLOCKUP [ 443.762268][T10345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.762278][T10345] Call Trace: [ 443.762284][T10345] [ 443.762290][T10345] dump_stack_lvl+0x100/0x190 [ 443.762321][T10345] should_fail_ex.cold+0x5/0xa [ 443.762344][T10345] _copy_from_user+0x2e/0xd0 [ 443.762363][T10345] rds_setsockopt+0xa66/0xce0 [ 443.762383][T10345] ? __pfx_rds_setsockopt+0x10/0x10 [ 443.762401][T10345] ? find_held_lock+0x2b/0x80 [ 443.762421][T10345] ? __fget_files+0x215/0x3d0 [ 443.762450][T10345] ? selinux_socket_setsockopt+0x6a/0x80 [ 443.762474][T10345] ? __pfx_rds_setsockopt+0x10/0x10 [ 443.762491][T10345] do_sock_setsockopt+0xf3/0x1d0 [ 443.762519][T10345] __sys_setsockopt+0x195/0x220 [ 443.762543][T10345] __x64_sys_setsockopt+0xbd/0x160 [ 443.762560][T10345] ? do_syscall_64+0x95/0xf80 [ 443.762580][T10345] ? lockdep_hardirqs_on+0x78/0x100 [ 443.762601][T10345] do_syscall_64+0x106/0xf80 [ 443.762620][T10345] ? clear_bhb_loop+0x40/0x90 [ 443.762642][T10345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.762659][T10345] RIP: 0033:0x7f121f59bf79 [ 443.762674][T10345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.762689][T10345] RSP: 002b:00007f12204ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 443.762706][T10345] RAX: ffffffffffffffda RBX: 00007f121f815fa0 RCX: 00007f121f59bf79 [ 443.762717][T10345] RDX: 000000000000001d RSI: 0000000000000114 RDI: 0000000000000003 [ 443.762727][T10345] RBP: 00007f12204ee090 R08: 0000000000000004 R09: 0000000000000000 [ 443.762737][T10345] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 443.762747][T10345] R13: 00007f121f816038 R14: 00007f121f815fa0 R15: 00007ffddd44fe78 [ 443.762772][T10345] [ 444.007546][ T5816] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 445.224593][ T5874] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 445.785078][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.798334][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.820731][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 445.848096][ T5874] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 445.866513][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.889820][ T5874] usb 5-1: config 0 descriptor?? [ 447.124516][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.305708][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1149'. [ 447.430861][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.502948][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.540881][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.735811][T10391] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 447.739081][ T5874] usbhid 5-1:0.0: can't add hid device: -71 [ 447.754023][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 447.803687][ T5874] usb 5-1: USB disconnect, device number 34 [ 447.885838][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 448.623172][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1155'. [ 449.066415][T10405] FAULT_INJECTION: forcing a failure. [ 449.066415][T10405] name failslab, interval 1, probability 0, space 0, times 0 [ 449.114080][T10405] CPU: 0 UID: 0 PID: 10405 Comm: syz.4.1158 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.114099][T10405] Tainted: [L]=SOFTLOCKUP [ 449.114103][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.114109][T10405] Call Trace: [ 449.114113][T10405] [ 449.114117][T10405] dump_stack_lvl+0x100/0x190 [ 449.114138][T10405] should_fail_ex.cold+0x5/0xa [ 449.114156][T10405] ? tomoyo_realpath_from_path+0xb6/0x690 [ 449.114175][T10405] should_failslab+0xc2/0x120 [ 449.114191][T10405] __kmalloc_noprof+0xe0/0x850 [ 449.114208][T10405] tomoyo_realpath_from_path+0xb6/0x690 [ 449.114228][T10405] tomoyo_path_number_perm+0x23c/0x580 [ 449.114243][T10405] ? tomoyo_path_number_perm+0x22e/0x580 [ 449.114258][T10405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 449.114286][T10405] ? find_held_lock+0x2b/0x80 [ 449.114299][T10405] ? __fget_files+0x215/0x3d0 [ 449.114316][T10405] ? hook_file_ioctl_common+0x146/0x410 [ 449.114330][T10405] ? __fget_files+0x21f/0x3d0 [ 449.114349][T10405] security_file_ioctl+0xd3/0x230 [ 449.114365][T10405] __x64_sys_ioctl+0xb7/0x210 [ 449.114381][T10405] do_syscall_64+0x106/0xf80 [ 449.114394][T10405] ? clear_bhb_loop+0x40/0x90 [ 449.114408][T10405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.114419][T10405] RIP: 0033:0x7f2d0a99bf79 [ 449.114428][T10405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.114438][T10405] RSP: 002b:00007f2d08bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.114449][T10405] RAX: ffffffffffffffda RBX: 00007f2d0ac15fa0 RCX: 00007f2d0a99bf79 [ 449.114456][T10405] RDX: 0000200000000080 RSI: 00000000000007a8 RDI: 0000000000000003 [ 449.114462][T10405] RBP: 00007f2d08bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.114468][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.114474][T10405] R13: 00007f2d0ac16038 R14: 00007f2d0ac15fa0 R15: 00007ffe07e8f3f8 [ 449.114489][T10405] [ 449.114494][T10405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 449.838942][ T29] audit: type=1400 audit(1771230189.489:839): avc: denied { lock } for pid=10412 comm="syz.2.1162" path="socket:[26113]" dev="sockfs" ino=26113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 450.240028][T10422] FAULT_INJECTION: forcing a failure. [ 450.240028][T10422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.253169][T10422] CPU: 1 UID: 0 PID: 10422 Comm: syz.1.1150 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.253197][T10422] Tainted: [L]=SOFTLOCKUP [ 450.253204][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.253215][T10422] Call Trace: [ 450.253221][T10422] [ 450.253227][T10422] dump_stack_lvl+0x100/0x190 [ 450.253259][T10422] should_fail_ex.cold+0x5/0xa [ 450.253282][T10422] _copy_from_user+0x2e/0xd0 [ 450.253303][T10422] copy_msghdr_from_user+0x9f/0x4f0 [ 450.253331][T10422] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 450.253368][T10422] ___sys_sendmsg+0x106/0x1e0 [ 450.253395][T10422] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.253451][T10422] __sys_sendmsg+0x170/0x220 [ 450.253472][T10422] ? __pfx___sys_sendmsg+0x10/0x10 [ 450.253507][T10422] do_syscall_64+0x106/0xf80 [ 450.253529][T10422] ? clear_bhb_loop+0x40/0x90 [ 450.253551][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.253568][T10422] RIP: 0033:0x7f88aa99bf79 [ 450.253583][T10422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.253600][T10422] RSP: 002b:00007f88ab87d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.253618][T10422] RAX: ffffffffffffffda RBX: 00007f88aac15fa0 RCX: 00007f88aa99bf79 [ 450.253630][T10422] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 450.253641][T10422] RBP: 00007f88ab87d090 R08: 0000000000000000 R09: 0000000000000000 [ 450.253651][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.253661][T10422] R13: 00007f88aac16038 R14: 00007f88aac15fa0 R15: 00007ffe08c927d8 [ 450.253686][T10422] [ 450.694471][T10431] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 451.479791][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1167'. [ 453.630808][T10452] netlink: 'syz.5.1171': attribute type 1 has an invalid length. [ 454.185248][T10459] ipt_ECN: cannot use operation on non-tcp rule [ 454.851009][T10471] ipt_ECN: cannot use operation on non-tcp rule [ 456.749647][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 456.778630][T10491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1182'. [ 457.943394][T10500] ipt_ECN: cannot use operation on non-tcp rule [ 458.994018][T10513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1180'. [ 459.531750][T10521] fuse: Bad value for 'fd' [ 461.905447][T10539] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 463.359257][T10553] ipt_ECN: cannot use operation on non-tcp rule [ 463.762878][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1185'. [ 467.037123][ T9054] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.419069][T10608] FAULT_INJECTION: forcing a failure. [ 471.419069][T10608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.432306][T10608] CPU: 0 UID: 0 PID: 10608 Comm: syz.3.1211 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.432332][T10608] Tainted: [L]=SOFTLOCKUP [ 471.432336][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.432343][T10608] Call Trace: [ 471.432347][T10608] [ 471.432351][T10608] dump_stack_lvl+0x100/0x190 [ 471.432373][T10608] should_fail_ex.cold+0x5/0xa [ 471.432388][T10608] _copy_from_user+0x2e/0xd0 [ 471.432401][T10608] copy_msghdr_from_user+0x9f/0x4f0 [ 471.432419][T10608] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 471.432438][T10608] ? __schedule+0x1000/0x60e0 [ 471.432450][T10608] ? __pfx__kstrtoull+0x10/0x10 [ 471.432467][T10608] ___sys_sendmsg+0x106/0x1e0 [ 471.432485][T10608] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.432507][T10608] ? irqentry_exit+0x180/0x670 [ 471.432521][T10608] ? lockdep_hardirqs_on+0x78/0x100 [ 471.432540][T10608] ? __sys_sendmmsg+0x2cc/0x430 [ 471.432554][T10608] __sys_sendmmsg+0x205/0x430 [ 471.432569][T10608] ? __pfx___sys_sendmmsg+0x10/0x10 [ 471.432586][T10608] ? __pfx___schedule+0x10/0x10 [ 471.432605][T10608] ? __pfx___schedule+0x10/0x10 [ 471.432619][T10608] __x64_sys_sendmmsg+0x9c/0x100 [ 471.432632][T10608] ? lockdep_hardirqs_on+0x78/0x100 [ 471.432645][T10608] do_syscall_64+0x106/0xf80 [ 471.432659][T10608] ? clear_bhb_loop+0x40/0x90 [ 471.432673][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.432684][T10608] RIP: 0033:0x7f121f59bf79 [ 471.432693][T10608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.432704][T10608] RSP: 002b:00007f12204cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 471.432716][T10608] RAX: ffffffffffffffda RBX: 00007f121f816090 RCX: 00007f121f59bf79 [ 471.432723][T10608] RDX: 0000000000000001 RSI: 00002000000014c0 RDI: 0000000000000004 [ 471.432729][T10608] RBP: 00007f12204cd090 R08: 0000000000000000 R09: 0000000000000000 [ 471.432735][T10608] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 471.432742][T10608] R13: 00007f121f816128 R14: 00007f121f816090 R15: 00007ffddd44fe78 [ 471.432755][T10608] [ 472.936605][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1214'. [ 473.627203][T10620] FAULT_INJECTION: forcing a failure. [ 473.627203][T10620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.074839][T10623] FAULT_INJECTION: forcing a failure. [ 474.074839][T10623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.088238][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.5.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.088261][T10623] Tainted: [L]=SOFTLOCKUP [ 474.088265][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 474.088271][T10623] Call Trace: [ 474.088276][T10623] [ 474.088280][T10623] dump_stack_lvl+0x100/0x190 [ 474.088303][T10623] should_fail_ex.cold+0x5/0xa [ 474.088317][T10623] _copy_to_user+0x32/0xd0 [ 474.088331][T10623] vivid_radio_rx_read+0x7c1/0xb90 [ 474.088346][T10623] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 474.088356][T10623] ? irqentry_exit+0x180/0x670 [ 474.088372][T10623] ? avc_policy_seqno+0x9/0x20 [ 474.088385][T10623] vivid_radio_read+0x86/0xc0 [ 474.088402][T10623] v4l2_read+0x229/0x2c0 [ 474.088416][T10623] ? __pfx_v4l2_read+0x10/0x10 [ 474.088431][T10623] vfs_read+0x1e4/0xb30 [ 474.088447][T10623] ? __pfx_vfs_read+0x10/0x10 [ 474.088460][T10623] ? find_held_lock+0x2b/0x80 [ 474.088473][T10623] ? __fget_files+0x215/0x3d0 [ 474.088490][T10623] ? __fget_files+0x215/0x3d0 [ 474.088509][T10623] ? __fget_files+0x21f/0x3d0 [ 474.088529][T10623] ksys_read+0x12a/0x250 [ 474.088543][T10623] ? __pfx_ksys_read+0x10/0x10 [ 474.088561][T10623] do_syscall_64+0x106/0xf80 [ 474.088575][T10623] ? clear_bhb_loop+0x40/0x90 [ 474.088588][T10623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.088599][T10623] RIP: 0033:0x7f851a55c84e [ 474.088608][T10623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 474.088619][T10623] RSP: 002b:00007f851b501f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.088630][T10623] RAX: ffffffffffffffda RBX: 00007f851b5026c0 RCX: 00007f851a55c84e [ 474.088637][T10623] RDX: 0000000000002000 RSI: 0000200000003400 RDI: 0000000000000004 [ 474.088643][T10623] RBP: 00007f851b502090 R08: 0000000000000000 R09: 0000000000000000 [ 474.088649][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 474.088655][T10623] R13: 00002000000013c0 R14: 00007f851a816090 R15: 00007ffdf6209d98 [ 474.088669][T10623] [ 474.658060][T10620] CPU: 1 UID: 0 PID: 10620 Comm: syz.4.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.658090][T10620] Tainted: [L]=SOFTLOCKUP [ 474.658094][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 474.658103][T10620] Call Trace: [ 474.658109][T10620] [ 474.658115][T10620] dump_stack_lvl+0x100/0x190 [ 474.658147][T10620] should_fail_ex.cold+0x5/0xa [ 474.658168][T10620] _copy_to_user+0x32/0xd0 [ 474.658187][T10620] simple_read_from_buffer+0xcb/0x170 [ 474.658212][T10620] proc_fail_nth_read+0x1af/0x230 [ 474.658231][T10620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.658260][T10620] ? rw_verify_area+0xce/0x6d0 [ 474.658279][T10620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.658305][T10620] vfs_read+0x1e4/0xb30 [ 474.658330][T10620] ? __pfx_vfs_read+0x10/0x10 [ 474.658349][T10620] ? __fget_files+0x215/0x3d0 [ 474.658370][T10620] ? __fget_files+0x21f/0x3d0 [ 474.658390][T10620] ksys_read+0x12a/0x250 [ 474.658405][T10620] ? __pfx_ksys_read+0x10/0x10 [ 474.658424][T10620] do_syscall_64+0x106/0xf80 [ 474.658437][T10620] ? clear_bhb_loop+0x40/0x90 [ 474.658451][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.658462][T10620] RIP: 0033:0x7f2d0a95c84e [ 474.658472][T10620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 474.658482][T10620] RSP: 002b:00007f2d08bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.658493][T10620] RAX: ffffffffffffffda RBX: 00007f2d08bf66c0 RCX: 00007f2d0a95c84e [ 474.658500][T10620] RDX: 000000000000000f RSI: 00007f2d08bf60a0 RDI: 0000000000000006 [ 474.658506][T10620] RBP: 00007f2d08bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 474.658512][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.658518][T10620] R13: 00007f2d0ac16038 R14: 00007f2d0ac15fa0 R15: 00007ffe07e8f3f8 [ 474.658532][T10620] [ 477.470509][ T29] audit: type=1400 audit(1771230217.143:840): avc: denied { ioctl } for pid=10638 comm="syz.3.1213" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 477.592577][T10639] FAULT_INJECTION: forcing a failure. [ 477.592577][T10639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.615068][ T29] audit: type=1400 audit(1771230217.283:841): avc: denied { read } for pid=5470 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 477.658254][T10642] can0: slcan on pty26. [ 477.668809][T10639] CPU: 1 UID: 0 PID: 10639 Comm: syz.3.1213 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.668838][T10639] Tainted: [L]=SOFTLOCKUP [ 477.668845][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.668854][T10639] Call Trace: [ 477.668859][T10639] [ 477.668866][T10639] dump_stack_lvl+0x100/0x190 [ 477.668897][T10639] should_fail_ex.cold+0x5/0xa [ 477.668920][T10639] _copy_to_user+0x32/0xd0 [ 477.668940][T10639] simple_read_from_buffer+0xcb/0x170 [ 477.668969][T10639] proc_fail_nth_read+0x1af/0x230 [ 477.668987][T10639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.669018][T10639] ? rw_verify_area+0xce/0x6d0 [ 477.669038][T10639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.669066][T10639] vfs_read+0x1e4/0xb30 [ 477.669096][T10639] ? __pfx_vfs_read+0x10/0x10 [ 477.669117][T10639] ? __fget_files+0x215/0x3d0 [ 477.669148][T10639] ? __fget_files+0x21f/0x3d0 [ 477.669180][T10639] ksys_read+0x12a/0x250 [ 477.669203][T10639] ? __pfx_ksys_read+0x10/0x10 [ 477.669232][T10639] do_syscall_64+0x106/0xf80 [ 477.669252][T10639] ? clear_bhb_loop+0x40/0x90 [ 477.669272][T10639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.669290][T10639] RIP: 0033:0x7f121f55c84e [ 477.669303][T10639] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 477.669318][T10639] RSP: 002b:00007f12204edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 477.669334][T10639] RAX: ffffffffffffffda RBX: 00007f12204ee6c0 RCX: 00007f121f55c84e [ 477.669345][T10639] RDX: 000000000000000f RSI: 00007f12204ee0a0 RDI: 0000000000000004 [ 477.669355][T10639] RBP: 00007f12204ee090 R08: 0000000000000000 R09: 0000000000000000 [ 477.669365][T10639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.669375][T10639] R13: 00007f121f816038 R14: 00007f121f815fa0 R15: 00007ffddd44fe78 [ 477.669403][T10639] [ 478.148677][T10638] can0 (unregistered): slcan off pty26. [ 478.225745][T10655] FAULT_INJECTION: forcing a failure. [ 478.225745][T10655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.254520][T10655] CPU: 0 UID: 0 PID: 10655 Comm: syz.3.1224 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.254550][T10655] Tainted: [L]=SOFTLOCKUP [ 478.254555][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.254566][T10655] Call Trace: [ 478.254571][T10655] [ 478.254578][T10655] dump_stack_lvl+0x100/0x190 [ 478.254611][T10655] should_fail_ex.cold+0x5/0xa [ 478.254634][T10655] _copy_from_user+0x2e/0xd0 [ 478.254653][T10655] copy_msghdr_from_user+0x9f/0x4f0 [ 478.254681][T10655] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 478.254718][T10655] ___sys_sendmsg+0x106/0x1e0 [ 478.254745][T10655] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.254800][T10655] __sys_sendmsg+0x170/0x220 [ 478.254821][T10655] ? __pfx___sys_sendmsg+0x10/0x10 [ 478.254856][T10655] do_syscall_64+0x106/0xf80 [ 478.254876][T10655] ? clear_bhb_loop+0x40/0x90 [ 478.254897][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.254915][T10655] RIP: 0033:0x7f121f59bf79 [ 478.254929][T10655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.254949][T10655] RSP: 002b:00007f12204ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.254966][T10655] RAX: ffffffffffffffda RBX: 00007f121f815fa0 RCX: 00007f121f59bf79 [ 478.254982][T10655] RDX: 0000000008000800 RSI: 0000200000000940 RDI: 0000000000000003 [ 478.254992][T10655] RBP: 00007f12204ee090 R08: 0000000000000000 R09: 0000000000000000 [ 478.255002][T10655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.255012][T10655] R13: 00007f121f816038 R14: 00007f121f815fa0 R15: 00007ffddd44fe78 [ 478.255036][T10655] [ 478.507787][ T5853] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 478.955199][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'. [ 479.487373][ T5853] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.590790][T10674] ipt_ECN: cannot use operation on non-tcp rule [ 479.607235][ T5853] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 479.925037][ T5853] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.980668][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.027254][T10650] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 480.062042][T10682] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 480.083452][ T5853] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 480.264789][T10689] FAULT_INJECTION: forcing a failure. [ 480.264789][T10689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.280962][T10689] CPU: 1 UID: 0 PID: 10689 Comm: syz.3.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.280990][T10689] Tainted: [L]=SOFTLOCKUP [ 480.280996][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.281005][T10689] Call Trace: [ 480.281011][T10689] [ 480.281017][T10689] dump_stack_lvl+0x100/0x190 [ 480.281046][T10689] should_fail_ex.cold+0x5/0xa [ 480.281069][T10689] _copy_to_user+0x32/0xd0 [ 480.281090][T10689] simple_read_from_buffer+0xcb/0x170 [ 480.281117][T10689] proc_fail_nth_read+0x1af/0x230 [ 480.281136][T10689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.281166][T10689] ? rw_verify_area+0xce/0x6d0 [ 480.281186][T10689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.281214][T10689] vfs_read+0x1e4/0xb30 [ 480.281241][T10689] ? __pfx_vfs_read+0x10/0x10 [ 480.281263][T10689] ? __fget_files+0x215/0x3d0 [ 480.281294][T10689] ? __fget_files+0x21f/0x3d0 [ 480.281324][T10689] ksys_read+0x12a/0x250 [ 480.281345][T10689] ? __pfx_ksys_read+0x10/0x10 [ 480.281374][T10689] do_syscall_64+0x106/0xf80 [ 480.281395][T10689] ? clear_bhb_loop+0x40/0x90 [ 480.281416][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.281433][T10689] RIP: 0033:0x7f121f55c84e [ 480.281447][T10689] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 480.281462][T10689] RSP: 002b:00007f12204ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 480.281479][T10689] RAX: ffffffffffffffda RBX: 00007f12204cd6c0 RCX: 00007f121f55c84e [ 480.281490][T10689] RDX: 000000000000000f RSI: 00007f12204cd0a0 RDI: 000000000000000a [ 480.281501][T10689] RBP: 00007f12204cd090 R08: 0000000000000000 R09: 0000000000000000 [ 480.281510][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.281520][T10689] R13: 00007f121f816128 R14: 00007f121f816090 R15: 00007ffddd44fe78 [ 480.281545][T10689] [ 480.396475][ T5853] usb 6-1: USB disconnect, device number 7 [ 481.157826][T10704] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 481.166643][T10704] VFS: Can't find a romfs filesystem on dev nullb0. [ 481.166643][T10704] [ 481.938497][T10714] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1236'. [ 481.986168][ T5923] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 482.075876][T10714] kvm: kvm [10712]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x40000000000 [ 482.114706][T10714] kvm: kvm [10712]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 482.209466][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 482.224842][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 482.411150][ T5923] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 482.444055][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.551101][ T5923] usb 4-1: config 0 descriptor?? [ 482.557017][T10710] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 483.472920][ T5923] a4tech 0003:09DA:001A.000D: report_id 56362 is invalid [ 483.592921][ T5923] a4tech 0003:09DA:001A.000D: item 0 2 1 8 parsing failed [ 483.732020][ T5923] a4tech 0003:09DA:001A.000D: parse failed [ 483.772027][ T5923] a4tech 0003:09DA:001A.000D: probe with driver a4tech failed with error -22 [ 483.996928][T10747] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 484.378238][ T29] audit: type=1400 audit(1771230224.026:842): avc: denied { setopt } for pid=10750 comm="syz.5.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 484.758697][ T5853] usb 4-1: USB disconnect, device number 41 [ 484.824821][ T5874] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 484.975500][ T29] audit: type=1400 audit(1771230224.647:843): avc: denied { append } for pid=10765 comm="syz.1.1246" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 485.010585][ T5874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.207149][T10769] evm: overlay not supported [ 485.378356][T10771] fuse: Unknown parameter 'user_i00000000000000000000' [ 486.391317][ T5874] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 486.400304][ T29] audit: type=1400 audit(1771230224.807:844): avc: denied { remount } for pid=10765 comm="syz.1.1246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 486.419929][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.429791][ T5874] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 486.879222][T10776] FAT-fs (loop9): unable to read boot sector [ 488.035428][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.045242][ T29] audit: type=1400 audit(1771230226.538:845): avc: denied { mounton } for pid=10774 comm="syz.4.1249" path="/242/file0" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 488.079201][ T5874] usb 6-1: can't set config #1, error -71 [ 488.108227][ T5874] usb 6-1: USB disconnect, device number 8 [ 488.308095][ T29] audit: type=1400 audit(1771230227.978:846): avc: denied { append } for pid=10789 comm="syz.3.1254" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 491.088460][ T42] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 491.283951][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.599640][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 491.642031][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.655801][ T29] audit: type=1400 audit(1771230231.330:847): avc: denied { accept } for pid=10826 comm="syz.2.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 491.663001][ T42] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 491.757789][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.813328][ T42] hub 4-1:1.0: bad descriptor, ignoring hub [ 491.885976][ T42] hub 4-1:1.0: probe with driver hub failed with error -5 [ 491.913613][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 491.929209][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 491.936173][ T42] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 492.927099][T10847] tmpfs: Unknown parameter 'nb_blocks' [ 493.775819][ T42] usb 4-1: USB disconnect, device number 42 [ 495.651129][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.657477][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.820408][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 495.829368][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1272'. [ 496.074161][ T29] audit: type=1400 audit(1771230235.622:848): avc: denied { watch } for pid=10871 comm="syz.3.1272" path="/227/file1" dev="tmpfs" ino=1251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 496.287995][ T29] audit: type=1400 audit(1771230235.622:849): avc: denied { watch_sb watch_reads } for pid=10871 comm="syz.3.1272" path="/227/file1" dev="tmpfs" ino=1251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 496.345861][T10885] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 498.900282][T10903] FAULT_INJECTION: forcing a failure. [ 498.900282][T10903] name failslab, interval 1, probability 0, space 0, times 0 [ 498.972286][T10903] CPU: 1 UID: 0 PID: 10903 Comm: syz.5.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.972315][T10903] Tainted: [L]=SOFTLOCKUP [ 498.972320][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.972331][T10903] Call Trace: [ 498.972337][T10903] [ 498.972343][T10903] dump_stack_lvl+0x100/0x190 [ 498.972374][T10903] should_fail_ex.cold+0x5/0xa [ 498.972396][T10903] ? tomoyo_realpath_from_path+0xb6/0x690 [ 498.972421][T10903] should_failslab+0xc2/0x120 [ 498.972446][T10903] __kmalloc_noprof+0xe0/0x850 [ 498.972473][T10903] tomoyo_realpath_from_path+0xb6/0x690 [ 498.972505][T10903] tomoyo_path_number_perm+0x23c/0x580 [ 498.972526][T10903] ? tomoyo_path_number_perm+0x22e/0x580 [ 498.972549][T10903] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 498.972597][T10903] ? find_held_lock+0x2b/0x80 [ 498.972617][T10903] ? __fget_files+0x215/0x3d0 [ 498.972647][T10903] ? hook_file_ioctl_common+0x146/0x410 [ 498.972670][T10903] ? __fget_files+0x21f/0x3d0 [ 498.972699][T10903] security_file_ioctl+0xd3/0x230 [ 498.972724][T10903] __x64_sys_ioctl+0xb7/0x210 [ 498.972748][T10903] do_syscall_64+0x106/0xf80 [ 498.972768][T10903] ? clear_bhb_loop+0x40/0x90 [ 498.972789][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.972805][T10903] RIP: 0033:0x7f851a59bf79 [ 498.972820][T10903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.972836][T10903] RSP: 002b:00007f851b523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.972852][T10903] RAX: ffffffffffffffda RBX: 00007f851a815fa0 RCX: 00007f851a59bf79 [ 498.972863][T10903] RDX: 0000200000000540 RSI: 0000000040946400 RDI: 0000000000000003 [ 498.972873][T10903] RBP: 00007f851b523090 R08: 0000000000000000 R09: 0000000000000000 [ 498.972883][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.972892][T10903] R13: 00007f851a816038 R14: 00007f851a815fa0 R15: 00007ffdf6209d98 [ 498.972916][T10903] [ 498.972923][T10903] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.360125][T10912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.377623][T10912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.214687][ T5965] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 501.096440][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 501.923827][ T5965] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 501.941855][ T5965] usb 6-1: can't read configurations, error -71 [ 501.968911][ T9] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 502.147702][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.166075][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 502.185237][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.215759][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 502.247630][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.276419][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 502.283764][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 502.302016][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 502.315889][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 502.326608][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 502.331422][ T29] audit: type=1400 audit(1771230242.005:850): avc: denied { map } for pid=10939 comm="syz.2.1289" path="socket:[27110]" dev="sockfs" ino=27110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 502.362891][ T29] audit: type=1400 audit(1771230242.035:851): avc: denied { accept } for pid=10939 comm="syz.2.1289" path="socket:[27110]" dev="sockfs" ino=27110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 504.036170][ T5965] usb 4-1: USB disconnect, device number 43 [ 504.724935][T10968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.757484][T10968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.849737][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1297'. [ 505.054733][ T5965] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 505.424412][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 505.502283][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.578628][ T5965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 505.715269][ T5965] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 505.783325][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.809725][T10980] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 505.835830][ T5965] usb 5-1: config 0 descriptor?? [ 505.844761][T10980] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 505.924365][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1303'. [ 505.937726][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1303'. [ 505.971911][T10988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.992513][T10988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.006628][ T5816] Bluetooth: hci3: unexpected event for opcode 0x200a [ 506.277312][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 506.336756][ T42] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 506.663890][ T5965] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 506.686592][ T5965] microsoft 0003:045E:07DA.000E: no inputs found [ 507.123781][ T5965] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 507.197037][ T24] usb 5-1: USB disconnect, device number 35 [ 507.292850][T11010] fido_id[11010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 507.501904][T11021] FAULT_INJECTION: forcing a failure. [ 507.501904][T11021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.580644][T11021] CPU: 1 UID: 0 PID: 11021 Comm: syz.5.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.580676][T11021] Tainted: [L]=SOFTLOCKUP [ 507.580682][T11021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.580692][T11021] Call Trace: [ 507.580699][T11021] [ 507.580706][T11021] dump_stack_lvl+0x100/0x190 [ 507.580740][T11021] should_fail_ex.cold+0x5/0xa [ 507.580764][T11021] _copy_to_user+0x32/0xd0 [ 507.580785][T11021] simple_read_from_buffer+0xcb/0x170 [ 507.580818][T11021] proc_fail_nth_read+0x1af/0x230 [ 507.580838][T11021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.580868][T11021] ? rw_verify_area+0xce/0x6d0 [ 507.580889][T11021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.580916][T11021] vfs_read+0x1e4/0xb30 [ 507.580939][T11021] ? irqentry_exit+0x180/0x670 [ 507.580962][T11021] ? __pfx_vfs_read+0x10/0x10 [ 507.581000][T11021] ksys_read+0x12a/0x250 [ 507.581022][T11021] ? __pfx_ksys_read+0x10/0x10 [ 507.581052][T11021] do_syscall_64+0x106/0xf80 [ 507.581072][T11021] ? clear_bhb_loop+0x40/0x90 [ 507.581094][T11021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.581112][T11021] RIP: 0033:0x7f851a55c84e [ 507.581127][T11021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 507.581143][T11021] RSP: 002b:00007f851b522fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.581161][T11021] RAX: ffffffffffffffda RBX: 00007f851b5236c0 RCX: 00007f851a55c84e [ 507.581172][T11021] RDX: 000000000000000f RSI: 00007f851b5230a0 RDI: 0000000000000006 [ 507.581181][T11021] RBP: 00007f851b523090 R08: 0000000000000000 R09: 0000000000000000 [ 507.581192][T11021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.581201][T11021] R13: 00007f851a816038 R14: 00007f851a815fa0 R15: 00007ffdf6209d98 [ 507.581226][T11021] [ 507.803406][ T30] INFO: task kworker/0:2:966 blocked for more than 143 seconds. [ 507.814683][ T30] Tainted: G L syzkaller #0 [ 507.821344][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.830442][ T30] task:kworker/0:2 state:D stack:22456 pid:966 tgid:966 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 507.842843][ T30] Workqueue: usb_hub_wq hub_event [ 507.848029][ T30] Call Trace: [ 507.851301][ T30] [ 507.854799][ T30] __schedule+0xfee/0x60e0 [ 507.859865][ T30] ? __lock_acquire+0x4a5/0x2630 [ 507.865248][ T30] ? __pfx___schedule+0x10/0x10 [ 507.870151][ T30] ? find_held_lock+0x2b/0x80 [ 507.875348][ T30] ? schedule+0x2bf/0x390 [ 507.879736][ T30] schedule+0xdd/0x390 [ 507.884091][ T30] schedule_timeout+0x1b2/0x280 [ 507.889109][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 507.894793][ T30] ? mark_held_locks+0x40/0x70 [ 507.899737][ T30] __wait_for_common+0x2e7/0x4c0 [ 507.905197][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 507.910731][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 507.916474][ T30] ? __pfx_device_del+0x10/0x10 [ 507.921496][ T30] ? kobject_put+0xb9/0x640 [ 507.926301][ T30] i2c_del_adapter+0x62d/0x820 [ 507.931117][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 507.936923][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 507.942264][ T30] ? dvb_usbv2_exit.isra.0+0x3e1/0xb40 [ 507.949451][ T30] ? kfree+0x1f6/0x6b0 [ 507.953733][ T30] ? media_device_unregister+0x446/0x610 [ 507.959723][ T30] dvb_usbv2_exit.isra.0+0x47f/0xb40 [ 507.965059][ T30] dvb_usbv2_probe+0x669/0x970 [ 507.969853][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 507.975180][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 507.980989][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 507.986238][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 507.992041][ T30] ? __pm_runtime_set_status+0x13c/0x970 [ 507.997751][ T30] usb_probe_interface+0x303/0x8f0 [ 508.002906][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 508.008826][ T30] really_probe+0x241/0xa60 [ 508.013614][ T30] __driver_probe_device+0x1de/0x400 [ 508.019782][ T30] driver_probe_device+0x4c/0x1b0 [ 508.025353][ T30] __device_attach_driver+0x1ff/0x3e0 [ 508.030861][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 508.038676][ T30] bus_for_each_drv+0x159/0x1e0 [ 508.044252][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 508.050077][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 508.058834][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 508.078417][T11026] overlayfs: failed to clone lowerpath [ 508.088309][ T30] __device_attach+0x1e4/0x4d0 [ 508.093881][ T30] ? __pfx___device_attach+0x10/0x10 [ 508.099614][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 508.106153][ T30] device_initial_probe+0xaf/0xd0 [ 508.111634][ T30] bus_probe_device+0x64/0x160 [ 508.117650][ T30] device_add+0x11d9/0x1950 [ 508.122562][ T30] ? __pfx_device_add+0x10/0x10 [ 508.346793][ T30] usb_set_configuration+0xd97/0x1c60 [ 508.377369][ T30] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 508.412092][ T30] usb_generic_driver_probe+0xa1/0xe0 [ 508.489728][ T30] usb_probe_device+0xef/0x400 [ 508.515636][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 508.544275][ T30] really_probe+0x241/0xa60 [ 508.573083][ T30] __driver_probe_device+0x1de/0x400 [ 508.602735][ T30] ? usb_driver_applicable+0x1c7/0x220 [ 508.616589][ T30] driver_probe_device+0x4c/0x1b0 [ 508.621899][ T30] __device_attach_driver+0x1ff/0x3e0 [ 508.629494][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 508.636220][ T30] bus_for_each_drv+0x159/0x1e0 [ 508.641458][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 508.720016][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 508.726321][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 508.732253][ T30] __device_attach+0x1e4/0x4d0 [ 508.739016][ T30] ? __pfx___device_attach+0x10/0x10 [ 508.745073][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 508.750636][ T30] device_initial_probe+0xaf/0xd0 [ 508.758715][ T30] bus_probe_device+0x64/0x160 [ 508.770184][ T30] device_add+0x11d9/0x1950 [ 508.775515][ T30] ? __pfx_device_add+0x10/0x10 [ 508.780700][ T30] ? add_device_randomness+0xb7/0xf0 [ 508.787611][ T30] usb_new_device.cold+0x685/0x115c [ 508.794060][ T30] ? do_raw_spin_lock+0x128/0x260 [ 508.799217][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 508.806052][ T30] ? mark_held_locks+0x40/0x70 [ 508.811073][ T30] hub_event+0x314d/0x4af0 [ 508.817824][ T30] ? __pfx_hub_event+0x10/0x10 [ 508.825343][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 508.831345][ T30] ? sched_core_dequeue+0x200/0x270 [ 508.837943][ T30] ? rcu_is_watching+0x12/0xc0 [ 508.860620][ T30] process_one_work+0x9d7/0x1920 [ 508.868651][ T30] ? __pfx_process_one_work+0x10/0x10 [ 508.874893][ T30] ? __pfx_hub_event+0x10/0x10 [ 508.879945][ T30] worker_thread+0x5da/0xe40 [ 508.886004][ T30] ? kthread+0x13a/0x450 [ 508.890411][ T30] ? __pfx_worker_thread+0x10/0x10 [ 508.896615][ T30] kthread+0x370/0x450 [ 508.900953][ T30] ? __pfx_kthread+0x10/0x10 [ 508.906749][ T30] ret_from_fork+0x754/0xd80 [ 508.911582][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 508.917813][ T30] ? __switch_to+0x7b4/0x1120 [ 508.923356][ T30] ? __pfx_kthread+0x10/0x10 [ 508.928089][ T30] ret_from_fork_asm+0x1a/0x30 [ 508.935680][ T30] [ 508.959815][ T30] [ 508.959815][ T30] Showing all locks held in the system: [ 508.967635][ T30] 1 lock held by khungtaskd/30: [ 508.972642][ T30] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 508.983456][ T30] 5 locks held by kworker/0:2/966: [ 508.989339][ T30] #0: ffff8880226d6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 509.000506][ T30] #1: ffffc90003df7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 509.012013][ T30] #2: ffff88802b6b9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 509.012507][ T5965] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 509.021208][ T30] #3: ffff888058fbc198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 509.037819][ T30] #4: ffff88807880e160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 509.047205][ T30] 2 locks held by getty/5561: [ 509.051939][ T30] #0: ffff888034c580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 509.061793][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 509.072189][ T30] 6 locks held by kworker/0:7/5965: [ 509.077444][ T30] #0: ffff8880226d6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 509.088349][ T30] #1: ffffc900049dfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 509.099865][ T30] #2: ffff88802b7bd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 509.109124][ T30] #3: ffff88802b852518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 509.119140][ T30] #4: ffff888029c8f168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 509.129204][ T30] #5: ffffffff8fbadc50 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1c60 [ 509.139769][ T30] 4 locks held by udevd/6546: [ 509.144546][ T30] #0: ffff88807a382d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 509.155394][ T30] #1: ffff888033cb5088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 509.165786][ T30] #2: ffff88805a5c6008 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 509.176202][ T30] #3: ffff888058fbc198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 509.185746][ T30] 3 locks held by syz.2.1311/11025: [ 509.191535][ T30] [ 509.197843][ T5965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.208065][ T30] ============================================= [ 509.208065][ T30] [ 509.216620][ T5965] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 509.224910][ T30] NMI backtrace for cpu 1 [ 509.224924][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 509.224946][ T30] Tainted: [L]=SOFTLOCKUP [ 509.224951][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.224960][ T30] Call Trace: [ 509.224965][ T30] [ 509.224971][ T30] dump_stack_lvl+0x100/0x190 [ 509.224997][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 509.225014][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 509.225040][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 509.225066][ T30] sys_info+0x141/0x190 [ 509.225086][ T30] watchdog+0xd25/0x1050 [ 509.225111][ T30] ? __pfx_watchdog+0x10/0x10 [ 509.225130][ T30] ? __kthread_parkme+0x18c/0x230 [ 509.225153][ T30] ? kthread+0x13a/0x450 [ 509.225165][ T30] ? __pfx_watchdog+0x10/0x10 [ 509.225182][ T30] kthread+0x370/0x450 [ 509.225194][ T30] ? __pfx_kthread+0x10/0x10 [ 509.225209][ T30] ret_from_fork+0x754/0xd80 [ 509.225225][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 509.225241][ T30] ? __switch_to+0x7b4/0x1120 [ 509.225259][ T30] ? __pfx_kthread+0x10/0x10 [ 509.225275][ T30] ret_from_fork_asm+0x1a/0x30 [ 509.225303][ T30] [ 509.225308][ T30] Sending NMI from CPU 1 to CPUs 0: [ 509.225617][ T5965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.229778][ C0] NMI backtrace for cpu 0 [ 509.229791][ C0] CPU: 0 UID: 0 PID: 5965 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.229814][ C0] Tainted: [L]=SOFTLOCKUP [ 509.229819][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.229828][ C0] Workqueue: usb_hub_wq hub_event [ 509.229848][ C0] RIP: 0010:__lock_acquire+0x350/0x2630 [ 509.229870][ C0] Code: 44 f8 41 83 c6 01 48 83 c3 28 44 3b b5 10 0b 00 00 0f 8d b2 00 00 00 0f b7 43 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 d0 1c 2f 14 <72> a9 44 8b 1d e7 c8 37 19 45 85 db 0f 84 d2 03 00 00 31 f6 eb a5 [ 509.229883][ C0] RSP: 0018:ffffc90000007ac8 EFLAGS: 00000003 [ 509.229893][ C0] RAX: 00000000000000c1 RBX: ffff88802ea3b010 RCX: 0000000000000004 [ 509.229902][ C0] RDX: 0000000000000001 RSI: ffff88802ea3afe8 RDI: 0000000000000040 [ 509.229910][ C0] RBP: ffff88802ea3a480 R08: 0000000000000000 R09: 0000000000000007 [ 509.229919][ C0] R10: 0000000000000004 R11: 0000000000000001 R12: ffff88802ea3b038 [ 509.229927][ C0] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000003 [ 509.229936][ C0] FS: 0000000000000000(0000) GS:ffff888124352000(0000) knlGS:0000000000000000 [ 509.229949][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.229958][ C0] CR2: 0000200000cb2030 CR3: 0000000031d4c000 CR4: 00000000003526f0 [ 509.229967][ C0] Call Trace: [ 509.229972][ C0] [ 509.229978][ C0] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 509.229999][ C0] lock_acquire+0x1cf/0x380 [ 509.230017][ C0] ? select_task_rq_fair+0x318/0x5330 [ 509.230032][ C0] select_task_rq_fair+0x32c/0x5330 [ 509.230045][ C0] ? select_task_rq_fair+0x318/0x5330 [ 509.230059][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 509.230074][ C0] ? do_raw_spin_lock+0x128/0x260 [ 509.230088][ C0] ? __pfx_select_task_rq_fair+0x10/0x10 [ 509.230099][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 509.230113][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 509.230135][ C0] try_to_wake_up+0x9f3/0x1a80 [ 509.230152][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 509.230166][ C0] ? find_held_lock+0x2b/0x80 [ 509.230180][ C0] ? __hrtimer_run_queues+0x42b/0xa70 [ 509.230193][ C0] ? __hrtimer_run_queues+0x42b/0xa70 [ 509.230207][ C0] hrtimer_wakeup+0x47/0x60 [ 509.230219][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 509.230231][ C0] __hrtimer_run_queues+0x50e/0xa70 [ 509.230246][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 509.230259][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 509.230281][ C0] hrtimer_interrupt+0x397/0x8c0 [ 509.230298][ C0] __sysvec_apic_timer_interrupt+0x109/0x490 [ 509.230313][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 509.230328][ C0] [ 509.230332][ C0] [ 509.230337][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.230352][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 509.230367][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 e8 15 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 b6 10 21 00 48 85 ed 0f 85 27 01 00 00 c8 15 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 509.230378][ C0] RSP: 0018:ffffc900049df2b8 EFLAGS: 00000283 [ 509.230387][ C0] RAX: 000000000008af2f RBX: 0000000000000055 RCX: ffffc900198a6000 [ 509.230395][ C0] RDX: 0000000000100000 RSI: ffffffff81e78414 RDI: ffff88802ea3a480 [ 509.230403][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 509.230411][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200093be59 [ 509.230419][ C0] R13: 0000000000000200 R14: ffff888021284900 R15: ffffc900049df480 [ 509.230430][ C0] ? vprintk_emit+0x674/0x6b0 [ 509.230445][ C0] ? vprintk_emit+0x674/0x6b0 [ 509.230460][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 509.230477][ C0] dev_vprintk_emit+0x394/0x3e0 [ 509.230493][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 509.230510][ C0] ? usb_get_configuration+0x328f/0x4220 [ 509.230529][ C0] ? usb_new_device+0x580/0x7d0 [ 509.230544][ C0] ? hub_event+0x314d/0x4af0 [ 509.230560][ C0] ? process_one_work+0x9d7/0x1920 [ 509.230573][ C0] ? worker_thread+0x5da/0xe40 [ 509.230585][ C0] ? kthread+0x370/0x450 [ 509.230595][ C0] ? ret_from_fork+0x754/0xd80 [ 509.230609][ C0] dev_printk_emit+0xd2/0x10d [ 509.230624][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 509.230643][ C0] __dev_printk+0xcb/0x100 [ 509.230659][ C0] _dev_notice+0xef/0x130 [ 509.230674][ C0] ? __pfx__dev_notice+0x10/0x10 [ 509.230690][ C0] ? trace_kmalloc+0x101/0x130 [ 509.230708][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 509.230727][ C0] usb_get_configuration.cold+0x13d1/0x1796 [ 509.230755][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 509.230776][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 509.230790][ C0] ? mark_held_locks+0x40/0x70 [ 509.230813][ C0] usb_new_device+0x580/0x7d0 [ 509.230829][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 509.230846][ C0] ? do_raw_spin_lock+0x128/0x260 [ 509.230859][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 509.230876][ C0] ? mark_held_locks+0x40/0x70 [ 509.230895][ C0] hub_event+0x314d/0x4af0 [ 509.230918][ C0] ? __pfx_hub_event+0x10/0x10 [ 509.230933][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 509.230950][ C0] ? sched_core_dequeue+0x200/0x270 [ 509.230968][ C0] ? rcu_is_watching+0x12/0xc0 [ 509.230985][ C0] process_one_work+0x9d7/0x1920 [ 509.231001][ C0] ? __pfx_process_one_work+0x10/0x10 [ 509.231016][ C0] ? __pfx_hub_event+0x10/0x10 [ 509.231034][ C0] worker_thread+0x5da/0xe40 [ 509.231048][ C0] ? __pfx_worker_thread+0x10/0x10 [ 509.231062][ C0] ? kthread+0x13a/0x450 [ 509.231072][ C0] ? __pfx_worker_thread+0x10/0x10 [ 509.231083][ C0] kthread+0x370/0x450 [ 509.231094][ C0] ? __pfx_kthread+0x10/0x10 [ 509.231105][ C0] ret_from_fork+0x754/0xd80 [ 509.231118][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 509.231130][ C0] ? rcu_is_watching+0x12/0xc0 [ 509.231144][ C0] ? __switch_to+0x7b4/0x1120 [ 509.231159][ C0] ? __pfx_kthread+0x10/0x10 [ 509.231170][ C0] ret_from_fork_asm+0x1a/0x30 [ 509.231190][ C0] [ 509.231776][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 509.231789][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 509.231810][ T30] Tainted: [L]=SOFTLOCKUP [ 509.231816][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.231825][ T30] Call Trace: [ 509.231830][ T30] [ 509.231836][ T30] dump_stack_lvl+0x100/0x190 [ 509.231861][ T30] vpanic+0x552/0x970 [ 509.231876][ T30] ? __pfx_vpanic+0x10/0x10 [ 509.231891][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 509.231915][ T30] ? rcu_is_watching+0x12/0xc0 [ 509.231935][ T30] panic+0xd1/0xe0 [ 509.231950][ T30] ? __pfx_panic+0x10/0x10 [ 509.231967][ T30] ? wq_watchdog_touch+0xec/0x1a0 [ 509.231990][ T30] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 509.232013][ T30] ? watchdog.cold+0x198/0x1ca [ 509.232029][ T30] ? watchdog+0xd35/0x1050 [ 509.232050][ T30] watchdog.cold+0x1a9/0x1ca [ 509.232074][ T30] ? __pfx_watchdog+0x10/0x10 [ 509.232094][ T30] ? __kthread_parkme+0x18c/0x230 [ 509.232116][ T30] ? kthread+0x13a/0x450 [ 509.232128][ T30] ? __pfx_watchdog+0x10/0x10 [ 509.232146][ T30] kthread+0x370/0x450 [ 509.232159][ T30] ? __pfx_kthread+0x10/0x10 [ 509.232174][ T30] ret_from_fork+0x754/0xd80 [ 509.232190][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 509.232207][ T30] ? __switch_to+0x7b4/0x1120 [ 509.232224][ T30] ? __pfx_kthread+0x10/0x10 [ 509.232240][ T30] ret_from_fork_asm+0x1a/0x30 [ 509.232268][ T30] [ 509.242095][ T30] Kernel Offset: disabled