last executing test programs: 16.919008354s ago: executing program 2 (id=582): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) connect$llc(r0, 0x0, 0x0) r2 = socket(0x40000000015, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000280)={&(0x7f0000000dc0)={{@host, 0x3}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418, 0x1000404}) pipe(0x0) close(0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x1a, &(0x7f00000001c0)=0x40001, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000040000000c0000000c00000002000000dfff0000000e00130000000000001b2b"], 0x0, 0x26}, 0x20) 15.22734925s ago: executing program 2 (id=589): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0480, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) pselect6(0x40, &(0x7f0000000240)={0x9, 0x3, 0x7, 0x3, 0x9, 0x8, 0x3, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0xfffffffffffffff4, 0x7efc, 0x4, 0x1, 0x2, 0x10000b}, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) 15.07003753s ago: executing program 2 (id=590): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x17) syz_clone3(&(0x7f0000000380)={0x12800180, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0x35}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$chown(0x4, r3, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000400)="5348fe387a3b02f68332c59d88a6e0b5013b16501d00200000000000000000003b5213c6f529f55f3f2b72138212f44b0a83504c90a6ca0a499bb01cfff8ad2edab8c02290b89428049c3a3c6adc64b32922d59aca597b556496850da9544789d6557fe05c9ad695ddefbcca9028fdd02b28021bb069997983e879635ea10038b1e072687a9c50f7ea2ee7bec0d4f4796f09b65015d273f64edaafb007e7f72c970000000000000000996007a2c5", 0xae, r3) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r5, 0xfffffffffffffffd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4, 0x2, 0x81, 0x1fd, 0x1, 0x4}, 0x1c) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r8, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44080) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') 13.314748641s ago: executing program 2 (id=601): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1e26, &(0x7f00000003c0)={0x0, 0x80fd, 0x40, 0x3, 0x80002cd}, &(0x7f0000000300), &(0x7f00000002c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r6, 0x1) connect$bt_rfcomm(r6, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206170067000000000000000000000005000100070000000900020073797a310000000014000780050015000f00080000000000000000000500050002000000050004000000000010000300686173683a69702c6d616300"], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}}}}]}, 0x4c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 9.647522651s ago: executing program 0 (id=614): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82c, 0x0, 0x81, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000001000)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 8.348667061s ago: executing program 0 (id=615): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000480)=[{0x0}, {&(0x7f00000002c0)="d6a5", 0x2}], 0x2) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r5, 0x81}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={r5, 0x800}, &(0x7f0000000040)=0x8) 8.008878954s ago: executing program 2 (id=616): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0xfffffff4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001540)=@newtaction={0x11e8, 0x30, 0x1, 0x0, 0x0, {}, [{0x11d4, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x1170, 0xa, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x2, 0x10000000, 0x9, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x6, 0x4, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xa21, 0x20000000, 0x7f, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x40, 0x6, 0x7, 0xc}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x7, 0xd09, 0x3be}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd36, 0x8, 0x1, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x40, 0x4, 0x9, 0x3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffffffe, 0x1, 0xfffffac4, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x10000000, 0x7, 0xa157}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x7, 0x10000, 0xfff}, 0x4}}]}, {0x1004, 0x6, "e49886c09f707959c4befbe67f4aa415da7d6382679644983c63d0fb47cfacff2e9939baf44be8a272999362951637cf42853681b7583a66e896ab369d083b4b304c8616945d576ee3dd94cdf8e1e9fbfe6c8abace5db0dfd1f70996b3965cbeaef8df638900b10b1a482b57c1328d83df4a45e752b4f7d4282a3cc1e9c1ce9750dc17991d34b2e687df4fb88547dd93eb179ba09ac6ba0dc24d9955a3e66b12cd17a0f36b53cc74f7787bd58d0f9d2e8edbf2fcf8e5df45635c50c17b6021d63576c8ea0dc787f571e4b45227046153ba45e7505542a69213cbff0dd84d8b6a8757b755c0f7a85c1640569cabc7b085a80fe0b20e4bd040032da8ad272edf6f5ba8a0c1e8ffc147da9e3ff8d509cbfa46a558da93505562fd1b42d839a952658593360860c8c06ca451ec695cf57e6444f85ade948f4c3669c1380532daf6018c37aab913544e8f2a6edaba3fa4ac9544823c3f3f0a9e4c6f87c528c6772362d7d39623e90c089f5e22c11d0aa06ca679b25e44f829af54c2c49abe2130929aefed89297f0495b222a9ecfe3db5dca897c64ce4d1d3245b08943518a34a7b8767451317f4338360e48bfedea83b2bd1495507b8d1cb6ce00b6e954b5a6049a9f52a3463dbff6bb1dc1c1622f4904cfb61add612ae12d546536b915fb672eaff0c0b5e9e5b0861055e20162505d16d2d26514441a6d7ff071ea9969914cbefca00d9aeb222dae5beec786f6722a27764f42e7ade3ed99a5ad38efbdd3bd3e675a81a5f67cc48e08940342f3333ed2a400c11342a9f5ade4b3c65f14cd680a7db2c5576a42c60898593af3a6ac5da90fb093d63bd22f3772ff9cde23bdeb2d9902ecb43dbb0b964620b6b6d44736a8dfddf3a55fdba2ea544032f1d09ecb69f9b40b36d5390e1cb21ee552730d45900d420266f4081b96b7e48cddf8a0678000cf41ddce141294108399d622df98c457af3f1ffe274a4135458ed22b17505fad9c928b990b883d6872936c5577de8e429f33a118718d3d393db18deffe4c3279cd77847f44661f95d25a22416a69305d616a7abf96415162453f876b90b70e33b45c744b095724bf680997e23a9b2f97da5f3d6a698011f481b3d3aebc84478addabd1987a5c5ce0b3e87e122e29c27a0ba8f6bb4a972daf45440420780be57b297c466f42248b6f58b93019c14860550eb0d0785effca18cb33b5d6199a44aeca3aaff4cbde33b51ce38c5b744aaac1f3587a5d62c051b617e4d43a7eec5d012911642b5c57a9a4a96ef987afe6a1be3939a9102e2dc1735e3265a5a0acb5a8c0ccadf8295d04995ec22881f2eb30e458e315d1cecdf75b190ffc528a41dee1c4d8a15e9ee7c4471761a0a2c52e2ab738c286db1ba68d8984cc4f4e7880f83d4177c64908cae86f53cc8171bb4c06cbf63245c19c76bbd01f25bbbc761221b6c1b2abea02ce776fbb051d61ef537422c904d7f167b0252576415e5d884f25befa7da56b2a503b3fb6531602e7b143fda5bb1cfc8997b0b2277cfe79794cc9b33ac182dc6bd0b7739146b6547d9edec7d03dc060ccc214fd59e212c16680350052999c02a5fd5bb8e0523a3800311083f1a1d883d25573d0ee0c916008b2a20553995ee721f0d8e5c96ad8177941905dc23c640e20fa4c5d7af883c6efaa64648390a3ebd636b62abe41d9120349bc663c9708802760c004262cf5e67d107433d11d20d0dd65041801dfe433993311ace57a387d01794c147a09423f7e2f27deb26fa7bfd92858ac6ee73f4c84088e4a4fa86bde54af72ccfc31c521e93b5cc61dd40069e420874f79f5488b553a69c0e5e1a0c33443f3ccee8d2034b23ef110c5549de389952897c8d2a6d62c1681c4e2ab9626f8679978e14433044f2a3b11653a3a5152a93d831c49be68e2b9aa2b2db571292dcd430ca318a2571b8bc293145488c9b7e1817cf6f1c44d6c86280f6f9003f582c7f1ed6cb3f0e6bc47cbee3fc33a42e03f4637c96c1ebf89db2cadae4a54998e4fa01e39cd8b50135ebcb9ca089bb632ac699516ab12550f400f63155418f2eba04f816e6427f2bc47f876a0ec9bc45e6b15ece7a2886a2117e2779c4b7a93a13f1b2bfce61a532fe6343ace49a584d4ab2de5737380e2261fed51186b8fd5edaaabb6ded49cdff939a14f06eda0953b6938d19f24b3b80d1a1fb5b923a5df27db8ba04f6657d2cd242c3e9987303faaf89b1b3e9f3fe552ecf639e35c3fb98a072ead5408211f572443c33cb8e49ee1e0c6fd4572b5fe4055f62153bb0bc6c81e794ca8c806247b04706bedc99f73e7a52cfe01c08a91ba9fbe9b97ec55e089dd06f7ce554f5c8c8245128d050b2e45cdf7a83082c6e898003561a94cbfc3ea90e17da4c7d5980c439e677f3126c07a35c33154f02208eef2269cf79a69587847a9b387297c78d54450620ca166bee037592fe398ac2833cccbea2879706e29d24bf3f97902912cc32d3610eb229c847a24d486d4fd8394b04406772257c68f210898edf74a609c9a8460f1bc57660ca3d559f8b7f69029a5afede60f7dc7f60b6d5efe850b30d8815df0c2ea0483343bf39d7023a9e115eed101b8c20441a8f71d151470cebe147abbb8998b1c18e1e2a38d849354b517d56e837ba897494e64bdb32f0a949f29ad2c03f56414eff75f5df341f1435b5ee4c5565d8e9cc3c7eb721b8b31f53cd0bba073f035cfdf85a274dfda653b6b631e5737be133bf385ef36e8fc73871612c321aa9bd3ae126d18240dc75320b851a67ebc1ce06a548dbd42665a07474d94b1853ae17054214a09c4a0a54b76d90f0d53bff200a6f976d214b5e3d48f586fffbb0bad62cc50ad700a056008389c6c5970db806584a0dc34885ea2122510e2417a1e1f02d88a72f8c61f44004c49b09bfda9c50abf33064c2533be20baa2d8222c40da81d3dc231bf844f176ff2c58bb08fa3c3d7da5c25f57f0739a76c9c75a299f5b5e56e8ecd6dc9088a562f4ddf1dbc4242950f9b38d99826221634dfec92465711c4dd2a277364cd7e2c2a1a94952e527ab334cbb72ff9d5999d4107f8b236eed9dce47cc6306b0aabb275819c6e583d02fef59e6a44fd8d7fb74829fb6e183f0a2b22dd45cdc7c5ba261d76c08f4755597aa6620d664ccd5cd77abccc2125c85bc6441f9aaab5436d498f1dd434d2d274760ddfe50f18305f4a8036b542fd0c4fd3efcb77e8a5548bacd2768a56164486d26b6f18eedaecd45a044dffab0e00ca7260ee69f65ed4ec42b141308ee61a8786b50d22cbc4d48c089219e110e0a4b2bb99f7a5f7c08dc5a58ee7fa40c44ca4aeffdae7f1fe1ce04182bff75e119e55eca021fe723eec5711e1b8a0b6090b1a324e609f57fca97c315ff8f5252dd807b8f6d9d98d7924a58b19cf39ea71a74eee433de1fc634d1d3139b33073a15cf3c3e6778af007fb1037aea0f408cdc30f1df773ee9781b2169693bd2d58f8f1eec48c13c9a31d46c2ca09c680e3a5d3c97ebf082820ffb86f0319b74880cf9d97a7791c57ed9b6be1918d69082286feb12803c3d7bb626863c1169bd8dc74d52f716f6707320cbf831501b21b28bddf3f0f0b4dbfe5776c8cfc0dffa9a4ffd37f67f83df159ca4f1fe0df1fb5eb6ddd0670bb3bc2905cff49611bfd5a843dfe1fc99a55a96cd6188cfa9882ee1c1000af22530718f156fed5bb2b8ee3abfb9a7969b8d7da8747ffa069074756041617f7a0f9636a845d5f0fa81f05cf4297fa38a3da7dec014b3cae41cc68b8cfc17d83fbe95b9c2dc95b2f50b99bf1fef819c48bb175fc654c7bbd10f6c563bf166433cd1f0b6d09f840a37dd424438efd83a87eacc4e1b7a00c0846e473dbea9a3a87fd60c4ec61c9405df7aaf559c73bb797a6a9e67b8dee7de59a1ead4c76d34951cb73314b51c234092399851c3f115fda95a4c9f342c50e1bd843b309311976d4240fd9ac04bf8c77cb3ffc203467c80b61ed501a87ab3293aa72cd8ef0fa594e25ca06a43e2626279a9cac41dbb4c8a44b9055e678d3c949d97ff0312c57b1742ca97f64c29c35630d304dc4ec295fd39eeecaf0be45e1aaa732b6e4f9f0826de5d9d1c5b4741c59a4b707f36505e18a578e635ac9594aa2c1ea5094b65c1f80edb0fc49b0d6d844405bae79987474391df28e535dba8f00be37b4dcb54a9cc8c4669866fa822cbc3fcfee23745d6c51d3ef1e7eabf64f51843574da4c9918b5f7de4b1bdd601d3d683fd99808c2a2f37dd6395165866fcb76c6e3e0cb6e8aa6dbe38ae3dedb0caf1f4d4e21eed2c60c3743fe21524dd36bb8c38e8eea02207dd209936175f5dca5ae96700b0222073a6038d97dca4a82578092bfe0c6073046ca6a1671193f1a35ac62bb4e5d8e9201c74222f33fa908b8b503a5cec7d966f0a70f671148e0378a5f7457cca6028622e394b0b171811f4b64bf4c7682cc686fdfebadb0682bd2ddb7a6db5ae4cd6fea6523ca2b900493fc39c36df261420c52459251f3b6c8a2abbebe44d5d1b47be91b435a691fc962d2ddc34aca899923968c250b80a95b904a2c4c1b5fd750c406819b4020adf92296c48726f23a8c550c4b3759a3dc0b05f8718a05b77147d2bc8f75cb4d67190e5f0ad1f7a85a85469ddcd873661bc1b5bf8411b7e2d8e532165750dff02f5a981ca6e4b10e385306942c43b0081993f0503fdc071c8c6dab9f2996ea4a0281fd238921715aa63da9059b25243b470aa7790175ec861b7e9fd6f0b1e6a3609725b4545aae3121a7df5d75f88d73b674b32c523b20e5df27b4fc957103a9d757fc0fcd137e88e51dd6ab32bd40b571fef8eb8a60e081dd4bd7ca5c3006345b9abe7c508535cc553e1b95b46cc70851b72c2e99e50448a72ae658e29b78c9c77f117c2baef0702c8229a8929ba71c05552c70022b8836f4e96cc1845715cac68b06387de231144f5abda9df5361f594c953c64ecb7b8bf71c17ac9bae9123fc26adc7e2c21ebc1390c8c06c8bbe7c233f5e4fbab84a901dcfbf63906b2bd021aac174f738ed6c2c74adf67cf0b6da725c16d8ec9407266ca5a4da834bc25bfe69e57485b4b753b6a523a37e74b2c7aa1fbf656263ba791d483027dcd4778ac1b6d51d3fe556b7f4a6247ab97a94c47f6c474402a37b9d04e8b417a0731ae0c089df6befe0c90ae700a4870528d3789fb4fdaaa63e1f80abed5837e30b3b0afff456787e4a40a6890e92a23472a21f7476d06ade0bd3925ae83fe2d7d66007b25a70e1323eb4cc220d1a8e6749adc1aafe0a71f0827b9673b2a40c3d434d199e25a0902f4fa10b025d584cad32077df59969bddf593d16e2be4423ccaa7ef1fa28c68d8abbbedcce036e5c3eeda247eb9fd26c852697ef718f79e303c7f4de4686123b130483d42940664b889cecd52bb1f5eec11298c5bdf17a2f92bc1064d494f2da5f128642b2c1b2ef11ddee9e66046156fe8b6b289b8861b21849c21ae1b97ec9375a0c15ff64e60c004f3b924c77755a2ff7c72e9c27bc7cca996bc41e1789ed28b3b2b4f00b7ce05b517c3473b0d91f48f6fd5678939fce1eef73d5fa9cd786cc1799c5bd55f2f35c08478214a76d57ee6ad05c2428e482531a1602b7992b24c48d3df53a3a46b5db644a177b6686c21d522393f4d70ab0006bf38419a70ed7856f0b61b3495ed7ca7ef8be1896112bf10fd07e56da27b47cb3676317b316b94314259355fd53f89094b3d0a926565f728f046506b55c50f8b7b76ac7fd1bfd1a7597c3719a380c7fabe3fa3373f614669c3b77bd9502"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x11e8}}, 0x8000) socket$kcm(0x29, 0x5, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000121000, 0x0) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd9b}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r4}, 0x20) close(r4) r6 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r6, 0x32dc, 0x0, 0xe, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_open_procfs$pagemap(r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.312755096s ago: executing program 3 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) fanotify_mark(r1, 0x451, 0x8, r0, 0x0) mount$overlay(0xea, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 7.162364926s ago: executing program 4 (id=621): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendto$packet(r0, &(0x7f0000000500)="ac4362fbc619e02962cd5268d27f7fd0034b9f39c99828b0a7906cace86d73e0637c05339a7b440ae3abfbbe538214d818fc0a27428fb7af21625be69be5665a3546257c1230218cef8dd1b3326d047652815a9543a2ef2dad52e3dfa0043b8e09", 0x61, 0x11805, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000010000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000304c09d67e06138f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x253c, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x2, 0x9, 0x0, 0x4f, 0x3, 0x4}, 0x0, 0x0) shutdown(r7, 0x1) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r9 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000840)={0xfffffffffffffc78, &(0x7f0000000340)=ANY=[@ANYBLOB="40012e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) fcntl$setstatus(r8, 0x4, 0x40800) 7.085916098s ago: executing program 3 (id=622): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='thread_noise\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x2, &(0x7f0000000200)='y\x00'}, 0x30) r2 = socket(0x11, 0x2, 0xff) setsockopt(r2, 0x107, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e20, 0x6ba5, @empty, 0x43}}, 0x5}, 0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000002300)={r6, 0x7fff}, 0x8) sched_setscheduler(r3, 0x0, &(0x7f00000022c0)=0x3) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001f000020e0ff8d1dffffffffffff00000001000000000000000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0xfffffffc, 0x4, 0x6}}) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r11, &(0x7f0000000280)={0x2020}, 0x2020) 5.973733496s ago: executing program 0 (id=624): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) getpgrp(r1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00151f00"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044014}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001780)={'gre0\x00', &(0x7f0000001700)={'gretap0\x00', 0x0, 0x7800, 0x8000, 0xf8d9, 0x6, {{0x16, 0x4, 0x2, 0x3f, 0x58, 0x65, 0x0, 0x3, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@ssrr={0x89, 0xf, 0x66, [@private=0xa010102, @broadcast, @local]}, @cipso={0x86, 0x1e, 0x2, [{0x1, 0x8, "b07643557c25"}, {0x0, 0x10, "1937f3c90a60dad473e2444437ff"}]}, @end, @ssrr={0x89, 0x13, 0xdc, [@loopback, @multicast1, @private=0xa010101, @local]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003e80)={'batadv_slave_1\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000040)={r12, 0x1, 0x0, @link_local}, 0x10) setsockopt$packet_drop_memb(r11, 0x107, 0x2, &(0x7f0000000080)={r12, 0x1, 0x0, @multicast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004140)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000f80)="542baa11f5fa9189f0ae54574983918bcc5b92c6897f67105ad4a4c241cb78e2315a6a9bfcbbac1a801a4d436b1796abcf8d48b6c824fda540b3d7d30256ca66006e3e24c8042e7b2b8251ccd1d8b51a2f829a497823296aaf1ad94076fc0132", 0x60}, {&(0x7f0000000180)="308c17e451aea6128f75439d8f1df78ccfeca4a91dd28554118e10b308ea2d273235bf2a6d2ece77aa8a19ea5f7ed9e94de5da", 0x33}, {&(0x7f0000001000)="c473e7edadb77c5cc05561bc239d30b77341350c6d203b9e521ba9d672a9d9916877d8430be530e1", 0x28}, {&(0x7f0000001040)="4a16831259c2bf3a816b6377877b4aa500f7c91fe9a78e02c718c0bc283e9377e129fe14b5afe30fe17d80c3e2ae37c02d64919c536c44c2b1bdd3480f5dc1fbb249dcfb52578215ebf8fb3a51ec1d1fa17d0256a6249799c8fadfca9001dcef034d805f1c32f72f35d5941cd31947b9db73d32f16339b423c86059021bba5802913cf450c6e2fafc15fb3afef23499470780277e13240eb1542db5bc211e03bf393029e54c51c1a97f093158f397cc2f0dcd6a53f98d2ac6ee3ff22abecb2359ac06feb01a363cc024ad8b42f393f50ee436335", 0xd4}], 0x4, &(0x7f0000001180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xa9, [@loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}}}}], 0x68}}, {{&(0x7f0000001200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000001240)="bfb3478ed38b0451fe3ae7b42ad5457afe7a2d6c5c8ffc8c3b2ca9b821bb4834953796ad7344901385a45b3302668d54c62f18c8fccbaa1cd0260cb0d718bacaba8406adbc0bd2245b1be0ad10a7ecaa43d543e3296e50a42444c6618f85c66ab9bfcff57618c7a078d45331241279dec918777dd0e315f1cff8e9460eb83babec82b5ad3dc7821602ad5a0c239a2a761002fb6593d6d3466909bd09cae41aae621c19293a4ce7427d9a0d621ab81b6757d3ffed9e5f8677e1f8b0a0d0f9e5189e4531d3bb5568bcbc04d59b5436", 0xce}, {&(0x7f0000001340)="86203627a04615271d23c5942da45e38f2c06da8c6ae766f8aba0cddcf1ef9c1d46c56de1719047facacce81ffaadb9a7f4a8bd0afc73593b82e6f9db86fb63396c3c65e0be851a64bc3068181bf628a5c473eb98271adfea59149292ed60706454006dd06322ff985c3976c036885bf57bfa9d221cacadad107cd6df8c57b286facc3d129338a8b5872362fe011e2af756557cb6ab8ae508bf6e3b8f6fced15bf0e43d0ce0464852e482c63aa9d42a00056", 0xb2}, {&(0x7f0000001400)="e944afc8a4526b93642db418d5109a5605a2d5fd520416bc373949b5ad35e83217022ee3929e5fa7084eaf062efae68abcda60adff013e8ac1ec3a901d865183dbed40a289f3db255eb9d4add285c804421c", 0x52}, {&(0x7f0000001480)}, {&(0x7f0000002880)="296a86f077e89fb563c70fc399574712aa48e0803d3ea80e113212e66cecbeb3580f1132a77482ba9e7c8c8e9a4cebc1cc58508d38b9de2c1a34df504da7376ee39ffc0b45935a4e1aa7243a5df8a1e06118229c07b42000c048d8e6873697bba18b879c460bcfedfdc852e6d4ad9fa77698f5041ada8a2cb214a460420bec08c6852f6ffe804fd67a32c4730c9c0c755b0f5cdce2c1e7c7f6f4daf943179e012a9224ac6c818761e18a09e1614b92f1ff6472b8c85236d26fb96abb787c6b255e1eb1bac5911b6c7b60beb5ab62ab03667a0e8c99d7a439d73b46f44521232612c10d7ffca512ad2a34afb3df2313b7688b04b10eed696774abe52ae898ab16d04b3c8a5b104c4b1a44ca70b523fcc6bf396c81560bbf73fcccd0cdcc643c61c00c65f9a9788a8f508fcc1f4886a4d91aafe2112046d408327f753d2f6a46d0d96b9d8260f30f46e9d738b5eba2ddfefb96251c416d34a16442c447fff225453e990be30ab07bce762fd393f36406b6b56260f3f32522e9f17c75feb456ac498211184090ea8a526246cdd3d0dfc45cbefa1cf2365d8b3727217d88798e1ecbd7e66ca41b9b445875f4996c436d45740930d765b34a88ba90db10cc78cd4efb77bfbb32629a74019d4a8a7288e57430a1868e5e7e97bb4ff607b830ecdb43bde515ef74e364415ce727c63dd7fe18201328811cc2cc741611af62f8e043cdb1fa098b5a1d364053ab23738a7c542b0f438563119af56752edef421c75ccdf340008ef1ab73e3ed6752ab0636b2c0b44b06f1393f48f02466ab13ccc21861066c55440ff9772cab0f67321fe300a8fa48aae18700729f85163ff80391788eb066881869d05e123976873055e9f4704d08e1f194821b2be8c0189153f7fb1175fc5c795076775e0c0657e0b0f4ba01779a2d29e51f96f17a58641961b7a084ea7fbbb05618691aca6df4b5bda801a6e7fe4fa8373593c9b04a14ddb20a3da28e7ff90cd1d7082378583e3c1e47a1874c5936cc3d60decc7271641abcc7e75ed3bb5d0f68ddecd6d3581bb7ac5cdf8509fcd42f2d235ca2c3850c2210a5475ff42b238d4ee9d4a2e56a11a91c3437334cd156dc154ad5408af0d16dfec07e7798a2ef53f28a3b662e3b2aca5ed7f21cf46ae0f9589f15b771511bc1ff6848e521e06beef0f39063c2d7a19651cef353e79f1c9064fec01d93e5bdc9d0a96dc2160f0c7387481547412962d70355c144fab40d502dca9c4541f643940d2c2dba9c4dcf319c3c0ab420f1ccea95ec5238a310fa7d8b64e3c7e123fdabb3a7a9170f1e44054fe4509b6007cbff782bd5706493d21d747cfba3210e8a3935bcca660ad19efdd8d24d40a123374e1ce84aa91dd4a5f83c042936b2902f8e1763b2662f6d6acad54c0973e296de3147bac42d1ac36d2c22cea69059456ff43f353ebc4288539e60e6e7a23a12de92f64779aea0873899e87382505bf31b1e70991926eab8cd09f24ef2155a5f9978968d27c181b10bc53bdc05e0659ea6adc92c8c3deb55c9e8379ed33b75f3cd8f9f7f49caf664688dab1dcad1d4edddd12465fbde638827d2424852d548562cf661a5ec2ec64e553d8d36ae8a66102d84ae5023c484fb330efba1ae79bca4a159cabfecd205934f0870d52c2f2acc1589acbe5d68a4f864fa76f2818ec748661d9ec450936fb9ffcb05c273d5b1900fcf80f0aa95e6fcbc4bfdd28f2519a84ee0132a2d176eecd3338fe3fe3610c9c49b360809c0956a4df67eb352253d1a70d082d16529f04c974fda7c3d83dc56b03fe8e83fae9cd683b3348be9610e4e0b2dac30ec26aa92209ad3f4a0a7ec4ef0909d33e9f82e99840a70e0a6fab88a2f39661210657021850a7ac10b6496be7a46407ddc0b8ceeb0749318b2d9487146530aa8b1862abf74f70b9441a6b07225de24e6df4df629f1a7677fc0b03bf696ea055b9948afba644d1d2788ddc619c42bb6e02d84c1a59257c7c89cccc580da7c6ca06d283f75f49b9e01592fcac866a0b203a51ec27172300c0148ff06cc62775890023507c198d9f937002574750246b70c8666a26c2d77132b09b4ff1477132552359549f44cea068a17d12b5d3c4c1c30e4b9553e2e6f6f8aa81f27dda46a779840ace18fe7d95b527b43593ac634882be874483441e7242b07ad8b9846285bce6894327ee3f820302f0a6f988730da7696e7083980096d114551db239d0d78e7dd07dcc491c01e9a27599ad81846ad18884fc2daec6a467444fe0b64ffb20104aaf6ceea0ae33349b91c2eb87575884954f41e8e4dd5ddf3367bb99f152c259e857fc52eb3da2af9d01ca3570507731e7274016cc4568c1f4ce33d6f925aa8dea1bf35dd7ade33cdb9025b6c3ea3a8e8de587df95e2c2a714ccf23984806200bdeab832aff2d5dc6e32ddcd4ad86dd447e75cd2f93eb124c1c587ba16b73fca32b5cb50799babdb1b57fd51ca925734916ca908cf3488bb503d475cca7070bf912fa5ca436af349bb9c2eb4d674118c500e5a5468a5ecbece1328bbf5864f8e8cf582e380f57b9a7f0b94d9b57c71906644f90fecae1dabf5548b2ae789a5b078df5d3db6d1ffd6b47561b9fcec30582a862722abb007370cf64740ba8ab180242788c6a1ab6d684081154cba4e8aa30a347dd429d4f6f1caab75a29e611b674600f863f2911da8e9b22caaa2fa2500f96a419593934cac1f488a6c2806b199383f29596673f179783d3a1a7b5d2d874da2eadf6421de6e6970183a1bf494c5a7f0907e2e069b06c17fd4149767cecff49d4c574c256ad1e771f1473bea2e2668d2e20216cb102ab29e2723fcd22541a27fcf2575f61835a7e7b00bf9905c5e061564085189149d4e4de9cec6d690ab117d56bded432b07d8ac09f5db4bfe11b0a08b73e207395dc0255b79e061f618f4f71b45bbf1282b36cefcdc4ae8d295eabae43ddd8d16bf29070a5fefa84db4fc0e324023adcaa958a7f23cffa366b462f89e259f41662feb428af3a3030d700868abcde514ed1de2183a99ae400b702d4e5b6b14acd7f9e271a4fe15ab0985d6b6849163896331fe0665657b7a88a2d177368ab2957dee22b8f50bf192d8391d356cd81f0bdb36c858f38a159b6e7737ba908b8d98557a002c5b9f9274782a15e8d9755c8ce5cf6d7d19c56759c0b627f1f03895efd507d3b2a76197b21c154da8e9af477f8c04f9e5742049a65f105d96dca7d25832f3c5cd9e73f6331eea438df4f9eb1331286a41876e4e29d74e96c9b006afc3209939b67953cd482046f90c7384b1942bfb2347df72301f2b29cdbf4795e066cd43833420c76ea11c640293c3b471654867fc7164d5cf6068dfe3a1d876aa17f68546875bc9b11130b7c3bc4d06cb8cff344213fd7f79f3919a658a4c2cc360af6d2977f2f01620d071b5265e48193158cd4e6d9c8c87bb5c816534f43b62635f17a760bf6152abd2b329f899e23bb9cc89e469f8b096a213fc61a6fb0e838c731bb7dda4add8a03e79abb48fba5f848a1f2575cef901aedbbe2b0e4ccb077a34ce819a27bbc08c5aba21698783cbe19bf4505d1ecf68484b545577014f2339f8044133ffef7e762eadb2477541c8b1c79c63dd08ba688af8c6dbd40c23ff871af2a83f561ed51cf9ccebe220fd2c1a94080b2afdb43efb6e8818db0e8950c1bedd994a6bdc445661cea89de4bd8bf89b742a333f1957cbff2379669c153e860397b4e53f2bab600c795d3a5fc5bad51fce32507c3614af22e0574e30300e05eabf5a9e8cdee0700c859181cf081eeb8ce53c26533dd8e8b5ba2c99643bd530f182d558cc8b35d56f588f987417e82c0cb8bf999cbf05b96035acc71d3923a1e8b7cb6f5d9cb4a3131b650d73e12371aa5634f27753ede4106cc80720a367377d6c91ca73e3a50a33b275af9fb0546aab33d4e700a336492f2b3158f3391848d0beac4669106240826989c24f215bfe6fc15d34be158becee656743d202d91d2bc7c8bf7d9a2ee0b50daeb54969afe5568770c104bd7796d320bedb1bb5ec012168bab28c94675b11bc31018b5608ddc6b8c30d6ab482a466be648544b715beeb6142c9a6354c76b543b16e6087286faf6dd83b548d5483aea2430d400e88da6f5885aba44a7f34f51cedcad3e1c439000d073a11bdfd0b99d945d916b06feb2e0f195cedc1def54cb74eef4ed6a01e98edf3392d9bec9db453fa670e1f2edfb2533f1a634dd0367024f1facee9c622d62bcbc9eed790453d78a6b1393641d3ded3cd26e38d73bd55c692264f3ad5c005ccda2d56fb9f018c98e66aeb0213b48252939448524f08fc5823cb3b2ef3e5d2b527a5f7ffb2763ce30f85d0d3adcf1a279f02e296b5c9659a1af6fe3287643d513d96b97e490a9fe01bfb8151e3e4b3d822977dc54ad251f48a465fe79787f572c6d982f4ddb2b066343351ae8f01e207ebc2fde92bb0511906d9c70c68dd5b4f3e4b830fc0453c9117bd915f0e426258ac2e5a2aaa4d4f9a85630a6c281de37a83825fe245eebd0ef7fb5424a383179958721656145fd942762a96a2a80a6059425975448cde18c51eea058c5da4b54cd33265d9fbf817118e592dc8f54daee4a3bc5177fdf316c873222adcefb0e231ca58a8ce479ccbcefa76b95822cdb91af92064bc7529788160f761246bc642da24a6b98bd10f5a1b305b81d32f206c41ec30544e0caf3da92041055ed0dc9d9e248541aba2c692a1f18266f44458254f1a1655cf7ac6362da13b9a666a04d0ce1bb17a5e897cbd1490bbabd5bb8e1788bf223bb30e79fd834d7d7f78306846a1b92fe9e4345f1c3a288454acadffc2403ca9d888d51916b85dd9dca02994a4230fbbe6b1ef7652eb466127414565cad21ab1ebd2c17d6e0e76a019f66d4a869d2c1017c63e57abef0f83525d016a3bdaa7c32699fa7a1d3ec7bbe1ab61946ca322e98fc2bb4222c9337e712dfb0d118e8827c0b95caa9b5a1fce68b6a364a633904706d1acf30f04934604ee16f0bee96cdb16a5dae07611a71126294350dcd377e7e242b1c2e1c671aece024303b435145142a529856254833e7bb0b2e273ac5c4f7d25847cd42fa3ef2acb81a7086968135cd2f1df3e38532ab9a8c7232bf375fda4c98dd08cc953f1766f266fd0aafb72ad19601514a37f7bbebe8a3ee1ab1d08758abc0ad2204f88ac735d021d6d46b02f9c5a71432bc0f957027bc72761421e408e523bb331af5c0c630566e5e2bac83a2fbc8e566ee6c7b30a25f93ded6a987636a41272f854d587b17e63bd4c77ae04f479efbedf226032e25fe471269da4ac51494c9424178fc74a89bce4aaeea6f85007f8d43987c5de80705d65bebce2526a07ac4420be293b90d486de2ab5ef2a4cbf6a0107ffe86aa8712e89165b82312a04b422ed3c3eb3cf33a4aa1f2cec2b6e21c988ffb0763a2ba6f8508768792a3e9e4197f0adb10770fe61c71769aec77b189b454752cecb1a7c63d8d2c110e1a36ebcae38ae0d83dc75803e2513dab91af20652edc0b516e136694af551b4fe7e29ba3044ff004eeddef780cddb72568139fab4f26254e77d50fba142f3885cd262ed1234ae26ee9c5aa116417798edbb548869556c49c27668d53501933527c3ab79a3e629929d6f993d82fd0fa54c84afa195bf76d44eb719c404767c609339549529e763770ddfe22124add0762d816a5f05f2fdf430f1de2ee0f365d458e7c659e41a9bae0623e53b30806fa8b513e775babbc1d820a9db5a240b3bcdb669a36a59118a52466c", 0x1000}, {&(0x7f00000014c0)="31d9811b2ca522f2ea", 0x9}, {&(0x7f0000001500)="1563a047cd08bcaee7b14393bb7d22a43639b886d9af283387e93a9cb7bf1567abd4a594575f6f7f746e289fd88d56bce20a3a4d45aed8b5bc84e4ce5649d536c62c5254b60cf51c6bdcd3ccc39b8fb759e5ea9f5e46945a28048b0eb4837ab101cf52a3dc1d5997dbfe0e2a57e28d206825586409554f5a4db2a125665f68ceb6c086948c3f1c617b8ce151bc46e2b8e9e639803074404f88d8c01d2261e75027ad7ae99f06852f088f82c2e5482347acba36324b27abfdeeaa98c1e9e0bb7a89a7098267cc11047fbd1e91b44e09583558c4109abb9f0414761cc7cbe24eb92c1d23289a18e6de5925", 0xea}, {&(0x7f0000001600)="9149899e0c99a79bba3fc22f58624a", 0xf}], 0x9, &(0x7f0000003880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x15}, @private=0x9}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x68}}, {{&(0x7f0000003900)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003940)="af8e1903f15d80bd526a9f20383f646b8efbbb19e4e3df01a263110f23fc4d7916c58149aef37f9c16c67531a41d03083ec57d2c44fea96147a1b23ab00acbe9d20fc4a018ca87808751c41fe6eb71147aafeee91c3300a4829756bf0b17fdf35faa37", 0x63}, {&(0x7f00000039c0)="076510db1ac52b2ae30ca7dd62917a287e13080ab2a47b3c511f1582c920509fdf0cf415d80f21300bf8bb3406533cd1cc36bf55f7eec97c0b5843d8151ce3d2e290b1d71a43dafecef377aed8b724aaaaa971978bb5b89d836412274ea26aa129b6a9daf18f7566409bc30451bd8896d5b2a481c30a651da93805772d9b56b25998c6f10c64ce742ed1300201232cd7df85185bbe4b8a166135593a5ae3bae0b6fa66fa8bbe3ae51e6b3b6fab3c65d8ada86acd533f27bd6f6dfa10bea061082b8bbbd8955c36cff93c23ae866b29696d08442049dcfeb62183c55c56327a4d57deba0bb14df6500fe05fefd78f826783", 0xf1}], 0x2, &(0x7f0000003b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{&(0x7f0000003b40)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000003e00)=[{&(0x7f0000003b80)="4bd92d4bc1f4b4f37726acb694aec19bb1fe4985e1246c0bea90f1e54f54e8187c4808ff9bffe4a1ad42f4a1938c1bcb22c3452ce98f6133377809687326413453384a37b308b5dddbd010a14528c20bba0089631f7fe34c224e141448090b58f002c29a77f9cbdc415c8708df4cf967e6393a055f810e221380", 0x7a}, {&(0x7f0000003c00)="ebd0954af259ae48ccaac10459f565c41c327d0568f7db91dcd5970f1c23bc170766b2844cb5b737096c5517a4a54d97295da4ada497ad4474c85f", 0x3b}, {&(0x7f0000003c40)="c79815175184c4d8713e85e3da91a9c3331751ba30ba4d5a17e17bf57cf8c14233026b43dcb8837a8bebd0532f8bce17e948d1551cd9b3be6e79f3c9ec0324d61d3ccbb29e9c3858c6f5ee02e159665e02c22a62eec7c4f0f2cd0ba2a772143c732bc653de9eb93c0e030e686bb54cd793988a05f3e3661b18c33b18af282dc94565b272073c363ef51ad2ab9434dcfaa0be323158324698f56e34c3a6e540e1ecbb0a54edeec6a866c6b0fa0bca35561fc7ed8448aa10184463974a6bbb4d519de1ee6d2973dff56e0cb2bddfef4a40db0d29b44ca0a33532c465b07c", 0xdd}, {&(0x7f0000003d40)="cd7f07f6304cf8e0a5b448", 0xb}, {&(0x7f0000003d80)="b88dba47cdc00435e95fdc05d9740e7fcd4d803e279ec3e548689bff01fd5e34c9525e8aa27b35fabcc94f9edadc96332a70b43f7c1f2f5f8b7e5c1804a8cd5b7dd9", 0x42}], 0x5, &(0x7f0000003ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf4}}, @ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xc5, [@multicast1, @multicast2]}, @generic={0x82, 0x7, "500b0ce522"}, @lsrr={0x83, 0x17, 0x3a, [@dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0x9f, [@multicast1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @broadcast, @empty}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@end, @noop, @rr={0x7, 0x13, 0xf9, [@multicast1, @loopback, @multicast1, @broadcast]}]}}}], 0x128}}, {{&(0x7f0000004000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000004040), 0x0, &(0x7f0000004080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x99, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x20, [@private=0xa010100]}]}}}], 0xb8}}], 0x5, 0x80) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001480)={{&(0x7f00005aa000/0x2000)=nil, 0x2000}, 0x6}) 5.002260808s ago: executing program 3 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c15"], 0x1c}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="08002abd7000ffdbdf252c00000008000300", @ANYRES32=r5, @ANYBLOB="3f7e36c3ee82b5a68eec453ffb57de6754938bcd2a38320f2bd9c66b10d2a380ce30c30a82ea6dfb5b26beaac7385c7e4a7a04eb2610b415870f9761c2d9a645cbc25601d98a0d8fc6d927cf7cdbab741a403dda6aa812493f2677f59713aa929d0950439c448322eae6a416672c9a6228ea200049a05e84a5d920959ddc14d5905cc4ed5006515d9b3c8285f6dcdd9e65b94c9da569730d1350e4f93d03c6355b4093f68290c1eea09dbadd211f9780d087fc6256112570afb24ac7af9f9fbf85cb214af4984e91ae2add040506d85526d2fa6666bea9"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x20000000) r7 = socket(0x10, 0x803, 0x8) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x86, '\x00', r9, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r10}, &(0x7f0000000240), &(0x7f0000000480)=r12}, 0x20) recvmsg(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x12000) syz_open_dev$sg(0x0, 0x0, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x160}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r13, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x2c}}, 0x0) 4.877116467s ago: executing program 1 (id=626): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x2, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) (fail_nth: 8) 3.774259645s ago: executing program 4 (id=627): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) sendfile(r0, r0, 0x0, 0x15) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}, 0x21, 0x0, '\x00', @c}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20004000, '\x00', 0x0, r0, 0x3, 0x40000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x6e1300, 0x0) symlink(0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r3, @ANYRESHEX=r7], 0xfffffdef}}, 0x10) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 3.704405097s ago: executing program 1 (id=628): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x80000}, 0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x890c, &(0x7f0000000200)=@generic={0x2, 0x10000000000002, 0xffffffffffffffff}) r9 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xfffffffff0000000, 0x4000}) close_range(r6, r9, 0x0) 3.675420298s ago: executing program 3 (id=629): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000000)={0x1, 0x1fffffe, 0x82cd, 0x80000000006, 0x9, 0x100000001, 0xfffdfffffffffffe, 0x4, 0x0, 0x2, 0xfffffffd, 0x2}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x500) 3.434156777s ago: executing program 1 (id=630): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x80, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.376509614s ago: executing program 1 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) dup(0xffffffffffffffff) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000040100000400000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000040000f49a9064efea9a94d9d51c706d5ea1a458f2091da9203002f89ec743eecf73528e372f9d5bb6b9f209def396b4a4544fdc92503a8f000f27e2d1309cb0ae7a37c442e195390ed39a0e4da7b5c46534a88e08a46edbcadb611d87b9883e602a83e3fbc539708945c4e30ce6c3a8ee8bc0728719bd7d41a1919bd62904f3e9a44fce0cb40723500e075a0fff810011ab2020f3c16f1532d2d92d63d6f34d1383e90677d8455d62d5e42ffd8f8a29121739c820bd49de10d472bef09980e763dcbf4029185c2ebdc5e0094fe90b892d7525b6634ca14f04bae45c2777a1d0cf2b0841e3539f5e46c5c2ba9b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r3) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x11, 0x0, 0x4) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) mq_open(&(0x7f0000000000)='\x00', 0x800, 0x41, &(0x7f0000000100)={0xfff, 0x40, 0x5, 0x4}) 2.678347389s ago: executing program 4 (id=632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20043a00) 2.606126748s ago: executing program 3 (id=633): modify_ldt$read_default(0x2, 0x0, 0x17) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0xc48d73c017338ccc) keyctl$get_keyring_id(0x0, 0x0, 0x0) 2.60542538s ago: executing program 0 (id=634): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x1, 0x0, 0x0) 2.400549489s ago: executing program 1 (id=635): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x48) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf2d1f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_DO_IT(r8, 0xab03) ioctl$BLKSSZGET(r8, 0x1268, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) 2.176959685s ago: executing program 4 (id=636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) capget(&(0x7f0000000180), 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20048000) 1.994912954s ago: executing program 2 (id=637): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"}) ioperm(0x9, 0x9, 0x7) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, &(0x7f0000000400)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000400)='#', 0x1}], 0x3) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000440)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) semop(0x0, &(0x7f0000000200), 0x53) 1.234077529s ago: executing program 4 (id=638): r0 = syz_io_uring_setup(0x315b, &(0x7f00000002c0)={0x0, 0x70a1, 0x1040, 0x2, 0x21}, &(0x7f0000000100), &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "4ec97e01", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffdffffe) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0xf7, 0x8, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x20, 0x2e8e, 0x5}}) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x5, 0x8000, 0x8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000140), 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000080)={[{@name={'name', 0x3d, 'noprefix'}}]}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 1.156390629s ago: executing program 0 (id=639): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013000500fdfffffffeffffff07000000", @ANYRES32=r7, @ANYBLOB="2109020000000000d6631a8008dafdad880954ba64faf6c70004801ada9c2d"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x104) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000, 0x1}) eventfd(0x3) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x800) 1.057625317s ago: executing program 1 (id=640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_complete(0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r6) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="52c60000030000000000000000000000182d0000", @ANYRES32=r4, @ANYBLOB="000000000300000018170000", @ANYRES32=r2, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000004db5cfff08000000"], &(0x7f0000001700)='syzkaller\x00', 0xfffffffa, 0x64, &(0x7f0000000200)=""/100, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r5, r6, r3, r7, r2, r3, r3], &(0x7f00000005c0)=[{0x1, 0x1, 0x9, 0x5}, {0x1, 0x4, 0x6}, {0x4, 0x5, 0xe, 0x3}], 0x10, 0x4}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000002c0), 0x10) readv(r9, &(0x7f00000016c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r9], 0x80}}, 0x0) splice(r2, 0x0, r8, 0x0, 0x4ffe6, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800ad000100000080000000", @ANYRES32=r2, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='\x97gv\xc7\x00\x00;!\xc1\x1a\xa4$\xc1$L\xd5x\xe1f\xf5N?\xd9\r]\xa0\x1d\x96\x1cJ_o\x01\xed\x86\xc6&\x18\x99R\x1b\x98E', &(0x7f0000000100)='c\xd8^P\xd8', 0x0) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r11, 0x0, 0x0) 450.321013ms ago: executing program 4 (id=641): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x80, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 439.21862ms ago: executing program 3 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000000400)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {r3}, {}, 0xfffffffc, 0x80000001}) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0xfffffffffffffd73) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 0s ago: executing program 0 (id=643): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x3000000000000}, 0x0) kernel console output (not intermixed with test programs): full-speed USB device number 20 using dummy_hcd [ 167.124179][ T7309] VFS: Can't find a romfs filesystem on dev nullb0. [ 167.124179][ T7309] [ 167.134201][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 167.233584][ T30] audit: type=1400 audit(1768557386.118:462): avc: denied { create } for pid=7308 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 167.684886][ T2996] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.699351][ T2996] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.712056][ T5810] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 167.719647][ T5810] usb 1-1: can't read configurations, error -71 [ 167.727947][ T2996] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.962744][ T2996] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.360493][ T30] audit: type=1400 audit(1768557387.238:463): avc: denied { setopt } for pid=7336 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.385094][ T30] audit: type=1326 audit(1768557387.248:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.4.310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fda18f749 code=0x0 [ 168.500486][ T30] audit: type=1400 audit(1768557387.348:465): avc: denied { setattr } for pid=7334 comm="syz.1.309" path="pipe:[3869]" dev="pipefs" ino=3869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 168.501654][ T7344] FAULT_INJECTION: forcing a failure. [ 168.501654][ T7344] name failslab, interval 1, probability 0, space 0, times 0 [ 168.536454][ T5810] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 168.544094][ T7344] CPU: 1 UID: 0 PID: 7344 Comm: syz.3.312 Not tainted syzkaller #0 PREEMPT(full) [ 168.544107][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.544114][ T7344] Call Trace: [ 168.544117][ T7344] [ 168.544121][ T7344] dump_stack_lvl+0x16c/0x1f0 [ 168.544139][ T7344] should_fail_ex+0x512/0x640 [ 168.544149][ T7344] ? fs_reclaim_acquire+0xae/0x150 [ 168.544164][ T7344] should_failslab+0xc2/0x120 [ 168.544178][ T7344] __kmalloc_noprof+0xeb/0x910 [ 168.544198][ T7344] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 168.544217][ T7344] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 168.544231][ T7344] tomoyo_realpath_from_path+0xc2/0x6e0 [ 168.544247][ T7344] ? tomoyo_profile+0x47/0x60 [ 168.544258][ T7344] tomoyo_path_number_perm+0x245/0x580 [ 168.544271][ T7344] ? tomoyo_path_number_perm+0x237/0x580 [ 168.544284][ T7344] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 168.544298][ T7344] ? find_held_lock+0x2b/0x80 [ 168.544326][ T7344] ? find_held_lock+0x2b/0x80 [ 168.544341][ T7344] ? hook_file_ioctl_common+0x144/0x410 [ 168.544354][ T7344] ? __fget_files+0x20e/0x3c0 [ 168.544371][ T7344] security_file_ioctl+0x9b/0x240 [ 168.544387][ T7344] __x64_sys_ioctl+0xb7/0x210 [ 168.544401][ T7344] do_syscall_64+0xcd/0xf80 [ 168.544417][ T7344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.544428][ T7344] RIP: 0033:0x7f83a9f8f749 [ 168.544437][ T7344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.544446][ T7344] RSP: 002b:00007f83aadb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.544457][ T7344] RAX: ffffffffffffffda RBX: 00007f83aa1e6090 RCX: 00007f83a9f8f749 [ 168.544463][ T7344] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000008 [ 168.544469][ T7344] RBP: 00007f83aadb2090 R08: 0000000000000000 R09: 0000000000000000 [ 168.544474][ T7344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.544480][ T7344] R13: 00007f83aa1e6128 R14: 00007f83aa1e6090 R15: 00007ffd14832698 [ 168.544493][ T7344] [ 168.544533][ T7344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.640200][ T6101] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 168.770358][ T30] audit: type=1400 audit(1768557387.648:466): avc: denied { read write } for pid=7336 comm="syz.4.310" dev="sockfs" ino=12949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.792173][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 168.797918][ T5810] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.807847][ T5810] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.818672][ T5810] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 168.829579][ T5810] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 168.857561][ T5810] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.872166][ T5810] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.883586][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.943600][ T6101] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 168.952763][ T6101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.963998][ T6101] usb 3-1: Product: syz [ 168.968287][ T5810] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 168.991790][ T6101] usb 3-1: Manufacturer: syz [ 169.000815][ T6101] usb 3-1: SerialNumber: syz [ 169.014881][ T6101] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 169.039466][ T5953] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 169.160700][ T30] audit: type=1400 audit(1768557388.048:467): avc: denied { audit_write } for pid=7349 comm="syz.1.313" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 169.326247][ T7364] fuse: Bad value for 'fd' [ 169.420083][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5870 ms [ 169.428104][ C0] lec:lec_tx_timeout: lec0 [ 169.440178][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 171.742753][ T6101] usb 3-1: USB disconnect, device number 18 [ 171.753607][ T5953] usb 3-1: Service connection timeout for: 256 [ 171.759764][ T5953] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 171.768327][ T5953] ath9k_htc: Failed to initialize the device [ 171.774537][ T6101] usb 3-1: ath9k_htc: USB layer deinitialized [ 172.139731][ T6101] usb 1-1: USB disconnect, device number 21 [ 173.956256][ T30] audit: type=1400 audit(1768557392.838:468): avc: denied { append } for pid=7396 comm="syz.0.325" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.987817][ T7398] loop7: detected capacity change from 0 to 2640 [ 174.011500][ T7398] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.442799][ T7398] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.450119][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 174.458608][ C0] lec:lec_tx_timeout: lec0 [ 174.463242][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 174.519105][ T7403] syzkaller0: entered promiscuous mode [ 174.526035][ T7403] syzkaller0: entered allmulticast mode [ 174.634712][ T7405] Invalid logical block size (5) [ 174.640698][ T30] audit: type=1400 audit(1768557393.518:469): avc: denied { setopt } for pid=7396 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 174.661446][ T7398] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.669293][ T7398] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.672193][ T7403] tipc: Started in network mode [ 174.682018][ T7403] tipc: Node identity 527b89c67cd, cluster identity 4711 [ 174.682428][ T30] audit: type=1326 audit(1768557393.528:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.0.325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6f998f749 code=0x0 [ 174.689765][ T7403] tipc: Enabled bearer , priority 0 [ 174.723174][ T7398] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.731698][ T7398] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.739953][ T7398] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.747924][ T7398] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.756337][ T7398] ldm_validate_partition_table(): Disk read failed. [ 174.764645][ T7398] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.773656][ T7398] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.786498][ T7398] Dev loop7: unable to read RDB block 0 [ 174.790683][ T5810] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 174.792866][ T7398] loop7: unable to read partition table [ 174.805691][ T7398] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 174.817716][ T7399] tipc: Resetting bearer [ 174.827400][ T7413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 174.883165][ T7399] tipc: Disabling bearer [ 174.890497][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 174.899271][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 174.933626][ T7413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.950199][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 174.962585][ T5810] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 174.980176][ T5810] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 175.006517][ T7415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.011035][ T5810] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 175.022560][ T5810] usb 3-1: config 1 has no interface number 0 [ 175.028667][ T5810] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.040171][ T5810] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 175.052067][ T7415] bond1: (slave bond0): Enslaving as an active interface with an up link [ 175.055122][ T5810] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 175.070652][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.084558][ T7413] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 175.093680][ T5810] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 175.390183][ T5810] snd_usb_pod 3-1:1.1: set_interface failed [ 175.390342][ T5872] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 175.460216][ T5810] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 175.480600][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.488140][ T7413] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.496622][ T5810] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 175.510414][ T5810] usb 3-1: USB disconnect, device number 19 [ 175.553519][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.553575][ T30] audit: type=1400 audit(1768557394.438:471): avc: denied { bind } for pid=7425 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.560658][ T7413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.588146][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.595238][ T7413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.640948][ T30] audit: type=1400 audit(1768557394.498:472): avc: denied { write } for pid=7425 comm="syz.4.335" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.682743][ T5872] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 175.683150][ T7413] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 175.691885][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.722050][ T5872] usb 2-1: Product: syz [ 175.730160][ T5872] usb 2-1: Manufacturer: syz [ 175.734778][ T5872] usb 2-1: SerialNumber: syz [ 175.764162][ T5872] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.812595][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.005103][ T30] audit: type=1400 audit(1768557394.888:473): avc: denied { create } for pid=7431 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.113382][ T30] audit: type=1400 audit(1768557394.888:474): avc: denied { write } for pid=7431 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.150702][ T7437] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 176.176350][ T30] audit: type=1400 audit(1768557394.938:475): avc: denied { connect } for pid=7431 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.632538][ T5872] usb 2-1: USB disconnect, device number 12 [ 177.093830][ T30] audit: type=1400 audit(1768557395.508:476): avc: denied { ioctl } for pid=7438 comm="syz.4.338" path="socket:[13188]" dev="sockfs" ino=13188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.202067][ T10] usb 2-1: Service connection timeout for: 256 [ 177.208257][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 177.220471][ T10] ath9k_htc: Failed to initialize the device [ 177.268788][ T5872] usb 2-1: ath9k_htc: USB layer deinitialized [ 177.274964][ T30] audit: type=1400 audit(1768557395.508:477): avc: denied { connect } for pid=7438 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.560431][ T7461] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 178.772187][ T7444] zonefs (nullb0) ERROR: Not a zoned block device [ 179.110940][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 179.110954][ T30] audit: type=1400 audit(1768557397.998:481): avc: denied { connect } for pid=7465 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.470105][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 179.478116][ C0] lec:lec_tx_timeout: lec0 [ 179.482618][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 179.673624][ T30] audit: type=1400 audit(1768557398.548:482): avc: denied { connect } for pid=7453 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.849728][ T30] audit: type=1400 audit(1768557398.578:483): avc: denied { write } for pid=7453 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.902815][ T5916] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.922894][ T30] audit: type=1400 audit(1768557398.578:484): avc: denied { append } for pid=7453 comm="syz.0.343" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 180.056640][ T7482] fuse: Unknown parameter '0x0000000000000004' [ 180.070318][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 180.077838][ T5916] usb 5-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 180.106711][ T5916] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 2 [ 180.137910][ T5916] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.175501][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.192896][ T5916] usb 5-1: Product: syz [ 180.207252][ T5916] usb 5-1: Manufacturer: syz [ 180.220108][ T5916] usb 5-1: SerialNumber: syz [ 180.260346][ T30] audit: type=1400 audit(1768557399.118:485): avc: denied { connect } for pid=7490 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 180.433534][ T7498] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 180.433534][ T7498] ÄUúeâ[¦ÓÎ%#s' [ 180.535527][ T30] audit: type=1400 audit(1768557399.418:486): avc: denied { write } for pid=7500 comm="syz.2.358" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 180.590135][ T5978] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 180.672170][ T10] usb 5-1: USB disconnect, device number 11 [ 180.760202][ T5978] usb 1-1: Using ep0 maxpacket: 8 [ 181.107227][ T5978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 181.150174][ T5978] usb 1-1: config 199 has an invalid interface number: 224 but max is 0 [ 181.168661][ T5978] usb 1-1: config 199 has no interface number 0 [ 181.178775][ T5978] usb 1-1: config 199 interface 224 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 181.210128][ T5978] usb 1-1: config 199 interface 224 has no altsetting 0 [ 181.239100][ T5978] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=92.83 [ 181.288165][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.357838][ T5978] usb 1-1: Product: 桧 [ 181.401885][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 181.410787][ T5978] usb 1-1: Manufacturer: Ј [ 181.415380][ T5978] usb 1-1: SerialNumber: syz [ 181.861180][ T5978] lg-vl600 1-1:199.224: skipping garbage [ 181.879087][ T5978] usb 1-1: bad CDC descriptors [ 181.890128][ T5953] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 181.890272][ T5978] usb 1-1: USB disconnect, device number 22 [ 182.050300][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 182.055582][ T7518] mmap: syz.2.360 (7518) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.104677][ T5953] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.120138][ T5953] usb 4-1: config 0 has no interface number 0 [ 182.130429][ T5953] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 182.140195][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.154160][ T5953] usb 4-1: Product: syz [ 182.160164][ T5953] usb 4-1: Manufacturer: syz [ 182.165211][ T5953] usb 4-1: SerialNumber: syz [ 182.188805][ T5953] usb 4-1: config 0 descriptor?? [ 182.350892][ T30] audit: type=1400 audit(1768557401.228:487): avc: denied { execute } for pid=7519 comm="syz.1.362" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 182.416273][ T5953] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 182.456255][ T30] audit: type=1400 audit(1768557401.288:488): avc: denied { map } for pid=7519 comm="syz.1.362" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.123541][ T5953] gspca_spca1528: reg_w err -110 [ 183.140204][ T5953] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 183.236413][ T30] audit: type=1400 audit(1768557402.118:489): avc: denied { bind } for pid=7529 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.122991][ T30] audit: type=1400 audit(1768557403.008:490): avc: denied { module_request } for pid=7535 comm="syz.4.366" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 184.253403][ T5872] usb 4-1: USB disconnect, device number 21 [ 184.361345][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.367'. [ 184.490100][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 184.498153][ C0] lec:lec_tx_timeout: lec0 [ 184.502951][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 184.616137][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077d99c00: rx timeout, send abort [ 184.625458][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d54800: rx timeout, send abort [ 184.633924][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888077d99c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.649071][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057d54800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.666324][ T30] audit: type=1400 audit(1768557403.518:491): avc: denied { read } for pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 184.751280][ T30] audit: type=1400 audit(1768557403.518:492): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.810114][ T30] audit: type=1400 audit(1768557403.518:493): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.956448][ T30] audit: type=1400 audit(1768557403.518:494): avc: denied { add_name } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.268392][ T5137] Bluetooth: hci2: command 0x0401 tx timeout [ 186.268431][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 186.274434][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 186.280437][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 186.330111][ T30] audit: type=1400 audit(1768557403.518:495): avc: denied { create } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.420137][ T30] audit: type=1400 audit(1768557403.518:496): avc: denied { append open } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.440434][ T5917] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 186.443293][ T30] audit: type=1400 audit(1768557403.518:497): avc: denied { getattr } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.891425][ T5917] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 186.899887][ T5917] usb 4-1: can't read configurations, error -22 [ 186.947428][ T30] audit: type=1400 audit(1768557405.808:498): avc: denied { getopt } for pid=7565 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.093156][ T5917] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 187.300030][ T5917] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 187.385294][ T5917] usb 4-1: can't read configurations, error -22 [ 187.403165][ T5917] usb usb4-port1: attempt power cycle [ 187.720220][ T6290] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.861155][ T30] audit: type=1400 audit(1768557406.488:499): avc: denied { append } for pid=7574 comm="syz.0.379" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 187.890282][ T5917] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 188.223419][ T5917] usb 4-1: device not accepting address 24, error -71 [ 188.240318][ T6290] usb 2-1: Using ep0 maxpacket: 32 [ 188.555942][ T6290] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 188.571119][ T6290] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 188.579724][ T6290] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 188.629605][ T6290] usb 2-1: config 1 has no interface number 0 [ 188.666672][ T6290] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.695448][ T6290] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 188.695875][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 188.739620][ T6290] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 188.830979][ T6290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.968759][ T6290] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 189.021086][ T7013] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 189.030581][ T7593] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 189.038391][ T7593] netlink: 96 bytes leftover after parsing attributes in process `syz.2.371'. [ 189.101444][ T7593] netlink: 1 bytes leftover after parsing attributes in process `syz.2.371'. [ 189.113133][ T7593] netlink: 'syz.2.371': attribute type 2 has an invalid length. [ 189.357101][ T6290] snd_usb_pod 2-1:1.1: set_interface failed [ 189.363360][ T6290] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 189.370568][ T7013] usb 1-1: Using ep0 maxpacket: 16 [ 189.392741][ T7013] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.401270][ T6290] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 189.410045][ T7013] usb 1-1: config 0 has no interface number 0 [ 189.437552][ T6290] usb 2-1: USB disconnect, device number 13 [ 189.454322][ T7013] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 189.500565][ T7013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.510102][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 189.510634][ T7013] usb 1-1: Product: syz [ 189.518119][ C0] lec:lec_tx_timeout: lec0 [ 189.527109][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 189.537290][ T7013] usb 1-1: Manufacturer: syz [ 189.544091][ T7013] usb 1-1: SerialNumber: syz [ 189.607241][ T7013] usb 1-1: config 0 descriptor?? [ 189.616583][ T7013] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 190.059329][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 190.059344][ T30] audit: type=1326 audit(1768557408.938:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fda18f749 code=0x7ffc0000 [ 190.102625][ T30] audit: type=1326 audit(1768557408.978:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fda18f749 code=0x7ffc0000 [ 190.230495][ T7013] gspca_spca1528: reg_w err -71 [ 190.235559][ T30] audit: type=1326 audit(1768557408.978:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fda18f749 code=0x7ffc0000 [ 190.280155][ T5872] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 190.297963][ T30] audit: type=1326 audit(1768557408.978:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fda18f749 code=0x7ffc0000 [ 190.322898][ T30] audit: type=1326 audit(1768557408.978:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fda18f749 code=0x7ffc0000 [ 190.346176][ T7013] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 190.349820][ T7013] usb 1-1: USB disconnect, device number 23 [ 190.367354][ T30] audit: type=1326 audit(1768557408.978:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fda18f749 code=0x7ffc0000 [ 190.394485][ T30] audit: type=1326 audit(1768557408.978:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fda18f749 code=0x7ffc0000 [ 190.417977][ T30] audit: type=1326 audit(1768557408.978:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fda18f749 code=0x7ffc0000 [ 190.443648][ T30] audit: type=1326 audit(1768557408.978:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3fda18f749 code=0x7ffc0000 [ 190.472162][ T5872] usb 4-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 190.482506][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.492064][ T30] audit: type=1326 audit(1768557408.978:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fda18f749 code=0x7ffc0000 [ 190.515739][ T5872] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.526404][ T5916] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 190.534847][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.543876][ T5872] usb 4-1: SerialNumber: syz [ 190.547850][ T7606] FAULT_INJECTION: forcing a failure. [ 190.547850][ T7606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.571070][ T7606] CPU: 1 UID: 0 PID: 7606 Comm: syz.2.386 Not tainted syzkaller #0 PREEMPT(full) [ 190.571091][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.571100][ T7606] Call Trace: [ 190.571106][ T7606] [ 190.571112][ T7606] dump_stack_lvl+0x16c/0x1f0 [ 190.571139][ T7606] should_fail_ex+0x512/0x640 [ 190.571159][ T7606] _copy_from_user+0x2e/0xd0 [ 190.571185][ T7606] copy_msghdr_from_user+0x98/0x160 [ 190.571205][ T7606] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 190.571228][ T7606] ? __pfx__kstrtoull+0x10/0x10 [ 190.571252][ T7606] ___sys_sendmsg+0xfe/0x1d0 [ 190.571273][ T7606] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.571303][ T7606] ? find_held_lock+0x2b/0x80 [ 190.571352][ T7606] __sys_sendmmsg+0x200/0x420 [ 190.571375][ T7606] ? __pfx___sys_sendmmsg+0x10/0x10 [ 190.571401][ T7606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.571435][ T7606] ? fput+0x70/0xf0 [ 190.571450][ T7606] ? ksys_write+0x1ac/0x250 [ 190.571471][ T7606] ? __pfx_ksys_write+0x10/0x10 [ 190.571496][ T7606] __x64_sys_sendmmsg+0x9c/0x100 [ 190.571514][ T7606] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.571536][ T7606] do_syscall_64+0xcd/0xf80 [ 190.571558][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.571574][ T7606] RIP: 0033:0x7ff92e98f749 [ 190.571587][ T7606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.571602][ T7606] RSP: 002b:00007ff92f771038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 190.571618][ T7606] RAX: ffffffffffffffda RBX: 00007ff92ebe5fa0 RCX: 00007ff92e98f749 [ 190.571628][ T7606] RDX: 0000000000000001 RSI: 0000200000001440 RDI: 0000000000000006 [ 190.571638][ T7606] RBP: 00007ff92f771090 R08: 0000000000000000 R09: 0000000000000000 [ 190.571647][ T7606] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 190.571657][ T7606] R13: 00007ff92ebe6038 R14: 00007ff92ebe5fa0 R15: 00007ffce6273908 [ 190.571680][ T7606] [ 190.783536][ T5872] usb 4-1: 0:2 : does not exist [ 190.790353][ T5872] usb 4-1: unit 5 not found! [ 190.808325][ T5872] usb 4-1: USB disconnect, device number 26 [ 190.829176][ T7035] udevd[7035]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.850261][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 190.864351][ T7610] futex_wake_op: syz.2.388 tries to shift op by -1; fix this program [ 190.869495][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 190.901999][ T5916] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.914190][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.922721][ T5916] usb 5-1: Product: syz [ 190.926949][ T5916] usb 5-1: Manufacturer: syz [ 190.931753][ T5916] usb 5-1: SerialNumber: syz [ 190.946986][ T5916] usb 5-1: config 0 descriptor?? [ 190.961292][ T5916] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 191.049643][ T5916] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 192.356221][ T5916] em28xx 5-1:0.0: chip ID is em2870 [ 192.963156][ T7640] FAULT_INJECTION: forcing a failure. [ 192.963156][ T7640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.976421][ T7640] CPU: 0 UID: 0 PID: 7640 Comm: syz.0.394 Not tainted syzkaller #0 PREEMPT(full) [ 192.976442][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.976449][ T7640] Call Trace: [ 192.976453][ T7640] [ 192.976457][ T7640] dump_stack_lvl+0x16c/0x1f0 [ 192.976475][ T7640] should_fail_ex+0x512/0x640 [ 192.976487][ T7640] _copy_from_user+0x2e/0xd0 [ 192.976506][ T7640] copy_msghdr_from_user+0x98/0x160 [ 192.976519][ T7640] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 192.976532][ T7640] ? sched_clock_cpu+0x6c/0x530 [ 192.976548][ T7640] ___sys_sendmsg+0xfe/0x1d0 [ 192.976560][ T7640] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.976592][ T7640] __sys_sendmsg+0x16d/0x220 [ 192.976604][ T7640] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.976620][ T7640] ? __x64_sys_sendmsg+0x11/0xb0 [ 192.976631][ T7640] ? __x64_sys_sendmsg+0x4f/0xb0 [ 192.976643][ T7640] do_syscall_64+0xcd/0xf80 [ 192.976659][ T7640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.976670][ T7640] RIP: 0033:0x7fe6f998f749 [ 192.976679][ T7640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.976689][ T7640] RSP: 002b:00007fe6fa7d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.976700][ T7640] RAX: ffffffffffffffda RBX: 00007fe6f9be6090 RCX: 00007fe6f998f749 [ 192.976706][ T7640] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 192.976712][ T7640] RBP: 00007fe6fa7d2090 R08: 0000000000000000 R09: 0000000000000000 [ 192.976718][ T7640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.976723][ T7640] R13: 00007fe6f9be6128 R14: 00007fe6f9be6090 R15: 00007fffaea0f3c8 [ 192.976736][ T7640] [ 193.550618][ T5916] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 193.570103][ T5916] em28xx 5-1:0.0: board has no eeprom [ 193.717725][ T5916] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 193.725908][ T5916] em28xx 5-1:0.0: dvb set to bulk mode. [ 193.732424][ T5872] em28xx 5-1:0.0: Binding DVB extension [ 193.770096][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.848758][ T7649] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.396'. [ 194.444836][ T5916] usb 5-1: USB disconnect, device number 12 [ 194.491766][ T5872] em28xx 5-1:0.0: Registering input extension [ 194.526948][ T5916] em28xx 5-1:0.0: Disconnecting em28xx [ 194.550078][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 194.558139][ C0] lec:lec_tx_timeout: lec0 [ 194.562823][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 194.572469][ T5916] em28xx 5-1:0.0: Closing input extension [ 194.698468][ T5916] em28xx 5-1:0.0: Freeing device [ 195.605075][ T7671] syzkaller0: entered promiscuous mode [ 195.610614][ T7671] syzkaller0: entered allmulticast mode [ 195.883948][ T7676] netlink: 'syz.1.401': attribute type 10 has an invalid length. [ 195.891737][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.401'. [ 195.900914][ T7676] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 196.111832][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 196.111862][ T30] audit: type=1400 audit(1768557414.988:627): avc: denied { ioctl } for pid=7677 comm="syz.2.402" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 196.200193][ T5978] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 196.313448][ T5872] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.443923][ T5978] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 196.456524][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.478065][ T5978] usb 1-1: config 0 descriptor?? [ 196.633140][ T5978] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 196.647368][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.694278][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.757688][ T30] audit: type=1400 audit(1768557415.638:628): avc: denied { write } for pid=7686 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.453217][ T5978] gspca_sunplus: reg_w_riv err -110 [ 197.458855][ T5978] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 197.473190][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.486113][ T5872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.495591][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.530165][ T6290] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 198.378706][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 198.380558][ T5872] usb 5-1: config 0 descriptor?? [ 198.450120][ T7013] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 198.470132][ T6290] usb 3-1: Using ep0 maxpacket: 8 [ 198.478710][ T6290] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 198.488134][ T6290] usb 3-1: config 179 has no interface number 0 [ 198.494942][ T6290] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 198.512052][ T6290] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 198.984344][ T6290] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 198.999020][ T5872] usbhid 5-1:0.0: can't add hid device: -71 [ 199.009343][ T5872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 199.019261][ T6290] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 199.025632][ T5872] usb 5-1: USB disconnect, device number 13 [ 199.060244][ T6290] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 199.061410][ T7700] xt_socket: unknown flags 0x4c [ 199.084059][ T7013] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 199.092503][ T6290] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 199.101614][ T7013] usb 2-1: config 8 has no interface number 0 [ 199.107716][ T6290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.115741][ T7013] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 199.130897][ T7690] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.142119][ T7013] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 199.171161][ T7013] usb 2-1: config 8 interface 177 has no altsetting 0 [ 199.184200][ T7013] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 199.206554][ T7013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.228562][ T7692] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 199.440039][ T7013] usb 2-1: string descriptor 0 read error: -71 [ 199.449573][ T7013] ir_toy 2-1:8.177: required endpoints not found [ 199.459315][ T7013] usb 2-1: USB disconnect, device number 14 [ 199.570150][ T6290] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 199.708951][ T30] audit: type=1400 audit(1768557418.588:629): avc: denied { read } for pid=7703 comm="syz.4.409" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 199.732123][ T6290] usb 4-1: Using ep0 maxpacket: 8 [ 199.774878][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 199.783983][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 199.792897][ T7690] netlink: 'syz.2.405': attribute type 19 has an invalid length. [ 199.801035][ T7690] netlink: 'syz.2.405': attribute type 20 has an invalid length. [ 199.821560][ T7690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.832871][ T7690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.844642][ T7013] usb 3-1: USB disconnect, device number 20 [ 199.850635][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 199.850676][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 199.877774][ T6290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.888723][ T6290] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 199.902255][ T6290] usb 4-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=29.ac [ 199.911702][ T6290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.946959][ T6290] usb 4-1: config 0 descriptor?? [ 200.155846][ T5872] usb 1-1: USB disconnect, device number 24 [ 200.166333][ T6290] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 200.365383][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.376115][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.386217][ T7013] usb 4-1: USB disconnect, device number 27 [ 200.646783][ T7716] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 200.653573][ T7716] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 200.674613][ T7716] vhci_hcd vhci_hcd.0: Device attached [ 200.780071][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6220 ms [ 200.788123][ C0] lec:lec_tx_timeout: lec0 [ 200.797989][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 200.950379][ T7013] usb 34-1: SetAddress Request (2) to port 0 [ 201.057979][ T7013] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 201.550191][ T7717] vhci_hcd: connection reset by peer [ 201.573353][ T12] vhci_hcd vhci_hcd.0: stop threads [ 201.609365][ T12] vhci_hcd vhci_hcd.0: release socket [ 201.633004][ T7728] SELinux: unknown common  [ 201.641746][ T7728] SELinux: failed to load policy [ 201.649350][ T30] audit: type=1400 audit(1768557420.508:630): avc: denied { load_policy } for pid=7723 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 201.709495][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 201.787220][ T30] audit: type=1400 audit(1768557420.658:631): avc: denied { create } for pid=7727 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.901243][ T30] audit: type=1400 audit(1768557420.788:632): avc: denied { read } for pid=7736 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.590237][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.881654][ T43] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 203.332422][ T7751] FAULT_INJECTION: forcing a failure. [ 203.332422][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 203.332520][ T7751] CPU: 0 UID: 0 PID: 7751 Comm: syz.3.420 Not tainted syzkaller #0 PREEMPT(full) [ 203.332539][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.332548][ T7751] Call Trace: [ 203.332558][ T7751] [ 203.332562][ T7751] dump_stack_lvl+0x16c/0x1f0 [ 203.332581][ T7751] should_fail_ex+0x512/0x640 [ 203.332591][ T7751] ? __kmalloc_cache_noprof+0x5f/0x800 [ 203.332602][ T7751] should_failslab+0xc2/0x120 [ 203.332616][ T7751] __kmalloc_cache_noprof+0x80/0x800 [ 203.332626][ T7751] ? vkms_plane_duplicate_state+0x87/0x130 [ 203.332640][ T7751] ? vkms_plane_duplicate_state+0x87/0x130 [ 203.332650][ T7751] vkms_plane_duplicate_state+0x87/0x130 [ 203.332660][ T7751] drm_atomic_get_plane_state+0x279/0x760 [ 203.332678][ T7751] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 203.332693][ T7751] ? __mutex_lock+0x669/0x1ca0 [ 203.332708][ T7751] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 203.332734][ T7751] drm_client_modeset_commit_locked+0x14d/0x580 [ 203.332748][ T7751] drm_client_modeset_commit+0x4f/0x80 [ 203.332759][ T7751] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 203.332779][ T7751] drm_fb_helper_set_par+0x15d/0x1b0 [ 203.332794][ T7751] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 203.332811][ T7751] fb_set_var+0x822/0x1280 [ 203.332829][ T7751] ? __pfx_fb_set_var+0x10/0x10 [ 203.332849][ T7751] ? preempt_schedule_thunk+0x16/0x30 [ 203.332861][ T7751] ? preempt_schedule_common+0x44/0xc0 [ 203.332875][ T7751] ? preempt_schedule_thunk+0x16/0x30 [ 203.332887][ T7751] ? __mutex_lock+0x669/0x1ca0 [ 203.332901][ T7751] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.332914][ T7751] ? irqentry_exit+0x1dd/0x8c0 [ 203.332928][ T7751] ? do_fb_ioctl+0x2ca/0x7e0 [ 203.332949][ T7751] ? is_console_locked+0x9/0x20 [ 203.332960][ T7751] ? fbcon_info_from_console+0xf9/0x1d0 [ 203.332974][ T7751] ? fbcon_modechange_possible+0x337/0x450 [ 203.332991][ T7751] do_fb_ioctl+0x745/0x7e0 [ 203.333003][ T7751] ? __pfx_do_fb_ioctl+0x10/0x10 [ 203.333020][ T7751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.333047][ T7751] ? selinux_file_ioctl+0x180/0x270 [ 203.333064][ T7751] fb_ioctl+0xe5/0x150 [ 203.333085][ T7751] ? __pfx_fb_ioctl+0x10/0x10 [ 203.333096][ T7751] __x64_sys_ioctl+0x18e/0x210 [ 203.333110][ T7751] do_syscall_64+0xcd/0xf80 [ 203.333125][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.333135][ T7751] RIP: 0033:0x7f83a9f8f749 [ 203.333144][ T7751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.333154][ T7751] RSP: 002b:00007f83aadb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.333164][ T7751] RAX: ffffffffffffffda RBX: 00007f83aa1e6090 RCX: 00007f83a9f8f749 [ 203.333170][ T7751] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000008 [ 203.333176][ T7751] RBP: 00007f83aadb2090 R08: 0000000000000000 R09: 0000000000000000 [ 203.333182][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.333188][ T7751] R13: 00007f83aa1e6128 R14: 00007f83aa1e6090 R15: 00007ffd14832698 [ 203.333202][ T7751] [ 204.063021][ T43] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 204.096825][ T43] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 204.138093][ T43] usb 5-1: config 220 has no interface number 2 [ 204.168398][ T43] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 204.200121][ T43] usb 5-1: config 220 interface 0 has no altsetting 0 [ 204.217021][ T43] usb 5-1: config 220 interface 76 has no altsetting 0 [ 204.251047][ T43] usb 5-1: config 220 interface 1 has no altsetting 0 [ 204.281953][ T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 204.300109][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.320126][ T43] usb 5-1: Product: syz [ 204.324266][ T43] usb 5-1: Manufacturer: syz [ 204.328823][ T43] usb 5-1: SerialNumber: syz [ 206.540077][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 206.548105][ C0] lec:lec_tx_timeout: lec0 [ 206.560109][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 207.307650][ T7013] usb 34-1: device descriptor read/8, error -110 [ 207.403247][ T43] usb 5-1: selecting invalid altsetting 0 [ 207.420400][ T43] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 207.454219][ T43] uvcvideo 5-1:220.0: No valid video chain found. [ 207.488304][ T43] usb 5-1: selecting invalid altsetting 0 [ 207.500601][ T43] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 207.540387][ T43] usb 5-1: USB disconnect, device number 14 [ 207.700122][ T5978] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 207.731196][ T7013] usb usb34-port1: attempt power cycle [ 207.876989][ T7778] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 207.884735][ T5978] usb 3-1: Using ep0 maxpacket: 16 [ 207.886154][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.913399][ T43] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 207.942611][ T5978] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 207.971804][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.006013][ T5978] usb 3-1: config 0 descriptor?? [ 208.120189][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 208.146320][ T43] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.179557][ T43] usb 4-1: config 179 has no interface number 0 [ 208.192236][ T43] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 208.203539][ T43] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 208.215245][ T43] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.230383][ T43] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 208.242075][ T43] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 208.258294][ T43] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 208.268575][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.307208][ T7775] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 208.321163][ T7013] usb usb34-port1: unable to enumerate USB device [ 208.616611][ T5978] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 209.141486][ T7785] rdma_op ffff88805677e9f0 conn xmit_rdma 0000000000000000 [ 209.371011][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 209.435407][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 209.540346][ T5978] usb 3-1: USB disconnect, device number 21 [ 209.588020][ T7775] netlink: 'syz.3.422': attribute type 19 has an invalid length. [ 209.674018][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.682180][ T7775] netlink: 'syz.3.422': attribute type 20 has an invalid length. [ 209.703441][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.035862][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.043289][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.520383][ T7013] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 210.721760][ T7013] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.730390][ T7013] usb 2-1: config 0 has no interface number 0 [ 210.737510][ T7013] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 210.752859][ T7013] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 210.766098][ T7013] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.780361][ T7013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.018865][ T7013] usb 2-1: config 0 descriptor?? [ 211.038239][ T7814] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 211.040999][ T7800] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.112464][ T7013] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 211.403573][ T7797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.461344][ T7797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.492863][ T7818] netlink: 'syz.2.438': attribute type 1 has an invalid length. [ 212.073019][ T7797] batman_adv: batadv0: Interface deactivated: veth3 [ 212.082159][ T5953] usb 4-1: USB disconnect, device number 28 [ 212.082170][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 212.097796][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 212.201616][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.261014][ T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.270336][ T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.281201][ T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.380059][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 212.388132][ C0] lec:lec_tx_timeout: lec0 [ 212.392920][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 212.568080][ T7013] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 214.247946][ T7013] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.308626][ T7013] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 214.439954][ T7013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 214.489421][ T5978] usb 2-1: USB disconnect, device number 15 [ 214.521180][ T7013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 214.580523][ T30] audit: type=1400 audit(1768557431.413:633): avc: denied { mount } for pid=7834 comm="syz.0.443" name="/" dev="hugetlbfs" ino=15619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 214.607011][ T7013] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.621697][ T7013] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 214.630648][ T30] audit: type=1400 audit(1768557431.523:634): avc: denied { getopt } for pid=7839 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 214.650748][ T7013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.689195][ T7013] usb 3-1: Product: syz [ 214.700064][ T7013] usb 3-1: Manufacturer: syz [ 214.704656][ T7013] usb 3-1: SerialNumber: syz [ 214.724127][ T7013] usb 3-1: config 0 descriptor?? [ 214.732962][ T7821] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 214.745204][ T7013] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 215.022272][ T7821] team0: Port device team_slave_0 removed [ 215.050109][ T5978] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 215.108371][ T7821] macsec1: entered allmulticast mode [ 215.113721][ T7821] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 215.132955][ T7013] usb 3-1: USB disconnect, device number 22 [ 215.220123][ T6101] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 215.221469][ T5978] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.236480][ T5978] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 215.246633][ T5978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.256025][ T5978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 215.267512][ T5978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 215.280176][ T5978] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.289202][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.297229][ T5978] usb 2-1: Product: syz [ 215.301395][ T5978] usb 2-1: Manufacturer: syz [ 215.309006][ T5978] cdc_wdm 2-1:1.0: skipping garbage [ 215.314681][ T5978] cdc_wdm 2-1:1.0: skipping garbage [ 215.321034][ T5978] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 215.326923][ T5978] cdc_wdm 2-1:1.0: Unknown control protocol [ 215.373347][ T6101] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 215.390105][ T6101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.398142][ T6101] usb 4-1: Product: syz [ 215.404346][ T6101] usb 4-1: Manufacturer: syz [ 215.408942][ T6101] usb 4-1: SerialNumber: syz [ 215.419436][ T6101] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 215.442509][ T5953] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 215.685985][ T6101] usb 2-1: USB disconnect, device number 16 [ 215.925495][ T7858] netlink: 'syz.0.449': attribute type 1 has an invalid length. [ 216.092910][ T5978] usb 4-1: USB disconnect, device number 29 [ 216.420195][ T6101] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 216.620867][ T6101] usb 1-1: Using ep0 maxpacket: 8 [ 216.631744][ T6101] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 216.645501][ T6101] usb 1-1: config 179 has no interface number 0 [ 216.659109][ T6101] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 216.677759][ T6101] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 216.860107][ T5953] usb 4-1: Service connection timeout for: 256 [ 217.400778][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 217.408814][ C0] lec:lec_tx_timeout: lec0 [ 217.413350][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 217.582026][ T5953] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 217.590526][ T5953] ath9k_htc: Failed to initialize the device [ 217.596558][ T6101] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.608002][ T5978] usb 4-1: ath9k_htc: USB layer deinitialized [ 217.612867][ T6101] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 217.625679][ T6101] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 217.639266][ T6101] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 218.436501][ T6101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.447381][ T7866] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.450373][ T30] audit: type=1400 audit(1768557435.333:635): avc: denied { ioctl } for pid=7880 comm="syz.4.457" path="/dev/input/mouse0" dev="devtmpfs" ino=995 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 218.483693][ T30] audit: type=1400 audit(1768557435.373:636): avc: denied { read } for pid=7882 comm="syz.3.459" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 218.506909][ T30] audit: type=1400 audit(1768557435.373:637): avc: denied { open } for pid=7882 comm="syz.3.459" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 218.594856][ T7883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.601550][ T7883] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 218.618143][ T7883] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.624590][ T7883] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 218.633160][ T7883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.640986][ T7883] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 218.657776][ T7883] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.664359][ T7883] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 218.732128][ T7893] fuse: Unknown parameter 'fd0x0000000000000004' [ 218.920172][ T5953] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 219.029540][ T30] audit: type=1400 audit(1768557435.913:638): avc: denied { listen } for pid=7899 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 219.112734][ T5953] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 219.140112][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 219.168087][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 219.180244][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 219.204566][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 219.233146][ T7866] netlink: 'syz.0.452': attribute type 19 has an invalid length. [ 219.280255][ T5953] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 219.290193][ T7866] netlink: 'syz.0.452': attribute type 20 has an invalid length. [ 219.340906][ T5953] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 219.377610][ T7908] 9p: Bad value for 'rfdno' [ 219.384806][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.385134][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.453646][ T30] audit: type=1400 audit(1768557436.343:639): avc: denied { shutdown } for pid=7904 comm="syz.2.460" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.487731][ T7913] PKCS8: Unsupported PKCS#8 version [ 219.506673][ T5953] usb 2-1: Product: syz [ 219.516701][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.526832][ T5953] usb 2-1: Manufacturer: syz [ 219.533847][ T5953] usb 2-1: SerialNumber: syz [ 219.548248][ T6101] usb 1-1: USB disconnect, device number 25 [ 219.554166][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 219.554189][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 219.572597][ T5953] usb 2-1: config 0 descriptor?? [ 219.578488][ T7889] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.592165][ T5953] usb 2-1: ucan: probing device on interface #0 [ 219.613174][ T5953] usb 2-1: ucan: invalid in_ep MaxPacketSize [ 219.619233][ T5953] usb 2-1: ucan: probe failed; try to update the device firmware [ 220.206110][ T7923] 9p: Bad value for 'rfdno' [ 220.630984][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 220.637878][ T5811] Bluetooth: hci2: command 0x0401 tx timeout [ 220.700242][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 220.706534][ T5811] Bluetooth: hci4: command 0x0405 tx timeout [ 220.910273][ T7013] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 221.120117][ T7013] usb 1-1: Using ep0 maxpacket: 8 [ 221.201199][ T30] audit: type=1400 audit(1768557438.093:640): avc: denied { write } for pid=7931 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 221.505763][ T7013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.525099][ T7013] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.534236][ T7013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.544257][ T7013] usb 1-1: config 0 descriptor?? [ 221.573789][ T5953] usb 2-1: USB disconnect, device number 17 [ 221.658169][ T7943] netlink: 'syz.4.474': attribute type 4 has an invalid length. [ 221.666007][ T7943] netlink: 152 bytes leftover after parsing attributes in process `syz.4.474'. [ 221.959422][ T7013] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 222.420064][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 222.428132][ C0] lec:lec_tx_timeout: lec0 [ 222.432638][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 222.490538][ T6101] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 222.576734][ T5825] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 222.585251][ T30] audit: type=1400 audit(1768557439.473:641): avc: denied { write } for pid=7965 comm="syz.2.483" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 222.613951][ T30] audit: type=1400 audit(1768557439.493:642): avc: denied { ioctl } for pid=7965 comm="syz.2.483" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 222.660246][ T6101] usb 2-1: Using ep0 maxpacket: 8 [ 222.673006][ T6101] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 222.679086][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 222.690055][ T6101] usb 2-1: config 179 has no interface number 0 [ 222.696643][ T6101] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 222.700129][ T5825] Bluetooth: hci2: command 0x0401 tx timeout [ 222.709761][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 222.725752][ T6101] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 222.739557][ T30] audit: type=1326 audit(1768557439.623:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.2.485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff92e98f749 code=0x0 [ 222.763312][ T6101] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 222.774841][ T6101] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 222.780943][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 222.792913][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 222.802359][ T6101] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 222.829316][ T6101] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 222.841895][ T6101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.859871][ T7960] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.110078][ T6101] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 223.266055][ T6101] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.275662][ T6101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.278992][ T5917] usb 1-1: USB disconnect, device number 26 [ 223.283992][ T6101] usb 5-1: Product: syz [ 223.305928][ T6101] usb 5-1: Manufacturer: syz [ 223.316637][ T6101] usb 5-1: SerialNumber: syz [ 223.337493][ T6101] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 223.356231][ T5953] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.514998][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 223.533122][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 223.577282][ T7960] netlink: 'syz.1.481': attribute type 19 has an invalid length. [ 223.586520][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.609968][ T7960] netlink: 'syz.1.481': attribute type 20 has an invalid length. [ 223.640866][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.677053][ T6101] usb 2-1: USB disconnect, device number 18 [ 223.677094][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 223.691266][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 223.827784][ T30] audit: type=1804 audit(1768557440.713:644): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.491" name="/newroot/96/file1" dev="tmpfs" ino=550 res=1 errno=0 [ 223.999226][ T5917] usb 5-1: USB disconnect, device number 15 [ 224.238147][ T7996] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 224.260944][ T7996] netlink: 96 bytes leftover after parsing attributes in process `syz.2.492'. [ 224.270099][ T7996] netlink: 658 bytes leftover after parsing attributes in process `syz.2.492'. [ 224.279100][ T7996] netlink: 1 bytes leftover after parsing attributes in process `syz.2.492'. [ 224.335879][ T7013] IPVS: starting estimator thread 0... [ 224.557691][ T8003] IPVS: using max 40 ests per chain, 96000 per kthread [ 224.621974][ T5953] usb 5-1: Service connection timeout for: 256 [ 224.634667][ T5953] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 224.702079][ T8014] Cannot find add_set index 0 as target [ 224.749525][ T30] audit: type=1400 audit(1768557441.573:645): avc: denied { ioctl } for pid=8005 comm="syz.3.495" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 224.894797][ T5811] Bluetooth: hci4: command 0x0405 tx timeout [ 224.925471][ T5953] ath9k_htc: Failed to initialize the device [ 225.015868][ T5917] usb 5-1: ath9k_htc: USB layer deinitialized [ 225.156764][ T8026] Illegal XDP return value 1776363634 on prog (id 122) dev syz_tun, expect packet loss! [ 225.246143][ T8030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.502'. [ 225.503125][ T30] audit: type=1400 audit(1768557442.393:646): avc: denied { read write } for pid=8034 comm="syz.0.503" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 225.581057][ T30] audit: type=1400 audit(1768557442.413:647): avc: denied { open } for pid=8034 comm="syz.0.503" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 225.643635][ T8026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8026 comm=syz.2.502 [ 225.657596][ T30] audit: type=1400 audit(1768557442.543:648): avc: denied { read write } for pid=8036 comm="syz.3.504" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 225.685481][ T30] audit: type=1400 audit(1768557442.573:649): avc: denied { open } for pid=8036 comm="syz.3.504" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 225.817555][ T8052] FAULT_INJECTION: forcing a failure. [ 225.817555][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.845421][ T8052] CPU: 1 UID: 0 PID: 8052 Comm: syz.4.508 Not tainted syzkaller #0 PREEMPT(full) [ 225.845445][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.845454][ T8052] Call Trace: [ 225.845459][ T8052] [ 225.845466][ T8052] dump_stack_lvl+0x16c/0x1f0 [ 225.845493][ T8052] should_fail_ex+0x512/0x640 [ 225.845511][ T8052] _copy_from_user+0x2e/0xd0 [ 225.845536][ T8052] kstrtouint_from_user+0xd6/0x1d0 [ 225.845555][ T8052] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 225.845574][ T8052] ? __lock_acquire+0x436/0x2890 [ 225.845598][ T8052] ? lock_acquire+0x179/0x330 [ 225.845623][ T8052] proc_fail_nth_write+0x83/0x220 [ 225.845643][ T8052] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 225.845667][ T8052] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 225.845683][ T8052] vfs_write+0x2a0/0x11d0 [ 225.845706][ T8052] ? __pfx___mutex_lock+0x10/0x10 [ 225.845733][ T8052] ? __pfx_vfs_write+0x10/0x10 [ 225.845761][ T8052] ? __fget_files+0x20e/0x3c0 [ 225.845793][ T8052] ksys_write+0x12a/0x250 [ 225.845814][ T8052] ? __pfx_ksys_write+0x10/0x10 [ 225.845842][ T8052] do_syscall_64+0xcd/0xf80 [ 225.845868][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.845884][ T8052] RIP: 0033:0x7f3fda18e1ff [ 225.845898][ T8052] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 225.845914][ T8052] RSP: 002b:00007f3fdb0a5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 225.845929][ T8052] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3fda18e1ff [ 225.845940][ T8052] RDX: 0000000000000001 RSI: 00007f3fdb0a50a0 RDI: 0000000000000004 [ 225.845949][ T8052] RBP: 00007f3fdb0a5090 R08: 0000000000000000 R09: 0000000000000000 [ 225.845959][ T8052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 225.845968][ T8052] R13: 00007f3fda3e6038 R14: 00007f3fda3e5fa0 R15: 00007ffc352d3328 [ 225.845993][ T8052] [ 226.363095][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 226.363109][ T30] audit: type=1400 audit(1768557443.253:652): avc: denied { bind } for pid=8062 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 226.560111][ T30] audit: type=1400 audit(1768557443.353:653): avc: denied { listen } for pid=8062 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 227.440051][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 227.448103][ C0] lec:lec_tx_timeout: lec0 [ 227.453248][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 227.720392][ T8094] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.519'. [ 227.722514][ T30] audit: type=1400 audit(1768557444.613:654): avc: denied { setopt } for pid=8085 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 227.778522][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.519'. [ 227.902791][ T8093] FAULT_INJECTION: forcing a failure. [ 227.902791][ T8093] name failslab, interval 1, probability 0, space 0, times 0 [ 227.960148][ T8093] CPU: 0 UID: 0 PID: 8093 Comm: syz.3.518 Not tainted syzkaller #0 PREEMPT(full) [ 227.960173][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.960184][ T8093] Call Trace: [ 227.960189][ T8093] [ 227.960199][ T8093] dump_stack_lvl+0x16c/0x1f0 [ 227.960227][ T8093] should_fail_ex+0x512/0x640 [ 227.960241][ T8093] ? kmem_cache_alloc_noprof+0x62/0x770 [ 227.960262][ T8093] should_failslab+0xc2/0x120 [ 227.960284][ T8093] kmem_cache_alloc_noprof+0x83/0x770 [ 227.960300][ T8093] ? skb_clone+0x190/0x3f0 [ 227.960323][ T8093] ? skb_clone+0x190/0x3f0 [ 227.960339][ T8093] skb_clone+0x190/0x3f0 [ 227.960358][ T8093] pfkey_broadcast_one+0xb9/0x380 [ 227.960380][ T8093] pfkey_broadcast+0x293/0x460 [ 227.960409][ T8093] pfkey_sendmsg+0x74d/0x850 [ 227.960434][ T8093] ____sys_sendmsg+0xa5d/0xc30 [ 227.960458][ T8093] ? copy_msghdr_from_user+0x10a/0x160 [ 227.960476][ T8093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.960502][ T8093] ? __lock_acquire+0x436/0x2890 [ 227.960528][ T8093] ___sys_sendmsg+0x134/0x1d0 [ 227.960548][ T8093] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.960565][ T8093] ? find_held_lock+0x2b/0x80 [ 227.960616][ T8093] __sys_sendmsg+0x16d/0x220 [ 227.960634][ T8093] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.960650][ T8093] ? __mutex_unlock_slowpath+0x10/0x790 [ 227.960685][ T8093] do_syscall_64+0xcd/0xf80 [ 227.960709][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.960725][ T8093] RIP: 0033:0x7f83a9f8f749 [ 227.960738][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.960750][ T8093] RSP: 002b:00007f83aadd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.960763][ T8093] RAX: ffffffffffffffda RBX: 00007f83aa1e5fa0 RCX: 00007f83a9f8f749 [ 227.960772][ T8093] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 227.960779][ T8093] RBP: 00007f83aadd3090 R08: 0000000000000000 R09: 0000000000000000 [ 227.960787][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.960796][ T8093] R13: 00007f83aa1e6038 R14: 00007f83aa1e5fa0 R15: 00007ffd14832698 [ 227.960815][ T8093] [ 227.990492][ T8099] faux_driver vgem: [drm] Unknown color mode 268435463; guessing buffer size. [ 228.549423][ T8104] FAULT_INJECTION: forcing a failure. [ 228.549423][ T8104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.565251][ T8104] CPU: 1 UID: 0 PID: 8104 Comm: syz.3.522 Not tainted syzkaller #0 PREEMPT(full) [ 228.565274][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.565284][ T8104] Call Trace: [ 228.565290][ T8104] [ 228.565296][ T8104] dump_stack_lvl+0x16c/0x1f0 [ 228.565324][ T8104] should_fail_ex+0x512/0x640 [ 228.565343][ T8104] _copy_from_user+0x2e/0xd0 [ 228.565370][ T8104] copy_group_source_from_sockptr+0x601/0x6b0 [ 228.565398][ T8104] ? __pfx_copy_group_source_from_sockptr+0x10/0x10 [ 228.565433][ T8104] ? __lock_acquire+0x436/0x2890 [ 228.565467][ T8104] ? find_held_lock+0x2b/0x80 [ 228.565490][ T8104] ? is_bpf_text_address+0x8a/0x1a0 [ 228.565509][ T8104] ? look_up_lock_class+0x59/0x130 [ 228.565536][ T8104] do_ipv6_mcast_group_source+0xb4/0x260 [ 228.565564][ T8104] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 228.565614][ T8104] ? __local_bh_enable_ip+0xa4/0x120 [ 228.565638][ T8104] ? lockdep_hardirqs_on+0x7c/0x110 [ 228.565664][ T8104] do_ipv6_setsockopt+0x20de/0x4680 [ 228.565695][ T8104] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 228.565719][ T8104] ? avc_has_perm_noaudit+0x117/0x3b0 [ 228.565740][ T8104] ? avc_has_perm_noaudit+0x149/0x3b0 [ 228.565759][ T8104] ? avc_has_perm+0x144/0x1f0 [ 228.565776][ T8104] ? __pfx_avc_has_perm+0x10/0x10 [ 228.565793][ T8104] ? get_pid_task+0x106/0x250 [ 228.565811][ T8104] ? proc_fail_nth_write+0x9f/0x220 [ 228.565833][ T8104] ? sock_has_perm+0x258/0x2f0 [ 228.565852][ T8104] ? __pfx_sock_has_perm+0x10/0x10 [ 228.565871][ T8104] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 228.565895][ T8104] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 228.565926][ T8104] ? ipv6_setsockopt+0xcb/0x170 [ 228.565940][ T8104] ipv6_setsockopt+0xcb/0x170 [ 228.565958][ T8104] tcp_setsockopt+0xa7/0x100 [ 228.565978][ T8104] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 228.566003][ T8104] do_sock_setsockopt+0xf3/0x1d0 [ 228.566027][ T8104] __sys_setsockopt+0x1a0/0x230 [ 228.566049][ T8104] __x64_sys_setsockopt+0xbd/0x160 [ 228.566065][ T8104] ? do_syscall_64+0x91/0xf80 [ 228.566086][ T8104] ? lockdep_hardirqs_on+0x7c/0x110 [ 228.566108][ T8104] do_syscall_64+0xcd/0xf80 [ 228.566132][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.566148][ T8104] RIP: 0033:0x7f83a9f8f749 [ 228.566162][ T8104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.566177][ T8104] RSP: 002b:00007f83aadd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 228.566193][ T8104] RAX: ffffffffffffffda RBX: 00007f83aa1e5fa0 RCX: 00007f83a9f8f749 [ 228.566203][ T8104] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000003 [ 228.566212][ T8104] RBP: 00007f83aadd3090 R08: 0000000000000108 R09: 0000000000000000 [ 228.566227][ T8104] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 228.566236][ T8104] R13: 00007f83aa1e6038 R14: 00007f83aa1e5fa0 R15: 00007ffd14832698 [ 228.566261][ T8104] [ 229.400102][ T5978] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 229.554021][ T5978] usb 4-1: device descriptor read/64, error -71 [ 229.800144][ T5978] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 230.211096][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 230.270087][ T5978] usb 4-1: device descriptor read/64, error -71 [ 230.293015][ T8132] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 230.370673][ T8132] VFS: Can't find a romfs filesystem on dev nullb0. [ 230.370673][ T8132] [ 230.491853][ T5978] usb usb4-port1: attempt power cycle [ 230.890116][ T5978] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 230.917439][ T5811] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 230.948881][ T5978] usb 4-1: device descriptor read/8, error -71 [ 231.000088][ T7013] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 231.234947][ T5978] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 231.263220][ T7013] usb 1-1: Invalid ep0 maxpacket: 32 [ 231.660566][ T5978] usb 4-1: device descriptor read/8, error -71 [ 231.770127][ T7013] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 231.820316][ T5978] usb usb4-port1: unable to enumerate USB device [ 231.949682][ T30] audit: type=1400 audit(1768557446.838:655): avc: denied { sqpoll } for pid=8152 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 232.010309][ T7013] usb 1-1: Invalid ep0 maxpacket: 32 [ 232.035753][ T7013] usb usb1-port1: attempt power cycle [ 232.461767][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 232.469864][ C0] lec:lec_tx_timeout: lec0 [ 232.474474][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 232.587152][ T8164] FAULT_INJECTION: forcing a failure. [ 232.587152][ T8164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.650064][ T8164] CPU: 0 UID: 0 PID: 8164 Comm: syz.3.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.650092][ T8164] Tainted: [L]=SOFTLOCKUP [ 232.650098][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.650107][ T8164] Call Trace: [ 232.650112][ T8164] [ 232.650119][ T8164] dump_stack_lvl+0x16c/0x1f0 [ 232.650144][ T8164] should_fail_ex+0x512/0x640 [ 232.650162][ T8164] _copy_to_user+0x32/0xd0 [ 232.650192][ T8164] simple_read_from_buffer+0xcb/0x170 [ 232.650216][ T8164] proc_fail_nth_read+0x197/0x240 [ 232.650234][ T8164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.650252][ T8164] ? rw_verify_area+0xcf/0x6c0 [ 232.650270][ T8164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.650286][ T8164] vfs_read+0x1e4/0xcf0 [ 232.650306][ T8164] ? __pfx___mutex_lock+0x10/0x10 [ 232.650331][ T8164] ? __pfx_vfs_read+0x10/0x10 [ 232.650357][ T8164] ? __fget_files+0x20e/0x3c0 [ 232.650391][ T8164] ksys_read+0x12a/0x250 [ 232.650410][ T8164] ? __pfx_ksys_read+0x10/0x10 [ 232.650436][ T8164] do_syscall_64+0xcd/0xf80 [ 232.650460][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.650476][ T8164] RIP: 0033:0x7f83a9f8e15c [ 232.650489][ T8164] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 232.650504][ T8164] RSP: 002b:00007f83aadd3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.650520][ T8164] RAX: ffffffffffffffda RBX: 00007f83aa1e5fa0 RCX: 00007f83a9f8e15c [ 232.650530][ T8164] RDX: 000000000000000f RSI: 00007f83aadd30a0 RDI: 0000000000000004 [ 232.650539][ T8164] RBP: 00007f83aadd3090 R08: 0000000000000000 R09: 0000000000000000 [ 232.650548][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.650557][ T8164] R13: 00007f83aa1e6038 R14: 00007f83aa1e5fa0 R15: 00007ffd14832698 [ 232.650580][ T8164] [ 232.965168][ T7013] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 233.036594][ T7013] usb 1-1: Invalid ep0 maxpacket: 32 [ 234.170521][ T7013] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 234.233725][ T5978] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 234.460124][ T7013] usb 1-1: device not accepting address 30, error -71 [ 234.468815][ T7013] usb usb1-port1: unable to enumerate USB device [ 234.497197][ T5978] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.949533][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.957653][ T30] audit: type=1400 audit(1768557449.518:656): avc: denied { getopt } for pid=8175 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 234.978584][ T5978] usb 5-1: Product: syz [ 234.998745][ T5978] usb 5-1: Manufacturer: syz [ 235.003565][ T5978] usb 5-1: SerialNumber: syz [ 235.046155][ T5978] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.233858][ T5917] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 235.519319][ T30] audit: type=1400 audit(1768557450.408:657): avc: denied { execute } for pid=8193 comm="syz.3.550" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 236.054162][ T5978] usb 5-1: USB disconnect, device number 16 [ 236.460415][ T5917] usb 5-1: Service connection timeout for: 256 [ 236.460444][ T5917] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 236.460892][ T5917] ath9k_htc: Failed to initialize the device [ 236.461135][ T5978] usb 5-1: ath9k_htc: USB layer deinitialized [ 236.706260][ T30] audit: type=1400 audit(1768557451.598:658): avc: denied { write } for pid=8203 comm="syz.0.551" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.729638][ T8204] random: crng reseeded on system resumption [ 236.761089][ T30] audit: type=1400 audit(1768557451.628:659): avc: denied { ioctl } for pid=8203 comm="syz.0.551" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 237.033366][ T8213] netlink: 64 bytes leftover after parsing attributes in process `syz.2.555'. [ 237.157757][ T8217] netlink: 'syz.2.556': attribute type 1 has an invalid length. [ 237.180504][ T6101] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 237.257771][ T8217] bond1: entered promiscuous mode [ 237.287247][ T8217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.330101][ T6101] usb 2-1: device descriptor read/64, error -71 [ 237.490049][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 237.498147][ C0] lec:lec_tx_timeout: lec0 [ 237.503045][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 237.620235][ T6101] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 237.762668][ T6101] usb 2-1: device descriptor read/64, error -71 [ 237.862082][ T8236] loop7: detected capacity change from 0 to 2640 [ 237.868863][ T8236] buffer_io_error: 11 callbacks suppressed [ 237.868876][ T8236] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.880369][ T6101] usb usb2-port1: attempt power cycle [ 237.884930][ T5917] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 237.896211][ T8236] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.905535][ T8236] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.910070][ T5916] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 237.913445][ T8236] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.929910][ T8236] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.971161][ T8238] Invalid logical block size (5) [ 237.976148][ T8236] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.977581][ T30] audit: type=1400 audit(1768557452.868:660): avc: denied { setopt } for pid=8235 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 237.984587][ T8236] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.005762][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 238.015228][ T8236] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.028955][ T8236] ldm_validate_partition_table(): Disk read failed. [ 238.035896][ T8236] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.044161][ T8236] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.051360][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.052408][ T8236] Dev loop7: unable to read RDB block 0 [ 238.063370][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.068924][ T8236] loop7: unable to read partition table [ 238.078308][ T5917] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 238.085119][ T8236] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 238.093326][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.103280][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.126849][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.127460][ T5917] usb 3-1: config 0 descriptor?? [ 238.137838][ T5916] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.150549][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.158589][ T5916] usb 1-1: Product: syz [ 238.170296][ T5916] usb 1-1: Manufacturer: syz [ 238.174996][ T5916] usb 1-1: SerialNumber: syz [ 238.220242][ T6101] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 238.240527][ T6101] usb 2-1: device descriptor read/8, error -71 [ 238.280998][ T5978] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 238.392980][ T5916] usb 1-1: 0:2 : does not exist [ 238.402470][ T5916] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 238.432313][ T5916] usb 1-1: USB disconnect, device number 31 [ 238.450199][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 238.458723][ T5978] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.480509][ T6101] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 238.484792][ T5978] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.490373][ T8100] udevd[8100]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.495772][ T5978] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 238.522150][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.530582][ T6101] usb 2-1: device descriptor read/8, error -71 [ 238.537660][ T5978] usb 5-1: config 0 descriptor?? [ 238.640712][ T6101] usb usb2-port1: unable to enumerate USB device [ 238.749057][ T30] audit: type=1400 audit(1768557453.638:661): avc: denied { ioctl } for pid=8235 comm="syz.4.562" path="socket:[16867]" dev="sockfs" ino=16867 ioctlcmd=0x9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 238.786466][ T30] audit: type=1326 audit(1768557453.678:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.4.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fda18f749 code=0x0 [ 239.151055][ T7013] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 239.260166][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 239.300086][ T7013] usb 4-1: Using ep0 maxpacket: 8 [ 239.307336][ T7013] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 239.321072][ T7013] usb 4-1: config 179 has no interface number 0 [ 239.330562][ T7013] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 239.349365][ T7013] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 239.367636][ T7013] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 239.380464][ T7013] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 239.395121][ T7013] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 239.409938][ T7013] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 239.419034][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 239.425845][ T7013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.433954][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 239.446095][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 239.460756][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.469074][ T8244] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 239.476517][ T24] usb 1-1: Product: syz [ 239.483577][ T24] usb 1-1: Manufacturer: syz [ 239.493775][ T24] usb 1-1: SerialNumber: syz [ 239.513922][ T24] usb 1-1: config 0 descriptor?? [ 239.528684][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 240.128985][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 240.137987][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 240.147192][ T8244] netlink: 'syz.3.564': attribute type 19 has an invalid length. [ 240.157389][ T8244] netlink: 'syz.3.564': attribute type 20 has an invalid length. [ 240.188777][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.221748][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.239002][ T5953] usb 4-1: USB disconnect, device number 34 [ 240.239049][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 240.254221][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 240.354169][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 240.363996][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 240.384838][ T5917] usb 3-1: USB disconnect, device number 23 [ 240.600167][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 240.749336][ T24] gspca_zc3xx: reg_w_i err -71 [ 240.779829][ T43] usb 2-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid maxpacket 57464, setting to 64 [ 240.795772][ T43] usb 2-1: config 2 interface 0 has no altsetting 0 [ 240.805340][ T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 240.814492][ T8258] netlink: 'syz.3.568': attribute type 13 has an invalid length. [ 240.823289][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.832252][ T43] usb 2-1: Product: syz [ 240.836477][ T43] usb 2-1: Manufacturer: syz [ 240.841319][ T43] usb 2-1: SerialNumber: syz [ 240.856236][ T8258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.900762][ T5978] usbhid 5-1:0.0: can't add hid device: -71 [ 240.911084][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 240.920498][ T5978] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 240.975054][ T5978] usb 5-1: USB disconnect, device number 17 [ 241.015717][ T8260] netlink: 36 bytes leftover after parsing attributes in process `syz.4.569'. [ 241.306247][ T5916] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 241.357656][ T30] audit: type=1400 audit(1768557456.248:663): avc: denied { ioctl } for pid=8264 comm="syz.2.570" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.390994][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 241.402123][ T24] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 241.412376][ T8265] futex_wake_op: syz.2.570 tries to shift op by 32; fix this program [ 241.426825][ T24] usb 1-1: USB disconnect, device number 32 [ 241.471667][ T5916] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 241.494161][ T5916] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.523684][ T5916] usb 4-1: config 2 interface 0 has no altsetting 0 [ 241.540365][ T5916] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 241.559191][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 241.568363][ T5916] usb 4-1: SerialNumber: syz [ 241.576808][ T30] audit: type=1400 audit(1768557456.468:664): avc: denied { setattr } for pid=8272 comm="syz.0.574" name="NETLINK" dev="sockfs" ino=16358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 241.624350][ T8275] FAULT_INJECTION: forcing a failure. [ 241.624350][ T8275] name failslab, interval 1, probability 0, space 0, times 0 [ 241.640092][ T8275] CPU: 1 UID: 0 PID: 8275 Comm: syz.2.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.640126][ T8275] Tainted: [L]=SOFTLOCKUP [ 241.640131][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.640140][ T8275] Call Trace: [ 241.640145][ T8275] [ 241.640151][ T8275] dump_stack_lvl+0x16c/0x1f0 [ 241.640181][ T8275] should_fail_ex+0x512/0x640 [ 241.640197][ T8275] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 241.640217][ T8275] should_failslab+0xc2/0x120 [ 241.640236][ T8275] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 241.640254][ T8275] ? alloc_inode+0x64/0x240 [ 241.640274][ T8275] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 241.640289][ T8275] ? alloc_inode+0x64/0x240 [ 241.640302][ T8275] alloc_inode+0x64/0x240 [ 241.640317][ T8275] new_inode+0x22/0x1c0 [ 241.640329][ T8275] __debugfs_create_file+0x105/0x530 [ 241.640343][ T8275] debugfs_create_file_full+0x41/0x60 [ 241.640357][ T8275] ? __pfx_macvtap_setup+0x10/0x10 [ 241.640373][ T8275] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 241.640389][ T8275] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 241.640426][ T8275] ? alloc_netdev_mqs+0xd7/0x1550 [ 241.640445][ T8275] ? lockdep_init_map_type+0x5c/0x270 [ 241.640464][ T8275] alloc_netdev_mqs+0x314/0x1550 [ 241.640479][ T8275] rtnl_create_link+0xc08/0xf60 [ 241.640493][ T8275] rtnl_newlink+0xb3b/0x1f50 [ 241.640510][ T8275] ? __pfx_rtnl_newlink+0x10/0x10 [ 241.640522][ T8275] ? find_held_lock+0x2b/0x80 [ 241.640545][ T8275] ? avc_has_perm_noaudit+0x117/0x3b0 [ 241.640565][ T8275] ? avc_has_perm_noaudit+0x149/0x3b0 [ 241.640602][ T8275] ? find_held_lock+0x2b/0x80 [ 241.640619][ T8275] ? __pfx_rtnl_newlink+0x10/0x10 [ 241.640630][ T8275] ? __pfx_rtnl_newlink+0x10/0x10 [ 241.640641][ T8275] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 241.640654][ T8275] ? __pfx_rtnl_newlink+0x10/0x10 [ 241.640666][ T8275] rtnetlink_rcv_msg+0x95e/0xe90 [ 241.640685][ T8275] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.640711][ T8275] ? ref_tracker_free+0x37c/0x830 [ 241.640728][ T8275] netlink_rcv_skb+0x158/0x420 [ 241.640748][ T8275] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.640762][ T8275] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.640780][ T8275] ? netlink_deliver_tap+0x1ae/0xd30 [ 241.640795][ T8275] netlink_unicast+0x5aa/0x870 [ 241.640811][ T8275] ? __pfx_netlink_unicast+0x10/0x10 [ 241.640839][ T8275] netlink_sendmsg+0x8c8/0xdd0 [ 241.640863][ T8275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.640892][ T8275] ____sys_sendmsg+0xa5d/0xc30 [ 241.640907][ T8275] ? copy_msghdr_from_user+0x10a/0x160 [ 241.640919][ T8275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.640939][ T8275] ___sys_sendmsg+0x134/0x1d0 [ 241.640951][ T8275] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.640998][ T8275] __sys_sendmsg+0x16d/0x220 [ 241.641015][ T8275] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.641042][ T8275] do_syscall_64+0xcd/0xf80 [ 241.641058][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.641068][ T8275] RIP: 0033:0x7ff92e98f749 [ 241.641077][ T8275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.641086][ T8275] RSP: 002b:00007ff92f771038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.641102][ T8275] RAX: ffffffffffffffda RBX: 00007ff92ebe5fa0 RCX: 00007ff92e98f749 [ 241.641111][ T8275] RDX: c48d73c017338ccc RSI: 00002000000002c0 RDI: 0000000000000003 [ 241.641121][ T8275] RBP: 00007ff92f771090 R08: 0000000000000000 R09: 0000000000000000 [ 241.641129][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.641137][ T8275] R13: 00007ff92ebe6038 R14: 00007ff92ebe5fa0 R15: 00007ffce6273908 [ 241.641160][ T8275] [ 241.641295][ T8275] debugfs: out of free dentries, can not create file 'netdev@ffff88804d05c618' [ 242.044650][ T5916] ims_pcu 4-1:2.0: Zero length descriptor [ 242.074240][ T5916] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 242.142397][ T5916] usb 4-1: USB disconnect, device number 35 [ 242.510035][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 242.518154][ C0] lec:lec_tx_timeout: lec0 [ 242.522767][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 243.464526][ T43] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22 [ 243.478832][ T8289] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 243.489071][ T8289] VFS: Can't find a romfs filesystem on dev nullb0. [ 243.489071][ T8289] [ 243.504728][ T43] usb 2-1: USB disconnect, device number 23 [ 244.118904][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 244.270092][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 244.276740][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 244.285318][ T24] usb 5-1: config 179 has no interface number 0 [ 244.291911][ T30] audit: type=1400 audit(1768557457.193:665): avc: denied { bind } for pid=8300 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 244.291960][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 244.726086][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 244.753988][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.766031][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 244.778223][ T8306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 244.788219][ T24] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 245.066137][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 245.108688][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.237105][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 245.362685][ T8290] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 245.418908][ T8315] FAULT_INJECTION: forcing a failure. [ 245.418908][ T8315] name failslab, interval 1, probability 0, space 0, times 0 [ 245.521251][ T8317] Bluetooth: MGMT ver 1.23 [ 245.528830][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: syz.3.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.528856][ T8315] Tainted: [L]=SOFTLOCKUP [ 245.528861][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.528871][ T8315] Call Trace: [ 245.528877][ T8315] [ 245.528884][ T8315] dump_stack_lvl+0x16c/0x1f0 [ 245.528908][ T8315] should_fail_ex+0x512/0x640 [ 245.528923][ T8315] ? __kmalloc_noprof+0xca/0x910 [ 245.528949][ T8315] should_failslab+0xc2/0x120 [ 245.528969][ T8315] __kmalloc_noprof+0xeb/0x910 [ 245.528989][ T8315] ? sock_kmalloc+0x111/0x170 [ 245.529005][ T8315] ? sock_kmalloc+0x111/0x170 [ 245.529021][ T8315] sock_kmalloc+0x111/0x170 [ 245.529043][ T8315] aead_recvmsg+0xf34/0x16a0 [ 245.529078][ T8315] ? __pfx_aead_recvmsg+0x10/0x10 [ 245.529098][ T8315] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.529118][ T8315] ? aead_check_key.isra.0+0x78/0x1e0 [ 245.529132][ T8315] ? __local_bh_enable_ip+0xa4/0x120 [ 245.529151][ T8315] aead_recvmsg_nokey+0x66/0x90 [ 245.529170][ T8315] sock_recvmsg+0x1f9/0x250 [ 245.529187][ T8315] __sys_recvfrom+0x203/0x310 [ 245.529204][ T8315] ? __pfx___sys_recvfrom+0x10/0x10 [ 245.529230][ T8315] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 245.529247][ T8315] ? count_memcg_events+0x122/0x290 [ 245.529281][ T8315] __x64_sys_recvfrom+0xe0/0x1c0 [ 245.529294][ T8315] ? do_syscall_64+0x91/0xf80 [ 245.529308][ T8315] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.529322][ T8315] do_syscall_64+0xcd/0xf80 [ 245.529336][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.529347][ T8315] RIP: 0033:0x7f83a9f91514 [ 245.529358][ T8315] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 245.529373][ T8315] RSP: 002b:00007f83aadd1ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 245.529389][ T8315] RAX: ffffffffffffffda RBX: 00007f83aadd1fc0 RCX: 00007f83a9f91514 [ 245.529405][ T8315] RDX: 0000000000001000 RSI: 00007f83aadd2010 RDI: 0000000000000004 [ 245.529413][ T8315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.529421][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 245.529430][ T8315] R13: 00007f83aadd1f68 R14: 00007f83aadd2010 R15: 0000000000000000 [ 245.529452][ T8315] [ 246.136082][ T30] audit: type=1400 audit(1768557459.033:666): avc: denied { create } for pid=8325 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 246.184448][ T30] audit: type=1400 audit(1768557459.063:667): avc: denied { sys_admin } for pid=8325 comm="syz.2.590" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 246.286602][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 246.300647][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 246.309501][ T8290] netlink: 'syz.4.578': attribute type 19 has an invalid length. [ 246.323560][ T8290] netlink: 'syz.4.578': attribute type 20 has an invalid length. [ 246.353184][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.372826][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.382677][ T8332] netlink: 277 bytes leftover after parsing attributes in process `syz.0.591'. [ 246.407924][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 246.407927][ T6101] usb 5-1: USB disconnect, device number 18 [ 246.408049][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 246.815493][ T30] audit: type=1400 audit(1768557459.713:668): avc: denied { write } for pid=8325 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 246.830112][ T8340] netlink: 'syz.0.595': attribute type 1 has an invalid length. [ 246.850853][ T8340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.924439][ T8340] netlink: 'syz.0.595': attribute type 1 has an invalid length. [ 246.967404][ T30] audit: type=1400 audit(1768557459.713:669): avc: denied { write } for pid=8339 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.987374][ T30] audit: type=1400 audit(1768557458.778:670): avc: denied { create } for pid=8325 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.006913][ T30] audit: type=1400 audit(1768557458.778:671): avc: denied { setopt } for pid=8325 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.153191][ T8350] xt_connbytes: Forcing CT accounting to be enabled [ 247.159827][ T8350] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 247.218874][ T8342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.226636][ T8342] IPv6: NLM_F_CREATE should be set when creating new route [ 247.233879][ T8342] IPv6: NLM_F_CREATE should be set when creating new route [ 247.346894][ T30] audit: type=1400 audit(1768557458.778:672): avc: denied { read } for pid=8325 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.373600][ T8340] bond1: entered promiscuous mode [ 247.379028][ T8340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.386578][ T30] audit: type=1400 audit(1768557458.858:673): avc: denied { write } for pid=8325 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.421793][ T8342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.524026][ T8355] FAULT_INJECTION: forcing a failure. [ 247.524026][ T8355] name failslab, interval 1, probability 0, space 0, times 0 [ 247.530030][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 247.544813][ C0] lec:lec_tx_timeout: lec0 [ 247.549707][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 247.610445][ T8355] CPU: 0 UID: 0 PID: 8355 Comm: syz.0.599 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.610472][ T8355] Tainted: [L]=SOFTLOCKUP [ 247.610478][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.610489][ T8355] Call Trace: [ 247.610495][ T8355] [ 247.610502][ T8355] dump_stack_lvl+0x16c/0x1f0 [ 247.610530][ T8355] should_fail_ex+0x512/0x640 [ 247.610550][ T8355] should_failslab+0xc2/0x120 [ 247.610574][ T8355] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 247.610596][ T8355] ? sidtab_sid2str_get+0x17a/0x680 [ 247.610626][ T8355] ? kmemdup_noprof+0x29/0x60 [ 247.610644][ T8355] kmemdup_noprof+0x29/0x60 [ 247.610661][ T8355] sidtab_sid2str_get+0x17a/0x680 [ 247.610692][ T8355] sidtab_entry_to_string+0x33/0x110 [ 247.610718][ T8355] security_sid_to_context_core+0x35c/0x640 [ 247.610746][ T8355] avc_audit_post_callback+0x109/0x8c0 [ 247.610775][ T8355] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 247.610800][ T8355] ? skb_put+0x138/0x1b0 [ 247.610824][ T8355] ? audit_log_n_string+0x253/0x550 [ 247.610847][ T8355] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 247.610873][ T8355] common_lsm_audit+0x24e/0x300 [ 247.610897][ T8355] ? __pfx_common_lsm_audit+0x10/0x10 [ 247.610929][ T8355] slow_avc_audit+0x186/0x210 [ 247.610947][ T8355] ? __pfx_slow_avc_audit+0x10/0x10 [ 247.610970][ T8355] ? find_held_lock+0x2b/0x80 [ 247.610996][ T8355] ? avc_has_extended_perms+0x33a/0x1090 [ 247.611017][ T8355] avc_has_extended_perms+0xa40/0x1090 [ 247.611043][ T8355] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 247.611062][ T8355] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.611088][ T8355] ? find_held_lock+0x2b/0x80 [ 247.611119][ T8355] ? tomoyo_path_number_perm+0x18d/0x580 [ 247.611160][ T8355] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 247.611189][ T8355] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 247.611222][ T8355] ? hook_file_ioctl_common+0x144/0x410 [ 247.611246][ T8355] ? selinux_file_ioctl+0x180/0x270 [ 247.611267][ T8355] selinux_file_ioctl+0x180/0x270 [ 247.611292][ T8355] security_file_ioctl+0xc6/0x240 [ 247.611317][ T8355] __x64_sys_ioctl+0xb7/0x210 [ 247.611345][ T8355] do_syscall_64+0xcd/0xf80 [ 247.611370][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.611387][ T8355] RIP: 0033:0x7fe6f998f749 [ 247.611401][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.611416][ T8355] RSP: 002b:00007fe6fa7f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.611432][ T8355] RAX: ffffffffffffffda RBX: 00007fe6f9be5fa0 RCX: 00007fe6f998f749 [ 247.611443][ T8355] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 247.611453][ T8355] RBP: 00007fe6fa7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 247.611462][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.611472][ T8355] R13: 00007fe6f9be6038 R14: 00007fe6f9be5fa0 R15: 00007fffaea0f3c8 [ 247.611496][ T8355] [ 247.611642][ T30] audit: type=1400 audit(1768557459.428:674): avc: denied { ioctl } for pid=8353 comm="syz.0.599" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 ssid=148 tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 248.708491][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 248.927538][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 249.018497][ T8385] bond2: entered promiscuous mode [ 249.030438][ T8385] bond2: entered allmulticast mode [ 249.037138][ T8385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.091379][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.107357][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 249.120405][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.171541][ T24] usb 4-1: config 0 descriptor?? [ 249.893264][ T8396] fuse: Bad value for 'fd' [ 250.474869][ T8395] SELinux: ebitmap: truncated map [ 250.485465][ T8395] SELinux: failed to load policy [ 250.642321][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 251.448025][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 251.454878][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 251.504934][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 251.522387][ T8377] ceph: No mds server is up or the cluster is laggy [ 251.539968][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 251.840019][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 251.840037][ T30] audit: type=1400 audit(1768557463.528:676): avc: denied { bind } for pid=8405 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.846375][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 251.867094][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 251.875684][ T24] lenovo 0003:17EF:60A3.0006: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 251.880400][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 253.160196][ T5953] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 253.330524][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 253.336613][ T30] audit: type=1400 audit(1768557464.242:677): avc: denied { bind } for pid=8415 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.356751][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 253.356769][ C0] lec:lec_tx_timeout: lec0 [ 253.365132][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 253.425914][ T8424] IPVS: set_ctl: invalid protocol: 255 100.1.0.255:20000 [ 253.433051][ T5953] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 253.446995][ T8424] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 253.454450][ T5953] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 253.553863][ T5953] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.571089][ T5953] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.638752][ T5953] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.714587][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.824954][ T24] usb 4-1: USB disconnect, device number 36 [ 253.848447][ T8428] syz_tun: entered allmulticast mode [ 253.952002][ T8427] syz_tun: left allmulticast mode [ 253.971240][ T5953] usb 1-1: GET_CAPABILITIES returned 0 [ 253.983354][ T5953] usbtmc 1-1:16.0: can't read capabilities [ 253.989237][ T30] audit: type=1400 audit(1768557464.892:678): avc: denied { watch_sb watch_reads } for pid=8429 comm="syz.3.620" path="/139/file5" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.042889][ T30] audit: type=1400 audit(1768557464.922:679): avc: denied { watch_mount } for pid=8429 comm="syz.3.620" path="/139/file5" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.091891][ T8432] fuse: Unknown parameter '18446744073709551615ÿÿ' [ 254.128049][ T30] audit: type=1400 audit(1768557465.032:680): avc: denied { setattr } for pid=8433 comm="syz.3.622" name="PACKET" dev="sockfs" ino=17939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.173726][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 254.204300][ T8414] usbtmc 1-1:16.0: Unable to send data, error -71 [ 254.236210][ T30] audit: type=1400 audit(1768557465.142:681): avc: denied { shutdown } for pid=8431 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.271892][ T5953] usb 1-1: USB disconnect, device number 33 [ 254.480070][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 254.651416][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 254.670070][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 254.701417][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 254.737066][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 254.758065][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 254.989227][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.025296][ T24] usb 5-1: config 0 descriptor?? [ 255.047209][ T8446] use of bytesused == 0 is deprecated and will be removed in the future, [ 255.056177][ T8446] use the actual size instead. [ 255.184595][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.326607][ T8450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.810564][ T43] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 255.983495][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.020175][ T43] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 256.045476][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.097741][ T43] usb 1-1: config 0 descriptor?? [ 256.386816][ T30] audit: type=1400 audit(1768557467.292:682): avc: denied { ioctl } for pid=8454 comm="syz.3.625" path="socket:[18586]" dev="sockfs" ino=18586 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.449702][ T8459] FAULT_INJECTION: forcing a failure. [ 256.449702][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 256.513081][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.513108][ T8459] Tainted: [L]=SOFTLOCKUP [ 256.513114][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.513122][ T8459] Call Trace: [ 256.513128][ T8459] [ 256.513134][ T8459] dump_stack_lvl+0x16c/0x1f0 [ 256.513165][ T8459] should_fail_ex+0x512/0x640 [ 256.513181][ T8459] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 256.513198][ T8459] should_failslab+0xc2/0x120 [ 256.513218][ T8459] kmem_cache_alloc_noprof+0x83/0x770 [ 256.513234][ T8459] ? skb_clone+0x190/0x3f0 [ 256.513256][ T8459] ? skb_clone+0x190/0x3f0 [ 256.513272][ T8459] skb_clone+0x190/0x3f0 [ 256.513289][ T8459] netlink_deliver_tap+0xabd/0xd30 [ 256.513314][ T8459] netlink_unicast+0x71f/0x870 [ 256.513337][ T8459] ? __pfx_netlink_unicast+0x10/0x10 [ 256.513349][ T8459] ? __pfx_rtnl_mdb_add+0x10/0x10 [ 256.513365][ T8459] netlink_ack+0x696/0xb80 [ 256.513384][ T8459] netlink_rcv_skb+0x332/0x420 [ 256.513404][ T8459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.513424][ T8459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.513452][ T8459] ? netlink_deliver_tap+0x1ae/0xd30 [ 256.513472][ T8459] netlink_unicast+0x5aa/0x870 [ 256.513486][ T8459] ? __pfx_netlink_unicast+0x10/0x10 [ 256.513505][ T8459] netlink_sendmsg+0x8c8/0xdd0 [ 256.513520][ T8459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.513548][ T8459] ____sys_sendmsg+0xa5d/0xc30 [ 256.513569][ T8459] ? copy_msghdr_from_user+0x10a/0x160 [ 256.513586][ T8459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.513613][ T8459] ___sys_sendmsg+0x134/0x1d0 [ 256.513626][ T8459] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.513654][ T8459] __sys_sendmsg+0x16d/0x220 [ 256.513665][ T8459] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.513701][ T8459] do_syscall_64+0xcd/0xf80 [ 256.513725][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.513740][ T8459] RIP: 0033:0x7f0e07d8f749 [ 256.513752][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.513762][ T8459] RSP: 002b:00007f0e08bb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.513772][ T8459] RAX: ffffffffffffffda RBX: 00007f0e07fe6090 RCX: 00007f0e07d8f749 [ 256.513779][ T8459] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 256.513784][ T8459] RBP: 00007f0e08bb3090 R08: 0000000000000000 R09: 0000000000000000 [ 256.513790][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.513796][ T8459] R13: 00007f0e07fe6128 R14: 00007f0e07fe6090 R15: 00007ffe776d7808 [ 256.513810][ T8459] [ 256.782247][ T43] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 256.799431][ T43] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 256.820392][ T43] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 256.827351][ T43] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 256.850566][ T30] audit: type=1400 audit(1768557467.762:683): avc: denied { create } for pid=8454 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 256.851592][ T43] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 256.878571][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 256.998997][ T43] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 257.091714][ T8450] batadv_slave_1: entered promiscuous mode [ 257.097843][ T8450] batadv_slave_1: left promiscuous mode [ 257.194089][ T24] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 257.245728][ T24] hdpvr 5-1:0.0: device init failed [ 257.255885][ T24] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 257.279597][ T24] usb 5-1: USB disconnect, device number 19 [ 257.542121][ T43] lenovo 0003:17EF:6047.0007: Failed to switch F7/9/11 mode: -71 [ 257.553805][ T43] lenovo 0003:17EF:6047.0007: Failed to switch middle button: -71 [ 257.561967][ T43] lenovo 0003:17EF:6047.0007: Fn-lock setting failed: -71 [ 257.603766][ T43] lenovo 0003:17EF:6047.0007: Sensitivity setting failed: -71 [ 257.646850][ T43] usb 1-1: USB disconnect, device number 34 [ 258.154995][ T8480] No control pipe specified [ 258.162527][ T30] audit: type=1400 audit(1768557469.062:684): avc: denied { read } for pid=8476 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 258.380057][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 258.388116][ C0] lec:lec_tx_timeout: lec0 [ 258.393213][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 259.955728][ T5811] block nbd1: Receive control failed (result -32) [ 260.054866][ T8500] cgroup: No subsys list or none specified [ 260.064333][ T8494] block nbd1: shutting down sockets [ 261.474843][ T8518] ================================================================== [ 261.474855][ T8518] BUG: KASAN: global-out-of-bounds in soft_cursor+0x458/0xa10 [ 261.474879][ T8518] Read of size 16 at addr ffffffff8bf57810 by task syz.2.637/8518 [ 261.474894][ T8518] [ 261.474905][ T8518] CPU: 1 UID: 0 PID: 8518 Comm: syz.2.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.474931][ T8518] Tainted: [L]=SOFTLOCKUP [ 261.474937][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.474948][ T8518] Call Trace: [ 261.474955][ T8518] [ 261.474962][ T8518] dump_stack_lvl+0x116/0x1f0 [ 261.474988][ T8518] print_report+0xcd/0x630 [ 261.475011][ T8518] ? __virt_addr_valid+0x81/0x610 [ 261.475028][ T8518] ? __phys_addr+0xe8/0x180 [ 261.475045][ T8518] ? soft_cursor+0x458/0xa10 [ 261.475062][ T8518] kasan_report+0xe0/0x110 [ 261.475091][ T8518] ? soft_cursor+0x458/0xa10 [ 261.475110][ T8518] kasan_check_range+0x100/0x1b0 [ 261.475136][ T8518] __asan_memcpy+0x23/0x60 [ 261.475152][ T8518] soft_cursor+0x458/0xa10 [ 261.475172][ T8518] ? fb_get_color_depth+0x120/0x250 [ 261.475198][ T8518] bit_cursor+0xe8c/0x17e0 [ 261.475217][ T8518] ? __pfx_bit_cursor+0x10/0x10 [ 261.475237][ T8518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.475257][ T8518] ? get_color+0x1da/0x450 [ 261.475281][ T8518] ? __pfx_bit_cursor+0x10/0x10 [ 261.475297][ T8518] fbcon_cursor+0x437/0x5d0 [ 261.475321][ T8518] hide_cursor+0x87/0x220 [ 261.475338][ T8518] ? is_console_locked+0x9/0x20 [ 261.475358][ T8518] update_region+0xb3/0x160 [ 261.475375][ T8518] vcs_write+0x7c8/0xdb0 [ 261.475396][ T8518] ? __pfx_vcs_write+0x10/0x10 [ 261.475411][ T8518] ? iov_iter_advance+0x1d/0x6c0 [ 261.475438][ T8518] ? iov_iter_advance+0x1e3/0x6c0 [ 261.475462][ T8518] ? rw_verify_area+0xcf/0x6c0 [ 261.475482][ T8518] ? __pfx_vcs_write+0x10/0x10 [ 261.475496][ T8518] vfs_writev+0x5df/0xde0 [ 261.475519][ T8518] ? __pfx_vfs_writev+0x10/0x10 [ 261.475539][ T8518] ? rcu_is_watching+0x12/0xc0 [ 261.475562][ T8518] ? __fget_files+0x20e/0x3c0 [ 261.475588][ T8518] ? do_writev+0x132/0x340 [ 261.475606][ T8518] do_writev+0x132/0x340 [ 261.475625][ T8518] ? __pfx_do_writev+0x10/0x10 [ 261.475648][ T8518] do_syscall_64+0xcd/0xf80 [ 261.475673][ T8518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.475690][ T8518] RIP: 0033:0x7ff92e98f749 [ 261.475704][ T8518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.475721][ T8518] RSP: 002b:00007ff92cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 261.475737][ T8518] RAX: ffffffffffffffda RBX: 00007ff92ebe6180 RCX: 00007ff92e98f749 [ 261.475749][ T8518] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000009 [ 261.475759][ T8518] RBP: 00007ff92ea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 261.475769][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.475779][ T8518] R13: 00007ff92ebe6218 R14: 00007ff92ebe6180 R15: 00007ffce6273908 [ 261.475796][ T8518] [ 261.475802][ T8518] [ 261.475806][ T8518] The buggy address belongs to the variable: [ 261.475812][ T8518] fontdata_8x16+0x1010/0x1140 [ 261.475835][ T8518] [ 261.475839][ T8518] The buggy address belongs to the physical page: [ 261.475846][ T8518] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xbf57 [ 261.475862][ T8518] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 261.475884][ T8518] raw: 00fff00000002000 ffffea00002fd5c8 ffffea00002fd5c8 0000000000000000 [ 261.475899][ T8518] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 261.475909][ T8518] page dumped because: kasan: bad access detected [ 261.475917][ T8518] page_owner info is not present (never set?) [ 261.475923][ T8518] [ 261.475927][ T8518] Memory state around the buggy address: [ 261.475936][ T8518] ffffffff8bf57700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 261.475948][ T8518] ffffffff8bf57780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 261.475960][ T8518] >ffffffff8bf57800: 00 00 f9 f9 f9 f9 f9 f9 06 f9 f9 f9 f9 f9 f9 f9 [ 261.475970][ T8518] ^ [ 261.475979][ T8518] ffffffff8bf57880: 05 f9 f9 f9 f9 f9 f9 f9 06 f9 f9 f9 f9 f9 f9 f9 [ 261.475991][ T8518] ffffffff8bf57900: 00 00 03 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 261.476000][ T8518] ================================================================== [ 261.476052][ T8518] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 261.476073][ T8518] CPU: 1 UID: 0 PID: 8518 Comm: syz.2.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.476098][ T8518] Tainted: [L]=SOFTLOCKUP [ 261.476105][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.476115][ T8518] Call Trace: [ 261.476121][ T8518] [ 261.476128][ T8518] dump_stack_lvl+0x3d/0x1f0 [ 261.476151][ T8518] vpanic+0x640/0x6f0 [ 261.476170][ T8518] panic+0xca/0xd0 [ 261.476189][ T8518] ? __pfx_panic+0x10/0x10 [ 261.476209][ T8518] ? soft_cursor+0x458/0xa10 [ 261.476227][ T8518] ? preempt_schedule_common+0x44/0xc0 [ 261.476250][ T8518] ? preempt_schedule_thunk+0x16/0x30 [ 261.476269][ T8518] check_panic_on_warn+0xab/0xb0 [ 261.476289][ T8518] end_report+0x107/0x160 [ 261.476311][ T8518] kasan_report+0xee/0x110 [ 261.476332][ T8518] ? soft_cursor+0x458/0xa10 [ 261.476351][ T8518] kasan_check_range+0x100/0x1b0 [ 261.476376][ T8518] __asan_memcpy+0x23/0x60 [ 261.476393][ T8518] soft_cursor+0x458/0xa10 [ 261.476411][ T8518] ? fb_get_color_depth+0x120/0x250 [ 261.476438][ T8518] bit_cursor+0xe8c/0x17e0 [ 261.476457][ T8518] ? __pfx_bit_cursor+0x10/0x10 [ 261.476477][ T8518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.476497][ T8518] ? get_color+0x1da/0x450 [ 261.476521][ T8518] ? __pfx_bit_cursor+0x10/0x10 [ 261.476536][ T8518] fbcon_cursor+0x437/0x5d0 [ 261.476564][ T8518] hide_cursor+0x87/0x220 [ 261.476579][ T8518] ? is_console_locked+0x9/0x20 [ 261.476599][ T8518] update_region+0xb3/0x160 [ 261.476616][ T8518] vcs_write+0x7c8/0xdb0 [ 261.476637][ T8518] ? __pfx_vcs_write+0x10/0x10 [ 261.476652][ T8518] ? iov_iter_advance+0x1d/0x6c0 [ 261.476679][ T8518] ? iov_iter_advance+0x1e3/0x6c0 [ 261.476703][ T8518] ? rw_verify_area+0xcf/0x6c0 [ 261.476723][ T8518] ? __pfx_vcs_write+0x10/0x10 [ 261.476737][ T8518] vfs_writev+0x5df/0xde0 [ 261.476760][ T8518] ? __pfx_vfs_writev+0x10/0x10 [ 261.476780][ T8518] ? rcu_is_watching+0x12/0xc0 [ 261.476803][ T8518] ? __fget_files+0x20e/0x3c0 [ 261.476830][ T8518] ? do_writev+0x132/0x340 [ 261.476848][ T8518] do_writev+0x132/0x340 [ 261.476868][ T8518] ? __pfx_do_writev+0x10/0x10 [ 261.476891][ T8518] do_syscall_64+0xcd/0xf80 [ 261.476915][ T8518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.476932][ T8518] RIP: 0033:0x7ff92e98f749 [ 261.476944][ T8518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.476961][ T8518] RSP: 002b:00007ff92cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 261.476977][ T8518] RAX: ffffffffffffffda RBX: 00007ff92ebe6180 RCX: 00007ff92e98f749 [ 261.476989][ T8518] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000009 [ 261.476999][ T8518] RBP: 00007ff92ea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 261.477010][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.477020][ T8518] R13: 00007ff92ebe6218 R14: 00007ff92ebe6180 R15: 00007ffce6273908 [ 261.477038][ T8518] [ 261.477312][ T8518] Kernel Offset: disabled