last executing test programs: 2m42.143888988s ago: executing program 0 (id=443): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x10, 0x0, 0x1, 0x10000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x4, 0x0, @loopback, @local}}}}) (rerun: 64) 2m41.840265442s ago: executing program 0 (id=445): syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10068, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r1 = getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1a000000ff0300000400e1ff0500800000500000", @ANYRES32=r4, @ANYBLOB="000e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) listen(r4, 0x39b3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e657438706f72742c6e657400000014000780080006400000000008001340000003ff"], 0x64}}, 0x0) ioctl$int_in(r4, 0x5452, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1}, 0x66e}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) sendmsg$NFT_BATCH(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) chmod(0x0, 0x22) 2m41.150009893s ago: executing program 0 (id=447): syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10068, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r1 = getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1a000000ff0300000400e1ff0500800000500000", @ANYRES32=r3, @ANYBLOB="000e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) listen(r3, 0x39b3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e657438706f72742c6e657400000014000780080006400000000008001340000003ff"], 0x64}}, 0x0) ioctl$int_in(r3, 0x5452, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1}, 0x66e}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) chmod(0x0, 0x22) 2m40.635319213s ago: executing program 0 (id=449): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0xd12}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x5) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r4, &(0x7f0000000240)='/dev/snd/timer\x00', 0x90080, &(0x7f0000000280)={@_ha_fsid={[0x8, 0xc0000]}, {0x800, 0x4, 0x8}}, 0x20000, &(0x7f00000002c0), &(0x7f0000000300)=0x2}) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000380)=0x5ddfa437) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x58000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x34}}, 0x20008051) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x1, 0x5, 0x5, 0x80}]}, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getpid() r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000740)={0x0, 0x2, 0x401, 0x7, 0x2, 0x5}, &(0x7f0000000780)=0x14) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8004282}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1f0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0x7c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xdd}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x7c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd998}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1efd}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x90, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3d30}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x20}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2680}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20048804}, 0x48d4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000ac0)={'IDLETIMER\x00'}, &(0x7f0000000b00)=0x1e) r13 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x740000, 0x400240) ioctl$HIDIOCGRAWPHYS(r13, 0x80404805, &(0x7f0000000b80)) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000c40)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r11, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r14, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000005) 2m40.343330926s ago: executing program 0 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="4f944a23f4a9738785fdbd15a4eecee4b4601b645ea148c7d577f3d1f029bc2a847ea57e6182e317e53ed363e47265d6e6a6babca11b0ce045c61b80c49e5bb3bf20c4a04ba9ecdcd31de5eed183aa6f7a60a8abffacf7f8bcd90feab7e3d25fe17ae18de5ce021aa5d5677848200552554afcac5947b8b1a592f37de37e2c9ac174a109fb6436e9cfe2d3d815660b34949fb78774f0b39a3e0658555f6b09ad033568a445458b64e6"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r1, &(0x7f0000000340), &(0x7f00000004c0)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x8, 0x4}, 0x18, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000780)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2009e304c61d3e338201f89f1e3e0eac6d26cd75a99787ddf2ed16db3a7d941ee4238a9c6ba2798cb87040d4d9af310727e1cc10bb689e3d3d5e0a2a6524ef3ccd0be3cfd82ef9d838b493e0598a315acb80b34420e2238ec06bff2c78fcb418289ca8568db9719423cd8fa03a7a747f076267291bdb27f21b3c88c5f9bda97827f4268cb5dd880d47c7969984ef322f68d67d42e95e8c8de29a87f648debf68cf1745d18a12cd619963c85cb", 0xc3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000300)=0xdd05, 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) setsockopt$sock_int(r5, 0x1, 0xd, &(0x7f00000006c0)=0x8, 0x4) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) pipe(&(0x7f00000002c0)) 2m39.332177359s ago: executing program 0 (id=455): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000004200)='qnx6\x00', 0xa18410, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) 2m23.934196408s ago: executing program 32 (id=455): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000004200)='qnx6\x00', 0xa18410, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) 10.143583211s ago: executing program 2 (id=978): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x1a) mkdirat(0xffffffffffffff9c, 0x0, 0x180) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) dup(r1) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 10.089379429s ago: executing program 1 (id=979): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa19, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r8, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044880}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x3}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x2, 0x6, @broadcast}, 0x14) r11 = getpid() kcmp(r11, r11, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.772950938s ago: executing program 2 (id=983): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x28040680) timerfd_create(0x7, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) socket$packet(0x11, 0x2, 0x300) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000040), 0x8) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0xc0) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400e8dda500000a023b42c9ac20f9f6a837738a102835a7be4c326d1c6263e19717b748bf7fa92e1bec6d3b93a7b7a0b7904a78e5f4e6454686dedaa9bef4e723639fb6a300a3d518725b8c6c9fac02e8a40f41447270eeb836105f79b9000000a01e61847b91d4b6670250c0ec381b755290c8b3b05f4bbb4c2409cfc3b15d79ba20e37b797d4d91d1519e6400"/153], 0x14}}, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000019080)=0x7f) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x48001) 7.776147191s ago: executing program 1 (id=985): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10000028, 0x6, 0x0, 0xb49, 0x9, 0x40b, 0x2, 0x3}, 0x0) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) (async) r2 = socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1f, 0x3, 0x8000) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000005140)={0x2020}, 0xfffffffffffffea8) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x50) (async) unshare(0x62040200) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) (async) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x49, 0x8009}, 'syz0\x00', 0x2000004}) (async) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x8}}}, 0x24) 7.250830927s ago: executing program 5 (id=988): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000020008030000000000000061"], 0x0, 0x52}, 0x28) 6.627050291s ago: executing program 5 (id=989): r0 = fcntl$getown(0xffffffffffffffff, 0x9) get_robust_list(r0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/1, 0x1}], 0x1, &(0x7f0000000240)=""/43, 0x2b}, 0x7}], 0x1, 0x40, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r2, 0x29, 0xc9, &(0x7f00000002c0), &(0x7f0000000300)=0x4) set_robust_list(&(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000340)}, 0x2, &(0x7f0000000400)={&(0x7f00000003c0)}}, 0x18) sendto(r2, &(0x7f0000000480)="a930e9", 0x3, 0x0, &(0x7f00000004c0)=@ieee802154={0x24, @short={0x2, 0x2}}, 0x80) get_robust_list(r0, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540), 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x14004c10) r4 = add_key$fscrypt_v1(&(0x7f0000000ac0), &(0x7f0000000b00)={'fscrypt:', @desc4}, &(0x7f0000000b40)={0x0, "8a28a6d53a514a096402da7183904d3647ac9e1ea823f80ebb950668651b4d369e85237d3b75862cda987a1808f3c5a837fb5bb0d1f8186bb7f7e0580cdbaab1", 0x23}, 0x48, 0xfffffffffffffff9) r5 = add_key$fscrypt_provisioning(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x2}, &(0x7f0000000a80)={0x0, 0x0, @d}, 0x18, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000c00)={{r2}, 0x8, &(0x7f0000000bc0)=[0x2, 0xe, 0x2, 0x5eb, 0xfffffffffffffffa, 0x7, 0x8d, 0x9], 0x7, 0x2}) keyctl$instantiate(0xc, r5, &(0x7f0000000c80)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 'abcdefghijklmnop', 0x20, 0x80, 0x20, [0x61, 0x65, 0x36, 0x32]}, 0x41, 0xfffffffffffffff9) r7 = gettid() get_robust_list(r7, &(0x7f0000000e40)=&(0x7f0000000e00)={&(0x7f0000000d40)={&(0x7f0000000d00)}, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)}}, &(0x7f0000000e80)=0x18) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000ec0), 0x84000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000f00)=0x1, &(0x7f0000000f40)=0x4) ioctl$DRM_IOCTL_MAP_BUFS(r8, 0xc0186419, &(0x7f0000002700)={0xa, &(0x7f0000000f80)=""/101, &(0x7f0000002600)=[{0x11e, 0xcb, 0x3, &(0x7f0000001000)=""/203}, {0x10, 0x44, 0xffffffff, &(0x7f0000001100)=""/68}, {0x9, 0xce, 0x80000000, &(0x7f0000001180)=""/206}, {0x5, 0xcd, 0x3, &(0x7f0000001280)=""/205}, {0x1, 0x1000, 0x9, &(0x7f0000001380)=""/4096}, {0xffff, 0xa5, 0x9, &(0x7f0000002380)=""/165}, {0x1, 0x45, 0x5, &(0x7f0000002440)=""/69}, {0x5, 0x8, 0x81, &(0x7f00000024c0)=""/8}, {0xc0, 0x65, 0x1, &(0x7f0000002500)=""/101}, {0x2, 0x65, 0x1ae86e1f, &(0x7f0000002580)=""/101}]}) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r9, &(0x7f0000003b40)=[{{&(0x7f0000002740)={0xa, 0x4e20, 0x282, @private2, 0x80000000}, 0x1c, &(0x7f0000003ac0)=[{&(0x7f0000002780)="628498aa2d76a0e8fe6690396c6feead2bf9e3c70ec5c6e3db998094a8cb692d963cc4d56456f6a84a85ffc919e9267b3a87b583d3a3265dbab3a0c7310b47653d63734b06694c387dce23e91d759047a144695a85130a2a91c5c7a19e92246ee2a682b657a3fe80b85c0db4", 0x6c}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="5dcfd2d24aa810c44caf0ee83c5cafdbfd76543eac2debaa09c7b74287cf8e239b0b26030ed0fe965a10eb7b2231cff669913c4d5101c60ba705cc556a97bcc93a5838c9319b5ba9287f8ca66cc8dd03218f0b054321e0c1c0c8f36700c6c935d41bc4f741756de28aa5299d73aea3c24afc55e55d870b212a08dacc0d6f0c1d4ad21748ac3a609d145afcfebe9cea2c60ef013d19195356e83fd25cc6675d7c6af4", 0xa2}, {&(0x7f00000038c0)="a46d76de00e07e022c50746b88ea1c3927a0ba876f64fb10f65b7b1f8072ce68aeeb9e94e7a1847265da12808689ce1d602e6359d492d25a3733d6e460dd720a725b8b45f7d91c578f86705486eb4cd8ccec0638dbdffd3f62622c45", 0x5c}, {&(0x7f0000003940)="bb7f37907425adb211f22aaeea37e67d8f32c9db9a4caa5c8403acfcd6fae93ed30f5de07f8f14cbcb95c47affddcdd5171b823af0a755726f552eae7b71f4660f655fd7e777d2285bbb1a6f5d88ab4b084da1a874317a1eaa03d489fde33f0673e84704acca3ec5666828acc1af1deed3d40d75d5144e36dc011fec0bb9d51e9c9181dd904100f28330f6a5012f58c95fa8229604f32553c688c8b0b0281932b9043f9e59681de9827f3b88e11fd5bd94f70b37dbeb010717d1a21b65b25279a2ef82b23970d44aaf6095484eb2164454ca83647d9de90b340f08118488361061ea0183713686e5173f5069b8", 0xed}, {&(0x7f0000003a40)="182a9643d2181d5ec1f6b51a810a4bea42d8c81c61d9ce7c85cbca337e95787655b0a6b354abd11d2b2984341a65177926d34a67d45ba0983b5cdf2520e7a1fdc722f0496253e7ffe80a716ffab69c1b6758940af0cc5c93a0db582bc978d6c7fb19e10178", 0x65}], 0x6}}], 0x1, 0x4000000) sched_setscheduler(r0, 0x0, &(0x7f0000003b80)=0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003c00), r8) getsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000003c40)={@rand_addr, 0x0}, &(0x7f0000003c80)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f00000041c0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000004180)={&(0x7f0000003f40)={0x224, r11, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4}, 0x50) 6.358376009s ago: executing program 5 (id=991): r0 = socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000ac0)=0x8) setpgid(0x0, r2) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000040)={0x14, &(0x7f0000000640)={0x20, 0x7, 0xc3, {0xc3, 0x11, "23985390bfdcde7fdce8ffd97a7d8e91920d963462df2bdb9d9af6379250a49215400e092ff1f620246d302e3980b10bc37b7da01a55c867778cc3b2d3bf95259f09e764737e4fd2642461fd3322358de754e0c48765c9f45353293f1da5af48d1e5dd214c36ccc8765f1725a7a037c3d0006b7bc890396a51ff0e2c15809ee34c5232589925b4b2f3e59ccf379918670e31778457247a354eff61f92fcbe7e6aacb3b4e01737c12b79a1850ecb2536401fd4d59d3e8c211b2e556f9fdb6a24003"}}, &(0x7f0000000180)={0x0, 0x3, 0x40, @string={0x40, 0x3, "61a6879c0c5d1659b2d232b3bcb58fa0de4a832a753eb3644f7a8f769a6c39bf09043bf0fb97ebe972a3340a810e4ab11fd96d2fd64e5753c045706c8345"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000480)={0x0, 0x17, 0x52, "662f3d28f169ce95ccd41a4c5502f7b32b49d7b55230d4521d74fef520dbacdc59f501578975ddf752b362c863bb5d4127cc3f4d484f4cc60dac6639c15e4d04a7e9b5f016bd64d5c04f6fbcc81da5c21a6e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x81, 0x1, "f7"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "07da55"}, &(0x7f0000000780)={0x20, 0x83, 0x2, "0221"}, &(0x7f00000007c0)={0x20, 0x84, 0x2, "c01d"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "8bf41e"}}) syz_usb_control_io$uac3(r1, &(0x7f00000008c0)={0x14, &(0x7f00000009c0)={0x0, 0x21, 0x93, {0x93, 0x24, "25b9ac6a99f9f0682879943d89fac0f7ce1f20f6eb09f9745136588cd25badf1bdb1aa34cf1d9e687349069aa7ddae00d8ae489ed3b600ed87046cfb1098c23320c7792a1bc150b3ae48f7cc32f781816e106215dbe23a3064264657cd6678c951403ad4d450a9108f7b9840a2ae59c5e87365d21a3d3e031377fbcab9abf7dc44f1f5e47f11eef6594792246b34cd5084"}}, &(0x7f0000000b40)={0x0, 0x3, 0x76, @string={0x76, 0x3, "c82e1824091eda12d4205ba971b0c8a7dfbebcb2ca9ab0b4b08d20f690287d5c82e55737a991ce96994cd59ac9ec4a59afb3594ed16eb356d0ee0cb7131a02df1f88df5cd2e837c1457e37098f706d1ac07d9fc862c55d2895ec77b0504b8a43828594ac2190abd7b30949b7c66a7d7cbdbd5205"}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)={0x60, 0x8, 0xc4, "5270200ef3c6c12dafd9fadfccffe8c63dadacffe9c72bd2b369f09acce32b4e59d0949ca8e5e2b73ac432640b5c917546e7c19519f74512026c1ceffd496a4944af1c99befd156940e4387ebdf92e19df195d204a3ef1771554bf62c530b4a14936f5d1458abe85ec70f1c0c9079ba9032f225282a55933f9a06490c581522e7070be4b1cd0fa4cfa59d2af266ebb3eb48004f7aa01c5700d174c4101352943a0c5680e4824e7dd91b7e91594609afb9d2b6621f0e61fef420ddbfc3103249f88a9ed63"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000cc0)={0x20, 0x81, 0x2, "f22b"}, &(0x7f0000000d80)={0x20, 0x82, 0x1, "df"}, &(0x7f0000000dc0)={0x20, 0x83, 0x2, "efa2"}, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1920ba03c3ed05a9d8687f03cfd8020e8657a830ce9587cc31eec1d3e2c565f884456744c1d486c00169714eb0a0d794b797323ab9bca2d9b3"], &(0x7f0000000e40)={0x20, 0x85, 0x3, "384e0f"}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000900)={0x40, 0xd, 0x4, "728f0154"}, 0x0, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000600)={0x20, 0x3, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x40, 0x17, 0x4, "fa951184"}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/52, 0x34) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.288632754s ago: executing program 2 (id=992): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) fchdir(r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103a42, 0x32) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) getsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x200}}, {@sq={'sq', 0x3d, 0xf2}}, {@timeout={'timeout', 0x3d, 0xd}}, {@rq={'rq', 0x3d, 0x80000000}}, {@common=@mmap}, {@timeout={'timeout', 0x3d, 0xfffffffffffffffc}}, {@sq={'sq', 0x3d, 0x1}}, {@common=@version_9p2000}, {@common=@directio}, {@sq={'sq', 0x3d, 0xffffffffffffffc0}}], [{@obj_role={'obj_role', 0x3d, 'ramfs\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '[/$(]@'}}, {@uid_gt={'uid>', r8}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ramfs\x00'}}, {@measure}, {@fowner_lt={'fowner<', r7}}]}}) 5.64098308s ago: executing program 1 (id=993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe00c0000904eb02027f9c1f000905060220000200020905ffff"], 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0x1000, 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x108, 0x0, 0x260, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', [0xffffffff, 0xff, 0xff, 0xff000000], 0x4e22, 0x4e21, 0x4e23, 0x4e22, 0xffffffca, 0x8d98, 0x8, 0x7f, 0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x5c, 0x0, 0x6}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@hl={{0x28}, {0x3}}, @common=@dst={{0x48}, {0xfb, 0x1, 0x0, [0xfffc, 0xb, 0x4001, 0x9, 0x9, 0x5c1, 0x40, 0x3, 0x97, 0x85, 0x4, 0x40, 0xfd, 0x7ff, 0x0, 0xf], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private2, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0x0, 0xff, 0xffffffff], 'pimreg1\x00', 'gretap0\x00', {}, {}, 0x67, 0x4, 0x4, 0x10}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/205, 0xcd) 5.31839055s ago: executing program 2 (id=996): r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x600, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) unshare(0x2000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x200) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0xfffffffc, 0x0, 0x10000042}, 0x90) 5.087471075s ago: executing program 4 (id=997): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa42000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 5.050750315s ago: executing program 3 (id=998): sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, 0xffffffffffffffff, 0x80000}) getdents(r0, &(0x7f0000000080)=""/61, 0x3d) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$AUDIT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x3e9, 0x2, 0x70bd27, 0x25dfdbfc, {0x1, 0x1, 0x1, 0x0, 0xff, 0xfffffffb, 0x9, 0x3, 0x0, 0xc2c6bbf, 0x3}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa24cbff7d7e07e8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x51}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xff}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2c}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xe1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000004}, 0x60000000) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f0000000380)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0xe8) r4 = getuid() statx(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x40, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = geteuid() getgroups(0x1, &(0x7f00000026c0)=[0xee01]) r10 = getgid() lstat(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f00000027c0)={{}, {0x1, 0x6}, [{0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x4, r3}, {0x2, 0x5, r4}, {0x2, 0x2, r5}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x6, r6}, {0x2, 0x0, 0xee01}, {0x2, 0x2, r8}, {0x2, 0x5, 0xee01}], {0x4, 0x4}, [{0x8, 0x1, r9}, {0x8, 0x7, r10}, {0x8, 0x2, r11}], {0x10, 0x4}, {0x20, 0x2}}, 0x84, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa38}}, './file0\x00'}) r13 = socket$inet_smc(0x2b, 0x1, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) lstat(&(0x7f0000002940)='./file0/../file0\x00', &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)='system.posix_acl_access\x00', &(0x7f0000002a00)={{}, {0x1, 0x4}, [{0x2, 0x0, r6}, {0x2, 0x0, r15}], {0x4, 0x2}, [{0x8, 0x2, r7}, {0x8, 0x5, r9}, {0x8, 0x4, r11}, {0x8, 0x4, r11}, {0x8, 0x1, r9}], {0x10, 0x6}, {0x20, 0x6}}, 0x5c, 0x2) lstat(&(0x7f0000002a80)='./file0/../file0\x00', &(0x7f0000002ac0)) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000002b40)={'pim6reg\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002b80)={{0x1, 0x1, 0x18, r1, {0x100000001}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000002bc0)={0x0, 0x100, 0x1, [0x9]}, &(0x7f0000002c00)=0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r17, 0x84, 0x6f, &(0x7f0000002c80)={r18, 0x10, &(0x7f0000002c40)=[@in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000002cc0)=0x10) r19 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002f80)=@bpf_ext={0x1c, 0x14, &(0x7f0000002d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r17}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @generic={0xe6, 0x9, 0x2, 0xec51, 0xb}, @ldst={0x2, 0x0, 0x1, 0xb, 0xa, 0x80, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x2, 0x4, 0xa, 0x0, 0x8}]}, &(0x7f0000002dc0)='GPL\x00', 0xf, 0x84, &(0x7f0000002e00)=""/132, 0x40f00, 0x48, '\x00', r16, 0x0, r1, 0x8, &(0x7f0000002ec0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000002f00)={0x4, 0x4, 0x7, 0x5}, 0x10, 0x157cf, r13, 0x0, &(0x7f0000002f40)=[r0, r17, r0, r0, r17], 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003040)={r19, r12, 0x12, 0x0, @void}, 0x10) setgroups(0x2, &(0x7f0000003080)=[r7, r7]) 4.844748597s ago: executing program 3 (id=999): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000030008030000000000000061"], 0x0, 0x52}, 0x28) 4.718368574s ago: executing program 3 (id=1000): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x1, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2, 0xffffffff}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008001}, 0xc4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x20040414) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) getpeername$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x3, 0x9, 0x5, 0x20, r4, 0x8, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0xc}, 0x50) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x40000000015, 0x5, 0x0) r9 = fcntl$dupfd(r5, 0x406, r5) write$tcp_congestion(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) write$cgroup_pid(r9, 0x0, 0x0) write$FUSE_ENTRY(r9, 0x0, 0x0) 4.097297883s ago: executing program 4 (id=1001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "8c8f14bcf2a335c42db253db5bd80461"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socketpair(0xa, 0x1, 0x100, &(0x7f0000000700)) 3.936385901s ago: executing program 4 (id=1002): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x28040680) timerfd_create(0x7, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) socket$packet(0x11, 0x2, 0x300) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000040), 0x8) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0xc0) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400e8dda500000a023b42c9ac20f9f6a837738a102835a7be4c326d1c6263e19717b748bf7fa92e1bec6d3b93a7b7a0b7904a78e5f4e6454686dedaa9bef4e723639fb6a300a3d518725b8c6c9fac02e8a40f41447270eeb836105f79b9000000a01e61847b91d4b6670250c0ec381b755290c8b3b05f4bbb4c2409cfc3b15d79ba20e37b797d4d91d1519e6400"/153], 0x14}}, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000019080)=0x7f) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x48001) 3.764659791s ago: executing program 1 (id=1003): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x80801, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r3, &(0x7f0000000140)={0x23, 0x4}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_int(r6, 0x0, 0x32, 0x0, &(0x7f00000000c0)) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x14, 0x0, 0x8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 2.972600712s ago: executing program 3 (id=1004): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x917) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) r6 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r7, &(0x7f0000000080)=""/72, 0x48) keyctl$clear(0x7, r6) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 2.204027148s ago: executing program 2 (id=1005): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) syz_socket_connect_nvme_tcp() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x60, {0x2, 0x4e20, @rand_addr=0x64010101}, 'batadv0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc090800ff00000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000537000/0x4000)=nil, 0x4000, 0x8) timer_gettime(0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) 2.039920554s ago: executing program 3 (id=1006): lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "04aab35a53f45f149a54699070b1026b"}, 0x11, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) socket(0x11, 0xa, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000000040), 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x0) prlimit64(r1, 0x5, &(0x7f00000002c0)={0x800000000001, 0x5}, &(0x7f0000000100)) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000001300), 0x2102, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000001280)={0x2, 0xfe}, 0x2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b", 0x2b}], 0x2}], 0x1, 0x40800) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r7, &(0x7f0000000180)='ns/pid_for_children\x00') recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r6], 0x7c}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x8, 0x1}, 0x20) 1.593350913s ago: executing program 4 (id=1007): mount(0x0, 0x0, 0x0, 0x10068, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r1 = getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1a000000ff0300000400e1ff0500800000500000", @ANYRES32=r4, @ANYBLOB="000e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) listen(r4, 0x39b3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e657438706f72742c6e657400000014000780080006400000000008001340000003ff"], 0x64}}, 0x0) ioctl$int_in(r4, 0x5452, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1}, 0x66e}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) sendmsg$NFT_BATCH(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) chmod(0x0, 0x22) 1.264436543s ago: executing program 2 (id=1008): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000300)={0x1000f9, 0x10017f, 0x40000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40002040, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r6, 0x402, 0x80000023) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r7, 0x402, 0x40000008) close_range(r5, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000000)={0x3d8c3144653f8606, 0x102000}) 1.26414301s ago: executing program 1 (id=1009): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x240101, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="0100000a40000000000a0100000008000800ac14140c080007006401010114000600ff0100000000000000000000000000010800020005000000"], 0x40}, 0x1, 0x2000000}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2509000000050008000d000000050007000500000005000800000000000c000600000000000000000008000300", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f00000010c0)='sched\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000004280)={0x0, 0x800e, 0x6, [0x0, 0x6, 0x7, 0x2, 0xfe1, 0x8]}, &(0x7f00000042c0)=0x14) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xdc, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042801000018006000600800a000004000000040002"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x64000850) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002580)={{0x0, r6, 0x0, r8, 0xee01, 0x20, 0x6}, 0x7a6, 0x7, 0xb26, 0x9, 0x0, 0x0, 0x7}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 1.087618306s ago: executing program 5 (id=1010): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) creat(0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f0", 0x6f}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x15f}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560b", 0xf4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="42e013913edbeb6ae594198a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a0300000000b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ac0c00000024b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb7", 0xe0}, {&(0x7f00000007c0)="7542473782798be019c27ed30b2b7e5c26b156f23a61faa7dbdaa9c930d4f99297a60756552dc617d82e3b823b8682cbd09e5c98d31803fb716f6982462b6b7548fa2dc455538e08fe09f3095fa0a402c899663249fe8c673646050b2224fc68fb9c43091884ed6576e0c58e1463cbdbe48da3d825d857043985dc3167c0cc5eab52332bf7c64db26e4730b42c8143576ead4fd5cf028dc78cfeb1e28e64c8a0ed3780467548816880d08ebaa41ea7dda8565b95bc6d6443d814ec6ef62e5fb805bd2707c023dfb348c8e54be76bfe5b1856a4fd26228044f887ba15a77dc0221cc8cd17996c6b254be0", 0xea}, {&(0x7f0000000ac0)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392da", 0x6b}, {&(0x7f0000000400)="6dc1aeee53095ad5b3f81c3a6c6e7bbd636774b3c30b738d2699fb78a2a61f9b700f5c1e4ff8b88d1afdb588179304d0b228f0e4df2730895f26d6b4548cf5ba1463468cd39d6b8d10e997d2c8bd2b2e5290d0", 0x53}], 0x4}}], 0x3, 0x2090) 1.040712154s ago: executing program 4 (id=1011): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa42000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1.009888721s ago: executing program 5 (id=1012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd2c, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x3cc40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @empty}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x90e96c8d56df8cf}, 0x0) 912.904198ms ago: executing program 4 (id=1013): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') fcntl$setstatus(r0, 0x4, 0x40800) r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x792, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x1000a387, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)={0x40, 0x17, 0x4, "739e2a16"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ni}}}}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r5, 0x806c4120, &(0x7f0000000040)) 820.699085ms ago: executing program 5 (id=1014): socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "dd4291c0"}, 0x20000, 0x2, {0x0}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000f80)={0x78, 0x8, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x48011}, 0x841) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40000000) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xffffff1f, 0x1}}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) 228.092636ms ago: executing program 1 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x4, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x10000, 0x0, 0x7, 0x8, 0x5, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff, 0x0, 0x98}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x57}, {0x6000, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x200000, 0x6000, 0x8, 0x3, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3f}, {0x100000, 0xeeee0000, 0xe, 0x2, 0x70, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x24, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x5, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0xc, 0xf800, 0x0, [0x8000000000000001, 0x0, 0xffffffffffffffff, 0x1]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x40000008, 0x1, 0xfff, 0x7, 0x6, 0x100, 0x5, 0x73}, 0x0, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000200)='./file0\x00', 0x80) (async) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 0s ago: executing program 3 (id=1016): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) fchdir(r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103a42, 0x32) mknod(0x0, 0x1ffa, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) getsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x200}}, {@sq={'sq', 0x3d, 0xf2}}, {@timeout={'timeout', 0x3d, 0xd}}, {@rq={'rq', 0x3d, 0x80000000}}, {@common=@mmap}, {@timeout={'timeout', 0x3d, 0xfffffffffffffffc}}, {@sq={'sq', 0x3d, 0x1}}, {@common=@version_9p2000}, {@common=@directio}, {@sq={'sq', 0x3d, 0xffffffffffffffc0}}], [{@obj_role={'obj_role', 0x3d, 'ramfs\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '[/$(]@'}}, {@uid_gt={'uid>', r8}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ramfs\x00'}}, {@measure}, {@fowner_lt={'fowner<', r7}}]}}) kernel console output (not intermixed with test programs): erface descriptor's value: 9 [ 244.381151][ T5849] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.400604][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.437894][ T5849] usb 2-1: config 0 descriptor?? [ 244.484282][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 244.692545][ T8304] netlink: 'syz.4.601': attribute type 10 has an invalid length. [ 244.711544][ T8304] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 244.759185][ T8304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.901938][ T29] audit: type=1400 audit(244.843:1027): avc: denied { write } for pid=8307 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 244.937484][ T5849] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input12 [ 244.939279][ T6430] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 245.075178][ T5849] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 245.129375][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 245.143001][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.153350][ T6430] usb 3-1: Using ep0 maxpacket: 16 [ 245.160326][ T29] audit: type=1400 audit(245.083:1028): avc: denied { ioctl } for pid=8296 comm="syz.1.598" path="/dev/input/event4" dev="devtmpfs" ino=3274 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 245.209240][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.217095][ T6430] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.245115][ T6430] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 245.280543][ T6430] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 245.306806][ T6430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.319468][ T8323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.324772][ T6430] usb 3-1: Product: syz [ 245.331601][ T6430] usb 3-1: Manufacturer: syz [ 245.336208][ T6430] usb 3-1: SerialNumber: syz [ 245.350890][ T8329] netlink: 'syz.5.604': attribute type 10 has an invalid length. [ 245.397659][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.409476][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.425179][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.435432][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.444181][ T10] usb 4-1: Product: syz [ 245.448448][ T10] usb 4-1: Manufacturer: syz [ 245.481894][ T5849] usb 2-1: USB disconnect, device number 27 [ 245.498360][ T10] usb 4-1: SerialNumber: syz [ 245.543512][ T10] cdc_mbim 4-1:1.0: skipping garbage [ 245.557176][ T10] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 245.616203][ T10] cdc_mbim 4-1:1.0: bind() failure [ 245.644515][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 245.665516][ T10] cdc_ncm 4-1:1.1: bind() failure [ 245.680177][ T6430] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 245.690293][ T6430] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 245.730149][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.749286][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.765810][ T10] usb 4-1: USB disconnect, device number 32 [ 246.027053][ T29] audit: type=1400 audit(245.973:1029): avc: denied { append } for pid=8330 comm="syz.1.607" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 246.281010][ T8340] fuse: Unknown parameter 'ÿ' [ 246.482790][ T29] audit: type=1400 audit(246.203:1030): avc: denied { map } for pid=8330 comm="syz.1.607" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 246.564348][ T8351] syz.3.612 (8351): attempted to duplicate a private mapping with mremap. This is not supported. [ 246.937948][ T29] audit: type=1400 audit(246.533:1031): avc: denied { read } for pid=8350 comm="syz.3.612" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.017674][ T29] audit: type=1400 audit(246.533:1032): avc: denied { open } for pid=8350 comm="syz.3.612" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.071585][ T29] audit: type=1400 audit(246.533:1033): avc: denied { ioctl } for pid=8350 comm="syz.3.612" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.097052][ T29] audit: type=1400 audit(246.653:1034): avc: denied { write } for pid=8358 comm="syz.5.611" path="socket:[20043]" dev="sockfs" ino=20043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.296136][ T8367] 9p: Bad value for 'timeout' [ 247.432272][ T8369] binder: 8368:8369 ioctl 4018620d 0 returned -22 [ 247.496774][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 247.610592][ T8376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 247.718938][ T5849] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 247.761909][ T24] usb 3-1: USB disconnect, device number 35 [ 247.800232][ T8378] binder: 8368:8378 ioctl 40946400 200000000500 returned -22 [ 247.948959][ T5849] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 247.980407][ T5849] usb 6-1: can't read configurations, error -61 [ 248.119844][ T8390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.143169][ T8390] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 248.228762][ T5849] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 248.336406][ T29] audit: type=1400 audit(248.283:1035): avc: denied { create } for pid=8395 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 248.411679][ T5849] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 248.419420][ T5811] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 248.430026][ T5849] usb 6-1: can't read configurations, error -61 [ 248.450298][ T5849] usb usb6-port1: attempt power cycle [ 248.491649][ T29] audit: type=1400 audit(248.443:1036): avc: denied { execute } for pid=8395 comm="syz.1.624" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.615956][ T5811] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 248.627027][ T5811] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 248.639171][ T5811] usb 5-1: Product: syz [ 248.656565][ T5811] usb 5-1: Manufacturer: syz [ 248.665194][ T5811] usb 5-1: SerialNumber: syz [ 248.677600][ T5811] usb 5-1: config 0 descriptor?? [ 248.693093][ T5811] ch341 5-1:0.0: ch341-uart converter detected [ 248.809142][ T5849] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 248.842897][ T5849] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 248.863181][ T5849] usb 6-1: can't read configurations, error -61 [ 248.892157][ T5811] usb 5-1: failed to receive control message: -71 [ 248.903511][ T5811] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 248.918922][ T5811] usb 5-1: USB disconnect, device number 27 [ 248.934676][ T5811] ch341 5-1:0.0: device disconnected [ 248.986022][ T29] audit: type=1400 audit(248.933:1037): avc: denied { create } for pid=8401 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 249.006981][ T5849] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 249.018231][ T29] audit: type=1400 audit(248.963:1038): avc: denied { bind } for pid=8401 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 249.043788][ T5849] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 249.052839][ T5849] usb 6-1: can't read configurations, error -61 [ 249.059495][ T5849] usb usb6-port1: unable to enumerate USB device [ 249.105957][ T8404] comedi comedi2: pcm3724: I/O port conflict (0x8,16) [ 249.447170][ T8405] 9p: Could not find request transport: unyô‰Tß‚¾ 4¶-¾¦}x [ 249.768894][ T5849] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 249.844799][ T8418] sctp: [Deprecated]: syz.2.630 (pid 8418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.844799][ T8418] Use struct sctp_sack_info instead [ 249.960224][ T5849] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 250.007273][ T5849] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 250.043763][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.145949][ T5849] usb 5-1: Product: syz [ 250.162771][ T5849] usb 5-1: Manufacturer: syz [ 250.167548][ T5849] usb 5-1: SerialNumber: syz [ 250.169438][ T3118] block nbd0: Possible stuck request ffff888027cb0000: control (read@0,1024B). Runtime 120 seconds [ 250.242120][ T3118] block nbd0: Possible stuck request ffff888027cb0200: control (read@1024,1024B). Runtime 120 seconds [ 250.259091][ T3118] block nbd0: Possible stuck request ffff888027cb0400: control (read@2048,1024B). Runtime 120 seconds [ 250.388141][ T5849] usb 5-1: config 0 descriptor?? [ 250.703511][ T3118] block nbd0: Possible stuck request ffff888027cb0600: control (read@3072,1024B). Runtime 120 seconds [ 250.715440][ T6430] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 251.143180][ T6430] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 251.156191][ T6430] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.172121][ T6430] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.191195][ T6430] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.202731][ T6430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.230630][ T6430] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 251.237909][ T6430] usb 4-1: invalid MIDI out EP 0 [ 251.372289][ T6430] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 251.579256][ T6430] usb 4-1: USB disconnect, device number 33 [ 252.169241][ T6430] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 252.319363][ T6430] usb 3-1: Using ep0 maxpacket: 8 [ 252.329047][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 252.329064][ T29] audit: type=1400 audit(252.273:1051): avc: denied { setcurrent } for pid=8460 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 252.364713][ T6430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 252.395054][ T6430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.410803][ T6430] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.414499][ T8462] netlink: 108 bytes leftover after parsing attributes in process `syz.1.642'. [ 252.421306][ T6430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 252.433356][ T29] audit: type=1400 audit(252.363:1052): avc: denied { read write } for pid=8460 comm="syz.3.643" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 252.444175][ T6430] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 252.476649][ T6430] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 252.486826][ T6430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.507352][ T29] audit: type=1400 audit(252.363:1053): avc: denied { open } for pid=8460 comm="syz.3.643" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 252.507578][ T6430] usb 3-1: config 0 descriptor?? [ 252.537472][ T29] audit: type=1400 audit(252.363:1054): avc: denied { bind } for pid=8459 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.563301][ T8458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.613716][ T6430] usb 5-1: USB disconnect, device number 28 [ 252.812950][ T5815] Bluetooth: hci6: unexpected event 0x14 length: 0 < 6 [ 252.822288][ T5815] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 252.830863][ T5815] Bluetooth: hci6: unexpected event 0x10 length: 0 < 1 [ 252.848194][ T5815] Bluetooth: hci6: unexpected event 0x01 length: 0 < 1 [ 252.855910][ T5815] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 252.863586][ T5815] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 252.870995][ T5815] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 252.877840][ T5815] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 252.885159][ T5815] Bluetooth: hci6: unexpected event 0x05 length: 0 < 4 [ 252.893246][ T5815] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 252.900179][ T5815] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 252.907018][ T5815] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 252.914670][ T5815] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 252.922125][ T5815] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 253.067828][ T6430] usb 3-1: USB disconnect, device number 36 [ 253.246823][ T5818] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 253.629736][ T8505] block nbd4: NBD_DISCONNECT [ 253.805441][ T29] audit: type=1400 audit(253.753:1055): avc: denied { write } for pid=8507 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 253.861781][ T8510] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 255.049345][ T8529] mmap: syz.5.662 (8529): VmData 25763840 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 255.061705][ T5877] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 255.221749][ T5877] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 255.279205][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.295481][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.302050][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.310625][ T5877] usb 2-1: Product: syz [ 255.314839][ T5877] usb 2-1: Manufacturer: syz [ 255.337093][ T5877] usb 2-1: SerialNumber: syz [ 255.361006][ T5877] usb 2-1: config 0 descriptor?? [ 255.545233][ T8543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.583330][ T5877] usb 2-1: USB disconnect, device number 28 [ 255.619242][ T8546] netlink: 'syz.4.665': attribute type 10 has an invalid length. [ 256.023695][ T8557] netlink: 'syz.3.668': attribute type 10 has an invalid length. [ 256.033046][ T8557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.668'. [ 256.052737][ T8557] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 256.071721][ T8557] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 256.159321][ T29] audit: type=1400 audit(256.113:1056): avc: denied { bind } for pid=8560 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 256.769379][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 256.874772][ T8570] Driver unsupported XDP return value 0 on prog (id 68) dev N/A, expect packet loss! [ 256.892521][ T29] audit: type=1400 audit(256.843:1057): avc: denied { create } for pid=8567 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.183263][ T29] audit: type=1400 audit(256.873:1058): avc: denied { getopt } for pid=8567 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.251631][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 257.297816][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 212, changing to 11 [ 257.315720][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.425179][ T8577] netlink: 'syz.1.672': attribute type 10 has an invalid length. [ 257.433821][ T8577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.672'. [ 257.452843][ T8577] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 257.461438][ T8577] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 257.487296][ T8577] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 257.679194][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.40 [ 257.688237][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.701284][ T10] usb 3-1: Product: 엇軆ଊ똨é€à©¢á¸±âªªí›€á»ï¦®é¶Ÿã§Ÿîœæ£“馜粱ç»î¸½ãŠê– æ ‡ç—©çº‡ã—玉å•ì¶šì³±êž‡é†å”¬ïž‹ç»«ê£èž©í‡‰ï¿šá™šç£³ç´ƒé‹œá˜¢è•žï‡‰á²ëŒ‚졤镯穢麽碎➶煺 [ 257.734566][ T10] usb 3-1: Manufacturer: Ћ [ 257.754777][ T10] usb 3-1: SerialNumber: syz [ 258.184570][ T8556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.209444][ T8556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.342192][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 258.512467][ T29] audit: type=1400 audit(258.463:1059): avc: denied { ioctl } for pid=8583 comm="syz.1.675" path="socket:[20982]" dev="sockfs" ino=20982 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.514641][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 258.620370][ T10] usb 3-1: USB disconnect, device number 37 [ 258.751353][ T8591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.677'. [ 258.822930][ T8591] smc: removing ib device syz2 [ 258.874803][ T29] audit: type=1400 audit(258.823:1060): avc: denied { create } for pid=8590 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 258.917202][ T8597] xt_connbytes: Forcing CT accounting to be enabled [ 259.013738][ T29] audit: type=1400 audit(258.963:1061): avc: denied { sys_admin } for pid=8590 comm="syz.1.677" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 259.042246][ T8604] FAULT_INJECTION: forcing a failure. [ 259.042246][ T8604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.150314][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: syz.2.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.150344][ T8604] Tainted: [L]=SOFTLOCKUP [ 259.150350][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 259.150360][ T8604] Call Trace: [ 259.150365][ T8604] [ 259.150372][ T8604] dump_stack_lvl+0x100/0x190 [ 259.150404][ T8604] should_fail_ex.cold+0x5/0xa [ 259.150426][ T8604] _copy_from_user+0x2e/0xd0 [ 259.150453][ T8604] do_ipv6_setsockopt+0x74d/0x4510 [ 259.150488][ T8604] ? __print_lock_name+0x20/0x80 [ 259.150510][ T8604] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 259.150537][ T8604] ? avc_has_perm_noaudit+0x145/0x3b0 [ 259.150565][ T8604] ? avc_has_perm+0x135/0x1e0 [ 259.150589][ T8604] ? __pfx_avc_has_perm+0x10/0x10 [ 259.150616][ T8604] ? get_pid_task+0x106/0x250 [ 259.150648][ T8604] ? sock_has_perm+0x258/0x2f0 [ 259.150665][ T8604] ? __pfx_sock_has_perm+0x10/0x10 [ 259.150680][ T8604] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 259.150704][ T8604] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 259.150732][ T8604] ? ipv6_setsockopt+0xcb/0x170 [ 259.150751][ T8604] ipv6_setsockopt+0xcb/0x170 [ 259.150776][ T8604] tcp_setsockopt+0xa7/0x100 [ 259.150804][ T8604] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 259.150829][ T8604] do_sock_setsockopt+0xf3/0x1d0 [ 259.150854][ T8604] __sys_setsockopt+0x195/0x220 [ 259.150876][ T8604] __x64_sys_setsockopt+0xbd/0x160 [ 259.150892][ T8604] ? do_syscall_64+0x95/0xf80 [ 259.150910][ T8604] ? lockdep_hardirqs_on+0x78/0x100 [ 259.150928][ T8604] do_syscall_64+0x106/0xf80 [ 259.150945][ T8604] ? clear_bhb_loop+0x40/0x90 [ 259.150965][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.150983][ T8604] RIP: 0033:0x7ffb16b9c799 [ 259.150998][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.151015][ T8604] RSP: 002b:00007ffb17999028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.151032][ T8604] RAX: ffffffffffffffda RBX: 00007ffb16e15fa0 RCX: 00007ffb16b9c799 [ 259.151043][ T8604] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 259.151053][ T8604] RBP: 00007ffb17999090 R08: 0000000000000460 R09: 0000000000000000 [ 259.151063][ T8604] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 259.151074][ T8604] R13: 00007ffb16e16038 R14: 00007ffb16e15fa0 R15: 00007ffe8b092008 [ 259.151098][ T8604] [ 259.660726][ T8595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.677'. [ 259.818955][ T5849] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 259.999817][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 260.012550][ T5849] usb 6-1: unable to get BOS descriptor or descriptor too short [ 260.029052][ T5849] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 260.052583][ T5849] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 260.062023][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.070258][ T5849] usb 6-1: Product: syz [ 260.079196][ T5849] usb 6-1: Manufacturer: syz [ 260.083810][ T5849] usb 6-1: SerialNumber: syz [ 260.278498][ T29] audit: type=1400 audit(260.223:1062): avc: denied { read } for pid=8622 comm="syz.2.685" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 260.336164][ T29] audit: type=1400 audit(260.223:1063): avc: denied { ioctl } for pid=8622 comm="syz.2.685" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 261.523727][ T5849] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 261.584203][ T29] audit: type=1400 audit(261.513:1064): avc: denied { write } for pid=8631 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.695867][ T5849] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 262.921397][ T8647] sp0: Synchronizing with TNC [ 262.939838][ T8647] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 262.951358][ T8647] bond1: left promiscuous mode [ 262.956142][ T8647] erspan1: left promiscuous mode [ 263.187414][ T5849] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 263.350639][ T5849] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 263.365259][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.396315][ T5849] usb 3-1: config 0 descriptor?? [ 263.400562][ T9] usb 6-1: USB disconnect, device number 8 [ 264.461513][ T8644] bond1: Unable to set down delay as MII monitoring is disabled [ 264.503866][ T8644] bond1 (unregistering): Released all slaves [ 264.591552][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 264.659274][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 264.687748][ T8682] Bluetooth: MGMT ver 1.23 [ 264.699678][ T5849] usb 3-1: Cannot set MAC address [ 264.707338][ T5849] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 264.755797][ T5849] usb 3-1: USB disconnect, device number 38 [ 264.885908][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 264.895319][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.904788][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 264.919623][ T9] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 264.943534][ T8681] overlayfs: failed to resolve './file1': -2 [ 264.950796][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.972254][ T29] audit: type=1400 audit(264.913:1065): avc: denied { create } for pid=8675 comm="syz.3.700" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 264.995258][ T9] usb 5-1: Product: syz [ 265.002878][ T9] usb 5-1: Manufacturer: syz [ 265.008553][ T9] usb 5-1: SerialNumber: syz [ 265.236185][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 265.250293][ T8688] FAULT_INJECTION: forcing a failure. [ 265.250293][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 265.263545][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 265.559657][ T8688] CPU: 0 UID: 0 PID: 8688 Comm: syz.1.703 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.559685][ T8688] Tainted: [L]=SOFTLOCKUP [ 265.559691][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 265.559702][ T8688] Call Trace: [ 265.559708][ T8688] [ 265.559714][ T8688] dump_stack_lvl+0x100/0x190 [ 265.559749][ T8688] should_fail_ex.cold+0x5/0xa [ 265.559772][ T8688] ? tomoyo_realpath_from_path+0xb6/0x690 [ 265.559794][ T8688] should_failslab+0xc2/0x120 [ 265.559813][ T8688] __kmalloc_noprof+0xe0/0x850 [ 265.559842][ T8688] tomoyo_realpath_from_path+0xb6/0x690 [ 265.559883][ T8688] tomoyo_path_number_perm+0x23c/0x580 [ 265.559902][ T8688] ? tomoyo_path_number_perm+0x22e/0x580 [ 265.559922][ T8688] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 265.559963][ T8688] ? find_held_lock+0x2b/0x80 [ 265.559986][ T8688] ? __fget_files+0x215/0x3d0 [ 265.560003][ T8688] ? hook_file_ioctl_common+0x146/0x410 [ 265.560030][ T8688] ? __fget_files+0x21f/0x3d0 [ 265.560053][ T8688] security_file_ioctl+0xd3/0x230 [ 265.560076][ T8688] __x64_sys_ioctl+0xb7/0x210 [ 265.560102][ T8688] do_syscall_64+0x106/0xf80 [ 265.560120][ T8688] ? clear_bhb_loop+0x40/0x90 [ 265.560141][ T8688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.560158][ T8688] RIP: 0033:0x7f87d3d9c799 [ 265.560173][ T8688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.560190][ T8688] RSP: 002b:00007f87d4caa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.560206][ T8688] RAX: ffffffffffffffda RBX: 00007f87d4015fa0 RCX: 00007f87d3d9c799 [ 265.560217][ T8688] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 265.560226][ T8688] RBP: 00007f87d4caa090 R08: 0000000000000000 R09: 0000000000000000 [ 265.560236][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.560245][ T8688] R13: 00007f87d4016038 R14: 00007f87d4015fa0 R15: 00007ffd74b55958 [ 265.560268][ T8688] [ 265.560457][ T8688] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.978744][ T5849] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 266.047264][ T9] usb 5-1: USB disconnect, device number 29 [ 266.183083][ T5849] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 266.205532][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.218911][ T5849] usb 3-1: Product: syz [ 266.223102][ T5849] usb 3-1: Manufacturer: syz [ 266.292095][ T5849] usb 3-1: SerialNumber: syz [ 266.304374][ T5849] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 266.319093][ T29] audit: type=1400 audit(266.263:1066): avc: denied { execute_no_trans } for pid=8694 comm="syz.5.705" path="/27/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.423203][ T29] audit: type=1400 audit(266.273:1067): avc: denied { bind } for pid=8694 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 266.453316][ T5811] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 266.623089][ T29] audit: type=1400 audit(266.273:1068): avc: denied { name_bind } for pid=8694 comm="syz.5.705" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 266.675022][ T29] audit: type=1400 audit(266.273:1069): avc: denied { node_bind } for pid=8694 comm="syz.5.705" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 266.751228][ T8705] xt_HMARK: proto mask must be zero with L3 mode [ 266.758074][ T29] audit: type=1400 audit(266.273:1070): avc: denied { write } for pid=8694 comm="syz.5.705" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 266.807970][ T29] audit: type=1400 audit(266.273:1071): avc: denied { name_connect } for pid=8694 comm="syz.5.705" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 266.860569][ T29] audit: type=1400 audit(266.353:1072): avc: denied { firmware_load } for pid=5811 comm="kworker/1:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 266.891016][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.704'. [ 267.033237][ T8711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.164464][ T8711] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 267.179082][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 267.186846][ T29] audit: type=1400 audit(266.843:1073): avc: denied { setopt } for pid=8691 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 267.343217][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 267.397654][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.432406][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.536871][ T5811] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 267.544242][ T5811] ath9k_htc: Failed to initialize the device [ 267.568615][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 267.574733][ T5811] usb 3-1: ath9k_htc: USB layer deinitialized [ 267.587145][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.597013][ T9] usb 2-1: Product: syz [ 267.603278][ T9] usb 2-1: Manufacturer: syz [ 267.614840][ T9] usb 2-1: SerialNumber: syz [ 267.640877][ T9] usb 2-1: config 0 descriptor?? [ 267.653648][ T9] appledisplay 2-1:0.0: Could not find int-in endpoint [ 267.664598][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 267.855655][ T6430] usb 2-1: USB disconnect, device number 29 [ 268.950286][ T5925] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 269.024107][ T5849] usb 3-1: USB disconnect, device number 39 [ 269.103348][ T5925] usb 5-1: device descriptor read/64, error -71 [ 269.148762][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 269.408231][ T5925] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 269.416917][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 269.436832][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 269.479506][ T9] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 269.489623][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.499406][ T9] usb 6-1: Product: syz [ 269.507640][ T9] usb 6-1: Manufacturer: syz [ 269.517746][ T9] usb 6-1: SerialNumber: syz [ 269.525693][ T9] usb 6-1: config 0 descriptor?? [ 269.544595][ T8740] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 269.552622][ T8740] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 269.611893][ T5925] usb 5-1: device descriptor read/64, error -71 [ 269.814160][ T5925] usb usb5-port1: attempt power cycle [ 269.825765][ T8740] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 269.829812][ T8750] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 269.835440][ T8740] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 269.870131][ T29] audit: type=1400 audit(269.823:1074): avc: denied { setattr } for pid=8749 comm="syz.1.721" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 270.122969][ T8758] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 270.130903][ T8758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.722'. [ 270.205061][ T8758] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 270.231097][ T5925] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 270.290298][ T5925] usb 5-1: device descriptor read/8, error -71 [ 270.399069][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.422229][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.439959][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.452405][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.494780][ T9] Error reading MAC address [ 270.504736][ T29] audit: type=1400 audit(270.453:1075): avc: denied { create } for pid=8762 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 270.537213][ T29] audit: type=1400 audit(270.453:1076): avc: denied { getopt } for pid=8762 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 270.556925][ T5925] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 270.579475][ T5925] usb 5-1: device descriptor read/8, error -71 [ 270.625084][ T8768] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 270.689833][ T5925] usb usb5-port1: unable to enumerate USB device [ 270.704918][ T29] audit: type=1400 audit(270.653:1077): avc: denied { name_bind } for pid=8771 comm="syz.2.725" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 270.871297][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 270.879104][ T29] audit: type=1400 audit(270.803:1078): avc: denied { write } for pid=8771 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 270.917463][ T29] audit: type=1400 audit(270.803:1079): avc: denied { read } for pid=8771 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 271.060649][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.073746][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.085256][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.109897][ T8779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.128462][ T8779] netlink: 'syz.1.727': attribute type 10 has an invalid length. [ 271.137238][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.146851][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.165939][ T24] usb 4-1: config 0 descriptor?? [ 271.578742][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.588729][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.598778][ T24] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 271.720744][ T24] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 271.799454][ T8785] kAFS: unable to lookup cell 'Þ({^ú@' [ 271.835123][ T5818] Bluetooth: hci3: unknown advertising packet type: 0xfa [ 271.863972][ T24] usb 4-1: USB disconnect, device number 34 [ 272.030130][ T5925] usb 6-1: USB disconnect, device number 9 [ 272.606714][ T29] audit: type=1400 audit(272.553:1080): avc: denied { read } for pid=8802 comm="syz.1.734" dev="sockfs" ino=22690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.861318][ T5925] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 272.944204][ T8807] FAULT_INJECTION: forcing a failure. [ 272.944204][ T8807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.037779][ T8807] CPU: 1 UID: 0 PID: 8807 Comm: syz.4.735 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.037807][ T8807] Tainted: [L]=SOFTLOCKUP [ 273.037813][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 273.037823][ T8807] Call Trace: [ 273.037829][ T8807] [ 273.037835][ T8807] dump_stack_lvl+0x100/0x190 [ 273.037868][ T8807] should_fail_ex.cold+0x5/0xa [ 273.037892][ T8807] __kvm_read_guest_page+0x186/0x250 [ 273.037919][ T8807] kvm_fetch_guest_virt+0x128/0x1a0 [ 273.037946][ T8807] __do_insn_fetch_bytes+0x5ef/0x7c0 [ 273.037967][ T8807] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 273.037986][ T8807] ? folio_mark_accessed+0xf3/0x1040 [ 273.038012][ T8807] ? __pfx_folio_mark_accessed+0x10/0x10 [ 273.038043][ T8807] x86_decode_insn+0x3ca/0x6d80 [ 273.038068][ T8807] ? kvm_tdp_page_fault+0x295/0x3d0 [ 273.038104][ T8807] ? __pfx_x86_decode_insn+0x10/0x10 [ 273.038128][ T8807] ? vmx_cache_reg+0x54f/0x7b0 [ 273.038151][ T8807] ? init_decode_cache+0xd/0x2a0 [ 273.038173][ T8807] ? init_emulate_ctxt+0x415/0x6d0 [ 273.038197][ T8807] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 273.038224][ T8807] ? __kernel_text_address+0xd/0x30 [ 273.038245][ T8807] x86_emulate_instruction+0x1dcc/0x1f80 [ 273.038271][ T8807] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 273.038305][ T8807] handle_ud+0x103/0x5a0 [ 273.038323][ T8807] ? __pfx_handle_ud+0x10/0x10 [ 273.038340][ T8807] ? nested_vmx_reflect_vmexit+0x6db/0x4af0 [ 273.038358][ T8807] ? __vmx_complete_interrupts+0x129/0x570 [ 273.038377][ T8807] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 273.038400][ T8807] handle_exception_nmi+0xd0c/0x1bb0 [ 273.038422][ T8807] ? __pfx_handle_exception_nmi+0x10/0x10 [ 273.038440][ T8807] vmx_handle_exit+0x84d/0x1f40 [ 273.038462][ T8807] vcpu_run+0x34cf/0x5ca0 [ 273.038491][ T8807] ? __pfx_vcpu_run+0x10/0x10 [ 273.038521][ T8807] ? rcu_is_watching+0x12/0xc0 [ 273.038545][ T8807] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 273.038565][ T8807] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 273.038590][ T8807] kvm_vcpu_ioctl+0x730/0x1730 [ 273.038618][ T8807] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 273.038645][ T8807] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 273.038668][ T8807] ? do_vfs_ioctl+0x226/0x13e0 [ 273.038693][ T8807] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 273.038717][ T8807] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 273.038748][ T8807] ? __fget_files+0x215/0x3d0 [ 273.038763][ T8807] ? hook_file_ioctl_common+0x146/0x410 [ 273.038793][ T8807] ? selinux_file_ioctl+0x139/0x290 [ 273.038813][ T8807] ? selinux_file_ioctl+0xb4/0x290 [ 273.038834][ T8807] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 273.038859][ T8807] __x64_sys_ioctl+0x18e/0x210 [ 273.038885][ T8807] do_syscall_64+0x106/0xf80 [ 273.038904][ T8807] ? clear_bhb_loop+0x40/0x90 [ 273.038925][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.038942][ T8807] RIP: 0033:0x7f6cd519c799 [ 273.038956][ T8807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.038971][ T8807] RSP: 002b:00007f6cd60dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.038988][ T8807] RAX: ffffffffffffffda RBX: 00007f6cd5415fa0 RCX: 00007f6cd519c799 [ 273.038999][ T8807] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 273.039008][ T8807] RBP: 00007f6cd60dc090 R08: 0000000000000000 R09: 0000000000000000 [ 273.039018][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.039027][ T8807] R13: 00007f6cd5416038 R14: 00007f6cd5415fa0 R15: 00007ffc149cd1b8 [ 273.039051][ T8807] [ 273.041606][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 273.077412][ T29] audit: type=1400 audit(273.023:1081): avc: denied { ioctl } for pid=8813 comm="syz.2.737" path="socket:[22781]" dev="sockfs" ino=22781 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 273.533769][ T8815] usb usb8: usbfs: process 8815 (syz.2.737) did not claim interface 0 before use [ 273.547683][ T8815] binder: 8813:8815 ioctl c0306201 2000000003c0 returned -14 [ 273.580118][ T5925] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 273.701205][ T5925] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 273.718325][ T5925] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 274.181695][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.190365][ T5925] usb 6-1: Product: syz [ 274.194768][ T5925] usb 6-1: Manufacturer: syz [ 274.200116][ T5925] usb 6-1: SerialNumber: syz [ 274.922538][ T29] audit: type=1400 audit(274.873:1082): avc: denied { mount } for pid=8830 comm="syz.4.741" name="/" dev="overlay" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 275.369091][ T29] audit: type=1400 audit(275.233:1083): avc: denied { getopt } for pid=8834 comm="syz.4.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 275.485483][ T29] audit: type=1400 audit(275.353:1084): avc: denied { append } for pid=8832 comm="syz.2.743" name="nbd2" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.526715][ T8836] block nbd2: shutting down sockets [ 275.600777][ T29] audit: type=1400 audit(275.553:1085): avc: denied { read write } for pid=8798 comm="syz.5.732" name="mouse0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 275.674223][ T8847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.691222][ T29] audit: type=1400 audit(275.553:1086): avc: denied { open } for pid=8798 comm="syz.5.732" path="/dev/input/mouse0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 275.823705][ T8847] netlink: 'syz.1.744': attribute type 10 has an invalid length. [ 275.925569][ T8853] netlink: 32 bytes leftover after parsing attributes in process `syz.3.746'. [ 276.060245][ T8853] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 276.376078][ T8857] FAULT_INJECTION: forcing a failure. [ 276.376078][ T8857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.481497][ T8857] CPU: 0 UID: 0 PID: 8857 Comm: syz.3.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.481525][ T8857] Tainted: [L]=SOFTLOCKUP [ 276.481531][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 276.481542][ T8857] Call Trace: [ 276.481547][ T8857] [ 276.481553][ T8857] dump_stack_lvl+0x100/0x190 [ 276.481584][ T8857] should_fail_ex.cold+0x5/0xa [ 276.481599][ T8857] _copy_to_user+0x32/0xd0 [ 276.481616][ T8857] simple_read_from_buffer+0xcb/0x170 [ 276.481635][ T8857] proc_fail_nth_read+0x1af/0x230 [ 276.481651][ T8857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.481666][ T8857] ? rw_verify_area+0xce/0x6d0 [ 276.481680][ T8857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.481695][ T8857] vfs_read+0x1e4/0xb30 [ 276.481719][ T8857] ? __pfx_vfs_read+0x10/0x10 [ 276.481734][ T8857] ? __fget_files+0x215/0x3d0 [ 276.481748][ T8857] ? __fget_files+0x21f/0x3d0 [ 276.481763][ T8857] ksys_read+0x12a/0x250 [ 276.481779][ T8857] ? __pfx_ksys_read+0x10/0x10 [ 276.481793][ T8857] ? kvm_on_user_return+0x1a5/0x250 [ 276.481811][ T8857] do_syscall_64+0x106/0xf80 [ 276.481822][ T8857] ? clear_bhb_loop+0x40/0x90 [ 276.481836][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.481847][ T8857] RIP: 0033:0x7f934a35cfce [ 276.481857][ T8857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 276.481867][ T8857] RSP: 002b:00007f934b196fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.481878][ T8857] RAX: ffffffffffffffda RBX: 00007f934b1976c0 RCX: 00007f934a35cfce [ 276.481885][ T8857] RDX: 000000000000000f RSI: 00007f934b1970a0 RDI: 0000000000000006 [ 276.481891][ T8857] RBP: 00007f934b197090 R08: 0000000000000000 R09: 0000000000000000 [ 276.481897][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.481903][ T8857] R13: 00007f934a616038 R14: 00007f934a615fa0 R15: 00007ffec10de428 [ 276.481916][ T8857] [ 277.391457][ T5925] usb 6-1: USB disconnect, device number 10 [ 278.240203][ T8885] 9p: Bad value for 'timeout' [ 278.827449][ T8890] No such timeout policy "syz0" [ 280.124983][ T8896] overlayfs: failed lookup in lower (newroot/146, name='file1', err=-40): overlapping layers [ 280.310271][ T8902] ceph: No mds server is up or the cluster is laggy [ 280.332111][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'. [ 280.358198][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 280.780751][ T3118] block nbd0: Possible stuck request ffff888027cb0000: control (read@0,1024B). Runtime 150 seconds [ 280.784933][ T8907] netlink: 'syz.2.758': attribute type 10 has an invalid length. [ 280.792462][ T3118] block nbd0: Possible stuck request ffff888027cb0200: control (read@1024,1024B). Runtime 150 seconds [ 280.823220][ T8908] evm: overlay not supported [ 281.297776][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 281.299950][ T3118] block nbd0: Possible stuck request ffff888027cb0400: control (read@2048,1024B). Runtime 150 seconds [ 281.315729][ T3118] block nbd0: Possible stuck request ffff888027cb0600: control (read@3072,1024B). Runtime 150 seconds [ 281.328837][ T8907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.758'. [ 281.612102][ T8911] sctp: [Deprecated]: syz.1.759 (pid 8911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.612102][ T8911] Use struct sctp_sack_info instead [ 281.846547][ T8907] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 282.037778][ T9] libceph: connect (1)[c::]:6789 error -101 [ 282.046855][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 282.493395][ T8913] ceph: No mds server is up or the cluster is laggy [ 282.917127][ T9] libceph: connect (1)[c::]:6789 error -101 [ 282.932335][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 283.412657][ T8929] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 283.518871][ T5877] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 284.201804][ T5877] usb 4-1: not running at top speed; connect to a high speed hub [ 284.209212][ T5925] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 284.220328][ T5877] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 284.247516][ T5877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 284.259599][ T5877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 284.286145][ T5877] usb 4-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice= 0.40 [ 284.308217][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.318403][ T5877] usb 4-1: Product: ÑŽ [ 284.322809][ T5877] usb 4-1: Manufacturer: á°Š [ 284.328434][ T5877] usb 4-1: SerialNumber: Ð [ 284.349771][ T8935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 284.364390][ T5925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 284.377579][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.483548][ T5925] usb 3-1: Product: syz [ 284.493682][ T5925] usb 3-1: Manufacturer: syz [ 284.498418][ T5925] usb 3-1: SerialNumber: syz [ 284.620839][ T5925] usb 3-1: config 0 descriptor?? [ 284.708698][ T8945] No such timeout policy "syz0" [ 285.616215][ T5877] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.623896][ T5925] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 285.795730][ T5877] usb 4-1: invalid MIDI in EP 0 [ 285.979372][ T8935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.987993][ T8935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.094598][ T8952] 9p: Bad value for 'timeout' [ 286.510422][ T29] audit: type=1400 audit(286.463:1088): avc: denied { connect } for pid=8954 comm="syz.5.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.530423][ T29] audit: type=1400 audit(286.463:1087): avc: denied { connect } for pid=8954 comm="syz.5.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.571349][ T5877] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 286.638872][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.547891][ T5925] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 287.577405][ T6430] usb 4-1: USB disconnect, device number 35 [ 288.220432][ T5877] usb 3-1: USB disconnect, device number 40 [ 288.242888][ T29] audit: type=1400 audit(288.193:1089): avc: denied { accept } for pid=8970 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 288.489177][ T8983] netlink: 'syz.2.779': attribute type 10 has an invalid length. [ 288.497448][ T8983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.779'. [ 288.558168][ T8983] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 288.591316][ T29] audit: type=1400 audit(288.533:1090): avc: denied { append } for pid=8978 comm="syz.5.778" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 288.908818][ T5877] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 289.538273][ T5877] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 289.553477][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.561779][ T5877] usb 6-1: Product: syz [ 289.566117][ T5877] usb 6-1: Manufacturer: syz [ 289.662635][ T5877] usb 6-1: SerialNumber: syz [ 289.769594][ T8996] No such timeout policy "syz0" [ 290.859551][ T5877] usb 6-1: config 0 descriptor?? [ 290.962146][ T5877] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 011 [ 291.252063][ T9003] 9p: Bad value for 'timeout' [ 291.563243][ T5877] (null): failure setting delay to 10us [ 291.580161][ T5877] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 291.618018][ T5877] usb 6-1: USB disconnect, device number 11 [ 291.972159][ T6430] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 292.719154][ T5925] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 292.828145][ T9026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.155829][ T6430] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 293.201395][ T6430] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.228180][ T5925] usb 3-1: not running at top speed; connect to a high speed hub [ 293.236587][ T6430] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 293.260429][ T6430] usb 2-1: config 1 has no interface number 1 [ 293.266564][ T6430] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 293.292376][ T9033] netlink: 'syz.3.788': attribute type 10 has an invalid length. [ 293.329635][ T5925] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 293.348919][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 293.370146][ T6430] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 293.389942][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 293.417285][ T6430] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.428371][ T5925] usb 3-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice= 0.40 [ 293.438259][ T6430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.447618][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.458357][ T6430] usb 2-1: Product: syz [ 293.475404][ T6430] usb 2-1: Manufacturer: syz [ 293.481107][ T5925] usb 3-1: Product: ÑŽ [ 293.485188][ T5925] usb 3-1: Manufacturer: á°Š [ 293.499266][ T6430] usb 2-1: SerialNumber: syz [ 293.504032][ T5925] usb 3-1: SerialNumber: Ð [ 293.566375][ T9010] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 293.832001][ T9037] No such timeout policy "syz0" [ 295.180863][ T9011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.785'. [ 295.190534][ T9011] overlayfs: missing 'lowerdir' [ 295.359946][ T5925] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.381648][ T5925] usb 3-1: invalid MIDI in EP 0 [ 296.017678][ T5925] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 296.031966][ T6430] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 296.048613][ T6430] usb 2-1: MIDIStreaming interface descriptor not found [ 296.065550][ T5925] usb 3-1: USB disconnect, device number 41 [ 296.149542][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.639482][ T6430] usb 2-1: USB disconnect, device number 30 [ 296.702750][ T9058] dlm: no locking on control device [ 296.728565][ T9061] dlm: no locking on control device [ 296.998854][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 297.258160][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 297.286647][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 297.307650][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 297.331874][ T9066] netlink: 'syz.5.797': attribute type 10 has an invalid length. [ 297.341281][ T9066] netlink: 40 bytes leftover after parsing attributes in process `syz.5.797'. [ 297.354347][ T9066] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 297.364284][ T9066] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 297.370441][ T24] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 297.373606][ T9066] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 297.414511][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.475041][ T24] usb 5-1: Product: syz [ 297.501323][ T24] usb 5-1: Manufacturer: syz [ 297.530024][ T24] usb 5-1: SerialNumber: syz [ 297.549165][ T5925] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 297.722958][ T5925] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 297.733054][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.742692][ T5925] usb 2-1: Product: syz [ 297.752175][ T5925] usb 2-1: Manufacturer: syz [ 297.762183][ T5925] usb 2-1: SerialNumber: syz [ 297.777495][ T5925] usb 2-1: config 0 descriptor?? [ 297.787535][ T5925] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 031 [ 297.812301][ T24] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 297.824865][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 297.868714][ T6430] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 298.009981][ T24] usb 5-1: 2:1 : can't get High Capability descriptor [ 298.022599][ T6430] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 298.062128][ T6430] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 298.074402][ T6430] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.095057][ T6430] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 298.106033][ T6430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.128028][ T6430] usb 3-1: Product: syz [ 298.159655][ T6430] usb 3-1: Manufacturer: syz [ 298.164329][ T6430] usb 3-1: SerialNumber: syz [ 298.177741][ T6430] usblp0: Disabling reads from problematic bidirectional printer [ 298.196572][ T5925] (null): failure reading functionality [ 298.204160][ T5925] i2c i2c-1: failure reading functionality [ 298.211928][ T5925] i2c i2c-1: connected i2c-tiny-usb device [ 298.219817][ T5925] usb 2-1: USB disconnect, device number 31 [ 298.380603][ T6430] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 298.404749][ T6430] usb 3-1: USB disconnect, device number 42 [ 298.411119][ T5874] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 298.432853][ T6430] usblp0: removed [ 298.571048][ T5874] usb 6-1: not running at top speed; connect to a high speed hub [ 298.582324][ T5874] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 298.593630][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 298.604949][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 298.620884][ T5874] usb 6-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice= 0.40 [ 298.630582][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.639182][ T5874] usb 6-1: Product: ÑŽ [ 298.643317][ T5874] usb 6-1: Manufacturer: á°Š [ 298.647885][ T5874] usb 6-1: SerialNumber: Ð [ 298.655552][ T9090] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 298.919262][ T9106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.931557][ T6430] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 298.948787][ T9106] netlink: 'syz.1.808': attribute type 10 has an invalid length. [ 299.081515][ T5874] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.099560][ T5874] usb 6-1: invalid MIDI in EP 0 [ 299.110661][ T6430] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 299.121055][ T6430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.152274][ T6430] usb 4-1: config 0 descriptor?? [ 299.166184][ T6430] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 299.193544][ T5874] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 299.205625][ T9114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.280015][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 299.568074][ T6430] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 299.677644][ T9090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.703864][ T29] audit: type=1400 audit(299.653:1091): avc: denied { bind } for pid=9118 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 299.729084][ T9090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.755940][ T5874] usb 5-1: USB disconnect, device number 34 [ 299.770266][ T9097] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 301.037109][ T6430] gspca_cpia1: usb_control_msg 02, error -110 [ 301.056568][ T6430] gspca_cpia1: usb_control_msg 05, error -71 [ 301.079302][ T29] audit: type=1400 audit(300.813:1092): avc: denied { connect } for pid=9124 comm="syz.1.812" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.696586][ T6430] cpia1 4-1:0.0: unexpected systemstate: 00 [ 301.714134][ T6430] usb 4-1: USB disconnect, device number 36 [ 302.114899][ T9] usb 6-1: USB disconnect, device number 12 [ 302.858354][ T29] audit: type=1400 audit(302.803:1093): avc: denied { create } for pid=9137 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 302.906148][ T9149] netlink: 280 bytes leftover after parsing attributes in process `syz.5.816'. [ 302.916415][ T29] audit: type=1400 audit(302.853:1094): avc: denied { write } for pid=9147 comm="syz.5.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.600827][ T5874] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 303.600899][ T24] Process accounting resumed [ 303.860518][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 303.890954][ T5874] usb 3-1: unable to get BOS descriptor or descriptor too short [ 303.903462][ T5874] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 303.940454][ T5874] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 303.974809][ T5874] usb 3-1: config 4 has no interface number 0 [ 304.009563][ T5874] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 304.052554][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.914305][ T9174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.024556][ T5874] uvcvideo 3-1:4.147: Found multiple Units with ID 6 [ 305.039130][ T5874] uvcvideo 3-1:4.147: Found UVC 0.02 device (04f2:b746) [ 305.057686][ T5874] uvcvideo 3-1:4.147: No streaming interface found for terminal 32774. [ 305.092957][ T9174] netlink: 'syz.3.822': attribute type 10 has an invalid length. [ 305.244491][ T5874] usb 3-1: USB disconnect, device number 43 [ 305.941208][ T29] audit: type=1400 audit(305.893:1095): avc: denied { load_policy } for pid=9182 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 305.941842][ T9185] SELinux: failed to load policy [ 305.992491][ T29] audit: type=1400 audit(305.923:1096): avc: denied { mount } for pid=9182 comm="syz.5.823" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 306.524552][ T29] audit: type=1400 audit(306.003:1097): avc: denied { shutdown } for pid=9189 comm="syz.3.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 306.648920][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 306.903267][ T29] audit: type=1400 audit(306.803:1098): avc: denied { unmount } for pid=7968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 306.980200][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.006876][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.029020][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.039876][ T29] audit: type=1326 audit(306.983:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.1.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3d9c799 code=0x7ffc0000 [ 307.047593][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 307.093808][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.101822][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.123703][ T29] audit: type=1326 audit(306.983:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.1.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3d9c799 code=0x7ffc0000 [ 307.140452][ T24] usb 3-1: config 0 descriptor?? [ 307.149156][ T9202] loop7: detected capacity change from 0 to 16383 [ 307.164418][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 307.373526][ T29] audit: type=1326 audit(307.023:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.1.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87d3d9c799 code=0x7ffc0000 [ 307.399529][ T29] audit: type=1400 audit(307.023:1102): avc: denied { create } for pid=9197 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 307.419976][ T29] audit: type=1326 audit(307.023:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.1.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3d9c799 code=0x7ffc0000 [ 307.443743][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 307.486441][ T29] audit: type=1326 audit(307.023:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.1.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3d9c799 code=0x7ffc0000 [ 307.923344][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.940530][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.993890][ T5925] IPVS: starting estimator thread 0... [ 308.010132][ T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 308.023956][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 308.034955][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.093621][ T9210] IPVS: using max 38 ests per chain, 91200 per kthread [ 308.114903][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 308.289983][ T9205] loop7: detected capacity change from 16383 to 0 [ 308.290297][ C0] I/O error, dev loop7, sector 12544 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 308.557711][ T9216] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 308.682218][ T9216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.830'. [ 308.712289][ T9216] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 309.081641][ T9224] overlayfs: conflicting lowerdir path [ 309.209662][ T9] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 309.447400][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 309.458973][ T9] stv0680 5-1:4.0: last error: 86, command = 0x0 [ 309.472616][ T5925] usb 3-1: USB disconnect, device number 44 [ 309.688782][ T9] usb 5-1: USB disconnect, device number 35 [ 309.846963][ T9229] input: syz0 as /devices/virtual/input/input16 [ 310.557725][ T9254] No such timeout policy "syz0" [ 311.449320][ T3118] block nbd0: Possible stuck request ffff888027cb0000: control (read@0,1024B). Runtime 180 seconds [ 311.465550][ T3118] block nbd0: Possible stuck request ffff888027cb0200: control (read@1024,1024B). Runtime 180 seconds [ 311.477147][ T3118] block nbd0: Possible stuck request ffff888027cb0400: control (read@2048,1024B). Runtime 180 seconds [ 311.488725][ T3118] block nbd0: Possible stuck request ffff888027cb0600: control (read@3072,1024B). Runtime 180 seconds [ 311.734235][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 311.734247][ T29] audit: type=1400 audit(311.683:1201): avc: denied { read } for pid=9256 comm="syz.5.842" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 311.932684][ T9258] binder: 9246:9258 ioctl c0306201 200000000c80 returned -14 [ 311.947126][ T29] audit: type=1400 audit(311.683:1202): avc: denied { open } for pid=9256 comm="syz.5.842" path="/dev/sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 313.579317][ T29] audit: type=1400 audit(313.503:1203): avc: denied { write } for pid=9286 comm="syz.1.849" name="event3" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 313.785347][ T29] audit: type=1400 audit(313.503:1204): avc: denied { open } for pid=9286 comm="syz.1.849" path="/dev/input/event3" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 313.932050][ T29] audit: type=1400 audit(313.563:1205): avc: denied { read write } for pid=9286 comm="syz.1.849" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.037997][ T29] audit: type=1400 audit(313.563:1206): avc: denied { open } for pid=9286 comm="syz.1.849" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.069368][ T29] audit: type=1400 audit(313.563:1207): avc: denied { ioctl } for pid=9286 comm="syz.1.849" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.113172][ T29] audit: type=1400 audit(313.563:1208): avc: denied { execmem } for pid=9286 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 314.225755][ T29] audit: type=1400 audit(313.643:1209): avc: denied { create } for pid=9286 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 314.423787][ T29] audit: type=1400 audit(313.643:1210): avc: denied { setopt } for pid=9286 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 315.249144][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 315.414935][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 315.429359][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.469708][ T9] usb 5-1: Product: syz [ 315.484037][ T9] usb 5-1: Manufacturer: syz [ 315.502500][ T9] usb 5-1: SerialNumber: syz [ 315.517787][ T9] usb 5-1: config 0 descriptor?? [ 315.534578][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 036 [ 315.836865][ T9313] xt_hashlimit: size too large, truncated to 1048576 [ 315.930705][ T5818] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 315.930714][ T5815] Bluetooth: hci6: command 0x1003 tx timeout [ 316.141024][ T9] (null): failure reading functionality [ 316.150685][ T9] i2c i2c-1: failure reading functionality [ 316.168295][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 316.185553][ T9] usb 5-1: USB disconnect, device number 36 [ 317.130484][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.136857][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.254514][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 317.254531][ T29] audit: type=1400 audit(317.203:1266): avc: denied { create } for pid=9333 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 317.411038][ T9336] fuse: Bad value for 'fd' [ 317.438767][ T9337] nft_compat: unsupported protocol 5 [ 317.439844][ T29] audit: type=1400 audit(317.363:1267): avc: denied { mounton } for pid=9331 comm="syz.1.862" path="/174/file0" dev="tmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 317.603214][ T9345] netlink: 'syz.3.864': attribute type 10 has an invalid length. [ 317.611523][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.864'. [ 317.790834][ T9345] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 317.851197][ T29] audit: type=1400 audit(317.373:1268): avc: denied { create } for pid=9331 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 317.992669][ T29] audit: type=1400 audit(317.383:1269): avc: denied { write } for pid=9333 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 318.139514][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 318.139904][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 319.226616][ T9360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 319.347507][ T29] audit: type=1400 audit(319.193:1270): avc: denied { read } for pid=9350 comm="syz.4.867" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 319.406564][ T29] audit: type=1400 audit(319.193:1271): avc: denied { open } for pid=9350 comm="syz.4.867" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 319.453944][ T5874] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 319.651127][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 319.692236][ T5874] usb 3-1: config index 0 descriptor too short (expected 526, got 367) [ 319.701084][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.743320][ T5874] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 319.760168][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.808574][ T5874] usb 3-1: Product: syz [ 319.819499][ T5874] usb 3-1: Manufacturer: syz [ 319.842352][ T5874] usb 3-1: SerialNumber: syz [ 319.882277][ T5874] usb 3-1: config 0 descriptor?? [ 320.053190][ T29] audit: type=1400 audit(320.003:1272): avc: denied { unlink } for pid=5803 comm="syz-executor" name="file0" dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 320.114468][ T5874] usb 3-1: USB disconnect, device number 45 [ 320.611303][ T29] audit: type=1400 audit(320.563:1273): avc: denied { read } for pid=9368 comm="syz.1.871" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 320.846752][ T29] audit: type=1400 audit(320.563:1274): avc: denied { open } for pid=9368 comm="syz.1.871" path="net:[4026532806]" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 320.914391][ T29] audit: type=1400 audit(320.603:1275): avc: denied { setopt } for pid=9368 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.526715][ T9389] sp0: Synchronizing with TNC [ 321.629063][ T9389] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 322.355314][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 322.365194][ T29] audit: type=1400 audit(321.513:1281): avc: denied { name_bind } for pid=9381 comm="syz.2.875" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 323.494211][ T29] audit: type=1400 audit(321.513:1282): avc: denied { node_bind } for pid=9381 comm="syz.2.875" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 323.562624][ T9373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.581021][ T29] audit: type=1400 audit(323.343:1283): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 323.722942][ T9395] netlink: 'syz.4.874': attribute type 10 has an invalid length. [ 323.732688][ T9395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.874'. [ 323.743169][ T9395] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 323.756105][ T9395] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 323.890923][ T29] audit: type=1400 audit(323.413:1284): avc: denied { read } for pid=9379 comm="syz.5.865" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 324.017657][ T29] audit: type=1400 audit(323.413:1285): avc: denied { open } for pid=9379 comm="syz.5.865" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 324.775880][ T9403] netlink: 'syz.1.877': attribute type 10 has an invalid length. [ 324.785139][ T9403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.877'. [ 324.797732][ T9403] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 325.306290][ T9410] overlayfs: conflicting lowerdir path [ 325.323725][ T29] audit: type=1400 audit(323.433:1286): avc: denied { write } for pid=9379 comm="syz.5.865" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 325.377292][ T29] audit: type=1400 audit(323.483:1287): avc: denied { ioctl } for pid=9379 comm="syz.5.865" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 325.402366][ T29] audit: type=1400 audit(325.013:1288): avc: denied { getopt } for pid=9407 comm="syz.4.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.426185][ T29] audit: type=1400 audit(325.033:1289): avc: denied { create } for pid=9407 comm="syz.4.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 325.544294][ T29] audit: type=1400 audit(325.493:1290): avc: denied { shutdown } for pid=9415 comm="syz.4.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.770976][ T9] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 326.028403][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.079132][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.136147][ T9] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 326.169401][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.182662][ T9] usb 2-1: config 0 descriptor?? [ 326.239680][ T5877] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 326.427417][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 326.696888][ T9] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 326.719578][ T9] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 326.735216][ T9] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 326.752995][ T9] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 326.763251][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.774314][ T9] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 326.774341][ T9] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 326.774361][ T9] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 326.774382][ T9] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 326.774402][ T9] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 326.774421][ T9] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 326.879978][ T9] saitek 0003:06A3:0621.000A: hidraw0: USB HID v0.fe Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 326.904135][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.914154][ T5877] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 326.923451][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.929552][ T9414] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 326.951078][ T9] usb 2-1: USB disconnect, device number 32 [ 326.966048][ T5877] usb 5-1: config 0 descriptor?? [ 327.047047][ T5877] hub 5-1:0.0: USB hub found [ 327.409190][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 327.440877][ T5877] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 327.455266][ T5877] usbhid 5-1:0.0: can't add hid device: -71 [ 327.461378][ T5877] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 327.493872][ T5877] usb 5-1: USB disconnect, device number 37 [ 327.549238][ T9] usb 4-1: device descriptor read/64, error -71 [ 328.020412][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 328.058834][ T5877] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 328.143975][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 328.143986][ T29] audit: type=1400 audit(328.093:1306): avc: denied { write } for pid=9456 comm="syz.1.894" name="video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 328.173714][ T9] usb 4-1: device descriptor read/64, error -71 [ 328.289616][ T9] usb usb4-port1: attempt power cycle [ 328.329149][ T5877] usb 5-1: device descriptor read/64, error -71 [ 328.466315][ T9464] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 328.499149][ T9464] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 328.808826][ T42] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 328.817549][ T5877] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 329.337395][ T29] audit: type=1400 audit(328.393:1307): avc: denied { create } for pid=9456 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 329.362840][ T29] audit: type=1400 audit(328.393:1308): avc: denied { write } for pid=9456 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 329.408739][ T5811] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 329.548871][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 329.557586][ T42] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 329.567107][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 329.572391][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.586092][ T42] usb 6-1: Product: syz [ 329.592106][ T42] usb 6-1: Manufacturer: syz [ 329.597071][ T42] usb 6-1: SerialNumber: syz [ 329.602077][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.612437][ T42] usb 6-1: config 0 descriptor?? [ 329.619353][ T5811] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 329.641286][ T5811] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 329.650678][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.659058][ T5811] usb 3-1: Product: syz [ 329.663274][ T5811] usb 3-1: Manufacturer: syz [ 329.667881][ T5811] usb 3-1: SerialNumber: syz [ 329.789078][ T5877] usb usb5-port1: attempt power cycle [ 329.822030][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 329.829447][ T42] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 013 [ 329.830271][ T29] audit: type=1400 audit(328.543:1309): avc: denied { create } for pid=9456 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 329.860505][ T29] audit: type=1400 audit(328.543:1310): avc: denied { read } for pid=9456 comm="syz.1.894" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 329.885499][ T9] usb 4-1: device descriptor read/8, error -71 [ 329.888358][ T5811] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 329.900310][ T29] audit: type=1400 audit(328.543:1311): avc: denied { open } for pid=9456 comm="syz.1.894" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 329.933023][ T5811] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 330.129251][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 330.129262][ T5877] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 330.149096][ T5877] usb 5-1: Invalid ep0 maxpacket: 64 [ 330.175178][ T9] usb 4-1: device descriptor read/8, error -71 [ 330.330659][ T5877] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 330.610575][ T29] audit: type=1400 audit(330.363:1312): avc: denied { sqpoll } for pid=9458 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 330.670796][ T5877] usb 5-1: Invalid ep0 maxpacket: 64 [ 330.676568][ T5877] usb usb5-port1: unable to enumerate USB device [ 330.702758][ T5811] usb 3-1: USB disconnect, device number 46 [ 330.740812][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.914236][ T9] usb usb4-port1: unable to enumerate USB device [ 331.233750][ T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 331.396360][ T5811] usb 6-1: USB disconnect, device number 13 [ 331.410621][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.423084][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 331.434554][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.456218][ T29] audit: type=1400 audit(331.403:1313): avc: denied { create } for pid=9483 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 331.489540][ T9] usb 4-1: Product: syz [ 331.493720][ T9] usb 4-1: Manufacturer: syz [ 331.498490][ T9] usb 4-1: SerialNumber: syz [ 331.908414][ T9] usb 4-1: config 0 descriptor?? [ 331.925374][ T9] asix 4-1:0.0: probe with driver asix failed with error -22 [ 331.957070][ T29] audit: type=1400 audit(331.433:1314): avc: denied { listen } for pid=9483 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 332.009130][ T9493] random: crng reseeded on system resumption [ 332.117335][ T29] audit: type=1400 audit(331.433:1315): avc: denied { accept } for pid=9483 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 332.759148][ T42] usb 4-1: USB disconnect, device number 41 [ 334.965544][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 334.965560][ T29] audit: type=1400 audit(334.903:1321): avc: denied { map } for pid=9519 comm="syz.3.911" path="socket:[26637]" dev="sockfs" ino=26637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 335.163561][ T29] audit: type=1400 audit(334.913:1322): avc: denied { read write } for pid=9521 comm="syz.1.912" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.671231][ T29] audit: type=1400 audit(334.913:1323): avc: denied { open } for pid=9521 comm="syz.1.912" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.835234][ T29] audit: type=1400 audit(334.913:1324): avc: denied { ioctl } for pid=9521 comm="syz.1.912" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.849225][ T5874] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 335.923406][ T29] audit: type=1400 audit(335.093:1325): avc: denied { read } for pid=9521 comm="syz.1.912" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 336.019599][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 336.050882][ T5874] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 336.058401][ T29] audit: type=1400 audit(335.093:1326): avc: denied { open } for pid=9521 comm="syz.1.912" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 336.068701][ T5874] usb 2-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 336.114427][ T5874] usb 2-1: config 0 has no interface number 0 [ 336.170800][ T5874] usb 2-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid maxpacket 37993, setting to 1024 [ 336.183814][ T5874] usb 2-1: config 0 interface 74 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 336.227517][ T5874] usb 2-1: config 0 interface 74 has no altsetting 0 [ 336.240415][ T5874] usb 2-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 336.247726][ T29] audit: type=1400 audit(335.093:1327): avc: denied { ioctl } for pid=9521 comm="syz.1.912" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 336.252428][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.328734][ T5877] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 336.334784][ T5874] usb 2-1: Product: syz [ 336.342979][ T5874] usb 2-1: Manufacturer: syz [ 336.356765][ T5874] usb 2-1: SerialNumber: syz [ 336.366728][ T29] audit: type=1400 audit(335.143:1328): avc: denied { create } for pid=9519 comm="syz.3.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 336.416029][ T29] audit: type=1400 audit(336.083:1329): avc: denied { watch_reads } for pid=9533 comm="syz.5.915" path="/70" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 336.416126][ T5874] usb 2-1: config 0 descriptor?? [ 336.468713][ T5877] usb 5-1: device descriptor read/64, error -71 [ 336.497458][ T29] audit: type=1400 audit(336.263:1330): avc: denied { create } for pid=9535 comm="syz.5.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 336.520100][ T9523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 336.530627][ T5874] em28xx 2-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74) [ 336.550951][ T5874] em28xx 2-1:0.74: Video interface 74 found: bulk [ 336.718711][ T5877] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 336.789877][ T5874] em28xx 2-1:0.74: unknown em28xx chip ID (0) [ 336.868726][ T5877] usb 5-1: device descriptor read/64, error -71 [ 336.874073][ T5874] em28xx 2-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 336.904194][ T5874] em28xx 2-1:0.74: board has no eeprom [ 336.931416][ T5874] em28xx 2-1:0.74: writing to i2c device at 0xb8 failed (error=-5) [ 336.951502][ T5874] em28xx 2-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 336.970189][ T5874] em28xx 2-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 336.978171][ T5874] em28xx 2-1:0.74: couldn't read from i2c device 0xba: error -5 [ 336.988982][ T5877] usb usb5-port1: attempt power cycle [ 336.997381][ T5874] em28xx 2-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 337.016072][ T5874] em28xx 2-1:0.74: couldn't read from i2c device 0x90: error -5 [ 337.051978][ T5874] em28xx 2-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 337.083149][ T5874] em28xx 2-1:0.74: couldn't read from i2c device 0x42: error -5 [ 337.092504][ T5874] em28xx 2-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 337.102697][ T5874] em28xx 2-1:0.74: couldn't read from i2c device 0x60: error -5 [ 337.111674][ T5874] em28xx 2-1:0.74: No sensor detected [ 337.179277][ T5874] em28xx 2-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 337.200504][ T5874] em28xx 2-1:0.74: Currently, V4L2 is not supported on this model [ 337.221139][ T9] em28xx 2-1:0.74: Registering snapshot button... [ 337.296563][ T9557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.920'. [ 337.325484][ T5874] usb 2-1: USB disconnect, device number 33 [ 337.341124][ T5877] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 337.342735][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.74/input/input17 [ 337.379384][ T5877] usb 5-1: device descriptor read/8, error -71 [ 337.380933][ T5874] em28xx 2-1:0.74: Disconnecting em28xx [ 337.425045][ T9] em28xx 2-1:0.74: Remote control support is not available for this card. [ 337.441182][ T5874] em28xx 2-1:0.74: Closing input extension [ 337.450665][ T5874] em28xx 2-1:0.74: Deregistering snapshot button [ 337.615838][ T5874] em28xx 2-1:0.74: Freeing device [ 337.669048][ T5877] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 337.799226][ T5877] usb 5-1: device descriptor read/8, error -71 [ 337.989522][ T5874] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 338.228557][ T5877] usb usb5-port1: unable to enumerate USB device [ 338.349325][ T5874] usb 2-1: device descriptor read/64, error -71 [ 338.603275][ T5874] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 339.299716][ T9581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.628887][ T5874] usb 2-1: device descriptor read/64, error -71 [ 339.739575][ T5874] usb usb2-port1: attempt power cycle [ 339.788768][ T42] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 339.818803][ T5877] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 340.459498][ T5874] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 340.491125][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 340.501322][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 340.511468][ T5877] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 340.520952][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.532400][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 340.540322][ T5877] usb 4-1: config 0 has no interface number 0 [ 340.541062][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 340.541074][ T29] audit: type=1400 audit(340.493:1349): avc: denied { create } for pid=9603 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.547279][ T42] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 340.555393][ T29] audit: type=1400 audit(340.513:1350): avc: denied { read } for pid=9603 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.574150][ T42] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 340.676404][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.689065][ T42] usb 3-1: Product: syz [ 340.693285][ T5874] usb 2-1: device not accepting address 36, error -71 [ 340.705068][ T42] usb 3-1: Manufacturer: syz [ 340.710738][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 340.719823][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.727802][ T5877] usb 4-1: Product: syz [ 340.737992][ T42] usb 3-1: SerialNumber: syz [ 340.742701][ T5877] usb 4-1: Manufacturer: syz [ 340.747288][ T5877] usb 4-1: SerialNumber: syz [ 340.773537][ T5877] usb 4-1: config 0 descriptor?? [ 340.792656][ T5877] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 340.802198][ T5877] uvcvideo 4-1:0.105: No valid video chain found. [ 340.962093][ T42] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 340.979397][ T42] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 341.003533][ T9584] fuse: Bad value for 'rootmode' [ 341.010703][ T29] audit: type=1400 audit(340.963:1351): avc: denied { nlmsg_write } for pid=9583 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 341.033381][ T6430] usb 4-1: USB disconnect, device number 42 [ 341.047373][ T5874] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 341.055819][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 341.077471][ T29] audit: type=1400 audit(341.013:1352): avc: denied { create } for pid=9612 comm="syz.5.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 341.112962][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 341.121113][ T29] audit: type=1400 audit(341.013:1353): avc: denied { execute } for pid=9612 comm="syz.5.935" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 341.146008][ T5874] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 341.154949][ T5874] usb 2-1: config 0 has no interface number 0 [ 341.161713][ T5874] usb 2-1: config 0 interface 184 has no altsetting 0 [ 341.170835][ T5874] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 341.180474][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.188463][ T5874] usb 2-1: Product: syz [ 341.199766][ T9] usb 5-1: device descriptor read/64, error -71 [ 341.208343][ T5874] usb 2-1: Manufacturer: syz [ 341.217295][ T5874] usb 2-1: SerialNumber: syz [ 341.235307][ T5874] usb 2-1: config 0 descriptor?? [ 341.318081][ T9618] overlayfs: conflicting lowerdir path [ 341.479254][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 341.492547][ T42] usb 3-1: USB disconnect, device number 47 [ 341.618183][ T9] usb 5-1: device descriptor read/64, error -71 [ 341.650787][ T5874] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 341.666902][ T5874] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 341.669949][ T29] audit: type=1400 audit(341.623:1354): avc: denied { append } for pid=9620 comm="syz.3.939" name="dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.680001][ T5874] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 341.714814][ T3118] block nbd0: Possible stuck request ffff888027cb0000: control (read@0,1024B). Runtime 210 seconds [ 341.726631][ T3118] block nbd0: Possible stuck request ffff888027cb0200: control (read@1024,1024B). Runtime 210 seconds [ 341.738280][ T3118] block nbd0: Possible stuck request ffff888027cb0400: control (read@2048,1024B). Runtime 210 seconds [ 341.750196][ T3118] block nbd0: Possible stuck request ffff888027cb0600: control (read@3072,1024B). Runtime 210 seconds [ 341.762560][ T9] usb usb5-port1: attempt power cycle [ 341.793107][ T5874] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 341.857832][ T9609] netlink: 'syz.1.936': attribute type 6 has an invalid length. [ 342.088701][ T29] audit: type=1400 audit(341.873:1355): avc: denied { name_bind } for pid=9608 comm="syz.1.936" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 342.196994][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 342.250207][ T9] usb 5-1: device descriptor read/8, error -71 [ 342.278814][ T42] usb 2-1: USB disconnect, device number 37 [ 342.427400][ T29] audit: type=1400 audit(342.163:1356): avc: denied { mount } for pid=9608 comm="syz.1.936" name="/" dev="autofs" ino=26881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 342.469265][ T5877] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 342.511397][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 342.543131][ T9] usb 5-1: device descriptor read/8, error -71 [ 342.659591][ T9] usb usb5-port1: unable to enumerate USB device [ 342.689298][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 342.715835][ T5877] usb 4-1: config 0 has no interfaces? [ 342.760340][ T5877] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.783167][ T5877] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.805513][ T5877] usb 4-1: Manufacturer: syz [ 342.856314][ T5877] usb 4-1: config 0 descriptor?? [ 343.306785][ T29] audit: type=1400 audit(343.113:1357): avc: denied { bind } for pid=9633 comm="syz.5.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 343.915281][ T9643] xt_HMARK: proto mask must be zero with L3 mode [ 344.438678][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 344.891719][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 344.942748][ T5874] usb 4-1: USB disconnect, device number 43 [ 345.284635][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.335236][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 345.360511][ T29] audit: type=1400 audit(345.313:1358): avc: denied { create } for pid=9654 comm="syz.1.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 345.395437][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.466572][ T9] usb 3-1: config 0 descriptor?? [ 345.492815][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 345.616507][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 345.616519][ T29] audit: type=1400 audit(345.563:1375): avc: denied { prog_load } for pid=9666 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 345.648799][ T29] audit: type=1400 audit(345.563:1376): avc: denied { bpf } for pid=9666 comm="syz.4.950" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 345.789164][ T29] audit: type=1400 audit(345.693:1377): avc: denied { allowed } for pid=9666 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 346.052709][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 346.064845][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 346.075274][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 346.098701][ T29] audit: type=1400 audit(345.703:1378): avc: denied { create } for pid=9666 comm="syz.4.950" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 346.148711][ T29] audit: type=1400 audit(345.703:1379): avc: denied { map } for pid=9666 comm="syz.4.950" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 346.165330][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 346.317066][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 346.324161][ T29] audit: type=1400 audit(345.703:1380): avc: denied { read write } for pid=9666 comm="syz.4.950" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 346.412728][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 346.436827][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 346.450735][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 346.461016][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 346.466528][ T29] audit: type=1400 audit(345.953:1381): avc: denied { read } for pid=9666 comm="syz.4.950" dev="nsfs" ino=4026533247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 346.506239][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 346.525588][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 346.560699][ T29] audit: type=1400 audit(345.953:1382): avc: denied { open } for pid=9666 comm="syz.4.950" path="net:[4026533247]" dev="nsfs" ino=4026533247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 347.012966][ T29] audit: type=1400 audit(345.963:1383): avc: denied { create } for pid=9666 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.072244][ T29] audit: type=1400 audit(346.113:1384): avc: denied { create } for pid=9637 comm="syz.2.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.214871][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 347.222300][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 347.230416][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 347.277579][ T9] pwc: Registered as video103. [ 347.300918][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 347.354796][ T9] usb 3-1: USB disconnect, device number 48 [ 347.449963][ T5818] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 347.665818][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.710500][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.516839][ T9707] netlink: 'syz.2.957': attribute type 10 has an invalid length. [ 348.525089][ T9707] netlink: 40 bytes leftover after parsing attributes in process `syz.2.957'. [ 348.539374][ T9707] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 348.566998][ T9707] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 348.892249][ T9717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.917968][ T9717] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 350.636884][ T9738] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 350.657854][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 350.657868][ T29] audit: type=1400 audit(350.603:1438): avc: denied { allowed } for pid=9737 comm="syz.1.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 350.705867][ T9738] netlink: 56 bytes leftover after parsing attributes in process `syz.2.966'. [ 350.773409][ T29] audit: type=1400 audit(350.603:1439): avc: denied { create } for pid=9737 comm="syz.1.967" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 350.797577][ T29] audit: type=1400 audit(350.613:1440): avc: denied { map_create } for pid=9740 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 350.816716][ T29] audit: type=1400 audit(350.633:1441): avc: denied { bpf } for pid=9740 comm="syz.3.965" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.105468][ T9746] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 351.190515][ T9] IPVS: starting estimator thread 0... [ 351.278745][ T9745] IPVS: using max 47 ests per chain, 112800 per kthread [ 351.378168][ T29] audit: type=1400 audit(350.633:1442): avc: denied { map_read map_write } for pid=9740 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.599888][ T9749] usb usb7: usbfs: process 9749 (syz.3.968) did not claim interface 0 before use [ 351.611300][ T29] audit: type=1400 audit(350.653:1443): avc: denied { prog_load } for pid=9740 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.725046][ T29] audit: type=1400 audit(350.653:1444): avc: denied { perfmon } for pid=9740 comm="syz.3.965" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.881013][ T9752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.574021][ T5818] Bluetooth: hci6: command 0x1003 tx timeout [ 352.584142][ T5815] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 352.699488][ T29] audit: type=1400 audit(350.653:1445): avc: denied { prog_run } for pid=9740 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.809383][ T29] audit: type=1400 audit(350.703:1446): avc: denied { read write } for pid=9734 comm="syz.2.966" name="vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 352.846732][ T29] audit: type=1400 audit(350.703:1447): avc: denied { open } for pid=9734 comm="syz.2.966" path="/dev/vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 353.063941][ T9776] netlink: 'syz.1.974': attribute type 10 has an invalid length. [ 353.200778][ T9776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.974'. [ 353.217751][ T9776] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 353.269274][ T5874] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 353.439267][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 353.444899][ T5874] usb 4-1: too many configurations: 121, using maximum allowed: 8 [ 353.454427][ T5874] usb 4-1: config index 0 descriptor too short (expected 51167, got 27) [ 353.463371][ T5874] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 353.496650][ T5874] usb 4-1: can't read configurations, error -22 [ 353.559182][ T9783] netlink: 'syz.5.977': attribute type 1 has an invalid length. [ 353.679915][ T5874] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 353.827162][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.5.977'. [ 353.880480][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 353.886028][ T5874] usb 4-1: too many configurations: 121, using maximum allowed: 8 [ 353.970602][ T9793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.284653][ T5874] usb 4-1: config index 0 descriptor too short (expected 51167, got 27) [ 354.298161][ T5874] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 354.332276][ T5874] usb 4-1: can't read configurations, error -22 [ 354.340406][ T5874] usb usb4-port1: attempt power cycle [ 354.477515][ T9800] 9p: Bad value for 'timeout' [ 354.809310][ T5874] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 354.830316][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 354.856819][ T5874] usb 4-1: too many configurations: 121, using maximum allowed: 8 [ 354.871869][ T5874] usb 4-1: config index 0 descriptor too short (expected 51167, got 27) [ 354.875459][ T9793] netlink: 'syz.1.979': attribute type 10 has an invalid length. [ 354.953048][ T5874] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 354.976827][ T5874] usb 4-1: can't read configurations, error -22 [ 355.128761][ T5874] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 355.151116][ T9803] 9p: Bad value for 'rfdno' [ 355.197391][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 355.214382][ T5874] usb 4-1: too many configurations: 121, using maximum allowed: 8 [ 355.260557][ T5874] usb 4-1: config index 0 descriptor too short (expected 51167, got 27) [ 355.286427][ T5874] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 355.363211][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.984'. [ 356.210339][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 356.210360][ T29] audit: type=1400 audit(356.113:1513): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.294552][ T5874] usb 4-1: can't read configurations, error -22 [ 356.302501][ T5874] usb usb4-port1: unable to enumerate USB device [ 356.378133][ T29] audit: type=1400 audit(356.113:1514): avc: denied { open } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.469805][ T29] audit: type=1400 audit(356.123:1515): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.496607][ T9819] fuse: Unknown parameter './file0' [ 356.504858][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 356.694620][ T9833] netlink: 64 bytes leftover after parsing attributes in process `syz.4.987'. [ 356.811723][ T29] audit: type=1400 audit(356.303:1516): avc: denied { create } for pid=9817 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 357.302195][ T29] audit: type=1400 audit(356.303:1517): avc: denied { module_request } for pid=9817 comm="syz.3.986" kmod="net-pf-10-proto-132-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 357.376632][ T5818] Bluetooth: hci6: command 0x1003 tx timeout [ 357.383643][ T5815] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 357.403404][ T29] audit: type=1400 audit(356.323:1518): avc: denied { read } for pid=9824 comm="syz.4.987" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 357.425562][ T29] audit: type=1400 audit(356.323:1519): avc: denied { open } for pid=9824 comm="syz.4.987" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 357.459547][ T29] audit: type=1400 audit(356.363:1520): avc: denied { ioctl } for pid=9824 comm="syz.4.987" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 357.491777][ T29] audit: type=1400 audit(356.363:1521): avc: denied { create } for pid=9824 comm="syz.4.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 357.565207][ T29] audit: type=1400 audit(356.383:1522): avc: denied { create } for pid=9818 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 357.920187][ T9852] 9p: Bad value for 'timeout' [ 358.368865][ T5811] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 358.443523][ T9860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.519708][ T5811] usb 6-1: Using ep0 maxpacket: 32 [ 358.583067][ T42] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 358.595194][ T5811] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 358.609676][ T5811] usb 6-1: config 0 has no interface number 0 [ 358.620280][ T5811] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 358.621057][ T9860] bond_slave_0: entered promiscuous mode [ 358.629455][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.635301][ T9860] bond_slave_1: entered promiscuous mode [ 358.664439][ T5811] usb 6-1: Product: syz [ 358.678537][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.691000][ T5811] usb 6-1: Manufacturer: syz [ 358.698463][ T5811] usb 6-1: SerialNumber: syz [ 358.707729][ T9860] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 358.723588][ T5811] usb 6-1: config 0 descriptor?? [ 358.790256][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 358.807997][ T42] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 358.832883][ T42] usb 2-1: config 254 has no interface number 0 [ 358.863965][ T42] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 358.949347][ T42] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.031041][ T42] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 359.063757][ T42] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 359.091863][ T42] usb 2-1: config 254 interface 235 has no altsetting 0 [ 359.146797][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 359.157491][ T5811] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 359.177423][ T5811] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 359.208736][ T42] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 359.217802][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.230223][ T42] usb 2-1: Product: syz [ 359.234442][ T42] usb 2-1: Manufacturer: syz [ 359.252340][ T42] usb 2-1: SerialNumber: syz [ 359.275540][ T9858] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 359.328684][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 359.346799][ T24] usb 3-1: config 0 has no interfaces? [ 359.355482][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 359.439370][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 359.449208][ T24] usb 3-1: Manufacturer: syz [ 359.457808][ T24] usb 3-1: config 0 descriptor?? [ 359.487314][ T9854] xt_HMARK: proto mask must be zero with L3 mode [ 359.495121][ T42] usbtest 2-1:254.235: couldn't get endpoints, -71 [ 359.510195][ T42] usbtest 2-1:254.235: probe with driver usbtest failed with error -71 [ 359.544955][ T42] usb 2-1: USB disconnect, device number 39 [ 359.559520][ T5925] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 359.715305][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.729320][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.739937][ T5925] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 359.755065][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.771992][ T5925] usb 4-1: config 0 descriptor?? [ 360.185084][ T9889] random: crng reseeded on system resumption [ 360.211560][ T5925] hid_parser_main: 28 callbacks suppressed [ 360.211580][ T5925] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 360.234556][ T5925] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 360.243336][ T5925] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 360.254934][ T5925] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 360.262742][ T5925] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 360.270098][ T5925] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 360.277155][ T5925] isku 0003:1E7D:319C.000B: item fetching failed at offset 6/7 [ 360.287025][ T5925] isku 0003:1E7D:319C.000B: parse failed [ 360.293442][ T5925] isku 0003:1E7D:319C.000B: probe with driver isku failed with error -22 [ 360.402407][ T5925] usb 4-1: USB disconnect, device number 48 [ 361.518991][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 361.519007][ T29] audit: type=1400 audit(361.113:1601): avc: denied { mounton } for pid=9891 comm="syz.3.1004" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.552413][ T29] audit: type=1400 audit(361.123:1602): avc: denied { mount } for pid=9891 comm="syz.3.1004" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 361.575533][ T29] audit: type=1400 audit(361.133:1603): avc: denied { map_create } for pid=9891 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 361.595140][ T29] audit: type=1400 audit(361.213:1604): avc: denied { write } for pid=9891 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 361.639549][ T24] usb 3-1: USB disconnect, device number 49 [ 361.653020][ T29] audit: type=1400 audit(361.213:1605): avc: denied { nlmsg_write } for pid=9891 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 361.792327][ T9850] netlink: 'syz.5.991': attribute type 1 has an invalid length. [ 361.856094][ T29] audit: type=1400 audit(361.213:1606): avc: denied { write } for pid=9891 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 361.876314][ T29] audit: type=1400 audit(361.213:1607): avc: denied { connect } for pid=9891 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 361.897014][ T29] audit: type=1400 audit(361.223:1608): avc: denied { name_connect } for pid=9891 comm="syz.3.1004" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 361.981686][ T29] audit: type=1400 audit(361.633:1609): avc: denied { read } for pid=9897 comm="syz.2.1005" dev="nsfs" ino=4026533113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 362.240768][ T5811] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 362.258158][ T5818] Bluetooth: hci6: command 0x1003 tx timeout [ 362.268946][ T5815] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 362.303925][ T5811] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 362.312495][ T29] audit: type=1400 audit(361.643:1610): avc: denied { open } for pid=9897 comm="syz.2.1005" path="net:[4026533113]" dev="nsfs" ino=4026533113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 362.347782][ T5811] usb 6-1: USB disconnect, device number 14 [ 362.622028][ T9907] netlink: 'syz.4.1007': attribute type 10 has an invalid length. [ 362.630255][ T9907] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1007'. [ 362.639891][ T9907] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 362.824112][ T9914] openvswitch: netlink: Unknown key attributes 1 [ 362.922005][ T9921] netlink: 'syz.5.1012': attribute type 1 has an invalid length. [ 362.954926][ T9921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 363.459384][ T5925] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 363.711875][ T5925] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 363.721863][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.724938][ T9904] misc userio: The device must be registered before sending interrupts [ 363.749311][ T5925] usb 5-1: Product: syz [ 363.753636][ T5925] usb 5-1: Manufacturer: syz [ 363.763740][ T5925] usb 5-1: SerialNumber: syz [ 363.783454][ T5925] usb 5-1: config 0 descriptor?? [ 363.803122][ T5925] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 050 [ 364.090590][ T30] INFO: task syz.0.455:7726 blocked for more than 143 seconds. [ 364.098576][ T30] Tainted: G L syzkaller #0 [ 364.105446][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.114402][ T30] task:syz.0.455 state:D stack:29000 pid:7726 tgid:7725 ppid:5816 task_flags:0x400140 flags:0x00080002 [ 364.159863][ T30] Call Trace: [ 364.167249][ T30] [ 364.176896][ T30] __schedule+0xfee/0x6120 [ 364.326825][ T9940] 9p: Bad value for 'timeout' [ 364.642728][ T5925] i2c i2c-1: failure reading functionality [ 364.672992][ T5925] i2c i2c-1: connected i2c-tiny-usb device [ 364.691033][ T30] ? __lock_acquire+0x4a5/0x2630 [ 364.698327][ T30] ? __pfx___schedule+0x10/0x10 [ 364.704602][ T5925] usb 5-1: USB disconnect, device number 50 [ 364.716449][ T30] ? find_held_lock+0x2b/0x80 [ 364.733270][ T30] ? schedule+0x2bf/0x390 [ 364.748305][ T30] schedule+0xdd/0x390 [ 364.768120][ T30] schedule_preempt_disabled+0x13/0x30 [ 364.774195][ T30] __mutex_lock+0xc9a/0x1b90 [ 364.784266][ T30] ? bdev_open+0xa2/0xe40 [ 364.794371][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 364.804463][ T30] ? bd_prepare_to_claim+0x1e0/0x280 [ 364.814574][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 364.832745][ T30] ? file_init_path+0x48e/0x670 [ 364.849990][ T30] ? bdev_open+0xa2/0xe40 [ 364.854481][ T30] bdev_open+0xa2/0xe40 [ 364.859406][ T30] ? iput+0x3a/0x40 [ 364.868139][ T30] bdev_file_open_by_dev+0x179/0x210 [ 364.875877][ T30] setup_bdev_super+0x385/0x730 [ 364.884613][ T30] get_tree_bdev_flags+0x363/0x620 [ 364.894895][ T30] ? __pfx_qnx6_fill_super+0x10/0x10 [ 364.901351][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 364.907021][ T30] ? cap_capable+0x107/0x460 [ 364.912060][ T30] ? bpf_lsm_capable+0x9/0x10 [ 364.916747][ T30] ? security_capable+0x80/0x260 [ 364.922160][ T30] vfs_get_tree+0x92/0x320 [ 364.926585][ T30] path_mount+0x7d0/0x23d0 [ 364.931518][ T30] ? __pfx_path_mount+0x10/0x10 [ 364.936377][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 364.942163][ T30] ? putname+0xb1/0x110 [ 364.946307][ T30] ? kmem_cache_free+0x124/0x6a0 [ 364.951713][ T30] ? __x64_sys_mount+0x293/0x310 [ 364.956675][ T30] __x64_sys_mount+0x293/0x310 [ 364.961961][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 364.967755][ T30] do_syscall_64+0x106/0xf80 [ 364.972941][ T30] ? clear_bhb_loop+0x40/0x90 [ 364.977624][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.983956][ T30] RIP: 0033:0x7fba07d9c799 [ 364.988354][ T30] RSP: 002b:00007fba05ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 364.997309][ T30] RAX: ffffffffffffffda RBX: 00007fba08015fa0 RCX: 00007fba07d9c799 [ 365.006073][ T30] RDX: 0000200000004200 RSI: 0000200000000040 RDI: 0000200000000000 [ 365.014071][ T30] RBP: 00007fba07e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 365.022052][ T30] R10: 0000000000a18410 R11: 0000000000000246 R12: 0000000000000000 [ 365.030439][ T30] R13: 00007fba08016038 R14: 00007fba08015fa0 R15: 00007ffe24e6b708 [ 365.038419][ T30] [ 365.090495][ T30] [ 365.090495][ T30] Showing all locks held in the system: [ 365.098391][ T30] 1 lock held by rcu_exp_gp_kthr/18: [ 365.104307][ T30] 2 locks held by ksoftirqd/1/23: [ 365.116727][ T63] Bluetooth: Error in BCSP hdr checksum [ 365.135705][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 365.149233][ T30] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 365.157956][ T30] 1 lock held by khungtaskd/30: [ 365.163298][ T30] #0: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 365.174325][ T30] 2 locks held by kworker/u8:9/1321: [ 365.180011][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 365.190465][ T30] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 365.199911][ T30] 2 locks held by getty/5563: [ 365.204599][ T30] #0: ffff8880390890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 365.214933][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 365.226396][ T30] 3 locks held by kworker/u9:5/5815: [ 365.232149][ T30] #0: ffff88802b32b148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 365.243769][ T30] #1: ffffc90003a57d08 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 365.255716][ T30] #2: ffff888057c20ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 365.265685][ T30] 1 lock held by udevd/6058: [ 365.271356][ T30] #0: ffff888027c7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 365.281064][ T30] 2 locks held by syz.0.455/7726: [ 365.286081][ T30] #0: ffff88803edee0e0 (&type->s_umount_key#82/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 365.296658][ T30] #1: ffff888027c7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 365.307003][ T30] 2 locks held by syz.1.1017/9942: [ 365.312377][ T30] [ 365.314696][ T30] ============================================= [ 365.314696][ T30] [ 365.326407][ T30] NMI backtrace for cpu 0 [ 365.326419][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 365.326434][ T30] Tainted: [L]=SOFTLOCKUP [ 365.326438][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 365.326444][ T30] Call Trace: [ 365.326447][ T30] [ 365.326452][ T30] dump_stack_lvl+0x100/0x190 [ 365.326473][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 365.326485][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 365.326503][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 365.326520][ T30] sys_info+0x141/0x190 [ 365.326533][ T30] watchdog+0xd25/0x1050 [ 365.326551][ T30] ? __pfx_watchdog+0x10/0x10 [ 365.326566][ T30] ? __kthread_parkme+0x18c/0x230 [ 365.326582][ T30] ? kthread+0x13a/0x450 [ 365.326591][ T30] ? __pfx_watchdog+0x10/0x10 [ 365.326604][ T30] kthread+0x370/0x450 [ 365.326613][ T30] ? __pfx_kthread+0x10/0x10 [ 365.326623][ T30] ret_from_fork+0x754/0xd80 [ 365.326634][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 365.326645][ T30] ? __switch_to+0x7b4/0x1120 [ 365.326658][ T30] ? __pfx_kthread+0x10/0x10 [ 365.326668][ T30] ret_from_fork_asm+0x1a/0x30 [ 365.326686][ T30] [ 365.326690][ T30] Sending NMI from CPU 0 to CPUs 1: [ 365.369443][ T1321] Bluetooth: Error in BCSP hdr checksum [ 365.375219][ C1] NMI backtrace for cpu 1 [ 365.375234][ C1] CPU: 1 UID: 0 PID: 1321 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.375253][ C1] Tainted: [L]=SOFTLOCKUP [ 365.375259][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 365.375268][ C1] Workqueue: events_unbound flush_to_ldisc [ 365.375287][ C1] RIP: 0010:unwind_next_frame+0x13/0x1ea0 [ 365.375305][ C1] Code: 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 48 89 fa <41> 56 48 c1 ea 03 41 55 49 89 fd 41 54 55 53 48 83 ec 38 0f b6 04 [ 365.375318][ C1] RSP: 0018:ffffc90000a08838 EFLAGS: 00000202 [ 365.375328][ C1] RAX: dffffc0000000000 RBX: ffffc90000a08848 RCX: ffffc90000a0879c [ 365.375337][ C1] RDX: ffffc90000a08848 RSI: ffffffff8171da7c RDI: ffffc90000a08848 [ 365.375346][ C1] RBP: ffffc90000a088d8 R08: 0000000000000001 R09: 0000000000000007 [ 365.375354][ C1] R10: 0000000000000200 R11: 000000000000224c R12: ffffffff81f34750 [ 365.375363][ C1] R13: ffffc90000a08908 R14: 0000000000000000 R15: ffff88802a84c980 [ 365.375372][ C1] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 365.375386][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.375395][ C1] CR2: 00007f6cd53e92f8 CR3: 0000000074be7000 CR4: 00000000003526f0 [ 365.375404][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 365.375412][ C1] DR3: 000000000000880a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 365.375421][ C1] Call Trace: [ 365.375426][ C1] [ 365.375431][ C1] arch_stack_walk+0x94/0xf0 [ 365.375448][ C1] ? bt_err+0xec/0x122 [ 365.375465][ C1] ? kfree_skbmem+0x19a/0x210 [ 365.375481][ C1] stack_trace_save+0x8e/0xc0 [ 365.375499][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 365.375514][ C1] ? kasan_save_track+0x14/0x30 [ 365.375533][ C1] ? __lock_acquire+0x4a5/0x2630 [ 365.375552][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 365.375570][ C1] ? mac80211_hwsim_beacon+0x105/0x1b0 [ 365.375590][ C1] kasan_save_stack+0x30/0x50 [ 365.375607][ C1] ? kasan_save_stack+0x30/0x50 [ 365.375624][ C1] ? kasan_save_track+0x14/0x30 [ 365.375640][ C1] ? kasan_save_free_info+0x3b/0x70 [ 365.375655][ C1] ? __kasan_slab_free+0x5f/0x80 [ 365.375673][ C1] ? kmem_cache_free+0x124/0x6a0 [ 365.375688][ C1] ? kfree_skbmem+0x19a/0x210 [ 365.375703][ C1] ? consume_skb+0xd1/0x110 [ 365.375717][ C1] ? mac80211_hwsim_tx_frame+0x1fe/0x2a0 [ 365.375732][ C1] ? mac80211_hwsim_beacon_tx+0x57e/0xa00 [ 365.375751][ C1] ? __iterate_interfaces+0x2e6/0x650 [ 365.375764][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 365.375779][ C1] ? mac80211_hwsim_beacon+0x105/0x1b0 [ 365.375797][ C1] ? __hrtimer_run_queues+0x50e/0xa70 [ 365.375810][ C1] ? hrtimer_run_softirq+0x17d/0x350 [ 365.375823][ C1] ? handle_softirqs+0x1eb/0x9e0 [ 365.375837][ C1] ? __irq_exit_rcu+0xef/0x150 [ 365.375851][ C1] ? irq_exit_rcu+0x9/0x30 [ 365.375864][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 365.375879][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 365.375893][ C1] ? vprintk_emit+0x553/0x6b0 [ 365.375908][ C1] ? _printk+0xcf/0x110 [ 365.375920][ C1] ? bt_err+0xec/0x122 [ 365.375943][ C1] kasan_save_track+0x14/0x30 [ 365.375960][ C1] kasan_save_free_info+0x3b/0x70 [ 365.375975][ C1] __kasan_slab_free+0x5f/0x80 [ 365.375993][ C1] kmem_cache_free+0x124/0x6a0 [ 365.376008][ C1] ? skb_release_data+0x7a0/0x9d0 [ 365.376023][ C1] kfree_skbmem+0x19a/0x210 [ 365.376040][ C1] consume_skb+0xd1/0x110 [ 365.376054][ C1] mac80211_hwsim_tx_frame+0x1fe/0x2a0 [ 365.376070][ C1] mac80211_hwsim_beacon_tx+0x57e/0xa00 [ 365.376088][ C1] __iterate_interfaces+0x2e6/0x650 [ 365.376102][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 365.376118][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 365.376133][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 365.376150][ C1] mac80211_hwsim_beacon+0x105/0x1b0 [ 365.376168][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 365.376187][ C1] __hrtimer_run_queues+0x50e/0xa70 [ 365.376203][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 365.376217][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 365.376239][ C1] hrtimer_run_softirq+0x17d/0x350 [ 365.376254][ C1] handle_softirqs+0x1eb/0x9e0 [ 365.376270][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 365.376287][ C1] __irq_exit_rcu+0xef/0x150 [ 365.376302][ C1] irq_exit_rcu+0x9/0x30 [ 365.376316][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 365.376329][ C1] [ 365.376333][ C1] [ 365.376338][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 365.376351][ C1] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 365.376367][ C1] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 88 10 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 56 0b 21 00 48 85 ed 0f 85 27 01 00 00 68 10 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 365.376378][ C1] RSP: 0018:ffffc9000544f778 EFLAGS: 00000293 [ 365.376388][ C1] RAX: 0000000000000000 RBX: 0000000000000025 RCX: ffffffff81e7aa4a [ 365.376396][ C1] RDX: ffff88802a84c980 RSI: ffffffff81e7aa54 RDI: ffff88802a84c980 [ 365.376404][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 365.376412][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000a89ef1 [ 365.376420][ C1] R13: 0000000000000200 R14: ffff8880202b24c0 R15: ffffc9000544f840 [ 365.376431][ C1] ? vprintk_emit+0x66a/0x6b0 [ 365.376446][ C1] ? vprintk_emit+0x674/0x6b0 [ 365.376462][ C1] ? vprintk_emit+0x674/0x6b0 [ 365.376477][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 365.376495][ C1] _printk+0xcf/0x110 [ 365.376507][ C1] ? __pfx__printk+0x10/0x10 [ 365.376520][ C1] ? trace_kmalloc+0x101/0x130 [ 365.376532][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 365.376550][ C1] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 365.376571][ C1] bt_err+0xec/0x122 [ 365.376585][ C1] ? __pfx_bt_err+0x10/0x10 [ 365.376599][ C1] ? __asan_memset+0x23/0x50 [ 365.376614][ C1] ? __alloc_skb+0x5b7/0x710 [ 365.376626][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 365.376639][ C1] ? bcsp_recv+0xbdb/0x1830 [ 365.376653][ C1] ? bcsp_recv+0xbc8/0x1830 [ 365.376667][ C1] bcsp_recv+0xbe7/0x1830 [ 365.376682][ C1] ? __pfx_bcsp_recv+0x10/0x10 [ 365.376700][ C1] hci_uart_tty_receive+0x259/0x7e0 [ 365.376721][ C1] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 365.376745][ C1] tty_ldisc_receive_buf+0x15a/0x1a0 [ 365.376760][ C1] tty_port_default_receive_buf+0x70/0xb0 [ 365.376776][ C1] flush_to_ldisc+0x26b/0x730 [ 365.376790][ C1] ? rcu_is_watching+0x12/0xc0 [ 365.376806][ C1] process_one_work+0x9d7/0x1920 [ 365.376824][ C1] ? __pfx_process_one_work+0x10/0x10 [ 365.376840][ C1] ? __pfx_flush_to_ldisc+0x10/0x10 [ 365.376855][ C1] worker_thread+0x5da/0xe40 [ 365.376871][ C1] ? kthread+0x13a/0x450 [ 365.376882][ C1] ? __pfx_worker_thread+0x10/0x10 [ 365.376894][ C1] kthread+0x370/0x450 [ 365.376906][ C1] ? __pfx_kthread+0x10/0x10 [ 365.376919][ C1] ret_from_fork+0x754/0xd80 [ 365.376933][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 365.376946][ C1] ? __switch_to+0x7b4/0x1120 [ 365.376961][ C1] ? __pfx_kthread+0x10/0x10 [ 365.376973][ C1] ret_from_fork_asm+0x1a/0x30 [ 365.376994][ C1] [ 365.785744][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 365.785763][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 365.785788][ T30] Tainted: [L]=SOFTLOCKUP [ 365.785794][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 365.785805][ T30] Call Trace: [ 365.785811][ T30] [ 365.785819][ T30] dump_stack_lvl+0x100/0x190 [ 365.785855][ T30] vpanic+0x552/0x970 [ 365.785872][ T30] ? __pfx_vpanic+0x10/0x10 [ 365.785892][ T30] ? rcu_is_watching+0x12/0xc0 [ 365.785917][ T30] panic+0xd1/0xe0 [ 365.785934][ T30] ? __pfx_panic+0x10/0x10 [ 365.785953][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 365.785980][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 365.786006][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 365.786031][ T30] ? watchdog.cold+0x198/0x1ca [ 365.786050][ T30] ? watchdog+0xd35/0x1050 [ 366.259648][ T30] watchdog.cold+0x1a9/0x1ca [ 366.264231][ T30] ? __pfx_watchdog+0x10/0x10 [ 366.269527][ T30] ? __kthread_parkme+0x18c/0x230 [ 366.274533][ T30] ? kthread+0x13a/0x450 [ 366.278756][ T30] ? __pfx_watchdog+0x10/0x10 [ 366.283431][ T30] kthread+0x370/0x450 [ 366.287490][ T30] ? __pfx_kthread+0x10/0x10 [ 366.292061][ T30] ret_from_fork+0x754/0xd80 [ 366.296633][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 366.301727][ T30] ? __switch_to+0x7b4/0x1120 [ 366.306381][ T30] ? __pfx_kthread+0x10/0x10 [ 366.310947][ T30] ret_from_fork_asm+0x1a/0x30 [ 366.315695][ T30] [ 366.318901][ T30] Kernel Offset: disabled [ 366.323204][ T30] Rebooting in 86400 seconds..