last executing test programs: 5.348234375s ago: executing program 0 (id=696): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) unshare(0x62020600) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)="390000001300090468fe0700200000008100ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 5.040913276s ago: executing program 0 (id=699): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @random="000000000300", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x14, 0x66, 0x4000, 0xf, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x4, 0x6, 0x65, 0x4, 0x8, 0x89, 0xf, @empty, @local}}}}}}}, 0x42) 5.024222708s ago: executing program 3 (id=700): r0 = socket(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, 0x0, &(0x7f0000000300)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x1, 0x0) r1 = open(&(0x7f0000000640)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x1) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x6c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40814}, 0x4040001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000180)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x42aa380, &(0x7f0000000080)="b510bbf5d841fbbd", 0x8, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="b3155942107864dd8f678e8fd5fa7a855985ddedc3be82c2") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000340)=0xc) r6 = syz_open_procfs(r5, &(0x7f0000000380)='mounts\x00') write(0xffffffffffffffff, 0x0, 0x0) r7 = dup(r4) syz_ublk_setup_queues(r7, r3, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x40000, 0xfffffffe, 0x2f6}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdaf5, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003, 0x80000337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x30, 0x0, r6}}], 0x1, 0x0, 0x0) 5.00385978s ago: executing program 3 (id=701): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000540), &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000680)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@new_dev={0x1, 0x9b0}}}, &(0x7f0000000740)) 4.932918527s ago: executing program 3 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x182, 0x10b) faccessat2(r0, &(0x7f0000000380)='./proc\x00', 0x10, 0x200) write(r0, &(0x7f0000000140)='7', 0x1) syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f00000002c0)=0xe8) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000000c0)=@rnullb={'/dev/syzrnull', 0x0}, r1, &(0x7f0000000300)) ftruncate(r0, 0x5) 4.932750337s ago: executing program 0 (id=703): socket$unix(0x1, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa2f01, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 4.653909285s ago: executing program 3 (id=705): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x6ad01, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, 0x0, 0x0) syz_io_uring_setup(0x1f85, &(0x7f0000000100)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, &(0x7f0000000180), 0x0, &(0x7f00000002c0)) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="13000000010203", 0x7}], 0x1) 3.581546985s ago: executing program 2 (id=724): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x23e, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0xa8402, 0x0) write$vga_arbiter(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='unlock i'], 0xb) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20010004}, 0x8) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x22d6480, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x32]}}]}) 3.518624011s ago: executing program 2 (id=726): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = dup(0xffffffffffffffff) readlinkat(r0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)=""/230, 0xe6) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) llistxattr(&(0x7f0000000380)='./proc/thread-self/fail-nth\x00', &(0x7f00000003c0)=""/69, 0x45) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000005c0)={0x3, 0x2, 0x14}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000640)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000680)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000006c0)={{&(0x7f00006c4000/0x4000)=nil, 0x4000}}) write$rnull_attr(r3, &(0x7f0000000600)='4096', 0x4) readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000240)=""/196, 0xc4}], 0x2) write(r1, &(0x7f0000000140)='7', 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x64) syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x3) 3.517320301s ago: executing program 2 (id=727): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x6ad01, 0x0) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) 2.561138769s ago: executing program 3 (id=731): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="a94dfa2c82c176af11f300", @ANYRES16=r1, @ANYBLOB="000829bd7000fedbdf250c0000000800050001000100200001800600010002000000060004004e230000090006006e6f6e650000000028000280140001000a01010000000000000000000000000005000d00000000000800070034b400000800050009000000080006007f0000004800018008000b0073697000060001000a00000006000100020000000c0007001200000020000000060002005e0000000800050002000000080008000200000008000800040000002c00038008000500e00000020500080005000000080001000200000008000300c50000000500080008000000080006000e0b0000"], 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005200010005bd7000040000000200000008000200", @ANYRES32=0x0, @ANYBLOB="3e2c525e06333cd42fde386e42ed945f0ec3bbd57a4bd36dcd"], 0x1c}}, 0x800) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) symlink(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x157) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x8, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) write$binfmt_misc(r4, &(0x7f0000000480), 0x2000011a) splice(r4, 0x0, r3, 0x0, 0x4ff9c, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x6ad01, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write(r6, 0x0, 0x0) writev(r5, &(0x7f0000000200)=[{0x0}], 0x1) 1.96721381s ago: executing program 0 (id=732): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000140)=""/145, 0x91) r2 = memfd_secret(0x80000) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f00000000c0)=0x9, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000300)='O', 0x5c8, 0x0, &(0x7f0000000340)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000f01000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000, 0x1}) 1.437281234s ago: executing program 2 (id=733): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x6a, 0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x6, 0x0, 0xbe, 0x200, 0x1, 0xfffffffffffffff9, 0x1d1, 0x7, 0x4, 0x7, 0x9, 0x6, 0x270, 0x100000001, 0x4, 0x401], 0xe000, 0x800}) write$selinux_load(r1, &(0x7f0000000200)=ANY=[], 0x1b000) clock_getres(0xfffffffffffffffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc\x00', 0x1ff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001) mlockall(0x3) brk(0x945) link(0x0, 0x0) brk(0x7) mount(0x0, &(0x7f0000000cc0)='./proc\x00', &(0x7f0000000d00)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000d80)='27', 0x2) socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 1.313279796s ago: executing program 2 (id=734): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000000d0000000000000008001000ac1414bb22be2ca04110c2d915822b946fb419c62b2b3dc44cb902a93e0f7f06baf6d3fb19b6c7205c820cde94dc8e6044de650fddd029424d4300ae9bf08ccc9a"], 0x28}], 0x1}, 0x14008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000880)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000200)=0x28) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000009c0)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000b00)={0x0, {{0xa, 0xfffc, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @loopback, 0xfffffffe}}}, 0x11f) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000c40)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r4 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xc45, 0x760b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x80, 0xf6, "", [{{0x9, 0x4, 0x0, 0xd7, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x896}}, {{{0x9, 0x5, 0x81, 0x3, 0x450, 0x6, 0x4, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0x81, 0x6}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x0, 0x7, 0x10, 0x20, 0x6}, 0x50, &(0x7f0000000800)={0x5, 0xf, 0x50, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x2, 0x1, 0xff, 0x81}, @ssp_cap={0x10, 0x10, 0xa, 0x17, 0x1, 0x1ff, 0x0, 0x8, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "88691b74000000000800"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x8, 0x0, 0x6, [0x3f30, 0x0, 0x30, 0xc0]}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3001}}, {0xcc, &(0x7f0000000300)=@string={0xcc, 0x3, "2d737372df61e47f7ee8eebc569763551a7bb78d99bc0126320c996c8117f262ce3deddfd4e10684b340d1ea1e13c121eef263a9cc7056d2e9c0fb1a4c8b0616dbdcb3a00dbfc7ad2ace318947da09a84366f057cb1a112fa053c0c1c1f45c76ce6fa430c6afb003e9312fa0a05e2364ceadb98026baa4103504d9d12292c9fe5c1ff6f99d10e9d6a56bd61238ab4d16295b5f26bb5bb3112ae58274246244166ff826fd83453c27fd6a5fc7fbce4b9f85b1573a32cd88228db6f2dab03d6a51889b0ca0f3ac32b5697b"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000580)={0x24, &(0x7f0000000480)={0x0, 0x2, 0xb, {0xb, 0x6, "1b004b463c9d933d6a"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000500), &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x74f5, 0x6, 0x1, {0x22, 0xb18}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x40, 0x3, 0x2b, "439a8ab78b7d2dc84b558a8c295ee285f1cb87bc3bf034d19585b49507a27a0dcddc3ab0fef99dc9847fd0"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000680)={0x20, 0x1, 0xc1, "3850daddf3af607577a65c92049ed82197b0249dae18486784420c00fca110fb17525dd25dc684ffbb6da322f2f709d093cc76c07a266c3c11e9470e3e043a1319e84ca19167ff971b34a89ced52a8bf3f2ccba0c4c7f669dae2d71964b3d4d5a13611537ea4957fa5566b109b855f4686449f404c3f4c33a6b1f7bb483e8f5d82915d291631f89cb8f7e0150bcf9cabb2ae0f66b9e594ea0afc18e0966be239c5dcd84ddaeca2d3d5cd006cc0e492410b2b90b6abc027f0c9532e96cd9aaffe62"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x5}}) 1.100062088s ago: executing program 0 (id=738): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000540), &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000680)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@new_dev={0x1, 0x9b0}}}, &(0x7f0000000740)) 1.048922553s ago: executing program 0 (id=739): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x6ad01, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, 0x0, 0x0) syz_io_uring_setup(0x1f85, &(0x7f0000000100)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, &(0x7f0000000180), 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="13000000010203", 0x7}], 0x1) 800.442149ms ago: executing program 2 (id=740): socket$unix(0x1, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa2f01, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 466.094433ms ago: executing program 1 (id=743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)={0x508, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd9, 0x3, "f576ddf9988183e1fe3952315d4ca08f4106b7e48dc3c0899822dc1a141b0f6ff5223e4b71062d1eb37bf6cacc8850abc35a05039537fe576b1a16a0579e5a3a2301a6c03a3a5b5d45311551d6e44e98d427bdbef04450c321108e2b7db99b57ed9e33dadace690d485a0e933ab82db7a69c8677da83090ebb7ea0f7104cbfe6145cb4ea01d3fd2106b8dcd443f00d46588cd249e30b0fc3f3d090efd15e292240f2b1e84bc4b0072871eff923804e83156c19b01f79ce51f1935b38197233c64fa7a4bdd9327d1ee067db58eef05c7fab9811fff0"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbec}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcd0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x192}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a85c599e900d57b5ca0a51e0a8c0f80b7d5fcd2035e95c1405f6970b9d1f278872b19e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "747e69fac1eb5531fe18280e5a8ef841a3ccc4747564d345620d81ad055d7f123c18b88f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0x6e, 0x3, "39ef347e4e4ac5722e351120925114d1b98341ad02fc01aa9f6f248f7a959a91d66f36622d400708c5687d2e4e9c0d8efbdf69324274dd9835600d736bef87a62ea48e5a43e098529adb7f6ae673a3558814695952b361477fe05baf9e839e8aff51345f40d4ca07c249"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0x508}, 0x1, 0x0, 0x0, 0x8040}, 0x8054) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x3) sendmsg$nl_generic(r0, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1e4, 0x3a, 0x300, 0x70bd2c, 0x25dfdbff, {0x1a}, [@nested={0x8, 0xf2, 0x0, 0x1, [@nested={0x4, 0x102}]}, @typed={0x53, 0xf5, 0x0, 0x0, @binary="bb964dc8e493ab87e4206f4c959732b247d6bb5822675047a0b3f27c0d5303c754fe6cc90e31ff00bcda3ac8b8df006e7ee2af5c8549d1b513a31930edc460a4f98b8347c2cdb46dfcb6bee684df1f"}, @typed={0x8, 0x154, 0x0, 0x0, @ipv4=@local}, @nested={0x8, 0xd3, 0x0, 0x1, [@nested={0x4, 0xee}]}, @typed={0x14, 0x119, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="13e5752193c028e9dde0d9cd287107bd56acbcc9434c78e15678fbe830d7304af04ecc23502fb5235d4f0b52a5c54c12b08c3f565097a337d61f41aeaf0b1b8f697475f23afd7ebc6eb86e19ffed3b9e946fcad3bc4edef512bd0bc981fe95d5e2e02de83cce14df5a2e05f4046a17dcafbd9d10549eaf1c14f026f347be44feb90bdce1130b4950f13f2de0d065d8601fd636bb552553e352a6789ecb1a8a68e2fb09f8cb313e8495d2461ee8bb76be3d8081bbfa68eb9860fc", @nested={0x8, 0x46, 0x0, 0x1, [@nested={0x4, 0x148}]}, @nested={0x8, 0xf, 0x0, 0x1, [@nested={0x4, 0x10c}]}, @generic="692f1ffd3510748efa5941578bb8bf72edfb84c9843bb97ea629fb94b714a09d410b9c70c42295934f5b943616b0fe473a2c8089b9879eb25b5b4ce1d678338bd73cbdfbdff294352d6aa094e7f30bab76495c6ae4cb6cece1d92eb1f9a3a99c129d199b9c857d43a0fb3b79ae6e0eb786c53821b272257cede347dcb768c7b648698234ab"]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004825}, 0x4008000) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30000010}, 0x40004) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000037c0)={'syztnl0\x00', &(0x7f0000003740)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x80, 0x9, 0x60, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x80, 0x8, 0x1, 0x3}}) sendmmsg$sock(r0, &(0x7f0000003d00)=[{{&(0x7f0000000ac0)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)="69cd680806f0be9ed977675d74f1aec4bc633662c254fe29f8eee915ad088a7158ea10a156b06af26534bc64628c4ee884af3740", 0x34}, {&(0x7f0000000b80)="e145312fbfbe0de0c29f7941b37f9c5b9aafd797a546bffab847f48e4e14", 0x1e}, {&(0x7f0000000bc0)="15448c57a14c2afd1fa6495252047d80e40d2b311f10101ee6f5822d2a506f066ad33528280dc6177ad756221a86ad32a51df1567f93bae6bde30fcf424dd0c273cca9143cf9c04729649a49b987bf04490ac6ab51e19db183dac16ff73a609d165c70696e681bc7eb5e79f8bad3a8d3c3f39154eebbca0ae5475f6d9519b501ad6b12a15f0259130784b9fb4a39464d4c258623b920556fe7558449d46314207d1198d3eb0c95dddfd372d4e507e8dfbbd5aabcfc87aae86388ca9e19", 0xbd}], 0x3, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x70a}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xba}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d80)="b8fe5d7421a513d188054f6b7f99516b7101a35f731980365f9744f685fa4ae83d9b3842e5d8cf481d7c2086da9f2dc797e31e17359f4fcc5deab1afec90efc30f81fd0b022ee812349a953f53012b8809afc0e4a9c1c10dc4b827351f20f86ab7855f263552c5799233fb6d680301ad934675657d6f33d17784618f6b727a19721f78a21dc5bf9089f60594cae0d085a9af9dadfe80bb7d2d", 0x99}], 0x1, &(0x7f0000000e80)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}], 0x60}}, {{&(0x7f0000000f00)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000f80)="6381afd2113fd140d0b4c04e0a8c5b60a7d3996def62aee0714f83067aa2eab2baa07d2fdc", 0x25}, {&(0x7f0000000fc0)="e50caceaf9cc6d15a9b954aceda4fcddca87854d615e3fe9c9afb3ed353000cc8f2cb627028567667b1264b1aaff6caddf71481527d4370522c718a92e4d8059a38d85bb4027abd9989543c1ad513884e966ee164c461b5ff73ebe30128e1a716efa71b16388c3b08a9e8982c20b323b8513fbe4cffe3e0ef8f33f7e2309447ed76c4bf6895dceb27939cf465e9f5f2d8d7814209389c9a28fcdde3a3b4ab98ab77838929349769abca472f235a6e85b13", 0xb1}, {&(0x7f0000001080)="438dbf6def4b517ef0fab627c8f132c760da8857f90d6e77ea48d05976581eed46398cefe3db35d7d578dcfc0a1765034586b544df3629829504d0252f8c7eca3352ecc9f6c1899a1b5a754f3f73a8970eff5be6fdf4e6cb7b0155e76b06611bd14e51b7e90ccd742afe3dcfc9d71d622c34d114ced09892a90adbbcc817d79f8a8b500580f6911caac4cf5fc213d5e4d56801f2a39e9bbdfc22d02183f03351373581819d85d8fe0ea7bc0b9a4939772a527f0b2775", 0xb6}, {&(0x7f0000001140)="a5a221a8609329b0c1fce5569d6f12881277b2d5d67e6ce5735eb128782a9f1668ffc97921558891c2a0b48b4881ecc27e2639cdbb40ab04b2a1fe42de9a3c25edfaa61ba63c4714915579c9a4b6a78ccbe53c5c3fe6a4660371682eb0591636182fd647c15bea4dc001bea9be87", 0x6e}, {&(0x7f00000011c0)="b6385c7805b234bb9e095e16acad5c3707476e8530d722bd29d20a9ec7b2789a999a06ff11287ad1ffea4ab13eb7a72ee66dc2c0aa1e861c3ee295709624d42927cc68a8c9c0e5503af18c24cbe9e0bd9aec190531459e795934957da3a9d17a4aab708865e12ce6ebf8d91a64807f58a540ae46195086bf1abc9320ce778cc0d4b62e2fdb2d1da54a2b3af132c5a20b8587921f979bd66a3b48bbda632f696f71314e5f8896af172877f7bb4f1a12f5bf56231deca6411d798079412259ec97c1a257fedd96b03d9b3849ce092f3efb030fa0bbd18df21f12993d000fadcb3f5e69a18c58a0d0d842e017532779b3bf076a4f5823b6a3a4126a5c6e2f7d1f7a96074292b7e5481c737af77804e5a00a1443b17199993cfd5e2ed73d51e8f715c1bebfa717c4209957e6777c91fc5961f6acf9a1b555b5393fee369b2f2fb15d56ae5ff4880af90e7338f004e7806da4829e2487960ffa723f1dccc2fba161bcbaa5037e0876cc54be396bbf0039aea1a07938ef53993419afe2b963b480daf5a8e5b357de2850e2a618b17aec4979e2a740bc904aac7b6e5c343707665cc4e0db4f5fb082c4d0a77e0919536c0c3a442b3a4925ff1221001da86d88d8fadfe155816af801c10e42101c1f14fe1f7bbdb844938b5015cb31be38be22cc18d7fa069d59da33fbdf712b390e37397e526d6106ca35b50861ccbd987e8765b08b2a71dc41cdc4092901553be3870d45e51f441028981b49a7e8d0fec27965c763c743e1fff11c9d4cddfca00d717976d5f1bcdc65fbef2c557612208b2e241dc83e9d53ecdf461c5927a26e9f90b26547e1349d70bbded5cbfacc1cf67705926724dddf172a3acaca987b9e34796f57d86803292a34552b34f627c8d8327279d4473ca6794918cd6b3304f993f71b5caec0636aa55d7664448ec43b88479fc173a1af10e8855130fdb660e95803f1461a5fcdf45490f5213d2adc1487bcfd3e8785f09cc2ae072cf90df8f6c2d2095752852103c88449888129ffa33ded8c8bdf5074e7746eb86dba165cf92af0e86f235d8299bcf07609651ab9e7137267a3edc49faf6652cb65208a44b553cda277a54a8194fa2d730626a282ce7d05e0fadca6c29c0f062ecb87432119cccca9a3c266d7e49cd07f0fbd5e773aa11c1f45b6335a5d69be9bbf0497562a73b3a7d7ddcfa9ecab0f96e9c06c91ffddce0dd1e0dee8763028a026f13e74c495fb5da69c7b688e50b0c376c828c753db8661666d9927c3d042f876c48bdc9e45692fcbdacaf435472e9fce07ab223b95c326ccba056fc25e2e686f73b8c6b53f6fc80c65f63fd3987e954ba23dd42dab54a45203d404d1725d07c275fc6447d387f6abe027fe288c16483b45a8efb25a7752e34cfb6ad55aa7ac996b2741b01d2937066e87903177be1b34dc174a9401914cac50feace1493eb447b0e424d33b807fa1e719fee8d46565ed653d33b23e2cc88159facceb8dfcef824936bfa1e37c255cb895eb56275f1bfafc467cdf3b99e4809ec80330bfcfcc5e80e9978672db9a72b2183a25921fc7fd8bc130d4b2d96332014eabeaba6f19c0eb16a87486eb14f2f124ee110f4b71480ec13c373dfac3c16de05d67806d4e0f54c5c9d4c555fd37582a768dbfbf6e4eecd7ac68cc6987f709771de0158d4bf8f5aa19c1cb47296eaeeea3df7e3d0334693fd5bd2d4502303143d556fed2485fe41edb09a71aac7cbb07fd2f05c7883bb99cc53c7a4501caf31cce7772a5e4b46e49a183aa75d401a4af651033d10bf1283063caf8bceaaaa71d9779b6c9ef19ea3d00a298f2d7670b1df201713f60f2728cf8ac9038be0626d7b6c197dc915efa5e34f68447831b067bfe956fd78470ac48dafd8e6f0704ac2c7d60c5dfcdd510593fa6cf230808dd2062c02035d832793ad0aaf8d97e883651c7a0775e84e787d07684a25451097c83e3a6182e763f636de5257a67e6f199b3c0fd173e16f98b2fdb0903e69e862845c4f938ff7c0c6ecbff6af1e49bb46ab387df4b5b7f72e54201201b734164c7b263c8f0ac770b6586a9f690d919094c9765d3071f64f572de046ab98aeb9eab99d22607c2491188ab71b78f09801916e2cbce71fe3e4dc7963b0ba5a910db94e75216a61173eb5f91843747d0428e061472c43e9c407ea9efe5a23ac0c950a1e7f130f74c149156be6aabf73c44db3b10ee655e7801d5eed6d4cb3486e49f2e25ff42d7e018d707ea108f6dd62ad0167150593c1c70f098edf9f827c575758c3d5df41ee014a9ec5bee40371bd058068a01abffd57d89169e0e0b2b777b65a1343a9c06dc4bea25bb82b5b06ad6aa04486e71a207b0bf76220fc8a19fc39e878509e75d3338133f070e16a2e7673c4f2c7584c9045efdf5055271458c564dcca5d81afe12580b341616b3fa7fa543b3729d1e38096c62210dfb30e2a4cc0a2d3ba8741f796772b7af1542657c4c587e0801529355d29ed65180360d8d40d8448c6f8a8edf4c2a2474fe07752da11a52b2c768a3f10a68967852507e703ff07ca9f3f10242d0aabe7eac12e73cf0fb94773def0340abf8b031c811c5a3b9ffe3393ff42ce7b3bb72b4124e113550d7bcfc9d72e8bb948620a86eba0442d8cf807b81832a470d9920fbb8f1b412701d9224b714bd0df9fee7edfe86330f83db75f98b73ea5fc7ef160f4a9e43ea7da23d57f5d178983a46485ab106fc3485dd2503ddde4827785c0750209d37a9a470cb04e5cec72a08496d7faedd3aaaef445cb1ec96baa236d737c5b04a4ac4148d9e93464f7882fae0dbab9ab9084b8822c69718b64cae49cfd007337697c89666bdee39c0b33673f3a292b819290302749e4302395210614069d5bb711ba841ab8bcb6bbae50d52326d25951a7bb69168cdb67ab8141bfd6fef406fe22997798b87e17dfb1066374288c2e9659dd3db9c95669d44b14c5134a421e9571a46bdcfe2ae07b0f36b347b51adbfb8f82210e5be0f1244835ba7f317a5e0b58b46d0dfe3f340bf1f6ac5b688059ef2b27e6312048454ae60d29f4fbd5198f5c377ebbeeb645eeaebec35b6c5eadb7f252889acc83d9acdb19070423058e91edd27049b4e765c19fab917114a00484763ad1f30ad29f904afdbd4f5a55cbfe5f90a03f6ce5e5cec6b372c4d7545d0dbc2c62ab5c1d8304d2cc36c1f9c5d604b23def68d6b3509bbbdfc6dc0f2dfcfd4155b661debc7d696f3eb4ab2fab1a95a01903f51a013c7cc3db10d5645bb4601fd71f60e5064e66acd3e18874984d98f9921f945db6ad4b3c2817e1f7deb705187f5a1a7c730569c7578d9eef19e054ee2e92b59a596b9319a83ea28852458f6e55b1f015b523895903f9558ef4fb535e59a3c63978677b6368ec43d6c6af55e25ca364d88d7e44201ef1483353518862ea279f789427357ef0ccb508185635e987c77cef82a598bd19fa7a86ad739ecb476ff45a865af8288451791eb9e13ee61b6f68517d0f987610852370c02f1fd59d4cab254653eb712a9dabbe2a3e2f3f57ce679f05ad2464c3226425cc0e414c54068670db7aaa8e6670ab57a4d645c7fa9bc1c90491452e236597511127d077eb9cb3221d1969dc0fc35b732a88fe405f1d59c028daa826e7488451cf50691c512fe95a296b35eecc71ff432e33de2db2143c0dcf42120610b514e26b061081a1d5b5f9500f009d3e86b7b81aab82e51e45eca9da8d00b41fcc354fd4096739f2606abcdc70d1ea3e372027e846931eb7702091a123e8cd133fdb47ddc4c1ff59f56be2f06d3f5a839329d461e9bb659093f0f5d268725a341406f716add7ea4554c5a7c00db4cf6051bf8562a90320ec55bbd54baaa33de30392f36cb539f343195da78588f19f226bfdb3daaf4a47cbce6cf36a8139f89b2f8970d7b98a66ae03bd2dd4e44bd3281e9eb2d373f093d4fec30a5a7845b3956a93a0e646c428384440a92ec630e0bf947a375595ae1b59dea795b1ad5457994f1da14f18e89ef08e7a4fb5e7a16b99ac2fe8aedd1c857efc8c06ed2e4df2259e7bb52922f60c1d1afaef5e5afde1dcfcb432ef6857763803a47266b96e4f51d9b662d2b05b9bf9136ffde65740ebc4f530910444293e59534570fb331da5cbc6abb8757130252e5bcde74efc5000d4f537aa0ee2dd41497461dee86a3496e8228243c4b6c7da08563e5a6165721a88e69c694ca61c2dac356a8acb4966b8c8c5e0a480b5f75cc4b29f343cc71e0c1a26da5992c29796a6b7e1eb15d9a910907aaf41056302346f6b46f11a90003ab54027a1d71d93022e2ae34fd37da165dda2953c36624f37f3c95949654290da150e794d92152cdf87a095cda8c74c4175e3154a66757b4b67f4f3ede99d1e8ee5350d47ef7e48306d581d8fecda5c649dfdd1ebe6f029708c057d578187aca472c0f6108b6efae0a7ded3ff8093792157644dc56acfd03312fb35b18bd0956e02bd5cd0ebc0f0aaa942e398d88e7e38345946fff16d608a6e42ad7eec3111ea17cb09c9fc439ef2495a599d29510270c5f9e792a01f647f170f6dc1ddf8f7632d9fda9cef47abe62fe4f018e7622991e6ce267072a3d01e9e16f236fb9d2394eff8fdc8eb13c4bedcf55430582584214be57ea81e64b1e18c02aae24855243cb3ba4f113ab0c892c8605119698cea444ecc373e5fbf07d866f3c2b34d884d01c78d27f7e539933b9dbf9ea4f4087073dda801e5f2cc187fe8e5482b46aa566ebd6396efe9a0bd4719c4f85e7f2385a9ae7eb5d4f169d4f6442a75f26438bd84832ca0a56fe783fe6f4f0fc7cfc74b420f0671dc574f973324f87802c5b18438b5d1aba36b18db2a01ba80e76ee0282ebd206e9bf9d45fe1292382a97079ea07e45431f5cd0df2ef86ea498a9d2a334788937022fce25fbc0d3449a7f82742df6d8a3cd70af785ac82cb71d47b4c38594cd3f2bd5d3ad394f98fe2d660384dfe87176f2ac49be23961e387ed7a1942ff5b9ba1633a2b48f30aaaec933cb8266926739f7d8afba60b65ede1834c7cec0c5f360e03d7f28ac0f906cab28eeba7732aeb2583e46beca41dd17e9e0ca44115c7a831a8bdec8667ee2cf3db6c02148aaab7f1a4a88a52bf37dac06df4ffcaf6d95cb49c42fbd52ca250c602fe8f5e4af9c6109ce2947c0321376a4970059e9b272868e717bf2f87b7c898751a60a15040784403f1842f2ed3cab620ca01f2fa2bdb1c0218e654432f05a87a847d6f1d63ba684e1a4214cd4946a36f73dcee7805c63028e5f68e7ee4f431cb1249cea6187ea40b81e7c2f78ae133da4b7148aa43ab4f9796db3aa8a7b88cfda510aa3b0699b4ee7e4de58cd7ed18bb54ee607257ce1750982516407c1f52641e8bf36aba55559da6d92d925d543815f43f28ec531e164f8cff7acd0ac3bfcf7c43e009ac39d2fd4b73e8bab5e91fa224a87d8e41515b9827c47a7abb00186a3b3049310eb5612ccc829b636d325d4bf0f0335070196010096a7beeb1d2cd08b3292c7eb1187def5d1b9ead9cf36a2f8fe8c3ad173104704bea7ce2f6f3eab7d1bd1756285f104e10aaeabd37566d8c7d9ae48f08426e36d00a0418042be60ccb2060a06db2bb05a2d62d6e081764279e0a270d9c198f69b7ef4858e7cf3917a8315161a4b66ba00069e4fdcdf4cc01925d8bcdac8a4b0b5b292af7eff2f3f98bdfba0e7bef5ebab072054c5328afebeddd3f675b7535beb2de3f1ea06a8699354ef654c689c3e46e9b049d2ab599ef8e51d37bfe3a88428ff6952ad6970c303d4", 0x1000}, {&(0x7f00000021c0)="68fe5114712ac0d987ca82b0ba49d2cedaee720382f18e23a98bf8fda72a70495a08c103409fdec6e32fd82737e2fa4cca028ab480575960e49d58a04176969d41f86eb0bbf65d1dca35609759f358bb4bf2c45e1d7dc87b457b5e91b275bee883cb4e8dc289", 0x66}, {&(0x7f0000002240)="581e75c12c2defe5a07de2aa702c8da2b21d98e92259f3709f706c132b93be2c489dafc86273a0d125f0df187f2cfbede2a52a6fc4520d3acb671fe33f269804208a91d36cc8", 0x46}], 0x7, &(0x7f0000002340)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffc}}], 0x78}}, {{&(0x7f00000023c0)=@vsock={0x28, 0x0, 0xffffffff, @local, 0x1}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002440)="1b3b34ff0c79b785553da0a7623c6fc1b06b2a9daed19e9915c80ac395cf7ebfaa2460a3a52ee101c0a6147b185e15241b", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f00000024c0)="6157a4d3bb5efa3c6928d657e1dabe0cf5354147e4ae4fed2acf114355a4a69fbc0a71c1e76d8e9fa124dcf8465a7c2fa465fc9c93d03cc77fa5f1", 0x3b}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="0767d6a7ce3cf154ed67bbb3b00d2e69ae744fd56733f81c5365a208d705fc982fc1e8cdbd881fcccd1e37d57931710e1b2e3f837fcbf27a80e6e718a2c434d1bca4160179cd3287969d5e8c2db006b54a2db91b5954f8213a753702419fef43fd21eb55c36d3d657644c804569b2fe300980ddb3f64addff2fa3941b4987e93d47ce83c81e425b938aed879938025001ecae2a9bfd86a8c3cbed700f1e2411044be63a7e98d6187acd3", 0xaa}, {&(0x7f00000035c0)="1b919b941a59a1f9141b55942f91f82bd889b250edf8888b8b07b4450905c737aa2c26b4765ca089b6f28468bec22db53a485475f503befdde4053d83dd012d97e9613a048d75ecad76bcb9443f44fb36cac7deab9656a92c5041c843699b519b17727528d0232cafa9be26efe8dec5a29b4ce533e36e5ecc098312b5375a5f86dd5f5ec74b48bee7ea4c2ecaa2c9615080829bbbd31e9c722284f66e0d6c678089addbe061f904519e6bd62dd17d5e2c33a450a06de9bd84cb6a9784cf80f9753920ae7a65ad6df273329bddebd27", 0xcf}], 0x4, &(0x7f0000003700)=[@mark={{0x14, 0x1, 0x24, 0x8000}}, @timestamping={{0x14, 0x1, 0x25, 0xfd}}], 0x30}}, {{&(0x7f0000003800)=@ll={0x11, 0x1, r2, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003880)="5780824f974be7f658413ddfe44cfa94562cff033ff9ebe920abc76067cffe6f673332278292294f8acb29465f4ee2e9462bb9983d63080eaa9343a33ef2421262fa95ff40459042cf08ad6f1bf52e44be7940bac5be8c25c78003f281b019ca90f36c9f0c759de5d482a2253020812ec24cb3a14494aeeecd366e", 0x7b}, {&(0x7f0000003900)="91c7e2102de8b959db45ced1680a0e1a54cf1593ebc2cccf73185efef400", 0x1e}, {&(0x7f0000003940)="36585ac393581ad54e824d4a8e7e13f3b8c48c35b97e7062da51a9344566ff6dbb0f89605e9adec8066ecf343b10ab33c76fd87faa93864e424ab60f9b2a05a249a41f2d8992bfea2f23f76f0ea402fe70f65cc831c0ec05dee1725538eeacceb4d93a052e5393e8bd7f1a872410d984d25e9890c60dfbf2d184b9c8eab26ed2c9afe7c7931d989ae4fd3b005c8ff9c82a48f0e683157b1ab4da91806e4f6516199472526e0e9a0492c49d18ab620020f74caa4f", 0xb4}, {&(0x7f0000003a00)="038e200f5b86adec0707c2558de1039c1c56fc324c97367500cd363c70565971e02fabd99f265ccad59bdf3974062f47c779e86819dcd2b30aebf197de8027f03fc80567", 0x44}, {&(0x7f0000003a80)="83c04d3deb89d737805b619603c0e0ab738bc93f61837e5189039d70aa9cb06f55d96bc15e6af3c09d01a7f3376696227dd54f7f49ce6b64787aa0522479ad8709bbcb1a02e26650ed5d2e697ddfcd79e82c8bfd1c4908db607645fe318f", 0x5e}, {&(0x7f0000003b00)="0255d3f336229121707c8b903bf6197c0b525feca72bdb00adbed180b6fa5596a96d0e0b0a2cbf8dd86c7ba89f0588a577c21438e179a20d58e47419e6ca184b56a65ea535e94c72786750dad153c470bd2a1fa4fb02ad0d40b48dacef1a2f437c7778cef9e756dc3b5bcf5eef40d3a7805d33c258ccdaef863c02c493b36635e568016964f3e882c16afbd41fff743eb41bc699d1b16a3856710c2b0c57cf14c56de686971fc5b8320ed0b3d71e898cc87fc67da64f96c3a523", 0xba}], 0x6, &(0x7f0000003c40)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14}}, @timestamping={{0x14}}], 0xa8}}], 0x6, 0x4090) r3 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000003e80)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x1, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, &(0x7f0000003f00)={&(0x7f0000003ec0)=[{0xffff, 0x7}, {0x8, 0x8, 0x2}, {0x3, 0xfffffffb}, {0x401, 0xf}], 0x4, 0x10, 0x400, 0x8}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000003f40)={0x2, '\x00', {0x401}, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000003fc0), r0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000004080)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0xe82544ef1d00f252) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000004280)={{r4, &(0x7f00000040c0)='\\%\x00', 0x202082, &(0x7f0000004100)={@_ha_fsid={[0x7, 0x788a820a]}, {0x7000, 0xd90, 0x7fffffff, 0x1}}, 0x0, &(0x7f0000004140)={@_ha_fsid}, &(0x7f0000004180)=0x6659}, 0x1, &(0x7f0000004240)=[{0x2, 0x5, &(0x7f00000041c0)='eth', &(0x7f0000004200)="254cfd6d52949bf0f98c55f71fcbd7b764aa2baeba84445a4007b342d06054771a27f4068b103b39a10259bdb337b7eb382b4a9d", 0x34, 0x30}]}) recvmsg$unix(r6, &(0x7f0000004780)={&(0x7f0000004300)=@abs, 0x6e, &(0x7f0000004640)=[{&(0x7f0000004380)=""/205, 0xcd}, {&(0x7f0000004480)}, {&(0x7f00000044c0)=""/60, 0x3c}, {&(0x7f0000004500)=""/132, 0x84}, {&(0x7f00000045c0)=""/80, 0x50}], 0x5, &(0x7f00000046c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x10000) r12 = accept4$unix(r7, &(0x7f00000047c0)=@abs, &(0x7f0000004840)=0x6e, 0x80000) getpeername$unix(r12, &(0x7f0000004880), &(0x7f0000004900)=0x6e) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x2c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000100}, 0x8881) ioctl$UI_BEGIN_FF_UPLOAD(r8, 0xc06855c8, &(0x7f0000004a80)={0x0, 0x9, {0x57, 0x9, 0x6, {0x3, 0xfffe}, {0x7, 0x6}, @period={0x59, 0x3, 0x1, 0x3, 0x4, {0x1ea, 0x6, 0x6, 0xb}, 0x3, &(0x7f0000004a40)=[0xeff5, 0x1, 0x2]}}, {0x54, 0x8, 0x0, {0x101, 0x200}, {0x1, 0x8}, @const={0xa, {0x2, 0xfff9, 0x3096, 0x100}}}}) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000004b00)={0x7ff, 0x3ff, 0x7, 0x2, 0x41, "58ff3006b00c9d6bad5edd44f30c2327da780b", 0x101, 0x8}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000004b40)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) r13 = open(&(0x7f0000004b80)='./file0\x00', 0x60380, 0x1) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00), r0) sendmsg$NL80211_CMD_SET_BEACON(r13, &(0x7f0000005540)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005500)={&(0x7f0000004c40)={0x8a8, r14, 0x30, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x9}}}}, [@NL80211_ATTR_PROBE_RESP={0x3e8, 0x91, "6e26f69e548c747bbf94d1daea958fc2c9adbbe940c7ef4bccf6401a22255a389b284408b592c7ecc279949b829ce14c0323765a9cd406663b1f45ed3881d788bb73b7758a2ecf577b647c6383f456d938dd63e16eb03d72be38285b74ab0b652ca49518f7dff51900448459162c8003f821bf4328a380eb1709e130fe4b9e0d0abc3d96b8f1dec09ed55bf8d159bbd685025706d0b204be41166e0d385350d2d09adc73f9654186a4399ed6973b8d031cdb929309d5bf9348bdc7d83a95e0971b3620d46f560598fb623ce2c291219d606a81ab4ec71078d25dc546b7e9b165cf6ed5c50635a1062a54059c52cc63437f17f207bf805619d8c6e7fe0d537f010d6bb0f34bb3ea125c683e0140cc097645c07d5680f788c02f6f8787419b3147ab2c129bc2f5736ef3c92b8163e951f3e620e87e3de158b18613a3e574694565f38d60b89fca5c9336d623fe09d440ae3b062b0465f7c7cd8a352b2bd910696fd96bf4c21b1cabec8d70d5e48f374eafecdc118a80176700a9c7074eac91f7b793e7361d7cbed6c00f50cb767f6a5224375defa466d16791689bd3703d8da92e99425a5636d663115bacc4cdeb7c465cf5f875557e31ce236d04bcec997948d1ff21e94742363f5e28b86815d168ba3488f0fa736fe1e7e7efc7acd8b63924124a5462bc287a2e0d13d8a5853452458c6c8d5f04515d0aebca963736405bb74f3b13b3955355fff3f88dffd4b9a9e9d9437f61b4f3cba4a1eabbf36b8cab3c857f24582ef66a4dc7dc4573f259cf40d48ba4cab01b9e03dca1d27e4cfcd9fa1a624579e566dd8c2fe0efd15d77869a5501dfe578e3fa93115d1156ab3931c0aed532a57f91da7287625b1015c168d3331d9554348a0a6778e2ce8bf70ae96fe9d830e4c61d48042a7a3d638aea8ddefbda0a41d3f1822511e0553d03f756f20d97efd379d33628e3f5e4ff57649466e10bfd23c9077449214983083879f6e273008b106c34744bce67f15ed218197d41f2bf6412ebc32257670ae967607075c4f1c586b2644ea286bd4abf7d317110a914a15a326f2d386f2482e5ded9842416264900596a92e3af25686cce71cd5ed32acea6bc6b13e847b0c0663969994005106354d10bf863a003269db5fdad499cf000cfa7f506e32024a18b2adc0a341042606ad1e5bca52e31a66fd119601c7932554c3865bcf765f6c8eedeb0f688a7c1b2d2302ccd0df07a9b12967843a8066f52882677199aa2f6eae351b1f3b07e5f3030162afd795a420e50efe05bdd560ac1ae22a875fa8a3d1e23d7f330f3d1893bc2e19d4e165be8045347d838052d14c3f339719b04b3192110d867ce03404d00bf3fe5b360d7921e689770c7a6ce4f121591839c74f5966f3f0b6410d1102929dce1"}, @NL80211_ATTR_IE_ASSOC_RESP={0x113, 0x80, [@dsss={0x3, 0x1, 0x68}, @gcr_ga={0xbd, 0x6}, @dsss={0x3, 0x1, 0xcf6e6a22cffd2e}, @fast_bss_trans={0x37, 0xff, {0x7, 0x7, "0bdaa0a9ec6ff89009d33e931ce850d1", "1a0f9b9f7f8a38b651b4e1550548ba9f5ef51416e9f2ab72110019d537a124ce", "d6c3b3f2e05367b0fe54ef21c093f152bdf8212313f6f8ca27bf7c2197a19da2", [{0x3, 0x4, "2cd0af58"}, {0x3, 0x28, "f59ca8889ad0cb272367c5fcd06ff7ab6d079f42b5c8282ac8807e90c5e076e769dd3d21f1c73b22"}, {0x3, 0x1b, "763f9b83a614ff34a5db7a0e7b9a5e8d85f5b06fb4a5dc3160736c"}, {0x4, 0x8, "438413e322660f2a"}, {0x4, 0x25, "4a4a4c2c43a51d167280e0b07ffe34d933da87c6ef32f9f92a99420cac1a6afdce63f6d364"}, {0x3, 0x1b, "f55a3d23acb0d6ee21e81f9172bcaca71038000553f487172420c9"}, {0x2, 0x10, "d5071e4312b46e1fc5fb911d5a2701ad"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1ac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xab, 0x3, "17e8c08e7cbd3b1255799d9e262e2fc5ffcbd4354b852d2559933779dea80143a138bdeb9dfbcf4e129fced930374e7e8ba4d92734a156b376ac60b0592f0642c89fe02f7bf472be5f70721d4923044d8b52b829f96f768574e605187394b94856020a9c8cfac5095a5b0bc19c9274ace555a994e7bc0bd0f69a9ba468ed2c91e63547a7839fe073e921da0f7fd428d0209e562de8dfba9eae861850f37ce8c4f0b9615107b85f"}, @NL80211_FTM_RESP_ATTR_LCI={0xfa, 0x2, "0df7ce5d37bb40ad5681a9d512040d56d0ed5a8c1495e7dc4c9b1d7a51bb68da2c0fb0c5f1d5f08f2ecbd82860c9f7fef950ed95b209ac664f1eb3652a87a67fbb91916f0be4f3bbb28b7068ca9d8d821e187ef0d624bbfa3bf8c33147aa0d9d5252e93cc40aa1f8694108f25f9b2e5924390a66a9b7442ddc8f0064edaf20c9b0032124bb47598a1d8608056353af2e3580081dea99ee3d1d94012588ad7a8690d02a109194eb063fa7659eb3d7231c9d12260d1f430be6f1909a986adfd0403211dadff89fac014829b5b1cb1f739d4cbf455b3de28e7f874a7180e68c91401175c662b25c6a0e499bb1e2e1cd48161e16de9848c9"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x119, 0x80, [@dsss={0x3, 0x1, 0xb4}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5a, 0x7, 0x7f}}, @supported_rates={0x1, 0x8, [{0x30, 0x1}, {0x1b, 0x1}, {0x16, 0x1}, {0x60}, {0x2, 0x1}, {0x30, 0x1}, {0x6c, 0x1}, {0x2}]}, @mesh_chsw={0x76, 0x6, {0x73, 0x6, 0x35, 0x1}}, @ibss={0x6, 0x2, 0xa}, @random_vendor={0xdd, 0xd3, "ec04d341927840b5056068625e105b0f23a666649c554504ae07f3153ecbaa0400a497fbbd38e813d11f11a94251fdde3c51fe514b6311f1e1548e901417ea2dd0e4bd784176b2139de33da8d1973b557fa44fabebca4ae935641730d53bc01ee196e6c147533e6543e1d85f8107fb2155ff166b1b6ba2305171c28f24ece465843de117e779f3dc96c76885f75dc8e82c9f71c222efba28ee32bafbf2934c50ea54f500b58215b0272849a47bf511ee58fc3ece4138c646eecd396eedb2f03613df636f17942a445008906341f85d114efbc7"}, @mesh_id={0x72, 0x6}, @supported_rates, @rann={0x7e, 0x15, {{0x1, 0x36}, 0xfa, 0xd, @broadcast, 0x8f, 0xa86, 0x4}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x32, 0x7f, [@random_vendor={0xdd, 0x18, "179be1470d7c92848fd224e74b99f91c1aedcf7826adb029"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xe, 0xb0, 0xe6}}, @erp={0x2a, 0x1}, @challenge={0x10, 0x1, 0x60}, @cf={0x4, 0x6, {0x10, 0x0, 0x1, 0x9}}]}, @NL80211_ATTR_IE={0x90, 0x2a, [@mesh_chsw={0x76, 0x6, {0x7b, 0x4c, 0x1e, 0xe4ed}}, @random={0xf8, 0x82, "7c43c9b0afad0e9308a03dbd81674bf80b7db24245631433dd7c9506757be5c80c923792402dd8f3bba0125de51fd10e0f0d7ba0de6d3115a5960d940df1205620db3ae4d1ce1a3be57ea80a888707377b3c147ac504e713b14eed4497efe8c435251f4f031f6307004c171162fa5c77590e8d0370760945bd75ee1df0f25602e77c"}]}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$UI_DEV_CREATE(r13, 0x5501) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000005740)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005700)={&(0x7f0000005600)={0xc8, r14, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xb}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x8c, 0xc5, "cb51815c22ad887d0581f5c9c33ddd59b4e128a9e5f2b99a3c4f2df2d10b2ec9874f2380d29ca08dc3d3b65386adf50d01ceb71e8860324199b646db5640caf942aff66a3637060e1255d167a74ea2c7ad9f10ed7fc99b45150ebb033e1b594928414b44937c7ab661ad1d2520e505b21b36a60a77dfe2600f1710eca5d4043865ed63030e2214a3"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6e}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x40) 452.441174ms ago: executing program 1 (id=744): ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000580)={'netpci0\x00', {0x2, 0x4e24, @multicast2}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000074ca00000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000044c00120073657169762863636d28626c6f77666973682d61736d2929d38b7b7131770d87560000000000000000000000000000000000c6b62fe90e00000000000000000000000000400000000c0008"], 0x148}}, 0x0) 179.373982ms ago: executing program 1 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000140)='7', 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x1) syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x2) 179.067162ms ago: executing program 1 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x180) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000600)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f0000000240)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) r5 = dup(r4) write$FUSE_STATX(r5, &(0x7f00000004c0)={0x14f, 0x0, 0x0, {0x2, 0x100, 0x0, '\x00', {0x1000, 0x6, 0x8, 0xffff, 0x0, 0x0, 0xa000, '\x00', 0xffffffff00000000, 0x2, 0x80000000, 0x1, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0xdc, 0xffffffff}, 0x3, 0x7fff, 0xc68}}}, 0x130) setsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f0000000380)=0x7, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010000000000001000000000000000141000000180017000000210000000065f4683a64"], 0x34}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r6, &(0x7f0000000280)="169a06c1251467389e73a7", 0xb) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) ioctl$SET_BITMAP_FILE(r6, 0x4004092b, r7) 170.113373ms ago: executing program 3 (id=747): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000140)=""/145, 0x91) r2 = memfd_secret(0x80000) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f00000000c0)=0x9, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000300)='O', 0x5c8, 0x0, &(0x7f0000000340)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000f01000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000, 0x1}) 117.395169ms ago: executing program 1 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @random='\x00~\x00#\x00', @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x66, 0x4000, 0x7f, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x4, 0x0, {0x5, 0x4, 0x1, 0x16, 0x200, 0x68, 0x5d6, 0x0, 0x5e, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x43}}}}}}}}, 0x42) 896.09µs ago: executing program 1 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @random='\x00~\x00#\x00', @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x66, 0x4000, 0x7f, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x4, 0x0, {0x5, 0x4, 0x1, 0x16, 0x200, 0x68, 0x5d6, 0x0, 0x5e, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x43}}}}}}}}, 0x42) (fail_nth: 1) 0s ago: executing program 32 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @random='\x00~\x00#\x00', @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x66, 0x4000, 0x7f, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x4, 0x0, {0x5, 0x4, 0x1, 0x16, 0x200, 0x68, 0x5d6, 0x0, 0x5e, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x43}}}}}}}}, 0x42) (fail_nth: 1) kernel console output (not intermixed with test programs): n+0x100/0x100 [ 76.399851][ T1333] ? __kasan_check_write+0x18/0x20 [ 76.399877][ T1333] __x64_sys_openat+0x13a/0x170 [ 76.399891][ T1333] x64_sys_call+0xe69/0x2ee0 [ 76.399903][ T1333] do_syscall_64+0x57/0xf0 [ 76.399914][ T1333] ? clear_bhb_loop+0x50/0xa0 [ 76.399933][ T1333] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.399958][ T1333] RIP: 0033:0x7f62ee16034e [ 76.399978][ T1333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.399996][ T1333] RSP: 002b:00007f62ef016b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.400021][ T1333] RAX: ffffffffffffffda RBX: 00007f62ef0176c0 RCX: 00007f62ee16034e [ 76.400034][ T1333] RDX: 0000000000000002 RSI: 00007f62ef016c00 RDI: ffffffffffffff9c [ 76.400044][ T1333] RBP: 00007f62ef016c00 R08: 0000000000000000 R09: 0000000000000000 [ 76.400052][ T1333] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 76.400060][ T1333] R13: 00007f62ee426038 R14: 00007f62ee425fa0 R15: 00007fff664fdcc8 [ 76.400070][ T1333] [ 76.786495][ T1300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.795181][ T1300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.807088][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 76.819597][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 76.832507][ T9] usb 3-1: USB disconnect, device number 23 [ 77.271030][ T1342] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 77.281347][ T1342] SELinux: failed to load policy [ 77.325003][ T1344] overlay: ./file0 is not a directory [ 77.430239][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 77.430258][ T36] audit: type=1400 audit(2000000020.029:396): avc: denied { write } for pid=1350 comm="syz.1.342" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.463859][ T9] usb 1-1: USB disconnect, device number 25 [ 77.481006][ T36] audit: type=1400 audit(2000000020.079:397): avc: denied { cmd } for pid=1352 comm="syz.0.343" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 77.507462][ T1351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.517414][ T1351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.526034][ T36] audit: type=1400 audit(2000000020.129:398): avc: denied { read write } for pid=1358 comm="syz.0.345" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.550285][ T36] audit: type=1400 audit(2000000020.129:399): avc: denied { open } for pid=1358 comm="syz.0.345" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.574484][ T36] audit: type=1400 audit(2000000020.129:400): avc: denied { ioctl } for pid=1358 comm="syz.0.345" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.612171][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 77.651500][ T1355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 77.671097][ T36] audit: type=1400 audit(2000000020.269:401): avc: denied { read write } for pid=1364 comm="syz.0.347" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.696031][ T36] audit: type=1400 audit(2000000020.269:402): avc: denied { open } for pid=1364 comm="syz.0.347" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.719532][ T36] audit: type=1400 audit(2000000020.309:403): avc: denied { ioctl } for pid=1364 comm="syz.0.347" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.772177][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 77.779831][ T10] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 77.788984][ T810] Bluetooth: hci0: command 0x1003 tx timeout [ 77.792146][ T775] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.795048][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.818003][ T10] usb 3-1: Product: syz [ 77.822316][ T10] usb 3-1: Manufacturer: syz [ 77.825992][ T1367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1367 comm=syz.3.348 [ 77.826918][ T10] usb 3-1: SerialNumber: syz [ 77.844090][ T36] audit: type=1400 audit(2000000020.449:404): avc: denied { read write } for pid=1366 comm="syz.3.348" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 77.868803][ T36] audit: type=1400 audit(2000000020.449:405): avc: denied { open } for pid=1366 comm="syz.3.348" path="/109/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 77.907263][ T1369] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 77.917516][ T1369] SELinux: failed to load policy [ 77.962183][ T310] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 78.049228][ T400] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.101647][ T1346] sit0: entered promiscuous mode [ 78.107144][ T1346] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 78.115107][ T1346] netlink: 1 bytes leftover after parsing attributes in process `syz.2.340'. [ 78.125722][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.134335][ T310] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 78.146006][ T310] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 78.155136][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.163193][ T310] usb 1-1: Product: syz [ 78.167367][ T310] usb 1-1: Manufacturer: syz [ 78.171991][ T310] usb 1-1: SerialNumber: syz [ 78.186555][ T1365] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 78.256308][ T1375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.265199][ T1375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.402718][ T310] usb 1-1: invalid MIDI out EP 0 [ 78.415248][ T310] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 78.426458][ T310] usb 1-1: USB disconnect, device number 26 [ 78.439851][ T1311] udevd[1311]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 78.682049][ T10] usb 3-1: USB disconnect, device number 24 [ 79.014908][ T436] Bluetooth: hci1: Frame reassembly failed (-84) [ 79.042192][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 79.192896][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 79.201467][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.212543][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.223467][ T10] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 79.232580][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 79.240564][ T10] usb 3-1: Product: syz [ 79.244752][ T10] usb 3-1: Manufacturer: syz [ 79.252209][ T10] hub 3-1:1.0: USB hub found [ 79.452150][ T10] hub 3-1:1.0: 9 ports detected [ 79.457363][ T10] hub 3-1:1.0: insufficient power available to use all downstream ports [ 79.856506][ T1383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.866175][ T1383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.071836][ T10] usb 3-1: USB disconnect, device number 25 [ 80.102273][ T537] Bluetooth: hci0: command 0x1003 tx timeout [ 80.108358][ T775] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.132022][ T1395] netlink: 'syz.3.357': attribute type 4 has an invalid length. [ 80.139827][ T1395] netlink: 17 bytes leftover after parsing attributes in process `syz.3.357'. [ 80.207824][ T1403] syzkaller1: entered promiscuous mode [ 80.213474][ T1403] syzkaller1: entered allmulticast mode [ 80.522205][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 80.579046][ T1409] sit0: entered promiscuous mode [ 80.585344][ T1409] netlink: 'syz.2.362': attribute type 1 has an invalid length. [ 80.593201][ T1409] netlink: 'syz.2.362': attribute type 3 has an invalid length. [ 80.672308][ T10] usb 4-1: device descriptor read/64, error -71 [ 80.688227][ T1415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.708326][ T1417] syzkaller1: entered promiscuous mode [ 80.713899][ T1417] syzkaller1: entered allmulticast mode [ 80.769416][ T1419] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 80.779695][ T1419] SELinux: failed to load policy [ 80.908278][ T1422] syzkaller1: entered promiscuous mode [ 80.912177][ T10] usb 4-1: device descriptor read/64, error -71 [ 80.913897][ T1422] syzkaller1: entered allmulticast mode [ 81.062316][ T810] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 81.068512][ T775] Bluetooth: hci1: command 0x1003 tx timeout [ 81.162225][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 81.206310][ T1435] syzkaller1: entered promiscuous mode [ 81.211927][ T1435] syzkaller1: entered allmulticast mode [ 81.242349][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 81.292183][ T10] usb 4-1: device descriptor read/64, error -71 [ 81.318355][ T1439] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 81.328755][ T310] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 81.328826][ T1439] SELinux: failed to load policy [ 81.372160][ T9] usb 3-1: device descriptor read/64, error -71 [ 81.503826][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.512448][ T310] usb 1-1: config 1 interface 0 altsetting 150 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 81.523377][ T310] usb 1-1: config 1 interface 0 has no altsetting 0 [ 81.532569][ T310] usb 1-1: string descriptor 0 read error: -22 [ 81.538815][ T310] usb 1-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice= 0.40 [ 81.547297][ T1445] syzkaller1: entered promiscuous mode [ 81.548066][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.553990][ T10] usb 4-1: device descriptor read/64, error -71 [ 81.566602][ T1433] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 81.567945][ T1445] syzkaller1: entered allmulticast mode [ 81.581677][ T1445] FAULT_INJECTION: forcing a failure. [ 81.581677][ T1445] name failslab, interval 1, probability 0, space 0, times 0 [ 81.594394][ T1445] CPU: 0 UID: 0 PID: 1445 Comm: syz.1.377 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 81.594421][ T1445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.594434][ T1445] Call Trace: [ 81.594442][ T1445] [ 81.594451][ T1445] __dump_stack+0x21/0x30 [ 81.594473][ T1445] dump_stack_lvl+0x140/0x1c0 [ 81.594491][ T1445] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.594507][ T1445] ? __cfi_fib_validate_source+0x10/0x10 [ 81.594534][ T1445] dump_stack+0x19/0x20 [ 81.594551][ T1445] should_fail_ex+0x3c2/0x510 [ 81.594571][ T1445] should_failslab+0xac/0x100 [ 81.594592][ T1445] kmem_cache_alloc_noprof+0x42/0x410 [ 81.594619][ T1445] ? dst_alloc+0x13c/0x240 [ 81.594644][ T1445] dst_alloc+0x13c/0x240 [ 81.594668][ T1445] ip_route_input_rcu+0x18d4/0x26b0 [ 81.594688][ T1445] ? ip_route_input_noref+0x150/0x150 [ 81.594711][ T1445] ip_route_input_noref+0xd4/0x150 [ 81.594728][ T1445] ? __cfi_ip_route_input_noref+0x10/0x10 [ 81.594748][ T1445] ? sock_wfree+0x3dc/0x550 [ 81.594773][ T1445] ip_rcv_finish_core+0x4ae/0x1460 [ 81.594798][ T1445] ip_rcv+0xe8/0x2e0 [ 81.594819][ T1445] ? __cfi_ip_rcv+0x10/0x10 [ 81.594840][ T1445] ? __cfi_ip_rcv_finish+0x10/0x10 [ 81.594862][ T1445] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 81.594889][ T1445] ? __cfi_ip_rcv+0x10/0x10 [ 81.594909][ T1445] netif_receive_skb+0x1f5/0x7b0 [ 81.594932][ T1445] ? __cfi_netif_receive_skb+0x10/0x10 [ 81.594954][ T1445] ? trace_event_raw_event_kmem_cache_alloc+0xc9/0x110 [ 81.594982][ T1445] ? virtio_net_hdr_to_skb+0xa08/0x1460 [ 81.595008][ T1445] ? tun_rx_batched+0x171/0x7d0 [ 81.595032][ T1445] tun_rx_batched+0x1d0/0x7d0 [ 81.595057][ T1445] ? pskb_may_pull+0x120/0x120 [ 81.595083][ T1445] tun_get_user+0x286e/0x36d0 [ 81.595108][ T1445] ? _parse_integer_limit+0x195/0x1e0 [ 81.595133][ T1445] ? ptr_ring_consume+0x430/0x430 [ 81.595157][ T1445] ? _parse_integer+0x2e/0x40 [ 81.595181][ T1445] ? __kasan_check_write+0x18/0x20 [ 81.595206][ T1445] ? ref_tracker_alloc+0x32b/0x5b0 [ 81.595257][ T1445] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 81.595277][ T1445] ? selinux_file_permission+0x318/0xb60 [ 81.595307][ T1445] tun_chr_write_iter+0x1fa/0x310 [ 81.595332][ T1445] vfs_write+0x765/0xfd0 [ 81.595359][ T1445] ? __cfi_vfs_write+0x10/0x10 [ 81.595387][ T1445] ksys_write+0x145/0x260 [ 81.595404][ T1445] ? __cfi_ksys_write+0x10/0x10 [ 81.595423][ T1445] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 81.595448][ T1445] __x64_sys_write+0x7f/0x90 [ 81.595467][ T1445] x64_sys_call+0x271c/0x2ee0 [ 81.595488][ T1445] do_syscall_64+0x57/0xf0 [ 81.595508][ T1445] ? clear_bhb_loop+0x50/0xa0 [ 81.595532][ T1445] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.595556][ T1445] RIP: 0033:0x7f62ee19fb19 [ 81.595574][ T1445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.595591][ T1445] RSP: 002b:00007f62ef017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.595615][ T1445] RAX: ffffffffffffffda RBX: 00007f62ee425fa0 RCX: 00007f62ee19fb19 [ 81.595631][ T1445] RDX: 0000000000000042 RSI: 0000200000000140 RDI: 0000000000000004 [ 81.595645][ T1445] RBP: 00007f62ef017090 R08: 0000000000000000 R09: 0000000000000000 [ 81.595659][ T1445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.595672][ T1445] R13: 00007f62ee426038 R14: 00007f62ee425fa0 R15: 00007fff664fdcc8 [ 81.595689][ T1445] [ 81.788429][ T310] usb 1-1: USB disconnect, device number 27 [ 81.794022][ T10] usb usb4-port1: attempt power cycle [ 81.951393][ T9] usb 3-1: device descriptor read/64, error -71 [ 81.969125][ T1447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.977965][ T1447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.991146][ T1447] FAULT_INJECTION: forcing a failure. [ 81.991146][ T1447] name failslab, interval 1, probability 0, space 0, times 0 [ 82.003910][ T1447] CPU: 1 UID: 0 PID: 1447 Comm: syz.1.378 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 82.003946][ T1447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.003961][ T1447] Call Trace: [ 82.003970][ T1447] [ 82.003980][ T1447] __dump_stack+0x21/0x30 [ 82.004006][ T1447] dump_stack_lvl+0x140/0x1c0 [ 82.004025][ T1447] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.004037][ T1447] ? pcpu_memcg_post_alloc_hook+0x202/0x2e0 [ 82.004051][ T1447] ? mutex_unlock+0x90/0x240 [ 82.004066][ T1447] ? pcpu_alloc_noprof+0x1440/0x1440 [ 82.004078][ T1447] dump_stack+0x19/0x20 [ 82.004088][ T1447] should_fail_ex+0x3c2/0x510 [ 82.004100][ T1447] should_failslab+0xac/0x100 [ 82.004112][ T1447] __kmalloc_cache_noprof+0x41/0x470 [ 82.004128][ T1447] ? percpu_ref_init+0xe3/0x4d0 [ 82.004146][ T1447] percpu_ref_init+0xe3/0x4d0 [ 82.004156][ T1447] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 82.004171][ T1447] io_ring_ctx_alloc+0x141/0x1dc0 [ 82.004184][ T1447] io_uring_create+0x2e0/0x13f0 [ 82.004197][ T1447] ? __kasan_check_write+0x18/0x20 [ 82.004214][ T1447] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 82.004230][ T1447] ? __x64_sys_io_uring_setup+0x80/0x80 [ 82.004245][ T1447] ? trace_event_buffer_commit+0x256/0x8f0 [ 82.004261][ T1447] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 82.004276][ T1447] __x64_sys_io_uring_setup+0x5f/0x80 [ 82.004290][ T1447] x64_sys_call+0x22c0/0x2ee0 [ 82.004301][ T1447] do_syscall_64+0x57/0xf0 [ 82.004313][ T1447] ? clear_bhb_loop+0x50/0xa0 [ 82.004338][ T1447] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.004353][ T1447] RIP: 0033:0x7f62ee19fb19 [ 82.004364][ T1447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.004377][ T1447] RSP: 002b:00007f62ef016fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 82.004391][ T1447] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007f62ee19fb19 [ 82.004400][ T1447] RDX: 00002000000002c0 RSI: 0000200000000200 RDI: 00000000000072de [ 82.004408][ T1447] RBP: 00007f62ee237b70 R08: 0000000000000000 R09: 0000000000000000 [ 82.004417][ T1447] R10: 0000200000000300 R11: 0000000000000206 R12: 00002000000002c0 [ 82.004426][ T1447] R13: 0000200000000300 R14: 0000200000000280 R15: 00007fff664fdcc8 [ 82.004437][ T1447] [ 82.005095][ T1447] netlink: 288 bytes leftover after parsing attributes in process `syz.1.378'. [ 82.212155][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 82.312207][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 82.330401][ T436] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.338935][ T10] usb 4-1: device descriptor read/8, error -71 [ 82.382187][ T9] usb 3-1: device descriptor read/64, error -71 [ 82.473640][ T10] usb 4-1: device descriptor read/8, error -71 [ 82.622272][ T9] usb 3-1: device descriptor read/64, error -71 [ 82.712252][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 82.732597][ T9] usb usb3-port1: attempt power cycle [ 82.739055][ T10] usb 4-1: device descriptor read/8, error -71 [ 82.773802][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 82.773821][ T36] audit: type=1400 audit(2000000025.379:410): avc: denied { getopt } for pid=1453 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.873639][ T10] usb 4-1: device descriptor read/8, error -71 [ 82.938022][ T1460] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 82.948426][ T1460] SELinux: failed to load policy [ 82.992183][ T10] usb usb4-port1: unable to enumerate USB device [ 83.082197][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 83.103411][ T9] usb 3-1: device descriptor read/8, error -71 [ 83.162018][ T36] audit: type=1400 audit(2000000025.759:411): avc: denied { sqpoll } for pid=1464 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.172170][ T1465] option changes via remount are deprecated (pid=1464 comm=syz.1.386) [ 83.192966][ T1465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1465 comm=syz.1.386 [ 83.233428][ T9] usb 3-1: device descriptor read/8, error -71 [ 83.482281][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 83.503373][ T9] usb 3-1: device descriptor read/8, error -71 [ 83.633407][ T9] usb 3-1: device descriptor read/8, error -71 [ 83.692207][ T478] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 83.742332][ T9] usb usb3-port1: unable to enumerate USB device [ 83.842164][ T478] usb 4-1: Using ep0 maxpacket: 16 [ 83.848676][ T478] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.859174][ T478] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.869867][ T478] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.879030][ T478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.887144][ T478] usb 4-1: Product: syz [ 83.891428][ T478] usb 4-1: Manufacturer: syz [ 83.896074][ T478] usb 4-1: SerialNumber: syz [ 83.996045][ T36] audit: type=1400 audit(2000000026.599:412): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 84.032177][ T1476] fuse: Unknown parameter 'group_id00000000000000000000' [ 84.038162][ T1478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 84.078718][ T1482] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 84.089408][ T1482] SELinux: failed to load policy [ 84.115898][ T478] usb 4-1: 0:2 : does not exist [ 84.135948][ T478] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 84.156998][ T478] usb 4-1: USB disconnect, device number 21 [ 84.167455][ T1222] udevd[1222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 84.272122][ T1486] sit0: entered promiscuous mode [ 84.277215][ T1486] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 84.285247][ T1486] netlink: 1 bytes leftover after parsing attributes in process `syz.1.395'. [ 84.312551][ T1488] netlink: 228 bytes leftover after parsing attributes in process `syz.1.396'. [ 84.343187][ T775] Bluetooth: hci0: command 0x1003 tx timeout [ 84.343989][ T810] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.514915][ T1501] fuse: Unknown parameter 'group_id00000000000000000000' [ 84.698148][ T1512] sit0: entered promiscuous mode [ 84.703641][ T1512] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 84.711412][ T1512] netlink: 1 bytes leftover after parsing attributes in process `syz.0.405'. [ 84.738490][ T1514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 84.769197][ T422] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.892230][ T501] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 85.043601][ T501] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.054825][ T501] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.065252][ T501] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 85.074665][ T501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.234444][ T1520] fuse: Bad value for 'user_id' [ 85.239334][ T1520] fuse: Bad value for 'user_id' [ 85.260140][ T1522] tap0: tun_chr_ioctl cmd 1074025676 [ 85.265644][ T1522] tap0: owner set to 0 [ 85.376646][ T36] audit: type=1400 audit(2000000027.979:413): avc: denied { getattr } for pid=1523 comm="syz.1.411" path="cgroup:[4026532295]" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.402183][ T10] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 85.489213][ T36] audit: type=1400 audit(2000000028.089:414): avc: denied { unlink } for pid=1509 comm="syz.3.404" name="#1" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.579406][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 85.587654][ T10] usb 3-1: config 0 has no interface number 0 [ 85.593878][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 85.608262][ T36] audit: type=1400 audit(2000000029.218:415): avc: denied { bpf } for pid=1509 comm="syz.3.404" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.633640][ T1529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.634901][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 85.644977][ T501] hid-sensor-hub 0003:8086:0000.0004: item fetching failed at offset 36/78 [ 85.651444][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.660805][ T1529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.672345][ T10] usb 3-1: Product: syz [ 85.676277][ T501] hid-sensor-hub 0003:8086:0000.0004: parse failed [ 85.679866][ T10] usb 3-1: Manufacturer: syz [ 85.687829][ T501] hid-sensor-hub 0003:8086:0000.0004: probe with driver hid-sensor-hub failed with error -22 [ 85.691764][ T10] usb 3-1: SerialNumber: syz [ 85.708770][ T1530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.717759][ T1530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.726732][ T10] usb 3-1: config 0 descriptor?? [ 85.850096][ T1527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.858962][ T1527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.136887][ T36] audit: type=1400 audit(2000000029.748:416): avc: denied { ioctl } for pid=1517 comm="syz.2.408" path="socket:[11096]" dev="sockfs" ino=11096 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.137115][ T1518] syz.2.408 uses obsolete (PF_INET,SOCK_PACKET) [ 86.255610][ T36] audit: type=1400 audit(2000000029.868:417): avc: denied { bind } for pid=1533 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.275632][ T36] audit: type=1400 audit(2000000029.878:418): avc: denied { bind } for pid=1533 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.317500][ T1535] netlink: 76 bytes leftover after parsing attributes in process `syz.1.414'. [ 86.334363][ T36] audit: type=1400 audit(2000000029.948:419): avc: denied { listen } for pid=1533 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.558860][ T1538] syzkaller1: entered promiscuous mode [ 86.564635][ T1538] syzkaller1: entered allmulticast mode [ 86.579683][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 86.603070][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 86.618297][ T10] usb 3-1: USB disconnect, device number 30 [ 86.641110][ T1540] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 86.651321][ T1540] SELinux: failed to load policy [ 86.822184][ T810] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.828433][ T775] Bluetooth: hci0: command 0x1003 tx timeout [ 86.877320][ T1544] fuse: Bad value for 'user_id' [ 86.882622][ T1544] fuse: Bad value for 'user_id' [ 87.214917][ T1551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.242437][ T1551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.463055][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 87.665106][ T501] usb 4-1: USB disconnect, device number 22 [ 87.712432][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.721594][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.755266][ T10] usb 3-1: Product: syz [ 87.755476][ T1553] netlink: 228 bytes leftover after parsing attributes in process `syz.3.421'. [ 87.759632][ T10] usb 3-1: Manufacturer: syz [ 87.759655][ T10] usb 3-1: SerialNumber: syz [ 87.806796][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 87.806816][ T36] audit: type=1400 audit(2000000031.408:424): avc: denied { create } for pid=1557 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 87.951824][ T1560] syzkaller1: entered promiscuous mode [ 87.958078][ T1560] syzkaller1: entered allmulticast mode [ 88.001557][ T36] audit: type=1400 audit(2000000031.608:425): avc: denied { ioctl } for pid=1561 comm="syz.1.429" path="socket:[11854]" dev="sockfs" ino=11854 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.042320][ T382] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 88.046676][ T1562] kvm: kvm [1561]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 88.085230][ T440] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.127794][ T1566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.136706][ T1566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.193990][ T382] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.202611][ T382] usb 1-1: not running at top speed; connect to a high speed hub [ 88.211666][ T382] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 88.225296][ T382] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 88.235010][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.243415][ T382] usb 1-1: Product: syz [ 88.247987][ T382] usb 1-1: Manufacturer: syz [ 88.253052][ T382] usb 1-1: SerialNumber: syz [ 88.461583][ T1568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.470224][ T1568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.479028][ T382] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 88.489860][ T382] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 88.499830][ T382] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 88.511468][ T382] usb 1-1: USB disconnect, device number 28 [ 88.983846][ T36] audit: type=1400 audit(2000000032.598:426): avc: denied { create } for pid=1577 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 89.101421][ T1580] overlayfs: failed to resolve 'lower': -2 [ 89.168879][ T36] audit: type=1400 audit(2000000032.778:427): avc: denied { setopt } for pid=1582 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.190277][ T36] audit: type=1400 audit(2000000032.798:428): avc: denied { ioctl } for pid=1582 comm="syz.0.432" path="socket:[11961]" dev="sockfs" ino=11961 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.236289][ T1588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 89.479989][ T1595] netlink: 'syz.0.437': attribute type 11 has an invalid length. [ 89.571627][ T1597] sit0: entered promiscuous mode [ 89.576924][ T1597] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 89.584881][ T1597] netlink: 1 bytes leftover after parsing attributes in process `syz.1.438'. [ 89.614892][ T1600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.626280][ T1600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.102219][ T810] Bluetooth: hci0: command 0x1003 tx timeout [ 90.102254][ T775] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.208726][ T382] usb 3-1: USB disconnect, device number 31 [ 90.320941][ T1613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 90.331055][ T1611] fuse: Bad value for 'fd' [ 90.363111][ T36] audit: type=1400 audit(2000000033.978:429): avc: denied { create } for pid=1615 comm="syz.2.445" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.397570][ T36] audit: type=1400 audit(2000000033.998:430): avc: denied { write } for pid=1615 comm="syz.2.445" name="file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.425712][ T36] audit: type=1400 audit(2000000033.998:431): avc: denied { open } for pid=1615 comm="syz.2.445" path="/82/file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.451816][ T36] audit: type=1400 audit(2000000033.998:432): avc: denied { ioctl } for pid=1615 comm="syz.2.445" path="/82/file0" dev="tmpfs" ino=464 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.476253][ T36] audit: type=1400 audit(2000000034.058:433): avc: denied { name_bind } for pid=1623 comm="syz.3.454" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 90.649764][ T1626] tipc: Enabling of bearer rejected, failed to enable media [ 90.683029][ T1628] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 90.712186][ T382] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 90.722388][ T10] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 90.733571][ T1634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 90.865121][ T382] usb 3-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 90.874271][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.882502][ T382] usb 3-1: Product: syz [ 90.886666][ T382] usb 3-1: Manufacturer: syz [ 90.891242][ T382] usb 3-1: SerialNumber: syz [ 90.893991][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.906486][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 90.917698][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 90.928066][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 90.940824][ T10] usb 4-1: string descriptor 0 read error: -22 [ 90.947212][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.956444][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.965845][ T1624] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 90.973419][ T1624] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 90.980961][ T1624] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 90.989299][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 90.997694][ T371] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 91.077048][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.086279][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.096187][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.105036][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.114365][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.118787][ T382] usb 3-1: Can't get UAC3 power state for id 10 [ 91.123229][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.130908][ T382] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 91.147834][ T382] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.161211][ T382] usb 3-1: USB disconnect, device number 32 [ 91.172144][ T371] usb 1-1: Using ep0 maxpacket: 8 [ 91.179958][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.185037][ T1376] udevd[1376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 91.190024][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.227569][ T371] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 91.244327][ T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.252838][ T10] usb 4-1: USB disconnect, device number 23 [ 91.262292][ T371] usb 1-1: Product: syz [ 91.268372][ T371] usb 1-1: Manufacturer: syz [ 91.273298][ T371] usb 1-1: SerialNumber: syz [ 91.486953][ T371] usb 1-1: unit 0 not found! [ 91.491595][ T371] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 91.506718][ T371] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 91.516160][ T371] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.527431][ T371] usb 1-1: USB disconnect, device number 29 [ 91.537968][ T1222] udevd[1222]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 91.750737][ T1641] fuse: Bad value for 'fd' [ 91.892186][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 92.062230][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 92.069677][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.085440][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 92.097953][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 92.108159][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.117883][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 92.129128][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 92.139104][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 92.148806][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 92.158532][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 92.169704][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 92.178868][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.186919][ T9] usb 3-1: Product: syz [ 92.191092][ T9] usb 3-1: Manufacturer: syz [ 92.195740][ T9] usb 3-1: SerialNumber: syz [ 92.201155][ T9] usb 3-1: config 0 descriptor?? [ 92.206944][ T1639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.221316][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 92.239536][ T1376] udevd[1376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 92.332189][ T382] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 92.424032][ T1639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.452'. [ 92.482157][ T382] usb 1-1: Using ep0 maxpacket: 16 [ 92.488771][ T382] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.499099][ T382] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.512018][ T501] usb 3-1: USB disconnect, device number 33 [ 92.525319][ T382] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.534624][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.542654][ T382] usb 1-1: Product: syz [ 92.546941][ T382] usb 1-1: Manufacturer: syz [ 92.551540][ T382] usb 1-1: SerialNumber: syz [ 92.645829][ T1663] Invalid argument reading file caps for ./file0 [ 92.690458][ T1665] syzkaller1: entered promiscuous mode [ 92.696043][ T1665] syzkaller1: entered allmulticast mode [ 92.761918][ T382] usb 1-1: 0:2 : does not exist [ 92.769424][ T382] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 92.781177][ T382] usb 1-1: USB disconnect, device number 30 [ 92.791008][ T1222] udevd[1222]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 93.040403][ T1670] fuse: Bad value for 'fd' [ 93.055212][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 93.055230][ T36] audit: type=1400 audit(2000000036.668:450): avc: denied { connect } for pid=1671 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.069179][ T1676] FAULT_INJECTION: forcing a failure. [ 93.069179][ T1676] name fail_futex, interval 1, probability 0, space 0, times 1 [ 93.094138][ T1676] CPU: 0 UID: 0 PID: 1676 Comm: syz.3.466 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 93.094161][ T1676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.094170][ T1676] Call Trace: [ 93.094175][ T1676] [ 93.094183][ T1676] __dump_stack+0x21/0x30 [ 93.094199][ T1676] dump_stack_lvl+0x140/0x1c0 [ 93.094211][ T1676] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.094222][ T1676] ? is_bpf_text_address+0x17b/0x1a0 [ 93.094238][ T1676] dump_stack+0x19/0x20 [ 93.094248][ T1676] should_fail_ex+0x3c2/0x510 [ 93.094261][ T1676] should_fail+0xf/0x20 [ 93.094271][ T1676] get_futex_key+0x178/0x940 [ 93.094291][ T1676] ? __cfi_get_futex_key+0x10/0x10 [ 93.094302][ T1676] ? __kasan_check_read+0x15/0x20 [ 93.094319][ T1676] ? __rb_reserve_next+0x794/0xd90 [ 93.094333][ T1676] futex_wait_setup+0xae/0x260 [ 93.094349][ T1676] ? __cfi_futex_wait_setup+0x10/0x10 [ 93.094363][ T1676] ? __asan_memcpy+0x5a/0x80 [ 93.094378][ T1676] __futex_wait+0x12c/0x3d0 [ 93.094392][ T1676] ? __cfi___futex_wait+0x10/0x10 [ 93.094405][ T1676] ? __cfi_futex_wake_mark+0x10/0x10 [ 93.094419][ T1676] futex_wait+0x128/0x7c0 [ 93.094432][ T1676] ? __cfi_futex_wait+0x10/0x10 [ 93.094446][ T1676] ? __kasan_check_read+0x15/0x20 [ 93.094460][ T1676] ? rb_commit+0x753/0x7b0 [ 93.094476][ T1676] do_futex+0x32a/0x510 [ 93.094487][ T1676] ? __cfi_do_futex+0x10/0x10 [ 93.094499][ T1676] __se_sys_futex+0x13c/0x320 [ 93.094512][ T1676] ? __x64_sys_futex+0x110/0x110 [ 93.094524][ T1676] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 93.094545][ T1676] __x64_sys_futex+0xe9/0x110 [ 93.094557][ T1676] x64_sys_call+0x227f/0x2ee0 [ 93.094575][ T1676] do_syscall_64+0x57/0xf0 [ 93.094588][ T1676] ? clear_bhb_loop+0x50/0xa0 [ 93.094604][ T1676] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.094618][ T1676] RIP: 0033:0x7febc659fb19 [ 93.094630][ T1676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.094640][ T1676] RSP: 002b:00007febc74020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 93.094655][ T1676] RAX: ffffffffffffffda RBX: 00007febc6825fa8 RCX: 00007febc659fb19 [ 93.094664][ T1676] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007febc6825fa8 [ 93.094671][ T1676] RBP: 00007febc6825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 93.094679][ T1676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.094687][ T1676] R13: 00007febc6826038 R14: 00007ffd91802150 R15: 00007ffd91802238 [ 93.094696][ T1676] [ 93.360997][ T36] audit: type=1400 audit(2000000036.968:451): avc: denied { write } for pid=1671 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.390250][ T1681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 93.392244][ T382] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 93.405927][ T1681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.415215][ T1681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.553714][ T382] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.562418][ T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 93.573091][ T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 93.583047][ T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 93.595205][ T382] usb 3-1: string descriptor 0 read error: -22 [ 93.601424][ T382] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.610505][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.612213][ T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 93.626506][ T1673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.634492][ T1673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.641911][ T1673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.651093][ T382] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 93.672218][ T501] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 93.805075][ T10] usb 4-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 93.814276][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.822421][ T10] usb 4-1: Product: syz [ 93.826616][ T10] usb 4-1: Manufacturer: syz [ 93.831205][ T10] usb 4-1: SerialNumber: syz [ 93.832183][ T501] usb 1-1: Using ep0 maxpacket: 16 [ 93.841299][ T10] usb 4-1: config 0 descriptor?? [ 93.842375][ T501] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.850206][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 93.862569][ T501] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.863846][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 93.879273][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 93.883941][ T501] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.888725][ T10] usb 4-1: Detected SIO [ 93.902153][ T501] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.905162][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 93.910192][ T501] usb 1-1: Product: syz [ 93.910214][ T501] usb 1-1: Manufacturer: syz [ 93.910229][ T501] usb 1-1: SerialNumber: syz [ 93.916345][ T382] usb 3-1: USB disconnect, device number 34 [ 93.967939][ T36] audit: type=1400 audit(2000000037.578:452): avc: denied { map } for pid=1686 comm="syz.1.470" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.990859][ T36] audit: type=1326 audit(2000000037.578:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1686 comm="syz.1.470" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62ee19fb19 code=0x0 [ 94.144487][ T501] usb 1-1: 0:2 : does not exist [ 94.152040][ T501] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 94.166721][ T501] usb 1-1: USB disconnect, device number 31 [ 94.181664][ T1222] udevd[1222]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 94.815808][ T1697] FAULT_INJECTION: forcing a failure. [ 94.815808][ T1697] name failslab, interval 1, probability 0, space 0, times 0 [ 94.828636][ T1697] CPU: 0 UID: 0 PID: 1697 Comm: syz.1.476 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 94.828660][ T1697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.828671][ T1697] Call Trace: [ 94.828677][ T1697] [ 94.828684][ T1697] __dump_stack+0x21/0x30 [ 94.828700][ T1697] dump_stack_lvl+0x140/0x1c0 [ 94.828711][ T1697] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.828723][ T1697] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 94.828742][ T1697] dump_stack+0x19/0x20 [ 94.828753][ T1697] should_fail_ex+0x3c2/0x510 [ 94.828764][ T1697] ? security_prepare_creds+0x66/0x260 [ 94.828775][ T1697] should_failslab+0xac/0x100 [ 94.828787][ T1697] __kmalloc_noprof+0x69/0x510 [ 94.828803][ T1697] ? security_prepare_creds+0x66/0x260 [ 94.828814][ T1697] security_prepare_creds+0x66/0x260 [ 94.828825][ T1697] prepare_creds+0x46d/0x6b0 [ 94.828839][ T1697] lookup_user_key+0x359/0x1230 [ 94.828853][ T1697] ? __cfi_lookup_user_key+0x10/0x10 [ 94.828866][ T1697] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 94.828880][ T1697] ? memdup_user+0xb1/0x170 [ 94.828894][ T1697] ? strndup_user+0x40/0xd0 [ 94.828908][ T1697] __se_sys_add_key+0x317/0x4b0 [ 94.828919][ T1697] ? __x64_sys_add_key+0xf0/0xf0 [ 94.828930][ T1697] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 94.828944][ T1697] __x64_sys_add_key+0xc3/0xf0 [ 94.828955][ T1697] x64_sys_call+0x195f/0x2ee0 [ 94.828967][ T1697] do_syscall_64+0x57/0xf0 [ 94.828979][ T1697] ? clear_bhb_loop+0x50/0xa0 [ 94.828993][ T1697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.829007][ T1697] RIP: 0033:0x7f62ee19fb19 [ 94.829018][ T1697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.829028][ T1697] RSP: 002b:00007f62ef017028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 94.829043][ T1697] RAX: ffffffffffffffda RBX: 00007f62ee425fa0 RCX: 00007f62ee19fb19 [ 94.829052][ T1697] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000200000000540 [ 94.829060][ T1697] RBP: 00007f62ee237b70 R08: fffffffffffffffe R09: 0000000000000000 [ 94.829069][ T1697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.829076][ T1697] R13: 00007f62ee426038 R14: 00007f62ee425fa0 R15: 00007fff664fdcc8 [ 94.829086][ T1697] [ 95.068795][ T371] usb 4-1: USB disconnect, device number 24 [ 95.075795][ T371] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 95.085707][ T371] ftdi_sio 4-1:0.0: device disconnected [ 95.089236][ T1700] fuse: Bad value for 'fd' [ 95.110825][ T36] audit: type=1400 audit(2000000038.718:454): avc: denied { create } for pid=1696 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 95.116110][ T1702] FAULT_INJECTION: forcing a failure. [ 95.116110][ T1702] name fail_futex, interval 1, probability 0, space 0, times 0 [ 95.143484][ T1702] CPU: 0 UID: 0 PID: 1702 Comm: syz.3.478 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 95.143521][ T1702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.143536][ T1702] Call Trace: [ 95.143545][ T1702] [ 95.143555][ T1702] __dump_stack+0x21/0x30 [ 95.143582][ T1702] dump_stack_lvl+0x140/0x1c0 [ 95.143601][ T1702] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.143624][ T1702] dump_stack+0x19/0x20 [ 95.143641][ T1702] should_fail_ex+0x3c2/0x510 [ 95.143662][ T1702] should_fail+0xf/0x20 [ 95.143680][ T1702] get_futex_key+0x178/0x940 [ 95.143702][ T1702] ? __cfi_get_futex_key+0x10/0x10 [ 95.143722][ T1702] ? probe_sched_wakeup+0x62/0x90 [ 95.143744][ T1702] ? ttwu_do_activate+0x620/0x620 [ 95.143768][ T1702] futex_wait_setup+0xae/0x260 [ 95.143792][ T1702] ? __cfi_futex_wait_setup+0x10/0x10 [ 95.143815][ T1702] ? __asan_memcpy+0x5a/0x80 [ 95.143840][ T1702] __futex_wait+0x12c/0x3d0 [ 95.143865][ T1702] ? __cfi___futex_wait+0x10/0x10 [ 95.143888][ T1702] ? __cfi_futex_wake_mark+0x10/0x10 [ 95.143910][ T1702] futex_wait+0x128/0x7c0 [ 95.143934][ T1702] ? __cfi_futex_wait+0x10/0x10 [ 95.143956][ T1702] ? __kasan_check_read+0x15/0x20 [ 95.143980][ T1702] ? rb_commit+0x753/0x7b0 [ 95.144008][ T1702] do_futex+0x32a/0x510 [ 95.144030][ T1702] ? __cfi_do_futex+0x10/0x10 [ 95.144053][ T1702] __se_sys_futex+0x13c/0x320 [ 95.144074][ T1702] ? __x64_sys_futex+0x110/0x110 [ 95.144096][ T1702] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 95.144132][ T1702] __x64_sys_futex+0xe9/0x110 [ 95.144153][ T1702] x64_sys_call+0x227f/0x2ee0 [ 95.144173][ T1702] do_syscall_64+0x57/0xf0 [ 95.144194][ T1702] ? clear_bhb_loop+0x50/0xa0 [ 95.144220][ T1702] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.144244][ T1702] RIP: 0033:0x7febc659fb19 [ 95.144261][ T1702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.144278][ T1702] RSP: 002b:00007febc74020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.144301][ T1702] RAX: ffffffffffffffda RBX: 00007febc6825fa8 RCX: 00007febc659fb19 [ 95.144316][ T1702] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007febc6825fa8 [ 95.144331][ T1702] RBP: 00007febc6825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 95.144344][ T1702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.144356][ T1702] R13: 00007febc6826038 R14: 00007ffd91802150 R15: 00007ffd91802238 [ 95.144375][ T1702] [ 95.398951][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 95.430231][ T36] audit: type=1400 audit(2000000039.038:455): avc: denied { mount } for pid=1703 comm="syz.2.481" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 95.453340][ T36] audit: type=1400 audit(2000000039.038:456): avc: denied { mounton } for pid=1703 comm="syz.2.481" path="/86/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 95.474991][ T1712] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 95.476116][ T36] audit: type=1400 audit(2000000039.038:457): avc: denied { remount } for pid=1703 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 95.509916][ T36] audit: type=1400 audit(2000000039.038:458): avc: denied { shutdown } for pid=1703 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.523053][ T1714] syzkaller1: entered promiscuous mode [ 95.530338][ T36] audit: type=1400 audit(2000000039.038:459): avc: denied { read write } for pid=1703 comm="syz.2.481" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 95.536265][ T1714] syzkaller1: entered allmulticast mode [ 95.572215][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 95.578583][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 95.586939][ T10] usb 1-1: config 0 has no interface number 0 [ 95.595042][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 95.604532][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.612894][ T10] usb 1-1: Product: syz [ 95.617097][ T10] usb 1-1: Manufacturer: syz [ 95.621698][ T10] usb 1-1: SerialNumber: syz [ 95.627376][ T10] usb 1-1: config 0 descriptor?? [ 95.636045][ T10] smsc95xx v2.0.0 [ 95.648395][ T1718] fuse: Bad value for 'fd' [ 95.665850][ T1720] FAULT_INJECTION: forcing a failure. [ 95.665850][ T1720] name fail_futex, interval 1, probability 0, space 0, times 0 [ 95.678821][ T1720] CPU: 0 UID: 0 PID: 1720 Comm: syz.3.488 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 95.678873][ T1720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.678889][ T1720] Call Trace: [ 95.678897][ T1720] [ 95.678907][ T1720] __dump_stack+0x21/0x30 [ 95.678923][ T1720] dump_stack_lvl+0x140/0x1c0 [ 95.678934][ T1720] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.678947][ T1720] dump_stack+0x19/0x20 [ 95.678957][ T1720] should_fail_ex+0x3c2/0x510 [ 95.678969][ T1720] should_fail+0xf/0x20 [ 95.678979][ T1720] get_futex_key+0x178/0x940 [ 95.678991][ T1720] ? ttwu_queue_wakelist+0x260/0x520 [ 95.679007][ T1720] ? __cfi_get_futex_key+0x10/0x10 [ 95.679018][ T1720] ? __smp_call_single_queue+0xd8/0x380 [ 95.679033][ T1720] ? ttwu_do_activate+0x620/0x620 [ 95.679047][ T1720] ? ttwu_queue_wakelist+0x323/0x520 [ 95.679061][ T1720] futex_wait_setup+0xae/0x260 [ 95.679074][ T1720] ? __cfi_futex_wait_setup+0x10/0x10 [ 95.679088][ T1720] ? __asan_memcpy+0x5a/0x80 [ 95.679103][ T1720] __futex_wait+0x12c/0x3d0 [ 95.679117][ T1720] ? __cfi___futex_wait+0x10/0x10 [ 95.679130][ T1720] ? __cfi_futex_wake_mark+0x10/0x10 [ 95.679144][ T1720] futex_wait+0x128/0x7c0 [ 95.679157][ T1720] ? __cfi_futex_wait+0x10/0x10 [ 95.679171][ T1720] ? __kasan_check_read+0x15/0x20 [ 95.679186][ T1720] ? rb_commit+0x753/0x7b0 [ 95.679200][ T1720] do_futex+0x32a/0x510 [ 95.679212][ T1720] ? __cfi_do_futex+0x10/0x10 [ 95.679228][ T1720] __se_sys_futex+0x13c/0x320 [ 95.679240][ T1720] ? __x64_sys_futex+0x110/0x110 [ 95.679253][ T1720] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 95.679267][ T1720] __x64_sys_futex+0xe9/0x110 [ 95.679279][ T1720] x64_sys_call+0x227f/0x2ee0 [ 95.679290][ T1720] do_syscall_64+0x57/0xf0 [ 95.679302][ T1720] ? clear_bhb_loop+0x50/0xa0 [ 95.679317][ T1720] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.679331][ T1720] RIP: 0033:0x7febc659fb19 [ 95.679342][ T1720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.679353][ T1720] RSP: 002b:00007febc74020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.679368][ T1720] RAX: ffffffffffffffda RBX: 00007febc6825fa8 RCX: 00007febc659fb19 [ 95.679377][ T1720] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007febc6825fa8 [ 95.679385][ T1720] RBP: 00007febc6825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 95.679393][ T1720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.679401][ T1720] R13: 00007febc6826038 R14: 00007ffd91802150 R15: 00007ffd91802238 [ 95.679410][ T1720] [ 96.030390][ T1724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.040290][ T1724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.056939][ T1724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.066426][ T1724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.072333][ T478] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 96.091185][ T1731] overlay: filesystem on ./file0 not supported as upperdir [ 96.141944][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 96.153137][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 96.233233][ T478] usb 3-1: Using ep0 maxpacket: 8 [ 96.240834][ T478] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 96.250027][ T478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.258120][ T478] usb 3-1: Product: syz [ 96.262381][ T478] usb 3-1: Manufacturer: syz [ 96.267019][ T478] usb 3-1: SerialNumber: syz [ 96.462192][ T381] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 96.476817][ T478] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.484385][ T478] usb 3-1: unit 5 not found! [ 96.494054][ T478] usb 3-1: USB disconnect, device number 35 [ 96.511872][ T1311] udevd[1311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 96.564165][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 96.579037][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 96.589298][ T10] usb 1-1: USB disconnect, device number 32 [ 96.612191][ T381] usb 4-1: Using ep0 maxpacket: 8 [ 96.618670][ T381] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 96.628373][ T381] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.638397][ T1741] syzkaller1: entered promiscuous mode [ 96.639823][ T381] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 96.645556][ T1741] syzkaller1: entered allmulticast mode [ 96.653740][ T381] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.675100][ T381] usb 4-1: New USB device found, idVendor=200c, idProduct=0000, bcdDevice= 0.40 [ 96.684937][ T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.693049][ T381] usb 4-1: Product: syz [ 96.697273][ T381] usb 4-1: Manufacturer: syz [ 96.701858][ T381] usb 4-1: SerialNumber: syz [ 96.757023][ T1743] fuse: Invalid rootmode [ 96.775617][ T1745] FAULT_INJECTION: forcing a failure. [ 96.775617][ T1745] name failslab, interval 1, probability 0, space 0, times 0 [ 96.788422][ T1745] CPU: 0 UID: 0 PID: 1745 Comm: syz.1.498 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 96.788468][ T1745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.788484][ T1745] Call Trace: [ 96.788495][ T1745] [ 96.788513][ T1745] __dump_stack+0x21/0x30 [ 96.788545][ T1745] dump_stack_lvl+0x140/0x1c0 [ 96.788565][ T1745] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.788580][ T1745] dump_stack+0x19/0x20 [ 96.788593][ T1745] should_fail_ex+0x3c2/0x510 [ 96.788607][ T1745] should_failslab+0xac/0x100 [ 96.788622][ T1745] __kmalloc_cache_noprof+0x41/0x470 [ 96.788641][ T1745] ? usbdev_open+0xb2/0x840 [ 96.788657][ T1745] ? avc_has_perm+0x155/0x240 [ 96.788672][ T1745] usbdev_open+0xb2/0x840 [ 96.788688][ T1745] ? __kasan_check_write+0x18/0x20 [ 96.788706][ T1745] ? kobject_get_unless_zero+0x163/0x1f0 [ 96.788722][ T1745] ? __cfi_usbdev_open+0x10/0x10 [ 96.788738][ T1745] ? selinux_file_open+0x46c/0x630 [ 96.788752][ T1745] chrdev_open+0x4e8/0x610 [ 96.788766][ T1745] ? __cfi_chrdev_open+0x10/0x10 [ 96.788779][ T1745] ? bpf_lsm_file_open+0xd/0x20 [ 96.788794][ T1745] ? __cfi_chrdev_open+0x10/0x10 [ 96.788807][ T1745] do_dentry_open+0x97c/0x1510 [ 96.788824][ T1745] vfs_open+0x86/0x240 [ 96.788839][ T1745] ? __cfi_vfs_open+0x10/0x10 [ 96.788854][ T1745] ? may_open+0x352/0x430 [ 96.788869][ T1745] path_openat+0x2c49/0x35a0 [ 96.788886][ T1745] ? rb_commit+0x753/0x7b0 [ 96.788905][ T1745] ? do_filp_open+0x440/0x440 [ 96.788921][ T1745] do_filp_open+0x1f2/0x440 [ 96.788936][ T1745] ? __cfi_do_filp_open+0x10/0x10 [ 96.788969][ T1745] ? alloc_fd+0x4c1/0x570 [ 96.788986][ T1745] do_sys_openat2+0x134/0x1d0 [ 96.789005][ T1745] ? do_sys_open+0x100/0x100 [ 96.789021][ T1745] ? __kasan_check_write+0x18/0x20 [ 96.789039][ T1745] __x64_sys_openat+0x13a/0x170 [ 96.789055][ T1745] x64_sys_call+0xe69/0x2ee0 [ 96.789070][ T1745] do_syscall_64+0x57/0xf0 [ 96.789085][ T1745] ? clear_bhb_loop+0x50/0xa0 [ 96.789103][ T1745] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.789120][ T1745] RIP: 0033:0x7f62ee16034e [ 96.789135][ T1745] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.789146][ T1745] RSP: 002b:00007f62ef016b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.789165][ T1745] RAX: ffffffffffffffda RBX: 00007f62ef0176c0 RCX: 00007f62ee16034e [ 96.789177][ T1745] RDX: 0000000000000002 RSI: 00007f62ef016c00 RDI: ffffffffffffff9c [ 96.789188][ T1745] RBP: 00007f62ef016c00 R08: 0000000000000000 R09: 0000000000000000 [ 96.789198][ T1745] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 96.789208][ T1745] R13: 00007f62ee426038 R14: 00007f62ee425fa0 R15: 00007fff664fdcc8 [ 96.789220][ T1745] [ 97.082097][ T1747] fuse: Unknown parameter 'Rroup_id' [ 97.090137][ T1747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.091899][ T1749] FAULT_INJECTION: forcing a failure. [ 97.091899][ T1749] name failslab, interval 1, probability 0, space 0, times 0 [ 97.099736][ T1747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.111909][ T1749] CPU: 0 UID: 0 PID: 1749 Comm: syz.0.500 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 97.111943][ T1749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.111956][ T1749] Call Trace: [ 97.111963][ T1749] [ 97.111972][ T1749] __dump_stack+0x21/0x30 [ 97.111995][ T1749] dump_stack_lvl+0x140/0x1c0 [ 97.112013][ T1749] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.112032][ T1749] ? __cfi_avc_has_perm+0x10/0x10 [ 97.112053][ T1749] dump_stack+0x19/0x20 [ 97.112069][ T1749] should_fail_ex+0x3c2/0x510 [ 97.112096][ T1749] should_failslab+0xac/0x100 [ 97.112115][ T1749] __kmalloc_cache_noprof+0x41/0x470 [ 97.112142][ T1749] ? proc_thread_self_get_link+0x11a/0x290 [ 97.112167][ T1749] proc_thread_self_get_link+0x11a/0x290 [ 97.112190][ T1749] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 97.112208][ T1749] ? __cfi_proc_thread_self_get_link+0x10/0x10 [ 97.112231][ T1749] pick_link+0x6d7/0xe80 [ 97.112256][ T1749] step_into+0xc33/0xf10 [ 97.112280][ T1749] ? read_word_at_a_time+0x1a/0x40 [ 97.112300][ T1749] ? set_root+0x420/0x420 [ 97.112324][ T1749] ? inode_permission+0xf3/0x4c0 [ 97.112342][ T1749] link_path_walk+0x746/0xeb0 [ 97.112368][ T1749] path_openat+0x298/0x35a0 [ 97.112391][ T1749] ? rb_commit+0x753/0x7b0 [ 97.112416][ T1749] ? do_filp_open+0x440/0x440 [ 97.112438][ T1749] do_filp_open+0x1f2/0x440 [ 97.112459][ T1749] ? __cfi_do_filp_open+0x10/0x10 [ 97.112482][ T1749] ? alloc_fd+0x4c1/0x570 [ 97.112502][ T1749] do_sys_openat2+0x134/0x1d0 [ 97.112524][ T1749] ? do_sys_open+0x100/0x100 [ 97.112546][ T1749] __x64_sys_openat+0x13a/0x170 [ 97.112569][ T1749] x64_sys_call+0xe69/0x2ee0 [ 97.112587][ T1749] do_syscall_64+0x57/0xf0 [ 97.112607][ T1749] ? clear_bhb_loop+0x50/0xa0 [ 97.112632][ T1749] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.112656][ T1749] RIP: 0033:0x7fe98f96034e [ 97.112674][ T1749] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.112691][ T1749] RSP: 002b:00007fe990936f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.112712][ T1749] RAX: ffffffffffffffda RBX: 00007fe9909376c0 RCX: 00007fe98f96034e [ 97.112728][ T1749] RDX: 0000000000000002 RSI: 00007fe98fa3746a RDI: ffffffffffffff9c [ 97.112742][ T1749] RBP: 00007fe98fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 97.112755][ T1749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.112770][ T1749] R13: 00007fe98fc26038 R14: 00007fe98fc25fa0 R15: 00007ffeea6ee5c8 [ 97.112786][ T1749] [ 97.113067][ T1749] FAULT_INJECTION: forcing a failure. [ 97.113067][ T1749] name failslab, interval 1, probability 0, space 0, times 0 [ 97.195128][ T1751] FAULT_INJECTION: forcing a failure. [ 97.195128][ T1751] name failslab, interval 1, probability 0, space 0, times 0 [ 97.197597][ T1749] CPU: 0 UID: 0 PID: 1749 Comm: syz.0.500 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 97.197627][ T1749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.197641][ T1749] Call Trace: [ 97.197648][ T1749] [ 97.197657][ T1749] __dump_stack+0x21/0x30 [ 97.197685][ T1749] dump_stack_lvl+0x140/0x1c0 [ 97.197703][ T1749] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.197723][ T1749] dump_stack+0x19/0x20 [ 97.197740][ T1749] should_fail_ex+0x3c2/0x510 [ 97.197759][ T1749] should_failslab+0xac/0x100 [ 97.197778][ T1749] kmem_cache_alloc_noprof+0x42/0x410 [ 97.197803][ T1749] ? getname_flags+0xcc/0x6b0 [ 97.197822][ T1749] getname_flags+0xcc/0x6b0 [ 97.197841][ T1749] getname+0x1b/0x30 [ 97.197857][ T1749] do_sys_openat2+0xda/0x1d0 [ 97.197880][ T1749] ? do_sys_open+0x100/0x100 [ 97.197900][ T1749] ? __kasan_check_write+0x18/0x20 [ 97.197927][ T1749] __x64_sys_openat+0x13a/0x170 [ 97.197950][ T1749] x64_sys_call+0xe69/0x2ee0 [ 97.197970][ T1749] do_syscall_64+0x57/0xf0 [ 97.197989][ T1749] ? clear_bhb_loop+0x50/0xa0 [ 97.198019][ T1749] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.198043][ T1749] RIP: 0033:0x7fe98f96034e [ 97.198060][ T1749] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.198076][ T1749] RSP: 002b:00007fe990936b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.198098][ T1749] RAX: ffffffffffffffda RBX: 00007fe9909376c0 RCX: 00007fe98f96034e [ 97.198116][ T1749] RDX: 0000000000000002 RSI: 00007fe990936c00 RDI: ffffffffffffff9c [ 97.198129][ T1749] RBP: 00007fe990936c00 R08: 0000000000000000 R09: 0000000000000000 [ 97.198143][ T1749] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 97.198156][ T1749] R13: 00007fe98fc26038 R14: 00007fe98fc25fa0 R15: 00007ffeea6ee5c8 [ 97.198173][ T1749] [ 97.587495][ T1751] CPU: 0 UID: 0 PID: 1751 Comm: syz.2.501 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 97.587530][ T1751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.587546][ T1751] Call Trace: [ 97.587554][ T1751] [ 97.587565][ T1751] __dump_stack+0x21/0x30 [ 97.587590][ T1751] dump_stack_lvl+0x140/0x1c0 [ 97.587606][ T1751] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.587619][ T1751] dump_stack+0x19/0x20 [ 97.587628][ T1751] should_fail_ex+0x3c2/0x510 [ 97.587641][ T1751] should_failslab+0xac/0x100 [ 97.587653][ T1751] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 97.587670][ T1751] ? sidtab_sid2str_get+0x135/0x360 [ 97.587687][ T1751] kmemdup_noprof+0x31/0x80 [ 97.587701][ T1751] sidtab_sid2str_get+0x135/0x360 [ 97.587717][ T1751] security_sid_to_context_core+0x30d/0x5d0 [ 97.587731][ T1751] security_sid_to_context_force+0x31/0x40 [ 97.587745][ T1751] selinux_inode_init_security+0x659/0x950 [ 97.587761][ T1751] ? security_inode_init_security+0x11c/0x600 [ 97.587776][ T1751] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 97.587791][ T1751] ? __kmalloc_noprof+0x40a/0x510 [ 97.587806][ T1751] ? security_inode_init_security+0x11c/0x600 [ 97.587819][ T1751] ? __cfi_shmem_initxattrs+0x10/0x10 [ 97.587845][ T1751] ? __cfi_shmem_initxattrs+0x10/0x10 [ 97.587858][ T1751] security_inode_init_security+0x1a8/0x600 [ 97.587872][ T1751] ? __cfi_security_inode_init_security+0x10/0x10 [ 97.587886][ T1751] ? shmem_get_inode+0x812/0xc10 [ 97.587898][ T1751] shmem_symlink+0xe4/0x4e0 [ 97.587911][ T1751] ? selinux_inode_symlink+0x26/0x30 [ 97.587925][ T1751] vfs_symlink+0x3f7/0x620 [ 97.587941][ T1751] do_symlinkat+0x1ba/0x400 [ 97.587954][ T1751] ? __cfi_do_symlinkat+0x10/0x10 [ 97.587968][ T1751] ? getname_flags+0x203/0x6b0 [ 97.587979][ T1751] __x64_sys_symlink+0x7e/0x90 [ 97.587993][ T1751] x64_sys_call+0x28d8/0x2ee0 [ 97.588005][ T1751] do_syscall_64+0x57/0xf0 [ 97.588018][ T1751] ? clear_bhb_loop+0x50/0xa0 [ 97.588033][ T1751] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.588048][ T1751] RIP: 0033:0x7fc3ea39fb19 [ 97.588059][ T1751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.588069][ T1751] RSP: 002b:00007fc3eb1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 97.588091][ T1751] RAX: ffffffffffffffda RBX: 00007fc3ea625fa0 RCX: 00007fc3ea39fb19 [ 97.588100][ T1751] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000300 [ 97.588109][ T1751] RBP: 00007fc3ea437b70 R08: 0000000000000000 R09: 0000000000000000 [ 97.588117][ T1751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.588124][ T1751] R13: 00007fc3ea626038 R14: 00007fc3ea625fa0 R15: 00007fffef0cb8a8 [ 97.588134][ T1751] [ 97.600864][ T1754] overlay: filesystem on ./file0 not supported as upperdir [ 97.727408][ T1763] fuse: Invalid rootmode [ 97.940541][ T1772] syzkaller1: entered promiscuous mode [ 97.946276][ T1772] syzkaller1: entered allmulticast mode [ 98.049194][ T1786] fuse: Invalid rootmode [ 98.081195][ T1789] overlay: filesystem on ./file0 not supported as upperdir [ 98.088726][ T1784] syzkaller1: entered promiscuous mode [ 98.094440][ T1784] syzkaller1: entered allmulticast mode [ 98.106203][ T1790] FAULT_INJECTION: forcing a failure. [ 98.106203][ T1790] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.123538][ T1790] CPU: 1 UID: 0 PID: 1790 Comm: syz.2.518 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 98.123572][ T1790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.123585][ T1790] Call Trace: [ 98.123593][ T1790] [ 98.123602][ T1790] __dump_stack+0x21/0x30 [ 98.123626][ T1790] dump_stack_lvl+0x140/0x1c0 [ 98.123644][ T1790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.123664][ T1790] ? x64_sys_call+0x271c/0x2ee0 [ 98.123685][ T1790] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.123711][ T1790] dump_stack+0x19/0x20 [ 98.123728][ T1790] should_fail_ex+0x3c2/0x510 [ 98.123748][ T1790] should_fail+0xf/0x20 [ 98.123764][ T1790] should_fail_usercopy+0x1e/0x30 [ 98.123784][ T1790] _copy_from_iter+0x1a6/0x1520 [ 98.123806][ T1790] ? __cfi__copy_from_iter+0x10/0x10 [ 98.123827][ T1790] ? __check_object_size+0x54c/0x870 [ 98.123853][ T1790] ? __cfi___check_object_size+0x10/0x10 [ 98.123879][ T1790] ? __kasan_check_write+0x18/0x20 [ 98.123904][ T1790] ? __build_skb_around+0x2a4/0x590 [ 98.123930][ T1790] skb_copy_datagram_from_iter+0xf4/0x6f0 [ 98.123966][ T1790] ? napi_alloc_skb+0x212/0x560 [ 98.123988][ T1790] tun_get_user+0xe30/0x36d0 [ 98.124015][ T1790] ? _parse_integer_limit+0x195/0x1e0 [ 98.124040][ T1790] ? ptr_ring_consume+0x430/0x430 [ 98.124065][ T1790] ? _parse_integer+0x2e/0x40 [ 98.124090][ T1790] ? kstrtoull+0x13b/0x1e0 [ 98.124115][ T1790] ? __kasan_check_write+0x18/0x20 [ 98.124139][ T1790] ? ref_tracker_alloc+0x32b/0x5b0 [ 98.124160][ T1790] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 98.124180][ T1790] ? selinux_file_permission+0x318/0xb60 [ 98.124211][ T1790] tun_chr_write_iter+0x1fa/0x310 [ 98.124235][ T1790] vfs_write+0x765/0xfd0 [ 98.124263][ T1790] ? __cfi_vfs_write+0x10/0x10 [ 98.124291][ T1790] ksys_write+0x145/0x260 [ 98.124309][ T1790] ? __cfi_ksys_write+0x10/0x10 [ 98.124328][ T1790] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 98.124353][ T1790] __x64_sys_write+0x7f/0x90 [ 98.124373][ T1790] x64_sys_call+0x271c/0x2ee0 [ 98.124393][ T1790] do_syscall_64+0x57/0xf0 [ 98.124414][ T1790] ? clear_bhb_loop+0x50/0xa0 [ 98.124438][ T1790] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.124463][ T1790] RIP: 0033:0x7fc3ea39fb19 [ 98.124481][ T1790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.124498][ T1790] RSP: 002b:00007fc3eb1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.124522][ T1790] RAX: ffffffffffffffda RBX: 00007fc3ea625fa0 RCX: 00007fc3ea39fb19 [ 98.124539][ T1790] RDX: 000000000000008e RSI: 0000200000000280 RDI: 0000000000000005 [ 98.124554][ T1790] RBP: 00007fc3eb1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 98.124567][ T1790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.124580][ T1790] R13: 00007fc3ea626038 R14: 00007fc3ea625fa0 R15: 00007fffef0cb8a8 [ 98.124598][ T1790] [ 98.523561][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 98.523581][ T36] audit: type=1400 audit(2000000042.138:466): avc: denied { getopt } for pid=1801 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.598202][ T36] audit: type=1400 audit(2000000042.158:467): avc: denied { ioctl } for pid=1801 comm="syz.2.524" path="socket:[13151]" dev="sockfs" ino=13151 ioctlcmd=0x541e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.630785][ T1808] fuse: Bad value for 'rootmode' [ 98.641943][ T1809] syzkaller1: entered promiscuous mode [ 98.656676][ T1809] syzkaller1: entered allmulticast mode [ 98.758631][ T1817] syzkaller1: entered promiscuous mode [ 98.772390][ T1817] syzkaller1: entered allmulticast mode [ 98.866910][ T36] audit: type=1400 audit(2000000042.478:468): avc: denied { create } for pid=1823 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 98.964099][ T36] audit: type=1400 audit(2000000042.578:469): avc: denied { wake_alarm } for pid=1828 comm="syz.0.533" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.024048][ T1836] fuse: Bad value for 'rootmode' [ 99.212200][ T381] usb 4-1: unit 3 not found! [ 99.227609][ T381] usb 4-1: USB disconnect, device number 25 [ 99.234252][ T1856] syzkaller1: entered promiscuous mode [ 99.246886][ T1856] syzkaller1: entered allmulticast mode [ 99.264151][ T1222] udevd[1222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 99.296029][ T1855] syzkaller1: entered promiscuous mode [ 99.309446][ T1855] syzkaller1: entered allmulticast mode [ 99.320192][ T1859] netlink: 'syz.2.545': attribute type 4 has an invalid length. [ 99.354895][ T36] audit: type=1400 audit(2000000042.968:470): avc: denied { checkpoint_restore } for pid=1860 comm="syz.0.546" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.393030][ T1865] fuse: Bad value for 'rootmode' [ 99.501933][ T1881] syzkaller1: entered promiscuous mode [ 99.515014][ T1881] syzkaller1: entered allmulticast mode [ 99.528602][ T1885] netlink: 108 bytes leftover after parsing attributes in process `syz.3.549'. [ 99.620596][ T1892] fuse: Unknown parameter 'use00000000000000000000' [ 99.665224][ T36] audit: type=1400 audit(2000000043.268:471): avc: denied { read write } for pid=1893 comm="syz.2.559" name="file0" dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.688460][ T1894] syzkaller1: entered promiscuous mode [ 99.694096][ T1894] syzkaller1: entered allmulticast mode [ 99.702001][ T36] audit: type=1400 audit(2000000043.268:472): avc: denied { open } for pid=1893 comm="syz.2.559" path="/109/file0" dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.842012][ T36] audit: type=1400 audit(2000000043.448:473): avc: denied { write } for pid=1903 comm="syz.2.562" name="proc" dev="binder" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.963943][ T1918] fuse: Unknown parameter 'use00000000000000000000' [ 100.039798][ T1926] Invalid argument reading file caps for ./file0 [ 100.054894][ T36] audit: type=1400 audit(2000000043.668:474): avc: denied { ioctl } for pid=1925 comm="syz.3.570" path="socket:[14159]" dev="sockfs" ino=14159 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.111755][ T1928] syzkaller1: entered promiscuous mode [ 100.122127][ T1928] syzkaller1: entered allmulticast mode [ 100.242934][ T1936] syzkaller1: entered promiscuous mode [ 100.248618][ T1936] syzkaller1: entered allmulticast mode [ 100.332902][ T1940] fuse: Unknown parameter 'use00000000000000000000' [ 100.473021][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 100.473132][ T1946] SELinux: failed to load policy [ 100.652773][ T10] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 100.674823][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.696522][ T10] usb 4-1: config 0 has no interface number 0 [ 100.703657][ T10] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 100.706917][ T1962] fuse: Unknown parameter 'user_i00000000000000000000' [ 100.713802][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.749611][ T10] usb 4-1: config 0 descriptor?? [ 100.768048][ T1964] syzkaller1: entered promiscuous mode [ 100.770181][ T10] usb 4-1: bad CDC descriptors [ 100.776667][ T1964] syzkaller1: entered allmulticast mode [ 100.800892][ T1966] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 100.825204][ T1968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 100.837370][ T1968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.846424][ T1968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.892152][ T501] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 100.983738][ T31] usb 4-1: USB disconnect, device number 26 [ 101.042356][ T501] usb 1-1: Using ep0 maxpacket: 16 [ 101.048768][ T501] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.059112][ T501] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.070044][ T501] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.079163][ T501] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.087374][ T501] usb 1-1: Product: syz [ 101.091521][ T501] usb 1-1: Manufacturer: syz [ 101.096140][ T501] usb 1-1: SerialNumber: syz [ 101.304080][ T501] usb 1-1: 0:2 : does not exist [ 101.311064][ T501] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 101.322958][ T501] usb 1-1: USB disconnect, device number 33 [ 101.333944][ T1222] udevd[1222]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 101.579065][ T1981] fuse: Unknown parameter 'user_i00000000000000000000' [ 101.603785][ T1983] syzkaller1: entered promiscuous mode [ 101.609477][ T1983] syzkaller1: entered allmulticast mode [ 101.665749][ T1987] overlay: filesystem on ./file0 not supported as upperdir [ 101.686498][ T36] audit: type=1400 audit(2000000045.298:475): avc: denied { map } for pid=1988 comm="syz.3.599" path="socket:[15504]" dev="sockfs" ino=15504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.719225][ T1992] syzkaller1: entered promiscuous mode [ 101.725638][ T1992] syzkaller1: entered allmulticast mode [ 101.832584][ T2000] fuse: Unknown parameter 'user_i00000000000000000000' [ 101.902877][ T2010] overlay: filesystem on ./file0 not supported as upperdir [ 102.000571][ T2020] syzkaller1: entered promiscuous mode [ 102.014193][ T2020] syzkaller1: entered allmulticast mode [ 102.114085][ T2025] fuse: Unknown parameter 'user_id00000000000000000000' [ 102.173158][ T2032] overlay: filesystem on ./file0 not supported as upperdir [ 102.182517][ T501] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 102.252275][ T382] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 102.283446][ T2037] FAULT_INJECTION: forcing a failure. [ 102.283446][ T2037] name failslab, interval 1, probability 0, space 0, times 0 [ 102.301622][ T2037] CPU: 0 UID: 0 PID: 2037 Comm: syz.1.618 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 102.301656][ T2037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.301670][ T2037] Call Trace: [ 102.301679][ T2037] [ 102.301688][ T2037] __dump_stack+0x21/0x30 [ 102.301714][ T2037] dump_stack_lvl+0x140/0x1c0 [ 102.301732][ T2037] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.301751][ T2037] dump_stack+0x19/0x20 [ 102.301765][ T2037] should_fail_ex+0x3c2/0x510 [ 102.301786][ T2037] should_failslab+0xac/0x100 [ 102.301809][ T2037] __kmalloc_cache_noprof+0x41/0x470 [ 102.301836][ T2037] ? usbdev_open+0xb2/0x840 [ 102.301861][ T2037] ? avc_has_perm+0x155/0x240 [ 102.301880][ T2037] usbdev_open+0xb2/0x840 [ 102.301899][ T2037] ? __kasan_check_write+0x18/0x20 [ 102.301921][ T2037] ? kobject_get_unless_zero+0x163/0x1f0 [ 102.301938][ T2037] ? __cfi_usbdev_open+0x10/0x10 [ 102.301958][ T2037] ? selinux_file_open+0x46c/0x630 [ 102.301974][ T2037] chrdev_open+0x4e8/0x610 [ 102.301990][ T2037] ? __cfi_chrdev_open+0x10/0x10 [ 102.302005][ T2037] ? bpf_lsm_file_open+0xd/0x20 [ 102.302023][ T2037] ? __cfi_chrdev_open+0x10/0x10 [ 102.302038][ T2037] do_dentry_open+0x97c/0x1510 [ 102.302063][ T2037] vfs_open+0x86/0x240 [ 102.302084][ T2037] ? __cfi_vfs_open+0x10/0x10 [ 102.302107][ T2037] ? may_open+0x352/0x430 [ 102.302136][ T2037] path_openat+0x2c49/0x35a0 [ 102.302156][ T2037] ? rb_commit+0x753/0x7b0 [ 102.302181][ T2037] ? do_filp_open+0x440/0x440 [ 102.302202][ T2037] do_filp_open+0x1f2/0x440 [ 102.302222][ T2037] ? __cfi_do_filp_open+0x10/0x10 [ 102.302242][ T2037] ? alloc_fd+0x4c1/0x570 [ 102.302259][ T2037] do_sys_openat2+0x134/0x1d0 [ 102.302278][ T2037] ? do_sys_open+0x100/0x100 [ 102.302296][ T2037] ? __kasan_check_write+0x18/0x20 [ 102.302318][ T2037] __x64_sys_openat+0x13a/0x170 [ 102.302338][ T2037] x64_sys_call+0xe69/0x2ee0 [ 102.302354][ T2037] do_syscall_64+0x57/0xf0 [ 102.302371][ T2037] ? clear_bhb_loop+0x50/0xa0 [ 102.302392][ T2037] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.302412][ T2037] RIP: 0033:0x7f62ee16034e [ 102.302427][ T2037] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.302443][ T2037] RSP: 002b:00007f62eeff5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.302464][ T2037] RAX: ffffffffffffffda RBX: 00007f62eeff66c0 RCX: 00007f62ee16034e [ 102.302477][ T2037] RDX: 0000000000000002 RSI: 00007f62eeff5c00 RDI: ffffffffffffff9c [ 102.302489][ T2037] RBP: 00007f62eeff5c00 R08: 0000000000000000 R09: 0000000000000000 [ 102.302500][ T2037] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 102.302512][ T2037] R13: 00007f62ee426128 R14: 00007f62ee426090 R15: 00007fff664fdcc8 [ 102.302526][ T2037] [ 102.362266][ T501] usb 1-1: device descriptor read/64, error -71 [ 102.623149][ T2044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.632385][ T2044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.641907][ T2044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.650809][ T2044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.662159][ T382] usb 4-1: Using ep0 maxpacket: 16 [ 102.668438][ T382] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.678863][ T382] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.689684][ T382] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.699149][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.707369][ T382] usb 4-1: Product: syz [ 102.711813][ T382] usb 4-1: Manufacturer: syz [ 102.716605][ T382] usb 4-1: SerialNumber: syz [ 102.842247][ T501] usb 1-1: device descriptor read/64, error -71 [ 102.852197][ T48] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 102.925321][ T382] usb 4-1: 0:2 : does not exist [ 102.932619][ T382] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 102.944431][ T382] usb 4-1: USB disconnect, device number 27 [ 102.957818][ T1222] udevd[1222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 103.003439][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.013317][ T48] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.025167][ T48] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 103.034599][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.042806][ T48] usb 3-1: Product: syz [ 103.047230][ T48] usb 3-1: Manufacturer: syz [ 103.051988][ T48] usb 3-1: SerialNumber: syz [ 103.062049][ T48] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 103.065512][ T2046] syzkaller1: entered promiscuous mode [ 103.075372][ T2046] syzkaller1: entered allmulticast mode [ 103.076523][ T48] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 103.076523][ T48] Please send a copy of this message to and [ 103.106438][ T501] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 103.158142][ T2050] fuse: Unknown parameter 'user_id00000000000000000000' [ 103.210070][ T2060] overlay: filesystem on ./file0 not supported as upperdir [ 103.242227][ T501] usb 1-1: device descriptor read/64, error -71 [ 103.285815][ T48] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 103.300870][ T48] usb 3-1: USB disconnect, device number 36 [ 103.388073][ T2074] fuse: Unknown parameter 'user_id00000000000000000000' [ 103.431247][ T2080] syzkaller1: entered promiscuous mode [ 103.436953][ T2080] syzkaller1: entered allmulticast mode [ 103.464952][ T2082] netlink: 'syz.3.637': attribute type 46 has an invalid length. [ 103.473075][ T2082] netlink: 'syz.3.637': attribute type 28 has an invalid length. [ 103.482714][ T501] usb 1-1: device descriptor read/64, error -71 [ 103.485809][ T2082] netlink: 'syz.3.637': attribute type 46 has an invalid length. [ 103.499332][ T2082] netlink: 'syz.3.637': attribute type 28 has an invalid length. [ 103.592362][ T501] usb usb1-port1: attempt power cycle [ 103.650267][ T2099] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2099 comm=syz.1.641 [ 103.762190][ T381] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 103.932246][ T381] usb 4-1: Using ep0 maxpacket: 16 [ 103.932308][ T501] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 103.943409][ T381] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.962817][ T381] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.963438][ T501] usb 1-1: device descriptor read/8, error -71 [ 103.982386][ T381] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 103.995645][ T381] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.002522][ T381] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 104.011565][ T381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.022467][ T381] usb 4-1: config 0 descriptor?? [ 104.103618][ T501] usb 1-1: device descriptor read/8, error -71 [ 104.342235][ T501] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 104.363767][ T501] usb 1-1: device descriptor read/8, error -71 [ 104.446253][ T381] usbhid 4-1:0.0: can't add hid device: -71 [ 104.452174][ T2107] fuse: Bad value for 'fd' [ 104.466933][ T381] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.487604][ T381] usb 4-1: USB disconnect, device number 28 [ 104.496510][ T501] usb 1-1: device descriptor read/8, error -71 [ 104.509754][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 104.509772][ T36] audit: type=1400 audit(2000000048.118:491): avc: denied { read } for pid=2110 comm="syz.1.645" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.550595][ T36] audit: type=1400 audit(2000000048.148:492): avc: denied { open } for pid=2110 comm="syz.1.645" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.580973][ T36] audit: type=1400 audit(2000000048.158:493): avc: denied { ioctl } for pid=2110 comm="syz.1.645" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.618526][ T501] usb usb1-port1: unable to enumerate USB device [ 104.618727][ T2115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.642975][ T2115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.663872][ T2117] FAULT_INJECTION: forcing a failure. [ 104.663872][ T2117] name failslab, interval 1, probability 0, space 0, times 0 [ 104.676725][ T2117] CPU: 0 UID: 0 PID: 2117 Comm: syz.2.647 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 104.676761][ T2117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.676771][ T2117] Call Trace: [ 104.676776][ T2117] [ 104.676781][ T2117] __dump_stack+0x21/0x30 [ 104.676798][ T2117] dump_stack_lvl+0x140/0x1c0 [ 104.676809][ T2117] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.676821][ T2117] dump_stack+0x19/0x20 [ 104.676832][ T2117] should_fail_ex+0x3c2/0x510 [ 104.676843][ T2117] should_failslab+0xac/0x100 [ 104.676856][ T2117] __kmalloc_cache_noprof+0x41/0x470 [ 104.676872][ T2117] ? usbdev_open+0xb2/0x840 [ 104.676886][ T2117] ? avc_has_perm+0x155/0x240 [ 104.676913][ T2117] usbdev_open+0xb2/0x840 [ 104.676927][ T2117] ? __kasan_check_write+0x18/0x20 [ 104.676944][ T2117] ? kobject_get_unless_zero+0x163/0x1f0 [ 104.676958][ T2117] ? __cfi_usbdev_open+0x10/0x10 [ 104.676973][ T2117] ? selinux_file_open+0x46c/0x630 [ 104.676984][ T2117] chrdev_open+0x4e8/0x610 [ 104.676995][ T2117] ? __cfi_chrdev_open+0x10/0x10 [ 104.677006][ T2117] ? bpf_lsm_file_open+0xd/0x20 [ 104.677019][ T2117] ? __cfi_chrdev_open+0x10/0x10 [ 104.677030][ T2117] do_dentry_open+0x97c/0x1510 [ 104.677044][ T2117] vfs_open+0x86/0x240 [ 104.677056][ T2117] ? __cfi_vfs_open+0x10/0x10 [ 104.677072][ T2117] ? may_open+0x352/0x430 [ 104.677094][ T2117] path_openat+0x2c49/0x35a0 [ 104.677118][ T2117] ? rb_commit+0x753/0x7b0 [ 104.677144][ T2117] ? do_filp_open+0x440/0x440 [ 104.677167][ T2117] do_filp_open+0x1f2/0x440 [ 104.677190][ T2117] ? __cfi_do_filp_open+0x10/0x10 [ 104.677204][ T2117] ? alloc_fd+0x4c1/0x570 [ 104.677216][ T2117] do_sys_openat2+0x134/0x1d0 [ 104.677230][ T2117] ? do_sys_open+0x100/0x100 [ 104.677242][ T2117] ? __kasan_check_write+0x18/0x20 [ 104.677258][ T2117] __x64_sys_openat+0x13a/0x170 [ 104.677272][ T2117] x64_sys_call+0xe69/0x2ee0 [ 104.677284][ T2117] do_syscall_64+0x57/0xf0 [ 104.677295][ T2117] ? clear_bhb_loop+0x50/0xa0 [ 104.677310][ T2117] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.677324][ T2117] RIP: 0033:0x7fc3ea36034e [ 104.677335][ T2117] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.677345][ T2117] RSP: 002b:00007fc3eb1feb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.677359][ T2117] RAX: ffffffffffffffda RBX: 00007fc3eb1ff6c0 RCX: 00007fc3ea36034e [ 104.677368][ T2117] RDX: 0000000000000002 RSI: 00007fc3eb1fec00 RDI: ffffffffffffff9c [ 104.677377][ T2117] RBP: 00007fc3eb1fec00 R08: 0000000000000000 R09: 0000000000000000 [ 104.677384][ T2117] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 104.677396][ T2117] R13: 00007fc3ea626038 R14: 00007fc3ea625fa0 R15: 00007fffef0cb8a8 [ 104.677411][ T2117] [ 104.744161][ T2120] syzkaller1: entered promiscuous mode [ 104.962160][ T2120] syzkaller1: entered allmulticast mode [ 105.022172][ T2140] fuse: Bad value for 'fd' [ 105.041991][ T2142] cgroup: noprefix used incorrectly [ 105.055550][ T36] audit: type=1400 audit(2000000048.668:494): avc: denied { read } for pid=2141 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.124532][ T36] audit: type=1400 audit(2000000048.738:495): avc: denied { read } for pid=2144 comm="syz.2.654" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.175585][ T2149] overlayfs: failed to resolve './file1/file0': -2 [ 105.197065][ T2151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 105.242458][ T501] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 105.312146][ T36] audit: type=1400 audit(2000000048.918:496): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.376255][ T2161] ./dev/sda1: Can't lookup blockdev [ 105.403425][ T501] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.425780][ T501] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 105.435503][ T501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.443913][ T501] usb 4-1: Product: syz [ 105.452036][ T501] usb 4-1: Manufacturer: syz [ 105.457502][ T501] usb 4-1: SerialNumber: syz [ 105.470292][ T501] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 105.481983][ T501] cdc_wdm 4-1:1.0: Unknown control protocol [ 105.524895][ T2170] syzkaller1: entered promiscuous mode [ 105.530686][ T2170] syzkaller1: entered allmulticast mode [ 105.682851][ T36] audit: type=1400 audit(2000000049.298:497): avc: denied { read write } for pid=2131 comm="syz.3.651" name="cdc-wdm0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 105.711338][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 105.712199][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 105.722607][ T36] audit: type=1400 audit(2000000049.318:498): avc: denied { create } for pid=2131 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 105.761967][ T36] audit: type=1400 audit(2000000049.318:499): avc: denied { open } for pid=2131 comm="syz.3.651" path="/dev/cdc-wdm0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 105.882169][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 105.894010][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.910014][ T501] usb 4-1: USB disconnect, device number 29 [ 105.916342][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 105.927777][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.952131][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 105.963279][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 105.973480][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 105.988767][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 106.003011][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 106.021837][ T2182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.021954][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 106.032834][ T2182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.048363][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.059507][ T10] usb 3-1: Product: syz [ 106.063774][ T10] usb 3-1: Manufacturer: syz [ 106.068371][ T10] usb 3-1: SerialNumber: syz [ 106.078175][ T10] usb 3-1: config 0 descriptor?? [ 106.084100][ T2168] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 106.091582][ T2182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.101897][ T2182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.113394][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 106.129169][ T1376] udevd[1376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 106.308850][ T10] usb 3-1: USB disconnect, device number 37 [ 106.672475][ T2196] syzkaller1: entered promiscuous mode [ 106.678105][ T2196] syzkaller1: entered allmulticast mode [ 106.710175][ T36] audit: type=1326 audit(2000000050.318:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2197 comm="syz.3.675" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febc659fb19 code=0x0 [ 106.779594][ T422] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.316709][ T2226] syzkaller1: entered promiscuous mode [ 107.322377][ T2226] syzkaller1: entered allmulticast mode [ 107.541409][ T2233] fuse: Unknown parameter '0x0000000000000003' [ 107.640151][ T2241] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 107.650444][ T2241] SELinux: failed to load policy [ 107.761081][ T2244] syzkaller1: entered promiscuous mode [ 107.766737][ T2244] syzkaller1: entered allmulticast mode [ 108.221930][ T436] Bluetooth: hci1: Frame reassembly failed (-84) [ 108.603304][ T2262] FAULT_INJECTION: forcing a failure. [ 108.603304][ T2262] name failslab, interval 1, probability 0, space 0, times 0 [ 108.616149][ T2262] CPU: 0 UID: 0 PID: 2262 Comm: syz.0.695 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 108.616225][ T2262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.616240][ T2262] Call Trace: [ 108.616249][ T2262] [ 108.616259][ T2262] __dump_stack+0x21/0x30 [ 108.616282][ T2262] dump_stack_lvl+0x140/0x1c0 [ 108.616299][ T2262] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.616318][ T2262] ? __cfi_avc_has_perm+0x10/0x10 [ 108.616339][ T2262] dump_stack+0x19/0x20 [ 108.616356][ T2262] should_fail_ex+0x3c2/0x510 [ 108.616375][ T2262] should_failslab+0xac/0x100 [ 108.616395][ T2262] __kmalloc_cache_noprof+0x41/0x470 [ 108.616424][ T2262] ? proc_thread_self_get_link+0x11a/0x290 [ 108.616444][ T2262] proc_thread_self_get_link+0x11a/0x290 [ 108.616460][ T2262] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 108.616472][ T2262] ? __cfi_proc_thread_self_get_link+0x10/0x10 [ 108.616488][ T2262] pick_link+0x6d7/0xe80 [ 108.616506][ T2262] step_into+0xc33/0xf10 [ 108.616521][ T2262] ? read_word_at_a_time+0x1a/0x40 [ 108.616538][ T2262] ? set_root+0x420/0x420 [ 108.616553][ T2262] ? inode_permission+0xf3/0x4c0 [ 108.616565][ T2262] link_path_walk+0x746/0xeb0 [ 108.616581][ T2262] path_openat+0x298/0x35a0 [ 108.616594][ T2262] ? rb_commit+0x753/0x7b0 [ 108.616611][ T2262] ? do_filp_open+0x440/0x440 [ 108.616624][ T2262] do_filp_open+0x1f2/0x440 [ 108.616637][ T2262] ? __cfi_do_filp_open+0x10/0x10 [ 108.616656][ T2262] ? alloc_fd+0x4c1/0x570 [ 108.616668][ T2262] do_sys_openat2+0x134/0x1d0 [ 108.616682][ T2262] ? do_sys_open+0x100/0x100 [ 108.616696][ T2262] __x64_sys_openat+0x13a/0x170 [ 108.616709][ T2262] x64_sys_call+0xe69/0x2ee0 [ 108.616721][ T2262] do_syscall_64+0x57/0xf0 [ 108.616733][ T2262] ? clear_bhb_loop+0x50/0xa0 [ 108.616749][ T2262] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.616763][ T2262] RIP: 0033:0x7fe98f96034e [ 108.616774][ T2262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.616785][ T2262] RSP: 002b:00007fe990936f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.616800][ T2262] RAX: ffffffffffffffda RBX: 00007fe9909376c0 RCX: 00007fe98f96034e [ 108.616809][ T2262] RDX: 0000000000000002 RSI: 00007fe98fa3746a RDI: ffffffffffffff9c [ 108.616817][ T2262] RBP: 00007fe98fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 108.616825][ T2262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.616833][ T2262] R13: 00007fe98fc26038 R14: 00007fe98fc25fa0 R15: 00007ffeea6ee5c8 [ 108.616842][ T2262] [ 108.617079][ T2262] FAULT_INJECTION: forcing a failure. [ 108.617079][ T2262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.828007][ T775] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.836110][ T537] Bluetooth: hci0: command 0x1003 tx timeout [ 108.844225][ T2262] CPU: 1 UID: 0 PID: 2262 Comm: syz.0.695 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 108.844252][ T2262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.844265][ T2262] Call Trace: [ 108.844273][ T2262] [ 108.844282][ T2262] __dump_stack+0x21/0x30 [ 108.844305][ T2262] dump_stack_lvl+0x140/0x1c0 [ 108.844323][ T2262] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.844342][ T2262] ? getname_flags+0xcc/0x6b0 [ 108.844361][ T2262] dump_stack+0x19/0x20 [ 108.844377][ T2262] should_fail_ex+0x3c2/0x510 [ 108.844395][ T2262] should_fail+0xf/0x20 [ 108.844412][ T2262] should_fail_usercopy+0x1e/0x30 [ 108.844430][ T2262] strncpy_from_user+0x29/0x280 [ 108.844449][ T2262] getname_flags+0x106/0x6b0 [ 108.844467][ T2262] getname+0x1b/0x30 [ 108.844484][ T2262] do_sys_openat2+0xda/0x1d0 [ 108.844506][ T2262] ? do_sys_open+0x100/0x100 [ 108.844528][ T2262] ? __kasan_check_write+0x18/0x20 [ 108.844562][ T2262] __x64_sys_openat+0x13a/0x170 [ 108.844584][ T2262] x64_sys_call+0xe69/0x2ee0 [ 108.844604][ T2262] do_syscall_64+0x57/0xf0 [ 108.844624][ T2262] ? clear_bhb_loop+0x50/0xa0 [ 108.844649][ T2262] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.844676][ T2262] RIP: 0033:0x7fe98f96034e [ 108.844694][ T2262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.844710][ T2262] RSP: 002b:00007fe990936b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.844733][ T2262] RAX: ffffffffffffffda RBX: 00007fe9909376c0 RCX: 00007fe98f96034e [ 108.844748][ T2262] RDX: 0000000000000002 RSI: 00007fe990936c00 RDI: ffffffffffffff9c [ 108.844762][ T2262] RBP: 00007fe990936c00 R08: 0000000000000000 R09: 0000000000000000 [ 108.844775][ T2262] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 108.844789][ T2262] R13: 00007fe98fc26038 R14: 00007fe98fc25fa0 R15: 00007ffeea6ee5c8 [ 108.844806][ T2262] [ 109.119898][ T2266] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 109.127471][ T2264] sit0: entered promiscuous mode [ 109.130291][ T2266] SELinux: failed to load policy [ 109.136595][ T2264] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 109.152855][ T2264] netlink: 1 bytes leftover after parsing attributes in process `syz.0.696'. [ 109.185728][ T2268] syzkaller1: entered promiscuous mode [ 109.191238][ T2268] syzkaller1: entered allmulticast mode [ 109.226339][ T2270] syzkaller1: entered promiscuous mode [ 109.231847][ T2270] syzkaller1: entered allmulticast mode [ 109.333348][ T2278] FAULT_INJECTION: forcing a failure. [ 109.333348][ T2278] name failslab, interval 1, probability 0, space 0, times 0 [ 109.347008][ T2278] CPU: 0 UID: 0 PID: 2278 Comm: syz.3.702 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 109.347042][ T2278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.347058][ T2278] Call Trace: [ 109.347067][ T2278] [ 109.347077][ T2278] __dump_stack+0x21/0x30 [ 109.347112][ T2278] dump_stack_lvl+0x140/0x1c0 [ 109.347132][ T2278] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.347155][ T2278] dump_stack+0x19/0x20 [ 109.347175][ T2278] should_fail_ex+0x3c2/0x510 [ 109.347196][ T2278] should_failslab+0xac/0x100 [ 109.347219][ T2278] __kmalloc_cache_noprof+0x41/0x470 [ 109.347247][ T2278] ? usbdev_open+0xb2/0x840 [ 109.347274][ T2278] ? avc_has_perm+0x155/0x240 [ 109.347296][ T2278] usbdev_open+0xb2/0x840 [ 109.347321][ T2278] ? __kasan_check_write+0x18/0x20 [ 109.347348][ T2278] ? kobject_get_unless_zero+0x163/0x1f0 [ 109.347370][ T2278] ? __cfi_usbdev_open+0x10/0x10 [ 109.347396][ T2278] ? selinux_file_open+0x46c/0x630 [ 109.347416][ T2278] chrdev_open+0x4e8/0x610 [ 109.347436][ T2278] ? __cfi_chrdev_open+0x10/0x10 [ 109.347458][ T2278] ? bpf_lsm_file_open+0xd/0x20 [ 109.347481][ T2278] ? __cfi_chrdev_open+0x10/0x10 [ 109.347500][ T2278] do_dentry_open+0x97c/0x1510 [ 109.347526][ T2278] vfs_open+0x86/0x240 [ 109.347548][ T2278] ? __cfi_vfs_open+0x10/0x10 [ 109.347571][ T2278] ? may_open+0x352/0x430 [ 109.347594][ T2278] path_openat+0x2c49/0x35a0 [ 109.347616][ T2278] ? rb_commit+0x753/0x7b0 [ 109.347644][ T2278] ? do_filp_open+0x440/0x440 [ 109.347668][ T2278] do_filp_open+0x1f2/0x440 [ 109.347691][ T2278] ? __cfi_do_filp_open+0x10/0x10 [ 109.347716][ T2278] ? alloc_fd+0x4c1/0x570 [ 109.347738][ T2278] do_sys_openat2+0x134/0x1d0 [ 109.347763][ T2278] ? do_sys_open+0x100/0x100 [ 109.347786][ T2278] ? __kasan_check_write+0x18/0x20 [ 109.347814][ T2278] __x64_sys_openat+0x13a/0x170 [ 109.347839][ T2278] x64_sys_call+0xe69/0x2ee0 [ 109.347861][ T2278] do_syscall_64+0x57/0xf0 [ 109.347882][ T2278] ? clear_bhb_loop+0x50/0xa0 [ 109.347908][ T2278] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.347934][ T2278] RIP: 0033:0x7febc656034e [ 109.347952][ T2278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.347971][ T2278] RSP: 002b:00007febc7401b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.347996][ T2278] RAX: ffffffffffffffda RBX: 00007febc74026c0 RCX: 00007febc656034e [ 109.348013][ T2278] RDX: 0000000000000002 RSI: 00007febc7401c00 RDI: ffffffffffffff9c [ 109.348029][ T2278] RBP: 00007febc7401c00 R08: 0000000000000000 R09: 0000000000000000 [ 109.348044][ T2278] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 109.348059][ T2278] R13: 00007febc6826038 R14: 00007febc6825fa0 R15: 00007ffd91802238 [ 109.348079][ T2278] [ 109.643932][ T400] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.728157][ T2287] overlayfs: workdir and upperdir must be separate subtrees [ 109.747762][ T2289] syzkaller1: entered promiscuous mode [ 109.753365][ T2289] syzkaller1: entered allmulticast mode [ 109.802883][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 109.802896][ T36] audit: type=1400 audit(2000000053.418:510): avc: denied { read write } for pid=2290 comm="syz.1.709" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.832362][ T36] audit: type=1400 audit(2000000053.418:511): avc: denied { open } for pid=2290 comm="syz.1.709" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.855716][ T36] audit: type=1400 audit(2000000053.418:512): avc: denied { ioctl } for pid=2290 comm="syz.1.709" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.886851][ T2293] FAULT_INJECTION: forcing a failure. [ 109.886851][ T2293] name failslab, interval 1, probability 0, space 0, times 0 [ 109.899615][ T2293] CPU: 0 UID: 0 PID: 2293 Comm: syz.1.710 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 109.899646][ T2293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.899660][ T2293] Call Trace: [ 109.899668][ T2293] [ 109.899678][ T2293] __dump_stack+0x21/0x30 [ 109.899702][ T2293] dump_stack_lvl+0x140/0x1c0 [ 109.899719][ T2293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.899734][ T2293] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 109.899751][ T2293] dump_stack+0x19/0x20 [ 109.899761][ T2293] should_fail_ex+0x3c2/0x510 [ 109.899772][ T2293] should_failslab+0xac/0x100 [ 109.899784][ T2293] kmem_cache_alloc_noprof+0x42/0x410 [ 109.899800][ T2293] ? security_file_alloc+0x49/0x220 [ 109.899816][ T2293] security_file_alloc+0x49/0x220 [ 109.899831][ T2293] init_file+0x9e/0x210 [ 109.899844][ T2293] alloc_empty_file+0xd9/0x270 [ 109.899856][ T2293] ? __rb_reserve_next+0x794/0xd90 [ 109.899868][ T2293] path_openat+0xf4/0x35a0 [ 109.899882][ T2293] ? rb_commit+0x753/0x7b0 [ 109.899898][ T2293] ? __kasan_check_read+0x15/0x20 [ 109.899914][ T2293] ? do_filp_open+0x440/0x440 [ 109.899927][ T2293] do_filp_open+0x1f2/0x440 [ 109.899939][ T2293] ? __cfi_do_filp_open+0x10/0x10 [ 109.899953][ T2293] ? alloc_fd+0x4c1/0x570 [ 109.899972][ T2293] do_sys_openat2+0x134/0x1d0 [ 109.899987][ T2293] ? do_sys_open+0x100/0x100 [ 109.900000][ T2293] __x64_sys_openat+0x13a/0x170 [ 109.900014][ T2293] x64_sys_call+0xe69/0x2ee0 [ 109.900025][ T2293] do_syscall_64+0x57/0xf0 [ 109.900037][ T2293] ? clear_bhb_loop+0x50/0xa0 [ 109.900052][ T2293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.900067][ T2293] RIP: 0033:0x7f62ee16034e [ 109.900077][ T2293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.900088][ T2293] RSP: 002b:00007f62ef016f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.900101][ T2293] RAX: ffffffffffffffda RBX: 00007f62ef0176c0 RCX: 00007f62ee16034e [ 109.900111][ T2293] RDX: 0000000000000002 RSI: 00007f62ee23746a RDI: ffffffffffffff9c [ 109.900119][ T2293] RBP: 00007f62ee237b70 R08: 0000000000000000 R09: 0000000000000000 [ 109.900126][ T2293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 109.900134][ T2293] R13: 00007f62ee426038 R14: 00007f62ee425fa0 R15: 00007fff664fdcc8 [ 109.900143][ T2293] [ 110.156363][ T2296] ./trace: Can't lookup blockdev [ 110.219243][ T2300] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 110.229578][ T2300] SELinux: failed to load policy [ 110.262202][ T775] Bluetooth: hci1: command 0x1003 tx timeout [ 110.262197][ T810] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 110.359760][ T2305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 110.409258][ T2307] sit0: entered promiscuous mode [ 110.414379][ T2307] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 110.422049][ T2307] netlink: 1 bytes leftover after parsing attributes in process `syz.1.715'. [ 110.449505][ T2313] syzkaller1: entered promiscuous mode [ 110.455369][ T2313] syzkaller1: entered allmulticast mode [ 110.467547][ T2316] syzkaller1: entered promiscuous mode [ 110.473224][ T2316] syzkaller1: entered allmulticast mode [ 110.574084][ T2323] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 110.584605][ T2323] SELinux: failed to load policy [ 110.707432][ T36] audit: type=1400 audit(2000000054.318:513): avc: denied { read write } for pid=2327 comm="syz.2.724" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 110.731001][ T36] audit: type=1400 audit(2000000054.318:514): avc: denied { open } for pid=2327 comm="syz.2.724" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 110.754538][ T36] audit: type=1400 audit(2000000054.318:515): avc: denied { read append } for pid=2327 comm="syz.2.724" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 110.781150][ T36] audit: type=1400 audit(2000000054.318:516): avc: denied { open } for pid=2327 comm="syz.2.724" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 110.808680][ T400] Bluetooth: hci1: Frame reassembly failed (-84) [ 110.843643][ T2336] syzkaller1: entered promiscuous mode [ 110.849134][ T2336] syzkaller1: entered allmulticast mode [ 110.905466][ T36] audit: type=1400 audit(2000000054.518:517): avc: denied { setopt } for pid=2337 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.925986][ T36] audit: type=1400 audit(2000000054.518:518): avc: denied { create } for pid=2337 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.948648][ T400] Bluetooth: hci2: Frame reassembly failed (-84) [ 110.950445][ T2344] FAULT_INJECTION: forcing a failure. [ 110.950445][ T2344] name failslab, interval 1, probability 0, space 0, times 0 [ 110.967910][ T2344] CPU: 0 UID: 0 PID: 2344 Comm: syz.1.730 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 110.967932][ T2344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.967941][ T2344] Call Trace: [ 110.967945][ T2344] [ 110.967951][ T2344] __dump_stack+0x21/0x30 [ 110.967967][ T2344] dump_stack_lvl+0x140/0x1c0 [ 110.967978][ T2344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.967990][ T2344] dump_stack+0x19/0x20 [ 110.968000][ T2344] should_fail_ex+0x3c2/0x510 [ 110.968011][ T2344] should_failslab+0xac/0x100 [ 110.968024][ T2344] kmem_cache_alloc_noprof+0x42/0x410 [ 110.968040][ T2344] ? getname_flags+0xcc/0x6b0 [ 110.968052][ T2344] getname_flags+0xcc/0x6b0 [ 110.968062][ T2344] getname+0x1b/0x30 [ 110.968072][ T2344] do_sys_openat2+0xda/0x1d0 [ 110.968086][ T2344] ? do_sys_open+0x100/0x100 [ 110.968099][ T2344] __x64_sys_openat+0x13a/0x170 [ 110.968113][ T2344] x64_sys_call+0xe69/0x2ee0 [ 110.968125][ T2344] do_syscall_64+0x57/0xf0 [ 110.968137][ T2344] ? clear_bhb_loop+0x50/0xa0 [ 110.968152][ T2344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.968166][ T2344] RIP: 0033:0x7f62ee19fb19 [ 110.968177][ T2344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.968187][ T2344] RSP: 002b:00007f62ef017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.968202][ T2344] RAX: ffffffffffffffda RBX: 00007f62ee425fa0 RCX: 00007f62ee19fb19 [ 110.968210][ T2344] RDX: 000000000006ad01 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 110.968219][ T2344] RBP: 00007f62ef017090 R08: 0000000000000000 R09: 0000000000000000 [ 110.968227][ T2344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.968234][ T2344] R13: 00007f62ee426038 R14: 00007f62ee425fa0 R15: 00007fff664fdcc8 [ 110.968244][ T2344] [ 111.702319][ T856] Bluetooth: hci0: command 0x1003 tx timeout [ 111.702894][ T537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.727891][ T36] audit: type=1400 audit(2000000055.338:519): avc: denied { connect } for pid=2345 comm="syz.3.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.729604][ T2346] overlayfs: workdir and upperdir must be separate subtrees [ 111.863813][ T400] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.822240][ T856] Bluetooth: hci1: command 0x1003 tx timeout [ 112.822255][ T810] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 112.853771][ T2354] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 112.864158][ T2354] SELinux: failed to load policy [ 112.992235][ T775] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 112.992378][ T810] Bluetooth: hci2: command 0x1003 tx timeout [ 113.015796][ T2359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 113.063889][ T2361] sit0: entered promiscuous mode [ 113.068993][ T2361] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 113.076901][ T2361] netlink: 1 bytes leftover after parsing attributes in process `syz.1.736'. [ 113.098093][ T2363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.106657][ T2363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.198145][ T440] Bluetooth: hci1: Frame reassembly failed (-84) [ 113.628436][ T2371] syzkaller1: entered promiscuous mode [ 113.633988][ T2371] syzkaller1: entered allmulticast mode [ 113.699350][ T2373] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 113.709717][ T2373] SELinux: failed to load policy [ 113.732201][ T501] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 113.844851][ T2380] FAULT_INJECTION: forcing a failure. [ 113.844851][ T2380] name failslab, interval 1, probability 0, space 0, times 0 [ 113.857752][ T2380] CPU: 0 UID: 0 PID: 2380 Comm: syz.1.745 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 113.857774][ T2380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.857785][ T2380] Call Trace: [ 113.857791][ T2380] [ 113.857797][ T2380] __dump_stack+0x21/0x30 [ 113.857813][ T2380] dump_stack_lvl+0x140/0x1c0 [ 113.857824][ T2380] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.857837][ T2380] dump_stack+0x19/0x20 [ 113.857847][ T2380] should_fail_ex+0x3c2/0x510 [ 113.857859][ T2380] should_failslab+0xac/0x100 [ 113.857871][ T2380] kmem_cache_alloc_noprof+0x42/0x410 [ 113.857887][ T2380] ? __cfi_trace_clock_local+0x10/0x10 [ 113.857902][ T2380] ? alloc_empty_file+0xbf/0x270 [ 113.857914][ T2380] ? sched_clock_noinstr+0xd/0x30 [ 113.857928][ T2380] alloc_empty_file+0xbf/0x270 [ 113.857940][ T2380] ? __rb_reserve_next+0x794/0xd90 [ 113.857952][ T2380] path_openat+0xf4/0x35a0 [ 113.857966][ T2380] ? rb_commit+0x753/0x7b0 [ 113.857980][ T2380] ? __kasan_check_read+0x15/0x20 [ 113.857995][ T2380] ? do_filp_open+0x440/0x440 [ 113.858008][ T2380] do_filp_open+0x1f2/0x440 [ 113.858020][ T2380] ? __cfi_do_filp_open+0x10/0x10 [ 113.858034][ T2380] ? alloc_fd+0x4c1/0x570 [ 113.858045][ T2380] do_sys_openat2+0x134/0x1d0 [ 113.858058][ T2380] ? do_sys_open+0x100/0x100 [ 113.858071][ T2380] ? __kasan_check_write+0x18/0x20 [ 113.858086][ T2380] __x64_sys_openat+0x13a/0x170 [ 113.858099][ T2380] x64_sys_call+0xe69/0x2ee0 [ 113.858111][ T2380] do_syscall_64+0x57/0xf0 [ 113.858122][ T2380] ? clear_bhb_loop+0x50/0xa0 [ 113.858136][ T2380] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.858151][ T2380] RIP: 0033:0x7f62ee16034e [ 113.858162][ T2380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.858171][ T2380] RSP: 002b:00007f62ef016b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.858186][ T2380] RAX: ffffffffffffffda RBX: 00007f62ef0176c0 RCX: 00007f62ee16034e [ 113.858211][ T2380] RDX: 0000000000000002 RSI: 00007f62ef016c00 RDI: ffffffffffffff9c [ 113.858220][ T2380] RBP: 00007f62ef016c00 R08: 0000000000000000 R09: 0000000000000000 [ 113.858228][ T2380] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 113.858241][ T2380] R13: 00007f62ee426038 R14: 00007f62ee425fa0 R15: 00007fff664fdcc8 [ 113.858251][ T2380] [ 114.094958][ T537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.102357][ T501] usb 3-1: Using ep0 maxpacket: 16 [ 114.112895][ T501] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.123187][ T501] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.129766][ T2384] tipc: Enabling of bearer rejected, media not registered [ 114.134411][ T501] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.155348][ T501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.167496][ T382] usb 2-1: USB disconnect, device number 4 [ 114.177052][ T501] usb 3-1: Product: syz [ 114.181243][ T501] usb 3-1: Manufacturer: syz [ 114.186186][ T501] usb 3-1: SerialNumber: syz [ 114.221099][ T400] bridge_slave_1: left allmulticast mode [ 114.227243][ T400] bridge_slave_1: left promiscuous mode [ 114.237391][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.253180][ T400] bridge_slave_0: left allmulticast mode [ 114.263814][ T400] bridge_slave_0: left promiscuous mode [ 114.271867][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.395364][ T400] veth1_macvtap: left promiscuous mode [ 114.400913][ T400] veth0_vlan: left promiscuous mode [ 114.409367][ T501] usb 3-1: 0:2 : does not exist [ 114.423939][ T501] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 114.449367][ T501] usb 3-1: USB disconnect, device number 38 [ 114.511481][ T1222] udevd[1222]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.539236][ T1222] udevd[1222]: setting mode of /dev/snd/controlC0 to 020660 failed: Read-only file system [ 114.553090][ T1222] udevd[1222]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: Read-only file system [ 114.610433][ T2388] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.617536][ T2388] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.624994][ T2388] bridge_slave_0: entered allmulticast mode [ 114.631525][ T2388] bridge_slave_0: entered promiscuous mode [ 114.638590][ T2388] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.645768][ T2388] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.653084][ T2388] bridge_slave_1: entered allmulticast mode [ 114.659533][ T2388] bridge_slave_1: entered promiscuous mode [ 114.693543][ T400] ------------[ cut here ]------------ [ 114.699124][ T400] WARNING: CPU: 1 PID: 400 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 114.709266][ T400] Modules linked in: [ 114.713240][ T400] CPU: 1 UID: 0 PID: 400 Comm: kworker/u8:22 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 114.725005][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.735128][ T400] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 114.739913][ T400] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 114.746016][ T400] Code: e8 d1 f4 d2 fc 4b 83 3c 3e 00 75 19 e8 e5 37 79 fc 49 81 ff f8 07 00 00 74 1b e8 d7 37 79 fc 49 83 c7 08 eb c9 e8 cc 37 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 114.765675][ T400] RSP: 0018:ffffc9000d2ffb90 EFLAGS: 00010293 [ 114.771768][ T400] RAX: ffffffff85103204 RBX: ffff88812f3b11c0 RCX: ffff888139d8bb40 [ 114.779868][ T400] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881047e80b8 [ 114.787899][ T400] RBP: ffffc9000d2ffbb0 R08: 0000000000000003 R09: 0000000000000004 [ 114.795934][ T400] R10: dffffc0000000000 R11: fffff52001a5ff04 R12: dffffc0000000000 [ 114.804042][ T400] R13: dffffc0000000000 R14: ffff8881047e8000 R15: 00000000000000b8 [ 114.812035][ T400] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 114.821035][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.827825][ T400] CR2: 00007fd980c57d0c CR3: 000000011803a000 CR4: 00000000003526b0 [ 114.835878][ T400] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 114.843915][ T400] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 114.851901][ T400] Call Trace: [ 114.855234][ T400] [ 114.858173][ T400] cleanup_net+0x6bd/0xc90 [ 114.862658][ T400] ? __cfi_cleanup_net+0x10/0x10 [ 114.867612][ T400] ? kick_pool+0xb9/0x540 [ 114.871960][ T400] process_scheduled_works+0x7f7/0x1060 [ 114.877599][ T400] worker_thread+0xc99/0x13f0 [ 114.882375][ T400] kthread+0x2c7/0x360 [ 114.886466][ T400] ? __cfi_worker_thread+0x10/0x10 [ 114.891607][ T400] ? __cfi_kthread+0x10/0x10 [ 114.896293][ T400] ret_from_fork+0x64/0xa0 [ 114.900715][ T400] ? __cfi_kthread+0x10/0x10 [ 114.905380][ T400] ret_from_fork_asm+0x1a/0x30 [ 114.910151][ T400] [ 114.913253][ T400] ---[ end trace 0000000000000000 ]--- [ 114.919865][ T400] ------------[ cut here ]------------ [ 114.925419][ T400] WARNING: CPU: 1 PID: 400 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 114.935653][ T400] Modules linked in: [ 114.939570][ T400] CPU: 1 UID: 0 PID: 400 Comm: kworker/u8:22 Tainted: G W syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 114.952893][ T400] Tainted: [W]=WARN [ 114.956702][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.966833][ T400] Workqueue: netns cleanup_net [ 114.971625][ T400] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 114.977794][ T400] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 37 79 fc 49 81 ff f8 07 00 00 74 1b e8 82 37 79 fc 49 83 c7 08 eb c5 e8 77 37 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 37 79 fc 5b 41 5c 41 5e 41 [ 114.997505][ T400] RSP: 0018:ffffc9000d2ffb90 EFLAGS: 00010293 [ 115.003670][ T400] RAX: ffffffff85103259 RBX: ffff8881047e8800 RCX: ffff888139d8bb40 [ 115.011651][ T400] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881047e8808 [ 115.019746][ T400] RBP: ffffc9000d2ffbb0 R08: 0000000000000003 R09: 0000000000000004 [ 115.027792][ T400] R10: dffffc0000000000 R11: fffff52001a5ff04 R12: dffffc0000000000 [ 115.035846][ T400] R13: dffffc0000000000 R14: ffff8881047e8000 R15: 0000000000000008 [ 115.043890][ T400] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 115.052894][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.059486][ T400] CR2: 00007fd980c57d0c CR3: 000000011803a000 CR4: 00000000003526b0 [ 115.067595][ T400] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 115.075697][ T400] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 115.083734][ T400] Call Trace: [ 115.087016][ T400] [ 115.089964][ T400] cleanup_net+0x6bd/0xc90 [ 115.094439][ T400] ? __cfi_cleanup_net+0x10/0x10 [ 115.099385][ T400] ? kick_pool+0xb9/0x540 [ 115.103749][ T400] process_scheduled_works+0x7f7/0x1060 [ 115.109307][ T400] worker_thread+0xc99/0x13f0 [ 115.114049][ T400] kthread+0x2c7/0x360 [ 115.118123][ T400] ? __cfi_worker_thread+0x10/0x10 [ 115.123265][ T400] ? __cfi_kthread+0x10/0x10 [ 115.127865][ T400] ret_from_fork+0x64/0xa0 [ 115.132312][ T400] ? __cfi_kthread+0x10/0x10 [ 115.136907][ T400] ret_from_fork_asm+0x1a/0x30 [ 115.141660][ T400] [ 115.144707][ T400] ---[ end trace 0000000000000000 ]--- [ 115.180054][ T400] ------------[ cut here ]------------ [ 115.185612][ T400] WARNING: CPU: 0 PID: 400 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 115.195213][ T400] Modules linked in: [ 115.199126][ T400] CPU: 0 UID: 0 PID: 400 Comm: kworker/u8:22 Tainted: G W syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 115.212414][ T400] Tainted: [W]=WARN [ 115.216220][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.226420][ T400] Workqueue: netns cleanup_net [ 115.231223][ T400] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 115.236870][ T400] Code: 3c 20 00 74 08 48 89 df e8 6f d1 ed fc 48 8b 3b e8 97 bc d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 e1 b7 00 cc e8 72 14 94 fc <0f> 0b e9 b0 fd ff ff e8 66 14 94 fc 0f 0b e9 18 fe ff ff e8 5a 14 [ 115.237180][ T775] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 115.256513][ T400] RSP: 0018:ffffc9000d2ffb70 EFLAGS: 00010293 [ 115.256536][ T400] RAX: ffffffff84f5555e RBX: ffff88812f3b11c0 RCX: ffff888139d8bb40 [ 115.256551][ T400] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888139d8bb40 [ 115.256565][ T400] RBP: ffffc9000d2ffb98 R08: ffffffff88552847 R09: 1ffffffff10aa508 [ 115.272163][ T537] Bluetooth: hci1: command 0x1003 tx timeout [ 115.276739][ T400] R10: dffffc0000000000 R11: fffffbfff10aa509 R12: 1ffffffff10aa25c [ 115.306995][ T400] R13: dffffc0000000000 R14: ffff88812f3b1dc0 R15: dffffc0000000000 [ 115.315071][ T400] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 115.324163][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.330742][ T400] CR2: 0000564822119af8 CR3: 0000000007caa000 CR4: 00000000003526b0 [ 115.338791][ T400] Call Trace: [ 115.342122][ T400] [ 115.345065][ T400] xfrm_net_exit+0x31/0x80 [ 115.349500][ T400] cleanup_net+0x6bd/0xc90 [ 115.354006][ T400] ? __cfi_cleanup_net+0x10/0x10 [ 115.358953][ T400] ? kick_pool+0xb9/0x540 [ 115.363344][ T400] process_scheduled_works+0x7f7/0x1060 [ 115.368964][ T400] worker_thread+0xc99/0x13f0 [ 115.373699][ T400] kthread+0x2c7/0x360 [ 115.377788][ T400] ? __cfi_worker_thread+0x10/0x10 [ 115.383005][ T400] ? __cfi_kthread+0x10/0x10 [ 115.387600][ T400] ret_from_fork+0x64/0xa0 [ 115.391998][ T400] ? __cfi_kthread+0x10/0x10 [ 115.396620][ T400] ret_from_fork_asm+0x1a/0x30 [ 115.401388][ T400] [ 115.404451][ T400] ---[ end trace 0000000000000000 ]--- [ 115.495967][ T400] bridge_slave_1: left allmulticast mode [ 115.501654][ T400] bridge_slave_1: left promiscuous mode [ 115.507522][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.516057][ T400] bridge_slave_0: left allmulticast mode [ 115.521706][ T400] bridge_slave_0: left promiscuous mode [ 115.528121][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.654627][ T400] tipc: Left network mode [ 115.661608][ T400] veth1_macvtap: left promiscuous mode [ 115.667200][ T400] veth0_vlan: left promiscuous mode [ 115.906965][ T400] bridge_slave_1: left allmulticast mode [ 115.912686][ T400] bridge_slave_1: left promiscuous mode [ 115.918307][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.926171][ T400] bridge_slave_0: left allmulticast mode [ 115.931798][ T400] bridge_slave_0: left promiscuous mode [ 115.937759][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.945849][ T400] bridge_slave_1: left allmulticast mode [ 115.951503][ T400] bridge_slave_1: left promiscuous mode [ 115.957260][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.964926][ T400] bridge_slave_0: left allmulticast mode [ 115.970553][ T400] bridge_slave_0: left promiscuous mode [ 115.976368][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.984223][ T400] bridge_slave_1: left allmulticast mode [ 115.989851][ T400] bridge_slave_1: left promiscuous mode [ 115.995638][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.003178][ T400] bridge_slave_0: left allmulticast mode [ 116.008818][ T400] bridge_slave_0: left promiscuous mode [ 116.014554][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.241856][ T400] veth1_macvtap: left promiscuous mode [ 116.247444][ T400] veth0_vlan: left promiscuous mode [ 116.253326][ T400] veth1_macvtap: left promiscuous mode [ 116.258829][ T400] veth0_vlan: left promiscuous mode [ 116.743602][ T400] ------------[ cut here ]------------ [ 116.749082][ T400] WARNING: CPU: 0 PID: 400 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 116.758593][ T400] Modules linked in: [ 116.762528][ T400] CPU: 0 UID: 0 PID: 400 Comm: kworker/u8:22 Tainted: G W syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 116.775764][ T400] Tainted: [W]=WARN [ 116.779566][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 116.789669][ T400] Workqueue: netns cleanup_net [ 116.794529][ T400] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 116.800088][ T400] Code: 3c 20 00 74 08 48 89 df e8 6f d1 ed fc 48 8b 3b e8 97 bc d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 e1 b7 00 cc e8 72 14 94 fc <0f> 0b e9 b0 fd ff ff e8 66 14 94 fc 0f 0b e9 18 fe ff ff e8 5a 14 [ 116.819824][ T400] RSP: 0018:ffffc9000d2ffb70 EFLAGS: 00010293 [ 116.825931][ T400] RAX: ffffffff84f5555e RBX: ffff8881248bea80 RCX: ffff888139d8bb40 [ 116.833938][ T400] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888139d8bb40 [ 116.841926][ T400] RBP: ffffc9000d2ffb98 R08: ffffffff88552847 R09: 1ffffffff10aa508 [ 116.849967][ T400] R10: dffffc0000000000 R11: fffffbfff10aa509 R12: 1ffffffff10aa25c [ 116.857988][ T400] R13: dffffc0000000000 R14: ffff8881248bf680 R15: dffffc0000000000 [ 116.866051][ T400] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 116.875007][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.883625][ T400] CR2: 0000564822119af8 CR3: 000000010cfc6000 CR4: 00000000003526b0 [ 116.891603][ T400] Call Trace: [ 116.894920][ T400] [ 116.897856][ T400] xfrm_net_exit+0x31/0x80 [ 116.902331][ T400] cleanup_net+0x6bd/0xc90 [ 116.906769][ T400] ? __cfi_cleanup_net+0x10/0x10 [ 116.911697][ T400] ? kick_pool+0xb9/0x540 [ 116.916115][ T400] process_scheduled_works+0x7f7/0x1060 [ 116.921671][ T400] worker_thread+0xc99/0x13f0 [ 116.926431][ T400] kthread+0x2c7/0x360 [ 116.930516][ T400] ? __cfi_worker_thread+0x10/0x10 [ 116.935679][ T400] ? __cfi_kthread+0x10/0x10 [ 116.940303][ T400] ret_from_fork+0x64/0xa0 [ 116.944771][ T400] ? __cfi_kthread+0x10/0x10 [ 116.949367][ T400] ret_from_fork_asm+0x1a/0x30 [ 116.954196][ T400] [ 116.957214][ T400] ---[ end trace 0000000000000000 ]--- [ 116.962992][ T400] ------------[ cut here ]------------ [ 116.968433][ T400] WARNING: CPU: 0 PID: 400 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 116.978053][ T400] Modules linked in: [ 116.981949][ T400] CPU: 0 UID: 0 PID: 400 Comm: kworker/u8:22 Tainted: G W syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 116.995280][ T400] Tainted: [W]=WARN [ 116.999078][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.009181][ T400] Workqueue: netns cleanup_net [ 117.014085][ T400] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 117.019641][ T400] Code: 3c 20 00 74 08 48 89 df e8 6f d1 ed fc 48 8b 3b e8 97 bc d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 e1 b7 00 cc e8 72 14 94 fc <0f> 0b e9 b0 fd ff ff e8 66 14 94 fc 0f 0b e9 18 fe ff ff e8 5a 14 [ 117.039295][ T400] RSP: 0018:ffffc9000d2ffb70 EFLAGS: 00010293 [ 117.045403][ T400] RAX: ffffffff84f5555e RBX: ffff88812f3b3540 RCX: ffff888139d8bb40 [ 117.053417][ T400] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888139d8bb40 [ 117.061407][ T400] RBP: ffffc9000d2ffb98 R08: ffffffff88552847 R09: 1ffffffff10aa508 [ 117.069489][ T400] R10: dffffc0000000000 R11: fffffbfff10aa509 R12: 1ffffffff10aa25c [ 117.077507][ T400] R13: dffffc0000000000 R14: ffff88812f3b4140 R15: dffffc0000000000 [ 117.085531][ T400] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 117.094521][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.101101][ T400] CR2: 0000564822119af8 CR3: 000000010cfc6000 CR4: 00000000003526b0 [ 117.109112][ T400] Call Trace: [ 117.112426][ T400] [ 117.115351][ T400] xfrm_net_exit+0x31/0x80 [ 117.119778][ T400] cleanup_net+0x6bd/0xc90 [ 117.124226][ T400] ? __cfi_cleanup_net+0x10/0x10 [ 117.129167][ T400] ? kick_pool+0xb9/0x540 [ 117.133537][ T400] process_scheduled_works+0x7f7/0x1060 [ 117.139087][ T400] worker_thread+0xc99/0x13f0 [ 117.143811][ T400] kthread+0x2c7/0x360 [ 117.147885][ T400] ? __cfi_worker_thread+0x10/0x10 [ 117.153038][ T400] ? __cfi_kthread+0x10/0x10 [ 117.157632][ T400] ret_from_fork+0x64/0xa0 [ 117.162032][ T400] ? __cfi_kthread+0x10/0x10 [ 117.166687][ T400] ret_from_fork_asm+0x1a/0x30 [ 117.171472][ T400] [ 117.174552][ T400] ---[ end trace 0000000000000000 ]---