last executing test programs: 50m44.568655575s ago: executing program 4 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003880)=@newtaction={0xe6c, 0x30, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x15, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xffffffff, 0x80000001, 0xb86e750f0a5214f2, 0x5}, 0x30, 0x6f}, [{0x5e8f, 0x7, 0xcd31, 0xfffffffb, 0x3, 0x13bfb708}, {0x5, 0x6, 0xd, 0x1010000, 0x4, 0x3}, {0x8, 0x8, 0x4, 0x40, 0x1, 0x1}, {0x7, 0x0, 0x856, 0xcd88, 0x80000001, 0xffffff80}, {0x4, 0x9, 0x2, 0x8, 0x2, 0xf4d4}, {0x3, 0xfffffffa, 0x7, 0x7ff, 0x0, 0x7c}, {0x12, 0x6, 0xd, 0x2, 0xffff8be4, 0xaa49}, {0x0, 0x9, 0x200, 0x400, 0x6, 0x2}, {0x6, 0xd881, 0x2, 0x6, 0xcc27, 0x7fff}, {0x0, 0x8, 0xfffffff1, 0x9, 0x0, 0x7}, {0x7, 0x7, 0x4, 0x29e, 0x3, 0x3ff}, {0x3, 0x600000, 0xf637, 0x19, 0x40, 0x9}, {0xe, 0x100, 0x200, 0xd, 0xe9000000, 0x2}, {0xdbf2, 0x80000000, 0x5, 0x9, 0x6, 0x4}, {0x4, 0x7ff, 0x8, 0x5, 0x5dac}, {0x8, 0x80000000, 0x0, 0x1, 0x8, 0x5}, {0x3000, 0x1, 0x0, 0xecf, 0x4, 0xd9ce}, {0x1, 0x5876, 0x5, 0x5, 0x7, 0x9}, {0x9, 0x0, 0x10000, 0x0, 0xf, 0x3}, {0xffffff61, 0x4, 0x346, 0x7, 0x7, 0x401}, {0x7, 0x51, 0x88, 0x2, 0x3, 0x1}, {0x1000, 0x2, 0x8, 0x1, 0x5, 0xfffffff2}, {0x7, 0x0, 0x1ff, 0x2, 0x3a0, 0x5}, {0x1, 0xff, 0x71c9, 0x1, 0x1, 0x401}, {0x7de, 0x101, 0x0, 0xcc7, 0x9}, {0x2, 0x18, 0x81, 0x40, 0x8, 0x10}, {0x0, 0x7, 0x7, 0xff, 0x2, 0x7}, {0x100, 0x0, 0x5, 0x5, 0x3, 0x9}, {0x2, 0x6, 0x5, 0xfffffffd, 0x6, 0x9}, {0x1, 0x9, 0x9, 0x2, 0x3db1, 0x6688}, {0x8, 0x0, 0x2, 0x3, 0x101, 0xa}, {0x3, 0x3, 0x2, 0x10af, 0x3, 0x4}, {0xb, 0x200, 0x7fff, 0xffffffea, 0xffffffff, 0x2}, {0x5, 0x9, 0xa20, 0xfa, 0x8, 0x3}, {0xffff, 0xffff1e26, 0x9, 0x1, 0x6}, {0xfdc, 0x1, 0xfffffffa, 0xfffffe01, 0x46b, 0x8}, {0x4, 0x1, 0x7, 0x9, 0xfffffff8, 0x9a2}, {0x3, 0xffffff8e, 0x6, 0x800, 0xcb3d, 0x2}, {0x401, 0x9, 0x3, 0x401, 0x6, 0x3ff}, {0x2, 0x1, 0x5, 0x6, 0x8, 0x24}, {0x5, 0x2, 0x0, 0x0, 0x6, 0x432}, {0x4, 0x3, 0x6, 0x0, 0x0, 0x3}, {0x6, 0xa956, 0x5, 0x7, 0x1, 0xfffffff8}, {0x1, 0x5, 0x80, 0x7, 0x786e, 0x7}, {0x7fffffff, 0x8000, 0x0, 0x4, 0x3655, 0x7}, {0x447a, 0x4, 0x6, 0x8, 0xffffffc0, 0xb837}, {0x9, 0x24, 0x0, 0x800, 0x6, 0x2ced}, {0x7, 0x6, 0x6, 0x8, 0x10ec, 0x567}, {0x2b8, 0x7, 0x2, 0x100, 0x949c, 0x43c}, {0x8, 0xfffffffb, 0x7, 0x1, 0xffffffff, 0x9}, {0x509, 0x5, 0x0, 0x5, 0x6e, 0x5}, {0x24ed0191, 0x5, 0x8dc2, 0x9, 0x70, 0x9}, {0x8, 0x5, 0x8, 0xfffffff7, 0x6, 0xffffffff}, {0xe, 0x4, 0x6c7, 0xa7f1, 0x101, 0x9dc4345d}, {0x235, 0x3aa1f7a9, 0x9, 0x8, 0x4, 0xa3}, {0x7, 0x1, 0x7, 0xe, 0x1, 0x400}, {0x2, 0x4, 0x8, 0x7f, 0xe, 0x2}, {0x326ac30e, 0x4, 0x5, 0x5, 0x7}, {0x7fffffff, 0x1, 0x9, 0x6, 0x4}, {0x8, 0xfffffffa, 0x3, 0x7fffffff, 0x0, 0x9}, {0x2, 0xfffffffd, 0x1, 0x8, 0x1, 0x1000}, {0x1ff, 0x5, 0x7, 0x0, 0x7, 0x18c}, {0x8, 0x93d, 0xa8, 0x6, 0x1, 0xee50000}, {0x200, 0x3, 0x6, 0x5, 0x0, 0xe}, {0x7, 0x9, 0x4, 0x7, 0x0, 0x4}, {0x1, 0x2, 0x2f, 0x0, 0x5, 0x1000}, {0x7, 0xe, 0x9, 0x2, 0x6, 0x2}, {0x7ff, 0x1, 0x6, 0x0, 0x6, 0x88cf}, {0x6, 0x9, 0x6, 0x0, 0x7, 0xff}, {0x4, 0x1, 0x8000001, 0x2, 0x8, 0xfb12}, {0x6, 0x3, 0x66ff23f6, 0xd, 0x6, 0x4}, {0x6442152e, 0x4, 0x2, 0xb9e7, 0x8, 0xba}, {0x2fc, 0x1, 0x8182, 0x4, 0x8000, 0x8}, {0x400000, 0xd, 0x4, 0x0, 0x0, 0x4}, {0x3ff, 0x7, 0x51, 0x0, 0x9, 0x5}, {0x81, 0x9, 0x6f9, 0xfffffff8, 0x6, 0xc3a}, {0x8000, 0xd, 0x89, 0xbd0, 0x5, 0x1}, {0x7fffffff, 0x2, 0x6, 0x7ff, 0x4, 0x2}, {0x0, 0x6, 0x1ff, 0x1, 0x6, 0x8}, {0x511, 0x3a6, 0x10001, 0x10001, 0xffff, 0x6}, {0x4b, 0x4, 0x10, 0x2, 0x9}, {0x9, 0x7, 0x9, 0x9, 0xfffffffd, 0x2}, {0x1ff, 0x1, 0x6, 0xffffff6f, 0x1, 0x1d4}, {0x919, 0x800, 0xffffffff, 0x7, 0xfff, 0x9}, {0x91, 0x8, 0x12, 0xfffffff8, 0x1, 0xff}, {0xc, 0x6, 0x5, 0x200, 0x1, 0x1}, {0xee, 0x9, 0xa6, 0xff, 0xffff5ccb, 0x6}, {0xffffff8f, 0x8001, 0x2749, 0x11dcc1c8, 0x80000000, 0x2f}, {0xd, 0xffff, 0x5bd6, 0x200, 0x8, 0x9e}, {0x4, 0xfff, 0x3, 0xd, 0x388, 0xe}, {0x8000, 0x5, 0x8, 0x6, 0x40008000, 0x80}, {0x7, 0x1ff, 0x80, 0x1738, 0x9, 0x5}, {0x642, 0x1000, 0xfffffff8, 0x4df00000, 0xfff, 0x80}, {0x9, 0x9, 0x9, 0x1, 0x4, 0xbae5}, {0x1, 0x5, 0x8001, 0x8, 0x4, 0x5}, {0x7, 0x8, 0x6, 0xa, 0x80000001, 0x1}, {0x0, 0x6, 0xfffffffa, 0x8, 0x18, 0x6}, {0x2, 0x45, 0x200, 0x748c, 0x5, 0x7bb}, {0x7e, 0x800, 0x40, 0x9286c9ee, 0x9, 0x5}, {0x7fffffff, 0xd, 0xd00, 0xfffffff7, 0xffffffa7, 0x2}, {0x80000, 0x7, 0xa, 0x5, 0x80000001, 0x9b}, {0x6, 0x0, 0x8, 0x81, 0x6, 0x8}, {0x8, 0x5, 0x9, 0x9, 0x9, 0xe}, {0x4, 0x4, 0x6, 0x7ff, 0xffff, 0x9}, {0xf, 0x2, 0x4, 0xa2d, 0x1, 0x101}, {0x400, 0x9, 0xaf, 0x252, 0x5, 0x3f}, {0xfff, 0x8, 0x4, 0x9, 0x10, 0x7fffffff}, {0x5, 0x3, 0x9, 0x3, 0x8, 0xf}, {0x7, 0x9, 0x101, 0x2, 0x3, 0x8}, {0x1, 0x3, 0x354c, 0xf, 0x0, 0x10}, {0x2, 0xd, 0x5, 0x5909, 0x7f, 0x4}, {0x7, 0x81, 0xfffffffe, 0x3, 0x9, 0x6}, {0xe, 0x1, 0x6, 0x8, 0xb783}, {0x5, 0x0, 0x8, 0x5, 0xfe9, 0x5a}, {0x0, 0x2, 0x8, 0x9, 0x4, 0x6}, {0xfffffff7, 0x101, 0x8, 0x0, 0xecf, 0x1}, {0x3, 0x8, 0x81, 0x7, 0x81, 0x1}, {0xb, 0xba6f, 0x8, 0x9, 0x0, 0x9}, {0x3, 0xc, 0x7ff, 0x3, 0xb, 0x8}, {0xd, 0x3, 0x5, 0x5, 0x8, 0x9}, {0x6, 0x4, 0x7f, 0x48fa, 0xd9, 0x4}, {0x0, 0x5, 0xffffff00, 0x5, 0x10001, 0x8}, {0x5, 0x2, 0xde3e, 0x7, 0x2, 0xfffffffe}, {0x3, 0x3, 0x3, 0x5, 0x2, 0xff}, {0x7ff, 0x1, 0x2, 0x9, 0xfffffffb, 0x1}, {0x0, 0xc, 0x4, 0x2, 0x3, 0x1}, {0x40, 0xfffffff8, 0x0, 0xfffffff7, 0x9, 0x4}, {0x40, 0x10000, 0xfff, 0x7, 0x9}], [{0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x7, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x532105794e69c900}, {0x5}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x47b4b4b51aadb5bf, 0x1}, {0x1, 0x50d03b7b72b454d6}, {0x2}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x4, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe6c}}, 0x40c4140) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 50m40.159743026s ago: executing program 4 (id=549): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) pause() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc010) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$KVM_VCPU(&(0x7f0000122000/0x4000)=nil, 0x0, 0x3000002, 0x4010, r6, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000600)={0x8, 0x41}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x2, 0x1, 0x7, 0x5, '\x00', 0x800}, 0x6, 0x200, 0x5, r0, 0x0, 0x4, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x840000000002, 0x3, 0xff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 50m37.74557246s ago: executing program 4 (id=554): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, r0, 0x4, r0}, 0x10) 50m34.388681482s ago: executing program 4 (id=560): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="710502"], 0x13) 50m33.38701425s ago: executing program 4 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x40000101, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c00018005000100030000"], 0xbc}}, 0x0) 50m29.647999641s ago: executing program 4 (id=567): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c04", 0x1d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045c8003c006400007f2990780a010101e000000128afdea0cbfe7114878929d3fe4e3179c0cf335b939370f8401e8c8469283a9952366f3d77b16ea23f861f1a915818f456a97f99d2c38f514cf7c5a50f1d8e9efe30d4fa34389199c258e75d140bff596315adf49a0cd3c3b45a0681362f755a6464f4b4bead9f9636b91c06688f18383df7f4c7104281ae1043620ffd5c181d154ab9f59f9b3a23ab462cd68250d829d83c8971b24076b1d6737284319222edcabdb3a40b91bb357b8a4a51d1e8cf59940355e51093b4016118f2d940cb5e62166ff8f5a332123768d13f2904fb1c820ff0c3639eedb40a63cf97261651f51b322e073a43314738c0226f5cbb4339d9485733d07c6b4ccbc8e4e4a4907e620c7ce94a3ad3e61c7c11b47961de342b4c5348f4e86a9c8762145c47b34891c93510b1c39797140c00eb355c22f7c32d5184b1f532ee3d283c181ab824918d1f25917d7adeaca10e"], 0x0) write(r6, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="07000000010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r8, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) recvmmsg(r8, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @remote, @loopback}, 0xc) 50m14.554801393s ago: executing program 32 (id=567): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c04", 0x1d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) write(r6, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="07000000010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r8, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) recvmmsg(r8, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @remote, @loopback}, 0xc) 35m35.95394778s ago: executing program 5 (id=3224): openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 35m35.266541405s ago: executing program 5 (id=3228): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, 0x3012}) 35m31.763267238s ago: executing program 5 (id=3232): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0481c20001000000010902200001010080320904000002030000000705810310000a07050203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x4f, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000300)) 35m27.015238909s ago: executing program 5 (id=3240): creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) dup3(r2, r0, 0x0) 35m23.129713757s ago: executing program 5 (id=3246): io_uring_setup(0x3450, &(0x7f0000000840)={0x0, 0x1539, 0x0, 0x2}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) setpriority(0x3, 0x0, 0xffffffffffffffff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, r3, 0x1, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) write(r0, &(0x7f00000000c0)='4', 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0xf2, 0x2) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000080)={0x6, [0x6, 0x4, 0x6, 0x9, 0x3ff, 0x1000]}, &(0x7f00000000c0)=0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000400)=0x6) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) 35m19.140200908s ago: executing program 5 (id=3248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r3, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x240088e0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000480)=""/66, &(0x7f0000000500)=0x42) keyctl$clear(0x3, 0xfffffffffffffffd) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1, 0x6, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 35m4.01163449s ago: executing program 33 (id=3248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r3, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x240088e0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000480)=""/66, &(0x7f0000000500)=0x42) keyctl$clear(0x3, 0xfffffffffffffffd) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1, 0x6, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 2m42.812476242s ago: executing program 1 (id=8125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xf}, {0x0, 0x0, 0x4000000000000004}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r5 = syz_io_uring_setup(0xb28, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ab}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000180)) io_uring_enter(r5, 0x8a1, 0x3ccd, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b00020102030109023b00010100a0320904000002ff00000007058102000200070502020002"], 0x0) r6 = getpid() copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r8, 0xc0405668, &(0x7f0000000280)={0x1b, 0x3, 0x2, 0x4000}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000005c0)=0xd) ioctl$sock_SIOCADDDLCI(r9, 0x5452, &(0x7f0000000100)={'ip6tnl0\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x80000001, 0x7fffffff}) 2m37.697448665s ago: executing program 1 (id=8135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x2, 0x3d, 0x10000, 'syz0\x00', 0x1}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) close(0x3) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m33.065048757s ago: executing program 1 (id=8147): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000003e40), 0x0, 0x4001c90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) userfaultfd(0x80001) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m30.953890753s ago: executing program 1 (id=8151): r0 = syz_open_dev$video4linux(&(0x7f00000012c0), 0x4000000000000000, 0x10000) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000001340)={0x0, 0x6, 0x4, '\x00', &(0x7f0000001300)=0xb}) 2m28.289809212s ago: executing program 1 (id=8155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2m26.879578414s ago: executing program 1 (id=8160): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002c40)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x3, 0xa28, 0x0, &(0x7f0000000bc0)=@buf_1k="f33d8cf156baff75e17a37b8ba6152f55e4bb07b6dd9d7305c7366509faf8eff43851608b150c0668309cd8873c5be828279af4ceb48fb87fb665e1b9a5cfb84a2906a684f7eecd99fb917b1ebcf38401816237c7cf27871675325c79458a179edc7e00aab64f8325b37020dce5aedba9ecfc8265c9511bc2a763d17b8cd5d49a0d4110c3e744ff0b3f039e10ef5f7a8a1fc9c2723ee6a714e717659b21a959c3c17df33f1fd7b15abd0bd630ee652250e32bca2b9f677daf0af4f20b2843cdb439d8c4fffdca95707080ec3a1ab6470b35602a8e528a1bea3a79ffd7f8da3e30991bf09128ade233bad957481bca9c247ccd0e0aa72e9554e3b9ea026ddcf396cf7970f16b2120a2efae441dbdb192f0c0b6e7338a3f49a64fd8c5f03843a56689059fe8041c27fa18317acab97d714ca4dbd0339dafc71e8e179fe52c6fd139abd724b90e80ceced8d5fd187f1bf1c75a66de303dc0e9f82d63a4435baaf8d1f59e0da907bc7144a087a1cf86543bbab03c653446e8727bae31a3719087a02634310421c3b7df8c6b755858307e76630617393df549da2e4a31fdb729a78cfc3797b1bcfb3c880aeaa793361629af4e13cd6266b1221abf415647310af0f5da6e8927042429cba7e5395fffea7f9a173cd4df47468f873d56fd7f26ebf431efb5a78b419ebc1f70f4273abdebd398895d6ffdb646c01f9c6a6ad0640f97763300975f17f37d224731fb731dc9f4771eed1cd946168b09367653497f2b008eae28a9ac4d0e1e39709ea51bc342fd234d9a46e2ee8e11c900f06bb85fffefd568977aab355411ce8d63b4fb925999f9beb3016cc0b9a74afdd21cf7c6f62a9b3590298c39d0251f01ab98ef4a588af0ed9d0d44db368ac2388b15819cb86658641c20b77a305d40b31876b8dfcd78bfd7c138ffc8a18c3795f25d3f0e17f8c8af69ac9c211cc2e3c5cfb550aaaaadb90e5e6f6f70d48252fd3d4720e8c03db87bcc246828a63447de2f62333cefe6aad2c6f0fef0554ffc631bb6b4ecd5cf0997685da8b69c458ab640f50e6e86667e41b98829ba2845d1069869b25c5735a75a0750af1d9e081acc98309bced931f8696edab2ee7f711c2d3c33f69b6197a8b0e7b20cc710ac0b89b7529d6425721bb41e53380ed729f873fa9e7d04ad812dbc599ad81b9c704583ea57b3d41a9c14523595855253f966a2374db7696f5d30b92823f2c7e1da5a3aac263ab588892b5bec875d166919db6eea6199279e0de179e32ce558e75e74ea7a05e04b0a39b2fd4ffc64551a076bcecab85be54faeb25baee5f20e49704b106bff75ae1a19c0231647dcd9f206bb013963f8ac45a38fbe9c6c08673d55d6f374ef06a73cfbe878b82158bf0128bff60fc2d3c3c4800cef13cb12b2b834cc57e8641ee55b5c221fbe918b9e006673d4f83eac38060362a"}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = dup(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0x0, 'bridge0\x00', 'pimreg1\x00', {}, {0xff}, 0x5c, 0x3, 0x41}, 0x0, 0x2c8, 0x310, 0x0, {0x0, 0x5c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {0x0, 0x0, 0x0, 0x5d}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x4}, {}, {0xfffc}, {0x0, 0x0, 0x0, 0x10001}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x5}, {}, {0x4, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {0xcd2e}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {0x400}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xfd}, {}, {}, {0x3}]}}, @common=@inet=@socket3={{0x28}, 0x7}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000600)={0x2, @raw_data="a136ea3846d172e2257d67a943610e12dd1a1219acbd36301cc43d7a6c506d8a0aeaf51b2a215880a21b79e5e8ec27ba4130169a954616fb2234c796629f950b0e4cf111d3ad21e804d1bf7d6b917d9dc703a48411836f8213da8be4f47dc4099a5e7b99babea5a57dc333c4f96d3f05c7ac0b4ae475e4bafbb5b3ffb3634c82bbf2c3beb79d5353709a10fffb6a5a817a6ec5aa782e71ea6f9724eccac7843308074f8c87d4b77d4f7fa1337b154d9202e37b59a03389c3ba8d0f045c73c117085d245b48d91999"}) r5 = getpid() process_vm_writev(r5, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/140, 0x8c}], 0x3, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe503f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x9) 2m11.469261408s ago: executing program 34 (id=8160): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002c40)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x3, 0xa28, 0x0, &(0x7f0000000bc0)=@buf_1k="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"}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = dup(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0x0, 'bridge0\x00', 'pimreg1\x00', {}, {0xff}, 0x5c, 0x3, 0x41}, 0x0, 0x2c8, 0x310, 0x0, {0x0, 0x5c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {0x0, 0x0, 0x0, 0x5d}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x4}, {}, {0xfffc}, {0x0, 0x0, 0x0, 0x10001}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x5}, {}, {0x4, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {0xcd2e}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {0x400}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xfd}, {}, {}, {0x3}]}}, @common=@inet=@socket3={{0x28}, 0x7}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000600)={0x2, @raw_data="a136ea3846d172e2257d67a943610e12dd1a1219acbd36301cc43d7a6c506d8a0aeaf51b2a215880a21b79e5e8ec27ba4130169a954616fb2234c796629f950b0e4cf111d3ad21e804d1bf7d6b917d9dc703a48411836f8213da8be4f47dc4099a5e7b99babea5a57dc333c4f96d3f05c7ac0b4ae475e4bafbb5b3ffb3634c82bbf2c3beb79d5353709a10fffb6a5a817a6ec5aa782e71ea6f9724eccac7843308074f8c87d4b77d4f7fa1337b154d9202e37b59a03389c3ba8d0f045c73c117085d245b48d91999"}) r5 = getpid() process_vm_writev(r5, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/140, 0x8c}], 0x3, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe503f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x9) 23.952147292s ago: executing program 3 (id=8487): syz_usb_connect(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000880)={0x1a, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 21.465886863s ago: executing program 2 (id=8504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x4000) 21.321443978s ago: executing program 2 (id=8505): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090000000000d3e9858afc767abdc2fb1900100001000000050008000a0000000000060002000000000014001f000000000000000000000000000000000014002000fe80000000000000000000000000003b050021000100"/105], 0x64}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="0100000500cd960000c85df0e900", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000800"/18, @ANYRES32=r6, @ANYBLOB="0800050007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x2000}) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0310ee7b60e26bbb3996f171f337829e04ac89d19aacc152c9802660ae5eff5e01cbdad510e9cbab8d95f771b7cfeae20b0e8fca53f8da68e3d7ff9b2aa4c20189d4e94c372d65b09566e0060554ea7c479a2d4a995a121ef4f17e13f3ef80f445e4a90ef06433192f5ab6364daa9e3ffc9844e3555ed9f275cb500155580959f1734b649c561dfe199c614a7f7a3a95e373b9e69bb39f8e28432033ef032d8d924cf3003fe9926067a9d9bea6ae85463bb847ee27850e895539444f", @ANYRES32=r6, @ANYBLOB="0af4050008021100c6f0"], 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x40) listen(0xffffffffffffffff, 0xfffffffc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000009000000090000000050000000f0000000100000500000000010000000300000001000000000000000000000300000000040000000500000000000000100000000000000205000000040000000000000000800000090000000000000c030000000a0000000000000905000000060000000000ed120200000001000000000000090100000010000000000000120100000008000000000000070000000000305f6100cc81d61b5c516c36e1570ab46c093b078494c4bdde8ebe63d1fa52ba0d379642ac1ee73673857e296dccfa5bd96c515d3c476b02aaf09c253745d5c16b35bf516e6bfdd3d85ef67ca5297c399ea90ba60b2e7462dd"], &(0x7f0000000480)=""/69, 0xad, 0x45, 0x0, 0x9}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000fda61148c2cfd4f280ef2e0fe2ea0668def8dd069c3332145b8926ff72c81bab10cd8b185f487177e56d0e297532af44ac6f07a985adae5c583bee4b3c937e419a55d5962f9ea2843410e623190b94dc204561158845d2b627517bc300634e9f287ba10858634a55a0acec978036628ea57e33b489b459b3efc88cf1c86e3eb63ef8803e0aac8c1539949bb8eb9f880806", @ANYRESHEX=r3], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="bc0a4703c8b57f000000d03a36f2", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.947088644s ago: executing program 2 (id=8506): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x41000414) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 19.44231628s ago: executing program 3 (id=8511): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)={0x7033, 0x1, [{0x1, 0x1}]}) 19.416156544s ago: executing program 3 (id=8512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 19.379839074s ago: executing program 2 (id=8514): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = timerfd_create(0x7, 0x80800) read(r1, 0x0, 0x53) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd3c, 0x8000, 0x10000000, 0x546, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x800, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) 18.300967298s ago: executing program 3 (id=8515): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r0 = io_uring_setup(0x3a63, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0x8, 0x0) 17.323409751s ago: executing program 3 (id=8517): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x5071, 0x4, 0x4, 0x800008, 0x200004, {}, {0x0, 0x0, 0xee, 0x0, 0xff, 0xfb}, 0x20, 0x2, {0x0}, 0x500000}) 17.159050713s ago: executing program 3 (id=8519): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) semget(0x0, 0x0, 0x39d) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000500)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x10, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d721dd17c1c50d38ef2a565ef1e833236905bdeab900", "a9103939c7050000000000000f6d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef09d7ff445ef66624200004000", [0x4, 0x5666]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@ipv6_deladdrlabel={0x1c, 0x48, 0x1, 0x709d29, 0x25dfdffd, {0xa, 0x0, 0x80, 0x0, 0x0, 0x486}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 17.002765847s ago: executing program 2 (id=8520): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='none\n', 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r9, &(0x7f00000005c0)='active\n', 0x7) write(0xffffffffffffffff, &(0x7f0000000640)='0\n', 0x2) 16.031858121s ago: executing program 2 (id=8522): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)={0x7033, 0x1, [{0x1, 0x1}]}) 12.658355509s ago: executing program 0 (id=8533): r0 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x0, 0x2, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) 10.96388776s ago: executing program 0 (id=8536): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x7fe, 0x3}, 0x0, 0x0, 0x0, 0x0) personality(0xbe4e602dc9e6c1d3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) gettid() r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x8140) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000002c0)=0x5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x78) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) r4 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$lock(r2, 0x5, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) 7.087179917s ago: executing program 0 (id=8544): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000008c0)={0x1c, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b04, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x40000c1, 0x7, 0x4, "b19520000001000000fd4e94e9ff9b00", 0x51424752}) 6.659156357s ago: executing program 7 (id=8545): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x9, 0x20ffd}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3dba, 0x81, 0x0, 0x5}]}) syz_open_dev$swradio(&(0x7f0000002300), 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 5.969026848s ago: executing program 7 (id=8546): r0 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x0, 0x2, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) 4.788464094s ago: executing program 7 (id=8547): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) r3 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) write(r2, &(0x7f0000000180)="01", 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000006c0)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.586251704s ago: executing program 6 (id=8550): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b5"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x10000009, 0xd11fffd, 0x100, 0x0, {0x6188, 0x7ff, 0x5, 0xcc8, 0x400, 0x7, 0x3, 0x9, 0x200, 0x6c5, 0xfc8c, 0x5, 0x40, 0x100001, "055902fe5165fd5b2c0958e3c8a04056e1a42c0000000000020000ed1200"}}) 3.840271163s ago: executing program 0 (id=8551): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x9, 0x20ffd}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3dba, 0x81, 0x0, 0x5}]}) syz_open_dev$swradio(&(0x7f0000002300), 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000100)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='ext4\x00', 0x800000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000580)={0x4, 0xb, 0x1, "8940aa244d9e0ddf4bae49023188b828468153df7b3e2ef4d9cc9a02ebafa89b", 0x56555959}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo=1,retrans=1,sec=krb5,\x00h']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x2}) 3.164347035s ago: executing program 6 (id=8552): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={r1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066efc4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x42}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000100)=0xbffe) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)=ANY=[@ANYBLOB="1c0000001800070125bd7000000000002d7c3f000800b87f0000000709fd73a7c3401346df49b592dbfdf4b239fab84fa1d2518e0ca4e562befb630091ef6bf6997c2976e7578ce3b1a67c8cc1a282a0bc"], 0x1c}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r4}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r10}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r10, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r11, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) close_range(r8, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r0]) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f0000000800)=""/135, 0x87) syz_fuse_handle_req(r0, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000002340)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x86334da3972c1e55, 0xd, 0x8, 0x7, 0x5, 0x0, 0x0, 0x80, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xa2, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd60000000006c2b0020010000000000000000000000000002fe8000005900000000000000000000aa87000000000000004e214e211664907802db0000000000000000000034e540e3dd227ff71fcd0abe58075273e435d14b3a977b28387a1ae7465338d45cb275b4b588031e04941ebfaa96d7bfcf0372b8d2850b69fd413d0667f5c2b37bbd83be6ba638018bb23c"], 0x0) 2.872600559s ago: executing program 0 (id=8553): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000a29000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000009500000000000000150511203fb0882e4d2daf4d63c71dd50a282e707847831514b53142a30e4ed5c31d601563438e1c516544fc658f1244f1567b811985d944c76ca91fea9db4ea826b053069a291b3f309e74aba82192ea57289673ca6453a02ea143410c30a3236daf9a6"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x4}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b1a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x55, 0x0, &(0x7f0000000300)="e255defda74d2b9f66e904ff3a8d8c469d3f88d21c70cab1887c6ed68989f61212f116cd99e7e919b16a3ea4e8065654e4eb9896183ffe525383598e3845fbde31ad926f00d51194db97367cccbb1b62dfd26fcf88", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000080)=0x6) write$cgroup_pid(r5, &(0x7f0000000200)=r7, 0x12) 2.170175245s ago: executing program 0 (id=8554): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = memfd_secret(0x80000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000340)=""/231) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0x40, 0x5, 0x4, 0x2, r2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="f081550000a000000f0048180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c0080f3232420f01c30f5966ba2c0cb8c087678eef650f32080ced45c194710a000000058a3bc4827dbcae009008f2", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r7, 0x4068aea3, &(0x7f0000000440)={0xc1, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x8e2}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r9 = openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000280)={0x88100400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000000)='&({-\xd8@\'^!^)(-,\xe7#%(*\x1d\'\x00', &(0x7f0000000100)="4cc26f154362ff4176b54df31e1769da91e80abd5b19d53311bf17652816e1126423bf729bd7293e4218b6bc10cb8e698d30aa610f3cfb65ed6f278f05cca7c50bd8da829acafa03a80e6c7569cbc325b34d8b0d86e5c722fdd84785d0bf4ef3d7966f9cf2e46644cd5faf224ceecc8a1bcb8df576966443fa984ebf3f087ffbdd936d444cc38e8d59966f784482f8c7a420d38b957824b987008a926101b1df8cfb55bfb84619e20ef4c316a676bcc004bf72e57f634d36c0deba18dbb6d4c06a907c827848e38176c4d753fcea2a76dd3c07c71869cc1c6985af55384adfc7d49288e9de6de4ffc0dc1400aeef", 0xee) 2.16982316s ago: executing program 6 (id=8555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r3, 0x289e0cb5, 0x0) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x50) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xe2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 1.926157467s ago: executing program 35 (id=8519): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) semget(0x0, 0x0, 0x39d) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000500)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x10, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d721dd17c1c50d38ef2a565ef1e833236905bdeab900", "a9103939c7050000000000000f6d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef09d7ff445ef66624200004000", [0x4, 0x5666]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@ipv6_deladdrlabel={0x1c, 0x48, 0x1, 0x709d29, 0x25dfdffd, {0xa, 0x0, 0x80, 0x0, 0x0, 0x486}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 1.502640061s ago: executing program 7 (id=8557): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='none\n', 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r9, &(0x7f00000005c0)='active\n', 0x7) write(0xffffffffffffffff, &(0x7f0000000640)='0\n', 0x2) 1.428403052s ago: executing program 6 (id=8558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x11080}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r6, @ANYBLOB="05001f0002000000080021"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000002400000008000300", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0xa, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x14, r1, 0x5, 0x2, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x0) r9 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="518af7bc", 0x4, 0xfffffffffffffffc) r10 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="6472f2b5ee8276d74fb2dae6c87b79b9e9a2c9e9eaea2c3cf967ed72ec967f4151f572ae", 0x24, 0xfffffffffffffffd) r11 = add_key$user(&(0x7f0000000400), &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000540)="a710cfbcb548797651853e07c95c750248c6dd0e7f5d4f730b00d5e29397d23e6834b5a4827acd760a6dc4a00a726ff31bcc85d81a563c6af081b4ed85dad852d413502288b49464edde96dca6d68b2e3cf2a8d5ae208e8d1f34", 0x5a, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r9, r10, r11}, &(0x7f0000002640)=""/4096, 0x1000, &(0x7f0000003700)={&(0x7f0000003640)={'tgr192\x00'}, &(0x7f0000003680)="197fe55ffb78dc629fd700457e649109d47e2b63bbf57903c026566616193a550836b1e9f721c758340f244b1a70e2f82a514868a9bdab0bb420a6fb45d3a892b69b366ea8df1a724c3fb2e10b591659554089767adae5d852a8cb90b6b9e2228d0b52819e2d3c8f475fd87a68a4b9fcf05cee3c1a3f5d", 0x77}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x3c}}, 0x0) 1.067114174s ago: executing program 7 (id=8559): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x8e000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000540)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$vim2m(0x0, 0x800000, 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4efb3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d002303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e01096347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6850ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab90e00000000000000685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aaee24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e29c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c78e87b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10020, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80000, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7f, 0x8, 0x10000000, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0xb, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4588, 0x40, 0x0, 0xbc}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 616.966962ms ago: executing program 36 (id=8522): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)={0x7033, 0x1, [{0x1, 0x1}]}) 574.252154ms ago: executing program 6 (id=8561): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x8e000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000540)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef0000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r6}, 0x38) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10020, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80000, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7f, 0x8, 0x10000000, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0xb, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4588, 0x40, 0x0, 0xbc}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 348.274875ms ago: executing program 7 (id=8562): timer_gettime(0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2000000018) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mount(&(0x7f0000000140)=@rnullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='hpfs\x00', 0x80014, &(0x7f0000000240)='.@\x00') r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x14, 0x5, 0x57e, 0x2017, 0x0, 0x0, "05010905a1018521150026ff00750895308102c0"}}, 0x12c) nanosleep(0x0, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0c000000310021000000000000000000000000800200000b000011223344556600"/45], 0x37) write$UHID_INPUT2(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="0c000000310021000000000000000000000000800300"/45], 0x37) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="0c000000310021000000000000000000000000803000"/39], 0x37) nanosleep(0x0, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='\f\x00\x00\x001\x00!\x00'/46], 0x37) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r2) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) 0s ago: executing program 6 (id=8563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x840) (fail_nth: 1) kernel console output (not intermixed with test programs): py, interval 1, probability 0, space 0, times 0 [ 3313.661543][ T4886] CPU: 1 UID: 0 PID: 4886 Comm: syz.6.8275 Tainted: G L syzkaller #0 PREEMPT(full) [ 3313.661568][ T4886] Tainted: [L]=SOFTLOCKUP [ 3313.661575][ T4886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3313.661590][ T4886] Call Trace: [ 3313.661596][ T4886] [ 3313.661604][ T4886] dump_stack_lvl+0x100/0x190 [ 3313.661637][ T4886] should_fail_ex.cold+0x5/0xa [ 3313.661664][ T4886] _copy_from_user+0x2e/0xd0 [ 3313.661689][ T4886] copy_msghdr_from_user+0x9f/0x4c0 [ 3313.661718][ T4886] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3313.661746][ T4886] ? lock_acquire+0x1d1/0x380 [ 3313.661768][ T4886] ? get_pid_task+0x2a/0x250 [ 3313.661795][ T4886] ___sys_sendmsg+0x106/0x1e0 [ 3313.661817][ T4886] ? __pfx____sys_sendmsg+0x10/0x10 [ 3313.661836][ T4886] ? get_pid_task+0x106/0x250 [ 3313.661859][ T4886] ? find_held_lock+0x2b/0x80 [ 3313.661890][ T4886] __sys_sendmsg+0x160/0x210 [ 3313.661915][ T4886] ? __pfx___sys_sendmsg+0x10/0x10 [ 3313.661951][ T4886] do_syscall_64+0x123/0x790 [ 3313.661966][ T4886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3313.661978][ T4886] RIP: 0033:0x7f985479e159 [ 3313.661988][ T4886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3313.661999][ T4886] RSP: 002b:00007f98556d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3313.662011][ T4886] RAX: ffffffffffffffda RBX: 00007f9854a25fa0 RCX: 00007f985479e159 [ 3313.662019][ T4886] RDX: 0000000004000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 3313.662026][ T4886] RBP: 00007f98556d0090 R08: 0000000000000000 R09: 0000000000000000 [ 3313.662032][ T4886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3313.662039][ T4886] R13: 00007f9854a26038 R14: 00007f9854a25fa0 R15: 00007fffa5416138 [ 3313.662053][ T4886] [ 3313.879229][ T31] audit: type=1400 audit(1791146298.728:1024): avc: denied { unmount } for pid=27926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 3313.963492][ T4881] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8273'. [ 3313.964410][ T4881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3314.518755][ T4900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3314.534131][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 3314.534149][ T31] audit: type=1400 audit(1791146299.358:1029): avc: denied { name_connect } for pid=4899 comm="syz.0.8280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 3314.534194][ T31] audit: type=1400 audit(1791146299.358:1030): avc: denied { name_connect } for pid=4899 comm="syz.0.8280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 3315.015110][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8273'. [ 3315.015188][ T4882] tipc: Resetting bearer [ 3315.174283][ T4914] FAULT_INJECTION: forcing a failure. [ 3315.174283][ T4914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3315.174315][ T4914] CPU: 1 UID: 0 PID: 4914 Comm: syz.0.8282 Tainted: G L syzkaller #0 PREEMPT(full) [ 3315.174340][ T4914] Tainted: [L]=SOFTLOCKUP [ 3315.174346][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3315.174356][ T4914] Call Trace: [ 3315.174361][ T4914] [ 3315.174367][ T4914] dump_stack_lvl+0x100/0x190 [ 3315.174392][ T4914] should_fail_ex.cold+0x5/0xa [ 3315.174413][ T4914] _copy_from_user+0x2e/0xd0 [ 3315.174433][ T4914] copy_msghdr_from_user+0x9f/0x4c0 [ 3315.174451][ T4914] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3315.174472][ T4914] ? __lock_acquire+0x5c0/0x1f40 [ 3315.174493][ T4914] ___sys_recvmsg+0xdd/0x1a0 [ 3315.174510][ T4914] ? __pfx____sys_recvmsg+0x10/0x10 [ 3315.174526][ T4914] ? lock_acquire+0x1d1/0x380 [ 3315.174557][ T4914] __x64_sys_recvmsg+0x19a/0x260 [ 3315.174579][ T4914] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 3315.174611][ T4914] do_syscall_64+0x123/0x790 [ 3315.174631][ T4914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3315.174652][ T4914] RIP: 0033:0x7fcad9b9e159 [ 3315.174665][ T4914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3315.174678][ T4914] RSP: 002b:00007fcada9b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3315.174693][ T4914] RAX: ffffffffffffffda RBX: 00007fcad9e25fa0 RCX: 00007fcad9b9e159 [ 3315.174703][ T4914] RDX: 0000000040012141 RSI: 00002000000038c0 RDI: 0000000000000003 [ 3315.174717][ T4914] RBP: 00007fcada9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 3315.174726][ T4914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3315.174734][ T4914] R13: 00007fcad9e26038 R14: 00007fcad9e25fa0 R15: 00007fffacd4b358 [ 3315.174755][ T4914] [ 3315.179872][ T4882] tipc: Disabling bearer [ 3315.525443][ T31] audit: type=1400 audit(1791146300.378:1031): avc: denied { read } for pid=4916 comm="syz.0.8284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3315.763122][ T4929] /dev/sg0: Can't lookup blockdev [ 3315.812734][ T31] audit: type=1400 audit(1791146300.638:1032): avc: denied { mount } for pid=4925 comm="syz.0.8286" name="/" dev="rpc_pipefs" ino=116762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 3315.862537][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8286'. [ 3316.027246][ T4769] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 3316.102440][T29096] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 3316.192645][ T4769] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 3316.195196][ T4769] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 3316.197088][ T4769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3316.197104][ T4769] usb 7-1: Product: syz [ 3316.197112][ T4769] usb 7-1: Manufacturer: syz [ 3316.197121][ T4769] usb 7-1: SerialNumber: syz [ 3316.201635][ T4919] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 3316.264661][T29096] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 3316.270673][T29096] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 3316.270695][T29096] usb 8-1: Product: syz [ 3316.270704][T29096] usb 8-1: Manufacturer: syz [ 3316.270713][T29096] usb 8-1: SerialNumber: syz [ 3316.276654][T29096] usb 8-1: config 0 descriptor?? [ 3316.281471][T29096] ch341 8-1:0.0: ch341-uart converter detected [ 3316.308756][ T31] audit: type=1400 audit(1791146301.158:1033): avc: denied { unmount } for pid=27926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 3316.404144][ T4919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3316.404551][ T4919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.415103][ T4919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3316.415511][ T4919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.416402][ T4919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3316.442624][ T4919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.447144][ T4919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3316.447526][ T4919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.477814][ T4919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3316.478209][ T4919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.556151][ T4935] CIFS: Attempting to mount //127.0.0.1/share [ 3316.842113][ T4729] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 3316.975654][ T4945] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 3316.975793][ T4945] Error validating options; rc = [-22] [ 3317.042267][ T4729] usb 1-1: Using ep0 maxpacket: 32 [ 3317.044467][ T4729] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3317.295598][ T4729] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 3317.295627][ T4729] usb 1-1: config 0 has no interface number 0 [ 3317.319374][ T4729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3317.319400][ T4729] usb 1-1: Product: syz [ 3317.319438][ T4729] usb 1-1: Manufacturer: syz [ 3317.319453][ T4729] usb 1-1: SerialNumber: syz [ 3317.345054][ T4729] usb 1-1: config 0 descriptor?? [ 3317.394939][ T4935] CIFS: VFS: cifs_mount failed w/return code = -112 [ 3317.706828][ T4952] FAULT_INJECTION: forcing a failure. [ 3317.706828][ T4952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3317.706854][ T4952] CPU: 1 UID: 0 PID: 4952 Comm: syz.2.8291 Tainted: G L syzkaller #0 PREEMPT(full) [ 3317.706879][ T4952] Tainted: [L]=SOFTLOCKUP [ 3317.706886][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3317.706896][ T4952] Call Trace: [ 3317.706902][ T4952] [ 3317.706910][ T4952] dump_stack_lvl+0x100/0x190 [ 3317.706936][ T4952] should_fail_ex.cold+0x5/0xa [ 3317.706953][ T4952] _copy_from_user+0x2e/0xd0 [ 3317.706968][ T4952] copy_msghdr_from_user+0x9f/0x4c0 [ 3317.706982][ T4952] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3317.707007][ T4952] ? lock_acquire+0x1d1/0x380 [ 3317.707027][ T4952] ? get_pid_task+0x2a/0x250 [ 3317.707053][ T4952] ___sys_sendmsg+0x106/0x1e0 [ 3317.707074][ T4952] ? __pfx____sys_sendmsg+0x10/0x10 [ 3317.707088][ T4952] ? get_pid_task+0x106/0x250 [ 3317.707109][ T4952] ? find_held_lock+0x2b/0x80 [ 3317.707146][ T4952] __sys_sendmsg+0x160/0x210 [ 3317.707174][ T4952] ? __pfx___sys_sendmsg+0x10/0x10 [ 3317.707212][ T4952] do_syscall_64+0x123/0x790 [ 3317.707235][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3317.707254][ T4952] RIP: 0033:0x7f49f719e159 [ 3317.707270][ T4952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3317.707287][ T4952] RSP: 002b:00007f49f8002028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3317.707306][ T4952] RAX: ffffffffffffffda RBX: 00007f49f7425fa0 RCX: 00007f49f719e159 [ 3317.707318][ T4952] RDX: 0000000024008002 RSI: 0000200000000080 RDI: 0000000000000003 [ 3317.707330][ T4952] RBP: 00007f49f8002090 R08: 0000000000000000 R09: 0000000000000000 [ 3317.707341][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3317.707352][ T4952] R13: 00007f49f7426038 R14: 00007f49f7425fa0 R15: 00007ffe43cf6778 [ 3317.707378][ T4952] [ 3317.875732][ T4729] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 3317.875763][ T4729] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3318.033604][T29096] usb 8-1: failed to send control message: -71 [ 3318.033678][T29096] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 3318.058355][T29096] usb 8-1: USB disconnect, device number 2 [ 3318.069007][T29096] ch341 8-1:0.0: device disconnected [ 3318.154646][ T31] audit: type=1400 audit(1791146303.008:1034): avc: denied { ioctl } for pid=4953 comm="syz.2.8292" path="socket:[116077]" dev="sockfs" ino=116077 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3318.341459][ T4729] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3318.341760][ T4729] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 3318.410614][ T4729] usb 1-1: USB disconnect, device number 114 [ 3318.571341][ T4961] FAULT_INJECTION: forcing a failure. [ 3318.571341][ T4961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3318.571363][ T4961] CPU: 0 UID: 0 PID: 4961 Comm: syz.3.8294 Tainted: G L syzkaller #0 PREEMPT(full) [ 3318.571379][ T4961] Tainted: [L]=SOFTLOCKUP [ 3318.571383][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3318.571390][ T4961] Call Trace: [ 3318.571394][ T4961] [ 3318.571399][ T4961] dump_stack_lvl+0x100/0x190 [ 3318.571422][ T4961] should_fail_ex.cold+0x5/0xa [ 3318.571438][ T4961] _copy_from_user+0x2e/0xd0 [ 3318.571453][ T4961] move_addr_to_kernel+0x65/0x170 [ 3318.571467][ T4961] __sys_connect+0xb5/0x170 [ 3318.571482][ T4961] ? __pfx___sys_connect+0x10/0x10 [ 3318.571496][ T4961] ? __fget_files+0x21f/0x3d0 [ 3318.571516][ T4961] ? __pfx_ksys_write+0x10/0x10 [ 3318.571534][ T4961] __x64_sys_connect+0x72/0xb0 [ 3318.571549][ T4961] ? lockdep_hardirqs_on+0x7d/0x110 [ 3318.571564][ T4961] do_syscall_64+0x123/0x790 [ 3318.571578][ T4961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3318.571590][ T4961] RIP: 0033:0x7fbc8959e159 [ 3318.571599][ T4961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3318.571610][ T4961] RSP: 002b:00007fbc8a4d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 3318.571623][ T4961] RAX: ffffffffffffffda RBX: 00007fbc89825fa0 RCX: 00007fbc8959e159 [ 3318.571634][ T4961] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000003 [ 3318.571645][ T4961] RBP: 00007fbc8a4d0090 R08: 0000000000000000 R09: 0000000000000000 [ 3318.571656][ T4961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3318.571666][ T4961] R13: 00007fbc89826038 R14: 00007fbc89825fa0 R15: 00007fffd9cff288 [ 3318.571690][ T4961] [ 3318.674417][ T4769] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3318.806481][ T4769] usb 7-1: USB disconnect, device number 81 [ 3319.067731][ T4977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3319.085236][ T31] audit: type=1400 audit(1791146303.938:1035): avc: denied { create } for pid=4974 comm="syz.7.8298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3319.278355][ T4978] md: could not open device unknown-block(1,0). [ 3319.278596][ T4981] md: could not open device unknown-block(1,1). [ 3319.606895][ T4995] usb usb8: usbfs: process 4995 (syz.0.8302) did not claim interface 0 before use [ 3320.541924][ T5000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8303'. [ 3320.787027][ T31] audit: type=1400 audit(1791146305.638:1036): avc: denied { create } for pid=5002 comm="syz.7.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 3321.746836][ T31] audit: type=1400 audit(1791146306.208:1037): avc: denied { create } for pid=5002 comm="syz.7.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3321.746885][ T31] audit: type=1400 audit(1791146306.458:1038): avc: denied { write } for pid=5002 comm="syz.7.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3321.746919][ T31] audit: type=1400 audit(1791146306.578:1039): avc: denied { setopt } for pid=5002 comm="syz.7.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 3322.696525][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 3322.696576][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 3322.775738][ T31] audit: type=1400 audit(1791146307.628:1040): avc: denied { search } for pid=5270 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3322.777824][ T31] audit: type=1400 audit(1791146307.628:1041): avc: denied { search } for pid=5270 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3322.781602][ T31] audit: type=1400 audit(1791146307.628:1042): avc: denied { search } for pid=5270 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3322.781847][ T31] audit: type=1400 audit(1791146307.628:1043): avc: denied { read } for pid=5270 comm="dhcpcd" name="n78" dev="tmpfs" ino=9378 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3322.842563][ T31] audit: type=1400 audit(1791146307.658:1044): avc: denied { open } for pid=5270 comm="dhcpcd" path="/run/udev/data/n78" dev="tmpfs" ino=9378 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3322.842609][ T31] audit: type=1400 audit(1791146307.658:1045): avc: denied { getattr } for pid=5270 comm="dhcpcd" path="/run/udev/data/n78" dev="tmpfs" ino=9378 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3324.355810][ T4729] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 3324.504813][ T4729] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3324.622209][ T4729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3324.622236][ T4729] usb 3-1: Product: syz [ 3324.622251][ T4729] usb 3-1: Manufacturer: syz [ 3324.622265][ T4729] usb 3-1: SerialNumber: syz [ 3324.716360][ T5052] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 3324.716460][ T5052] Error validating options; rc = [-22] [ 3325.150394][ T4769] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3326.075415][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 3326.075432][ T31] audit: type=1400 audit(1791146310.928:1060): avc: denied { write } for pid=5065 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3326.077127][ T31] audit: type=1400 audit(1791146310.928:1061): avc: denied { remove_name } for pid=5065 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=9396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3326.077578][ T31] audit: type=1400 audit(1791146310.928:1062): avc: denied { unlink } for pid=5065 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=9396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3326.194989][ T4769] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3326.195324][ T4769] ath9k_htc: Failed to initialize the device [ 3326.364869][ T5071] syz_tun: entered allmulticast mode [ 3326.370613][ T5072] openvswitch: netlink: Unknown key attributes 1 [ 3326.451838][ T4769] usb 3-1: ath9k_htc: USB layer deinitialized [ 3326.455357][ T5069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3326.715782][T19563] usb 3-1: USB disconnect, device number 104 [ 3326.742759][ T414] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 3326.791525][ T5079] FAULT_INJECTION: forcing a failure. [ 3326.791525][ T5079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3326.791548][ T5079] CPU: 1 UID: 0 PID: 5079 Comm: syz.0.8320 Tainted: G L syzkaller #0 PREEMPT(full) [ 3326.791563][ T5079] Tainted: [L]=SOFTLOCKUP [ 3326.791568][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3326.791574][ T5079] Call Trace: [ 3326.791579][ T5079] [ 3326.791585][ T5079] dump_stack_lvl+0x100/0x190 [ 3326.791605][ T5079] should_fail_ex.cold+0x5/0xa [ 3326.791621][ T5079] _copy_from_user+0x2e/0xd0 [ 3326.791636][ T5079] __sys_bpf+0x2f5/0x4a30 [ 3326.791653][ T5079] ? __pfx___sys_bpf+0x10/0x10 [ 3326.791664][ T5079] ? find_held_lock+0x2b/0x80 [ 3326.791681][ T5079] ? get_pid_task+0xfc/0x250 [ 3326.791696][ T5079] ? get_pid_task+0xfc/0x250 [ 3326.791717][ T5079] ? find_held_lock+0x2b/0x80 [ 3326.791737][ T5079] ? rcu_read_lock_any_held+0x6a/0x90 [ 3326.791754][ T5079] ? find_held_lock+0x2b/0x80 [ 3326.791771][ T5079] ? ksys_write+0x190/0x250 [ 3326.791784][ T5079] ? ksys_write+0x190/0x250 [ 3326.791797][ T5079] ? lock_acquire+0x1d1/0x380 [ 3326.791817][ T5079] ? fput+0x7c/0x100 [ 3326.791833][ T5079] ? ksys_write+0x1ac/0x250 [ 3326.791847][ T5079] ? __x64_sys_bpf+0xce/0x140 [ 3326.791859][ T5079] __x64_sys_bpf+0xce/0x140 [ 3326.791876][ T5079] ? do_syscall_64+0xae/0x790 [ 3326.791894][ T5079] do_syscall_64+0x123/0x790 [ 3326.791914][ T5079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3326.791932][ T5079] RIP: 0033:0x7fcad9b9e159 [ 3326.791942][ T5079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3326.791953][ T5079] RSP: 002b:00007fcada9b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3326.791965][ T5079] RAX: ffffffffffffffda RBX: 00007fcad9e25fa0 RCX: 00007fcad9b9e159 [ 3326.791973][ T5079] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 3326.791980][ T5079] RBP: 00007fcada9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 3326.791986][ T5079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3326.791993][ T5079] R13: 00007fcad9e26038 R14: 00007fcad9e25fa0 R15: 00007fffacd4b358 [ 3326.792007][ T5079] [ 3326.866087][ T31] audit: type=1400 audit(1791146311.718:1063): avc: denied { read write } for pid=5080 comm="syz.3.8321" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3326.868043][ T31] audit: type=1400 audit(1791146311.718:1064): avc: denied { open } for pid=5080 comm="syz.3.8321" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3326.892957][ T414] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3326.894058][ T414] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3326.894078][ T414] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3326.894892][ T414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 3326.894911][ T414] usb 7-1: SerialNumber: syz [ 3327.822291][ T5091] mount: server 127. not responding, timed out [ 3327.878846][ T5099] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 3327.878947][ T5099] Error validating options; rc = [-22] [ 3328.568783][ T31] audit: type=1400 audit(1791146313.418:1065): avc: denied { read } for pid=5100 comm="syz.0.8328" dev="sockfs" ino=116506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3328.684517][ T31] audit: type=1400 audit(1791146313.538:1066): avc: denied { ioctl } for pid=5103 comm="syz.7.8329" path="socket:[116518]" dev="sockfs" ino=116518 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3328.700290][ T5108] ip_tables: iptables: counters copy to user failed while replacing table [ 3328.705178][ T5108] FAULT_INJECTION: forcing a failure. [ 3328.705178][ T5108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3328.705206][ T5108] CPU: 1 UID: 0 PID: 5108 Comm: syz.2.8330 Tainted: G L syzkaller #0 PREEMPT(full) [ 3328.705229][ T5108] Tainted: [L]=SOFTLOCKUP [ 3328.705237][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3328.705247][ T5108] Call Trace: [ 3328.705253][ T5108] [ 3328.705260][ T5108] dump_stack_lvl+0x100/0x190 [ 3328.705287][ T5108] should_fail_ex.cold+0x5/0xa [ 3328.705311][ T5108] _copy_to_user+0x32/0xd0 [ 3328.705333][ T5108] simple_read_from_buffer+0xcb/0x170 [ 3328.705357][ T5108] proc_fail_nth_read+0x1af/0x230 [ 3328.705380][ T5108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3328.705403][ T5108] ? rw_verify_area+0xce/0x6d0 [ 3328.705420][ T5108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3328.705442][ T5108] vfs_read+0x1e4/0xb40 [ 3328.705461][ T5108] ? lock_acquire+0x1d1/0x380 [ 3328.705479][ T5108] ? __fget_files+0x34/0x3d0 [ 3328.705499][ T5108] ? __pfx_vfs_read+0x10/0x10 [ 3328.705516][ T5108] ? find_held_lock+0x2b/0x80 [ 3328.705539][ T5108] ? __fget_files+0x215/0x3d0 [ 3328.705570][ T5108] ? __fget_files+0x21f/0x3d0 [ 3328.705597][ T5108] ksys_read+0x12a/0x250 [ 3328.705615][ T5108] ? __pfx_ksys_read+0x10/0x10 [ 3328.705640][ T5108] do_syscall_64+0x123/0x790 [ 3328.705661][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3328.705678][ T5108] RIP: 0033:0x7f49f715e98e [ 3328.705692][ T5108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3328.705707][ T5108] RSP: 002b:00007f49f8001fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3328.705724][ T5108] RAX: ffffffffffffffda RBX: 00007f49f80026c0 RCX: 00007f49f715e98e [ 3328.705735][ T5108] RDX: 000000000000000f RSI: 00007f49f80020a0 RDI: 0000000000000004 [ 3328.705744][ T5108] RBP: 00007f49f8002090 R08: 0000000000000000 R09: 0000000000000000 [ 3328.705754][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3328.705764][ T5108] R13: 00007f49f7426038 R14: 00007f49f7425fa0 R15: 00007ffe43cf6778 [ 3328.705787][ T5108] [ 3329.342574][ T1178] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 3329.370811][ T414] usb 7-1: 0:2 : does not exist [ 3329.370850][ T414] usb 7-1: unit 5 not found! [ 3329.399363][ T5071] syz_tun: left allmulticast mode [ 3329.664549][ T31] audit: type=1400 audit(1791146314.468:1067): avc: denied { name_bind } for pid=5117 comm="syz.0.8334" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 3329.963583][ T1178] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3329.964547][ T1178] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3329.964582][ T1178] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3329.966307][ T1178] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3329.966327][ T1178] usb 8-1: Product: syz [ 3329.966340][ T1178] usb 8-1: Manufacturer: syz [ 3329.966353][ T1178] usb 8-1: SerialNumber: syz [ 3329.984757][ T414] usb 7-1: USB disconnect, device number 82 [ 3330.089526][ T1178] cdc_mbim 8-1:1.0: skipping garbage [ 3330.136250][ T4825] udevd[4825]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3330.313409][ T5113] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 3330.329415][ T31] audit: type=1400 audit(1791146315.178:1068): avc: denied { listen } for pid=5125 comm="syz.3.8336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3330.521405][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3330.521665][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3330.618023][ T31] audit: type=1400 audit(1791146315.468:1069): avc: denied { setopt } for pid=5133 comm="syz.6.8340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3330.941704][ T5113] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 3330.943832][ T1178] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 3330.997609][ T1178] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 3331.357251][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 3331.357270][ T31] audit: type=1400 audit(1791146316.208:1072): avc: denied { mounton } for pid=5141 comm="syz.3.8342" path="/428/file0" dev="tmpfs" ino=2351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3331.357861][ T5144] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 3331.357889][ T5144] CIFS mount error: No usable UNC path provided in device string! [ 3331.357889][ T5144] [ 3331.357950][ T5144] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3331.618081][ T1178] wwan wwan0: port wwan0mbim0 attached [ 3332.599136][ T1178] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 7a:96:98:73:08:f5 [ 3332.629473][ T1178] usb 8-1: USB disconnect, device number 3 [ 3332.631743][ T1178] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 3333.380892][ T1178] wwan wwan0: port wwan0mbim0 disconnected [ 3333.390248][ T31] audit: type=1400 audit(1791146318.238:1073): avc: denied { watch } for pid=5155 comm="syz.2.8345" path="/483/control" dev="tmpfs" ino=2625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3333.840452][ T5165] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 3333.840554][ T5165] Error validating options; rc = [-22] [ 3334.452874][ T1178] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 3334.797279][ T31] audit: type=1400 audit(1791146319.648:1074): avc: denied { execute } for pid=5167 comm="syz.3.8348" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=116698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3334.880277][ T1178] usb 8-1: Using ep0 maxpacket: 32 [ 3334.903918][ T1178] usb 8-1: New USB device found, idVendor=1f4d, idProduct=0237, bcdDevice=8b.02 [ 3334.989665][ T1178] usb 8-1: config 15 has an invalid interface number: 153 but max is 0 [ 3334.989685][ T1178] usb 8-1: config 15 has an invalid descriptor of length 235, skipping remainder of the config [ 3334.989696][ T1178] usb 8-1: config 15 has no interface number 0 [ 3334.989712][ T1178] usb 8-1: config 15 interface 153 has no altsetting 0 [ 3335.128405][ T1178] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3335.128423][ T1178] usb 8-1: Product: syz [ 3335.128431][ T1178] usb 8-1: Manufacturer: syz [ 3335.128441][ T1178] usb 8-1: SerialNumber: syz [ 3335.434661][ T4769] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 3335.700401][ T4769] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3335.703162][ T4769] usb 4-1: not running at top speed; connect to a high speed hub [ 3335.703192][ T4769] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 3335.747225][ T4769] usb 4-1: config 4 has an invalid interface number: 135 but max is 0 [ 3335.747253][ T4769] usb 4-1: config 4 has no interface number 0 [ 3335.747597][ T4769] usb 4-1: config 4 interface 135 has no altsetting 0 [ 3335.791645][ T4769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3335.791672][ T4769] usb 4-1: Product: syz [ 3335.791687][ T4769] usb 4-1: Manufacturer: syz [ 3335.791702][ T4769] usb 4-1: SerialNumber: syz [ 3335.818370][ T31] audit: type=1326 audit(1791146320.668:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.8350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad9b9e159 code=0x7ffc0000 [ 3335.819741][ T5177] FAULT_INJECTION: forcing a failure. [ 3335.819741][ T5177] name failslab, interval 1, probability 0, space 0, times 0 [ 3335.819768][ T5177] CPU: 1 UID: 0 PID: 5177 Comm: syz.0.8350 Tainted: G L syzkaller #0 PREEMPT(full) [ 3335.819795][ T5177] Tainted: [L]=SOFTLOCKUP [ 3335.819802][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3335.819811][ T5177] Call Trace: [ 3335.819818][ T5177] [ 3335.819825][ T5177] dump_stack_lvl+0x100/0x190 [ 3335.819855][ T5177] should_fail_ex.cold+0x5/0xa [ 3335.819881][ T5177] should_failslab+0xc2/0x120 [ 3335.819906][ T5177] kmem_cache_alloc_noprof+0x92/0x6a0 [ 3335.819929][ T5177] ? audit_log_start+0x29d/0x930 [ 3335.819953][ T5177] audit_log_start+0x29d/0x930 [ 3335.819974][ T5177] ? __pfx_audit_log_start+0x10/0x10 [ 3335.819995][ T5177] ? rcu_read_lock_any_held+0x6a/0x90 [ 3335.820022][ T5177] ? find_held_lock+0x2b/0x80 [ 3335.820047][ T5177] ? ksys_write+0x190/0x250 [ 3335.820068][ T5177] ? ksys_write+0x190/0x250 [ 3335.820090][ T5177] audit_seccomp+0x61/0x1f0 [ 3335.820118][ T5177] __seccomp_filter+0x88c/0x1130 [ 3335.820133][ T31] audit: type=1326 audit(1791146320.668:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.8350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad9b9e159 code=0x7ffc0000 [ 3335.820149][ T5177] ? __pfx___seccomp_filter+0x10/0x10 [ 3335.820196][ T5177] ? ksys_write+0x1ac/0x250 [ 3335.820217][ T5177] ? __pfx_ksys_write+0x10/0x10 [ 3335.820238][ T5177] __seccomp_permit_syscall+0x224/0x2e0 [ 3335.820248][ T31] audit: type=1326 audit(1791146320.668:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.8350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcad9b9e159 code=0x7ffc0000 [ 3335.820268][ T5177] do_syscall_64+0x591/0x790 [ 3335.820288][ T31] audit: type=1326 audit(1791146320.668:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.8350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad9b9e159 code=0x7ffc0000 [ 3335.820292][ T5177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3335.820310][ T5177] RIP: 0033:0x7fcad9b9e159 [ 3335.820326][ T5177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3335.820329][ T31] audit: type=1326 audit(1791146320.668:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.8350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad9b9e159 code=0x7ffc0000 [ 3335.820343][ T5177] RSP: 002b:00007fcada9b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 3335.820363][ T5177] RAX: ffffffffffffffda RBX: 00007fcad9e25fa0 RCX: 00007fcad9b9e159 [ 3335.820367][ T31] audit: type=1326 audit(1791146320.668:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.8350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcad9b5e98e code=0x7ffc0000 [ 3335.820375][ T5177] RDX: ffffffffffff563b RSI: 0000000000000000 RDI: 0000000000004000 [ 3335.820386][ T5177] RBP: 00007fcada9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 3335.820398][ T5177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3335.820409][ T5177] R13: 00007fcad9e26038 R14: 00007fcad9e25fa0 R15: 00007fffacd4b358 [ 3335.820407][ T31] audit: type=1326 audit(1791146320.668:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.8350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcad9b5e98e code=0x7ffc0000 [ 3335.820434][ T5177] [ 3335.929170][ T1178] usb 8-1: USB disconnect, device number 4 [ 3336.525662][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 3336.525680][ T31] audit: type=1400 audit(1791146321.378:1089): avc: denied { sqpoll } for pid=5196 comm="syz.6.8356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3336.542776][ T414] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 3336.584044][ T5196] mmap: syz.6.8356 (5196): VmData 37593088 exceed data ulimit 11. Update limits or use boot option ignore_rlimit_data. [ 3336.703551][ T414] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 3336.704411][ T414] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3336.704448][ T414] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 3336.704469][ T414] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 3336.704484][ T414] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3336.704497][ T414] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 3336.704516][ T414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3336.707137][ T5158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3336.786630][ T414] ims_pcu 3-1:1.0: Max IN packet size is too small (0) [ 3336.786673][ T414] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22 [ 3336.815850][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8357'. [ 3336.849902][ T5200] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8357'. [ 3336.880785][ T5200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3336.891504][ T5200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3336.896166][ T5200] bond0 (unregistering): Released all slaves [ 3337.697912][ T4769] go7007 4-1:4.135: The Lifeview TV Walker Ultra is not supported. Sorry! [ 3337.781424][ T4769] usb 4-1: USB disconnect, device number 91 [ 3338.678870][ T4769] usb 3-1: USB disconnect, device number 105 [ 3338.789269][ T31] audit: type=1400 audit(1791146323.638:1090): avc: denied { write } for pid=5219 comm="syz.3.8363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3338.801004][ T5222] FAULT_INJECTION: forcing a failure. [ 3338.801004][ T5222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3338.801034][ T5222] CPU: 1 UID: 0 PID: 5222 Comm: syz.7.8364 Tainted: G L syzkaller #0 PREEMPT(full) [ 3338.801056][ T5222] Tainted: [L]=SOFTLOCKUP [ 3338.801062][ T5222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3338.801071][ T5222] Call Trace: [ 3338.801077][ T5222] [ 3338.801083][ T5222] dump_stack_lvl+0x100/0x190 [ 3338.801111][ T5222] should_fail_ex.cold+0x5/0xa [ 3338.801134][ T5222] _copy_from_user+0x2e/0xd0 [ 3338.801156][ T5222] copy_msghdr_from_user+0x9f/0x4c0 [ 3338.801176][ T5222] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3338.801197][ T5222] ? _kstrtoull+0x144/0x200 [ 3338.801219][ T5222] ? __pfx__kstrtoull+0x10/0x10 [ 3338.801246][ T5222] ___sys_sendmsg+0x106/0x1e0 [ 3338.801266][ T5222] ? __pfx____sys_sendmsg+0x10/0x10 [ 3338.801294][ T5222] ? __fget_files+0x34/0x3d0 [ 3338.801331][ T5222] __sys_sendmmsg+0x20c/0x440 [ 3338.801357][ T5222] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3338.801379][ T5222] ? ksys_write+0x190/0x250 [ 3338.801414][ T5222] ? fput+0x7c/0x100 [ 3338.801436][ T5222] ? ksys_write+0x1ac/0x250 [ 3338.801454][ T5222] ? __pfx_ksys_write+0x10/0x10 [ 3338.801481][ T5222] __x64_sys_sendmmsg+0x9c/0x100 [ 3338.801504][ T5222] ? lockdep_hardirqs_on+0x7d/0x110 [ 3338.801522][ T5222] do_syscall_64+0x123/0x790 [ 3338.801542][ T5222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3338.801559][ T5222] RIP: 0033:0x7ff94dd9e159 [ 3338.801573][ T5222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3338.801589][ T5222] RSP: 002b:00007ff94ec58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3338.801606][ T5222] RAX: ffffffffffffffda RBX: 00007ff94e025fa0 RCX: 00007ff94dd9e159 [ 3338.801617][ T5222] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000005 [ 3338.801627][ T5222] RBP: 00007ff94ec58090 R08: 0000000000000000 R09: 0000000000000000 [ 3338.801637][ T5222] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3338.801647][ T5222] R13: 00007ff94e026038 R14: 00007ff94e025fa0 R15: 00007ffe39f21c68 [ 3338.801669][ T5222] [ 3338.804762][ T31] audit: type=1400 audit(1791146323.658:1091): avc: denied { read } for pid=5221 comm="syz.7.8364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3339.075677][ T31] audit: type=1400 audit(1791146323.918:1092): avc: denied { ioctl } for pid=5225 comm="syz.0.8365" path="socket:[117843]" dev="sockfs" ino=117843 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3339.776426][ T5240] usb usb8: usbfs: process 5240 (syz.3.8368) did not claim interface 0 before use [ 3340.538140][ T31] audit: type=1400 audit(1791146325.368:1093): avc: denied { ioctl } for pid=5241 comm="syz.7.8369" path="socket:[117872]" dev="sockfs" ino=117872 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3340.618140][ T31] audit: type=1400 audit(1791146325.468:1094): avc: denied { ioctl } for pid=5241 comm="syz.7.8369" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3340.841240][ T31] audit: type=1400 audit(1791146325.688:1095): avc: denied { setopt } for pid=5232 comm="syz.2.8367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3340.841563][ T5253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5253 comm=syz.6.8371 [ 3340.900315][ T31] audit: type=1400 audit(1791146325.748:1096): avc: denied { getopt } for pid=5248 comm="syz.6.8371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3342.119342][ T5278] FAULT_INJECTION: forcing a failure. [ 3342.119342][ T5278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3342.119365][ T5278] CPU: 0 UID: 0 PID: 5278 Comm: syz.7.8376 Tainted: G L syzkaller #0 PREEMPT(full) [ 3342.119381][ T5278] Tainted: [L]=SOFTLOCKUP [ 3342.119385][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3342.119392][ T5278] Call Trace: [ 3342.119397][ T5278] [ 3342.119402][ T5278] dump_stack_lvl+0x100/0x190 [ 3342.119422][ T5278] should_fail_ex.cold+0x5/0xa [ 3342.119441][ T5278] _copy_from_user+0x2e/0xd0 [ 3342.119457][ T5278] io_uring_setup+0xc0/0x160 [ 3342.119473][ T5278] ? lock_acquire+0x1d1/0x380 [ 3342.119486][ T5278] ? avc_has_perm_noaudit+0x56/0x470 [ 3342.119504][ T5278] ? __pfx_io_uring_setup+0x10/0x10 [ 3342.119518][ T5278] ? find_held_lock+0x2b/0x80 [ 3342.119534][ T5278] ? avc_has_perm_noaudit+0x11e/0x470 [ 3342.119552][ T5278] ? avc_has_perm_noaudit+0x11e/0x470 [ 3342.119581][ T5278] ? ksys_write+0x1ac/0x250 [ 3342.119595][ T5278] ? __pfx_ksys_write+0x10/0x10 [ 3342.119610][ T5278] __x64_sys_io_uring_setup+0xc2/0x170 [ 3342.119627][ T5278] do_syscall_64+0x123/0x790 [ 3342.119641][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3342.119653][ T5278] RIP: 0033:0x7ff94dd9e159 [ 3342.119663][ T5278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3342.119674][ T5278] RSP: 002b:00007ff94ec57ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3342.119685][ T5278] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007ff94dd9e159 [ 3342.119693][ T5278] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 0000000000000e26 [ 3342.119700][ T5278] RBP: 0000200000000500 R08: 0000200000000340 R09: 0000000000000000 [ 3342.119706][ T5278] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588 [ 3342.119713][ T5278] R13: 0000200000000590 R14: 00007ff94ec57fd8 R15: 0000000000000000 [ 3342.119727][ T5278] [ 3342.295400][ T414] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 3342.532765][ T414] usb 7-1: Using ep0 maxpacket: 8 [ 3342.569728][ T414] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 3342.600194][ T414] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 3342.665230][ T414] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3342.665408][ T414] usb 7-1: Product: syz [ 3342.665458][ T414] usb 7-1: Manufacturer: 샋ㄍ풰쭬㾽凬鳙噫Ɡ棟և甗썂쑲ꩤ稴㾂浐鷠긣駁뾖䚅녫꭮굓殐븡돹㚭娾湕盱﹣撓ᆬ흏筶⢽縉깽倄ﵦ訖ః䪕尜䪬桤ㅺ뀆䷑徹퉶晨쥡噘슾죈惃适⿊鋆ሟ虸ᨊ謐כֿችퟢ꽱攦⭲礵࿎쌚㵙嚑煿䡱葔䪋⎦츆트鎪첒㾟઺糑㣝㦝 [ 3342.665711][ T414] usb 7-1: SerialNumber: syz [ 3343.518099][ T414] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3343.730707][ T5274] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8374'. [ 3343.787952][ T414] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3343.945474][ T414] usb 7-1: USB disconnect, device number 83 [ 3344.081182][ T4825] udevd[4825]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3345.017648][ T31] audit: type=1400 audit(1791146329.868:1097): avc: denied { mount } for pid=5297 comm="syz.2.8381" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 3345.880892][ T31] audit: type=1400 audit(1791146330.728:1098): avc: denied { create } for pid=5301 comm="syz.7.8384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 3345.952900][ T4769] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 3346.131959][ T4769] usb 3-1: Using ep0 maxpacket: 16 [ 3346.132822][ T4769] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 3346.136518][ T4769] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 3346.136547][ T4769] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 3346.136574][ T4769] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 3346.136600][ T4769] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 3346.136627][ T4769] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3346.136680][ T4769] usb 3-1: config 0 has no interface number 0 [ 3346.136887][ T4769] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 3346.136923][ T4769] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 3346.136949][ T4769] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3346.137012][ T4769] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3346.137068][ T4769] usb 3-1: config 0 interface 125 has no altsetting 0 [ 3346.137135][ T4769] usb 3-1: config 0 interface 125 has no altsetting 2 [ 3346.161606][ T4769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.161630][ T4769] usb 3-1: Product: syz [ 3346.161643][ T4769] usb 3-1: Manufacturer: syz [ 3346.161656][ T4769] usb 3-1: SerialNumber: syz [ 3346.212625][ T4769] usb 3-1: config 0 descriptor?? [ 3346.294645][ T4769] usb 3-1: selecting invalid altsetting 2 [ 3346.871325][ T31] audit: type=1400 audit(1791146331.698:1099): avc: denied { ioctl } for pid=5312 comm="syz.6.8385" path="socket:[117295]" dev="sockfs" ino=117295 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3347.152434][ T414] usb 7-1: new full-speed USB device number 84 using dummy_hcd [ 3347.303257][ T414] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 3347.304271][ T414] usb 7-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 3347.304310][ T414] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3347.305350][ T414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3347.305369][ T414] usb 7-1: SerialNumber: syz [ 3347.310422][ T5314] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 3347.311751][ T414] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 3347.313177][ T414] usb-storage 7-1:1.0: USB Mass Storage device detected [ 3347.394839][ T414] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 3347.404988][T19563] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 3347.482183][ T4769] get_1284_register timeout [ 3347.482387][ C0] usb 3-1: async_complete: urb error -104 [ 3347.482496][ C0] usb 3-1: async_complete: urb error -104 [ 3347.562577][T19563] usb 8-1: Using ep0 maxpacket: 8 [ 3347.563326][T19563] usb 8-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 3347.564492][T19563] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3347.564521][T19563] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3347.564551][T19563] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3347.566902][T19563] usb 8-1: config 0 descriptor?? [ 3347.624861][T19563] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input92 [ 3348.295486][ T4960] bcm5974 8-1:0.0: could not read from device [ 3348.346371][ T4960] bcm5974 8-1:0.0: could not read from device [ 3348.388224][T19563] usb 8-1: USB disconnect, device number 5 [ 3348.390459][ T5298] FAULT_INJECTION: forcing a failure. [ 3348.390459][ T5298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3348.390494][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: syz.2.8381 Tainted: G L syzkaller #0 PREEMPT(full) [ 3348.390522][ T5298] Tainted: [L]=SOFTLOCKUP [ 3348.390530][ T5298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3348.390542][ T5298] Call Trace: [ 3348.390549][ T5298] [ 3348.390558][ T5298] dump_stack_lvl+0x100/0x190 [ 3348.390595][ T5298] should_fail_ex.cold+0x5/0xa [ 3348.390622][ T5298] strncpy_from_user+0x3b/0x2d0 [ 3348.390652][ T5298] do_getname+0x78/0x390 [ 3348.390676][ T5298] __x64_sys_mknodat+0xa1/0xf0 [ 3348.390705][ T5298] do_syscall_64+0x123/0x790 [ 3348.390729][ T5298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3348.390749][ T5298] RIP: 0033:0x7f49f719e159 [ 3348.390766][ T5298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3348.390786][ T5298] RSP: 002b:00007f49f8002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 3348.390806][ T5298] RAX: ffffffffffffffda RBX: 00007f49f7425fa0 RCX: 00007f49f719e159 [ 3348.390820][ T5298] RDX: af7514739d886922 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3348.390832][ T5298] RBP: 00007f49f723506b R08: 0000000000000000 R09: 0000000000000000 [ 3348.390843][ T5298] R10: 0000000000000704 R11: 0000000000000246 R12: 0000000000000000 [ 3348.390855][ T5298] R13: 00007f49f7426038 R14: 00007f49f7425fa0 R15: 00007ffe43cf6778 [ 3348.390890][ T5298] [ 3348.426950][ T4960] bcm5974 8-1:0.0: could not read from device [ 3348.539058][ T31] audit: type=1400 audit(1791146333.388:1100): avc: denied { search } for pid=5297 comm="syz.2.8381" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 3348.539102][ T31] audit: type=1400 audit(1791146333.388:1101): avc: denied { read write } for pid=5297 comm="syz.2.8381" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 3348.539136][ T31] audit: type=1400 audit(1791146333.388:1102): avc: denied { open } for pid=5297 comm="syz.2.8381" path="/486/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 3348.594757][ T31] audit: type=1400 audit(1791146333.448:1103): avc: denied { mounton } for pid=5297 comm="syz.2.8381" path="/486/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 3348.706883][ T1178] usb 3-1: USB disconnect, device number 106 [ 3349.576656][ T1178] usb 7-1: USB disconnect, device number 84 [ 3350.909700][ T31] audit: type=1400 audit(1791146335.738:1104): avc: denied { unmount } for pid=28309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 3350.959169][ T5349] FAULT_INJECTION: forcing a failure. [ 3350.959169][ T5349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3350.959200][ T5349] CPU: 1 UID: 0 PID: 5349 Comm: syz.2.8392 Tainted: G L syzkaller #0 PREEMPT(full) [ 3350.959222][ T5349] Tainted: [L]=SOFTLOCKUP [ 3350.959228][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3350.959238][ T5349] Call Trace: [ 3350.959244][ T5349] [ 3350.959250][ T5349] dump_stack_lvl+0x100/0x190 [ 3350.959278][ T5349] should_fail_ex.cold+0x5/0xa [ 3350.959301][ T5349] _copy_from_user+0x2e/0xd0 [ 3350.959322][ T5349] __sys_bpf+0x2f5/0x4a30 [ 3350.959347][ T5349] ? __pfx___sys_bpf+0x10/0x10 [ 3350.959364][ T5349] ? find_held_lock+0x2b/0x80 [ 3350.959387][ T5349] ? get_pid_task+0xfc/0x250 [ 3350.959409][ T5349] ? get_pid_task+0xfc/0x250 [ 3350.959437][ T5349] ? find_held_lock+0x2b/0x80 [ 3350.959464][ T5349] ? rcu_read_lock_any_held+0x6a/0x90 [ 3350.959489][ T5349] ? find_held_lock+0x2b/0x80 [ 3350.959513][ T5349] ? ksys_write+0x190/0x250 [ 3350.959532][ T5349] ? ksys_write+0x190/0x250 [ 3350.959550][ T5349] ? lock_acquire+0x1d1/0x380 [ 3350.959582][ T5349] ? fput+0x7c/0x100 [ 3350.959604][ T5349] ? ksys_write+0x1ac/0x250 [ 3350.959624][ T5349] ? __x64_sys_bpf+0xce/0x140 [ 3350.959640][ T5349] __x64_sys_bpf+0xce/0x140 [ 3350.959659][ T5349] ? do_syscall_64+0xae/0x790 [ 3350.959677][ T5349] do_syscall_64+0x123/0x790 [ 3350.959697][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3350.959713][ T5349] RIP: 0033:0x7f49f719e159 [ 3350.959727][ T5349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3350.959742][ T5349] RSP: 002b:00007f49f8002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3350.959759][ T5349] RAX: ffffffffffffffda RBX: 00007f49f7425fa0 RCX: 00007f49f719e159 [ 3350.959769][ T5349] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 3350.959779][ T5349] RBP: 00007f49f8002090 R08: 0000000000000000 R09: 0000000000000000 [ 3350.959789][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3350.959799][ T5349] R13: 00007f49f7426038 R14: 00007f49f7425fa0 R15: 00007ffe43cf6778 [ 3350.959821][ T5349] [ 3352.503639][ T5359] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8397'. [ 3352.505197][ T5359] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8397'. [ 3352.573887][ T31] audit: type=1400 audit(1791146337.428:1105): avc: denied { map } for pid=5355 comm="syz.7.8397" path="/29" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3353.356686][ T5369] /dev/sg0: Can't lookup blockdev [ 3354.051718][ T5377] md: could not open device unknown-block(1,0). [ 3354.062540][ T3095] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 3354.134964][ T5373] md: could not open device unknown-block(1,1). [ 3354.167816][ T5385] FAULT_INJECTION: forcing a failure. [ 3354.167816][ T5385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3354.167839][ T5385] CPU: 1 UID: 0 PID: 5385 Comm: syz.6.8400 Tainted: G L syzkaller #0 PREEMPT(full) [ 3354.167855][ T5385] Tainted: [L]=SOFTLOCKUP [ 3354.167859][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3354.167866][ T5385] Call Trace: [ 3354.167870][ T5385] [ 3354.167875][ T5385] dump_stack_lvl+0x100/0x190 [ 3354.167901][ T5385] should_fail_ex.cold+0x5/0xa [ 3354.167918][ T5385] _copy_from_user+0x2e/0xd0 [ 3354.167933][ T5385] copy_msghdr_from_user+0x9f/0x4c0 [ 3354.167947][ T5385] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3354.167963][ T5385] ? lock_acquire+0x1d1/0x380 [ 3354.167976][ T5385] ? get_pid_task+0x2a/0x250 [ 3354.167993][ T5385] ___sys_sendmsg+0x106/0x1e0 [ 3354.168007][ T5385] ? __pfx____sys_sendmsg+0x10/0x10 [ 3354.168020][ T5385] ? get_pid_task+0x106/0x250 [ 3354.168040][ T5385] ? find_held_lock+0x2b/0x80 [ 3354.168065][ T5385] __sys_sendmsg+0x160/0x210 [ 3354.168081][ T5385] ? __pfx___sys_sendmsg+0x10/0x10 [ 3354.168105][ T5385] do_syscall_64+0x123/0x790 [ 3354.168119][ T5385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3354.168131][ T5385] RIP: 0033:0x7f985479e159 [ 3354.168141][ T5385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3354.168152][ T5385] RSP: 002b:00007f98556af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3354.168163][ T5385] RAX: ffffffffffffffda RBX: 00007f9854a26090 RCX: 00007f985479e159 [ 3354.168171][ T5385] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3354.168177][ T5385] RBP: 00007f98556af090 R08: 0000000000000000 R09: 0000000000000000 [ 3354.168184][ T5385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3354.168191][ T5385] R13: 00007f9854a26128 R14: 00007f9854a26090 R15: 00007fffa5416138 [ 3354.168205][ T5385] [ 3354.171200][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8402'. [ 3354.224230][ T3095] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3354.229057][ T3095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.229080][ T3095] usb 3-1: Product: syz [ 3354.229093][ T3095] usb 3-1: Manufacturer: syz [ 3354.229106][ T3095] usb 3-1: SerialNumber: syz [ 3354.278339][ T1178] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3354.314353][ T31] audit: type=1400 audit(1791146339.158:1106): avc: denied { name_bind } for pid=5387 comm="syz.7.8404" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 3354.315497][ T5388] FAULT_INJECTION: forcing a failure. [ 3354.315497][ T5388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3354.315524][ T5388] CPU: 1 UID: 0 PID: 5388 Comm: syz.7.8404 Tainted: G L syzkaller #0 PREEMPT(full) [ 3354.315546][ T5388] Tainted: [L]=SOFTLOCKUP [ 3354.315552][ T5388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3354.315562][ T5388] Call Trace: [ 3354.315568][ T5388] [ 3354.315575][ T5388] dump_stack_lvl+0x100/0x190 [ 3354.315603][ T5388] should_fail_ex.cold+0x5/0xa [ 3354.315626][ T5388] _copy_to_user+0x32/0xd0 [ 3354.315649][ T5388] simple_read_from_buffer+0xcb/0x170 [ 3354.315673][ T5388] proc_fail_nth_read+0x1af/0x230 [ 3354.315696][ T5388] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3354.315720][ T5388] ? rw_verify_area+0xce/0x6d0 [ 3354.315736][ T5388] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3354.315758][ T5388] vfs_read+0x1e4/0xb40 [ 3354.315777][ T5388] ? lock_acquire+0x1d1/0x380 [ 3354.315809][ T5388] ? __fget_files+0x34/0x3d0 [ 3354.315835][ T5388] ? __pfx_vfs_read+0x10/0x10 [ 3354.315852][ T5388] ? find_held_lock+0x2b/0x80 [ 3354.315875][ T5388] ? __fget_files+0x215/0x3d0 [ 3354.315900][ T5388] ? __fget_files+0x21f/0x3d0 [ 3354.315929][ T5388] ksys_read+0x12a/0x250 [ 3354.315946][ T5388] ? __pfx_ksys_read+0x10/0x10 [ 3354.315971][ T5388] do_syscall_64+0x123/0x790 [ 3354.315992][ T5388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3354.316008][ T5388] RIP: 0033:0x7ff94dd5e98e [ 3354.316022][ T5388] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3354.316037][ T5388] RSP: 002b:00007ff94ec57fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3354.316054][ T5388] RAX: ffffffffffffffda RBX: 00007ff94ec586c0 RCX: 00007ff94dd5e98e [ 3354.316065][ T5388] RDX: 000000000000000f RSI: 00007ff94ec580a0 RDI: 0000000000000004 [ 3354.316074][ T5388] RBP: 00007ff94ec58090 R08: 0000000000000000 R09: 0000000000000000 [ 3354.316084][ T5388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3354.316094][ T5388] R13: 00007ff94e026038 R14: 00007ff94e025fa0 R15: 00007ffe39f21c68 [ 3354.316117][ T5388] [ 3355.725820][ T1178] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3355.727511][ T1178] ath9k_htc: Failed to initialize the device [ 3355.947970][ T31] audit: type=1400 audit(1791146340.628:1107): avc: denied { mounton } for pid=5391 comm="syz.7.8406" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 3356.440125][ T1178] usb 3-1: ath9k_htc: USB layer deinitialized [ 3356.524227][ T31] audit: type=1400 audit(1791146341.378:1108): avc: denied { connect } for pid=5401 comm="syz.0.8403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3356.611650][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8403'. [ 3356.642563][ T2312] usb 3-1: USB disconnect, device number 107 [ 3356.729074][ T5410] xt_nat: multiple ranges no longer supported [ 3356.886083][ T5415] /dev/sg0: Can't lookup blockdev [ 3357.262674][ T1178] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 3357.330769][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8410'. [ 3357.435252][ T1178] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 3357.436144][ T1178] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 3357.436166][ T1178] usb 7-1: config 1 has no interface number 0 [ 3357.436198][ T1178] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 3357.436220][ T1178] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 3357.436240][ T1178] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 3357.437960][ T1178] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3357.437985][ T1178] usb 7-1: Product: syz [ 3357.437999][ T1178] usb 7-1: Manufacturer: syz [ 3357.438014][ T1178] usb 7-1: SerialNumber: syz [ 3357.530326][ T5411] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 3357.530450][ T5411] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 3357.871057][ T5432] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 3357.871178][ T5432] Error validating options; rc = [-22] [ 3358.166094][ T5402] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 3358.166148][ T5402] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 3358.220998][ T31] audit: type=1400 audit(1791146343.068:1109): avc: denied { mount } for pid=5423 comm="syz.3.8412" name="/" dev="autofs" ino=117555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 3358.374394][ T5425] tipc: Resetting bearer [ 3358.487120][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 3358.487429][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 3358.676347][ T5437] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 3358.676378][ T5437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3359.675376][ T31] audit: type=1400 audit(1791146344.148:1110): avc: denied { write } for pid=5438 comm="syz.0.8417" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3359.770891][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3363.811764][ T1178] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 3363.822151][T18755] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3363.822182][T18755] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3363.827332][T18755] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3363.827361][T18755] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3363.827394][T18755] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3363.827416][T18755] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3363.827444][T18755] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3363.827463][T18755] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3363.945155][ T1178] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 3363.945252][ T1178] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 3363.945540][ T1178] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 3363.945629][ T1178] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 3363.947972][ T1178] usb 7-1: USB disconnect, device number 85 [ 3363.951781][ T1178] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 3364.023415][ T31] audit: type=1400 audit(1791146348.878:1111): avc: denied { unmount } for pid=28889 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 3364.133304][ T1178] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 3366.073007][ T1178] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 3366.243210][ T1178] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 3366.244092][ T1178] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3366.244119][ T1178] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3366.244140][ T1178] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3366.245703][ T1178] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3366.245720][ T1178] usb 8-1: Product: syz [ 3366.245729][ T1178] usb 8-1: Manufacturer: syz [ 3366.245737][ T1178] usb 8-1: SerialNumber: syz [ 3366.330620][ T1178] usb-storage 8-1:1.0: USB Mass Storage device detected [ 3366.342763][ T1178] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 3366.343261][ T1178] scsi host1: usb-storage 8-1:1.0 [ 3366.373802][ T5480] md: could not open device unknown-block(1,0). [ 3366.373937][ T5481] md: could not open device unknown-block(1,1). [ 3366.505882][ T3095] usb 8-1: USB disconnect, device number 6 [ 3366.652980][ T1178] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 3366.815107][ T1178] usb 1-1: Using ep0 maxpacket: 8 [ 3366.815776][ T1178] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 3366.819711][ T1178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3366.819735][ T1178] usb 1-1: Product: syz [ 3366.819749][ T1178] usb 1-1: Manufacturer: syz [ 3366.819763][ T1178] usb 1-1: SerialNumber: syz [ 3366.867906][ T1178] usb 1-1: config 0 descriptor?? [ 3366.886865][ T1178] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 3366.886910][ T1178] pctv452e: pctv452e_power_ctrl: 1 [ 3366.886910][ T1178] [ 3366.886946][ T1178] usb 1-1: selecting invalid altsetting 3 [ 3366.886960][ T1178] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 3366.886960][ T1178] [ 3366.886974][ T1178] dvb-usb: bulk message failed: -22 (5/0) [ 3366.959610][ T1178] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3366.960236][ T1178] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 3366.960276][ T1178] usb 1-1: media controller created [ 3366.960311][ T1178] dvb-usb: bulk message failed: -22 (8/0) [ 3366.960324][ T1178] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 3366.960366][ T1178] dvb-usb: MAC address reading failed. [ 3367.024740][ T1178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3367.106415][ T1178] DVB: Unable to find symbol stb0899_attach() [ 3367.106428][ T1178] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 3367.132600][ T5487] dvb-usb: bulk message failed: -22 (7/0) [ 3367.132623][ T5487] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 3367.249662][ T31] audit: type=1400 audit(1791146352.098:1112): avc: denied { getopt } for pid=5501 comm="syz.3.8424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3367.404211][ T1178] rc_core: IR keymap rc-tt-1500 not found [ 3367.404232][ T1178] Registered IR keymap rc-empty [ 3367.406999][ T1178] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 3367.439833][ T1178] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input93 [ 3367.460190][ T1178] dvb-usb: schedule remote query interval to 100 msecs. [ 3367.460213][ T1178] pctv452e: pctv452e_power_ctrl: 0 [ 3367.460213][ T1178] [ 3367.460224][ T1178] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 3367.478498][ T5505] netlink: 'syz.6.8431': attribute type 1 has an invalid length. [ 3367.500082][ T5505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3367.522879][ T5506] FAULT_INJECTION: forcing a failure. [ 3367.522879][ T5506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3367.522902][ T5506] CPU: 0 UID: 0 PID: 5506 Comm: syz.7.8430 Tainted: G L syzkaller #0 PREEMPT(full) [ 3367.522918][ T5506] Tainted: [L]=SOFTLOCKUP [ 3367.522922][ T5506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3367.522929][ T5506] Call Trace: [ 3367.522934][ T5506] [ 3367.522938][ T5506] dump_stack_lvl+0x100/0x190 [ 3367.522959][ T5506] should_fail_ex.cold+0x5/0xa [ 3367.522976][ T5506] _copy_from_user+0x2e/0xd0 [ 3367.522990][ T5506] __sys_bpf+0x2f5/0x4a30 [ 3367.523008][ T5506] ? __pfx___sys_bpf+0x10/0x10 [ 3367.523020][ T5506] ? find_held_lock+0x2b/0x80 [ 3367.523037][ T5506] ? get_pid_task+0xfc/0x250 [ 3367.523052][ T5506] ? get_pid_task+0xfc/0x250 [ 3367.523072][ T5506] ? find_held_lock+0x2b/0x80 [ 3367.523091][ T5506] ? rcu_read_lock_any_held+0x6a/0x90 [ 3367.523109][ T5506] ? find_held_lock+0x2b/0x80 [ 3367.523125][ T5506] ? ksys_write+0x190/0x250 [ 3367.523138][ T5506] ? ksys_write+0x190/0x250 [ 3367.523150][ T5506] ? lock_acquire+0x1d1/0x380 [ 3367.523171][ T5506] ? fput+0x7c/0x100 [ 3367.523193][ T5506] ? ksys_write+0x1ac/0x250 [ 3367.523207][ T5506] ? __x64_sys_bpf+0xce/0x140 [ 3367.523222][ T5506] __x64_sys_bpf+0xce/0x140 [ 3367.523235][ T5506] ? do_syscall_64+0xae/0x790 [ 3367.523248][ T5506] do_syscall_64+0x123/0x790 [ 3367.523261][ T5506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3367.523273][ T5506] RIP: 0033:0x7ff94dd9e159 [ 3367.523282][ T5506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3367.523293][ T5506] RSP: 002b:00007ff94ec58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3367.523305][ T5506] RAX: ffffffffffffffda RBX: 00007ff94e025fa0 RCX: 00007ff94dd9e159 [ 3367.523312][ T5506] RDX: 0000000000000020 RSI: 0000200000000a80 RDI: 0000000000000015 [ 3367.523319][ T5506] RBP: 00007ff94ec58090 R08: 0000000000000000 R09: 0000000000000000 [ 3367.523326][ T5506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3367.523332][ T5506] R13: 00007ff94e026038 R14: 00007ff94e025fa0 R15: 00007ffe39f21c68 [ 3367.523347][ T5506] [ 3367.528157][ T1178] usb 1-1: USB disconnect, device number 115 [ 3368.435917][ T5505] bond0: (slave geneve2): making interface the new active one [ 3368.512689][T29374] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 3368.549115][ T5505] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 3369.172707][T29374] usb 7-1: Using ep0 maxpacket: 8 [ 3369.187401][T29374] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3369.248542][T29374] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 3369.410592][T29374] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3369.410655][T29374] usb 7-1: Product: syz [ 3369.410720][T29374] usb 7-1: Manufacturer: syz [ 3369.410784][T29374] usb 7-1: SerialNumber: syz [ 3369.713568][ T1178] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 3369.855880][ T31] audit: type=1400 audit(1791146354.708:1113): avc: denied { bind } for pid=5519 comm="syz.3.8435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3369.857531][ T31] audit: type=1400 audit(1791146354.708:1114): avc: denied { map } for pid=5519 comm="syz.3.8435" path="socket:[118795]" dev="sockfs" ino=118795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3369.858975][ T31] audit: type=1400 audit(1791146354.708:1115): avc: denied { read write } for pid=5519 comm="syz.3.8435" path="socket:[118795]" dev="sockfs" ino=118795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3370.012767][T29374] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 3370.012846][T29374] visor 7-1:1.0: probe with driver visor failed with error -110 [ 3371.897236][ T5542] batman_adv: batadv0: Adding interface: dummy0 [ 3371.897264][ T5542] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3371.897321][ T5542] batman_adv: batadv0: Interface activated: dummy0 [ 3371.920794][ T5543] tipc: Enabling of bearer rejected, already enabled [ 3372.452813][ T4729] usb 7-1: USB disconnect, device number 86 [ 3372.472149][T22975] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 3372.621961][T22975] usb 8-1: Using ep0 maxpacket: 8 [ 3372.622631][T22975] usb 8-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 3372.623534][T22975] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 3372.623566][T22975] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3372.623591][T22975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3372.623620][T22975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3372.626008][T22975] usb 8-1: config 0 descriptor?? [ 3373.448399][T22975] usbhid 8-1:0.0: can't add hid device: -71 [ 3373.448494][T22975] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 3373.483329][T22975] usb 8-1: USB disconnect, device number 7 [ 3375.419638][ T31] audit: type=1400 audit(1791146359.267:1116): avc: denied { watch } for pid=5580 comm="syz.7.8449" path="/40/file1" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3375.423266][ T31] audit: type=1400 audit(1791146359.267:1117): avc: denied { watch_sb watch_reads } for pid=5580 comm="syz.7.8449" path="/40/file1" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3375.719518][ T5582] loop7: detected capacity change from 0 to 16384 [ 3375.824608][ T5583] loop7: detected capacity change from 16384 to 0 [ 3376.002883][ T5595] /dev/sg0: Can't lookup blockdev [ 3376.133181][T29374] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 3376.147402][ T306] nvmet: connect request for invalid subsystem t! [ 3376.148871][ T5552] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 3376.282774][T29374] usb 1-1: Using ep0 maxpacket: 8 [ 3376.284386][T29374] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 3376.317812][T29374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3376.317830][T29374] usb 1-1: Product: syz [ 3376.317839][T29374] usb 1-1: Manufacturer: syz [ 3376.317848][T29374] usb 1-1: SerialNumber: syz [ 3376.319184][T29374] usb 1-1: config 0 descriptor?? [ 3376.327340][T29374] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 3376.327371][T29374] pctv452e: pctv452e_power_ctrl: 1 [ 3376.327371][T29374] [ 3376.327402][T29374] usb 1-1: selecting invalid altsetting 3 [ 3376.327414][T29374] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 3376.327414][T29374] [ 3376.327426][T29374] dvb-usb: bulk message failed: -22 (5/0) [ 3376.334936][T29374] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3376.337741][T29374] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 3376.337779][T29374] usb 1-1: media controller created [ 3376.337811][T29374] dvb-usb: bulk message failed: -22 (8/0) [ 3376.337822][T29374] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 3376.337859][T29374] dvb-usb: MAC address reading failed. [ 3376.363228][ T5600] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3376.410672][T29374] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3376.643563][ T5603] bridge1: entered promiscuous mode [ 3376.719566][ T5587] dvb-usb: bulk message failed: -22 (7/0) [ 3376.719614][ T5587] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 3377.662928][T29374] DVB: Unable to find symbol stb0899_attach() [ 3377.662946][T29374] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 3377.892968][T29374] rc_core: IR keymap rc-tt-1500 not found [ 3377.892986][T29374] Registered IR keymap rc-empty [ 3377.893946][T29374] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 3377.896114][T29374] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input94 [ 3377.899839][T29374] dvb-usb: schedule remote query interval to 100 msecs. [ 3377.899859][T29374] pctv452e: pctv452e_power_ctrl: 0 [ 3377.899859][T29374] [ 3377.899870][T29374] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 3377.908384][T29374] usb 1-1: USB disconnect, device number 116 [ 3378.076586][T29374] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 3378.186625][ T5617] No source specified [ 3378.531553][ T5625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8458'. [ 3379.635596][ T31] audit: type=1400 audit(1791146363.487:1118): avc: denied { open } for pid=5630 comm="syz.0.8460" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 3379.640003][ T31] audit: type=1400 audit(1791146363.487:1119): avc: denied { ioctl } for pid=5630 comm="syz.0.8460" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 3380.152476][ T4769] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 3380.301953][ T4769] usb 8-1: Using ep0 maxpacket: 32 [ 3380.302642][ T4769] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 3380.303551][ T4769] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3380.311519][ T4769] usb 8-1: config 0 descriptor?? [ 3380.356015][ T4769] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 3380.629412][ T5648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3380.951924][T29094] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 3381.104392][T29094] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 3381.123455][T29094] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 3381.125452][T29094] usb 1-1: config 1 has no interface number 0 [ 3381.126691][T29094] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 3381.129385][T29094] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 3381.129400][T29094] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 3381.183338][T29094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3381.183365][T29094] usb 1-1: Product: syz [ 3381.183379][T29094] usb 1-1: Manufacturer: syz [ 3381.183440][T29094] usb 1-1: SerialNumber: syz [ 3381.223090][ T5650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3381.224514][ T5650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3381.281998][ T4729] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 3381.439297][ T5650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3381.439394][ T5650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3381.459401][ T4729] usb 4-1: Using ep0 maxpacket: 8 [ 3381.467974][ T4729] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 3381.471550][ T4729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3381.471575][ T4729] usb 4-1: Product: syz [ 3381.471590][ T4729] usb 4-1: Manufacturer: syz [ 3381.471605][ T4729] usb 4-1: SerialNumber: syz [ 3381.519110][ T4729] usb 4-1: config 0 descriptor?? [ 3381.543646][ T4729] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 3381.543686][ T4729] pctv452e: pctv452e_power_ctrl: 1 [ 3381.543686][ T4729] [ 3381.543723][ T4729] usb 4-1: selecting invalid altsetting 3 [ 3381.543737][ T4729] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 3381.543737][ T4729] [ 3381.543751][ T4729] dvb-usb: bulk message failed: -22 (5/0) [ 3381.592311][ T4729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3381.604015][ T4729] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 3381.604082][ T4729] usb 4-1: media controller created [ 3381.604119][ T4729] dvb-usb: bulk message failed: -22 (8/0) [ 3381.604133][ T4729] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 3381.604176][ T4729] dvb-usb: MAC address reading failed. [ 3381.657906][T29094] usb 1-1: Incompatible driver and firmware versions [ 3381.676821][T29094] usb 1-1: USB disconnect, device number 117 [ 3381.681477][ T4729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3381.739491][ T5656] dvb-usb: bulk message failed: -22 (7/0) [ 3381.739512][ T5656] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 3381.865624][ T31] audit: type=1400 audit(1791146365.717:1120): avc: denied { read write } for pid=5635 comm="syz.7.8462" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3381.865674][ T31] audit: type=1400 audit(1791146365.717:1121): avc: denied { open } for pid=5635 comm="syz.7.8462" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3381.925547][ T31] audit: type=1400 audit(1791146365.777:1122): avc: denied { ioctl } for pid=5635 comm="syz.7.8462" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3381.927169][ T4729] DVB: Unable to find symbol stb0899_attach() [ 3381.927184][ T4729] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 3381.977491][ T4769] gspca_vc032x: reg_w err -71 [ 3381.977508][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977518][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977526][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977533][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977541][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977550][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977559][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977567][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977575][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977582][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977590][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977598][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977606][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977614][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977620][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977628][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977635][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977642][ T4769] gspca_vc032x: I2c Bus Busy Wait 00 [ 3381.977649][ T4769] gspca_vc032x: Unknown sensor... [ 3381.977705][ T4769] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 3382.087981][ T4769] usb 8-1: USB disconnect, device number 8 [ 3382.184077][ T4729] rc_core: IR keymap rc-tt-1500 not found [ 3382.184090][ T4729] Registered IR keymap rc-empty [ 3382.184647][ T4729] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 3382.185490][ T4729] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input95 [ 3382.741353][ T4729] dvb-usb: schedule remote query interval to 100 msecs. [ 3382.741375][ T4729] pctv452e: pctv452e_power_ctrl: 0 [ 3382.741375][ T4729] [ 3382.741386][ T4729] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 3382.829589][ T31] audit: type=1400 audit(1791146366.677:1123): avc: denied { unmount } for pid=4577 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 3383.259279][ T4729] usb 4-1: USB disconnect, device number 92 [ 3383.262210][ T4769] dvb-usb: bulk message failed: -22 (4/0) [ 3383.262261][ T4769] dvb-usb: error -22 while querying for an remote control event. [ 3383.485712][ T5685] /dev/sg0: Can't lookup blockdev [ 3384.682861][ T5690] FAULT_INJECTION: forcing a failure. [ 3384.682861][ T5690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3384.682894][ T5690] CPU: 0 UID: 0 PID: 5690 Comm: syz.7.8473 Tainted: G L syzkaller #0 PREEMPT(full) [ 3384.682918][ T5690] Tainted: [L]=SOFTLOCKUP [ 3384.682924][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3384.682935][ T5690] Call Trace: [ 3384.682942][ T5690] [ 3384.682949][ T5690] dump_stack_lvl+0x100/0x190 [ 3384.682980][ T5690] should_fail_ex.cold+0x5/0xa [ 3384.683004][ T5690] _copy_from_user+0x2e/0xd0 [ 3384.683028][ T5690] __sys_bpf+0x2f5/0x4a30 [ 3384.683054][ T5690] ? __pfx___sys_bpf+0x10/0x10 [ 3384.683073][ T5690] ? find_held_lock+0x2b/0x80 [ 3384.683098][ T5690] ? get_pid_task+0xfc/0x250 [ 3384.683122][ T5690] ? get_pid_task+0xfc/0x250 [ 3384.683154][ T5690] ? find_held_lock+0x2b/0x80 [ 3384.683182][ T5690] ? rcu_read_lock_any_held+0x6a/0x90 [ 3384.683208][ T5690] ? find_held_lock+0x2b/0x80 [ 3384.683233][ T5690] ? ksys_write+0x190/0x250 [ 3384.683253][ T5690] ? ksys_write+0x190/0x250 [ 3384.683264][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 3384.683272][ T5690] ? lock_acquire+0x1d1/0x380 [ 3384.683310][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 3384.683311][ T5690] ? fput+0x7c/0x100 [ 3384.683337][ T5690] ? ksys_write+0x1ac/0x250 [ 3384.683360][ T5690] ? __x64_sys_bpf+0xce/0x140 [ 3384.683378][ T5690] __x64_sys_bpf+0xce/0x140 [ 3384.683399][ T5690] ? do_syscall_64+0xae/0x790 [ 3384.683420][ T5690] do_syscall_64+0x123/0x790 [ 3384.683442][ T5690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3384.683461][ T5690] RIP: 0033:0x7ff94dd9e159 [ 3384.683476][ T5690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3384.683492][ T5690] RSP: 002b:00007ff94ec58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3384.683518][ T5690] RAX: ffffffffffffffda RBX: 00007ff94e025fa0 RCX: 00007ff94dd9e159 [ 3384.683530][ T5690] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 3384.683542][ T5690] RBP: 00007ff94ec58090 R08: 0000000000000000 R09: 0000000000000000 [ 3384.683552][ T5690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3384.683563][ T5690] R13: 00007ff94e026038 R14: 00007ff94e025fa0 R15: 00007ffe39f21c68 [ 3384.683589][ T5690] [ 3384.687000][ T31] audit: type=1400 audit(1791146368.087:1124): avc: denied { write } for pid=5683 comm="syz.3.8475" name="functions" dev="configfs" ino=7929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3384.687053][ T31] audit: type=1400 audit(1791146368.097:1125): avc: denied { write } for pid=5683 comm="syz.3.8475" name="core" dev="configfs" ino=2734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3385.018642][ T4729] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 3385.117465][ T5706] netlink: 'syz.7.8477': attribute type 21 has an invalid length. [ 3385.196944][ T5710] FAULT_INJECTION: forcing a failure. [ 3385.196944][ T5710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3385.196980][ T5710] CPU: 0 UID: 0 PID: 5710 Comm: syz.0.8478 Tainted: G L syzkaller #0 PREEMPT(full) [ 3385.197004][ T5710] Tainted: [L]=SOFTLOCKUP [ 3385.197010][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3385.197021][ T5710] Call Trace: [ 3385.197028][ T5710] [ 3385.197036][ T5710] dump_stack_lvl+0x100/0x190 [ 3385.197067][ T5710] should_fail_ex.cold+0x5/0xa [ 3385.197094][ T5710] _copy_from_user+0x2e/0xd0 [ 3385.197118][ T5710] __sys_bpf+0x2f5/0x4a30 [ 3385.197144][ T5710] ? __pfx___sys_bpf+0x10/0x10 [ 3385.197164][ T5710] ? find_held_lock+0x2b/0x80 [ 3385.197190][ T5710] ? get_pid_task+0xfc/0x250 [ 3385.197213][ T5710] ? get_pid_task+0xfc/0x250 [ 3385.197245][ T5710] ? find_held_lock+0x2b/0x80 [ 3385.197275][ T5710] ? rcu_read_lock_any_held+0x6a/0x90 [ 3385.197301][ T5710] ? find_held_lock+0x2b/0x80 [ 3385.197324][ T5710] ? ksys_write+0x190/0x250 [ 3385.197342][ T5710] ? ksys_write+0x190/0x250 [ 3385.197360][ T5710] ? lock_acquire+0x1d1/0x380 [ 3385.197396][ T5710] ? fput+0x7c/0x100 [ 3385.197419][ T5710] ? ksys_write+0x1ac/0x250 [ 3385.197443][ T5710] ? __x64_sys_bpf+0xce/0x140 [ 3385.197461][ T5710] __x64_sys_bpf+0xce/0x140 [ 3385.197482][ T5710] ? do_syscall_64+0xae/0x790 [ 3385.197516][ T5710] do_syscall_64+0x123/0x790 [ 3385.197538][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3385.197558][ T5710] RIP: 0033:0x7fcad9b9e159 [ 3385.197573][ T5710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3385.197590][ T5710] RSP: 002b:00007fcada9b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3385.197609][ T5710] RAX: ffffffffffffffda RBX: 00007fcad9e25fa0 RCX: 00007fcad9b9e159 [ 3385.197621][ T5710] RDX: 0000000000000094 RSI: 0000200000000d40 RDI: 0000000000000005 [ 3385.197637][ T5710] RBP: 00007fcada9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 3385.197648][ T5710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3385.197658][ T5710] R13: 00007fcad9e26038 R14: 00007fcad9e25fa0 R15: 00007fffacd4b358 [ 3385.197684][ T5710] [ 3387.372192][T29094] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 3387.402518][ T2312] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 3387.524807][T29094] usb 3-1: Using ep0 maxpacket: 8 [ 3387.525430][T29094] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 3387.530004][T29094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.530031][T29094] usb 3-1: Product: syz [ 3387.530045][T29094] usb 3-1: Manufacturer: syz [ 3387.530059][T29094] usb 3-1: SerialNumber: syz [ 3387.553615][ T2312] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 3387.554453][ T2312] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 3387.554472][ T2312] usb 8-1: config 1 has no interface number 0 [ 3387.554501][ T2312] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 3387.554523][ T2312] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 3387.554544][ T2312] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 3387.556180][ T2312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.556199][ T2312] usb 8-1: Product: syz [ 3387.556212][ T2312] usb 8-1: Manufacturer: syz [ 3387.556224][ T2312] usb 8-1: SerialNumber: syz [ 3387.655535][T29094] usb 3-1: config 0 descriptor?? [ 3387.658310][T29094] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 3387.658332][T29094] pctv452e: pctv452e_power_ctrl: 1 [ 3387.658332][T29094] [ 3387.658351][T29094] usb 3-1: selecting invalid altsetting 3 [ 3387.658360][T29094] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 3387.658360][T29094] [ 3387.658368][T29094] dvb-usb: bulk message failed: -22 (5/0) [ 3387.719934][T29094] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3387.720492][T29094] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 3387.720533][T29094] usb 3-1: media controller created [ 3387.720569][T29094] dvb-usb: bulk message failed: -22 (8/0) [ 3387.720582][T29094] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 3387.720624][T29094] dvb-usb: MAC address reading failed. [ 3387.747701][ T5731] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3387.747803][ T5731] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3387.791304][T29094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3387.862557][ T5734] dvb-usb: bulk message failed: -22 (7/0) [ 3387.862585][ T5734] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 3387.891513][T29094] DVB: Unable to find symbol stb0899_attach() [ 3387.891528][T29094] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 3387.950904][ T5731] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3387.951007][ T5731] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3388.905004][T29094] rc_core: IR keymap rc-tt-1500 not found [ 3388.905023][T29094] Registered IR keymap rc-empty [ 3388.905916][T29094] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 3388.910860][T29094] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input96 [ 3388.971595][T29094] dvb-usb: schedule remote query interval to 100 msecs. [ 3388.971618][T29094] pctv452e: pctv452e_power_ctrl: 0 [ 3388.971618][T29094] [ 3388.972678][ T2312] usb 8-1: Incompatible driver and firmware versions [ 3388.995194][T29094] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 3389.013794][T29094] usb 3-1: USB disconnect, device number 108 [ 3389.027808][ T2312] usb 8-1: USB disconnect, device number 9 [ 3389.243248][T29094] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 3389.798130][ T31] audit: type=1400 audit(1791146373.647:1126): avc: denied { accept } for pid=5755 comm="syz.2.8490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3389.968575][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8490'. [ 3390.396219][ T5776] netlink: 'syz.0.8494': attribute type 1 has an invalid length. [ 3390.570901][ T5780] FAULT_INJECTION: forcing a failure. [ 3390.570901][ T5780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3390.570932][ T5780] CPU: 1 UID: 0 PID: 5780 Comm: syz.0.8494 Tainted: G L syzkaller #0 PREEMPT(full) [ 3390.570956][ T5780] Tainted: [L]=SOFTLOCKUP [ 3390.570962][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3390.570973][ T5780] Call Trace: [ 3390.570979][ T5780] [ 3390.570986][ T5780] dump_stack_lvl+0x100/0x190 [ 3390.571019][ T5780] should_fail_ex.cold+0x5/0xa [ 3390.571044][ T5780] _copy_from_user+0x2e/0xd0 [ 3390.571067][ T5780] copy_msghdr_from_user+0x9f/0x4c0 [ 3390.571089][ T5780] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3390.571116][ T5780] ? lock_acquire+0x1d1/0x380 [ 3390.571136][ T5780] ? get_pid_task+0x2a/0x250 [ 3390.571163][ T5780] ___sys_sendmsg+0x106/0x1e0 [ 3390.571185][ T5780] ? __pfx____sys_sendmsg+0x10/0x10 [ 3390.571204][ T5780] ? get_pid_task+0x106/0x250 [ 3390.571242][ T5780] ? find_held_lock+0x2b/0x80 [ 3390.571283][ T5780] __sys_sendmsg+0x160/0x210 [ 3390.571309][ T5780] ? __pfx___sys_sendmsg+0x10/0x10 [ 3390.571348][ T5780] do_syscall_64+0x123/0x790 [ 3390.571370][ T5780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3390.571388][ T5780] RIP: 0033:0x7fcad9b9e159 [ 3390.571403][ T5780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3390.571420][ T5780] RSP: 002b:00007fcad7dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3390.571443][ T5780] RAX: ffffffffffffffda RBX: 00007fcad9e26270 RCX: 00007fcad9b9e159 [ 3390.571455][ T5780] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 3390.571465][ T5780] RBP: 00007fcad7dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 3390.571477][ T5780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3390.571487][ T5780] R13: 00007fcad9e26308 R14: 00007fcad9e26270 R15: 00007fffacd4b358 [ 3390.571512][ T5780] [ 3390.695678][ T5776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3390.727220][ T31] audit: type=1400 audit(1791146374.587:1127): avc: denied { read } for pid=5782 comm="syz.2.8496" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3390.727270][ T31] audit: type=1400 audit(1791146374.587:1128): avc: denied { open } for pid=5782 comm="syz.2.8496" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3390.872404][ T5777] bond2: (slave veth3): Enslaving as an active interface with a down link [ 3390.892989][ T5778] bond2: (slave dummy0): making interface the new active one [ 3390.896826][ T5778] dummy0: entered promiscuous mode [ 3390.897258][ T5778] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 3390.928505][ T31] audit: type=1400 audit(1791146374.777:1129): avc: denied { ioctl } for pid=5782 comm="syz.2.8496" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3391.017751][ T5791] FAULT_INJECTION: forcing a failure. [ 3391.017751][ T5791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3391.017783][ T5791] CPU: 1 UID: 0 PID: 5791 Comm: syz.0.8499 Tainted: G L syzkaller #0 PREEMPT(full) [ 3391.017808][ T5791] Tainted: [L]=SOFTLOCKUP [ 3391.017815][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3391.017826][ T5791] Call Trace: [ 3391.017833][ T5791] [ 3391.017840][ T5791] dump_stack_lvl+0x100/0x190 [ 3391.017872][ T5791] should_fail_ex.cold+0x5/0xa [ 3391.017898][ T5791] _copy_from_user+0x2e/0xd0 [ 3391.017929][ T5791] copy_msghdr_from_user+0x9f/0x4c0 [ 3391.017952][ T5791] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3391.017978][ T5791] ? lock_acquire+0x1d1/0x380 [ 3391.017998][ T5791] ? get_pid_task+0x2a/0x250 [ 3391.018027][ T5791] ___sys_sendmsg+0x106/0x1e0 [ 3391.018050][ T5791] ? __pfx____sys_sendmsg+0x10/0x10 [ 3391.018072][ T5791] ? get_pid_task+0x106/0x250 [ 3391.018108][ T5791] ? find_held_lock+0x2b/0x80 [ 3391.018153][ T5791] __sys_sendmsg+0x160/0x210 [ 3391.018180][ T5791] ? __pfx___sys_sendmsg+0x10/0x10 [ 3391.018221][ T5791] do_syscall_64+0x123/0x790 [ 3391.018244][ T5791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3391.018264][ T5791] RIP: 0033:0x7fcad9b9e159 [ 3391.018280][ T5791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3391.018298][ T5791] RSP: 002b:00007fcada9b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3391.018317][ T5791] RAX: ffffffffffffffda RBX: 00007fcad9e25fa0 RCX: 00007fcad9b9e159 [ 3391.018330][ T5791] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 3391.018342][ T5791] RBP: 00007fcada9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 3391.018353][ T5791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3391.018364][ T5791] R13: 00007fcad9e26038 R14: 00007fcad9e25fa0 R15: 00007fffacd4b358 [ 3391.018390][ T5791] [ 3391.623344][ T2312] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 3391.707944][ T5804] FAULT_INJECTION: forcing a failure. [ 3391.707944][ T5804] name failslab, interval 1, probability 0, space 0, times 0 [ 3391.707980][ T5804] CPU: 0 UID: 0 PID: 5804 Comm: syz.6.8503 Tainted: G L syzkaller #0 PREEMPT(full) [ 3391.708006][ T5804] Tainted: [L]=SOFTLOCKUP [ 3391.708014][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3391.708025][ T5804] Call Trace: [ 3391.708033][ T5804] [ 3391.708042][ T5804] dump_stack_lvl+0x100/0x190 [ 3391.708075][ T5804] should_fail_ex.cold+0x5/0xa [ 3391.708105][ T5804] should_failslab+0xc2/0x120 [ 3391.708130][ T5804] __kmalloc_cache_noprof+0x91/0x6d0 [ 3391.708150][ T5804] ? iovec_from_user+0xda/0x140 [ 3391.708177][ T5804] ? io_queue_sqe_fallback.cold+0x62/0x393 [ 3391.708204][ T5804] io_queue_sqe_fallback.cold+0x62/0x393 [ 3391.708229][ T5804] io_submit_sqes+0x165c/0x2480 [ 3391.708269][ T5804] __do_sys_io_uring_enter+0xa88/0x1b10 [ 3391.708300][ T5804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3391.708326][ T5804] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 3391.708353][ T5804] ? __x64_sys_futex+0x34f/0x4d0 [ 3391.708383][ T5804] ? __x64_sys_futex+0x358/0x4d0 [ 3391.708414][ T5804] ? xfd_validate_state+0x129/0x190 [ 3391.708453][ T5804] do_syscall_64+0x123/0x790 [ 3391.708479][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3391.708500][ T5804] RIP: 0033:0x7f985479e159 [ 3391.708517][ T5804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3391.708535][ T5804] RSP: 002b:00007f98556d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3391.708555][ T5804] RAX: ffffffffffffffda RBX: 00007f9854a25fa0 RCX: 00007f985479e159 [ 3391.708568][ T5804] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000009 [ 3391.708579][ T5804] RBP: 00007f985483506b R08: 0000000000000000 R09: 0000000000000000 [ 3391.708591][ T5804] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 3391.708603][ T5804] R13: 00007f9854a26038 R14: 00007f9854a25fa0 R15: 00007fffa5416138 [ 3391.708631][ T5804] [ 3391.774300][ T2312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3391.774341][ T2312] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 3391.775168][ T2312] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 3391.775189][ T2312] usb 4-1: config 142 has no interface number 0 [ 3391.775218][ T2312] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 3391.775239][ T2312] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 3391.775259][ T2312] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 3391.775277][ T2312] usb 4-1: config 142 interface 251 has no altsetting 0 [ 3391.777575][ T2312] usb 4-1: string descriptor 0 read error: -22 [ 3391.777671][ T2312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3391.811603][ T5800] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3391.811701][ T5800] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3391.821343][ T2312] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 3391.848103][ T2312] usb 4-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 3392.020737][ T2312] usb 4-1: USB disconnect, device number 93 [ 3392.031332][ T2312] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 3392.031800][ T2312] cypress_m8 4-1:142.251: device disconnected [ 3392.302822][ T5816] can: request_module (can-proto-3) failed. [ 3392.406667][ T31] audit: type=1400 audit(1791146376.247:1130): avc: denied { map } for pid=5815 comm="syz.6.8507" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3394.792140][T29096] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 3395.766097][T29096] usb 8-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 3395.768380][T29096] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3395.768411][T29096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3396.912273][ T5872] md: could not open device unknown-block(1,0). [ 3397.012540][ T5872] md: could not open device unknown-block(1,1). [ 3397.146683][ T31] audit: type=1400 audit(1791146380.997:1131): avc: denied { write } for pid=5877 comm="syz.0.8518" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3397.177697][ T3095] usb 8-1: USB disconnect, device number 10 [ 3397.262698][ T5884] netlink: 27 bytes leftover after parsing attributes in process `syz.7.8523'. [ 3397.276714][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8523'. [ 3397.279017][ T5884] netlink: 27 bytes leftover after parsing attributes in process `syz.7.8523'. [ 3397.328609][ T5892] FAULT_INJECTION: forcing a failure. [ 3397.328609][ T5892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3397.328641][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: syz.6.8524 Tainted: G L syzkaller #0 PREEMPT(full) [ 3397.328665][ T5892] Tainted: [L]=SOFTLOCKUP [ 3397.328672][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3397.328682][ T5892] Call Trace: [ 3397.328689][ T5892] [ 3397.328697][ T5892] dump_stack_lvl+0x100/0x190 [ 3397.328728][ T5892] should_fail_ex.cold+0x5/0xa [ 3397.328754][ T5892] _copy_from_user+0x2e/0xd0 [ 3397.328780][ T5892] copy_msghdr_from_user+0x9f/0x4c0 [ 3397.328804][ T5892] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3397.328832][ T5892] ? lock_acquire+0x1d1/0x380 [ 3397.328859][ T5892] ? get_pid_task+0x2a/0x250 [ 3397.328886][ T5892] ___sys_sendmsg+0x106/0x1e0 [ 3397.328909][ T5892] ? __pfx____sys_sendmsg+0x10/0x10 [ 3397.328930][ T5892] ? get_pid_task+0x106/0x250 [ 3397.328964][ T5892] ? find_held_lock+0x2b/0x80 [ 3397.329008][ T5892] __sys_sendmsg+0x160/0x210 [ 3397.329035][ T5892] ? __pfx___sys_sendmsg+0x10/0x10 [ 3397.329075][ T5892] do_syscall_64+0x123/0x790 [ 3397.329097][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3397.329115][ T5892] RIP: 0033:0x7f985479e159 [ 3397.329129][ T5892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3397.329145][ T5892] RSP: 002b:00007f98556d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3397.329164][ T5892] RAX: ffffffffffffffda RBX: 00007f9854a25fa0 RCX: 00007f985479e159 [ 3397.329175][ T5892] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 3397.329186][ T5892] RBP: 00007f98556d0090 R08: 0000000000000000 R09: 0000000000000000 [ 3397.329196][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3397.329207][ T5892] R13: 00007f9854a26038 R14: 00007f9854a25fa0 R15: 00007fffa5416138 [ 3397.329232][ T5892] [ 3397.437902][ T31] audit: type=1400 audit(1791146381.287:1132): avc: denied { read } for pid=5893 comm="syz.7.8525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3397.449002][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8526'. [ 3398.692389][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8530'. [ 3398.911978][T22975] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 3399.191944][T22975] usb 1-1: Using ep0 maxpacket: 8 [ 3399.192581][T22975] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 3399.197690][T22975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3399.197716][T22975] usb 1-1: Product: syz [ 3399.197731][T22975] usb 1-1: Manufacturer: syz [ 3399.197744][T22975] usb 1-1: SerialNumber: syz [ 3399.201206][T22975] usb 1-1: config 0 descriptor?? [ 3399.254030][T22975] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 3399.254174][T22975] pctv452e: pctv452e_power_ctrl: 1 [ 3399.254174][T22975] [ 3399.254314][T22975] usb 1-1: selecting invalid altsetting 3 [ 3399.254342][T22975] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 3399.254342][T22975] [ 3399.254369][T22975] dvb-usb: bulk message failed: -22 (5/0) [ 3399.374450][T22975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3399.379637][T22975] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 3399.380018][T22975] usb 1-1: media controller created [ 3399.407848][T22975] dvb-usb: bulk message failed: -22 (8/0) [ 3399.407894][T22975] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 3399.408112][T22975] dvb-usb: MAC address reading failed. [ 3399.452243][ T5905] dvb-usb: bulk message failed: -22 (7/0) [ 3399.452262][ T5905] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 3399.552728][T22975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3399.665961][T22975] DVB: Unable to find symbol stb0899_attach() [ 3399.665984][T22975] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 3399.747994][ T31] audit: type=1400 audit(1791146383.597:1133): avc: denied { create } for pid=5915 comm="syz.7.8531" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3399.774350][T22975] rc_core: IR keymap rc-tt-1500 not found [ 3399.774366][T22975] Registered IR keymap rc-empty [ 3399.775232][T22975] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 3399.779791][T22975] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input97 [ 3399.816855][T22975] dvb-usb: schedule remote query interval to 100 msecs. [ 3399.816875][T22975] pctv452e: pctv452e_power_ctrl: 0 [ 3399.816875][T22975] [ 3399.816885][T22975] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 3399.845905][T22975] usb 1-1: USB disconnect, device number 118 [ 3400.352890][T22975] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 3402.040880][ T31] audit: type=1400 audit(1791146385.887:1134): avc: denied { unlink } for pid=5930 comm="syz.6.8534" name="#11" dev="tmpfs" ino=2605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3402.041793][ T31] audit: type=1400 audit(1791146385.887:1135): avc: denied { unlink } for pid=4577 comm="syz-executor" name="file5" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3402.114171][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8534'. [ 3402.162903][ T5934] netlink: 'syz.7.8535': attribute type 5 has an invalid length. [ 3402.162919][ T5934] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8535'. [ 3402.214970][ T31] audit: type=1400 audit(1791146386.067:1136): avc: denied { read write } for pid=5933 comm="syz.7.8535" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 3402.216740][ T31] audit: type=1400 audit(1791146386.067:1137): avc: denied { open } for pid=5933 comm="syz.7.8535" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 3402.270984][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8535'. [ 3402.494976][ T31] audit: type=1400 audit(1791146386.307:1138): avc: denied { write } for pid=5935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3403.326637][ T31] audit: type=1400 audit(1791146387.177:1139): avc: denied { write } for pid=5953 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3403.436162][ T5960] FAULT_INJECTION: forcing a failure. [ 3403.436162][ T5960] name failslab, interval 1, probability 0, space 0, times 0 [ 3403.436195][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.7.8540 Tainted: G L syzkaller #0 PREEMPT(full) [ 3403.436221][ T5960] Tainted: [L]=SOFTLOCKUP [ 3403.436228][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3403.436240][ T5960] Call Trace: [ 3403.436247][ T5960] [ 3403.436255][ T5960] dump_stack_lvl+0x100/0x190 [ 3403.436287][ T5960] should_fail_ex.cold+0x5/0xa [ 3403.436321][ T5960] should_failslab+0xc2/0x120 [ 3403.436348][ T5960] __kmalloc_noprof+0xfc/0x840 [ 3403.436368][ T5960] ? rcu_is_watching+0x13/0xc0 [ 3403.436395][ T5960] ? tomoyo_realpath_from_path+0xb6/0x690 [ 3403.436427][ T5960] tomoyo_realpath_from_path+0xb6/0x690 [ 3403.436463][ T5960] tomoyo_path_number_perm+0x23c/0x580 [ 3403.436484][ T5960] ? tomoyo_path_number_perm+0x22e/0x580 [ 3403.436509][ T5960] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3403.436541][ T5960] ? __lock_acquire+0x5c0/0x1f40 [ 3403.436576][ T5960] ? __fget_files+0x34/0x3d0 [ 3403.436600][ T5960] ? find_held_lock+0x2b/0x80 [ 3403.436627][ T5960] ? hook_file_ioctl_common+0x140/0x440 [ 3403.436660][ T5960] ? __fget_files+0x21f/0x3d0 [ 3403.436689][ T5960] security_file_ioctl+0xd3/0x230 [ 3403.436713][ T5960] __x64_sys_ioctl+0xb7/0x210 [ 3403.436738][ T5960] do_syscall_64+0x123/0x790 [ 3403.436762][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3403.436782][ T5960] RIP: 0033:0x7ff94dd9e159 [ 3403.436798][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3403.436815][ T5960] RSP: 002b:00007ff94ec37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3403.436834][ T5960] RAX: ffffffffffffffda RBX: 00007ff94e026090 RCX: 00007ff94dd9e159 [ 3403.436847][ T5960] RDX: 0000000000000000 RSI: 0000000000009362 RDI: 0000000000000008 [ 3403.436858][ T5960] RBP: 00007ff94ec37090 R08: 0000000000000000 R09: 0000000000000000 [ 3403.436870][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3403.436881][ T5960] R13: 00007ff94e026128 R14: 00007ff94e026090 R15: 00007ffe39f21c68 [ 3403.436908][ T5960] [ 3403.442707][ T5960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3405.054386][ T31] audit: type=1400 audit(1791146388.907:1140): avc: denied { write } for pid=5961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3405.228870][ T31] audit: type=1400 audit(1791146389.077:1141): avc: denied { execute } for pid=5979 comm="syz.0.8536" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=119709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 3405.277421][ T31] audit: type=1400 audit(1791146389.127:1142): avc: denied { write } for pid=5985 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3405.306863][ T31] audit: type=1400 audit(1791146389.157:1143): avc: denied { lock } for pid=5979 comm="syz.0.8536" path="socket:[120214]" dev="sockfs" ino=120214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 3405.699875][ T31] audit: type=1400 audit(1791146389.547:1144): avc: denied { write } for pid=5989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3405.916187][ T31] audit: type=1400 audit(1791146389.657:1145): avc: denied { write } for pid=6008 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3405.952986][ T4729] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 3406.442959][ T4729] usb 7-1: Using ep0 maxpacket: 8 [ 3406.443946][ T4729] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 3406.446464][ T4729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.446483][ T4729] usb 7-1: Product: syz [ 3406.446495][ T4729] usb 7-1: Manufacturer: syz [ 3406.446507][ T4729] usb 7-1: SerialNumber: syz [ 3406.448839][ T4729] usb 7-1: config 0 descriptor?? [ 3406.452592][ T4729] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 3406.452625][ T4729] pctv452e: pctv452e_power_ctrl: 1 [ 3406.452625][ T4729] [ 3406.452656][ T4729] usb 7-1: selecting invalid altsetting 3 [ 3406.452669][ T4729] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 3406.452669][ T4729] [ 3406.452681][ T4729] dvb-usb: bulk message failed: -22 (5/0) [ 3406.457086][ T4729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3406.457618][ T4729] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 3406.457656][ T4729] usb 7-1: media controller created [ 3406.457688][ T4729] dvb-usb: bulk message failed: -22 (8/0) [ 3406.457701][ T4729] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 3406.457738][ T4729] dvb-usb: MAC address reading failed. [ 3406.477286][ T4729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3406.566901][ T4729] DVB: Unable to find symbol stb0899_attach() [ 3406.566915][ T4729] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 3406.598412][ T3095] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 3406.762636][ T3095] usb 1-1: Using ep0 maxpacket: 8 [ 3406.765686][ T3095] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3406.771109][ T3095] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 3406.771352][ T3095] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3406.771418][ T3095] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3406.771482][ T3095] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3406.771549][ T3095] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3406.771766][ T3095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3406.782176][ T6003] dvb-usb: bulk message failed: -22 (7/0) [ 3406.782194][ T6003] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 3407.051982][ T4729] rc_core: IR keymap rc-tt-1500 not found [ 3407.052001][ T4729] Registered IR keymap rc-empty [ 3407.052918][ T4729] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 3407.057708][ T4729] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input98 [ 3407.060758][ T4729] dvb-usb: schedule remote query interval to 100 msecs. [ 3407.060782][ T4729] pctv452e: pctv452e_power_ctrl: 0 [ 3407.060782][ T4729] [ 3407.060792][ T4729] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 3407.103792][ T3095] usb 1-1: usb_control_msg returned -32 [ 3407.103830][ T3095] usbtmc 1-1:16.0: can't read capabilities [ 3407.148344][ T4729] usb 7-1: USB disconnect, device number 87 [ 3407.163985][T29096] dvb-usb: bulk message failed: -22 (4/0) [ 3407.164341][T29096] dvb-usb: error -22 while querying for an remote control event. [ 3408.159964][ T4729] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 3408.184428][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 3408.184445][ T31] audit: type=1400 audit(1791146392.037:1147): avc: denied { write } for pid=6038 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3408.594886][ T4656] dummy0: left promiscuous mode [ 3408.626276][ T31] audit: type=1400 audit(1791146392.477:1148): avc: denied { write } for pid=6040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3408.732712][ T3095] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 3408.732736][ T31] audit: type=1400 audit(1791146392.587:1149): avc: denied { write } for pid=6057 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3408.882751][ T3095] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3408.883582][ T3095] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3408.885479][ T3095] usb 7-1: config 0 descriptor?? [ 3409.010134][ T31] audit: type=1400 audit(1791146392.857:1150): avc: denied { write } for pid=6059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3409.092433][T29374] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 3409.117514][ T31] audit: type=1400 audit(1791146392.967:1151): avc: denied { write } for pid=6072 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3409.215987][ T1178] usb 1-1: USB disconnect, device number 119 [ 3409.243074][T29374] usb 8-1: Using ep0 maxpacket: 32 [ 3409.243625][T29374] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 3409.255535][T29374] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.255561][T29374] usb 8-1: Product: syz [ 3409.255574][T29374] usb 8-1: Manufacturer: syz [ 3409.255587][T29374] usb 8-1: SerialNumber: syz [ 3409.263254][T29374] usb 8-1: config 0 descriptor?? [ 3409.302586][ T3095] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 3409.304459][ T3095] [drm:udl_init] *ERROR* Selecting channel failed [ 3409.454358][ T3095] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 3409.454425][ T3095] [drm] Initialized udl on minor 1 [ 3409.562897][ T6081] /dev/sg0: Can't lookup blockdev [ 3409.674086][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8551'. [ 3409.796382][T29374] peak_usb 8-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 3409.796411][T29374] peak_usb 8-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 3409.824507][ T3095] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3409.848330][ T3095] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 3409.851094][ T31] audit: type=1400 audit(1791146393.697:1152): avc: denied { write } for pid=6060 comm="syz.7.8547" path="socket:[119785]" dev="sockfs" ino=119785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3409.863507][ T3095] usb 7-1: USB disconnect, device number 88 [ 3409.893099][T29374] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 3409.923125][T29374] usb 8-1: USB disconnect, device number 11 [ 3410.001487][ T31] audit: type=1400 audit(1791146393.847:1153): avc: denied { create } for pid=6085 comm="syz.6.8552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3410.001533][ T31] audit: type=1400 audit(1791146393.847:1154): avc: denied { ioctl } for pid=6085 comm="syz.6.8552" path="socket:[119789]" dev="sockfs" ino=119789 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3410.091140][ T31] audit: type=1400 audit(1791146393.937:1155): avc: denied { write } for pid=6074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3410.136186][ T6086] kvm: pic: non byte write [ 3410.140054][ T6086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3410.870023][ T31] audit: type=1400 audit(1791146394.717:1156): avc: denied { write } for pid=6093 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3411.841284][ T6120] md: could not open device unknown-block(1,0). [ 3411.844052][ T6124] md: could not open device unknown-block(1,1). [ 3411.894370][T24514] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3411.905090][T24514] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3411.905897][T24514] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3411.906485][T24514] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3411.907813][T24514] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3413.099214][T22975] nintendo 0005:057E:2017.0026: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 3413.143528][T24514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3413.151808][T24514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3413.170882][T24514] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3413.185958][T24514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3413.199211][T24514] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3413.233128][ T32] INFO: task syz.1.8160:4418 blocked in I/O wait for more than 143 seconds. [ 3413.233151][ T32] Tainted: G L syzkaller #0 [ 3413.233160][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3413.233167][ T32] task:syz.1.8160 state:D stack:24776 pid:4418 tgid:4 ** replaying previous printk message ** [ 3413.233167][ T32] task:syz.1.8160 state:D stack:24776 pid:4418 tgid:4418 ppid:27114 task_flags:0x400040 flags:0x00080002 [ 3413.233217][ T32] Call Trace: [ 3413.233223][ T32] [ 3413.233235][ T32] __schedule+0x1259/0x6920 [ 3413.233254][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 3413.233291][ T32] ? __pfx___schedule+0x10/0x10 [ 3413.233305][ T32] ? find_held_lock+0x2b/0x80 [ 3413.233326][ T32] ? schedule+0x225/0x2c0 [ 3413.233356][ T32] schedule+0xdd/0x2c0 [ 3413.233371][ T32] io_schedule+0x8a/0xf0 [ 3413.233386][ T32] folio_wait_bit_common+0x414/0xa80 [ 3413.233408][ T32] ? folio_wait_bit_common+0x2a0/0xa80 [ 3413.233433][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 3413.233455][ T32] ? filemap_get_folios_tag+0x4c0/0xbb0 [ 3413.233483][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 3413.233507][ T32] ? rcu_is_watching+0x13/0xc0 [ 3413.233537][ T32] folio_wait_writeback+0x92/0x130 [ 3413.233557][ T32] __filemap_fdatawait_range+0x145/0x230 [ 3413.233581][ T32] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 3413.233622][ T32] ? locks_remove_file+0x42e/0x600 [ 3413.233639][ T32] ? locks_remove_file+0x42e/0x600 [ 3413.233657][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 3413.233680][ T32] filemap_write_and_wait_range+0xee/0x130 [ 3413.233701][ T32] bdev_release+0x4d3/0x6d0 [ 3413.233723][ T32] ? __pfx_blkdev_release+0x10/0x10 [ 3413.233742][ T32] blkdev_release+0x15/0x20 [ 3413.233760][ T32] __fput+0x3ff/0xb50 [ 3413.233787][ T32] task_work_run+0x150/0x240 [ 3413.233811][ T32] ? __pfx_task_work_run+0x10/0x10 [ 3413.233840][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 3413.233860][ T32] ? rcu_is_watching+0x13/0xc0 [ 3413.233884][ T32] do_syscall_64+0x661/0x790 [ 3413.233903][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3413.233920][ T32] RIP: 0033:0x7fad2499e159 [ 3413.233933][ T32] RSP: 002b:00007fff1a334068 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3413.233948][ T32] RAX: 0000000000000000 RBX: 00007fad24c27da0 RCX: 00007fad2499e159 [ 3413.233958][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 3413.233967][ T32] RBP: 00007fad24c27da0 R08: 0000000000000006 R09: 0000000000000000 [ 3413.233976][ T32] R10: 00007fad24c27cb0 R11: 0000000000000246 R12: 000000000031da0e [ 3413.233986][ T32] R13: 00007fad24c2618c R14: 000000000031d93f R15: 00007fad24c26180 [ 3413.234007][ T32] [ 3413.234031][ T32] [ 3413.234031][ T32] Showing all locks held in the system: [ 3413.234039][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 3413.234050][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 3413.234113][ T32] locks held by getty/5363: 2, on CPU#1: [ 3413.234123][ T32] #0: ffff8880379bb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 3413.234158][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 3413.234198][ T32] locks held by kworker/u8:3/15158: 2, last CPU#1: [ 3413.234209][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 3413.234251][ T32] #1: ffffc90007317d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 3413.234303][ T32] locks held by kworker/u8:12/17563: 2, on CPU#1: [ 3413.234314][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 3413.234360][ T32] #1: ffffc9000484fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 3413.234409][ T32] locks held by kworker/u8:18/19495: 7, last CPU#0: [ 3413.234421][ T32] #0: ffff88801d2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 3413.234466][ T32] #1: ffffc900043dfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 3413.234512][ T32] #2: ffffffff90cbc188 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 3413.234551][ T32] #3: ffff888089143128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 3413.234595][ T32] #4: ffff88805ead5258 (&devlink->lock_key#14){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 3413.234672][ T32] #5: ffffffff90cd4cc0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x1a6/0x970 [ 3413.234717][ T32] #6: ffff888069904e70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x47f/0x2150 [ 3413.234772][ T32] locks held by kworker/0:0/22975: 4, on CPU#0: [ 3413.234785][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 3413.234834][ T32] #1: ffffc9000cf27d08 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 3413.234906][ T32] #2: ffff88802ce8da58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 3413.234951][ T32] #3: ffff8880509f4ed8 (&ctlr->output_mutex){+.+.}-{4:4}, at: joycon_init+0xc0/0x490 [ 3413.234993][ T32] locks held by syz-executor/27926: 1, last CPU#1: [ 3413.235005][ T32] #0: ffff88801cb8e460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 3413.235057][ T32] locks held by kworker/u8:2/29351: 3, on CPU#0: [ 3413.235068][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 3413.235110][ T32] #1: ffffc900049d7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 3413.235151][ T32] #2: ffffffff90cd4cc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 3413.235188][ T32] locks held by kworker/u8:0/2819: 2, on CPU#1: [ 3413.235199][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 3413.235243][ T32] #1: ffffc9000629fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 3413.235298][ T32] locks held by syz.3.8519/5865: 1, on CPU#1: [ 3413.235311][ T32] #0: ffff8880270d8430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 3413.235351][ T32] locks held by syz-executor/6128: 1, on CPU#1: [ 3413.235362][ T32] #0: ffffffff90cd4cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 3413.235403][ T32] locks held by modprobe/6151: 2, last CPU#1: [ 3413.235413][ T32] #0: ffff88807e1f0340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 3413.235451][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 3413.235487][ T32] locks held by fido_id/6154: 1, last CPU#1: [ 3413.235497][ T32] #0: ffff88807e1f4080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 3413.260133][ T32] locks held by syz.6.8563/6155: 1, last CPU#1: [ 3413.260148][ T32] #0: ffffffff8ee52250 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x5315/0x8380 [ 3413.260191][ T32] locks held by kworker/u8:0/6157: 2, last CPU#1: [ 3413.260203][ T32] #0: ffff8880289ab160 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xa3/0x1940 [ 3413.260244][ T32] #1: ffffffff8f90b238 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0x11f/0x1d0 [ 3413.260291][ T32] [ 3413.260295][ T32] ============================================= [ 3413.260295][ T32] [ 3413.260302][ T32] NMI backtrace for cpu 1 [ 3413.260315][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3413.260337][ T32] Tainted: [L]=SOFTLOCKUP [ 3413.260343][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3413.260353][ T32] Call Trace: [ 3413.260359][ T32] [ 3413.260367][ T32] dump_stack_lvl+0x100/0x190 [ 3413.260392][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 3413.260418][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3413.260437][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 3413.260463][ T32] sys_info+0x141/0x190 [ 3413.260484][ T32] watchdog+0xcb1/0x1030 [ 3413.260508][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3413.260525][ T32] ? __pfx_watchdog+0x10/0x10 [ 3413.260545][ T32] ? __kthread_parkme+0x18f/0x230 [ 3413.260567][ T32] ? kthread+0x13a/0x450 [ 3413.260588][ T32] ? __pfx_watchdog+0x10/0x10 [ 3413.260605][ T32] kthread+0x373/0x450 [ 3413.260626][ T32] ? __pfx_kthread+0x10/0x10 [ 3413.260649][ T32] ret_from_fork+0x730/0xd60 [ 3413.260669][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 3413.260688][ T32] ? __switch_to+0x800/0x10f0 [ 3413.260711][ T32] ? __pfx_kthread+0x10/0x10 [ 3413.260734][ T32] ret_from_fork_asm+0x1a/0x30 [ 3413.260762][ T32] [ 3413.260768][ T32] Sending NMI from CPU 1 to CPUs 0: [ 3413.260789][ C0] NMI backtrace for cpu 0 [ 3413.260801][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 3413.260820][ C0] Tainted: [L]=SOFTLOCKUP [ 3413.260825][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3413.260833][ C0] RIP: 0010:touch_softlockup_watchdog+0x1c/0x30 [ 3413.260853][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 37 d2 ff ff 65 8b 3d 98 a8 80 12 65 48 c7 05 a4 3b 81 12 ff ff ff ff df a7 c5 ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 [ 3413.260866][ C0] RSP: 0018:ffffc90000157970 EFLAGS: 00000093 [ 3413.260878][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 3413.260887][ C0] RDX: ffff88801eed8000 RSI: ffffffff820c7799 RDI: 0000000000000000 [ 3413.260896][ C0] RBP: ffffffff9bc76f60 R08: 0000000000000005 R09: 0000000000000000 [ 3413.260905][ C0] R10: 0000000000000821 R11: 205d323354202020 R12: 0000000000000821 [ 3413.260914][ C0] R13: 0000000000000020 R14: fffffbfff378ee49 R15: dffffc0000000000 [ 3413.260924][ C0] FS: 0000000000000000(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 3413.260939][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3413.260949][ C0] CR2: 00007f98547aedc0 CR3: 000000007ffbc000 CR4: 00000000003526f0 [ 3413.260958][ C0] Call Trace: [ 3413.260963][ C0] [ 3413.260968][ C0] wait_for_lsr+0xfd/0x210 [ 3413.260990][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 3413.261011][ C0] __serial8250_console_fifo_write+0x23c/0x290 [ 3413.261030][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 3413.261049][ C0] serial8250_console_write+0xf46/0x1330 [ 3413.261065][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 3413.261079][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 3413.261096][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 3413.261114][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 3413.261131][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 3413.261146][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 3413.261160][ C0] ? do_raw_spin_lock+0xb0/0x260 [ 3413.261182][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 3413.261200][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 3413.261221][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 3413.261235][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 3413.261251][ C0] nbcon_kthread_func+0x613/0x7d0 [ 3413.261267][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 3413.261284][ C0] ? __kthread_parkme+0x18f/0x230 [ 3413.261301][ C0] ? kthread+0x13a/0x450 [ 3413.261319][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 3413.261333][ C0] kthread+0x373/0x450 [ 3413.261351][ C0] ? __pfx_kthread+0x10/0x10 [ 3413.261370][ C0] ret_from_fork+0x730/0xd60 [ 3413.261385][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3413.261401][ C0] ? __switch_to+0x800/0x10f0 [ 3413.261419][ C0] ? __pfx_kthread+0x10/0x10 [ 3413.261438][ C0] ret_from_fork_asm+0x1a/0x30 [ 3413.261458][ C0] [ 3413.276351][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 3414.389966][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3414.401511][ T32] Tainted: [L]=SOFTLOCKUP [ 3414.405865][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 3414.415935][ T32] Call Trace: [ 3414.419205][ T32] [ 3414.422125][ T32] dump_stack_lvl+0x100/0x190 [ 3414.426809][ T32] vpanic+0x553/0x970 [ 3414.430775][ T32] ? __pfx_vpanic+0x10/0x10 [ 3414.435276][ T32] panic+0xd1/0xe0 [ 3414.439007][ T32] ? __pfx_panic+0x10/0x10 [ 3414.443419][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 3414.449569][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 3414.456250][ T32] ? watchdog.cold+0x1ec/0x234 [ 3414.461018][ T32] watchdog.cold+0x1fd/0x234 [ 3414.465685][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3414.471552][ T32] ? __pfx_watchdog+0x10/0x10 [ 3414.476219][ T32] ? __kthread_parkme+0x18f/0x230 [ 3414.481247][ T32] ? kthread+0x13a/0x450 [ 3414.485480][ T32] ? __pfx_watchdog+0x10/0x10 [ 3414.490142][ T32] kthread+0x373/0x450 [ 3414.494222][ T32] ? __pfx_kthread+0x10/0x10 [ 3414.498803][ T32] ret_from_fork+0x730/0xd60 [ 3414.503391][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 3414.508576][ T32] ? __switch_to+0x800/0x10f0 [ 3414.513244][ T32] ? __pfx_kthread+0x10/0x10 [ 3414.517910][ T32] ret_from_fork_asm+0x1a/0x30 [ 3414.522848][ T32] [ 3414.526054][ T32] Kernel Offset: disabled [ 3414.530366][ T32] Rebooting in 86400 seconds..