last executing test programs: 4m56.258067754s ago: executing program 2 (id=126): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a00000000000000000700", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4) 4m56.23041688s ago: executing program 2 (id=127): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x60, &(0x7f0000000840)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m56.046851151s ago: executing program 2 (id=131): syz_usb_connect$uac2(0x5, 0x8e, &(0x7f0000000c40)=ANY=[@ANYBLOB="1201000200000008410e464240000102030109027c00"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r2 = syz_ublk_setup_io_uring(0x1678, &(0x7f0000000100)={0x0, 0x54c2, 0x0, 0x3, 0x7e}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) r3 = io_uring_setup(0x292a, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x32, 0x0, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m53.498040612s ago: executing program 2 (id=152): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4000003e, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) socket(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000900)="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", 0x130, 0x12, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1515) 4m51.606668631s ago: executing program 2 (id=155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000006c0)="04d2"}) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xdbbd}]}, 0x3c}}, 0x0) 4m50.063292672s ago: executing program 2 (id=163): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x15c}, &(0x7f0000000280), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r3, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x400, 0x20000000) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[], 0xffffff43}, 0x1, 0x0, 0x0, 0x2004c000}, 0x20044845) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) 4m49.806430183s ago: executing program 32 (id=163): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x15c}, &(0x7f0000000280), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r3, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x400, 0x20000000) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[], 0xffffff43}, 0x1, 0x0, 0x0, 0x2004c000}, 0x20044845) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) 2m16.104790024s ago: executing program 0 (id=741): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$input_event(r0, 0x0, 0x0) 2m15.927514941s ago: executing program 0 (id=742): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x171400, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xffffffffffffffff) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000340)=[{r3, 0x2000}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)=0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x17, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000140), 0x500, 0x0, 0x0, 0x4c, 0x0, 0x0}, 0x50) open_by_handle_at(r6, &(0x7f0000000080)=@orangefs_parent={0x28, 0x2, {{"3e4ede096f10f2c2d4a083b9a8b5b0ac", 0x6}, {"a9b6afaa00f3d16b5c9199af8f44d2f8", 0xffffff01}}}, 0x450000) kexec_load(0x0, 0x0, 0x0, 0x5) r7 = socket(0x2a, 0x803, 0x0) write(r7, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) 2m15.11905203s ago: executing program 5 (id=751): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000080)={0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x639) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0x20000, 0x1, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0x6, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) read(r2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_CAP_PTP_KVM(r4, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x1f, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r8 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) 2m14.651331512s ago: executing program 1 (id=757): setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x2000090, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) 2m13.643377896s ago: executing program 1 (id=758): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_vhci(&(0x7f0000007980)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}}}, 0xa) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80000) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2m13.004396029s ago: executing program 1 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000107000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000006"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 2m12.843669464s ago: executing program 0 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f00000001c0)={@host, 0x2}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005"], 0x68}, 0x1, 0x0, 0x0, 0x4008010}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 2m12.842545784s ago: executing program 1 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xf5ff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) 2m12.663281635s ago: executing program 1 (id=765): socket$netlink(0x10, 0x3, 0xb) writev(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000000)="6baedff063852126600b9c2e2f3d95ea954c9e78426c3d248b009157f032e115a6df22b32a6e832e0d66adc4a77f0b8f7a42faf28cd6818c217c20f2ac7a4f4e8bf2ad17966a74e435a90c0d8f5f74ba8adda8cabd26edc9b57d67b91a35995fce903bd42726a5adfd6ff6ecfd84c708a895cb85e92df464f8d8210c4d4cb7779f7061b96caef59edc75ee6b79459f10db49c9d48e533a2ab27bcd4b79917e3361dd4e6e185cf2f072f5083967bb"}, {&(0x7f00000000c0)="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"}], 0x105b) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./file2\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000340)='./file0\x00', r1, 0x0) mount$overlay(0x0, &(0x7f0000001240)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000001200)={[], [{@euid_eq={'euid', 0x3d, r1}}], 0x2c}) lseek(r0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x4d2631e8ba2832a9, 0x50) openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = socket$inet(0x2, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x24008004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_gettime(0x17, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) 2m12.51083922s ago: executing program 0 (id=766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x50) 2m12.422692568s ago: executing program 0 (id=767): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5555, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x30}}, 0x4000080) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000004c0)={r5, 0xff}, 0x8) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) write$char_usb(r6, &(0x7f00000003c0)='U', 0x1) 2m12.109434168s ago: executing program 5 (id=768): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x2004c840) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xf1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x3, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 2m11.946304593s ago: executing program 5 (id=769): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0xfffffffffffffdd4, 0xfa00, @id_resuseaddr={&(0x7f0000000040)}}, 0x20) 2m11.867389161s ago: executing program 5 (id=770): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003680)={0x2c, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) (async) r9 = socket(0x10, 0x803, 0x0) sendmmsg$alg(r9, &(0x7f0000001d40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="0c055bbbf05ab957453a4c179816ecf4392e9227cf7b9e6ad168abee3f97b6e373a8bf", 0x23}, {&(0x7f0000000040)="0235cdf0cb23be6cc9a6ee213f95efe49ff73fddaafcdb13", 0x18}, {&(0x7f0000000380)="5d15f282d15b7176727a8745038434b220a923192d0a292814f98cdc4ff15a841779ae4f7c36c19ecbe22d11f652d1a3ce80ec4f6e30a6a9c6fd22e18be248135b8af70f3f4df267f1357acf3ed6e0fbc066a61429be", 0x56}, {&(0x7f0000000400)="34d10a7d1ee081a66c9c8a516d487cd5626a118c926778f631b7e98f135f7bbcad13aaa73a302cca11959d0149f7f3ed39526b79200836d27112cdb4caff6bffa955ec7b693e3e57eb04846f15b7d8d111a5327cf5f0d9bbeeb591d6fb499b4190cff250ee06470c03dac0928d71a22d82e82166560bae8e0066067b5deab83d3f", 0x81}], 0x4, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0xf86}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x35b6}, @iv={0xa0, 0x117, 0x2, 0x87, "23dc0e49bc186b3c7c7776e2b22ddbaf1d9bb1ffa6481aa33763a14ad51622b631646591b36eeb5d54294f3f4e2df64ae99a0c6a4a07410efd0d7d8b4b8687756fa4aebe400a01f3f66a87379673e15bcd421659ab34a1ead845e054abbf4baca41d32da1d5be3eb5fe80711a9bed7b43fe22b5208b24b9d30dfe057a111ffe71845d9dbae89e2"}], 0xe8, 0x8000}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="0b64b1472026a1057f1bc69fb4d1a3f38d234cfda3041a4683ca3cdda7ed6a306a1b74577ece633705bd8f1a93d7030af6fea6c2d67ba46c6266bf3bdbd70e5057f632551a007c777a0e153543c8e579e1eabcc38293af0e41f6890b054a89d57c7b2849fa8a6229d49368d96c07d6f5213c00a06da7bfbe411e8f5f0350d36175f7b124a04d56fdaaf018d539e10ad88c0cb9fe8d54ef4efcb736c950514858", 0xa0}, {&(0x7f00000006c0)="1e3f54094368e6f632a09e0af5962d6d80d532d921cbe954f274a8b40493935d384adf9ef3459a8fa570153a12625f5d", 0x30}, {&(0x7f0000000700)="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", 0xfe}], 0x3, &(0x7f0000000840)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x5}, {0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000009c0)="f9ca0734cbf3125e594b6618241cbf576eee35e49eb9a697cbb98302b027c71be8a48a57b74b563c7cbf6d58bd8e23030b62cf240f11166175583f12", 0x3c}], 0x1, &(0x7f0000000a40), 0x0, 0xc084}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="0b253cee3cf29baa6c1e7f2338eacdcc370752542981e62cb30b3fcb", 0x1c}, {&(0x7f0000001ac0)="e14fa2036f96e6f6257684f912b8514136a99b6124733aaba2e1675f3f8d41f2d49d138dbb5c1a7b3bec54eeaffd0784d5f2dbda2dc1c273a05c5392b8fa55e4670bb0c5772e1458a5a7f235ebe2a60d3f02680bfd0f48e13a5110340c26d29bdd72670ba2bd3d8ce2ab7e5dbc49230534a1cb2c2b5a55f46ff5e9e00a536e30d8051638a24ab3da3cf06e8f43f3351ffd2c3e", 0x93}, {&(0x7f0000001b80)="0c58b863bde04b29d85d84e48e3f085df45805415dab66d4f199a99f56e9a4021ca2564f6a08ec29a449304db03c1cd1322447d62857e3732e4b98df141ff85636ddf44baecead8670803d3cee413b2e1eaa936719530c11c362d26898e5ede5ff83", 0x62}], 0x4, &(0x7f0000001c40)=[@assoc={0x18, 0x117, 0x4, 0x2db}, @iv={0x98, 0x117, 0x2, 0x7e, "9eec772aac20aecd42de812c7efc5e97a814e6066678c9033c421d3cbf3d207959fae1fe1458ca03f088c45b3b2a43dbbea983f42c31c6abfb0c2aca7c09c2847f109a24b03f2d0b479413c270cade0cd58e43223cfd75f3e23798b637777ca8a06e3b61138d6d83d894e95f48538f05ba82a5840899d0d55ba718f0010a"}, @op={0x18}], 0xc8}], 0x4, 0x4800) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0xffffff1f, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) accept4$bt_l2cap(r9, 0x0, &(0x7f0000000080)=0x37, 0x80000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001040000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYRES32=r0], 0x38}}, 0x4) (async) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r12, 0x0, 0x0, 0x0) 2m11.813185532s ago: executing program 4 (id=771): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x14, 0x14, 0x609, 0x0, 0x0, {0x1e}}, 0x14}}, 0xc044) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m11.742076907s ago: executing program 1 (id=772): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000a0000008500000041006d4282083ef7af00009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x51, 0x0, &(0x7f0000000200)="1a510065f70de5ea5272ba24cdfe0166f69f94", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0xec0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xe, 0x1, 0x1, 0x3, 0x7, 0x1040, 0x6, 0xffff, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) fchdir(0xffffffffffffffff) 2m11.72586112s ago: executing program 5 (id=773): r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1000009, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000e40)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x7ff, 0x0, 0x3, 0xffffffff, 0x80000000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000056c0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)="6e8229922d0a89221e0dba4a2b8b35cfd65154d5b183b1b6a23dd9ae6aeb9fec8396a797e85a9afbda82f7b82f0c0b38c24e5aefdbac921aba42e580c8c52606b293641777b440c355f37b47303a13d65d35b465db5fb7e117a980f090cd8066a75928c0d8897f5c23d219cdc2cadebe750fe5e124a38e77490ec2a523d0881509fe1d638fa2b3360ed332e5998c6d337f4698de6ceee56d314435384c1839d45c6aa591dc7b3b874307c3195966665e59dc4e5a4b92d11a400bee74abedb71a9a2e56cbbe14b53e11035e474ba653749bbfc3a8060f67b9d4a38c1ff2d7f030a41c460413d6b5304f60dc2a0bb6d7e732265c81bb1254f9ca463ed63d9015291390f0780a1b1e6f6fbb0286e88a9c9bdee21f9239e2f3861d25247c67d2c36751bb056c4d26899ddfdcf62773e3b9cb5fde12f60ccededf95cd8225386975042025ce3fa2f014b3265f7175ebdd858862cbc99efabe556f913004756b4ced67e40830e35219f60fc69472f5559b35d27059e9e103241c847f08fa0fe2676392b1531f6d290cc3038d05b406be152e19abc188c6eeff750a28dcd9cc4c5936d3f47651792bdd6befa45569dbda6a48b545e20cfcca1b7f0ee20fd4801076bf95cfee56f99e06cefddce40c84d0043396c73f21c88ee37b6a807b47c155b2458faed6f68ff72677b9060e08a6aa3440b3e3cfb87b3173c1d3b7ca0a9228be5b51ca8104e05b90a238ca587664c41dd175fddbcc0a7f528456ad25bd5b8084db528a7470a5ef89a78498558755aca1f6252a77cab91eb7ecbebf63e88b4acfdad9fb6b711da3d3b5e20a1650070d86b87052f3c157ab9b9f823bc20783d568c6f40a8b5df6a984e0747c4c7a2f01a11cc4b838dde16604d0994d9f42dde0f588b86918f0d13b9e20f60777c12a1ceda026e00c43fa1abb277d4672857ccce51be1ac0fd9007b2fc3cbfea4230a075f2f9309a8dc2dd9e3bf82982446f9a95ad1f00f6da3e5864a77a3e1fcdd974aef3534a5b4cf7a9c2d7e180c9e892f55581a3d95e5a2b16b41198a3db361e14dc2e6c4d546b5627edc94a9fe3c4655bee4099d1d886094f76dfb05db7ae363f98e1cb52e18db4f732cabe244b8cd22517c376ca354a68a1f3490955a0c6d0902d3f877114d1d76b457437b282474792c9dd29a42717bdd8fd3e83b1e9c8df34221b60dff57ec2c2ff7cd7f2949ed8e9722afcc00436bcc72c90b0e3e3d48f00e7203a5d6291e96d99c0afd9aa1c8e202c4086e7fbea52a08f0a2b07643c7b6c199c0e7977b0efd9f197db5c4899cf99391f1c04bae4be5ea2e6e4eddb7e87159516d7ead76aed3bed19e55fb021a8f57f4c7149c398b2e46d0f385170b199c95de2d424af84ea609a2cef6abdb0bc0ffae81e787c422f88760310b1dc0a548448471c6fe1eab91b1e04c41661780ad3a8496da3a26c0e13fe9cb38ff681720bf07994e7f29852baf767cdd14affbf4dab823eca385127a56422a87c7503c9d278512ffabc51c356e9a9e1111a1cdc3bb4763a74e08dc149d2c10498a31ca1fae6d50b56afaedad5151a69f05292fb6b19e73808e033847bdd12f97d7a0adb1ac6998aca7cd4eeb1ef620b934fb99c874e9c58d1a46cf0d208021a25221f67584f8ea33e54a77c3e1f4ae61135ecf11859c73bb520899b1d154fc88cc1490a97f4c0144b40d06f6818ab1a910e53bbed9204578090a6c57579e451ba176321b3073b97f4d791bf232166a402559e9fa911e97965a3ac989442998d66d6c0527ad9fd462f3cbbe3cb4aede777ea23c712d60651ed5d81e27c074ab4ae58a22870d6a189f8317549ac5fe6c645d4662c17b90f7a8bb220f0b76261a5ddaf24646e310ecc9a17300afa7d45a3626507f91f541c2a8e54e7787768724dcc472831b85a20c39ee036a5af032d60f85d0868903b80a6e3ecb8ee41b4c56811ae98d2844ce53a2996a53ac7469b4734fa5c2ff2de4d53c004e586d1faf8c7ac5a2049b9c6d61d6db37bd836564fc49c7c79b231257932ca461280797ca2fcdfda15111333baa73133f35c8a89ed326d1b9a328cc2e18028820d978c08d99efe759d64a30ddc51ca128a146f3629ce0bc695935e039e1383df2a423e2d4c7e084ec0fab9451062e12683868a3c2df5c5f0a6599b89f6020113fb1a96b23fcbb2f661396c39ade129483abdcf85fc9a74dff19797cd47eb4d80f459a6ab884836f77e2f8a0a8d341a10ac918ad451dc538e6b245f565f7748dc36b870fd8e078f6cb99c4166707c1c691e02868c2c98af44420bea01c7d475faee5aa44bc6ad5779df045909d078998c3f73d5b972a6a3115de67e168baf627ace4a9ef9ef07bc48c42e98540e381011d83c608bec09d1c9365c0e30014afdeb84b5bb075ad877a91e64991620dfd27920f79583e6935f72c5803afa6bc39774c87f29ad835abc67f6b4f9264dbc0cfd60bf86fe146cdeb80224b33f56bdf627136c2c71404ef01b3dfdd2ecb6cc783b5b586179136da3e54fe9447070d5837ab1a09bd9f4aac71f0b4e4e6bae4142d173633331ccd0da06b25edb60912e81d01db037b3d7a6a1d801b4aed3554cb2ef40178b1d4f9aadc58717316373f2d7c6a940e42461b8b323e0d5fe4c9c8eb3f4c002036ed505f1a333dc6257c85dd99e4b8a09c140daf1416cc2e28b8bb", 0x76f}], 0x1}], 0x1, 0x20000800) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240), 0x8010, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="3021830b", @ANYRES16=r0, @ANYBLOB="010025bd70000000000002000000080003", @ANYRES32=0x0, @ANYBLOB="0c009900010000005100000008009f0006"], 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017555d000", '\x00', "0500", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffff9d}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) 2m11.616578559s ago: executing program 4 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x400000, 0x0) close(r1) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0x8, 0x5}, {0xfff2}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x81}, @TCA_RATE={0x0, 0x5, {0x5, 0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0xe, 0x9, 0x3b, &(0x7f0000000040)}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x210440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) 2m11.572760295s ago: executing program 3 (id=775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000400)=""/186, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x98}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r5, &(0x7f0000000d80), 0x0, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0xe}}, './file0/file0\x00'}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r7, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x48840}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000380)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) 2m11.429814559s ago: executing program 4 (id=776): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 2m11.249054445s ago: executing program 3 (id=777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x50) 2m11.248199023s ago: executing program 4 (id=778): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, &(0x7f0000000100)=0x3, 0x2) 2m11.152189691s ago: executing program 3 (id=779): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x100000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50307, 0x2a2e3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) fsync(r0) close(0x3) 2m10.994600419s ago: executing program 4 (id=780): r0 = semget(0x1, 0x4, 0x374) fanotify_init(0x79, 0x101000) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7d, 0x800}], 0x2) semop(r0, &(0x7f0000000380)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0xa) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) listxattr(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x3, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xc2, 0x1000, 0x1, 0x8, 0x8}, 0x2, 0x1, 0x10000, 0x4, 0x10001, 0x15, 0x1b, 0x1e, 0x2, 0x7, {0x9, 0x0, 0xfffffffe, 0xffffff7c, 0x1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$sysctl(r4, &(0x7f0000000580)='0\x00', 0x2) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 2m10.884996696s ago: executing program 3 (id=781): r0 = socket$kcm(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x8142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x840) getpgid(0x0) 2m10.83529881s ago: executing program 4 (id=782): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dvb_dvr(&(0x7f0000000280), 0x0, 0x10b401) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000003c0)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2m10.762100667s ago: executing program 0 (id=783): r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffe) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x38}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r2, 0x3a, 0x20, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1}, 0x4}], 0x3fffe0a, 0x40000121, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x90903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000000031700001db6a3ddf2500000000", @ANYRES64=r1, @ANYBLOB="159804000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r7, 0x4bfa, &(0x7f0000000080)) pipe(&(0x7f0000000000)) 2m10.630245378s ago: executing program 3 (id=784): openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2a900, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioperm(0x5, 0x6, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) openat$kvm(0xffffffffffffff9c, 0x0, 0x680, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20002002}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x410000a7, 0x0, 0x0, 0x0, 0x0, 0x0) 2m9.075503594s ago: executing program 3 (id=785): futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000400)=""/199, 0x0, 0xc7, 0x1, 0x3}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffd97, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x60, 0x40c4}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_virt_wifi\x00'}]}, 0x34}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0435ec05aaaaaaaaaa00"], 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x5, 0x7, 0x80d0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50) socket(0x21, 0x800, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r1, &(0x7f00000001c0), 0x0}, 0x20) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmmsg(r2, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20001c41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') readv(r4, &(0x7f0000000780)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x2, 0x3, 0x9, 0x10}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db2d82e6036cbb7e31105314a0fe5f5989bce02d44c1641ffc1cd7d99f6d010251ce2340064f5cac4f96a73d6983035797d24dd1d5f72084b2979a327b1631b445d3ca60d4a2d216cf6a20bf4c449b790b1cea906d2c8203173bb46f2d23ee787772", 0x62}, {&(0x7f0000000400)="6c43a715ebbd318addcd79db30fc82c7897cc1af4d30e60c0793f737a63a8a1c1f8d58547b8d9afc8d3c1dadefe19e63eadcea6c6377757750bd3d1b9136c63a1b12cf568a45375f9c41b2a6c9603606", 0x50}], 0x2}}], 0x1, 0x24040015) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m6.101320023s ago: executing program 5 (id=786): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f0000000580)={0xdb, 0x0, 0x401}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fc00"/12, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, @fallback=0x22, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000000c0)='./file1\x00') chroot(0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 0s ago: executing program 33 (id=783): r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffe) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x38}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r2, 0x3a, 0x20, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1}, 0x4}], 0x3fffe0a, 0x40000121, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x90903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000000031700001db6a3ddf2500000000", @ANYRES64=r1, @ANYBLOB="159804000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r7, 0x4bfa, &(0x7f0000000080)) pipe(&(0x7f0000000000)) kernel console output (not intermixed with test programs): 495'. [ 203.912846][ T7834] netlink: 90 bytes leftover after parsing attributes in process `syz.5.495'. [ 203.925668][ T5350] samsung 0003:0419:0001.0005: hidraw0: USB HID v1.01 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 203.942361][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 203.991188][ T5350] usb 2-1: USB disconnect, device number 27 [ 204.131635][ T7839] fido_id[7839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 204.163125][ T24] usb 1-1: config 114 has an invalid interface number: 153 but max is 3 [ 204.173385][ T24] usb 1-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 204.203672][ T24] usb 1-1: config 114 has 1 interface, different from the descriptor's value: 4 [ 204.210854][ T7844] warning: `syz.3.497' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 204.240249][ T24] usb 1-1: config 114 has no interface number 0 [ 204.250334][ T5862] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 204.266600][ T24] usb 1-1: config 114 interface 153 altsetting 7 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 204.293756][ T24] usb 1-1: config 114 interface 153 altsetting 7 endpoint 0x9 has invalid wMaxPacketSize 0 [ 204.320568][ T24] usb 1-1: config 114 interface 153 has no altsetting 0 [ 204.343173][ T24] usb 1-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=4f.e0 [ 204.352471][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.365555][ T24] usb 1-1: Product: syz [ 204.376793][ T24] usb 1-1: Manufacturer: syz [ 204.381492][ T24] usb 1-1: SerialNumber: syz [ 204.489664][ T5862] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.582464][ T5862] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 204.641211][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.701258][ T5862] usb 6-1: Product: syz [ 204.733651][ T5862] usb 6-1: Manufacturer: syz [ 204.783801][ T5862] usb 6-1: SerialNumber: syz [ 204.969274][ T5862] usb 6-1: config 0 descriptor?? [ 205.059468][ T24] usb 1-1: USB disconnect, device number 15 [ 205.423587][ T5862] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 206.074535][ T29] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 206.348717][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 206.405391][ T29] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.530514][ T29] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 206.565545][ T5862] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 206.588999][ T5862] usb 6-1: USB disconnect, device number 12 [ 206.596278][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.608816][ T29] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 206.621593][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.651724][ T29] usb 2-1: config 0 descriptor?? [ 206.884950][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 206.884964][ T30] audit: type=1400 audit(1780416290.462:1637): avc: denied { write } for pid=7845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.171800][ T30] audit: type=1400 audit(1780416290.734:1638): avc: denied { ioctl } for pid=7855 comm="syz.0.500" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 207.575650][ T7871] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 207.582499][ T7871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.589977][ T7854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 207.596483][ T7854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.650897][ T30] audit: type=1400 audit(1780416291.174:1639): avc: denied { write } for pid=7870 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.722980][ T7854] vhci_hcd vhci_hcd.0: Device attached [ 207.749916][ T29] hid_mf 0003:0079:1803.0006: unknown main item tag 0x0 [ 207.769889][ T29] hid_mf 0003:0079:1803.0006: hidraw0: USB HID v0.04 Device [HID 0079:1803] on usb-dummy_hcd.1-1/input0 [ 207.827951][ T7871] vhci_hcd vhci_hcd.0: Device attached [ 207.843122][ T29] hid_mf 0003:0079:1803.0006: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 207.873140][ T7869] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 207.879666][ T7869] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.998138][ T7869] vhci_hcd vhci_hcd.0: Device attached [ 208.030784][ T30] audit: type=1400 audit(1780416291.530:1640): avc: denied { setopt } for pid=7883 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.033974][ T7874] vhci_hcd: connection closed [ 208.051415][ T7873] vhci_hcd: connection closed [ 208.051686][ T29] usb 2-1: USB disconnect, device number 28 [ 208.056160][ T7872] vhci_hcd: connection closed [ 208.066756][ T5715] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 208.109376][ T13] vhci_hcd vhci_hcd.1: stop threads [ 208.113439][ T7875] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 208.137602][ T13] vhci_hcd vhci_hcd.1: release socket [ 208.140528][ T30] audit: type=1400 audit(1780416291.586:1641): avc: denied { append } for pid=7885 comm="syz.4.496" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 208.173052][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 208.181920][ T7895] xt_hashlimit: size too large, truncated to 1048576 [ 208.186916][ T13] vhci_hcd vhci_hcd.1: stop threads [ 208.208625][ T13] vhci_hcd vhci_hcd.1: release socket [ 208.234348][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 208.257609][ T13] vhci_hcd vhci_hcd.1: stop threads [ 208.265066][ T13] vhci_hcd vhci_hcd.1: release socket [ 208.273329][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 208.287753][ T30] audit: type=1400 audit(1780416291.773:1642): avc: denied { create } for pid=7896 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.383884][ T5708] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 208.479837][ T5862] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 208.554973][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 208.562361][ T5708] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.574973][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.590324][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 208.605559][ T5708] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 208.618225][ T5708] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.632795][ T5708] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 208.642146][ T5708] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 208.650405][ T5708] usb 1-1: Manufacturer: syz [ 208.655123][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 208.663388][ T5862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.676939][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.692448][ T5708] usb 1-1: config 0 descriptor?? [ 208.721267][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 208.738630][ T5862] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 208.749331][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.763917][ T5862] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 208.774294][ T5862] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 208.783901][ T5862] usb 6-1: Manufacturer: syz [ 208.797054][ T5862] usb 6-1: config 0 descriptor?? [ 208.966051][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 209.003164][ T5708] rc_core: IR keymap rc-hauppauge not found [ 209.012733][ T5708] Registered IR keymap rc-empty [ 209.023262][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.068076][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.103947][ T5708] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 209.132772][ T5862] rc_core: IR keymap rc-hauppauge not found [ 209.146046][ T5708] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 209.163414][ T5862] Registered IR keymap rc-empty [ 209.171580][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 209.184733][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.197195][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 209.227575][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.248438][ T5862] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 209.731597][ T7922] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 209.745029][ T7922] Error validating options; rc = [-22] [ 210.320836][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 210.328525][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 210.362230][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input21 [ 210.382519][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 210.408283][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 210.424952][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 210.458956][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 210.467630][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 210.498579][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 210.509807][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 210.522613][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 210.530627][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 210.543007][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 210.553711][ T24] usb 2-1: config 53 has an invalid interface number: 179 but max is 0 [ 210.613062][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 210.622003][ T24] usb 2-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 210.632543][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 210.640144][ T24] usb 2-1: config 53 has no interface number 0 [ 210.659208][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 210.669522][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 210.678221][ T24] usb 2-1: too many endpoints for config 53 interface 179 altsetting 109: 91, using maximum allowed: 30 [ 210.701485][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 210.711861][ T24] usb 2-1: config 53 interface 179 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 91 [ 210.726478][ T5708] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 210.749873][ T5708] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.759298][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 210.771967][ T24] usb 2-1: config 53 interface 179 has no altsetting 0 [ 210.797580][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 210.806687][ T24] usb 2-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 210.815797][ T5708] usb 1-1: USB disconnect, device number 16 [ 210.832806][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.840956][ T5862] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 210.868842][ T24] usb 2-1: Product: syz [ 210.879483][ T5862] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 210.894322][ T24] usb 2-1: Manufacturer: syz [ 210.906725][ T24] usb 2-1: SerialNumber: syz [ 210.916873][ T5862] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.971146][ T5862] usb 6-1: USB disconnect, device number 13 [ 210.986674][ T30] audit: type=1400 audit(1780416294.301:1643): avc: denied { write } for pid=5615 comm="syz-executor" name="98" dev="tmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 211.050689][ T30] audit: type=1400 audit(1780416294.301:1644): avc: denied { write } for pid=5615 comm="syz-executor" name="98" dev="tmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 211.086004][ T30] audit: type=1400 audit(1780416294.338:1645): avc: denied { write } for pid=5615 comm="syz-executor" name="98" dev="tmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 211.114932][ T30] audit: type=1400 audit(1780416294.338:1646): avc: denied { write } for pid=5615 comm="syz-executor" name="98" dev="tmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 211.170524][ T24] kvaser_usb 2-1:53.179: error -ENODEV: Cannot get usb endpoint(s) [ 211.218256][ T24] usb 2-1: USB disconnect, device number 29 [ 211.218285][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'. [ 211.268828][ T7929] netlink: 90 bytes leftover after parsing attributes in process `syz.0.513'. [ 211.294524][ T7929] netlink: 90 bytes leftover after parsing attributes in process `syz.0.513'. [ 211.601889][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 211.976084][ T7947] FAULT_INJECTION: forcing a failure. [ 211.976084][ T7947] name failslab, interval 1, probability 0, space 0, times 0 [ 211.981118][ T7944] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 212.027734][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.051173][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 212.065488][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.081800][ T10] usb 1-1: Product: syz [ 212.084974][ T7947] CPU: 1 UID: 0 PID: 7947 Comm: syz.1.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.084998][ T7947] Tainted: [L]=SOFTLOCKUP [ 212.085004][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.085012][ T7947] Call Trace: [ 212.085018][ T7947] [ 212.085024][ T7947] dump_stack_lvl+0x100/0x190 [ 212.085047][ T7947] should_fail_ex.cold+0x5/0xa [ 212.085070][ T7947] should_failslab+0xc2/0x120 [ 212.085088][ T7947] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 212.085110][ T7947] ? alloc_empty_file+0x5b/0x1c0 [ 212.085132][ T7947] ? __pfx_stack_trace_save+0x10/0x10 [ 212.085152][ T7947] alloc_empty_file+0x5b/0x1c0 [ 212.085179][ T7947] path_openat+0xe8/0x31a0 [ 212.085206][ T7947] ? kasan_save_stack+0x3f/0x50 [ 212.085219][ T7947] ? kasan_save_stack+0x30/0x50 [ 212.085232][ T7947] ? kasan_save_track+0x14/0x30 [ 212.085245][ T7947] ? __kasan_slab_alloc+0x89/0x90 [ 212.085258][ T7947] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 212.085280][ T7947] ? do_getname+0x35/0x390 [ 212.085300][ T7947] ? do_sys_openat2+0xc5/0x1e0 [ 212.085321][ T7947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.085340][ T7947] ? __pfx_path_openat+0x10/0x10 [ 212.085368][ T7947] do_file_open+0x20e/0x430 [ 212.085389][ T7947] ? __pfx_do_file_open+0x10/0x10 [ 212.085423][ T7947] ? alloc_fd+0x476/0x790 [ 212.085446][ T7947] ? do_getname+0x191/0x390 [ 212.085469][ T7947] do_sys_openat2+0x10d/0x1e0 [ 212.085490][ T7947] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.085510][ T7947] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.085536][ T7947] ? __fget_files+0x21f/0x3d0 [ 212.085559][ T7947] __x64_sys_openat+0x12d/0x210 [ 212.085581][ T7947] ? __pfx___x64_sys_openat+0x10/0x10 [ 212.085603][ T7947] ? ksys_write+0x1ac/0x250 [ 212.085623][ T7947] ? rcu_is_watching+0x12/0xc0 [ 212.085651][ T7947] do_syscall_64+0x115/0x870 [ 212.085670][ T7947] ? clear_bhb_loop+0x40/0x90 [ 212.085688][ T7947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.085704][ T7947] RIP: 0033:0x7f96a699ce59 [ 212.085717][ T7947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.085732][ T7947] RSP: 002b:00007f96a78bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.085747][ T7947] RAX: ffffffffffffffda RBX: 00007f96a6c15fa0 RCX: 00007f96a699ce59 [ 212.085757][ T7947] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000006 [ 212.085767][ T7947] RBP: 00007f96a78bd090 R08: 0000000000000000 R09: 0000000000000000 [ 212.085776][ T7947] R10: 000000000000011b R11: 0000000000000246 R12: 0000000000000001 [ 212.085785][ T7947] R13: 00007f96a6c16038 R14: 00007f96a6c15fa0 R15: 00007ffee31c0a28 [ 212.085807][ T7947] [ 212.461488][ T10] usb 1-1: Manufacturer: syz [ 212.519251][ T10] usb 1-1: SerialNumber: syz [ 212.550529][ T10] usb 1-1: config 0 descriptor?? [ 212.580298][ T7954] snd_dummy snd_dummy.0: control 6:6:0:syz0:-259 is already present [ 212.972362][ T7960] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 212.987711][ T7960] Error validating options; rc = [-22] [ 213.036502][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 213.064373][ T7954] kAFS: No cell specified [ 213.392958][ T5728] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 213.556054][ T5715] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 213.577361][ T5728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.592109][ T5728] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.621143][ T5728] usb 5-1: config 1 has no interface number 0 [ 213.645561][ T5728] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.683073][ T5728] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 213.732531][ T5728] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 213.772452][ T5728] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.781903][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.801281][ T5728] usb 5-1: Product: syz [ 213.807993][ T5728] usb 5-1: Manufacturer: syz [ 213.815687][ T5728] usb 5-1: SerialNumber: syz [ 213.833049][ T7954] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 214.115349][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 214.146576][ T10] usb 1-1: USB disconnect, device number 17 [ 214.292097][ T7954] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 214.482819][ T5741] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 214.524813][ T5728] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 214.538074][ T5728] cdc_ncm 5-1:1.1: bind() failure [ 214.568741][ T5728] usb 5-1: USB disconnect, device number 18 [ 214.667585][ T5741] usb 6-1: Using ep0 maxpacket: 16 [ 214.703503][ T5741] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.731867][ T5741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.760045][ T5741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.787530][ T5741] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 214.813201][ T5741] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.842213][ T5741] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.856172][ T5708] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 214.862125][ T5741] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 214.882599][ T5741] usb 6-1: Manufacturer: syz [ 214.903776][ T5741] usb 6-1: config 0 descriptor?? [ 215.003482][ T7973] binder: 7972:7973 ioctl 4018620d 0 returned -22 [ 215.034490][ T7973] binder: 7972:7973 ioctl c0306201 200000000040 returned -22 [ 215.050456][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 215.062213][ T7973] binder: 7972:7973 ioctl c0306201 200000000640 returned -22 [ 215.074247][ T5708] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 215.091859][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.117994][ T5708] usb 4-1: Product: syz [ 215.130768][ T5708] usb 4-1: Manufacturer: syz [ 215.148917][ T5708] usb 4-1: SerialNumber: syz [ 215.219251][ T5741] rc_core: IR keymap rc-hauppauge not found [ 215.244298][ T5741] Registered IR keymap rc-empty [ 215.255979][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.294114][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.327162][ T5741] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 215.356077][ T5741] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 215.393208][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.444391][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.476254][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.487732][ T5862] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 215.502319][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 215.539789][ T5728] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 215.547533][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.582505][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.603871][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.646934][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.668768][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 215.685930][ T5862] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 215.700715][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.703406][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.731864][ T5862] usb 1-1: Product: syz [ 215.747485][ T5862] usb 1-1: Manufacturer: syz [ 215.753410][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 215.758809][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.760778][ T5862] usb 1-1: SerialNumber: syz [ 215.775610][ T5708] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.786825][ T5708] usb 4-1: invalid MIDI out EP 0 [ 215.793909][ T5728] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 215.806692][ T5862] usb 1-1: config 0 descriptor?? [ 215.830985][ T5741] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.838127][ T5728] usb 5-1: config 0 has no interface number 0 [ 215.851491][ T5728] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.882415][ T5728] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 215.900755][ T5741] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 215.919801][ T5741] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 215.930166][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.954976][ T5728] usb 5-1: Product: syz [ 215.971317][ T5741] usb 6-1: USB disconnect, device number 14 [ 215.984207][ T5728] usb 5-1: Manufacturer: syz [ 216.010643][ T5728] usb 5-1: SerialNumber: syz [ 216.030441][ T5728] usb 5-1: config 0 descriptor?? [ 216.067529][ T5728] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 216.106405][ T5728] em28xx 5-1:0.132: Video interface 132 found: [ 216.148981][ T5708] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 216.176664][ T5708] usb 4-1: USB disconnect, device number 22 [ 216.231293][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.361572][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 216.361637][ T30] audit: type=1400 audit(1780416299.329:1652): avc: denied { write } for pid=6406 comm="syz-executor" name="63" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 216.403006][ T7980] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 216.411910][ T7980] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 216.424130][ T7980] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 216.611991][ T5728] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 216.665014][ T30] audit: type=1400 audit(1780416299.394:1653): avc: denied { firmware_load } for pid=7975 comm="syz.0.529" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 216.792567][ T5862] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 216.852404][ T30] audit: type=1400 audit(1780416299.432:1654): avc: denied { write } for pid=6406 comm="syz-executor" name="63" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 217.020091][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.077310][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.530'. [ 217.154372][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.185696][ T30] audit: type=1400 audit(1780416299.451:1655): avc: denied { write } for pid=6406 comm="syz-executor" name="63" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 217.379261][ T7978] overlayfs: missing 'lowerdir' [ 217.521428][ T30] audit: type=1400 audit(1780416299.479:1656): avc: denied { write } for pid=6406 comm="syz-executor" name="63" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 217.900039][ T5728] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 217.947846][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.058437][ T5728] em28xx 5-1:0.132: board has no eeprom [ 218.066105][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.218361][ T7978] trusted_key: encrypted_key: insufficient parameters specified [ 218.509188][ T5728] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 218.569353][ T5728] em28xx 5-1:0.132: analog set to bulk mode. [ 218.603782][ T7992] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 218.657915][ T5715] em28xx 5-1:0.132: Registering V4L2 extension [ 218.675464][ T30] audit: type=1400 audit(1780416301.501:1657): avc: denied { wake_alarm } for pid=7989 comm="syz.5.532" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.704537][ T5728] usb 5-1: USB disconnect, device number 19 [ 218.720114][ T5728] em28xx 5-1:0.132: Disconnecting em28xx [ 218.829165][ T7992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.120999][ T7998] snd_dummy snd_dummy.0: control 6:6:0:syz0:-259 is already present [ 219.146781][ T5715] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 219.154274][ T5715] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 219.161440][ T5715] em28xx 5-1:0.132: No AC97 audio processor [ 219.201974][ T7991] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 219.230596][ T5715] usb 5-1: Decoder not found [ 219.257750][ T5715] em28xx 5-1:0.132: failed to create media graph [ 219.283740][ T5715] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 219.780840][ T5715] em28xx 5-1:0.132: Remote control support is not available for this card. [ 219.811866][ T5728] em28xx 5-1:0.132: Closing input extension [ 219.850703][ T5728] em28xx 5-1:0.132: Freeing device [ 219.867591][ T8006] snd_dummy snd_dummy.0: control 6:6:0:syz0:-259 is already present [ 219.886990][ T5350] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 219.925484][ T7996] binder: BINDER_SET_CONTEXT_MGR already set [ 219.972559][ T7996] binder: 7989:7996 ioctl 4018620d 200000000040 returned -16 [ 220.050049][ T5350] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.068307][ T5350] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.077259][ T5350] usb 4-1: config 1 has no interface number 0 [ 220.083758][ T5350] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.095138][ T5350] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 220.107276][ T5350] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 220.118651][ T5350] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.127997][ T5350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.137058][ T5350] usb 4-1: Product: syz [ 220.141289][ T5350] usb 4-1: Manufacturer: syz [ 220.146339][ T5350] usb 4-1: SerialNumber: syz [ 220.156198][ T8004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.271292][ T5728] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 220.427804][ T5620] usb 1-1: USB disconnect, device number 18 [ 220.436028][ T5728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.460252][ T5728] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.474015][ T5728] usb 5-1: config 1 has no interface number 0 [ 220.482049][ T5728] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.509328][ T5728] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 220.529538][ T5728] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 220.557774][ T30] audit: type=1400 audit(1780416303.261:1658): avc: denied { bind } for pid=8014 comm="syz.5.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.558660][ T5728] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.578251][ T8021] netlink: 'syz.1.535': attribute type 1 has an invalid length. [ 220.599436][ T7998] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.611727][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.621063][ T5728] usb 5-1: Product: syz [ 220.628206][ T5728] usb 5-1: Manufacturer: syz [ 220.637319][ T5728] usb 5-1: SerialNumber: syz [ 220.651707][ T8021] bond3: entered promiscuous mode [ 220.657469][ T8021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.659431][ T8006] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 220.689399][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 220.700228][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 220.727635][ T30] audit: type=1326 audit(1780416303.420:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.0.538" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94dc39ce59 code=0x0 [ 220.756128][ T8018] bond3: (slave bridge1): making interface the new active one [ 220.763646][ T8018] bridge1: entered promiscuous mode [ 220.770052][ T8018] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 220.836409][ T5350] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 220.842619][ T5350] cdc_ncm 4-1:1.1: bind() failure [ 220.856720][ T5618] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 220.857140][ T8029] netlink: 32 bytes leftover after parsing attributes in process `syz.1.539'. [ 220.873887][ T5350] usb 4-1: USB disconnect, device number 23 [ 221.127866][ T8006] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 221.366948][ T5728] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 221.377317][ T5728] cdc_ncm 5-1:1.1: bind() failure [ 221.582584][ T5728] usb 5-1: USB disconnect, device number 20 [ 221.883409][ T8043] FAULT_INJECTION: forcing a failure. [ 221.883409][ T8043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.898033][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.0.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.898059][ T8043] Tainted: [L]=SOFTLOCKUP [ 221.898065][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.898074][ T8043] Call Trace: [ 221.898080][ T8043] [ 221.898086][ T8043] dump_stack_lvl+0x100/0x190 [ 221.898113][ T8043] should_fail_ex.cold+0x5/0xa [ 221.898137][ T8043] _copy_from_user+0x2e/0xd0 [ 221.898159][ T8043] video_usercopy+0xe74/0x1700 [ 221.898182][ T8043] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 221.898203][ T8043] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 221.898229][ T8043] ? __pfx_video_usercopy+0x10/0x10 [ 221.898266][ T8043] v4l2_ioctl+0x1bd/0x250 [ 221.898291][ T8043] ? __pfx_v4l2_ioctl+0x10/0x10 [ 221.898312][ T8043] __x64_sys_ioctl+0x18e/0x210 [ 221.898332][ T8043] do_syscall_64+0x115/0x870 [ 221.898353][ T8043] ? clear_bhb_loop+0x40/0x90 [ 221.898373][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.898391][ T8043] RIP: 0033:0x7f94dc39ce59 [ 221.898405][ T8043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.898422][ T8043] RSP: 002b:00007f94dd29b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.898439][ T8043] RAX: ffffffffffffffda RBX: 00007f94dc615fa0 RCX: 00007f94dc39ce59 [ 221.898450][ T8043] RDX: 0000200000000380 RSI: 000000004020565b RDI: 0000000000000003 [ 221.898461][ T8043] RBP: 00007f94dd29b090 R08: 0000000000000000 R09: 0000000000000000 [ 221.898471][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.898480][ T8043] R13: 00007f94dc616038 R14: 00007f94dc615fa0 R15: 00007ffc79304198 [ 221.898504][ T8043] [ 222.241240][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.5.546'. [ 222.501054][ T8062] input: syz1 as /devices/virtual/input/input23 [ 223.182539][ T30] audit: type=1326 audit(1780416305.723:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.1.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a699ce59 code=0x7fc00000 [ 223.241669][ T30] audit: type=1326 audit(1780416305.723:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.1.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96a699ce59 code=0x7fc00000 [ 223.268531][ T30] audit: type=1326 audit(1780416305.723:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.1.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a699ce59 code=0x7fc00000 [ 223.776529][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.553'. [ 223.797481][ T8084] netlink: 90 bytes leftover after parsing attributes in process `syz.1.553'. [ 223.840248][ T8084] netlink: 90 bytes leftover after parsing attributes in process `syz.1.553'. [ 223.914772][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.555'. [ 223.923678][ T8092] netlink: 90 bytes leftover after parsing attributes in process `syz.4.555'. [ 223.956578][ T8092] netlink: 90 bytes leftover after parsing attributes in process `syz.4.555'. [ 224.127166][ T8095] netlink: 32 bytes leftover after parsing attributes in process `syz.5.557'. [ 224.170119][ T5862] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 224.171946][ T5728] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 224.257143][ T5708] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 224.353528][ T5862] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.371130][ T5862] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 224.383338][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 224.383580][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.400302][ T5862] usb 2-1: Product: syz [ 224.404522][ T5862] usb 2-1: Manufacturer: syz [ 224.420202][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.429380][ T5862] usb 2-1: SerialNumber: syz [ 224.447455][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.449969][ T5708] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.474954][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.476971][ T5862] usb 2-1: config 0 descriptor?? [ 224.502830][ T5728] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 224.506569][ T5708] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 224.524560][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.531903][ T5728] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.536621][ T5708] usb 5-1: Product: syz [ 224.549844][ T5708] usb 5-1: Manufacturer: syz [ 224.555996][ T5708] usb 5-1: SerialNumber: syz [ 224.568074][ T5728] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.576482][ T5708] usb 5-1: config 0 descriptor?? [ 224.582205][ T5728] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.591749][ T5728] usb 1-1: Manufacturer: syz [ 224.601784][ T5728] usb 1-1: config 0 descriptor?? [ 224.903455][ T5862] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 224.987317][ T5708] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 225.072188][ T5728] rc_core: IR keymap rc-hauppauge not found [ 225.078807][ T5728] Registered IR keymap rc-empty [ 225.089288][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.121434][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.154767][ T5728] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 225.191411][ T5728] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 225.211786][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.237938][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.259373][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.280643][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.302014][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.323448][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.345641][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.366286][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.388640][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.409344][ T8110] input: syz1 as /devices/virtual/input/input25 [ 225.418606][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 225.473032][ T29] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 225.474570][ T5728] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 225.625462][ T5728] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 225.684177][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.700960][ T5728] usb 1-1: USB disconnect, device number 19 [ 225.732526][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 225.775260][ T29] usb 4-1: config 3 has an invalid interface number: 166 but max is 0 [ 225.817427][ T29] usb 4-1: config 3 has no interface number 0 [ 225.850932][ T29] usb 4-1: config 3 interface 166 has no altsetting 0 [ 225.880509][ T29] usb 4-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=e8.db [ 225.891534][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.900171][ T29] usb 4-1: Product: syz [ 225.904712][ T29] usb 4-1: Manufacturer: syz [ 225.909618][ T29] usb 4-1: SerialNumber: syz [ 226.072493][ T30] audit: type=1326 audit(1780416308.429:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.5.560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4beeb9ce59 code=0x7fc00000 [ 226.111551][ T30] audit: type=1326 audit(1780416308.448:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.5.560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4beeb9ce59 code=0x7fc00000 [ 226.149491][ T5862] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 226.159965][ T5708] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 226.175511][ T30] audit: type=1326 audit(1780416308.448:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.5.560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4beeb9ce59 code=0x7fc00000 [ 226.192963][ T5708] usb 5-1: USB disconnect, device number 21 [ 226.207057][ T8113] FAULT_INJECTION: forcing a failure. [ 226.207057][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 226.221300][ T5862] usb 2-1: USB disconnect, device number 30 [ 226.244166][ T8113] CPU: 0 UID: 0 PID: 8113 Comm: syz.5.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.244193][ T8113] Tainted: [L]=SOFTLOCKUP [ 226.244199][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.244209][ T8113] Call Trace: [ 226.244215][ T8113] [ 226.244221][ T8113] dump_stack_lvl+0x100/0x190 [ 226.244247][ T8113] should_fail_ex.cold+0x5/0xa [ 226.244271][ T8113] should_failslab+0xc2/0x120 [ 226.244290][ T8113] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 226.244318][ T8113] ? __alloc_skb+0x140/0x710 [ 226.244346][ T8113] __alloc_skb+0x140/0x710 [ 226.244369][ T8113] ? __alloc_skb+0x5b7/0x710 [ 226.244392][ T8113] ? __pfx___alloc_skb+0x10/0x10 [ 226.244415][ T8113] ? sctp_chunk_put+0x20a/0x2d0 [ 226.244442][ T8113] ? kasan_quarantine_put+0x104/0x240 [ 226.244471][ T8113] skb_copy_expand+0x1d4/0x410 [ 226.244493][ T8113] ? sctp_chunk_put+0x20a/0x2d0 [ 226.244519][ T8113] sctp_ulpevent_make_send_failed+0xb4/0x9f0 [ 226.244544][ T8113] sctp_datamsg_put+0x368/0x5f0 [ 226.244572][ T8113] sctp_chunk_free+0x45/0x60 [ 226.244592][ T8113] __sctp_outq_teardown+0x70a/0xc40 [ 226.244610][ T8113] ? find_held_lock+0x2b/0x80 [ 226.244627][ T8113] sctp_association_free+0x210/0x7d0 [ 226.244647][ T8113] sctp_do_sm+0x1594/0x5be0 [ 226.244672][ T8113] ? __pfx_sctp_do_sm+0x10/0x10 [ 226.244687][ T8113] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 226.244703][ T8113] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 226.244742][ T8113] ? do_raw_spin_lock+0x128/0x260 [ 226.244765][ T8113] sctp_primitive_SHUTDOWN+0x9f/0xd0 [ 226.244786][ T8113] sctp_shutdown+0x137/0x180 [ 226.244807][ T8113] ? __pfx_sctp_shutdown+0x10/0x10 [ 226.244828][ T8113] inet_shutdown+0x1a5/0x410 [ 226.244848][ T8113] __sys_shutdown+0x116/0x1b0 [ 226.244871][ T8113] __x64_sys_shutdown+0x53/0x80 [ 226.244892][ T8113] do_syscall_64+0x115/0x870 [ 226.244913][ T8113] ? clear_bhb_loop+0x40/0x90 [ 226.244930][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.244944][ T8113] RIP: 0033:0x7f4beeb9ce59 [ 226.244958][ T8113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.244971][ T8113] RSP: 002b:00007f4becdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 226.244986][ T8113] RAX: ffffffffffffffda RBX: 00007f4beee16090 RCX: 00007f4beeb9ce59 [ 226.244995][ T8113] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 226.245003][ T8113] RBP: 00007f4becdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 226.245011][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.245019][ T8113] R13: 00007f4beee16128 R14: 00007f4beee16090 R15: 00007ffdc1cd98c8 [ 226.245039][ T8113] [ 226.575337][ T29] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 226.582950][ T29] gspca_sn9c20x: Write register 1000 failed -71 [ 226.591226][ T29] gspca_sn9c20x: Device initialization failed [ 226.603350][ T29] gspca_sn9c20x 4-1:3.166: probe with driver gspca_sn9c20x failed with error -71 [ 226.868355][ T30] audit: type=1400 audit(1780416309.010:1666): avc: denied { ioctl } for pid=8115 comm="syz.5.563" path="socket:[17906]" dev="sockfs" ino=17906 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.881970][ T29] usb 4-1: USB disconnect, device number 24 [ 227.017201][ T30] audit: type=1400 audit(1780416309.300:1667): avc: denied { read append } for pid=8118 comm="syz.0.564" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 227.048201][ T30] audit: type=1400 audit(1780416309.300:1668): avc: denied { open } for pid=8118 comm="syz.0.564" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 227.073987][ T8119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.229351][ T8123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.568'. [ 227.280509][ T30] audit: type=1400 audit(1780416309.562:1669): avc: denied { setopt } for pid=8129 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.643187][ T5862] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 227.696047][ T29] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 227.865743][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 227.969608][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.019752][ T29] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 228.053559][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.091491][ T29] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 228.116068][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 228.151396][ T29] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 228.168851][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 228.190345][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.210177][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.237074][ T29] usb 2-1: Product: syz [ 228.280950][ T29] usb 2-1: Manufacturer: syz [ 228.337815][ T29] usb 2-1: SerialNumber: syz [ 228.356736][ T5862] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 228.382730][ T5862] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 228.670831][ T5862] usb 5-1: Manufacturer: syz [ 228.672895][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 228.672907][ T30] audit: type=1326 audit(1780416310.854:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9a19ce59 code=0x7fc00000 [ 228.763249][ T5862] usb 5-1: config 0 descriptor?? [ 228.837768][ T30] audit: type=1326 audit(1780416310.929:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.575" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dc39ce59 code=0x7fc00000 [ 228.868825][ T30] audit: type=1326 audit(1780416310.929:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.575" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94dc39ce59 code=0x7fc00000 [ 229.085860][ T8165] netlink: 32 bytes leftover after parsing attributes in process `syz.5.580'. [ 229.172551][ T30] audit: type=1400 audit(1780416311.332:1674): avc: denied { link } for pid=8139 comm="syz.1.573" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 229.202054][ T5862] rc_core: IR keymap rc-hauppauge not found [ 229.218762][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.219699][ T5862] Registered IR keymap rc-empty [ 229.230100][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.239086][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.286948][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.299640][ T29] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 229.341810][ T5862] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 229.375108][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 229.397459][ T29] usb 2-1: USB disconnect, device number 31 [ 229.421332][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.478229][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.675326][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.702641][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.735191][ T6848] udevd[6848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.752072][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.777660][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.938909][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.227037][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.258125][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.279429][ T5862] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.303586][ T5862] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 230.331996][ T5862] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 230.667647][ T5862] usb 5-1: USB disconnect, device number 22 [ 230.671887][ T30] audit: type=1326 audit(1780416312.717:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.0.587" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dc39ce59 code=0x7fc00000 [ 230.737314][ T8200] netlink: 256 bytes leftover after parsing attributes in process `syz.5.591'. [ 230.747987][ T8200] netlink: 72 bytes leftover after parsing attributes in process `syz.5.591'. [ 230.757083][ T30] audit: type=1326 audit(1780416312.736:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.0.587" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94dc39ce59 code=0x7fc00000 [ 230.816736][ T8201] netlink: 'syz.4.590': attribute type 16 has an invalid length. [ 230.828450][ T8201] netlink: 'syz.4.590': attribute type 17 has an invalid length. [ 230.845127][ T30] audit: type=1400 audit(1780416312.680:1675): avc: denied { write } for pid=5616 comm="syz-executor" name="127" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 230.892062][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.592'. [ 230.937381][ T30] audit: type=1400 audit(1780416312.736:1678): avc: denied { write } for pid=5616 comm="syz-executor" name="127" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 231.045012][ T30] audit: type=1400 audit(1780416312.736:1679): avc: denied { write } for pid=5616 comm="syz-executor" name="127" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 231.133487][ T30] audit: type=1400 audit(1780416312.736:1680): avc: denied { write } for pid=5616 comm="syz-executor" name="127" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 231.207202][ T8207] loop2: detected capacity change from 0 to 7 [ 231.246541][ T8207] Dev loop2: unable to read RDB block 7 [ 231.263919][ T8207] loop2: AHDI p1 p2 p3 [ 231.306422][ T8207] loop2: partition table partially beyond EOD, truncated [ 231.368017][ T8207] loop2: p1 start 1601398130 is beyond EOD, truncated [ 231.413942][ T8207] loop2: p2 start 1702059890 is beyond EOD, truncated [ 231.633965][ T8194] syz.1.589 (8194): drop_caches: 2 [ 232.278848][ T8228] snd_dummy snd_dummy.0: control 6:6:0:syz0:-259 is already present [ 232.302428][ T8228] kAFS: No cell specified [ 232.717286][ T5350] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 232.921492][ T5350] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.969012][ T5350] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.129248][ T5350] usb 5-1: config 1 has no interface number 0 [ 233.140873][ T5350] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.291061][ T5350] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 233.331491][ T5350] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 233.354285][ T5350] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.370986][ T5350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.391082][ T5350] usb 5-1: Product: syz [ 233.400955][ T5350] usb 5-1: Manufacturer: syz [ 233.411767][ T5350] usb 5-1: SerialNumber: syz [ 233.427605][ T8228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.866618][ T8228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 234.097114][ T5350] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 234.150223][ T5350] cdc_ncm 5-1:1.1: bind() failure [ 234.310419][ T5350] usb 5-1: USB disconnect, device number 23 [ 234.443284][ T8264] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 234.443800][ T8266] overlayfs: missing 'lowerdir' [ 234.449793][ T8264] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 234.466721][ T8264] vhci_hcd vhci_hcd.0: Device attached [ 234.504759][ T8267] vhci_hcd: connection closed [ 234.507359][ T13] vhci_hcd vhci_hcd.3: stop threads [ 234.518125][ T13] vhci_hcd vhci_hcd.3: release socket [ 234.524373][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 234.751961][ T8270] loop2: detected capacity change from 0 to 7 [ 234.773263][ T8270] Dev loop2: unable to read RDB block 7 [ 234.782488][ T8270] loop2: AHDI p1 p2 p3 [ 234.787308][ T8270] loop2: partition table partially beyond EOD, truncated [ 234.796514][ T8270] loop2: p1 start 1601398130 is beyond EOD, truncated [ 234.806397][ T8270] loop2: p2 start 1702059890 is beyond EOD, truncated [ 234.985868][ T5618] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 235.152296][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 235.204933][ T8283] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 235.697507][ T8289] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 235.710949][ T8289] Error validating options; rc = [-22] [ 237.303723][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 237.303739][ T30] audit: type=1326 audit(1780416318.737:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8294 comm="syz.0.617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dc39ce59 code=0x7fc00000 [ 237.478811][ T8317] snd_dummy snd_dummy.0: control 6:6:0:syz0:-259 is already present [ 237.490896][ T8317] kAFS: No cell specified [ 237.766956][ T30] audit: type=1326 audit(1780416319.365:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.5.620" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4beeb9ce59 code=0x7fc00000 [ 237.908243][ T5803] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 237.940592][ T5618] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 238.218845][ T8334] misc userio: Can't change port type on an already running userio instance [ 239.006916][ T5803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.017272][ T5803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.026149][ T5803] usb 5-1: config 1 has no interface number 0 [ 239.032707][ T5803] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.033263][ T8336] smc: net device wlan0 applied user defined pnetid SYZ1 [ 239.048342][ T5803] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 239.069881][ T5803] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 239.093270][ T5803] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.113218][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.134251][ T29] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 239.145227][ T5803] usb 5-1: Product: syz [ 239.158609][ T5803] usb 5-1: Manufacturer: syz [ 239.174179][ T5803] usb 5-1: SerialNumber: syz [ 239.241034][ T8317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.347886][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 239.375251][ T29] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 239.385009][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.398082][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.417600][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.429720][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.446652][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.458835][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.729987][ T8317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.983077][ T29] usb 4-1: usb_control_msg returned -32 [ 239.992209][ T5803] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 240.000272][ T29] usbtmc 4-1:16.0: can't read capabilities [ 240.006203][ T5803] cdc_ncm 5-1:1.1: bind() failure [ 240.035656][ T5803] usb 5-1: USB disconnect, device number 24 [ 240.119518][ T30] audit: type=1326 audit(1780416321.583:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dc39ce59 code=0x7fc00000 [ 240.197080][ T30] audit: type=1326 audit(1780416321.583:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94dc39ce59 code=0x7fc00000 [ 240.297081][ T8354] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 240.502321][ T30] audit: type=1326 audit(1780416321.583:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dc39ce59 code=0x7fc00000 [ 240.565277][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 240.827850][ T5708] usb 4-1: USB disconnect, device number 25 [ 240.865779][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.635'. [ 240.892969][ T8359] netlink: 90 bytes leftover after parsing attributes in process `syz.4.635'. [ 240.918435][ T8359] netlink: 90 bytes leftover after parsing attributes in process `syz.4.635'. [ 240.984118][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.996977][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.006984][ T29] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 241.019533][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.103890][ T29] usb 6-1: config 0 descriptor?? [ 241.206021][ T5803] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 241.337259][ T30] audit: type=1326 audit(1780416322.707:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.0.634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dc39ce59 code=0x7fc00000 [ 241.432246][ T5803] usb 5-1: config 0 interface 0 has no altsetting 0 [ 241.450296][ T5618] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 241.472515][ T5803] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.493919][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.503205][ T5803] usb 5-1: Product: syz [ 241.507515][ T5803] usb 5-1: Manufacturer: syz [ 241.512135][ T5803] usb 5-1: SerialNumber: syz [ 241.520159][ T5803] usb 5-1: config 0 descriptor?? [ 241.579141][ T30] audit: type=1400 audit(1780416322.922:1695): avc: denied { relabelfrom } for pid=8371 comm="syz.0.640" name="" dev="pipefs" ino=18506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 241.669856][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 241.688131][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 241.725814][ T29] usb 6-1: USB disconnect, device number 15 [ 241.727244][ T8383] dummy0: entered promiscuous mode [ 241.753441][ T5803] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 241.796205][ T8385] input: syz1 as /devices/virtual/input/input35 [ 241.840614][ T8383] xt_hashlimit: max too large, truncated to 1048576 [ 241.934253][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.646'. [ 241.959177][ T30] audit: type=1400 audit(1780416323.306:1696): avc: denied { name_bind } for pid=8391 comm="syz.0.647" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 242.022313][ T8392] kvm: kvm [8391]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 242.033222][ T8392] kvm: kvm [8391]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 242.960217][ T5618] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 243.079152][ T30] audit: type=1326 audit(1780416324.355:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.3.648" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9a19ce59 code=0x7fc00000 [ 243.144122][ T5803] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 243.160339][ T30] audit: type=1326 audit(1780416324.355:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.3.648" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f9a19ce59 code=0x7fc00000 [ 243.165455][ T5803] usb 5-1: USB disconnect, device number 25 [ 243.187398][ T30] audit: type=1326 audit(1780416324.355:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.3.648" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9a19ce59 code=0x7fc00000 [ 243.290867][ T5708] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 243.350817][ T8424] input: syz1 as /devices/virtual/input/input36 [ 243.363699][ T804] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 243.448957][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 243.450372][ T5708] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 243.475348][ T5708] usb 1-1: config 0 has no interface number 0 [ 243.481761][ T5708] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.677305][ T30] audit: type=1400 audit(1780416324.888:1700): avc: denied { append } for pid=8426 comm="syz.3.658" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 243.695122][ T5708] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 243.709073][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 243.714212][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.722401][ T5708] usb 1-1: Product: syz [ 243.727386][ T5708] usb 1-1: Manufacturer: syz [ 243.732231][ T5708] usb 1-1: SerialNumber: syz [ 243.737793][ T804] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 243.746581][ T804] usb 2-1: config 0 has no interface number 0 [ 243.753366][ T5708] usb 1-1: config 0 descriptor?? [ 243.758478][ T804] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.771234][ T5708] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 243.782444][ T5708] em28xx 1-1:0.132: Video interface 132 found: [ 243.789819][ T804] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 243.798935][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.810063][ T804] usb 2-1: Product: syz [ 243.814344][ T804] usb 2-1: Manufacturer: syz [ 243.818994][ T804] usb 2-1: SerialNumber: syz [ 243.825445][ T804] usb 2-1: config 0 descriptor?? [ 243.833276][ T804] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 243.843155][ T804] em28xx 2-1:0.132: Video interface 132 found: [ 244.135055][ T8436] snd_dummy snd_dummy.0: control 6:6:0:syz0:-259 is already present [ 244.235800][ T5708] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 244.275953][ T804] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 244.309983][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.663'. [ 244.453176][ T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 244.462121][ T5618] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 244.477497][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.487665][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.502232][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.522084][ T8409] overlayfs: missing 'lowerdir' [ 244.528502][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.543217][ T8413] overlayfs: missing 'lowerdir' [ 244.640375][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.651637][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 244.728807][ T10] usb 5-1: config 1 has no interface number 0 [ 244.769618][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.884127][ T804] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 244.885481][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.899055][ T5708] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 244.986407][ T804] em28xx 2-1:0.132: board has no eeprom [ 244.992197][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 244.994338][ T5708] em28xx 1-1:0.132: board has no eeprom [ 245.009190][ T10] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 245.011324][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.018468][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.035308][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.045200][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.054681][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.054948][ T8413] trusted_key: encrypted_key: insufficient parameters specified [ 245.074429][ T8409] trusted_key: encrypted_key: insufficient parameters specified [ 245.082233][ T10] usb 5-1: Product: syz [ 245.087869][ T10] usb 5-1: Manufacturer: syz [ 245.093136][ T10] usb 5-1: SerialNumber: syz [ 245.107255][ T8436] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 245.147243][ T804] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 245.155195][ T804] em28xx 2-1:0.132: analog set to bulk mode. [ 245.161284][ T5708] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 245.170010][ T5803] em28xx 2-1:0.132: Registering V4L2 extension [ 245.178074][ T5708] em28xx 1-1:0.132: analog set to bulk mode. [ 245.185242][ T804] usb 2-1: USB disconnect, device number 32 [ 245.193423][ T804] em28xx 2-1:0.132: Disconnecting em28xx [ 245.209084][ T5708] usb 1-1: USB disconnect, device number 20 [ 245.226671][ T5708] em28xx 1-1:0.132: Disconnecting em28xx [ 245.353160][ T5803] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 245.363542][ T5803] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 245.370783][ T5803] em28xx 2-1:0.132: No AC97 audio processor [ 245.388470][ T5803] usb 2-1: Decoder not found [ 245.393457][ T5803] em28xx 2-1:0.132: failed to create media graph [ 245.393897][ T8458] FAULT_INJECTION: forcing a failure. [ 245.393897][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 245.399837][ T5803] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 245.437538][ T30] audit: type=1326 audit(1780416326.536:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9a19ce59 code=0x7fc00000 [ 245.439663][ T5803] em28xx 2-1:0.132: Remote control support is not available for this card. [ 245.487658][ T8458] CPU: 1 UID: 0 PID: 8458 Comm: syz.5.667 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.487685][ T8458] Tainted: [L]=SOFTLOCKUP [ 245.487691][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.487700][ T8458] Call Trace: [ 245.487706][ T8458] [ 245.487713][ T8458] dump_stack_lvl+0x100/0x190 [ 245.487737][ T8458] should_fail_ex.cold+0x5/0xa [ 245.487761][ T8458] ? tomoyo_encode2+0xfb/0x3c0 [ 245.487785][ T8458] should_failslab+0xc2/0x120 [ 245.487804][ T8458] __kmalloc_noprof+0xe0/0x850 [ 245.487827][ T8458] ? d_absolute_path+0x136/0x1b0 [ 245.487851][ T8458] tomoyo_encode2+0xfb/0x3c0 [ 245.487878][ T8458] tomoyo_encode+0x29/0x50 [ 245.487901][ T8458] tomoyo_realpath_from_path+0x18c/0x690 [ 245.487931][ T8458] tomoyo_path_number_perm+0x23c/0x580 [ 245.487953][ T8458] ? tomoyo_path_number_perm+0x22e/0x580 [ 245.487977][ T8458] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.488023][ T8458] ? find_held_lock+0x2b/0x80 [ 245.488038][ T8458] ? __fget_files+0x215/0x3d0 [ 245.488057][ T8458] ? hook_file_ioctl_common+0x149/0x410 [ 245.488074][ T8458] ? __fget_files+0x215/0x3d0 [ 245.488105][ T8458] ? __fget_files+0x21f/0x3d0 [ 245.488130][ T8458] security_file_ioctl+0xd3/0x230 [ 245.488154][ T8458] __x64_sys_ioctl+0xb7/0x210 [ 245.488172][ T8458] do_syscall_64+0x115/0x870 [ 245.488193][ T8458] ? clear_bhb_loop+0x40/0x90 [ 245.488211][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.488226][ T8458] RIP: 0033:0x7f4beeb9ce59 [ 245.488239][ T8458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.488252][ T8458] RSP: 002b:00007f4bef983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.488265][ T8458] RAX: ffffffffffffffda RBX: 00007f4beee15fa0 RCX: 00007f4beeb9ce59 [ 245.488275][ T8458] RDX: 0000200000000000 RSI: 00000000c0305602 RDI: 0000000000000003 [ 245.488284][ T8458] RBP: 00007f4bef983090 R08: 0000000000000000 R09: 0000000000000000 [ 245.488293][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.488303][ T8458] R13: 00007f4beee16038 R14: 00007f4beee15fa0 R15: 00007ffdc1cd98c8 [ 245.488324][ T8458] [ 245.488340][ T8458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.716531][ T8461] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 245.732751][ T804] em28xx 2-1:0.132: Closing input extension [ 245.741812][ T5862] em28xx 1-1:0.132: Registering V4L2 extension [ 246.002217][ T10] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 246.129067][ T10] cdc_ncm 5-1:1.1: bind() failure [ 246.135467][ T804] em28xx 2-1:0.132: Freeing device [ 246.144820][ T10] usb 5-1: USB disconnect, device number 26 [ 246.696043][ T5350] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 246.830422][ T5862] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 246.872321][ T5862] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 246.918688][ T5862] em28xx 1-1:0.132: No AC97 audio processor [ 246.941573][ T5618] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 246.956546][ T5862] usb 1-1: Decoder not found [ 246.967339][ T5862] em28xx 1-1:0.132: failed to create media graph [ 246.978976][ T5862] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 246.996372][ T5862] em28xx 1-1:0.132: Remote control support is not available for this card. [ 246.998938][ T5350] usb 6-1: Using ep0 maxpacket: 32 [ 247.006344][ T5708] em28xx 1-1:0.132: Closing input extension [ 247.019553][ T5708] em28xx 1-1:0.132: Freeing device [ 247.022331][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.674'. [ 247.059674][ T8482] netlink: 90 bytes leftover after parsing attributes in process `syz.3.674'. [ 247.061271][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.676'. [ 247.082899][ T8482] netlink: 90 bytes leftover after parsing attributes in process `syz.3.674'. [ 247.091706][ T5350] usb 6-1: unable to get BOS descriptor or descriptor too short [ 247.125442][ T5350] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 247.145119][ T5350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.169264][ T5350] usb 6-1: Product: syz [ 247.192310][ T5350] usb 6-1: Manufacturer: syz [ 247.217017][ T5350] usb 6-1: SerialNumber: syz [ 247.369189][ T5862] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 247.514038][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.680'. [ 247.592143][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.643413][ T5862] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.666133][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.676274][ T5862] usb 4-1: Product: syz [ 247.681437][ T5862] usb 4-1: Manufacturer: syz [ 247.686098][ T5862] usb 4-1: SerialNumber: syz [ 247.720077][ T5862] usb 4-1: config 0 descriptor?? [ 247.880957][ T5350] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 247.920235][ T5350] usb 6-1: USB disconnect, device number 16 [ 247.954368][ T5862] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.969941][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.020556][ T5708] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 248.083579][ T30] audit: type=1326 audit(1780416329.036:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.1.678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a699ce59 code=0x7fc00000 [ 248.123795][ T30] audit: type=1326 audit(1780416329.036:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.1.678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96a699ce59 code=0x7fc00000 [ 248.158074][ T30] audit: type=1326 audit(1780416329.036:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.1.678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a699ce59 code=0x7fc00000 [ 248.192934][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 248.201430][ T30] audit: type=1326 audit(1780416329.036:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.1.678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a699ce59 code=0x7fc00000 [ 248.204729][ T5708] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 248.240793][ T5708] usb 5-1: config 0 has no interface number 0 [ 248.247288][ T5708] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.260034][ T5708] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 248.270614][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.278887][ T5708] usb 5-1: Product: syz [ 248.283487][ T5708] usb 5-1: Manufacturer: syz [ 248.288304][ T5708] usb 5-1: SerialNumber: syz [ 248.304293][ T24] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 248.313210][ T5708] usb 5-1: config 0 descriptor?? [ 248.327826][ T5708] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 248.360820][ T5708] em28xx 5-1:0.132: Video interface 132 found: [ 248.513355][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 248.527815][ T5618] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 248.542655][ T24] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 248.558494][ T24] usb 1-1: Product: syz [ 248.562823][ T24] usb 1-1: Manufacturer: syz [ 248.568566][ T24] usb 1-1: SerialNumber: syz [ 248.585997][ T24] usb 1-1: config 0 descriptor?? [ 249.826402][ T5708] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 249.832708][ T5862] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 249.836300][ T30] audit: type=1400 audit(1780416330.103:1706): avc: denied { accept } for pid=8520 comm="syz.5.690" lport=35389 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 249.872620][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.873403][ T30] audit: type=1400 audit(1780416330.112:1707): avc: denied { write } for pid=8520 comm="syz.5.690" path="socket:[18948]" dev="sockfs" ino=18948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 249.908075][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.921359][ T30] audit: type=1400 audit(1780416330.112:1708): avc: denied { setopt } for pid=8520 comm="syz.5.690" lport=35389 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 249.994142][ T5803] usb 1-1: USB disconnect, device number 21 [ 250.101398][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.110390][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.137386][ T8499] overlayfs: missing 'lowerdir' [ 250.151848][ T5862] usb 4-1: USB disconnect, device number 26 [ 250.220496][ T8527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.692'. [ 250.380143][ T5708] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 250.393740][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.403260][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.411061][ T5708] em28xx 5-1:0.132: board has no eeprom [ 250.419476][ T8499] trusted_key: encrypted_key: insufficient parameters specified [ 250.430084][ T8532] input: syz1 as /devices/virtual/input/input37 [ 250.484626][ T30] audit: type=1400 audit(1780416331.283:1709): avc: denied { ioctl } for pid=8533 comm="syz.5.691" path="socket:[18967]" dev="sockfs" ino=18967 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.498550][ T5708] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 250.517730][ T5708] em28xx 5-1:0.132: analog set to bulk mode. [ 250.524986][ T5862] em28xx 5-1:0.132: Registering V4L2 extension [ 250.540014][ T5708] usb 5-1: USB disconnect, device number 27 [ 250.580517][ T5708] em28xx 5-1:0.132: Disconnecting em28xx [ 250.712926][ T30] audit: type=1400 audit(1780416331.498:1710): avc: denied { write } for pid=8542 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.717426][ T5862] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 250.835256][ T5862] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 250.842484][ T5862] em28xx 5-1:0.132: No AC97 audio processor [ 250.853529][ T5862] usb 5-1: Decoder not found [ 250.858119][ T5862] em28xx 5-1:0.132: failed to create media graph [ 250.864496][ T5862] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 250.873414][ T5862] em28xx 5-1:0.132: Remote control support is not available for this card. [ 250.882701][ T5708] em28xx 5-1:0.132: Closing input extension [ 250.889429][ T8547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.696'. [ 250.906540][ T5708] em28xx 5-1:0.132: Freeing device [ 250.967133][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 251.060021][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 251.084294][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 251.166208][ T30] audit: type=1326 audit(1780416331.919:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a699ce59 code=0x7fc00000 [ 251.203082][ T5618] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 251.844414][ T5708] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 252.314620][ T5708] usb 5-1: device descriptor read/64, error -71 [ 252.447556][ T30] audit: type=1400 audit(1780416333.118:1712): avc: denied { relabelto } for pid=8576 comm="syz.1.706" name="146" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 252.501409][ T5350] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 252.582186][ T5708] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 252.690919][ T5350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 252.704603][ T5350] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 252.714155][ T5350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.731125][ T5708] usb 5-1: device descriptor read/64, error -71 [ 252.745624][ T5350] usb 6-1: Product: syz [ 252.751102][ T5350] usb 6-1: Manufacturer: syz [ 252.755861][ T5350] usb 6-1: SerialNumber: syz [ 252.775759][ T5350] usb 6-1: config 0 descriptor?? [ 252.784376][ T5728] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 252.806850][ T8583] __nla_validate_parse: 8 callbacks suppressed [ 252.806864][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.709'. [ 252.849156][ T5708] usb usb5-port1: attempt power cycle [ 252.955328][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 252.961688][ T5728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.972435][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.983512][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.993194][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 253.002944][ T5728] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.015989][ T5350] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 253.025589][ T5728] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 253.034991][ T5728] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 253.043036][ T5728] usb 2-1: Manufacturer: syz [ 253.050897][ T5728] usb 2-1: config 0 descriptor?? [ 253.211655][ T5708] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 253.233505][ T5708] usb 5-1: device descriptor read/8, error -71 [ 253.329176][ T5728] rc_core: IR keymap rc-hauppauge not found [ 253.335305][ T5728] Registered IR keymap rc-empty [ 253.340523][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.362135][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.384915][ T5728] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 253.399964][ T5728] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 253.424709][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.431269][ T5618] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 253.447617][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.468090][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.490633][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.490645][ T5708] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 253.511402][ T5708] usb 5-1: device descriptor read/8, error -71 [ 253.521491][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.544234][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.564175][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.596288][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.605499][ T8592] input: syz1 as /devices/virtual/input/input39 [ 253.628555][ T5708] usb usb5-port1: unable to enumerate USB device [ 253.628563][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.649668][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 253.676075][ T5728] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 253.685987][ T5728] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 253.850736][ T5708] usb 2-1: USB disconnect, device number 33 [ 254.278944][ T5350] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 254.297123][ T5350] usb 6-1: USB disconnect, device number 17 [ 254.314610][ T8597] overlayfs: missing 'workdir' [ 254.374907][ T30] audit: type=1326 audit(1780416334.925:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.0.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dc39ce59 code=0x7fc00000 [ 254.459152][ T8600] snd_dummy snd_dummy.0: control 6:6:0:syz0:-259 is already present [ 254.577651][ T30] audit: type=1400 audit(1780416335.112:1714): avc: denied { write } for pid=5617 comm="syz-executor" name="146" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 254.605411][ T30] audit: type=1400 audit(1780416335.112:1715): avc: denied { remove_name } for pid=5617 comm="syz-executor" name="binderfs" dev="tmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 254.739162][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 254.925118][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.986073][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 255.309891][ T10] usb 1-1: config 1 has no interface number 0 [ 255.322995][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.347477][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 255.370034][ T10] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 255.391326][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.400567][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.413118][ T10] usb 1-1: Product: syz [ 255.417347][ T10] usb 1-1: Manufacturer: syz [ 255.422001][ T10] usb 1-1: SerialNumber: syz [ 255.435829][ T8600] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 255.766656][ T5708] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 255.831047][ T8620] input: syz1 as /devices/virtual/input/input40 [ 255.889660][ T8600] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 256.021079][ T5708] usb 6-1: Using ep0 maxpacket: 32 [ 256.070260][ T5708] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 256.101320][ T5708] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 256.113794][ T5708] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.125867][ T5708] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 256.142737][ T5708] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 256.162817][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.170177][ T10] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 256.177267][ T5708] usb 6-1: Product: syz [ 256.189922][ T5708] usb 6-1: Manufacturer: syz [ 256.203488][ T10] cdc_ncm 1-1:1.1: bind() failure [ 256.205967][ T5708] usb 6-1: SerialNumber: syz [ 256.215282][ T5618] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 256.229842][ T10] usb 1-1: USB disconnect, device number 22 [ 256.265624][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 256.327016][ T5708] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input41 [ 256.340485][ T8615] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 256.370430][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 256.398453][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 256.398467][ T30] audit: type=1326 audit(1780416336.825:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.4.718" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4439ce59 code=0x7fc00000 [ 256.491377][ T5708] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 256.514439][ T5708] (id 0x00) [ 256.597600][ T5708] rc_core: IR keymap rc-imon-pad not found [ 256.603452][ T5708] Registered IR keymap rc-empty [ 256.608479][ T5708] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 256.618732][ T5708] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 256.696293][ T8634] input: syz1 as /devices/virtual/input/input43 [ 256.707701][ T5708] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 256.739556][ T5708] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input42 [ 256.777973][ T5708] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:18> initialized [ 257.491763][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 257.951035][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 257.969320][ T30] audit: type=1326 audit(1780416338.286:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.4.724" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4439ce59 code=0x7fc00000 [ 257.975836][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.106211][ T5708] usb 6-1: USB disconnect, device number 18 [ 258.132810][ T8652] imon:send_packet: packet tx failed (-71) [ 258.155230][ T8671] FAULT_INJECTION: forcing a failure. [ 258.155230][ T8671] name failslab, interval 1, probability 0, space 0, times 0 [ 258.199986][ T8652] imon:vfd_write: send packet #0 failed [ 258.212077][ T8671] CPU: 1 UID: 0 PID: 8671 Comm: syz.3.727 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.212106][ T8671] Tainted: [L]=SOFTLOCKUP [ 258.212112][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.212122][ T8671] Call Trace: [ 258.212128][ T8671] [ 258.212135][ T8671] dump_stack_lvl+0x100/0x190 [ 258.212158][ T8671] should_fail_ex.cold+0x5/0xa [ 258.212182][ T8671] should_failslab+0xc2/0x120 [ 258.212202][ T8671] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 258.212228][ T8671] ? skb_clone+0x190/0x400 [ 258.212258][ T8671] skb_clone+0x190/0x400 [ 258.212286][ T8671] netlink_deliver_tap+0xaed/0xcc0 [ 258.212311][ T8671] netlink_unicast+0x62b/0x850 [ 258.212336][ T8671] ? __pfx_netlink_unicast+0x10/0x10 [ 258.212364][ T8671] netlink_sendmsg+0x8b0/0xda0 [ 258.212388][ T8671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.212409][ T8671] ? __might_fault+0x60/0x140 [ 258.212443][ T8671] ____sys_sendmsg+0x9e1/0xb70 [ 258.212462][ T8671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.212485][ T8671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.212516][ T8671] ___sys_sendmsg+0x190/0x1e0 [ 258.212539][ T8671] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.212590][ T8671] __sys_sendmsg+0x170/0x220 [ 258.212617][ T8671] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.212654][ T8671] ? rcu_is_watching+0x12/0xc0 [ 258.212683][ T8671] do_syscall_64+0x115/0x870 [ 258.212705][ T8671] ? clear_bhb_loop+0x40/0x90 [ 258.212726][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.212744][ T8671] RIP: 0033:0x7f1f9a19ce59 [ 258.212759][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.212775][ T8671] RSP: 002b:00007f1f9b09a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.212791][ T8671] RAX: ffffffffffffffda RBX: 00007f1f9a415fa0 RCX: 00007f1f9a19ce59 [ 258.212802][ T8671] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 258.212812][ T8671] RBP: 00007f1f9b09a090 R08: 0000000000000000 R09: 0000000000000000 [ 258.212822][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.212831][ T8671] R13: 00007f1f9a416038 R14: 00007f1f9a415fa0 R15: 00007ffc22c04398 [ 258.212855][ T8671] [ 258.247605][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.517058][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 258.526793][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 258.536925][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.552777][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 258.569549][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 258.584417][ T10] usb 1-1: Manufacturer: syz [ 258.594586][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 258.604141][ T10] usb 1-1: config 0 descriptor?? [ 258.656085][ T8677] macsec1: entered promiscuous mode [ 258.666835][ T8677] dummy0: entered promiscuous mode [ 258.673940][ T5618] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 258.692866][ T8677] macsec1: entered allmulticast mode [ 258.701927][ T8677] dummy0: entered allmulticast mode [ 258.722469][ T8677] dummy0: left allmulticast mode [ 258.748442][ T5728] dummy0: left promiscuous mode [ 258.840951][ T8679] 9p: Bad value for 'rfdno' [ 259.087955][ T10] rc_core: IR keymap rc-hauppauge not found [ 259.161184][ T10] Registered IR keymap rc-empty [ 259.237954][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.268200][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.290543][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 259.308423][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input44 [ 259.325130][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.354559][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.389037][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.496272][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.567143][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.599891][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.614344][ T30] audit: type=1326 audit(1780416339.830:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8682 comm="syz.1.733" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a699ce59 code=0x7fc00000 [ 259.665409][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.706127][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.718952][ T30] audit: type=1326 audit(1780416339.830:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8682 comm="syz.1.733" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96a699ce59 code=0x7fc00000 [ 259.753313][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.809497][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.846311][ T8699] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 259.850978][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 259.863905][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.738'. [ 259.900376][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 259.927712][ T10] usb 1-1: USB disconnect, device number 23 [ 260.157796][ T30] audit: type=1400 audit(1780416340.345:1726): avc: denied { shutdown } for pid=8713 comm="syz.4.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.258105][ T30] audit: type=1400 audit(1780416340.392:1727): avc: denied { write } for pid=5615 comm="syz-executor" name="144" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 260.298717][ T30] audit: type=1400 audit(1780416340.392:1728): avc: denied { write } for pid=5615 comm="syz-executor" name="144" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 260.349750][ T30] audit: type=1400 audit(1780416340.392:1729): avc: denied { write } for pid=5615 comm="syz-executor" name="144" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 260.419108][ T30] audit: type=1400 audit(1780416340.429:1730): avc: denied { write } for pid=5615 comm="syz-executor" name="144" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 260.469967][ T5618] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 260.807601][ T5620] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 261.085645][ T5620] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.097456][ T5620] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.117166][ T5620] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.141842][ T5620] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 261.170643][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 261.200124][ T5620] usb 1-1: Product: syz [ 261.204754][ T5620] usb 1-1: Manufacturer: syz [ 261.209365][ T5620] usb 1-1: SerialNumber: syz [ 261.371706][ T8740] snd_dummy snd_dummy.0: control 6:6:0:syz0:-259 is already present [ 261.388510][ T5618] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 261.455414][ T5620] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 261.599421][ T8748] syz.1.755 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 261.692993][ T5728] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 261.698393][ T30] audit: type=1400 audit(1780416341.778:1731): avc: denied { read write } for pid=8719 comm="syz.0.742" name="lp0" dev="devtmpfs" ino=3188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 262.230358][ T8756] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 262.243801][ T8756] Error validating options; rc = [-22] [ 262.656673][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.740778][ T5728] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.760508][ T5728] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.777249][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 262.777263][ T30] audit: type=1400 audit(1780416342.789:1733): avc: denied { create } for pid=8719 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 262.778787][ T5728] usb 6-1: config 1 has no interface number 0 [ 262.811935][ T804] usb 1-1: USB disconnect, device number 24 [ 262.832043][ T804] usblp0: removed [ 262.842351][ T5728] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.866146][ T5728] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 262.877446][ T5728] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 262.888748][ T5728] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.898006][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.906129][ T5728] usb 6-1: Product: syz [ 262.910558][ T5728] usb 6-1: Manufacturer: syz [ 262.915160][ T5728] usb 6-1: SerialNumber: syz [ 262.926520][ T8740] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 263.361132][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 263.372683][ T8740] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 263.598818][ T8779] overlayfs: missing 'workdir' [ 263.612453][ T5728] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 263.622894][ T30] audit: type=1400 audit(1780416343.584:1734): avc: denied { create } for pid=8780 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 263.628465][ T8781] overlay: Unknown parameter 'euid' [ 263.653696][ T5728] cdc_ncm 6-1:1.1: bind() failure [ 263.684833][ T5728] usb 6-1: USB disconnect, device number 19 [ 263.752235][ T8774] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.278004][ T5728] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 264.460383][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 264.479196][ T5728] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 264.528607][ T5728] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 264.570833][ T5728] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.589524][ T5728] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.629113][ T5728] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.645569][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.733295][ T30] audit: type=1400 audit(1780416344.624:1735): avc: denied { read } for pid=8806 comm="syz.4.774" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 264.889975][ T5728] usb 1-1: usb_control_msg returned -71 [ 264.904200][ T30] audit: type=1400 audit(1780416344.783:1736): avc: denied { ioctl } for pid=8789 comm="syz.0.767" path="socket:[19430]" dev="sockfs" ino=19430 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 264.928830][ T804] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 264.933983][ T5728] usbtmc 1-1:16.0: can't read capabilities [ 264.943044][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.975131][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 265.002091][ T5728] usb 1-1: USB disconnect, device number 25 [ 265.032301][ T30] audit: type=1400 audit(1780416344.895:1737): avc: denied { bind } for pid=8808 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 265.052741][ T5862] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 265.098466][ T30] audit: type=1400 audit(1780416344.895:1738): avc: denied { write } for pid=8808 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 265.144585][ T804] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.153616][ T804] usb 2-1: config 1 has no interface number 0 [ 265.191745][ T8821] macvtap1: entered allmulticast mode [ 265.197605][ T8821] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 265.206270][ T8821] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 265.216151][ T8821] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 265.225061][ T804] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.236237][ T804] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 265.237516][ T8821] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 265.247100][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 265.259364][ T804] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 265.274554][ T804] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 265.288978][ T804] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 265.289085][ T5862] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 265.308813][ T5862] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 265.318385][ T5862] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 265.330365][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.342442][ T5862] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 265.352443][ T10] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 265.352636][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 265.372954][ T5862] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 265.382216][ T804] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.392067][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.400119][ T804] usb 2-1: Product: syz [ 265.409801][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.417824][ T804] usb 2-1: Manufacturer: syz [ 265.423087][ T804] usb 2-1: SerialNumber: syz [ 265.432325][ T5862] usb 6-1: config 0 descriptor?? [ 265.439793][ T8803] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 265.669242][ T8803] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 265.689228][ T5862] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 265.912016][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.782'. [ 265.915565][ T8803] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 266.541587][ T8833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28721 sclass=netlink_route_socket pid=8833 comm=syz.0.783 [ 266.570872][ C0] usblp0: nonzero read bulk status received: -71 [ 266.579148][ T8840] netlink: 76 bytes leftover after parsing attributes in process `syz.1.772'. [ 266.588703][ T5728] usb 6-1: USB disconnect, device number 20 [ 266.702653][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.713106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.722486][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.731530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.203368][ T30] audit: type=1400 audit(1780416346.608:1739): avc: denied { ioctl } for pid=8804 comm="syz.5.773" path="/dev/usb/lp0" dev="devtmpfs" ino=3201 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 267.212908][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.193783][ T3316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.287749][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.491673][ T8841] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 269.604318][ T8841] UDF-fs: Scanning with blocksize 512 failed [ 269.638148][ T8842] usblp0: removed [ 269.654178][ T5618] Bluetooth: hci1: unexpected event 0x35 length: 7 > 6 [ 270.047569][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.047752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.213719][ T30] audit: type=1400 audit(1780416349.670:1740): avc: denied { write } for pid=8846 comm="syz.3.785" name="xfrm_stat" dev="proc" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 272.781598][ T29] net_ratelimit: 2 callbacks suppressed [ 272.781616][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.860556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.466780][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.467461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.485344][ T804] cdc_ncm 2-1:1.1: bind() failure [ 276.742477][ T8841] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 276.742514][ T8841] UDF-fs: Scanning with blocksize 1024 failed [ 277.884172][ C0] sched: DL replenish lagged too much [ 278.277947][ T8841] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 278.277971][ T8841] UDF-fs: Scanning with blocksize 2048 failed [ 278.969332][ T3316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.970125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.054527][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.285452][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.285698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.402611][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.933888][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.934170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.258406][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.258653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.790637][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.791475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.650142][ T5743] net_ratelimit: 3 callbacks suppressed [ 291.650161][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.759214][ T8841] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 292.759237][ T8841] UDF-fs: Scanning with blocksize 4096 failed [ 294.733696][ T6019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.733940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.021437][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.505547][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.506464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.683567][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.684501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.026241][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.026774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.375339][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.612653][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.612896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.869753][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.870768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.686158][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.759464][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.859879][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.597092][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.041021][ T6474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.922872][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.923124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.443179][ T6474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.344497][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.383261][ T6474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.778714][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.778981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.552064][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.552286][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.967423][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.519866][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.520101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.620309][ T6474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.154571][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.924092][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.157047][ T6474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.627648][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.628658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.873906][ T6019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.874143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.202128][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.711399][ T6019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.867837][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.288556][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.772846][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.027001][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.028145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.681010][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.343384][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.343796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.385664][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.385893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.755326][ T3296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.756447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.488937][ T6474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.519006][ T6474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.554466][ T6474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.787838][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.796871][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.367942][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.369066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.233464][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.233844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.090184][ T3316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.090412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.510322][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.576189][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.973916][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.137361][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.137621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.618310][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.618540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.584859][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.425631][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.426009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.790198][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.859895][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.861032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.607398][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.364158][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.988898][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.959494][ T6019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.015296][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.786938][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.787182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.507359][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.978965][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.581150][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.581397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.472432][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.473511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.120573][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.104260][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.514763][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.515914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.995251][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.995485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.392937][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.761749][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.710882][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.179428][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.179679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.672760][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.673025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.951507][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.948775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.930879][ T3296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.608146][ T3296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.608391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.882911][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.242354][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.242623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.032653][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.105165][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.106256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.942520][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.989953][ T31] INFO: task syz.1.772:8803 blocked for more than 144 seconds. [ 460.989987][ T31] Tainted: G L syzkaller #0 [ 460.989998][ T31] Blocked by coredump. [ 460.990004][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.990012][ T31] task:syz.1.772 state:D stack:26824 pid:8803 tgid:8801 ppid:5617 task_flags:0x40054c flags:0x00080003 [ 460.990078][ T31] Call Trace: [ 460.990085][ T31] [ 460.990097][ T31] __schedule+0x1295/0x67a0 [ 460.990142][ T31] ? __pfx___schedule+0x10/0x10 [ 460.990162][ T31] ? find_held_lock+0x2b/0x80 [ 460.990180][ T31] ? schedule+0x2bf/0x390 [ 460.990206][ T31] schedule+0xdd/0x390 [ 460.990228][ T31] schedule_preempt_disabled+0x13/0x30 [ 460.990250][ T31] __mutex_lock+0xced/0x1b10 [ 460.990276][ T31] ? tun_chr_close+0x38/0x220 [ 460.990313][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 460.990338][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 460.990371][ T31] ? locks_remove_file+0xd1/0x610 [ 460.990391][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 460.990411][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 460.990438][ T31] ? tun_chr_close+0x38/0x220 [ 460.990461][ T31] ? rtnl_lock+0x9/0x20 [ 460.990481][ T31] tun_chr_close+0x38/0x220 [ 460.990508][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 460.990532][ T31] __fput+0x3ff/0xb50 [ 460.990564][ T31] task_work_run+0x150/0x240 [ 460.990595][ T31] ? __pfx_task_work_run+0x10/0x10 [ 460.990619][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 460.990651][ T31] do_exit+0x951/0x2af0 [ 460.990675][ T31] ? __pfx_do_exit+0x10/0x10 [ 460.990695][ T31] ? do_raw_spin_lock+0x128/0x260 [ 460.990720][ T31] ? find_held_lock+0x2b/0x80 [ 460.990737][ T31] ? get_signal+0x7e5/0x2210 [ 460.990766][ T31] do_group_exit+0xd5/0x2a0 [ 460.990788][ T31] get_signal+0x20ff/0x2210 [ 460.990824][ T31] ? __pfx_get_signal+0x10/0x10 [ 460.990854][ T31] ? do_futex+0x192/0x350 [ 460.990881][ T31] arch_do_signal_or_restart+0x91/0x7e0 [ 460.990911][ T31] ? rcu_is_watching+0x12/0xc0 [ 460.990938][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 460.990977][ T31] ? rcu_is_watching+0x12/0xc0 [ 460.991007][ T31] exit_to_user_mode_loop+0x98/0x670 [ 460.991030][ T31] ? rcu_is_watching+0x12/0xc0 [ 460.991059][ T31] do_syscall_64+0x666/0x870 [ 460.991083][ T31] ? clear_bhb_loop+0x40/0x90 [ 460.991106][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.991125][ T31] RIP: 0033:0x7f96a699ce59 [ 460.991142][ T31] RSP: 002b:00007f96a78bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 460.991161][ T31] RAX: fffffffffffffe00 RBX: 00007f96a6c15fa8 RCX: 00007f96a699ce59 [ 460.991173][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f96a6c15fa8 [ 460.991185][ T31] RBP: 00007f96a6c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 460.991197][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.991208][ T31] R13: 00007f96a6c16038 R14: 00007ffee31c0940 R15: 00007ffee31c0a28 [ 460.991234][ T31] [ 460.991245][ T31] [ 460.991245][ T31] Showing all locks held in the system: [ 460.991252][ T31] 2 locks held by kthreadd/2: [ 460.991264][ T31] 3 locks held by kworker/0:1/10: [ 460.991275][ T31] 4 locks held by kworker/u8:0/12: [ 460.991285][ T31] #0: ffff88807df72140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 460.991343][ T31] #1: ffffc90000117d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 460.991396][ T31] #2: ffff8880394a93c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 460.991448][ T31] #3: ffff88802d322ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 460.991505][ T31] 3 locks held by kworker/u8:1/13: [ 460.991516][ T31] 1 lock held by kworker/R-mm_pe/14: [ 460.991528][ T31] 4 locks held by kworker/1:0/24: [ 460.991539][ T31] 4 locks held by kworker/1:1/29: [ 460.991550][ T31] 1 lock held by khungtaskd/31: [ 460.991559][ T31] #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 460.991619][ T31] 3 locks held by kworker/u8:2/36: [ 460.991632][ T31] 4 locks held by kworker/u8:4/57: [ 460.991643][ T31] 4 locks held by kswapd0/85: [ 460.991655][ T31] 3 locks held by kworker/u8:6/138: [ 460.991666][ T31] 3 locks held by kworker/1:2/804: [ 460.991679][ T31] 4 locks held by kworker/0:2/1220: [ 460.991690][ T31] #0: ffff888077d73d40 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 460.991745][ T31] #1: ffffc900057c7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 460.991815][ T31] #2: ffff8880394a93c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 460.991867][ T31] #3: ffff88802d322ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x666/0x860 [ 460.991929][ T31] 3 locks held by kworker/R-mld/3193: [ 460.991940][ T31] #0: ffff8880338c1940 ((wq_completion)mld){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 460.991990][ T31] #1: ffffc9000f877c70 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 460.992041][ T31] #2: ffff888026a17530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x42/0xc10 [ 460.992095][ T31] 4 locks held by kworker/u8:8/3296: [ 460.992107][ T31] 1 lock held by klogd/4973: [ 460.992118][ T31] 3 locks held by udevd/4984: [ 460.992128][ T31] 2 locks held by dhcpcd/5278: [ 460.992138][ T31] 4 locks held by dhcpcd/5279: [ 460.992149][ T31] 3 locks held by kworker/0:3/5350: [ 460.992159][ T31] 2 locks held by getty/5377: [ 460.992169][ T31] #0: ffff888039cd80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 460.992225][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 460.992279][ T31] 2 locks held by syz-executor/5602: [ 460.992290][ T31] 3 locks held by udevd/5605: [ 460.992300][ T31] 2 locks held by udevd/5608: [ 460.992311][ T31] 2 locks held by syz-executor/5614: [ 460.992322][ T31] 2 locks held by syz-executor/5615: [ 460.992333][ T31] 3 locks held by kworker/0:4/5620: [ 460.992343][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 460.992394][ T31] #1: ffffc900030cfd08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 460.992444][ T31] #2: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 460.992497][ T31] 3 locks held by kworker/1:3/5708: [ 460.992509][ T31] 2 locks held by kworker/0:5/5715: [ 460.992526][ T31] 4 locks held by kworker/0:6/5728: [ 460.992536][ T31] #0: ffff88802a969940 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 460.992596][ T31] #1: ffffc900042dfd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 460.992665][ T31] #2: ffff888037b2d3c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 460.992717][ T31] #3: ffff88802d325270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860 [ 460.992768][ T31] 3 locks held by kworker/0:7/5741: [ 460.992779][ T31] #0: ffff888037a3a140 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 460.992834][ T31] #1: ffffc900043afd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 460.992903][ T31] #2: ffff88807ea18330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 460.992953][ T31] 2 locks held by kworker/1:4/5742: [ 460.992964][ T31] 3 locks held by kworker/1:5/5743: [ 460.992974][ T31] #0: ffff888037a3a140 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 460.993028][ T31] #1: ffffc900043cfd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 460.993095][ T31] #2: ffff88807ea18330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 460.993145][ T31] 3 locks held by kworker/1:6/5803: [ 460.993156][ T31] 3 locks held by kworker/1:7/5862: [ 460.993166][ T31] #0: [ 461.990068][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.106585][ T3296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.106878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.197110][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.198238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.564663][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.969799][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.970916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.484596][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.878684][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.878930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.343968][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.344113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.200568][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.200841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.399266][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.273917][ T1169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.274162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.920399][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.920645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.195512][ T3316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.540600][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.656312][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.657423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.449625][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.450728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.683527][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.683810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.587131][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.236459][ T31] ffff88813fe55d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 511.236526][ T31] #1: ffffc9000457fd08 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 511.236578][ T31] #2: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x13a0 [ 511.236626][ T31] 3 locks held by kworker/u8:10/5942: [ 511.236637][ T31] 4 locks held by kworker/u8:11/5946: [ 511.236649][ T31] 3 locks held by kworker/u8:13/5991: [ 511.236660][ T31] 4 locks held by kworker/u8:14/5992: [ 511.236670][ T31] 3 locks held by kworker/u8:15/5993: [ 511.236681][ T31] 3 locks held by kworker/u8:16/5995: [ 511.236692][ T31] 3 locks held by kworker/u8:17/5997: [ 511.236702][ T31] 3 locks held by kworker/u8:18/5998: [ 511.236713][ T31] #0: ffff888034b37140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 511.236763][ T31] #1: ffffc90005167d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 511.236815][ T31] #2: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 511.236874][ T31] 2 locks held by kworker/u8:19/5999: [ 511.236885][ T31] 3 locks held by kworker/u8:20/6000: [ 511.236896][ T31] 4 locks held by kworker/u8:21/6001: [ 511.236907][ T31] 3 locks held by kworker/u8:22/6002: [ 511.236917][ T31] 3 locks held by kworker/u8:23/6003: [ 511.236928][ T31] 4 locks held by kworker/u8:24/6004: [ 511.236941][ T31] 4 locks held by kworker/u8:29/6009: [ 511.236951][ T31] 7 locks held by kworker/u8:31/6013: [ 511.236962][ T31] 3 locks held by kworker/u8:32/6015: [ 511.236973][ T31] 4 locks held by kworker/u8:33/6016: [ 511.236984][ T31] 3 locks held by kworker/u8:34/6017: [ 511.236995][ T31] 3 locks held by kworker/u8:35/6019: [ 511.237006][ T31] 2 locks held by syz-executor/6406: [ 511.237020][ T31] 1 lock held by udevd/6848: [ 511.237032][ T31] 1 lock held by syz.1.772/8803: [ 511.237042][ T31] #0: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 511.237095][ T31] 2 locks held by syz.4.782/8836: [ 511.237106][ T31] 3 locks held by syz.0.783/8848: [ 511.237117][ T31] #0: ffffffff8f505220 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 511.237165][ T31] #1: ffff8880758fe1b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470 [ 511.237216][ T31] #2: ffffffff8e7d1ae0 (console_lock){+.+.}-{0:0}, at: con_install+0x99/0x620 [ 511.237263][ T31] 3 locks held by kworker/1:8/8850: [ 511.237290][ T31] [ 511.237295][ T31] ============================================= [ 511.237295][ T31] [ 511.237304][ T31] NMI backtrace for cpu 1 [ 511.237318][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 511.237340][ T31] Tainted: [L]=SOFTLOCKUP [ 511.237347][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.237357][ T31] Call Trace: [ 511.237363][ T31] [ 511.237371][ T31] dump_stack_lvl+0x100/0x190 [ 511.237392][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 511.237414][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 511.237436][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 511.237467][ T31] sys_info+0x141/0x190 [ 511.237493][ T31] watchdog+0xcb1/0x1030 [ 511.237518][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 511.237539][ T31] ? __pfx_watchdog+0x10/0x10 [ 511.237559][ T31] ? __kthread_parkme+0x18c/0x230 [ 511.237590][ T31] ? kthread+0x13a/0x450 [ 511.237608][ T31] ? __pfx_watchdog+0x10/0x10 [ 511.237626][ T31] kthread+0x370/0x450 [ 511.237644][ T31] ? __pfx_kthread+0x10/0x10 [ 511.237665][ T31] ret_from_fork+0x72b/0xd50 [ 511.237688][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 511.237711][ T31] ? __switch_to+0x800/0x1100 [ 511.237736][ T31] ? __pfx_kthread+0x10/0x10 [ 511.237758][ T31] ret_from_fork_asm+0x1a/0x30 [ 511.237793][ T31] [ 511.237800][ T31] Sending NMI from CPU 1 to CPUs 0: [ 511.237822][ C0] NMI backtrace for cpu 0 [ 511.237834][ C0] CPU: 0 UID: 0 PID: 6013 Comm: kworker/u8:31 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.237853][ C0] Tainted: [L]=SOFTLOCKUP [ 511.237857][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.237867][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 511.237888][ C0] RIP: 0010:lock_release+0x170/0x310 [ 511.237905][ C0] Code: 0b 00 00 74 19 90 e8 0f 73 11 03 85 c0 74 0e 8b 05 55 b1 f2 0e 85 c0 0f 84 84 01 00 00 90 48 c7 c7 9e 9f ee 8d e8 20 e9 a4 09 ff ff ff ff 65 0f c1 05 db 85 25 12 83 f8 01 0f 85 28 01 00 00 [ 511.237918][ C0] RSP: 0018:ffffc90000006fb8 EFLAGS: 00000082 [ 511.237929][ C0] RAX: 0000000000000000 RBX: ffffffff8e7e5560 RCX: ffffc90000006fc4 [ 511.237938][ C0] RDX: 0000000000000006 RSI: ffffffff8dee9f9e RDI: ffffffff8c1c4480 [ 511.237947][ C0] RBP: ffffffff81b7d1ae R08: 0000000000000001 R09: 0000000000000007 [ 511.237955][ C0] R10: 0000000000000200 R11: 00000000000861d7 R12: ffff88802e9aa540 [ 511.237964][ C0] R13: ffffc90000007070 R14: 0000000000000202 R15: 0000000000000007 [ 511.237973][ C0] FS: 0000000000000000(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 511.237987][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.237996][ C0] CR2: 0000555587cea4e8 CR3: 0000000027fa1000 CR4: 00000000003526f0 [ 511.238004][ C0] Call Trace: [ 511.238008][ C0] [ 511.238015][ C0] unwind_next_frame+0x3c3/0x2090 [ 511.238033][ C0] ? process_backlog+0x37a/0x1580 [ 511.238052][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 511.238066][ C0] arch_stack_walk+0x94/0xf0 [ 511.238085][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 511.238103][ C0] stack_trace_save+0x8e/0xc0 [ 511.238115][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 511.238128][ C0] ? stack_trace_save+0x8e/0xc0 [ 511.238140][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 511.238152][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 511.238170][ C0] kasan_save_stack+0x30/0x50 [ 511.238182][ C0] ? kasan_save_stack+0x30/0x50 [ 511.238194][ C0] ? kasan_save_track+0x14/0x30 [ 511.238205][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 511.238218][ C0] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 511.238237][ C0] ? kmalloc_reserve+0x148/0x350 [ 511.238250][ C0] ? __alloc_skb+0x185/0x710 [ 511.238267][ C0] ? synproxy_send_client_synack+0x19e/0x970 [ 511.238284][ C0] ? nft_synproxy_do_eval+0xa6a/0xd50 [ 511.238299][ C0] ? nft_do_chain+0x2e5/0x1990 [ 511.238316][ C0] ? nft_do_chain_inet+0xf3/0x400 [ 511.238336][ C0] ? nf_hook_slow+0xbf/0x220 [ 511.238350][ C0] ? nf_hook.constprop.0+0x2a6/0x750 [ 511.238363][ C0] ? ip_local_deliver+0x163/0x1f0 [ 511.238375][ C0] ? ip_rcv+0x33a/0x3c0 [ 511.238387][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 511.238403][ C0] ? __netif_receive_skb+0x1f/0x120 [ 511.238417][ C0] ? process_backlog+0x37a/0x1580 [ 511.238442][ C0] kasan_save_track+0x14/0x30 [ 511.238454][ C0] __kasan_slab_alloc+0x89/0x90 [ 511.238468][ C0] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 511.238487][ C0] ? kmalloc_reserve+0x148/0x350 [ 511.238500][ C0] ? __kasan_slab_alloc+0x20/0x90 [ 511.238514][ C0] kmalloc_reserve+0x148/0x350 [ 511.238528][ C0] __alloc_skb+0x185/0x710 [ 511.238544][ C0] ? __alloc_skb+0x5b7/0x710 [ 511.238560][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 511.238577][ C0] ? kfree_skbmem+0x19a/0x210 [ 511.238591][ C0] ? mark_held_locks+0x40/0x70 [ 511.238606][ C0] synproxy_send_client_synack+0x19e/0x970 [ 511.238622][ C0] ? __pfx_trace_contention_begin+0x10/0x10 [ 511.238641][ C0] ? find_held_lock+0x2b/0x80 [ 511.238653][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 511.238669][ C0] ? net_generic+0xea/0x2a0 [ 511.238686][ C0] nft_synproxy_do_eval+0xa6a/0xd50 [ 511.238703][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 511.238720][ C0] ? mark_held_locks+0x40/0x70 [ 511.238735][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 511.238750][ C0] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 511.238764][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 511.238782][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 511.238799][ C0] nft_do_chain+0x2e5/0x1990 [ 511.238818][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 511.238835][ C0] ? mark_held_locks+0x40/0x70 [ 511.238850][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 511.238869][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 511.238886][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 511.238907][ C0] nft_do_chain_inet+0xf3/0x400 [ 511.238922][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 511.238938][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 511.238955][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 511.238976][ C0] nf_hook_slow+0xbf/0x220 [ 511.238991][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 511.239004][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 511.239017][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 511.239030][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 511.239045][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 511.239059][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 511.239074][ C0] ip_local_deliver+0x163/0x1f0 [ 511.239088][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 511.239101][ C0] ip_rcv+0x33a/0x3c0 [ 511.239114][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 511.239126][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 511.239143][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 511.239160][ C0] ? lock_acquire+0x1b1/0x370 [ 511.239175][ C0] ? process_backlog+0x32a/0x1580 [ 511.239191][ C0] ? process_backlog+0x32a/0x1580 [ 511.239206][ C0] __netif_receive_skb+0x1f/0x120 [ 511.239222][ C0] process_backlog+0x37a/0x1580 [ 511.239241][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 511.239258][ C0] net_rx_action+0xa40/0xf20 [ 511.239277][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 511.239295][ C0] ? tmigr_handle_remote+0x132/0x380 [ 511.239312][ C0] ? run_timer_base+0x121/0x190 [ 511.239330][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 511.239345][ C0] handle_softirqs+0x1ea/0xa00 [ 511.239363][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 511.239380][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 511.239399][ C0] ? kernel_fpu_end+0x5f/0x80 [ 511.239416][ C0] do_softirq+0xac/0xe0 [ 511.239433][ C0] [ 511.239437][ C0] [ 511.239441][ C0] __local_bh_enable_ip+0xf8/0x120 [ 511.239459][ C0] kernel_fpu_end+0x64/0x80 [ 511.239475][ C0] blake2s_compress+0x78/0xf0 [ 511.239492][ C0] blake2s_final+0xc9/0x150 [ 511.239507][ C0] hmac.constprop.0+0x34a/0x480 [ 511.239522][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 511.239543][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 511.239558][ C0] ? kernel_fpu_end+0x5f/0x80 [ 511.239573][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 511.239591][ C0] ? kernel_fpu_end+0x69/0x80 [ 511.239608][ C0] kdf.constprop.0+0x128/0x280 [ 511.239622][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 511.239635][ C0] ? __pfx_mix_hash+0x10/0x10 [ 511.239651][ C0] ? __crypto_memneq+0x1fe/0x430 [ 511.239665][ C0] wg_noise_handshake_create_initiation+0x406/0x610 [ 511.239683][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 511.239700][ C0] ? find_held_lock+0x2b/0x80 [ 511.239712][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 511.239727][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 511.239742][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 511.239757][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 511.239772][ C0] wg_packet_send_handshake_initiation+0x19c/0x360 [ 511.239791][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 511.239809][ C0] ? __lock_acquire+0x4a5/0x2630 [ 511.239829][ C0] ? rcu_is_watching+0x12/0xc0 [ 511.239848][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 511.239867][ C0] process_one_work+0xa0e/0x1980 [ 511.239886][ C0] ? __pfx_process_one_work+0x10/0x10 [ 511.239904][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 511.239923][ C0] worker_thread+0x5ef/0xe50 [ 511.239941][ C0] ? kthread+0x13a/0x450 [ 511.239955][ C0] ? __pfx_worker_thread+0x10/0x10 [ 511.239970][ C0] kthread+0x370/0x450 [ 511.239983][ C0] ? __pfx_kthread+0x10/0x10 [ 511.239998][ C0] ret_from_fork+0x72b/0xd50 [ 511.240014][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 511.240029][ C0] ? rcu_is_watching+0x12/0xc0 [ 511.240045][ C0] ? __switch_to+0x800/0x1100 [ 511.240063][ C0] ? __pfx_kthread+0x10/0x10 [ 511.240077][ C0] ret_from_fork_asm+0x1a/0x30 [ 511.240101][ C0] [ 511.240826][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 511.240840][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 511.240864][ T31] Tainted: [L]=SOFTLOCKUP [ 511.240871][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.240881][ T31] Call Trace: [ 511.240887][ T31] [ 511.240894][ T31] dump_stack_lvl+0x100/0x190 [ 511.240914][ T31] vpanic+0x552/0x970 [ 511.240932][ T31] ? __pfx_vpanic+0x10/0x10 [ 511.240949][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 511.240979][ T31] ? rcu_is_watching+0x12/0xc0 [ 511.241003][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 511.241035][ T31] panic+0xd1/0xe0 [ 511.241052][ T31] ? __pfx_panic+0x10/0x10 [ 511.241072][ T31] ? wq_watchdog_touch+0xec/0x1a0 [ 511.241092][ T31] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 511.241120][ T31] ? watchdog.cold+0x1ec/0x234 [ 511.241140][ T31] ? watchdog+0xcc1/0x1030 [ 511.241162][ T31] watchdog.cold+0x1fd/0x234 [ 511.241187][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 511.241209][ T31] ? __pfx_watchdog+0x10/0x10 [ 511.241230][ T31] ? __kthread_parkme+0x18c/0x230 [ 511.241260][ T31] ? kthread+0x13a/0x450 [ 511.241279][ T31] ? __pfx_watchdog+0x10/0x10 [ 511.241297][ T31] kthread+0x370/0x450 [ 511.241316][ T31] ? __pfx_kthread+0x10/0x10 [ 511.241337][ T31] ret_from_fork+0x72b/0xd50 [ 511.241361][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 511.241384][ T31] ? __switch_to+0x800/0x1100 [ 511.241410][ T31] ? __pfx_kthread+0x10/0x10 [ 511.241431][ T31] ret_from_fork_asm+0x1a/0x30 [ 511.241467][ T31] [ 511.241663][ T31] Kernel Offset: disabled