last executing test programs: 22m0.507096027s ago: executing program 2 (id=162): r0 = io_uring_setup(0x6b9e, &(0x7f00000005c0)={0x0, 0x2f5d, 0x800, 0x3, 0x197}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noxattr}], [], 0x6b}}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x0, 0x0}, 0x20) 22m0.158372072s ago: executing program 2 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000005000000000000000400000000000000a9aa043d46d8b49ef934dc017f7ecd5f7bd2b0a6bd27e98c4101a949e1aa8a3e4b029af49d", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x98, 0x9, 0x2, 0x5, 0xb, "0f5201b70f5b43345a9187b067ccfea511c280"}) r2 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000040)=0x80, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 21m58.151451664s ago: executing program 2 (id=175): write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x801) r0 = socket$inet6(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x36070400) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @any, 0xfffe, 0x1}, 0xe) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4d7e00000000000000001400000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r7, @ANYBLOB="06000600020000000600040000000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) syz_io_uring_setup(0x1338, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 21m57.759016634s ago: executing program 2 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80105013, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1, 0x6, 0x7}, 0x20) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004240)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x2, 0x400c8460, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) (async) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x2, 0x400c8460, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xe0000000, {0x0, 0x0, 0x400, 0xfffffffffffffffc, 0x200, 0x6f, {0x5, 0xfffffffffffffffc, 0x4, 0x1000007, 0x3, 0x4, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r5, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, r2, r5) setresgid(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r6, &(0x7f0000001380)=""/4096, 0x1000) lseek(r6, 0x401, 0x0) (async) lseek(r6, 0x401, 0x0) 21m55.866819461s ago: executing program 2 (id=185): mlockall(0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x5, 0x1, 0x1, 0xe0a, 0x7f, "3f3c5e0000ff77dcfffffffff903ffee00", 0xb1, 0x5}) syz_usb_connect(0x5, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0xa4, 0x22, 0x94, 0x40, 0xab4, 0x14, 0xc109, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x11, 0x48, 0x0, 0xc6, 0x66, 0x64}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd090000850100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xffffffffffffffa5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x14}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440c5}, 0x240408d0) 21m51.138954097s ago: executing program 2 (id=201): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r1 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x78) statx(r2, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) io_setup(0xffff, &(0x7f0000000000)) io_setup(0x8f0, &(0x7f0000002400)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x1c}, {r1, 0x6c2}], 0x2, 0x10000) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) add_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="9ae117c2063ef4d72eae7469", 0xc, r3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20041914ceb2fc569f924024e5bfdba2f5bc27990086ee20029d5c52a15622a22d179758b169bd0271c99a9fd435986a0a1f70696ea17e2be0f0a507b96de23e96fe99fea848f84037841f1885eb", @ANYRES16=r1, @ANYRES64=r0, @ANYRES16=0x0], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000009c00)={0x2c, &(0x7f0000000080)={0x40, 0xf, 0x15, "105854b68f061acea375924a30592b6d0209e8e826"}, 0x0, 0x0, 0x0, 0x0}) 21m36.043988466s ago: executing program 32 (id=201): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r1 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x78) statx(r2, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) io_setup(0xffff, &(0x7f0000000000)) io_setup(0x8f0, &(0x7f0000002400)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x1c}, {r1, 0x6c2}], 0x2, 0x10000) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) add_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="9ae117c2063ef4d72eae7469", 0xc, r3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20041914ceb2fc569f924024e5bfdba2f5bc27990086ee20029d5c52a15622a22d179758b169bd0271c99a9fd435986a0a1f70696ea17e2be0f0a507b96de23e96fe99fea848f84037841f1885eb", @ANYRES16=r1, @ANYRES64=r0, @ANYRES16=0x0], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000009c00)={0x2c, &(0x7f0000000080)={0x40, 0xf, 0x15, "105854b68f061acea375924a30592b6d0209e8e826"}, 0x0, 0x0, 0x0, 0x0}) 8.342503497s ago: executing program 0 (id=4279): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@netrom, @bcast, @null, @default, @remote, @default, @default, @bcast]}, &(0x7f0000000200)=0x48, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r5, 0x0) socket$netlink(0x10, 0x3, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000340)=""/237, 0xed, 0x3, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000001400)="63626d4e4a3de56a47f1fdb3cbb9da760b6e3898f4cf0000b5941b935eb9e20bc828ffec9f4d0297ee651d8dc0a1970b67129192963f4d3c2874e36ef37ea74c5110fbf843ddf6cb1e129ff7bc23dd295d6d8b43aae8dc51c7f5569f411b17646b28350ff05ae5ef6454f0987648744f372fc81555ff319d1c7fd00ec279f750fb43ecfa401a2a9b75e684a9a9f0d3303eb5efe18e5ec805c6471139bea9b87740", 0xa1, 0x9, &(0x7f0000000000)) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xfffffffc, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001340)=@userptr={0x6, 0xa, 0x4, 0x70000, 0x6, {0x0, 0x2710}, {0x4, 0xc, 0xce, 0x9, 0x77, 0x0, "0080ca4f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x5}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r7, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 7.702720006s ago: executing program 3 (id=4283): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000180)={0x10001, 0x1, 0x9, 0x80000000}, 0x10) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0xa, @capture={0x0, 0x1, {0x2, 0x10000}, 0x402b2771, 0x80}}) ioctl$TUNSETIFF(r0, 0x8004b709, 0x0) 7.640488621s ago: executing program 4 (id=4284): io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r7 = getpgrp(0xffffffffffffffff) sched_setattr(r7, &(0x7f0000000140)={0x38, 0x0, 0x20, 0x6, 0x3, 0x4, 0x5, 0x9, 0xe, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 7.544809574s ago: executing program 3 (id=4285): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$caif_stream(0x25, 0x1, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000001c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x7804, 0x0, 0x0) 6.948631001s ago: executing program 0 (id=4286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x68, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x4b, 0x33, @action={{}, @sp_mp_open={0xf, 0x1, {0x400, {0x1, 0x5, [{0x24, 0x1}, {0x6}, {0x4, 0x1}, {0x4}, {0xc}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x800, 0x0, 0x7, 0x0, {0x1000, 0x542, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x6, 0x10}}}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 6.176767386s ago: executing program 0 (id=4288): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0x2000, 0x3000, 0xfec00000, 0xeeef0000], 0x7fffffffffffffff, 0x3d}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xa, 0xffff}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = dup3(0xffffffffffffffff, r2, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 5.734816557s ago: executing program 3 (id=4290): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) r0 = request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='syz', 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x1}, r1) request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='keyring\x00', r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x1ff) r3 = request_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='big_key\x00', r0) keyctl$update(0x2, r3, &(0x7f0000000380)="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", 0xfc) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14, 0x80000) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000500)=0x81, 0x4) r5 = request_key(&(0x7f0000000540)='encrypted\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='(\x00', r1) r6 = add_key$user(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)="130ae3549d4c309c7db2219185dc684d04e54cbd0a76a2967c695ee9466e6323f6e4484872f72ab28f47c6db434c609e3a13522f9b05e631043f4d2044d2f07ee4db9a74667b3f3bef762367c1b118ca771d80ae7739c13c", 0x58, r1) connect$inet(r2, &(0x7f0000000700)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r7 = memfd_create(&(0x7f0000000740)='$@\x00', 0x4) listen(r4, 0x3ff) r8 = request_key(&(0x7f0000000800)='id_resolver\x00', &(0x7f0000000840)={'syz', 0x3}, &(0x7f0000000880)='keyring\x00', r0) keyctl$search(0xa, r5, &(0x7f0000000780)='user\x00', &(0x7f00000007c0)={'syz', 0x3}, r8) r9 = add_key(&(0x7f00000008c0)='cifs.spnego\x00', &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)="684a08cb04819002eb9527d2254270f1b05e50872ea91bfbaae1c2c9e60e31914b7b22151eedb2b53b964194ceb780c5549a29ecba3005370d9fba24738da8e1d81f13bbf4815b125d51a861a250059e42dacb972c46f236685c1015ede3f4d83c3e63e0afb9f9eb3c2bf93fc367005c41c58c6704dc7b70dcab32e77bd2ce7b1495035c1ceae71757a35d4d3efe42d08bcd4b53794cb99e7c749c2199f5d968cf971813e32101b516e9c6bc1feea42aad3830332487bd8076e6b646bfd1e9bf1f09f657", 0xc4, r8) r10 = signalfd4(r7, &(0x7f0000000a40)={[0x76]}, 0x8, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r10, r11}, 0xc) recvmmsg(r10, &(0x7f0000000d40)=[{{&(0x7f0000000b80)=@un=@abs, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/122, 0x7a}, {&(0x7f0000000c80)=""/122, 0x7a}], 0x2}, 0x5}], 0x1, 0x142, 0x0) keyctl$assume_authority(0x10, r9) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000d80), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r12, 0x40045569, 0xa) add_key(&(0x7f0000000dc0)='logon\x00', &(0x7f0000000e00)={'syz', 0x1}, 0x0, 0x0, r5) add_key$user(&(0x7f0000000e40), &(0x7f0000000e80)={'syz', 0x3}, &(0x7f0000000ec0)="c2d6bae3e40104f95fc236b4bf1466241a29b43479f822fe3cb8c3e420d36160520ed3be806381b58ca3bba12239b4d415bd4ba3fe48e5424fe06df994147b22c7b418ca5306f563090a8f106c890647ac97ae64c2acf7994d78f7d79c61dd9fb86d919e87fd9cd7c8368a6f420cf096d1fa560f1d3af933dc52ec2e57130953bd0198895894ad8937decc5f9e2307e144ad115c794dafcc777015e159dd84aec2d29bf12fc98f2fce2f6b8e173f6a283c3ae83a24f67ace284634b10b25e78c117d5f1d03698010fcce5600693f7ef77f8dabe0753f81b6db8d58f54d7e2e6ad43f6820f83ad118e1a4ce14ebb0", 0xee, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, &(0x7f0000000fc0)=@keyring={'key_or_keyring:', r6}) socket$inet(0x2, 0x1, 0x0) 5.649147019s ago: executing program 3 (id=4291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xc, &(0x7f0000000080)={0x8, 0x22}) r1 = getpid() prctl$PR_MCE_KILL(0x35, 0x1, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = io_uring_setup(0x2bf6, &(0x7f0000000440)={0x0, 0x40000004, 0x0, 0x1, 0xa}) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000da6e41b0c886d61900010929bd700080000000021810000000fd010000000008000100a5141400080005000a010102a6c70f8be79f4c2efc00000000000000000000000000000006"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902"], 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x22402, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x1, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x5, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0xfffffffd, 0x80008071, 0xffff8001, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x80000001, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd6, 0xea4, 0x0, 0x4, 0x7, 0xa, 0x6, 0x400, 0x8000, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x8, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x10, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x7, 0x3], [0x7, 0x408, 0x3ff, 0x7, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x0, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x8, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x5, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x3, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r11, 0xffffffffffffffff, 0x0) 5.614139886s ago: executing program 1 (id=4292): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4008004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x310}}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x0, [{0x8, 0x5, 0x9}, {0x6, 0x4, 0x40}]}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x9e73}}, @const={0xf, 0x0, 0x0, 0xa, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x5}, {0x6, 0x2}]}, @union={0xa, 0x3, 0x0, 0x5, 0x0, 0x3, [{0xa, 0x0, 0x1}, {0x5, 0x3, 0x8}, {0x6, 0x2, 0x400}]}, @fwd={0x3}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x61, 0x61, 0x0, 0x30, 0x0, 0x0, 0x5f]}}, &(0x7f0000000580)=""/192, 0x101, 0xc0, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x21, 0x0, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x4242, 0x11a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) getpeername$netlink(r6, &(0x7f0000000180), &(0x7f0000000300)=0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x220240, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000001700)={0x0, 0x4, 0x7, 0x292, 0x401, 0x2b}, &(0x7f0000001740)=0x14) 4.719593924s ago: executing program 4 (id=4294): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004340)='/proc/keys\x00', 0x0, 0x0) r1 = socket(0x22, 0x2, 0x1) sendfile(r1, r0, 0x0, 0x702800000000000) (fail_nth: 3) 4.590950765s ago: executing program 4 (id=4296): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0xfffffffb, 0x1, 0x0, 0x10000, 0x0, 0x0, {0x3}}) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 4.261607202s ago: executing program 1 (id=4297): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, 0x0) 4.258529938s ago: executing program 0 (id=4298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x68, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x4b, 0x33, @action={{}, @sp_mp_open={0xf, 0x1, {0x400, {0x1, 0x5, [{0x24, 0x1}, {0x6}, {0x4, 0x1}, {0x4}, {0xc}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x800, 0x0, 0x7, 0x0, {0x1000, 0x542, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x6, 0x10}}}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 4.19973777s ago: executing program 0 (id=4299): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0xfffffffd, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd06a285b300", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b0900ceb155f0"}}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.194866281s ago: executing program 1 (id=4300): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'sit0\x00', @random="e80300001000"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20000023893) (fail_nth: 3) shutdown(r3, 0x2) recvmmsg(r4, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/31, 0x1f}], 0x1, &(0x7f0000003780)=""/4078, 0xfee}, 0x404}], 0x1, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, &(0x7f0000000080)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0}, &(0x7f0000000380)=0x40) 3.52805125s ago: executing program 4 (id=4301): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x62) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200021, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xdf}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x120, 0x4c, 0x1a, 0x0, 0x73, 0x220, 0x258, 0x258, 0x220, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73, 0x0, 0x2}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x350) r6 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xab}}, 0x0}, 0x94) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900e7ff0300000007fdd411ef86ea262b576a157d00000000", 0x39}], 0x1) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000480)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) 3.35105835s ago: executing program 5 (id=4303): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000005000000000000000400000000000000a9aa043d46d8b49ef934dc017f7ecd5f7bd2b0a6bd27e98c4101a949e1aa8a3e4b029af49d", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="9fe71077a73dd4a9dcdfa1c64e1be29a7432fd48040040732d71883c7b175319e1beab3acbcd4b7d060aacd565099655b48fa28ec3a2d7c132f4f037d8909c0dc870825217c8f36b61722bc76edafeed4963660e8b8f5f0ab2efb7b9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @remote}) 2.859877165s ago: executing program 1 (id=4304): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'sit0\x00', @random="e80300001000"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20000023893) shutdown(r3, 0x2) recvmmsg(r4, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/31, 0x1f}], 0x1, &(0x7f0000003780)=""/4078, 0xfee}, 0x404}], 0x1, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, &(0x7f0000000080)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0}, &(0x7f0000000380)=0x40) 2.858833814s ago: executing program 3 (id=4305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x0, 0x2, 0x0, "343d70dde51f0900", 0xb5315258}) 2.663127415s ago: executing program 5 (id=4306): pwrite64(0xffffffffffffffff, &(0x7f0000000000)="1ac66cd5f7db0bf7a9d7e071a72e6e736bbab2a36de6e2162102fccdf2880970af1e91685ce7d75901a8bdd09fb1c9d91c82f713669bb97a3a6f4a9ac69c8707d21db0b1e6dd5bdbda954089977024a6c6a063679cb4f445f40f68f33da5c1fddcefc05b1763d1388dc6f53c19780a2ebaf7f3fccead253969bfa154c848e5d666fd03be7875424fee35809433cdebeb652af89a2bcde8894ae3eb1354a563bd8166c2600ecc3cd0d8eb688c0ce961afdc13bebfe551542740d46319934762306e94f87d105e5dcc09be73b0b66f5953772ee66b35", 0xd5, 0x1) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x501002, 0x100) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0x2, 0x0, 0x38, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup=r0, r0, 0x21, 0x0, 0xffffffffffffffff, @void, @value=r0, @void, @void, r2}, 0x20) r3 = fcntl$getown(r1, 0x9) sched_setscheduler(r3, 0x6, &(0x7f0000000340)=0x80) (async) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000440)={0x6, &(0x7f0000000400)=[{0x7, 0x1a, 0x5, 0x9}, {0x9000, 0x6, 0x95, 0x8}, {0x7fff, 0xad, 0xfe, 0x80000001}, {0x6, 0x7, 0x9, 0x2}, {0x6, 0x9, 0x8, 0xff}, {0x6c3, 0xc, 0x1, 0xeb}]}) (async) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000004c0)={0x3b, 0x4, [0x4]}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl(r4, 0x1, &(0x7f0000000540)="525ec76fd73251a6f845078cea0428eb31bd1bf95211478977d5241d1ac225e08539edd84229df5694759016dc30c9b0981d8bef75da59a51c95d9a3f435dd642d0fac8f13f3985937810b4e7d1df8643ecced2aca49f6d024eee3b44709a22a96445670453490a80e243f9d1dfe176945f408ca8a8babb36d0357ba793c86d22198f485dd1eaf5f201129428b8e88e93a544d") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000600), 0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000780)={0x1, 0x2, 0x1000, 0x21, &(0x7f0000000640)="6b2dceb797a36eb2a80e83b026a9e60fda79d10c635c23303a62c62b02f902f710", 0xe4, 0x0, &(0x7f0000000680)="ffe802a4bf559a169eb6d252661b5d83e1a80db6fdc69112d5d8b4ccebdb5cb8e268122b8228359855e1cd39062d811132253db62156e2b957502fcd1824ecaa99cdfaf1eb89856ee746010ab14493637f61fccbddc0e20e7026b7624d0ca0ce6ee1fe72a7f9d9b1f1f306a904642595812f636a86fc31046425fa2c916c1e807ed28c1f957d85aa35d55c304149f578bdf6b6c34d07fb6fb774f69d1f2b157676dc6dc88b28a1786e17c4c80e87b6ed39460f8436b355bda4363304e3294a15ca3e174dfc84c973fe0db2f7395996f97091671aaf6dcec0006d0137bb9992ddde1f2c60"}) (async) prctl$PR_SVE_SET_VL(0x32, 0x27eb9) (async) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000800)=""/150) (async) read$FUSE(r0, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002900)={0x10, 0x0, r5}, 0x10) (async) fchdir(r4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002940), 0x410100, 0x0) (async) prctl$PR_SVE_SET_VL(0x32, 0x307cf) open_by_handle_at(r4, &(0x7f0000002980)=@OVL_FILEID_V1={0x65, 0xf8, {'\x00', {0x0, 0xfb, 0x62, 0x0, 0xfd, "32e8ebc740f6fde284669b9c649b8eea", "0fb9a7957551d16f69b0e3439afeef0cf01099aa1b9428a1f68315abae7102b58a3942a4b312588356c7d4142bf0a6d15fd2a986a74ee1d9f6704a10191233f8cf0aab53419ad737b8b56b0771"}}}, 0x800) (async) syz_open_dev$MSR(&(0x7f0000002a00), 0x9, 0x0) (async) prctl$PR_SVE_SET_VL(0x32, 0x2a512) (async) lgetxattr(&(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80)=@random={'user.', '/dev/iommu\x00'}, &(0x7f0000002ac0)=""/135, 0x87) r6 = syz_open_dev$video4linux(&(0x7f0000002b80), 0x1, 0x40440) ioctl$VIDIOC_G_FBUF(r6, 0x8030560a, &(0x7f0000003bc0)={0x80, 0x8, &(0x7f0000002bc0)="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", {0x1000, 0x0, 0x35323645, 0x7, 0x8, 0x7, 0x3, 0x8}}) (async) prctl$PR_SVE_SET_VL(0x32, 0x38d65) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003c00)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 2.535043075s ago: executing program 3 (id=4307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sched_setscheduler(0x0, 0x1, &(0x7f000001b140)=0x89) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) gettid() pread64(r3, 0x0, 0x0, 0x200) fsopen(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r5 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xc397e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30bdeb7fcf0000000408da180000000000000000070008090900010073797a3000000000050003001100000006000240"], 0x30}, 0x1, 0x0, 0x0, 0x1000}, 0x40001) 2.318012728s ago: executing program 5 (id=4308): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000100), 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@mcast2, @mcast1, @mcast1, 0x8001, 0x6, 0x6, 0x400, 0x3, 0x2, r3}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r10}) close_range(r5, r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000240)="8b025608a4040400", 0x8) connect$inet(r11, &(0x7f0000000400)={0x2, 0x0, @empty}, 0x10) 2.316279963s ago: executing program 4 (id=4309): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0x2000, 0x3000, 0xfec00000, 0xeeef0000], 0x7fffffffffffffff, 0x3d}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xa, 0xffff}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = dup3(0xffffffffffffffff, r1, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x810) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.591434862s ago: executing program 1 (id=4310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x68, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x4b, 0x33, @action={{}, @sp_mp_open={0xf, 0x1, {0x400, {0x1, 0x5, [{0x24, 0x1}, {0x6}, {0x4, 0x1}, {0x4}, {0xc}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x800, 0x0, 0x7, 0x0, {0x1000, 0x542, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x6, 0x10}}}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 1.551505213s ago: executing program 4 (id=4311): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000402f17340000000000000109022400010000000909040000010300030009210101000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='reiserfs\x00', 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x0, 0x4e, "ccdbe7189742a006438c39988118832a82bc5c140321524a5a8d7a984619a2a7f22cbfe85a698a2e6a30d3d9ffedd4f4fd34a51d25ceb5c38f531c43fbe1a2a75a8fe2f704f72a73c8001ee76bd3"}) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "20de3f42"}]}}, 0x0}, 0x0) 1.469478561s ago: executing program 1 (id=4312): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) rseq(0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0xf5000000, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000400010001000000"], 0x1c}}, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) gettid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 1.418199433s ago: executing program 5 (id=4313): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 1.324048862s ago: executing program 5 (id=4314): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000004c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="710601010101"], 0x6) 1.151084219s ago: executing program 0 (id=4315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005140119baaa31de166f79ad6bb0d0580026bd7000fbdbdf2508000100010000000800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24008857}, 0x4000808) getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) prctl$PR_SET_THP_DISABLE(0x42, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, 0x0, 0x801) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=4316): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x50, 0x1, 0x0, "d02067046edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac"}) kernel console output (not intermixed with test programs): [ T5965] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1307.695002][T20110] autofs: Unknown parameter 'fd0x0000000000000000' [ 1307.815161][ T5965] usb 6-1: Using ep0 maxpacket: 32 [ 1307.822739][ T5965] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 1307.831335][ T5965] usb 6-1: config 0 has no interface number 0 [ 1307.837872][ T5965] usb 6-1: config 0 interface 151 has no altsetting 0 [ 1307.846747][ T5965] usb 6-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 1307.856994][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.121663][ T30] audit: type=1400 audit(1766131936.308:1480): avc: denied { listen } for pid=20094 comm="syz.0.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1308.185217][ T5965] usb 6-1: Product: syz [ 1308.198727][ T5965] usb 6-1: Manufacturer: syz [ 1308.219021][ T5965] usb 6-1: SerialNumber: syz [ 1308.228134][ T5965] usb 6-1: config 0 descriptor?? [ 1308.240933][ T5965] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 1308.456314][ T5965] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1308.480463][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1308.513191][ T5965] sq905c 6-1:0.151: Get version command failed [ 1308.623897][ T5965] sq905c 6-1:0.151: probe with driver sq905c failed with error -71 [ 1308.666453][ T5965] usb 6-1: USB disconnect, device number 88 [ 1309.141872][T20118] sctp: [Deprecated]: syz.0.3822 (pid 20118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1309.141872][T20118] Use struct sctp_sack_info instead [ 1309.225754][ T30] audit: type=1400 audit(1766131937.393:1481): avc: denied { ioctl } for pid=20116 comm="syz.0.3822" path="socket:[70730]" dev="sockfs" ino=70730 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1309.335200][T20123] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1309.432836][T20125] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1309.462011][ T7505] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1309.477553][T20125] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1309.522457][T20126] lo speed is unknown, defaulting to 1000 [ 1309.544500][T20127] bridge: RTM_NEWNEIGH with invalid ether address [ 1309.697078][ T7505] usb 2-1: Using ep0 maxpacket: 32 [ 1309.796353][ T7505] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1309.845377][ T7505] usb 2-1: config 0 has no interface number 0 [ 1309.885421][ T7505] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1309.911535][T20132] /dev/nullb0: Can't open blockdev [ 1310.354430][ T7505] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1310.376380][ T7505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.418245][ T7505] usb 2-1: Product: syz [ 1310.424597][ T7505] usb 2-1: Manufacturer: syz [ 1310.448675][ T7505] usb 2-1: SerialNumber: syz [ 1310.474145][ T7505] usb 2-1: config 0 descriptor?? [ 1310.490491][T20119] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1310.501501][T20137] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1310.542783][ T30] audit: type=1400 audit(1766131938.637:1482): avc: denied { ioctl } for pid=20138 comm="syz.5.3828" path="socket:[70648]" dev="sockfs" ino=70648 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1311.624336][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1311.630654][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.654922][T20119] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1312.693608][T20119] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1312.921020][T20137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.928587][T20137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.948447][ T7505] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1312.959358][T20137] bridge0: entered allmulticast mode [ 1313.045692][T20149] netlink: 'syz.3.3827': attribute type 2 has an invalid length. [ 1313.120031][T20148] FAULT_INJECTION: forcing a failure. [ 1313.120031][T20148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.136776][ T7505] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1313.150090][T20137] bridge_slave_1: left allmulticast mode [ 1313.155921][T20137] bridge_slave_1: left promiscuous mode [ 1313.164006][T20137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.312018][T20148] CPU: 1 UID: 0 PID: 20148 Comm: syz.4.3830 Tainted: G L syzkaller #0 PREEMPT(full) [ 1313.312046][T20148] Tainted: [L]=SOFTLOCKUP [ 1313.312052][T20148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1313.312061][T20148] Call Trace: [ 1313.312067][T20148] [ 1313.312074][T20148] dump_stack_lvl+0x16c/0x1f0 [ 1313.312098][T20148] should_fail_ex+0x512/0x640 [ 1313.312122][T20148] _copy_from_iter+0x2a4/0x16c0 [ 1313.312162][T20148] ? __alloc_skb+0x220/0x410 [ 1313.312184][T20148] ? __alloc_skb+0x35d/0x410 [ 1313.312205][T20148] ? __pfx__copy_from_iter+0x10/0x10 [ 1313.312228][T20148] ? netlink_autobind.isra.0+0x158/0x370 [ 1313.312254][T20148] netlink_sendmsg+0x820/0xdd0 [ 1313.312278][T20148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1313.312305][T20148] ____sys_sendmsg+0xa5d/0xc30 [ 1313.312332][T20148] ? copy_msghdr_from_user+0x10a/0x160 [ 1313.312347][T20148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1313.312373][T20148] ? ___sys_sendmsg+0x94/0x1d0 [ 1313.312391][T20148] ___sys_sendmsg+0x134/0x1d0 [ 1313.312410][T20148] ? __pfx____sys_sendmsg+0x10/0x10 [ 1313.312459][T20148] __sys_sendmsg+0x16d/0x220 [ 1313.312475][T20148] ? __pfx___sys_sendmsg+0x10/0x10 [ 1313.312506][T20148] do_syscall_64+0xcd/0xf80 [ 1313.312528][T20148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.312544][T20148] RIP: 0033:0x7f8c4cd8f749 [ 1313.312556][T20148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1313.312572][T20148] RSP: 002b:00007f8c4db49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1313.312587][T20148] RAX: ffffffffffffffda RBX: 00007f8c4cfe6090 RCX: 00007f8c4cd8f749 [ 1313.312597][T20148] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1313.312607][T20148] RBP: 00007f8c4db49090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.312615][T20148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.312625][T20148] R13: 00007f8c4cfe6128 R14: 00007f8c4cfe6090 R15: 00007ffff53b8e28 [ 1313.312647][T20148] [ 1313.833345][T20137] bridge_slave_0: left allmulticast mode [ 1314.326080][T20137] bridge_slave_0: left promiscuous mode [ 1314.670798][T20137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.679592][ T7426] usb 2-1: USB disconnect, device number 89 [ 1314.795697][T20163] FAULT_INJECTION: forcing a failure. [ 1314.795697][T20163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1314.860273][T20163] CPU: 1 UID: 0 PID: 20163 Comm: syz.1.3835 Tainted: G L syzkaller #0 PREEMPT(full) [ 1314.860291][T20163] Tainted: [L]=SOFTLOCKUP [ 1314.860295][T20163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1314.860301][T20163] Call Trace: [ 1314.860305][T20163] [ 1314.860309][T20163] dump_stack_lvl+0x16c/0x1f0 [ 1314.860328][T20163] should_fail_ex+0x512/0x640 [ 1314.860350][T20163] _copy_from_iter+0x2a4/0x16c0 [ 1314.860368][T20163] ? _copy_from_iter+0x161/0x16c0 [ 1314.860384][T20163] ? __pfx__copy_from_iter+0x10/0x10 [ 1314.860401][T20163] ? __pfx__copy_from_iter+0x10/0x10 [ 1314.860419][T20163] copy_page_from_iter+0xde/0x180 [ 1314.860437][T20163] skb_copy_datagram_from_iter+0x2a0/0x740 [ 1314.860457][T20163] tun_get_user+0x1850/0x3cc0 [ 1314.860480][T20163] ? __pfx_tun_get_user+0x10/0x10 [ 1314.860495][T20163] ? file_has_perm+0x27b/0x350 [ 1314.860506][T20163] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1314.860527][T20163] ? find_held_lock+0x2b/0x80 [ 1314.860544][T20163] ? tun_get+0x191/0x370 [ 1314.860560][T20163] tun_chr_write_iter+0xdc/0x210 [ 1314.860577][T20163] vfs_write+0x7d3/0x11d0 [ 1314.860591][T20163] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1314.860607][T20163] ? __pfx_vfs_write+0x10/0x10 [ 1314.860622][T20163] ? __rcu_read_unlock+0x2b5/0x5a0 [ 1314.860643][T20163] ksys_write+0x12a/0x250 [ 1314.860656][T20163] ? __pfx_ksys_write+0x10/0x10 [ 1314.860673][T20163] do_syscall_64+0xcd/0xf80 [ 1314.860687][T20163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.860698][T20163] RIP: 0033:0x7f704c98e1ff [ 1314.860707][T20163] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1314.860717][T20163] RSP: 002b:00007f704d759000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1314.860728][T20163] RAX: ffffffffffffffda RBX: 00007f704cbe5fa0 RCX: 00007f704c98e1ff [ 1314.860735][T20163] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 1314.860741][T20163] RBP: 00007f704d759090 R08: 0000000000000000 R09: 0000000000000000 [ 1314.860747][T20163] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000002 [ 1314.860753][T20163] R13: 00007f704cbe6038 R14: 00007f704cbe5fa0 R15: 00007ffd0478da88 [ 1314.860766][T20163] [ 1315.279102][T20170] binder: 20167:20170 ioctl c0306201 0 returned -14 [ 1315.297208][T20155] geneve2: entered promiscuous mode [ 1315.428315][T20155] geneve2: entered allmulticast mode [ 1316.351769][ T30] audit: type=1400 audit(1766131944.053:1483): avc: denied { getopt } for pid=20161 comm="syz.4.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1316.653669][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3838'. [ 1316.667202][T20182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3838'. [ 1317.729220][T20187] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3840'. [ 1318.014237][ T3820] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1318.130546][ T30] audit: type=1400 audit(1766131945.728:1484): avc: denied { getopt } for pid=20191 comm="syz.5.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1318.141973][T20192] tipc: Enabling of bearer rejected, failed to enable media [ 1318.261317][T20189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3841'. [ 1319.660225][ T5965] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1319.693121][ T5995] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1320.120270][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 1320.157937][ T30] audit: type=1400 audit(1766131947.627:1485): avc: denied { ioctl } for pid=20206 comm="syz.5.3847" path="socket:[71920]" dev="sockfs" ino=71920 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1320.196829][ T5965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.208682][ T5965] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1320.218161][ T5995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.449093][T20214] xt_socket: unknown flags 0x4c [ 1321.057973][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.066782][ T5995] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1321.149070][ T5965] usb 2-1: config 0 descriptor?? [ 1321.236270][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.303525][ T5965] usbhid 2-1:0.0: can't add hid device: -22 [ 1321.319532][ T5995] usb 5-1: config 0 descriptor?? [ 1321.326688][ T5965] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1321.798308][T20205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1321.804094][ T30] audit: type=1400 audit(1766131949.161:1486): avc: denied { write } for pid=20204 comm="syz.4.3845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1321.899981][ T5965] usb 2-1: USB disconnect, device number 90 [ 1322.186281][T20205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.307844][T20205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.421649][T20238] /dev/nullb0: Can't open blockdev [ 1322.527440][ T5995] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 1322.613345][ T5995] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0018/input/input90 [ 1323.182471][ T5995] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1323.309776][ T5995] usb 5-1: USB disconnect, device number 95 [ 1323.380599][T20249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3856'. [ 1324.626822][ T30] audit: type=1400 audit(1766131951.808:1487): avc: denied { getopt } for pid=20254 comm="syz.4.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1324.843785][ T30] audit: type=1400 audit(1766131951.986:1488): avc: denied { bind } for pid=20247 comm="syz.1.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1324.889555][T20261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=20261 comm=syz.5.3860 [ 1325.461269][T20269] netlink: 'syz.0.3861': attribute type 1 has an invalid length. [ 1325.574209][T20269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3861'. [ 1325.590936][ T7688] : No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1325.699484][T20277] /dev/nullb0: Can't open blockdev [ 1326.653311][T20278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3863'. [ 1326.913741][T20289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=20289 comm=syz.5.3867 [ 1327.372624][T20292] geneve2: entered promiscuous mode [ 1327.377948][T20292] geneve2: entered allmulticast mode [ 1328.589939][T20304] block device autoloading is deprecated and will be removed. [ 1328.975629][T20310] /dev/nullb0: Can't open blockdev [ 1329.005840][ T5995] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1329.613175][ T5995] usb 1-1: Using ep0 maxpacket: 8 [ 1329.619733][ T5995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.630294][ T5995] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1329.639583][ T5995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.650844][ T5995] usb 1-1: config 0 descriptor?? [ 1329.664939][ T5995] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1330.287918][ T30] audit: type=1400 audit(1766131957.084:1489): avc: denied { setopt } for pid=20324 comm="syz.1.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1330.591817][ T30] audit: type=1400 audit(1766131957.383:1490): avc: denied { getopt } for pid=20301 comm="syz.0.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1330.592000][T20302] netlink: zone id is out of range [ 1330.639693][ T5925] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 1330.726541][T20333] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3872'. [ 1330.792854][T20334] /dev/nullb0: Can't open blockdev [ 1330.803415][ T5925] usb 5-1: device descriptor read/64, error -71 [ 1331.089306][ T5925] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 1331.302318][ T5925] usb 5-1: device descriptor read/64, error -71 [ 1331.375136][ T30] audit: type=1400 audit(1766131958.112:1491): avc: denied { read } for pid=20332 comm="syz.3.3880" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1331.401504][T20335] team0 (unregistering): Port device team_slave_0 removed [ 1331.408739][ T30] audit: type=1400 audit(1766131958.150:1492): avc: denied { open } for pid=20332 comm="syz.3.3880" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1331.434477][ T5925] usb usb5-port1: attempt power cycle [ 1331.441283][T18380] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1331.441473][ T30] audit: type=1400 audit(1766131958.150:1493): avc: denied { ioctl } for pid=20332 comm="syz.3.3880" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1331.488103][T20335] team0 (unregistering): Port device team_slave_1 removed [ 1331.542321][ T5995] gspca_vc032x: reg_w err -71 [ 1331.547581][ T5995] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 1331.559232][ T5995] usb 1-1: USB disconnect, device number 121 [ 1331.576100][ T30] audit: type=1400 audit(1766131958.309:1494): avc: denied { write } for pid=20350 comm="syz.1.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1331.638428][T18380] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1331.651228][T18380] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1331.673785][T18380] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1331.695537][T18380] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1331.714513][T18380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.732300][T18380] usb 6-1: Product: syz [ 1331.747267][T18380] usb 6-1: Manufacturer: syz [ 1331.774360][T18380] usb 6-1: SerialNumber: syz [ 1331.805693][ T5925] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 1331.858757][ T5925] usb 5-1: device descriptor read/8, error -71 [ 1332.761625][ T5925] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 1332.789794][ T5925] usb 5-1: device descriptor read/8, error -71 [ 1333.140161][ T5925] usb usb5-port1: unable to enumerate USB device [ 1333.374738][T20368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3889'. [ 1333.438454][T20370] geneve2: entered promiscuous mode [ 1333.443852][T20370] geneve2: entered allmulticast mode [ 1333.791556][T20378] geneve2: entered promiscuous mode [ 1333.797799][T20378] geneve2: entered allmulticast mode [ 1334.395346][T20392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1334.422407][T20392] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1334.720230][ T30] audit: type=1400 audit(1766131961.246:1495): avc: denied { getopt } for pid=20391 comm="syz.1.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1335.165847][ T5995] IPVS: starting estimator thread 0... [ 1335.272313][T20399] IPVS: using max 46 ests per chain, 110400 per kthread [ 1335.437865][T20404] netlink: 'syz.3.3899': attribute type 1 has an invalid length. [ 1335.561715][T20403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.578900][T20404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3899'. [ 1336.062925][T20403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.210222][T20415] netlink: zone id is out of range [ 1336.391057][ T5925] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1336.595949][ T5925] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1336.617328][ T5925] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1336.628592][ T5925] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1336.637905][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.765169][ T5995] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1336.890510][ T5925] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1336.902400][T18380] usb 6-1: 0:2 : does not exist [ 1336.909851][ T5925] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input91 [ 1336.933700][ T5925] input: failed to attach handler kbd to device input91, error: -5 [ 1336.943646][T18380] usb 6-1: USB disconnect, device number 89 [ 1336.959317][ T5995] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1336.972148][ T5995] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1337.007152][ T5925] usb 5-1: USB disconnect, device number 100 [ 1337.015136][ T5995] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1337.039061][ T5995] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1337.044243][ T30] audit: type=1400 audit(1766131963.426:1496): avc: denied { write } for pid=20420 comm="syz.5.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1337.071055][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.098711][T20423] geneve2: entered promiscuous mode [ 1337.104064][T20423] geneve2: entered allmulticast mode [ 1337.110405][ T30] audit: type=1400 audit(1766131963.454:1497): avc: denied { read } for pid=20420 comm="syz.5.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1337.129845][ T5995] usb 2-1: Product: syz [ 1337.129866][ T5995] usb 2-1: Manufacturer: syz [ 1337.129879][ T5995] usb 2-1: SerialNumber: syz [ 1337.244675][T20427] ALSA: mixer_oss: invalid OSS volume 'VOLU00000000000000000' [ 1337.252525][T20427] ALSA: mixer_oss: invalid OSS volume 'VOLUMX' [ 1337.322173][T20427] ALSA: mixer_oss: invalid OSS volume '' [ 1338.179237][ T5995] usb 2-1: 0:2 : does not exist [ 1338.200339][ T5995] usb 2-1: USB disconnect, device number 91 [ 1338.539610][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3906'. [ 1339.165421][T20441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3908'. [ 1339.408607][T20439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3907'. [ 1341.320412][T20464] No control pipe specified [ 1341.640078][ T5995] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1341.843230][ T5995] usb 2-1: Using ep0 maxpacket: 16 [ 1341.929080][ T5995] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 1341.945274][ T5995] usb 2-1: config 0 has no interface number 0 [ 1341.969429][ T5995] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=11.ab [ 1342.010272][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.024907][ T5995] usb 2-1: Product: syz [ 1342.029177][ T5995] usb 2-1: Manufacturer: syz [ 1342.035803][ T5995] usb 2-1: SerialNumber: syz [ 1342.042978][ T5995] usb 2-1: config 0 descriptor?? [ 1342.268929][ T5995] usb 2-1: USB disconnect, device number 92 [ 1343.258704][T20489] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3915'. [ 1343.732731][ T30] audit: type=1400 audit(1766131969.459:1498): avc: denied { ioctl } for pid=20481 comm="syz.0.3918" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1344.008361][T20514] FAULT_INJECTION: forcing a failure. [ 1344.008361][T20514] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.021850][T20514] CPU: 1 UID: 0 PID: 20514 Comm: syz.4.3919 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.021877][T20514] Tainted: [L]=SOFTLOCKUP [ 1344.021882][T20514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1344.021892][T20514] Call Trace: [ 1344.021898][T20514] [ 1344.021905][T20514] dump_stack_lvl+0x16c/0x1f0 [ 1344.021933][T20514] should_fail_ex+0x512/0x640 [ 1344.021956][T20514] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1344.021977][T20514] should_failslab+0xc2/0x120 [ 1344.022000][T20514] kmem_cache_alloc_noprof+0x83/0x770 [ 1344.022016][T20514] ? alloc_empty_file+0x55/0x1e0 [ 1344.022038][T20514] ? alloc_empty_file+0x55/0x1e0 [ 1344.022053][T20514] alloc_empty_file+0x55/0x1e0 [ 1344.022070][T20514] alloc_file_pseudo+0x13a/0x230 [ 1344.022088][T20514] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1344.022106][T20514] ? _raw_spin_unlock+0x28/0x50 [ 1344.022131][T20514] ? alloc_fd+0x471/0x7d0 [ 1344.022157][T20514] __anon_inode_getfile+0xe8/0x280 [ 1344.022178][T20514] __anon_inode_getfd+0x5c/0x160 [ 1344.022199][T20514] __x64_sys_fsopen+0x18b/0x240 [ 1344.022219][T20514] do_syscall_64+0xcd/0xf80 [ 1344.022242][T20514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.022260][T20514] RIP: 0033:0x7f8c4cd8f749 [ 1344.022274][T20514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1344.022290][T20514] RSP: 002b:00007f8c4aff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1344.022308][T20514] RAX: ffffffffffffffda RBX: 00007f8c4cfe6180 RCX: 00007f8c4cd8f749 [ 1344.022319][T20514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1344.022329][T20514] RBP: 00007f8c4aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.022340][T20514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.022350][T20514] R13: 00007f8c4cfe6218 R14: 00007f8c4cfe6180 R15: 00007ffff53b8e28 [ 1344.022375][T20514] [ 1344.653014][T20525] cgroup: Unexpected value for 'xattr' [ 1344.789470][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3920'. [ 1344.956564][ T30] audit: type=1400 audit(1766131970.806:1499): avc: denied { ioctl } for pid=20521 comm="syz.1.3921" path="socket:[72772]" dev="sockfs" ino=72772 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1345.218980][T20530] 9pnet: p9_errstr2errno: server reported unknown error  [ 1346.205783][ T5965] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1346.397401][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 1346.406635][ T5965] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1346.416742][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.013106][ T5965] usb 4-1: Product: syz [ 1347.017332][ T5965] usb 4-1: Manufacturer: syz [ 1347.022528][ T5965] usb 4-1: SerialNumber: syz [ 1347.030472][ T5965] usb 4-1: config 0 descriptor?? [ 1347.292416][ T5965] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1347.416790][T20564] netlink: 'syz.4.3934': attribute type 1 has an invalid length. [ 1347.993903][ T5965] usb 4-1: reset high-speed USB device number 83 using dummy_hcd [ 1348.227477][ T5965] usb 4-1: device descriptor read/64, error -71 [ 1348.472642][ T5995] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1348.514436][ T5965] usb 4-1: reset high-speed USB device number 83 using dummy_hcd [ 1348.706608][ T5995] usb 5-1: Using ep0 maxpacket: 32 [ 1348.768141][ T5965] usb 4-1: device descriptor read/64, error -71 [ 1348.880214][ T5995] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 1348.908076][ T5995] usb 5-1: config 8 has no interface number 0 [ 1348.934551][ T5995] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1348.949101][ T5995] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1348.959745][ T5995] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0xB has invalid wMaxPacketSize 0 [ 1348.969639][ T5995] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 0 [ 1348.979554][ T5995] usb 5-1: config 8 interface 203 has no altsetting 0 [ 1349.006797][ T5995] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 1349.015867][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.024639][ T5995] usb 5-1: Product: syz [ 1349.036520][ T5995] usb 5-1: Manufacturer: syz [ 1349.047989][ T5995] usb 5-1: SerialNumber: syz [ 1349.096381][ T5965] usb 4-1: reset high-speed USB device number 83 using dummy_hcd [ 1349.119029][T20578] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1349.130188][T20586] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3942'. [ 1349.211020][ T5965] usb 4-1: device descriptor read/8, error -71 [ 1349.294604][ T5860] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1349.399996][ T5995] port100 5-1:8.203: NFC: Could not get supported command types [ 1349.435434][ T5995] usb 5-1: USB disconnect, device number 101 [ 1349.560776][ T5860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.601188][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1349.676623][ T5860] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1349.806607][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.848594][ T5860] usb 1-1: Product: syz [ 1350.491685][ T5860] usb 1-1: Manufacturer: syz [ 1350.502277][ T5860] usb 1-1: SerialNumber: syz [ 1350.560355][ T5860] usb 1-1: config 0 descriptor?? [ 1350.586392][ T5860] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1350.614426][T20600] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1350.614426][T20600] program syz.4.3948 not setting count and/or reply_len properly [ 1350.631439][T20600] FAULT_INJECTION: forcing a failure. [ 1350.631439][T20600] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.644371][T20600] CPU: 0 UID: 0 PID: 20600 Comm: syz.4.3948 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.644399][T20600] Tainted: [L]=SOFTLOCKUP [ 1350.644405][T20600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1350.644415][T20600] Call Trace: [ 1350.644421][T20600] [ 1350.644428][T20600] dump_stack_lvl+0x16c/0x1f0 [ 1350.644455][T20600] should_fail_ex+0x512/0x640 [ 1350.644477][T20600] ? __kasan_kmalloc+0xaa/0xb0 [ 1350.644499][T20600] should_failslab+0xc2/0x120 [ 1350.644520][T20600] __kmalloc_noprof+0xeb/0x910 [ 1350.644546][T20600] ? blk_rq_map_user_iov+0x2a8/0x1510 [ 1350.644573][T20600] ? blk_rq_map_user_iov+0x2a8/0x1510 [ 1350.644594][T20600] blk_rq_map_user_iov+0x2a8/0x1510 [ 1350.644625][T20600] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 1350.644652][T20600] ? policy_nodemask+0xea/0x4e0 [ 1350.644675][T20600] ? find_held_lock+0x2b/0x80 [ 1350.644701][T20600] ? sg_common_write.constprop.0+0xbf9/0x1c90 [ 1350.644724][T20600] ? import_ubuf+0x1b6/0x220 [ 1350.644747][T20600] blk_rq_map_user_io+0x1ff/0x230 [ 1350.644778][T20600] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 1350.644801][T20600] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1350.644834][T20600] sg_common_write.constprop.0+0xd43/0x1c90 [ 1350.644865][T20600] ? __pfx__printk+0x10/0x10 [ 1350.644886][T20600] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 1350.644912][T20600] ? __pfx____ratelimit+0x10/0x10 [ 1350.644935][T20600] sg_write+0x813/0xe10 [ 1350.644959][T20600] ? __pfx_sg_write+0x10/0x10 [ 1350.644981][T20600] ? __pfx__kstrtoull+0x10/0x10 [ 1350.645021][T20600] ? bpf_lsm_file_permission+0x9/0x10 [ 1350.645037][T20600] ? security_file_permission+0x71/0x210 [ 1350.645059][T20600] ? iov_iter_advance+0x1e3/0x6c0 [ 1350.645080][T20600] ? rw_verify_area+0xcf/0x6c0 [ 1350.645100][T20600] ? __pfx_sg_write+0x10/0x10 [ 1350.645118][T20600] vfs_writev+0x5df/0xde0 [ 1350.645144][T20600] ? __pfx_vfs_writev+0x10/0x10 [ 1350.645179][T20600] ? __fget_files+0x20e/0x3c0 [ 1350.645201][T20600] ? __fget_files+0x130/0x3c0 [ 1350.645228][T20600] ? do_writev+0x132/0x340 [ 1350.645244][T20600] do_writev+0x132/0x340 [ 1350.645262][T20600] ? __pfx_do_writev+0x10/0x10 [ 1350.645288][T20600] do_syscall_64+0xcd/0xf80 [ 1350.645310][T20600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.645327][T20600] RIP: 0033:0x7f8c4cd8f749 [ 1350.645340][T20600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.645355][T20600] RSP: 002b:00007f8c4db6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1350.645372][T20600] RAX: ffffffffffffffda RBX: 00007f8c4cfe5fa0 RCX: 00007f8c4cd8f749 [ 1350.645383][T20600] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 1350.645392][T20600] RBP: 00007f8c4db6a090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.645402][T20600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.645411][T20600] R13: 00007f8c4cfe6038 R14: 00007f8c4cfe5fa0 R15: 00007ffff53b8e28 [ 1350.645435][T20600] [ 1350.658091][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1350.910670][ T5965] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 1350.941879][T20584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.005094][ T5995] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1351.026754][T20584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.731569][ T5965] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1351.741484][ T5965] usb 4-1: USB disconnect, device number 83 [ 1351.820244][ T5860] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1351.847505][ T5860] usb 1-1: media controller created [ 1351.860501][ T5995] usb 6-1: Using ep0 maxpacket: 8 [ 1351.869747][ T5995] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1351.879407][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.888094][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1351.980206][T20617] /dev/nullb0: Can't open blockdev [ 1352.213354][ T5995] usb 6-1: Product: syz [ 1352.224062][ T5995] usb 6-1: Manufacturer: syz [ 1352.228685][ T5995] usb 6-1: SerialNumber: syz [ 1352.263659][ T5995] usb 6-1: config 0 descriptor?? [ 1352.343389][ T5860] DVB: Unable to find symbol tda10046_attach() [ 1352.349824][ T5860] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1352.396344][ T5860] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1352.416771][ T5860] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1352.451742][ T5860] usb 1-1: USB disconnect, device number 122 [ 1352.568690][ T5925] usb 6-1: USB disconnect, device number 90 [ 1352.662145][T18380] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1352.736004][T20627] openvswitch: netlink: Flow actions attr not present in new flow. [ 1352.833304][T18380] usb 2-1: Using ep0 maxpacket: 16 [ 1352.843499][T18380] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1352.869471][T18380] usb 2-1: config 0 has no interface number 0 [ 1352.922114][T18380] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1353.010755][T18380] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1353.105928][T18380] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1353.127792][T18380] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1353.145918][T18380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.158504][T18380] usb 2-1: Product: syz [ 1353.165663][T18380] usb 2-1: Manufacturer: syz [ 1353.170956][T18380] usb 2-1: SerialNumber: syz [ 1353.178578][T18380] usb 2-1: config 0 descriptor?? [ 1353.184371][T20622] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1353.191818][T20622] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1353.258620][ T30] audit: type=1400 audit(1766131978.588:1500): avc: denied { create } for pid=20632 comm="syz.5.3957" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1353.308893][ T30] audit: type=1400 audit(1766131978.616:1501): avc: denied { mounton } for pid=20632 comm="syz.5.3957" path="/138/file0" dev="tmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1353.377021][T20635] syzkaller1: entered promiscuous mode [ 1353.382627][T20635] syzkaller1: entered allmulticast mode [ 1353.662866][T16308] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1353.829325][T20622] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1353.871125][ T30] audit: type=1326 audit(1766131978.663:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20632 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e258f749 code=0x7ffc0000 [ 1353.894936][ T30] audit: type=1326 audit(1766131978.663:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20632 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e258f749 code=0x7ffc0000 [ 1353.894990][T20622] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1353.918738][ T30] audit: type=1326 audit(1766131978.663:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20632 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e258f749 code=0x7ffc0000 [ 1353.950871][ T30] audit: type=1326 audit(1766131978.663:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20632 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe0e258f749 code=0x7ffc0000 [ 1353.986875][ T30] audit: type=1326 audit(1766131978.673:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20632 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e258f749 code=0x7ffc0000 [ 1354.014364][ T30] audit: type=1326 audit(1766131978.673:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20632 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e258f749 code=0x7ffc0000 [ 1354.042618][ T30] audit: type=1326 audit(1766131978.673:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20632 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e258f749 code=0x7ffc0000 [ 1354.081635][ T30] audit: type=1326 audit(1766131978.673:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20632 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fe0e258f749 code=0x7ffc0000 [ 1354.306128][T20647] netlink: 'syz.4.3961': attribute type 29 has an invalid length. [ 1354.342297][T20647] netlink: 'syz.4.3961': attribute type 29 has an invalid length. [ 1354.361115][T20647] netlink: 824 bytes leftover after parsing attributes in process `syz.4.3961'. [ 1354.570834][T20622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.579607][T20622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.594821][T20622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.597342][T18380] Error reading MAC address [ 1354.603728][T20622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.791217][T20656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1355.088543][T18380] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 1355.171294][T18380] usb 2-1: USB disconnect, device number 93 [ 1356.133359][T20668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=20668 comm=syz.5.3967 [ 1356.611312][T20670] geneve2: entered promiscuous mode [ 1356.616772][T20670] geneve2: entered allmulticast mode [ 1357.104901][T20677] geneve2: entered promiscuous mode [ 1357.113171][T20677] geneve2: entered allmulticast mode [ 1358.725404][T20691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3973'. [ 1358.886928][T20698] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1358.896295][T20698] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1359.101464][T20700] input: syz1 as /devices/virtual/input/input92 [ 1359.889579][ T80] : No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1361.480980][T20734] /dev/nullb0: Can't open blockdev [ 1362.540352][T18380] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1362.726715][T18380] usb 1-1: Using ep0 maxpacket: 32 [ 1362.762252][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1363.155034][T18380] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1363.183791][ T30] audit: type=1400 audit(1766131987.475:1576): avc: denied { write } for pid=20741 comm="syz.4.3990" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1363.228601][T18380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.244070][T18380] usb 1-1: Product: syz [ 1363.259646][T18380] usb 1-1: Manufacturer: syz [ 1363.264263][T18380] usb 1-1: SerialNumber: syz [ 1363.289688][T18380] usb 1-1: config 0 descriptor?? [ 1363.378501][T18380] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1363.656888][T20752] vlan0: entered promiscuous mode [ 1364.303124][T20757] FAULT_INJECTION: forcing a failure. [ 1364.303124][T20757] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.318808][T20757] CPU: 1 UID: 0 PID: 20757 Comm: syz.3.3993 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.318837][T20757] Tainted: [L]=SOFTLOCKUP [ 1364.318844][T20757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1364.318854][T20757] Call Trace: [ 1364.318860][T20757] [ 1364.318869][T20757] dump_stack_lvl+0x16c/0x1f0 [ 1364.318899][T20757] should_fail_ex+0x512/0x640 [ 1364.318928][T20757] should_failslab+0xc2/0x120 [ 1364.318951][T20757] __kmalloc_noprof+0xeb/0x910 [ 1364.318978][T20757] ? io_cache_alloc_new+0x45/0xf0 [ 1364.319005][T20757] ? io_cache_alloc_new+0x45/0xf0 [ 1364.319025][T20757] io_cache_alloc_new+0x45/0xf0 [ 1364.319047][T20757] io_arm_apoll+0x7fc/0x960 [ 1364.319067][T20757] ? __pfx_io_arm_apoll+0x10/0x10 [ 1364.319091][T20757] ? __io_issue_sqe+0x14a/0x7c0 [ 1364.319117][T20757] io_arm_poll_handler+0x223/0x2b0 [ 1364.319137][T20757] io_queue_async+0xab/0x130 [ 1364.319162][T20757] io_submit_sqes+0x154e/0x28e0 [ 1364.319194][T20757] __do_sys_io_uring_enter+0xd6b/0x1630 [ 1364.319216][T20757] ? __fget_files+0x20e/0x3c0 [ 1364.319239][T20757] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1364.319260][T20757] ? fput+0x70/0xf0 [ 1364.319276][T20757] ? ksys_write+0x1ac/0x250 [ 1364.319297][T20757] ? __pfx_ksys_write+0x10/0x10 [ 1364.319326][T20757] do_syscall_64+0xcd/0xf80 [ 1364.319350][T20757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.319368][T20757] RIP: 0033:0x7faad1d8f749 [ 1364.319382][T20757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1364.319398][T20757] RSP: 002b:00007faad2cfa038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1364.319415][T20757] RAX: ffffffffffffffda RBX: 00007faad1fe5fa0 RCX: 00007faad1d8f749 [ 1364.319426][T20757] RDX: 000000000000c2de RSI: 00000000000029e4 RDI: 0000000000000004 [ 1364.319436][T20757] RBP: 00007faad2cfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.319445][T20757] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000001 [ 1364.319455][T20757] R13: 00007faad1fe6038 R14: 00007faad1fe5fa0 R15: 00007ffff1527248 [ 1364.319481][T20757] [ 1364.595587][ T30] audit: type=1400 audit(1766131989.186:1577): avc: denied { lock } for pid=20754 comm="syz.1.3992" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1364.647182][ T30] audit: type=1400 audit(1766131989.243:1578): avc: denied { getopt } for pid=20754 comm="syz.1.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1364.670918][ T30] audit: type=1400 audit(1766131989.261:1579): avc: denied { setopt } for pid=20754 comm="syz.1.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1364.882682][T20769] input: syz0 as /devices/virtual/input/input93 [ 1365.183406][ T30] audit: type=1400 audit(1766131989.748:1580): avc: denied { search } for pid=20770 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.209779][ T30] audit: type=1400 audit(1766131989.748:1581): avc: denied { search } for pid=20770 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.250056][ T30] audit: type=1400 audit(1766131989.748:1582): avc: denied { search } for pid=20770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.275918][ T30] audit: type=1400 audit(1766131989.748:1583): avc: denied { search } for pid=20770 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.299922][ T30] audit: type=1400 audit(1766131989.748:1584): avc: denied { read open } for pid=20771 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.326814][ T30] audit: type=1400 audit(1766131989.748:1585): avc: denied { getattr } for pid=20771 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.512229][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1365.790187][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1365.797586][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.809615][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.828745][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1366.186936][T18380] gspca_ov534_9: reg_w failed -110 [ 1366.324540][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.592422][T18380] gspca_ov534_9: Unknown sensor 0000 [ 1366.592936][T18380] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1366.641883][ T10] usb 2-1: config 0 descriptor?? [ 1366.781192][T17565] Bluetooth: hci4: command 0x0405 tx timeout [ 1367.175956][ T10] logitech 0003:046D:C623.0019: unknown main item tag 0x0 [ 1367.208169][ T10] logitech 0003:046D:C623.0019: unknown main item tag 0x0 [ 1367.422439][ T5995] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1367.436048][ T10] logitech 0003:046D:C623.0019: unknown main item tag 0x0 [ 1367.443389][T17565] Bluetooth: hci2: command 0x0406 tx timeout [ 1367.444957][ T5995] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1367.460361][ T10] logitech 0003:046D:C623.0019: unknown main item tag 0x0 [ 1367.467514][ T10] logitech 0003:046D:C623.0019: unknown main item tag 0x0 [ 1368.187118][ T10] logitech 0003:046D:C623.0019: unknown main item tag 0x0 [ 1368.195613][ T10] logitech 0003:046D:C623.0019: unknown main item tag 0x0 [ 1368.225084][ T10] logitech 0003:046D:C623.0019: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.1-1/input0 [ 1368.937415][ T10] usb 2-1: USB disconnect, device number 94 [ 1369.141297][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4005'. [ 1369.348681][T20838] geneve2: entered promiscuous mode [ 1369.372134][T20838] geneve2: entered allmulticast mode [ 1370.331130][T20860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=20860 comm=syz.1.4010 [ 1370.921736][ T5925] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1371.114198][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 1371.215869][ T5925] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1371.467130][T17565] Bluetooth: hci6: command 0x0406 tx timeout [ 1371.473170][ T5995] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1371.486857][ T5995] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1371.508941][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.591801][ T5925] usb 6-1: config 0 descriptor?? [ 1371.857120][ T5925] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1371.915017][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1371.953925][ T5925] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1372.046136][ T5925] usb 6-1: media controller created [ 1372.059117][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1374.012157][ T6114] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1374.099830][T18380] usb 1-1: USB disconnect, device number 123 [ 1374.184167][ T6114] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1374.201763][ T6114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.243738][ T6114] usb 2-1: config 0 descriptor?? [ 1374.810221][ T5925] az6027: usb out operation failed. (-110) [ 1374.823509][ T5925] az6027: usb out operation failed. (-32) [ 1374.829608][ T5925] stb0899_attach: Driver disabled by Kconfig [ 1374.835768][ T5925] az6027: no front-end attached [ 1374.835768][ T5925] [ 1374.843282][ T5925] az6027: usb out operation failed. (-32) [ 1374.852423][ T5925] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1374.862483][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input94 [ 1374.883192][ T5925] dvb-usb: schedule remote query interval to 400 msecs. [ 1374.891224][ T5925] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1375.647354][ T5925] usb 6-1: USB disconnect, device number 91 [ 1375.812994][ T6114] pegasus 2-1:0.0: can't reset MAC [ 1375.877094][ T6114] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 1376.065950][ T5925] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1376.118237][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1376.212337][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1376.212351][ T30] audit: type=1400 audit(1766132000.056:1595): avc: denied { bind } for pid=20933 comm="syz.5.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1376.350249][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1376.356827][ T10] usb 4-1: too many configurations: 72, using maximum allowed: 8 [ 1376.375171][ T10] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1376.403738][ T10] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1376.431631][ T10] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1376.451212][ T10] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1376.462037][ T10] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1376.473067][ T10] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1376.484712][ T10] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1376.495669][ T10] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1376.823423][ T30] audit: type=1400 audit(1766132000.636:1596): avc: denied { read write } for pid=20921 comm="syz.3.4021" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1376.952733][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1376.959218][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1377.258602][T18380] usb 2-1: USB disconnect, device number 95 [ 1377.299037][T20922] NFSD: Failed to start, no listeners configured. [ 1377.316215][ T30] audit: type=1400 audit(1766132001.001:1597): avc: denied { open } for pid=20921 comm="syz.3.4021" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1377.499923][ T30] audit: type=1400 audit(1766132001.001:1598): avc: denied { ioctl } for pid=20921 comm="syz.3.4021" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1377.657689][ T10] usb 4-1: string descriptor 0 read error: -71 [ 1377.715623][ T10] usb 4-1: New USB device found, idVendor=1608, idProduct=000e, bcdDevice=ed.b1 [ 1377.885273][T17565] Bluetooth: hci3: command 0x0405 tx timeout [ 1377.891475][ T5995] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1378.142618][ T5995] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1378.150825][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70 [ 1378.496338][ T10] usb 4-1: rejected 8 configurations due to insufficient available bus power [ 1378.523690][ T10] usb 4-1: no configuration chosen from 8 choices [ 1378.615121][ T10] usb 4-1: USB disconnect, device number 84 [ 1378.626564][T20968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4028'. [ 1378.704519][ T30] audit: type=1400 audit(1766132002.235:1599): avc: denied { read } for pid=20956 comm="syz.5.4028" path="socket:[74838]" dev="sockfs" ino=74838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1379.452798][ T5965] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1379.753826][ T5965] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.792677][ T5965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.839881][ T5965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1379.881130][ T5965] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1379.890198][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.937013][ T5965] usb 6-1: config 0 descriptor?? [ 1380.105248][ T30] audit: type=1400 audit(1766132003.704:1600): avc: denied { map } for pid=21001 comm="syz.4.4036" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1380.243916][ T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1380.437506][ T5965] wacom 0003:056A:0010.001A: unknown main item tag 0x0 [ 1380.447541][ T5965] wacom 0003:056A:0010.001A: unknown main item tag 0x0 [ 1380.500544][ T6114] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1380.514867][T21006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4033'. [ 1380.542075][ T30] audit: type=1400 audit(1766132004.078:1601): avc: denied { bind } for pid=20993 comm="syz.0.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1380.605751][ T5965] wacom 0003:056A:0010.001A: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1380.660388][ T10] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1380.671689][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.683159][ T5965] wacom 0003:056A:0010.001A: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.5-1/input0 [ 1380.695871][ T10] usb 4-1: config 0 descriptor?? [ 1380.711497][ T5965] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0010.001A/input/input95 [ 1380.767791][ T6114] usb 5-1: Using ep0 maxpacket: 16 [ 1380.774531][ T6114] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1380.796071][ T6114] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1380.831889][ T6114] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1380.866920][ T6114] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=ec.40 [ 1380.879681][ T6114] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1381.015432][T21011] bridge3: entered promiscuous mode [ 1381.020791][T21011] bridge3: entered allmulticast mode [ 1381.347960][ T6114] usb 5-1: Product: syz [ 1381.352156][ T6114] usb 5-1: SerialNumber: syz [ 1381.396960][T17565] Bluetooth: hci1: command 0x0406 tx timeout [ 1381.406654][ T5995] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1381.422199][ T5995] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1381.597914][T21004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.606738][T21004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.653174][ T6114] usb 5-1: 0:2 : does not exist [ 1381.667768][ T6114] usb 5-1: USB disconnect, device number 102 [ 1381.730168][T21017] geneve2: entered promiscuous mode [ 1381.737899][T21017] geneve2: entered allmulticast mode [ 1382.072782][ T10] usb 4-1: Cannot set autoneg [ 1382.077662][ T10] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1382.089914][ T5965] usb 6-1: USB disconnect, device number 92 [ 1382.682758][T21031] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4043'. [ 1382.950047][T21036] program syz.5.4045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1382.980235][ T30] audit: type=1400 audit(1766132006.370:1602): avc: denied { append } for pid=21035 comm="syz.5.4045" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1383.630706][T17565] Bluetooth: hci4: command 0x0405 tx timeout [ 1383.639084][ T5995] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1383.645406][ T5995] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1383.684216][ T5965] usb 4-1: USB disconnect, device number 85 [ 1384.871662][T21031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.059097][T21031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.094018][T21031] bond0 (unregistering): Released all slaves [ 1385.185346][T21044] tipc: Started in network mode [ 1385.204855][T21044] tipc: Node identity ae69ba108ea4, cluster identity 4711 [ 1385.219632][T21044] tipc: Enabled bearer , priority 0 [ 1385.292801][T21046] syzkaller0: entered promiscuous mode [ 1385.309331][T21046] syzkaller0: entered allmulticast mode [ 1385.426346][ T30] audit: type=1400 audit(1766132008.680:1603): avc: denied { accept } for pid=21070 comm="syz.3.4052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1385.480550][ T30] audit: type=1400 audit(1766132008.727:1604): avc: denied { append } for pid=21070 comm="syz.3.4052" name="mouse0" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1385.524441][T21074] QAT: Device 116 not found [ 1385.549601][T21046] tipc: Resetting bearer [ 1385.602524][T21046] tipc: Disabling bearer [ 1385.678431][T21080] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1385.690487][T21080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1385.735446][ T30] audit: type=1400 audit(1766132008.970:1605): avc: denied { write } for pid=21081 comm="syz.0.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1385.856482][ T5860] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1386.027608][ T5925] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1386.037046][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.060247][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.070093][ T5860] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1386.493909][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.519017][ T5860] usb 4-1: config 0 descriptor?? [ 1386.566653][T21100] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1386.577992][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.589503][ T5925] usb 1-1: config 0 has no interfaces? [ 1386.614462][ T5925] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1386.690814][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.720571][ T5925] usb 1-1: Product: syz [ 1386.730807][ T5925] usb 1-1: Manufacturer: syz [ 1386.747950][ T5925] usb 1-1: SerialNumber: syz [ 1386.862788][ T5925] usb 1-1: config 0 descriptor?? [ 1386.971609][ T5860] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 1386.992940][ T5860] hid-steam 0003:28DE:1142.001B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1387.064625][ T5860] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected [ 1387.095363][ T5860] hid-steam 0003:28DE:1142.001B: No HID_FEATURE_REPORT submitted - nothing to read [ 1387.107420][ T5995] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1387.317732][ T30] audit: type=1400 audit(1766132010.298:1606): avc: denied { read append } for pid=21081 comm="syz.0.4058" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1387.317821][ T30] audit: type=1400 audit(1766132010.298:1607): avc: denied { open } for pid=21081 comm="syz.0.4058" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1387.323167][T21082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.323425][T21082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.328365][T21076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.328702][T21076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.335113][ T5925] usb 1-1: USB disconnect, device number 124 [ 1387.394362][ T5860] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 1387.449214][ T5860] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1387.502784][ T5995] usb 2-1: Using ep0 maxpacket: 32 [ 1387.505266][ T5995] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1387.505299][ T5995] usb 2-1: config 0 has no interface number 0 [ 1387.505338][ T5995] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1387.509429][ T5995] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1387.509456][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.509475][ T5995] usb 2-1: Product: syz [ 1387.509489][ T5995] usb 2-1: Manufacturer: syz [ 1387.509504][ T5995] usb 2-1: SerialNumber: syz [ 1387.511574][ T5995] usb 2-1: config 0 descriptor?? [ 1387.518137][ T5995] smsc75xx v1.0.0 [ 1388.193996][T21117] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1388.315332][ T5925] usb 4-1: reset high-speed USB device number 86 using dummy_hcd [ 1388.491348][ T5995] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1388.518376][ T5995] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1388.539896][ T5965] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1388.547588][ T5995] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1388.570222][ T5995] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1388.755707][ T5860] usb 2-1: USB disconnect, device number 96 [ 1388.795645][T15340] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1388.803797][ T5965] usb 6-1: device descriptor read/64, error -71 [ 1388.976144][T21134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4069'. [ 1388.991152][T15340] usb 5-1: Using ep0 maxpacket: 16 [ 1388.998079][T15340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.016458][T15340] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1389.027040][T15340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.036223][T21134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4069'. [ 1389.046231][T15340] usb 5-1: config 0 descriptor?? [ 1389.074302][ T5965] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 1389.182924][T18380] usb 4-1: USB disconnect, device number 86 [ 1389.216661][T18380] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected [ 1389.234811][ T5965] usb 6-1: device descriptor read/64, error -71 [ 1389.378188][ T5965] usb usb6-port1: attempt power cycle [ 1389.640753][T15340] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1389.865407][ T5995] IPVS: starting estimator thread 0... [ 1389.972751][ T5965] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1390.015198][T21143] IPVS: using max 49 ests per chain, 117600 per kthread [ 1390.022931][ T5965] usb 6-1: device descriptor read/8, error -71 [ 1390.694974][ T5965] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 1391.029410][ T5965] usb 6-1: device descriptor read/8, error -71 [ 1391.154589][ T5965] usb usb6-port1: unable to enumerate USB device [ 1391.381793][ T30] audit: type=1400 audit(1766132014.246:1608): avc: denied { ioctl } for pid=21155 comm="syz.1.4077" path="socket:[74561]" dev="sockfs" ino=74561 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1392.171350][T21173] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1392.177900][T21173] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1392.221654][T21173] vhci_hcd vhci_hcd.0: Device attached [ 1392.253389][ T30] audit: type=1400 audit(1766132015.069:1609): avc: denied { execute } for pid=21177 comm="syz.5.4083" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1392.342247][T21182] FAULT_INJECTION: forcing a failure. [ 1392.342247][T21182] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.377816][ T30] audit: type=1400 audit(1766132015.163:1610): avc: denied { create } for pid=21168 comm="syz.4.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1392.413585][T21182] CPU: 1 UID: 0 PID: 21182 Comm: syz.0.4084 Tainted: G L syzkaller #0 PREEMPT(full) [ 1392.413615][T21182] Tainted: [L]=SOFTLOCKUP [ 1392.413621][T21182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1392.413632][T21182] Call Trace: [ 1392.413637][T21182] [ 1392.413644][T21182] dump_stack_lvl+0x16c/0x1f0 [ 1392.413671][T21182] should_fail_ex+0x512/0x640 [ 1392.413694][T21182] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1392.413713][T21182] should_failslab+0xc2/0x120 [ 1392.413734][T21182] kmem_cache_alloc_noprof+0x83/0x770 [ 1392.413750][T21182] ? security_file_alloc+0x34/0x2b0 [ 1392.413776][T21182] ? security_file_alloc+0x34/0x2b0 [ 1392.413798][T21182] security_file_alloc+0x34/0x2b0 [ 1392.413821][T21182] init_file+0x93/0x4c0 [ 1392.413838][T21182] alloc_empty_file+0x73/0x1e0 [ 1392.413855][T21182] alloc_file_pseudo+0x13a/0x230 [ 1392.413872][T21182] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1392.413895][T21182] sock_alloc_file+0x50/0x210 [ 1392.413915][T21182] do_accept+0x240/0x530 [ 1392.413939][T21182] ? do_raw_spin_lock+0x12c/0x2b0 [ 1392.413963][T21182] ? __pfx_do_accept+0x10/0x10 [ 1392.414003][T21182] __sys_accept4_file+0xcd/0x210 [ 1392.414025][T21182] ? __pfx___sys_accept4_file+0x10/0x10 [ 1392.414054][T21182] __x64_sys_accept4+0xd5/0x150 [ 1392.414080][T21182] do_syscall_64+0xcd/0xf80 [ 1392.414104][T21182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.414122][T21182] RIP: 0033:0x7fbda0d8f749 [ 1392.414135][T21182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1392.414151][T21182] RSP: 002b:00007fbda1b66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1392.414172][T21182] RAX: ffffffffffffffda RBX: 00007fbda0fe5fa0 RCX: 00007fbda0d8f749 [ 1392.414182][T21182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1392.414192][T21182] RBP: 00007fbda1b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1392.414202][T21182] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1392.414212][T21182] R13: 00007fbda0fe6038 R14: 00007fbda0fe5fa0 R15: 00007ffca0200708 [ 1392.414237][T21182] [ 1392.633527][T15340] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 1392.643028][ T5925] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 1392.974619][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1393.312026][ T30] audit: type=1400 audit(1766132016.042:1611): avc: denied { mount } for pid=21188 comm="syz.0.4086" name="/" dev="gadgetfs" ino=6991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1393.339892][ T5925] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 1393.510953][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1393.628868][ T5925] usb usb4-port1: attempt power cycle [ 1393.677650][ T30] audit: type=1400 audit(1766132016.397:1612): avc: denied { read } for pid=21197 comm="syz.1.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1394.088420][ T5925] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 1394.249560][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1395.027666][ T5925] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 1395.052232][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1395.171965][ T30] audit: type=1400 audit(1766132017.782:1613): avc: denied { mount } for pid=21206 comm="syz.0.4092" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1396.269178][ T30] audit: type=1400 audit(1766132017.782:1614): avc: denied { ioctl } for pid=21206 comm="syz.0.4092" path="socket:[75613]" dev="sockfs" ino=75613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1396.291220][ T5925] usb usb4-port1: unable to enumerate USB device [ 1396.295108][ T30] audit: type=1400 audit(1766132018.839:1615): avc: denied { unmount } for pid=17840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1396.324027][T21209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'. [ 1396.493431][T21174] vhci_hcd: connection reset by peer [ 1396.519583][ T9614] vhci_hcd vhci_hcd.3: stop threads [ 1396.536397][ T9614] vhci_hcd vhci_hcd.3: release socket [ 1396.547182][ T9614] vhci_hcd vhci_hcd.3: disconnect device [ 1397.199326][ T5860] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1397.381426][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 1397.467221][ T5860] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1397.486821][ T5860] usb 2-1: config 0 has no interface number 0 [ 1397.978343][ T5860] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1397.999237][ T5860] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1398.172458][T15340] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1398.306597][ T5995] IPVS: starting estimator thread 0... [ 1398.311665][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.330865][ T5860] usb 2-1: Product: syz [ 1398.343078][ T5860] usb 2-1: Manufacturer: syz [ 1398.347702][ T5860] usb 2-1: SerialNumber: syz [ 1398.439357][T21234] IPVS: using max 63 ests per chain, 151200 per kthread [ 1398.439976][ T5860] usb 2-1: config 0 descriptor?? [ 1398.595925][ T5860] smsc75xx v1.0.0 [ 1398.804836][T21242] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1398.902543][T21243] No control pipe specified [ 1398.920530][ T80] Bluetooth: hci5: Frame reassembly failed (-84) [ 1399.228749][T21245] FAULT_INJECTION: forcing a failure. [ 1399.228749][T21245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1399.287940][T21245] CPU: 0 UID: 0 PID: 21245 Comm: syz.5.4102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1399.287973][T21245] Tainted: [L]=SOFTLOCKUP [ 1399.287979][T21245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1399.287988][T21245] Call Trace: [ 1399.287993][T21245] [ 1399.288000][T21245] dump_stack_lvl+0x16c/0x1f0 [ 1399.288025][T21245] should_fail_ex+0x512/0x640 [ 1399.288053][T21245] _copy_from_user+0x2e/0xd0 [ 1399.288078][T21245] map_update_elem+0x755/0x930 [ 1399.288100][T21245] ? __pfx_map_update_elem+0x10/0x10 [ 1399.288120][T21245] ? selinux_bpf+0xed/0x130 [ 1399.288149][T21245] __sys_bpf+0x1573/0x4980 [ 1399.288176][T21245] ? __pfx___sys_bpf+0x10/0x10 [ 1399.288197][T21245] ? find_held_lock+0x2b/0x80 [ 1399.288224][T21245] ? find_held_lock+0x2b/0x80 [ 1399.288255][T21245] ? __mutex_unlock_slowpath+0x161/0x790 [ 1399.288299][T21245] ? fput+0x70/0xf0 [ 1399.288315][T21245] ? ksys_write+0x1ac/0x250 [ 1399.288335][T21245] ? __pfx_ksys_write+0x10/0x10 [ 1399.288357][T21245] __x64_sys_bpf+0x78/0xc0 [ 1399.288380][T21245] ? lockdep_hardirqs_on+0x7c/0x110 [ 1399.288399][T21245] do_syscall_64+0xcd/0xf80 [ 1399.288422][T21245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.288439][T21245] RIP: 0033:0x7fe0e258f749 [ 1399.288452][T21245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1399.288468][T21245] RSP: 002b:00007fe0e334b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1399.288485][T21245] RAX: ffffffffffffffda RBX: 00007fe0e27e5fa0 RCX: 00007fe0e258f749 [ 1399.288495][T21245] RDX: 0000000000000090 RSI: 0000200000000680 RDI: 0000000000000002 [ 1399.288504][T21245] RBP: 00007fe0e334b090 R08: 0000000000000000 R09: 0000000000000000 [ 1399.288513][T21245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1399.288522][T21245] R13: 00007fe0e27e6038 R14: 00007fe0e27e5fa0 R15: 00007ffe34eabb98 [ 1399.288546][T21245] [ 1399.718900][ T7426] usb 5-1: USB disconnect, device number 103 [ 1400.122392][ T5860] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1400.149921][ T5860] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1400.162209][ T5860] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1400.342635][ T5860] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1400.429347][ T5860] usb 2-1: USB disconnect, device number 97 [ 1400.973183][T13836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1401.059248][ T30] audit: type=1326 audit(1766132023.254:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21261 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda0d8f749 code=0x7ffc0000 [ 1401.089864][ T30] audit: type=1326 audit(1766132023.254:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21261 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbda0d8f749 code=0x7ffc0000 [ 1401.114264][ T30] audit: type=1326 audit(1766132023.254:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21261 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda0d8f749 code=0x7ffc0000 [ 1401.186948][ T30] audit: type=1326 audit(1766132023.254:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21261 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda0d8f749 code=0x7ffc0000 [ 1401.802898][ T30] audit: type=1326 audit(1766132023.254:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21261 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fbda0d8f749 code=0x7ffc0000 [ 1402.508155][ T30] audit: type=1326 audit(1766132023.254:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21261 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda0d8f749 code=0x7ffc0000 [ 1402.566337][T21271] /dev/nullb0: Can't open blockdev [ 1402.586895][ T30] audit: type=1326 audit(1766132023.254:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21261 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda0d8f749 code=0x7ffc0000 [ 1402.880082][ T30] audit: type=1326 audit(1766132023.254:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21261 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbda0d8f749 code=0x7ffc0000 [ 1402.921229][ T30] audit: type=1326 audit(1766132023.254:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21261 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda0d8f749 code=0x7ffc0000 [ 1403.029876][ T30] audit: type=1326 audit(1766132023.254:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21261 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbda0d8f749 code=0x7ffc0000 [ 1403.494410][T21283] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1403.500945][T21283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1403.656533][T21283] vhci_hcd vhci_hcd.0: Device attached [ 1403.895641][T21304] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1404.138155][ T5965] usb 40-1: SetAddress Request (2) to port 0 [ 1404.144241][ T5965] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1404.444550][T21289] vhci_hcd: connection reset by peer [ 1404.451556][ T4340] vhci_hcd vhci_hcd.3: stop threads [ 1404.456780][ T4340] vhci_hcd vhci_hcd.3: release socket [ 1404.471774][ T4340] vhci_hcd vhci_hcd.3: disconnect device [ 1405.262498][T21317] geneve2: entered promiscuous mode [ 1405.280625][T21317] geneve2: entered allmulticast mode [ 1405.460163][T21308] lo speed is unknown, defaulting to 1000 [ 1406.247246][T21328] geneve2: entered promiscuous mode [ 1406.254611][T21328] geneve2: entered allmulticast mode [ 1406.740294][T21332] geneve2: entered promiscuous mode [ 1406.801016][T21332] geneve2: entered allmulticast mode [ 1407.544233][T21350] binder: 21349:21350 ioctl c0306201 0 returned -14 [ 1408.549252][T21368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4136'. [ 1408.627691][ T6114] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1408.798503][ T6114] usb 6-1: Using ep0 maxpacket: 32 [ 1408.821416][ T6114] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1408.852630][ T6114] usb 6-1: config 0 has no interface number 0 [ 1408.874659][ T6114] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1408.896423][ T6114] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1408.906526][ T6114] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.914619][ T6114] usb 6-1: Product: syz [ 1408.919710][ T6114] usb 6-1: Manufacturer: syz [ 1408.924315][ T6114] usb 6-1: SerialNumber: syz [ 1408.935105][ T6114] usb 6-1: config 0 descriptor?? [ 1408.946924][ T6114] smsc75xx v1.0.0 [ 1409.525698][ T5965] usb 40-1: device descriptor read/8, error -110 [ 1409.847404][ T6114] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1409.863536][ T6114] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1409.874197][ T6114] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1409.890339][ T6114] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1409.974597][T21393] netlink: 'syz.4.4146': attribute type 3 has an invalid length. [ 1410.168409][ T5965] usb usb40-port1: attempt power cycle [ 1410.262972][T21395] Device name cannot be null; rc = [-22] [ 1410.295770][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1410.301960][ T30] audit: type=1400 audit(1766132031.934:1655): avc: denied { ioctl } for pid=21392 comm="syz.4.4146" path="socket:[77194]" dev="sockfs" ino=77194 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1410.720390][ T6114] usb 6-1: USB disconnect, device number 97 [ 1410.896880][ T5965] usb usb40-port1: unable to enumerate USB device [ 1410.910180][ T30] audit: type=1400 audit(1766132032.430:1656): avc: denied { connect } for pid=21401 comm="syz.1.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1410.961373][ T30] audit: type=1400 audit(1766132032.439:1657): avc: denied { write } for pid=21401 comm="syz.1.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1411.050989][ T30] audit: type=1400 audit(1766132032.542:1658): avc: denied { read } for pid=21401 comm="syz.1.4149" path="socket:[77205]" dev="sockfs" ino=77205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1412.477526][T21427] geneve2: entered promiscuous mode [ 1412.482782][T21427] geneve2: entered allmulticast mode [ 1412.810381][T21438] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1413.711808][T21448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1414.264909][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1414.421150][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4165'. [ 1414.635648][ T5995] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1414.776318][ T30] audit: type=1400 audit(1766132036.134:1659): avc: denied { connect } for pid=21472 comm="syz.1.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1414.806944][ T5995] usb 5-1: Using ep0 maxpacket: 32 [ 1414.819441][ T5995] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1414.827889][ T5995] usb 5-1: config 0 has no interface number 0 [ 1415.043877][ T5995] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1415.103657][ T5995] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1415.126114][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.138359][ T5995] usb 5-1: Product: syz [ 1415.142551][ T5995] usb 5-1: Manufacturer: syz [ 1415.174447][ T5995] usb 5-1: SerialNumber: syz [ 1415.196442][ T5995] usb 5-1: config 0 descriptor?? [ 1415.207601][ T5995] smsc75xx v1.0.0 [ 1416.100562][ T5995] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1416.196470][ T5995] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1416.218770][ T5995] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1416.244027][ T5995] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1416.464024][ T6114] usb 5-1: USB disconnect, device number 104 [ 1418.398657][ T5995] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1418.415489][T21477] geneve2: entered promiscuous mode [ 1418.429382][T21477] geneve2: entered allmulticast mode [ 1418.475053][ T30] audit: type=1400 audit(1766132039.595:1660): avc: denied { setopt } for pid=21508 comm="syz.0.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1418.582371][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4181'. [ 1418.600044][T21511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4181'. [ 1418.603395][ T5995] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1418.617790][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4181'. [ 1418.627842][ T5995] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1418.733372][ T5995] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1419.212356][T21514] netlink: 'syz.3.4182': attribute type 1 has an invalid length. [ 1419.427369][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.435435][ T5995] usb 5-1: Product: syz [ 1419.439685][ T5995] usb 5-1: Manufacturer: syz [ 1419.444330][ T5995] usb 5-1: SerialNumber: syz [ 1419.454230][ T5995] usb 5-1: config 0 descriptor?? [ 1419.461952][T21507] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1419.478627][T21507] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1419.633384][T21514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1419.891228][T21507] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1420.064143][T21507] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1421.852045][T21517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1421.859063][T21517] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1422.173157][ T7478] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1422.202013][T21517] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1422.216512][ T5995] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1422.301692][T21518] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 1422.313521][T21518] bond1: (slave wlan0): Opening slave failed [ 1422.379769][ T7478] usb 2-1: Using ep0 maxpacket: 32 [ 1422.388270][ T7478] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1422.395716][ T5995] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, a2:79:44:f4:fd:5c [ 1422.396705][ T7478] usb 2-1: config 0 has no interface number 0 [ 1422.451783][ T7478] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1422.464490][ T5995] usb 5-1: USB disconnect, device number 105 [ 1422.465575][ T7478] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1422.478836][ T5995] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 1422.482455][ T7478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.501583][ T7478] usb 2-1: Product: syz [ 1422.505842][ T7478] usb 2-1: Manufacturer: syz [ 1422.510582][ T7478] usb 2-1: SerialNumber: syz [ 1422.530769][ T7478] usb 2-1: config 0 descriptor?? [ 1422.539483][ T7478] smsc75xx v1.0.0 [ 1422.717848][ T5860] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1422.953944][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 1422.999332][ T5860] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.107013][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1423.114371][ T5860] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1423.115692][ T30] audit: type=1400 audit(1766132043.935:1661): avc: denied { bind } for pid=21542 comm="syz.5.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1423.149552][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.161601][ T5860] usb 1-1: config 0 descriptor?? [ 1423.235675][T21548] geneve2: entered promiscuous mode [ 1423.240967][T21548] geneve2: entered allmulticast mode [ 1423.480003][ T5995] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1423.493295][ T7478] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1423.545378][ T7478] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1423.556854][ T7478] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1423.577000][ T7478] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1423.711896][ T5995] usb 5-1: Using ep0 maxpacket: 32 [ 1423.751995][ T5995] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 1423.794774][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.813612][ T5995] usb 5-1: Product: syz [ 1423.817793][ T5995] usb 5-1: Manufacturer: syz [ 1423.835168][ T5995] usb 5-1: SerialNumber: syz [ 1423.847327][ T5995] usb 5-1: config 0 descriptor?? [ 1423.858870][ T5995] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1423.867585][ T5860] usbhid 1-1:0.0: can't add hid device: -71 [ 1423.903810][ T5860] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1424.049657][ T5860] usb 1-1: USB disconnect, device number 125 [ 1424.432489][T21565] /dev/nullb0: Can't open blockdev [ 1424.534842][ T5995] usb 5-1: USB disconnect, device number 106 [ 1426.033088][ T5995] usb 2-1: USB disconnect, device number 98 [ 1426.167200][ T30] audit: type=1326 audit(1766132046.788:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.0.4198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbda0d8f749 code=0x0 [ 1426.430279][ T30] audit: type=1400 audit(1766132047.032:1663): avc: denied { write } for pid=21592 comm="syz.3.4202" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1426.505857][ T30] audit: type=1400 audit(1766132047.106:1664): avc: denied { ioctl } for pid=21592 comm="syz.3.4202" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1426.609183][ T5995] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1426.705603][T21598] geneve2: entered promiscuous mode [ 1426.710910][T21598] geneve2: entered allmulticast mode [ 1426.859499][ T5995] usb 2-1: Using ep0 maxpacket: 32 [ 1427.055349][ T5995] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1427.068707][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.086623][ T5995] usb 2-1: Product: syz [ 1427.100809][ T5995] usb 2-1: Manufacturer: syz [ 1427.120926][ T5995] usb 2-1: SerialNumber: syz [ 1427.135156][ T5995] usb 2-1: config 0 descriptor?? [ 1427.149448][ T5995] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1427.465008][ T117] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1427.488725][T21608] /dev/nullb0: Can't open blockdev [ 1427.797860][ T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.817203][ T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.828264][ T117] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1428.132916][ T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.147161][ T117] usb 4-1: config 0 descriptor?? [ 1428.920619][T21601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.939376][T21601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.962318][ T117] usbhid 4-1:0.0: can't add hid device: -71 [ 1428.980713][ T117] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1428.998653][ T117] usb 4-1: USB disconnect, device number 91 [ 1429.196390][ T30] audit: type=1400 audit(1766132050.566:1665): avc: denied { bind } for pid=21582 comm="syz.1.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1429.207573][ T7478] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1429.794972][ T5995] gspca_stk1135: reg_w 0x200 err -110 [ 1429.819486][ T5995] gspca_stk1135: serial bus timeout: status=0x00 [ 1429.828009][ T5995] gspca_stk1135: Sensor write failed [ 1429.833320][ T5995] gspca_stk1135: serial bus timeout: status=0x00 [ 1429.869833][ T5995] gspca_stk1135: Sensor write failed [ 1429.876844][ T5995] gspca_stk1135: serial bus timeout: status=0x00 [ 1429.885978][ T5995] gspca_stk1135: Sensor read failed [ 1429.891375][ T5995] gspca_stk1135: serial bus timeout: status=0x00 [ 1429.897828][ T5995] gspca_stk1135: Sensor read failed [ 1429.903726][ T5995] gspca_stk1135: Detected sensor type unknown (0x0) [ 1429.910410][ T5995] gspca_stk1135: serial bus timeout: status=0x00 [ 1429.919112][ T5995] gspca_stk1135: Sensor read failed [ 1429.934879][ T5995] gspca_stk1135: serial bus timeout: status=0x00 [ 1429.941266][ T5995] gspca_stk1135: Sensor read failed [ 1429.950965][ T5995] gspca_stk1135: serial bus timeout: status=0x00 [ 1429.959994][ T5995] gspca_stk1135: Sensor write failed [ 1429.970590][ T5995] gspca_stk1135: serial bus timeout: status=0x00 [ 1429.978227][ T5995] gspca_stk1135: Sensor write failed [ 1429.984403][ T5995] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1429.988289][T21631] geneve2: entered promiscuous mode [ 1430.005108][T21631] geneve2: entered allmulticast mode [ 1430.051590][ T7478] usb 5-1: Using ep0 maxpacket: 32 [ 1430.063536][ T7478] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1430.073577][ T7478] usb 5-1: config 0 has no interface number 0 [ 1430.080000][ T7478] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1430.458497][ T7478] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1430.500991][ T7478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.509032][ T7478] usb 5-1: Product: syz [ 1430.524557][ T7478] usb 5-1: Manufacturer: syz [ 1430.535121][ T7478] usb 5-1: SerialNumber: syz [ 1430.558340][ T7478] usb 5-1: config 0 descriptor?? [ 1430.577313][ T7478] smsc75xx v1.0.0 [ 1431.223706][ T7478] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1431.385213][ T7478] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1431.424336][ T7478] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1431.474237][ T7478] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1431.683114][ T7478] usb 2-1: USB disconnect, device number 99 [ 1432.160525][ T30] audit: type=1400 audit(1766132053.400:1666): avc: denied { write } for pid=21653 comm="syz.0.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1432.208993][ T30] audit: type=1400 audit(1766132053.438:1667): avc: denied { read write } for pid=18114 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1432.606200][ T30] audit: type=1400 audit(1766132053.438:1668): avc: denied { open } for pid=18114 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1432.647054][ T30] audit: type=1400 audit(1766132053.438:1669): avc: denied { ioctl } for pid=18114 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1432.702713][ T30] audit: type=1400 audit(1766132053.765:1670): avc: denied { read } for pid=21662 comm="syz.5.4221" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1432.968539][ T30] audit: type=1400 audit(1766132053.765:1671): avc: denied { open } for pid=21662 comm="syz.5.4221" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1433.139089][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4223'. [ 1433.615253][ T30] audit: type=1400 audit(1766132053.765:1672): avc: denied { create } for pid=21662 comm="syz.5.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1433.636736][ T5995] usb 5-1: USB disconnect, device number 107 [ 1433.707651][ T30] audit: type=1400 audit(1766132053.896:1673): avc: denied { read } for pid=21662 comm="syz.5.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1433.888263][ T30] audit: type=1400 audit(1766132053.943:1674): avc: denied { ioctl } for pid=21662 comm="syz.5.4221" path="socket:[78881]" dev="sockfs" ino=78881 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1433.916051][ T30] audit: type=1400 audit(1766132054.008:1675): avc: denied { create } for pid=21667 comm="syz.3.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1434.022454][T21687] geneve2: entered promiscuous mode [ 1434.030595][T21687] geneve2: entered allmulticast mode [ 1434.749001][T21697] /dev/nullb0: Can't open blockdev [ 1435.546437][ T7478] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1435.698563][T21717] batman_adv: batadv0: Adding interface: dummy0 [ 1435.706016][T21717] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.732090][ T7478] usb 1-1: Using ep0 maxpacket: 32 [ 1435.738914][T21717] batman_adv: batadv0: Interface activated: dummy0 [ 1435.760058][ T7478] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1435.782926][ T7478] usb 1-1: config 0 has no interface number 0 [ 1435.789095][ T7478] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1435.811481][T21717] batadv0: mtu less than device minimum [ 1435.824690][ T7478] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1435.835658][T21717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1435.847568][T21717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1435.858933][T21717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1435.870273][T21717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1435.881634][T21717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1435.893052][T21717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1435.904400][T21717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1435.915756][T21717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1435.927131][T21717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1435.954503][ T7478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.965435][ T7478] usb 1-1: Product: syz [ 1435.969610][ T7478] usb 1-1: Manufacturer: syz [ 1435.975702][ T7478] usb 1-1: SerialNumber: syz [ 1436.025583][ T7478] usb 1-1: config 0 descriptor?? [ 1436.032113][ T7478] smsc75xx v1.0.0 [ 1436.133028][T21717] lo speed is unknown, defaulting to 1000 [ 1436.302339][T21721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21721 comm=syz.3.4231 [ 1436.759063][ T7478] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1436.791096][ T7478] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1436.824305][ T7478] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1436.839749][ T7478] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1436.998288][ T7478] hid (null): invalid report_count 22312 [ 1437.007990][ T7478] hid (null): unknown global tag 0xe [ 1437.114942][ T7478] hid (null): unknown global tag 0xc [ 1437.120830][ T7478] hid (null): unknown global tag 0xd [ 1437.126878][ T7478] hid (null): invalid report_count -1510251128 [ 1437.167512][ T7478] hid (null): unknown global tag 0xe [ 1437.635767][ T7478] hid (null): unknown global tag 0xd [ 1437.669826][ T7478] hid (null): invalid report_size -1716024599 [ 1437.692122][ T7478] hid (null): unknown global tag 0xa1 [ 1437.705343][ T7478] hid (null): global environment stack underflow [ 1437.723009][ T7478] hid (null): unknown global tag 0x5e [ 1437.736369][ T7478] hid (null): report_id 0 is invalid [ 1437.752628][ T7478] hid (null): unknown global tag 0xc [ 1437.770099][ T7478] hid (null): global environment stack underflow [ 1437.805798][ T7478] hid (null): unknown global tag 0xe [ 1437.820056][ T7478] hid (null): invalid report_size 21929 [ 1437.836897][ T7478] hid (null): invalid report_count 1203443673 [ 1437.850338][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1437.850354][ T30] audit: type=1400 audit(1766132058.713:1755): avc: denied { create } for pid=21712 comm="syz.0.4234" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1437.884818][ T7478] hid (null): invalid report_count -701133225 [ 1437.893824][ T7478] hid (null): report_id 59400 is invalid [ 1437.899899][ T7478] hid (null): invalid report_size -1580989907 [ 1437.906429][ T30] audit: type=1400 audit(1766132058.760:1756): avc: denied { ioctl } for pid=21712 comm="syz.0.4234" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=78482 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1437.943964][ T7478] hid (null): unknown global tag 0xe [ 1437.971392][ T7478] hid (null): global environment stack underflow [ 1437.982079][ T7478] hid (null): unknown global tag 0xc [ 1437.996693][ T7478] hid (null): unknown global tag 0xe [ 1438.020460][ T7478] hid (null): unknown global tag 0xe [ 1438.037672][ T7478] hid (null): unknown global tag 0xc [ 1438.043019][ T7478] hid (null): unknown global tag 0xe [ 1438.050394][T21742] geneve2: entered promiscuous mode [ 1438.055688][T21742] geneve2: entered allmulticast mode [ 1438.058666][ T7478] hid (null): report_id 0 is invalid [ 1438.066736][ T7478] hid (null): unknown global tag 0xe [ 1438.522944][ T30] audit: type=1400 audit(1766132059.256:1757): avc: denied { read } for pid=21737 comm="syz.5.4240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1438.727697][ T7478] hid (null): unknown global tag 0xd [ 1438.734947][ T7478] hid (null): unknown global tag 0xe [ 1438.740539][ T7478] hid (null): unknown global tag 0x5f [ 1438.746493][ T7478] hid (null): invalid report_size -1730362041 [ 1438.796756][ T7478] hid (null): unknown global tag 0xc [ 1438.802427][ T7478] hid (null): unknown global tag 0xe [ 1438.809443][ T7478] hid (null): report_id 47248 is invalid [ 1438.815796][ T30] audit: type=1400 audit(1766132059.331:1758): avc: denied { shutdown } for pid=21737 comm="syz.5.4240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1438.818766][ T7478] hid (null): unknown global tag 0xd [ 1438.841552][ T7478] hid (null): unknown global tag 0xe [ 1438.853333][ T7478] hid-generic 8000:E799:3005.001E: invalid report_count 22312 [ 1438.860926][ T7478] hid-generic 8000:E799:3005.001E: item 0 2 1 9 parsing failed [ 1438.868949][ T7478] hid-generic 8000:E799:3005.001E: probe with driver hid-generic failed with error -22 [ 1439.414081][ T30] audit: type=1400 audit(1766132060.163:1759): avc: denied { create } for pid=21759 comm="syz.3.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1439.570931][T21764] 9p: Bad value for 'wfdno' [ 1439.579127][T21764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4245'. [ 1439.635264][ T30] audit: type=1400 audit(1766132060.313:1760): avc: denied { create } for pid=21759 comm="syz.3.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1440.112303][ T5860] usb 1-1: USB disconnect, device number 126 [ 1440.139043][ T30] audit: type=1400 audit(1766132060.313:1761): avc: denied { write } for pid=21759 comm="syz.3.4245" path="socket:[79147]" dev="sockfs" ino=79147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1440.139090][ T30] audit: type=1400 audit(1766132060.322:1762): avc: denied { read } for pid=21759 comm="syz.3.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1440.139127][ T30] audit: type=1400 audit(1766132060.378:1763): avc: denied { write } for pid=21759 comm="syz.3.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1440.545929][T21771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4247'. [ 1440.635168][ T30] audit: type=1400 audit(1766132061.248:1764): avc: denied { create } for pid=21766 comm="syz.0.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1441.492167][T21785] bad cache= option: /Ö3 [ 1441.492167][T21785] [ 1441.548495][T21785] CIFS: VFS: bad cache= option: /Ö3 [ 1441.563401][T21785] CIFS mount error: No usable UNC path provided in device string! [ 1441.563401][T21785] [ 1442.076768][T21785] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1442.463274][ T7426] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1442.513742][T21799] FAULT_INJECTION: forcing a failure. [ 1442.513742][T21799] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.548236][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1442.554933][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1442.805574][ T7426] usb 2-1: Using ep0 maxpacket: 32 [ 1442.816675][ T7426] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1442.828722][ T7426] usb 2-1: config 0 has no interface number 0 [ 1442.834852][ T7426] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1442.843515][ T7426] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1442.852654][ T7426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.860716][ T7426] usb 2-1: Product: syz [ 1442.861108][T21799] CPU: 1 UID: 0 PID: 21799 Comm: syz.3.4257 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.861131][T21799] Tainted: [L]=SOFTLOCKUP [ 1442.861136][T21799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1442.861145][T21799] Call Trace: [ 1442.861150][T21799] [ 1442.861156][T21799] dump_stack_lvl+0x16c/0x1f0 [ 1442.861180][T21799] should_fail_ex+0x512/0x640 [ 1442.861201][T21799] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1442.861218][T21799] should_failslab+0xc2/0x120 [ 1442.861237][T21799] __kmalloc_cache_noprof+0x80/0x800 [ 1442.861252][T21799] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 1442.861273][T21799] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 1442.861289][T21799] vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 1442.861305][T21799] drm_atomic_get_crtc_state+0x1de/0x620 [ 1442.861329][T21799] drm_atomic_get_plane_state+0x4a3/0x760 [ 1442.861351][T21799] drm_atomic_set_property+0x560/0x3bf0 [ 1442.861377][T21799] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 1442.861404][T21799] ? __might_fault+0xe3/0x190 [ 1442.861417][T21799] ? __might_fault+0xe3/0x190 [ 1442.861429][T21799] ? __might_fault+0x13b/0x190 [ 1442.861453][T21799] drm_mode_atomic_ioctl+0x6c1/0x2640 [ 1442.861484][T21799] ? avc_has_extended_perms+0x47c/0x1090 [ 1442.861511][T21799] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1442.861532][T21799] ? __lock_acquire+0x436/0x2890 [ 1442.861550][T21799] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1442.861586][T21799] ? drm_is_current_master+0x2c/0x40 [ 1442.861608][T21799] ? do_raw_spin_unlock+0x172/0x230 [ 1442.861631][T21799] drm_ioctl_kernel+0x1f4/0x3e0 [ 1442.861650][T21799] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1442.861673][T21799] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1442.861699][T21799] drm_ioctl+0x5c9/0xc30 [ 1442.861722][T21799] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1442.861745][T21799] ? __pfx_drm_ioctl+0x10/0x10 [ 1442.861774][T21799] ? selinux_file_ioctl+0x180/0x270 [ 1442.861793][T21799] ? selinux_file_ioctl+0xb4/0x270 [ 1442.861812][T21799] ? __pfx_drm_ioctl+0x10/0x10 [ 1442.861832][T21799] __x64_sys_ioctl+0x18e/0x210 [ 1442.861852][T21799] do_syscall_64+0xcd/0xf80 [ 1442.861872][T21799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.861886][T21799] RIP: 0033:0x7faad1d8f749 [ 1442.861898][T21799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1442.861912][T21799] RSP: 002b:00007faad2cfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1442.861926][T21799] RAX: ffffffffffffffda RBX: 00007faad1fe5fa0 RCX: 00007faad1d8f749 [ 1442.861936][T21799] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 1442.861944][T21799] RBP: 00007faad2cfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.861953][T21799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1442.861962][T21799] R13: 00007faad1fe6038 R14: 00007faad1fe5fa0 R15: 00007ffff1527248 [ 1442.861983][T21799] [ 1443.297800][ T7426] usb 2-1: Manufacturer: syz [ 1443.307864][ T7426] usb 2-1: SerialNumber: syz [ 1443.320665][ T7426] usb 2-1: config 0 descriptor?? [ 1443.333821][ T7426] smsc75xx v1.0.0 [ 1443.652650][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1443.661301][ T30] audit: type=1400 audit(1766132064.092:1783): avc: denied { create } for pid=21806 comm="syz.0.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1443.998191][ T30] audit: type=1400 audit(1766132064.110:1784): avc: denied { connect } for pid=21806 comm="syz.0.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1444.036760][ T30] audit: type=1400 audit(1766132064.110:1785): avc: denied { write } for pid=21806 comm="syz.0.4259" laddr=fe80::38a6:2dff:fe17:2fe lport=39941 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1444.120339][ T5860] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1444.200972][ T7426] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1444.211985][ T7426] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1444.229277][ T7426] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1444.242323][ T7426] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1444.280649][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 1444.287386][ T5860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.302017][ T5860] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1444.337567][ T5860] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1444.462541][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.674839][ T5860] usb 5-1: config 0 descriptor?? [ 1444.682347][ T5860] hso 5-1:0.0: Can't find BULK IN endpoint [ 1444.864234][ T30] audit: type=1400 audit(1766132065.270:1786): avc: denied { create } for pid=21827 comm="syz.0.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1444.864286][ T30] audit: type=1400 audit(1766132065.270:1787): avc: denied { bind } for pid=21827 comm="syz.0.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1444.864323][ T30] audit: type=1400 audit(1766132065.270:1788): avc: denied { listen } for pid=21827 comm="syz.0.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1444.864361][ T30] audit: type=1400 audit(1766132065.270:1789): avc: denied { connect } for pid=21827 comm="syz.0.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1444.864396][ T30] audit: type=1400 audit(1766132065.270:1790): avc: denied { accept } for pid=21827 comm="syz.0.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1444.864431][ T30] audit: type=1400 audit(1766132065.270:1791): avc: denied { write } for pid=21827 comm="syz.0.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1444.925617][ T5860] usb 5-1: USB disconnect, device number 108 [ 1446.441530][ T30] audit: type=1400 audit(1766132066.692:1792): avc: denied { setcurrent } for pid=21839 comm="syz.3.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1447.964648][T21847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4270'. [ 1448.054893][ T5860] usb 2-1: USB disconnect, device number 100 [ 1448.179550][T21851] FAULT_INJECTION: forcing a failure. [ 1448.179550][T21851] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.192277][T21851] CPU: 0 UID: 0 PID: 21851 Comm: syz.1.4273 Tainted: G L syzkaller #0 PREEMPT(full) [ 1448.192295][T21851] Tainted: [L]=SOFTLOCKUP [ 1448.192299][T21851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1448.192305][T21851] Call Trace: [ 1448.192308][T21851] [ 1448.192312][T21851] dump_stack_lvl+0x16c/0x1f0 [ 1448.192330][T21851] should_fail_ex+0x512/0x640 [ 1448.192346][T21851] ? fs_reclaim_acquire+0xae/0x150 [ 1448.192361][T21851] should_failslab+0xc2/0x120 [ 1448.192376][T21851] __kmalloc_noprof+0xeb/0x910 [ 1448.192392][T21851] ? tomoyo_encode2+0x100/0x3e0 [ 1448.192409][T21851] ? tomoyo_encode2+0x100/0x3e0 [ 1448.192423][T21851] tomoyo_encode2+0x100/0x3e0 [ 1448.192438][T21851] tomoyo_encode+0x29/0x50 [ 1448.192452][T21851] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1448.192470][T21851] tomoyo_path_number_perm+0x245/0x580 [ 1448.192482][T21851] ? tomoyo_path_number_perm+0x237/0x580 [ 1448.192495][T21851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1448.192508][T21851] ? find_held_lock+0x2b/0x80 [ 1448.192536][T21851] ? find_held_lock+0x2b/0x80 [ 1448.192556][T21851] ? hook_file_ioctl_common+0x144/0x410 [ 1448.192575][T21851] ? __fget_files+0x20e/0x3c0 [ 1448.192593][T21851] security_file_ioctl+0x9b/0x240 [ 1448.192608][T21851] __x64_sys_ioctl+0xb7/0x210 [ 1448.192621][T21851] do_syscall_64+0xcd/0xf80 [ 1448.192635][T21851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.192646][T21851] RIP: 0033:0x7f704c98f749 [ 1448.192655][T21851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1448.192665][T21851] RSP: 002b:00007f704d759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.192675][T21851] RAX: ffffffffffffffda RBX: 00007f704cbe5fa0 RCX: 00007f704c98f749 [ 1448.192681][T21851] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000005 [ 1448.192687][T21851] RBP: 00007f704d759090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.192693][T21851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.192699][T21851] R13: 00007f704cbe6038 R14: 00007f704cbe5fa0 R15: 00007ffd0478da88 [ 1448.192713][T21851] [ 1448.192723][T21851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1449.066565][ T30] audit: type=1400 audit(1766132069.208:1793): avc: denied { setopt } for pid=21859 comm="syz.4.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1450.278038][ T30] audit: type=1400 audit(1766132070.340:1794): avc: denied { read write } for pid=21875 comm="syz.0.4279" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1450.366246][ T30] audit: type=1400 audit(1766132070.368:1795): avc: denied { open } for pid=21875 comm="syz.0.4279" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1450.527731][ T30] audit: type=1400 audit(1766132070.555:1796): avc: denied { ioctl } for pid=21875 comm="syz.0.4279" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1450.748856][ T30] audit: type=1400 audit(1766132070.780:1797): avc: denied { create } for pid=21882 comm="syz.3.4281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1450.780586][ T30] audit: type=1400 audit(1766132070.780:1798): avc: denied { connect } for pid=21882 comm="syz.3.4281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1451.103384][ T30] audit: type=1400 audit(1766132070.986:1799): avc: denied { create } for pid=21889 comm="syz.4.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1451.240214][ T30] audit: type=1400 audit(1766132070.995:1800): avc: denied { connect } for pid=21888 comm="syz.3.4283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1452.258600][ T30] audit: type=1400 audit(1766132071.809:1801): avc: denied { create } for pid=21899 comm="syz.3.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1452.437613][ T30] audit: type=1400 audit(1766132072.333:1802): avc: denied { write } for pid=21905 comm="syz.1.4287" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1452.508092][T21906] comedi comedi1: pcm3724: I/O port conflict (0xffffffffffffffff,16) [ 1453.480084][T21929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28378 sclass=netlink_route_socket pid=21929 comm=syz.3.4291 [ 1453.784587][ T5995] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1453.962419][T21939] netlink: 444 bytes leftover after parsing attributes in process `syz.5.4295'. [ 1453.977960][ T5995] usb 4-1: Using ep0 maxpacket: 8 [ 1453.984925][ T5995] usb 4-1: config 0 has no interfaces? [ 1453.994152][ T5995] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1454.003486][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.011666][ T5995] usb 4-1: Product: syz [ 1454.015969][ T5995] usb 4-1: Manufacturer: syz [ 1454.020712][ T5995] usb 4-1: SerialNumber: syz [ 1454.083256][ T5995] usb 4-1: config 0 descriptor?? [ 1454.447573][ T5995] usb 4-1: USB disconnect, device number 92 [ 1454.640851][T21954] FAULT_INJECTION: forcing a failure. [ 1454.640851][T21954] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.653678][T21954] CPU: 0 UID: 0 PID: 21954 Comm: syz.1.4300 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.653704][T21954] Tainted: [L]=SOFTLOCKUP [ 1454.653711][T21954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1454.653720][T21954] Call Trace: [ 1454.653728][T21954] [ 1454.653735][T21954] dump_stack_lvl+0x16c/0x1f0 [ 1454.653762][T21954] should_fail_ex+0x512/0x640 [ 1454.653786][T21954] ? __kmalloc_noprof+0xca/0x910 [ 1454.653814][T21954] should_failslab+0xc2/0x120 [ 1454.653837][T21954] __kmalloc_noprof+0xeb/0x910 [ 1454.653863][T21954] ? copy_splice_read+0x1a8/0xc20 [ 1454.653890][T21954] ? copy_splice_read+0x1a8/0xc20 [ 1454.653912][T21954] copy_splice_read+0x1a8/0xc20 [ 1454.653934][T21954] ? rcu_is_watching+0x12/0xc0 [ 1454.653951][T21954] ? irqentry_exit+0x1dd/0x8c0 [ 1454.653973][T21954] ? irqentry_exit+0x1dd/0x8c0 [ 1454.653992][T21954] ? rcu_is_watching+0x12/0xc0 [ 1454.654007][T21954] ? __pfx_copy_splice_read+0x10/0x10 [ 1454.654033][T21954] ? look_up_lock_class+0x59/0x130 [ 1454.654058][T21954] ? lockdep_init_map_type+0x5c/0x270 [ 1454.654079][T21954] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1454.654103][T21954] ? __pfx_copy_splice_read+0x10/0x10 [ 1454.654125][T21954] do_splice_read+0x285/0x370 [ 1454.654151][T21954] splice_direct_to_actor+0x2a1/0xa30 [ 1454.654177][T21954] ? __pfx_direct_splice_actor+0x10/0x10 [ 1454.654205][T21954] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1454.654236][T21954] do_splice_direct+0x174/0x240 [ 1454.654260][T21954] ? __pfx_do_splice_direct+0x10/0x10 [ 1454.654284][T21954] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1454.654308][T21954] ? bpf_lsm_file_permission+0x9/0x10 [ 1454.654324][T21954] ? security_file_permission+0x71/0x210 [ 1454.654348][T21954] ? rw_verify_area+0xcf/0x6c0 [ 1454.654369][T21954] do_sendfile+0xb06/0xe50 [ 1454.654393][T21954] ? __pfx_do_sendfile+0x10/0x10 [ 1454.654415][T21954] ? __pfx___schedule+0x10/0x10 [ 1454.654438][T21954] __x64_sys_sendfile64+0x1d8/0x220 [ 1454.654463][T21954] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1454.654486][T21954] ? rcu_is_watching+0x12/0xc0 [ 1454.654508][T21954] do_syscall_64+0xcd/0xf80 [ 1454.654531][T21954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.654548][T21954] RIP: 0033:0x7f704c98f749 [ 1454.654567][T21954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1454.654582][T21954] RSP: 002b:00007f704abd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1454.654598][T21954] RAX: ffffffffffffffda RBX: 00007f704cbe6180 RCX: 00007f704c98f749 [ 1454.654609][T21954] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000007 [ 1454.654618][T21954] RBP: 00007f704abd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.654631][T21954] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000001 [ 1454.654641][T21954] R13: 00007f704cbe6218 R14: 00007f704cbe6180 R15: 00007ffd0478da88 [ 1454.654666][T21954] [ 1454.950719][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1454.950736][ T30] audit: type=1400 audit(1766132074.709:1811): avc: denied { shutdown } for pid=21951 comm="syz.1.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1455.001837][ T30] audit: type=1400 audit(1766132074.709:1812): avc: denied { read } for pid=21951 comm="syz.1.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1455.078176][ T30] audit: type=1400 audit(1766132074.709:1813): avc: denied { ioctl } for pid=21951 comm="syz.1.4300" path="socket:[80001]" dev="sockfs" ino=80001 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1455.165468][ T30] audit: type=1400 audit(1766132074.868:1814): avc: denied { connect } for pid=21955 comm="syz.4.4301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1455.612991][T21964] netlink: 'syz.4.4301': attribute type 4 has an invalid length. [ 1455.742924][ T30] audit: type=1400 audit(1766132075.111:1815): avc: denied { mount } for pid=21955 comm="syz.4.4301" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1455.810270][ T30] audit: type=1400 audit(1766132075.111:1816): avc: denied { remount } for pid=21955 comm="syz.4.4301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1455.916358][T21968] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1455.981986][ T30] audit: type=1400 audit(1766132075.550:1817): avc: denied { write } for pid=21967 comm="syz.3.4305" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1456.005737][ T30] audit: type=1400 audit(1766132075.607:1818): avc: denied { map } for pid=21967 comm="syz.3.4305" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1456.270186][ T30] audit: type=1400 audit(1766132075.906:1819): avc: denied { unmount } for pid=16945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1456.494029][T21984] /dev/nullb0: Can't open blockdev [ 1457.332877][ T5860] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1457.449440][T21998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1457.465711][ T30] audit: type=1400 audit(1766132077.047:1820): avc: denied { write } for pid=21997 comm="syz.0.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1457.550001][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.555805][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.223009][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1508.229331][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1570.857392][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1570.864361][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5175/1:b..l P1872/1:b..l [ 1570.874041][ C0] rcu: (detected by 0, t=10502 jiffies, g=101753, q=2218 ncpus=2) [ 1570.881925][ C0] task:kworker/u8:7 state:R running task stack:23416 pid:1872 tgid:1872 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1570.896853][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1570.904678][ C0] Call Trace: [ 1570.907945][ C0] [ 1570.910877][ C0] ? __schedule+0x10b9/0x6150 [ 1570.915552][ C0] __schedule+0x1139/0x6150 [ 1570.920043][ C0] ? ret_from_fork+0x983/0xb10 [ 1570.924800][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1570.929748][ C0] ? __pfx___schedule+0x10/0x10 [ 1570.934590][ C0] ? mark_held_locks+0x49/0x80 [ 1570.939344][ C0] preempt_schedule_irq+0x51/0x90 [ 1570.944360][ C0] irqentry_exit+0x1d8/0x8c0 [ 1570.948947][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1570.954914][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 1570.960102][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b8 ee 0e 0f 82 74 02 00 00 8b 35 0a e9 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1570.979699][ C0] RSP: 0018:ffffc900051579c8 EFLAGS: 00000206 [ 1570.985755][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 00000000ac0dc1b1 [ 1570.993713][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7da3 RDI: ffffffff8bf2b380 [ 1571.001670][ C0] RBP: 0000000000000002 R08: 000000000666e335 R09: 0000000050666e33 [ 1571.009630][ C0] R10: 0000000000000002 R11: ffff88802a4fd4b0 R12: 0000000000000000 [ 1571.017587][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1571.025562][ C0] ? batadv_iv_ogm_schedule_buff+0x780/0x14c0 [ 1571.031628][ C0] batadv_iv_ogm_schedule_buff+0x5d0/0x14c0 [ 1571.037510][ C0] ? batadv_iv_ogm_schedule_buff+0x5bf/0x14c0 [ 1571.043568][ C0] ? ww_mutex_lock+0x81/0x160 [ 1571.048244][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 1571.054569][ C0] ? batadv_send_skb_packet+0x597/0x6f0 [ 1571.060116][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 1571.067141][ C0] process_one_work+0x9ba/0x1b20 [ 1571.072076][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1571.079613][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1571.084985][ C0] ? assign_work+0x1a0/0x250 [ 1571.089572][ C0] worker_thread+0x6c8/0xf10 [ 1571.094163][ C0] ? __kthread_parkme+0x19e/0x250 [ 1571.099180][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1571.104292][ C0] kthread+0x3c5/0x780 [ 1571.108364][ C0] ? __pfx_kthread+0x10/0x10 [ 1571.112957][ C0] ? rcu_is_watching+0x12/0xc0 [ 1571.117710][ C0] ? __pfx_kthread+0x10/0x10 [ 1571.122289][ C0] ret_from_fork+0x983/0xb10 [ 1571.126878][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1571.131980][ C0] ? __switch_to+0x7af/0x10d0 [ 1571.136649][ C0] ? __pfx_kthread+0x10/0x10 [ 1571.141231][ C0] ret_from_fork_asm+0x1a/0x30 [ 1571.146003][ C0] [ 1571.149009][ C0] task:klogd state:R running task stack:24952 pid:5175 tgid:5175 ppid:1 task_flags:0x400100 flags:0x00080000 [ 1571.162479][ C0] Call Trace: [ 1571.165744][ C0] [ 1571.168665][ C0] ? __schedule+0x10b9/0x6150 [ 1571.173331][ C0] __schedule+0x1139/0x6150 [ 1571.177839][ C0] ? __pfx___schedule+0x10/0x10 [ 1571.182686][ C0] ? mark_held_locks+0x49/0x80 [ 1571.187441][ C0] preempt_schedule_irq+0x51/0x90 [ 1571.192456][ C0] irqentry_exit+0x1d8/0x8c0 [ 1571.197039][ C0] ? rcu_is_watching+0x12/0xc0 [ 1571.201794][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1571.207241][ C0] RIP: 0010:__read_once_word_nocheck+0x3/0x10 [ 1571.213301][ C0] Code: c7 c7 b8 80 8a 8b e8 3c 15 bc 00 e9 e8 fb ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 07 08 88 0e 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 1571.232898][ C0] RSP: 0018:ffffc90003ecf448 EFLAGS: 00000202 [ 1571.238959][ C0] RAX: ffffffff8b77814d RBX: 0000000000000001 RCX: ffffc90003ed0000 [ 1571.246919][ C0] RDX: ffffc90003ecff01 RSI: ffffc90003ecff10 RDI: ffffc90003ecff10 [ 1571.254890][ C0] RBP: ffffc90003ecf508 R08: ffffffff91b0f5b8 R09: 0000000085999d6b [ 1571.262847][ C0] R10: 0000000000000002 R11: 0000000000083be3 R12: ffffc90003ecf510 [ 1571.270809][ C0] R13: ffffc90003ecf4c0 R14: ffffc90003ecff18 R15: ffffc90003ecf4f4 [ 1571.278774][ C0] ? do_syscall_64+0xcd/0xf80 [ 1571.283449][ C0] unwind_next_frame+0xb8f/0x20b0 [ 1571.288466][ C0] ? __x64_sys_sendto+0xe0/0x1c0 [ 1571.293421][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1571.299567][ C0] arch_stack_walk+0x94/0x100 [ 1571.304248][ C0] ? __x64_sys_sendto+0xe0/0x1c0 [ 1571.309184][ C0] stack_trace_save+0x8e/0xc0 [ 1571.313856][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1571.319216][ C0] ? __lock_acquire+0x436/0x2890 [ 1571.324154][ C0] save_stack+0x160/0x1f0 [ 1571.328481][ C0] ? __pfx_save_stack+0x10/0x10 [ 1571.333343][ C0] ? __free_frozen_pages+0x7df/0x1170 [ 1571.338707][ C0] ? __put_partials+0x130/0x170 [ 1571.343540][ C0] ? qlist_free_all+0x4c/0xf0 [ 1571.348202][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 1571.353822][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 1571.358841][ C0] ? __kmalloc_node_track_caller_noprof+0x30b/0x930 [ 1571.365420][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 1571.370267][ C0] ? __alloc_skb+0x186/0x410 [ 1571.374854][ C0] ? alloc_skb_with_frags+0xe0/0x860 [ 1571.380127][ C0] ? sock_alloc_send_pskb+0x7f9/0x980 [ 1571.385493][ C0] ? unix_dgram_sendmsg+0x3bc/0x1830 [ 1571.390775][ C0] ? __sys_sendto+0x4a3/0x520 [ 1571.395445][ C0] ? __x64_sys_sendto+0xe0/0x1c0 [ 1571.400377][ C0] ? page_ext_put+0x3e/0xd0 [ 1571.404877][ C0] __reset_page_owner+0x84/0x1a0 [ 1571.409814][ C0] __free_frozen_pages+0x7df/0x1170 [ 1571.415016][ C0] __put_partials+0x130/0x170 [ 1571.419685][ C0] qlist_free_all+0x4c/0xf0 [ 1571.424179][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 1571.429632][ C0] __kasan_slab_alloc+0x69/0x90 [ 1571.434477][ C0] __kmalloc_node_track_caller_noprof+0x30b/0x930 [ 1571.440882][ C0] ? __alloc_skb+0x186/0x410 [ 1571.445469][ C0] ? preempt_schedule_common+0x1/0xc0 [ 1571.450838][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 1571.455683][ C0] kmalloc_reserve+0xef/0x2c0 [ 1571.460359][ C0] __alloc_skb+0x186/0x410 [ 1571.464774][ C0] ? __alloc_skb+0x35d/0x410 [ 1571.469362][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1571.474304][ C0] ? alloc_skb_with_frags+0x90/0x860 [ 1571.479580][ C0] ? alloc_skb_with_frags+0x9e/0x860 [ 1571.484861][ C0] alloc_skb_with_frags+0xe0/0x860 [ 1571.489966][ C0] ? find_held_lock+0x2b/0x80 [ 1571.494641][ C0] sock_alloc_send_pskb+0x7f9/0x980 [ 1571.499845][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1571.505560][ C0] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1571.511883][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1571.518560][ C0] unix_dgram_sendmsg+0x3bc/0x1830 [ 1571.523678][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1571.530438][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1571.535981][ C0] ? lock_acquire+0x179/0x330 [ 1571.540661][ C0] __sys_sendto+0x4a3/0x520 [ 1571.545160][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1571.550178][ C0] ? rcu_is_watching+0x12/0xc0 [ 1571.554964][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 1571.559727][ C0] ? do_syscall_64+0x91/0xf80 [ 1571.564395][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1571.569584][ C0] do_syscall_64+0xcd/0xf80 [ 1571.574082][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.579962][ C0] RIP: 0033:0x7f633c292407 [ 1571.584362][ C0] RSP: 002b:00007ffcf24f7ba0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1571.592765][ C0] RAX: ffffffffffffffda RBX: 00007f633c142c80 RCX: 00007f633c292407 [ 1571.600729][ C0] RDX: 0000000000000087 RSI: 00007ffcf24f7ce0 RDI: 0000000000000003 [ 1571.608689][ C0] RBP: 00007ffcf24f8110 R08: 0000000000000000 R09: 0000000000000000 [ 1571.616649][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffcf24f8128 [ 1571.624607][ C0] R13: 00007ffcf24f7ce0 R14: 000000000000006c R15: 00007ffcf24f7ce0 [ 1571.632579][ C0] [ 1571.635589][ C0] rcu: rcu_preempt kthread starved for 10573 jiffies! g101753 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1571.646856][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1571.656808][ C0] rcu: RCU grace-period kthread stack dump: [ 1571.662677][ C0] task:rcu_preempt state:R running task stack:28392 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1571.676155][ C0] Call Trace: [ 1571.679428][ C0] [ 1571.682353][ C0] ? __schedule+0x10b9/0x6150 [ 1571.687023][ C0] __schedule+0x1139/0x6150 [ 1571.691532][ C0] ? __pfx___schedule+0x10/0x10 [ 1571.696372][ C0] ? find_held_lock+0x2b/0x80 [ 1571.701044][ C0] ? schedule+0x2d7/0x3a0 [ 1571.705369][ C0] schedule+0xe7/0x3a0 [ 1571.709430][ C0] schedule_timeout+0x123/0x290 [ 1571.714270][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1571.719630][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1571.724911][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1571.730712][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1571.736165][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1571.740926][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1571.746204][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1571.751398][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1571.756325][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1571.761171][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1571.766972][ C0] rcu_gp_kthread+0x26d/0x380 [ 1571.771642][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1571.776830][ C0] ? rcu_is_watching+0x12/0xc0 [ 1571.781588][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1571.786784][ C0] ? __kthread_parkme+0x19e/0x250 [ 1571.791797][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1571.796994][ C0] kthread+0x3c5/0x780 [ 1571.801055][ C0] ? __pfx_kthread+0x10/0x10 [ 1571.805640][ C0] ? rcu_is_watching+0x12/0xc0 [ 1571.810395][ C0] ? __pfx_kthread+0x10/0x10 [ 1571.814978][ C0] ret_from_fork+0x983/0xb10 [ 1571.819561][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1571.824677][ C0] ? __switch_to+0x7af/0x10d0 [ 1571.829347][ C0] ? __pfx_kthread+0x10/0x10 [ 1571.833928][ C0] ret_from_fork_asm+0x1a/0x30 [ 1571.838703][ C0] [ 1571.841711][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1571.848019][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1571.858510][ C0] Tainted: [L]=SOFTLOCKUP [ 1571.862819][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1571.872865][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1571.878490][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1571.898085][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1571.904140][ C0] RAX: 00000000091d8bc1 RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 1571.912100][ C0] RDX: 0000000000000000 RSI: ffffffff8dacde3b RDI: ffffffff8bf2b380 [ 1571.920057][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1571.928020][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1571.935976][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b3d0 R15: 0000000000000000 [ 1571.943935][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1571.952862][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1571.959434][ C0] CR2: 00007fff9a3d5270 CR3: 0000000074e01000 CR4: 00000000003526f0 [ 1571.967415][ C0] Call Trace: [ 1571.970682][ C0] [ 1571.973598][ C0] default_idle+0x13/0x20 [ 1571.977927][ C0] default_idle_call+0x6c/0xb0 [ 1571.982685][ C0] do_idle+0x38d/0x510 [ 1571.986752][ C0] ? __pfx_do_idle+0x10/0x10 [ 1571.991344][ C0] cpu_startup_entry+0x4f/0x60 [ 1571.996111][ C0] rest_init+0x16b/0x2b0 [ 1572.000355][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1572.005628][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1572.011160][ C0] start_kernel+0x3ef/0x4d0 [ 1572.015664][ C0] x86_64_start_reservations+0x18/0x30 [ 1572.021119][ C0] x86_64_start_kernel+0x130/0x190 [ 1572.026225][ C0] common_startup_64+0x13e/0x148 [ 1572.031165][ C0] [ 1573.125020][T18438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1573.137379][ T3820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1573.149670][ T3820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1573.162127][ T3820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1573.916658][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1573.922974][ T1295] ieee802154 phy1 wpan1: encryption failed: -22