last executing test programs: 11.354798985s ago: executing program 0 (id=2026): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000340)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$P9_RMKNOD(r2, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x30}}, 0x884) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800ff007c05e8fe50a10a000500014002020c600e41b0001200ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) readv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xaa00, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000002c0)={0x4, &(0x7f00000001c0)=[{0x3ff, 0x70, 0x6, 0x34c}, {0x401, 0x5, 0x0, 0x2}, {0x7f, 0xf, 0x4, 0x4}, {0x681e, 0x2, 0xff, 0x4}]}) r9 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x4, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "115e4ecd", {0x3, 0x100, 0x0, 0x4, 0x3, 0x8, 0xd}}) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) read$rfkill(r8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108) 10.575764245s ago: executing program 2 (id=2032): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000003, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x4, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x2, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x681, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x8000000002) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102392, 0x18ff8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r9, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0xfffffbfe}}}, 0x38) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) recvmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) 7.826144994s ago: executing program 2 (id=2046): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x24}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0xa1, 0x0, 0x1, 0xb}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r2, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') open_tree(r8, &(0x7f0000006180)='./mnt\x00', 0x9002) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x8e5, 0x4, &(0x7f0000000080)=0x1}) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000, 0x40000) ioctl$VIDIOC_DV_TIMINGS_CAP(r9, 0xc0905664, &(0x7f0000000ac0)={0x0, 0x0, '\x00', @bt={0xffffff7f, 0x9, 0x4, 0xe54, 0x5, 0x8000000000000000, 0x0, 0xa}}) 6.81276306s ago: executing program 3 (id=2048): arch_prctl$ARCH_GET_GS(0x1004, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x1, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$hidraw(r6, &(0x7f0000000180)="faa6", 0x2) 6.275806218s ago: executing program 0 (id=2049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002cc0)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1}) fcntl$setlease(r3, 0x400, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, 0x0, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x40}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @NFCTH_STATUS={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000800) sendmsg$nl_route_sched(r2, 0x0, 0x0) r7 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x11000000}, 0x24008814) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x48, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x3d}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xc8c, 0x47}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x58}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x844}, 0x24000084) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 6.023624174s ago: executing program 4 (id=2050): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x3000000}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000400)=""/85, 0x0, 0xddd90001}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000540)=""/156, &(0x7f0000000140)=""/78, 0x200000}) r1 = fanotify_init(0x1, 0x80000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x30) fanotify_mark(r1, 0x455, 0x40001010, r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x18, 0x101000) fanotify_mark(r4, 0x39, 0x1a, r3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff7ffc}]}) close_range(r5, r1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r7, 0x5452, 0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x20004000) 6.019515399s ago: executing program 2 (id=2051): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="ca0e808b93", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000040)=[0x80012], 0x0, 0x1}}, 0x3c) 5.960223578s ago: executing program 0 (id=2052): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000003, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x4, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x2, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x681, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ac81da6441277f5ac3b660ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0389f241ae92"}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x8000000002) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102392, 0x18ff8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r9, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0xfffffbfe}}}, 0x38) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) recvmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) 5.885884607s ago: executing program 3 (id=2053): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0xa010200) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01070695afb7fedbdf250600000305000800000000001946afe75d966c40341bb7a412c5fb45bac03d58d0ed57a50f541fcb1a5c5b943e0e054097e6f34d8b5f3738e7a31d0581792f513d896538fb2e21124350d4f5d7410bacc421"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000851) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019500)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xea, &(0x7f0000000600)=""/234, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) epoll_create(0x7) ioperm(0x3, 0x9, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x132, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) recvfrom$inet(r5, 0x0, 0x0, 0x2043, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000000}]}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 5.523461555s ago: executing program 2 (id=2055): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b23b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d1cb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde314693f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c21f1c344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707468df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a976a9e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b84b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb6f3f8eb5384e3300000000000000000000000000006b78992d5c13cc1e4da0c915f6008be5cbc0ba1eea48d5967c5e5106411dda3578c91d93ecf4a5efdf306f6b5378db3b22f5aae576342ff9a2eda7080027be316100af0ec6f0e9f227e239fe2d8c78555aaaa969581860f846df35757281a6d3f2e6de960c30f98987ba99d1edfb39dece89262a2e71cb50b7104f611b8db7639e6a5b485135bead15cfada2b5ffa490d60f6b8211f6ada947d06fac138f829b24f2c9d60f3d6672ef8e86ddcdf4dba4f20f370c58f49c9d0100b519f8bc685f176c3f305ced21df0c8acace252a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="62eced8e4609000000000000007d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)="da70ba3bde"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="a1"}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x41, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 4.663694888s ago: executing program 3 (id=2056): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r1, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20014}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0x71, 0x19, "4bc16050222056b6a03da7e00de247ad99eb12a6b0ea9f5fe758173c46e6eafd8ad4642867cabc6a0c5760480b02fab96836465360294d5e7a61ee7ab8a576d38a0b5c1efac08b4db9fa715944a8e621a17116d66f9c1cb6e42ea75d3534a6aae8037526e2a83e91f86244c6f9"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_APDU={0xf, 0x19, "3f02e1a62b59cbb3bc251c"}]}, 0xd0}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x713, 0x70bd22, 0x0, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x8000, 0x4, 0x2, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x0, 0x0, 0xac}, [@algo_crypt={0x48, 0x2, {{'ecb-des3_ede-asm\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23, 0xffff, @local, 0x81}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xfffffffc}, 0x1c) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2], 0x14) close(0x3) 4.303648077s ago: executing program 1 (id=2057): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendto(r0, &(0x7f00000007c0)='[', 0x1, 0x8001, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xc0a55000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=')\x00', 0x2}], 0x1) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x8) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000480)={0x2, 0x3, 0xffff4663, 0x1, 0x7, 0xb56}) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) getpid() ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) 3.874696501s ago: executing program 4 (id=2058): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x111, 0x4b4, 0x150, 0x700, 0x258, 0x278, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x84}, 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x2, 0x81, 0xd23c, {0x4}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160ae36504b68675f8001d000a00a0e69ee517d344000000000000ce27251e6182949a36c23d3b48dfd8cdbf9367b4fa06000000c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80) r2 = getpid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230025bd7000fcdbdf25150000000c00060001000000010000002c002b802000038008000200030000000600010000000002000000000001000000000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x7, @private1, 0x7f}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x6c) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000600)=0x1) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x24004001) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = ioctl$KVM_GET_STATS_FD_vm(r9, 0xaece) setsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000080)=0xfb1, 0x4) read$FUSE(r10, &(0x7f0000001400)={0x2020}, 0xfffffffffffffe49) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, &(0x7f0000002880)) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) getpid() 3.819511588s ago: executing program 3 (id=2059): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 3.608135859s ago: executing program 3 (id=2060): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc, 0xbf}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="5500000020007fafb70000200000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x4000) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x805, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20008886) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20008886) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = eventfd2(0x0, 0x0) readv(r5, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r5, &(0x7f0000000280)=0x9, 0x8) (async) write$eventfd(r5, &(0x7f0000000280)=0x9, 0x8) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000), 0x4) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xa8, &(0x7f0000000400)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xa8, &(0x7f0000000400)=ANY=[]) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xfffffffffffffe2d, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x140d, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x5802) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x14) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r10, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000484c}, 0x40000) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r10, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000484c}, 0x40000) 3.520733013s ago: executing program 1 (id=2061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x51c6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x44, 0x78, 0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.351018517s ago: executing program 2 (id=2062): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8", 0x44}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd70000200001002"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x70}, 0x1, 0x7}, 0x0) 3.006845788s ago: executing program 1 (id=2063): arch_prctl$ARCH_GET_GS(0x1004, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x1, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$hidraw(r6, &(0x7f0000000180)="faa6", 0x2) 2.810895179s ago: executing program 2 (id=2064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x6, 0x2003) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) listen(0xffffffffffffffff, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000025300)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000000000044f900000000000000000040000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000002000000141416c010dd00aa2397491cfc876364f263478a12e4bd7ff8749a4031f67d2fa40bcd05d1ec56fd9ccfc23f12fe9f2acc0b5fcef46f974c971551e30a5f5714f5bd4998dcaff98418f334f9be54b76c45c0507582b78d2669989269ee6cc24b2a37d343d3a9d650abbc0f0688d16b7804adf32af6a290611f357966e13176814edc4a272c311c122d5c9f9f863f8616da338cbe2e437efe21cd1aecd676ef8de7a0063d6df8032d84a67a2ac4f14131553126ff5b43a1f6fea875d738dad721323575f02f972d197d"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000000a070000000000000000000200000009e6bf00010055797a30000000000400060038000000000000000000020000e40800010073797a30000000001600030091abc12404cf37e46309e9e763d62a2e04224d8da6d42d40ff"], 0x98}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYRESHEX=r7, @ANYRES64=r2], 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x38, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0}, 0x0) 2.449987117s ago: executing program 4 (id=2065): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0xfffffffffffffdd4, 0xfa00, @id_resuseaddr={&(0x7f0000000040)}}, 0x20) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x672c}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x9, 0xd, 0x8001, 0x6, 0xc3b}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, &(0x7f0000000140)) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2.140241722s ago: executing program 0 (id=2066): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0xf000, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 2.024153474s ago: executing program 1 (id=2067): timer_create(0x1, 0x0, &(0x7f0000000300)) syz_usbip_server_init(0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xc00, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x9) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 1.983825288s ago: executing program 0 (id=2068): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101040) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) gettid() sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x10}}, 0x40019) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000a40)) readv(r5, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.167233984s ago: executing program 1 (id=2069): sched_setscheduler(0x0, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') (async) mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0xc0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x29, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000ffffffffffff0004fcf8da99e581e1bb7ee61147a967133c7446371f00c4"], 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000200)={r1, &(0x7f0000000080)='net/tcp\x00', 0x5d24cc8da8b65dd7, 0x0, 0x3, &(0x7f0000000100), &(0x7f00000001c0)=0x3327}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(&(0x7f0000000240)=""/104, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setrlimit(0xa, &(0x7f00000000c0)={0xd9d, 0x7}) (async) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x6) (async) pread64(r0, 0x0, 0x0, 0x22) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket(0x2a, 0x3, 0x5) 491.941563ms ago: executing program 4 (id=2070): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 365.933899ms ago: executing program 1 (id=2071): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0xf, 0x20000, 0x2, 0xcbc, 0x1, 0x8}) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240db256c011c167adc0e975ea705b2ab8f92340f597e616e05690a25eb06c882fed51b70610245bab04b16205b7076cf5ba6a4fec5600d80281b1f773d8323ab8c1f856250d877a3a1c297e2352cb6c0c0525b427f34d39937545c6e11aed5089366e9073c83fb92972bc822f9", @ANYRES8, @ANYRESHEX=r0], 0x0) prlimit64(0x0, 0x3, &(0x7f00000000c0)={0x84eeeea, 0xd}, &(0x7f0000000140)) gettid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x48, &(0x7f00000000c0)={0x4000, 0xffffff7d}, 0x8) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x4, 0xe, 0xd}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000440)=@generic={0x23, "808b275a23a08023ca183c014cfe16abe45d203231839f37a13777450baec3cf96d15989f3570ab741a916ac9070c6b8d07d7212affda4f92116bf66870b612610a4e9e3047e3de7c82258de97e9ad6810d501eaef2a92d3e1af4e3efe33f1a8ca8282dd51d681ae01612070689666060bc4cb019ea3bc5be44d22dd964a"}, 0x80, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r2, 0x28, 0x1, 0xfffffffe, &(0x7f0000000340)=[0x0], 0x1, 0x0, &(0x7f0000000480), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a0b7a964}, 0x0) 345.037251ms ago: executing program 4 (id=2072): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x8, 0x90000) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}, 0x10000) 267.145596ms ago: executing program 3 (id=2073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002cc0)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1}) fcntl$setlease(r3, 0x400, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, 0x0, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x40}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @NFCTH_STATUS={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000800) sendmsg$nl_route_sched(r2, 0x0, 0x0) r7 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000080)='I', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x24008814) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x48, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x3d}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xc8c, 0x47}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x58}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x844}, 0x24000084) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 265.122229ms ago: executing program 0 (id=2074): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400", @ANYBLOB], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0xe, &(0x7f0000000a00)}, 0xb) bind$inet(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f60070090212000100000000090400"], 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x1f, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}}, 0x0) 0s ago: executing program 4 (id=2075): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x40100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) mmap$dsp(&(0x7f00004de000/0x4000)=nil, 0x4000, 0x100000d, 0x30, r1, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r9) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="afafcd5247e1caba833e5d7abfae6f72d333ca101293157397097f451c8c22b26e095cc7cf1e"], 0x1c}}, 0x2000040) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0xc584f9fca7969f65) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 3440][ T46] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 501.875248][ T46] usb 4-1: device descriptor read/8, error -71 [ 501.995130][ T46] usb usb4-port1: unable to enumerate USB device [ 502.312511][T11132] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 502.326983][T11133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11133 comm=syz.4.1485 [ 502.548877][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'. [ 502.602905][T11139] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 502.706799][ T29] audit: type=1400 audit(1780514515.975:758): avc: denied { ioctl } for pid=11144 comm="syz.1.1492" path="socket:[32312]" dev="sockfs" ino=32312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 503.809889][T11162] fuse: fd is not a fuse device [ 503.820888][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 503.830222][T11164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1497'. [ 504.202841][ T5710] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 504.533062][ T5710] usb 1-1: device descriptor read/64, error -71 [ 504.867628][T11175] validate_nla: 10 callbacks suppressed [ 504.867646][T11175] netlink: 'syz.2.1499': attribute type 6 has an invalid length. [ 504.893865][ T5710] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 504.959562][T11190] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 504.968864][T11190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11190 comm=syz.4.1502 [ 505.077633][ T5710] usb 1-1: device descriptor read/64, error -71 [ 505.218680][ T5710] usb usb1-port1: attempt power cycle [ 505.404441][ T5904] udevd[5904]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 505.636883][T11210] Failed to initialize the IGMP autojoin socket (err -2) [ 505.716837][T11211] Failed to initialize the IGMP autojoin socket (err -2) [ 505.985527][T11217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1509'. [ 505.995850][T11217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1509'. [ 506.010679][ T5710] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 506.053337][ T5710] usb 1-1: device descriptor read/8, error -71 [ 506.226478][T11218] netlink: 'syz.4.1509': attribute type 28 has an invalid length. [ 506.234432][T11218] netlink: 'syz.4.1509': attribute type 29 has an invalid length. [ 506.242467][T11218] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1509'. [ 506.333831][ T5710] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 506.465262][ T5710] usb 1-1: device descriptor read/8, error -71 [ 506.585278][ T29] audit: type=1400 audit(1780514519.845:759): avc: denied { create } for pid=11221 comm="syz.3.1510" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 506.675814][ T29] audit: type=1400 audit(1780514519.885:760): avc: denied { mounton } for pid=11221 comm="syz.3.1510" path="/283/file0" dev="tmpfs" ino=1521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 506.701489][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 506.718446][T11226] netlink: 'syz.3.1510': attribute type 32 has an invalid length. [ 506.726738][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 506.747378][ T5710] usb usb1-port1: unable to enumerate USB device [ 507.119670][T11226] bond1: Setting coupled_control to off (0) [ 508.418729][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'. [ 508.505044][T11242] syzkaller0: entered promiscuous mode [ 508.514252][T11242] syzkaller0: entered allmulticast mode [ 508.832750][ T5747] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 508.984796][ T5747] usb 1-1: Using ep0 maxpacket: 8 [ 509.003449][ T5747] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 509.021955][ T5747] usb 1-1: config 0 has no interface number 0 [ 509.050871][ T5747] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 509.068602][ T5614] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 509.085217][T11263] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 509.101961][ T5747] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 509.124920][ T29] audit: type=1400 audit(1780514522.375:761): avc: denied { relabelto } for pid=11262 comm="syz.3.1523" name="284" dev="tmpfs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 509.151649][ T5747] usb 1-1: config 0 interface 255 has no altsetting 0 [ 509.159678][ T29] audit: type=1400 audit(1780514522.375:762): avc: denied { associate } for pid=11262 comm="syz.3.1523" name="284" dev="tmpfs" ino=1522 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 509.209413][ T5747] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 509.220151][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.234908][ T5747] usb 1-1: Product: syz [ 509.243304][ T5747] usb 1-1: Manufacturer: syz [ 509.250989][ T5747] usb 1-1: SerialNumber: syz [ 509.272739][ T5614] usb 3-1: Using ep0 maxpacket: 8 [ 509.280093][ T5614] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 509.288813][ T5614] usb 3-1: config 179 has no interface number 0 [ 509.295874][ T5614] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 509.310767][ T5747] usb 1-1: config 0 descriptor?? [ 509.322762][ T5614] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 509.345824][T11268] Failed to initialize the IGMP autojoin socket (err -2) [ 509.359669][ T5614] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 509.372806][ T5747] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 509.384647][ T5747] pctv452e: pctv452e_power_ctrl: 1 [ 509.384647][ T5747] [ 509.397222][ T5747] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 509.397222][ T5747] [ 509.416213][ T5614] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 509.435757][ T5747] dvb-usb: bulk message failed: -22 (5/0) [ 509.450287][ T5614] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 509.481451][ T5614] usb 3-1: config 179 interface 65 has no altsetting 0 [ 509.491179][ T5614] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 509.501525][ T5747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.512866][ T5747] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 509.533403][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.541900][ T5747] usb 1-1: media controller created [ 509.607131][T11271] binder: 11270:11271 ioctl c0306201 200000000780 returned -14 [ 509.616668][ T5747] dvb-usb: bulk message failed: -22 (8/0) [ 509.624923][ T5747] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 509.676043][ T5614] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input48 [ 509.693783][ T5747] dvb-usb: MAC address reading failed. [ 509.759282][ T5747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.773541][ T4968] input input48: unable to receive magic message: -110 [ 509.803182][ T4968] input input48: unable to receive magic message: -32 [ 509.855752][ T4968] input input48: unable to receive magic message: -32 [ 509.897148][ T4968] input input48: unable to receive magic message: -32 [ 509.937717][ T4968] input input48: unable to receive magic message: -32 [ 510.017986][ T5614] usb 3-1: USB disconnect, device number 34 [ 510.018046][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 510.034632][ T5747] DVB: Unable to find symbol stb0899_attach() [ 510.040747][ T5747] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 510.192738][ T5747] rc_core: IR keymap rc-tt-1500 not found [ 510.199705][ T5747] Registered IR keymap rc-empty [ 510.212825][ T5747] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 510.239011][ T5747] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input49 [ 510.285040][ T5747] dvb-usb: schedule remote query interval to 100 msecs. [ 510.292754][ T5747] pctv452e: pctv452e_power_ctrl: 0 [ 510.292754][ T5747] [ 510.302124][ T5747] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 510.347565][ T29] audit: type=1400 audit(1780514523.605:763): avc: denied { write } for pid=5613 comm="syz-executor" name="284" dev="tmpfs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 510.379792][ T5747] usb 1-1: USB disconnect, device number 54 [ 510.393438][ T29] audit: type=1400 audit(1780514523.615:764): avc: denied { remove_name } for pid=5613 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 510.446944][ T5747] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 510.758767][ T29] audit: type=1400 audit(1780514523.615:765): avc: denied { write } for pid=5613 comm="syz-executor" name="284" dev="tmpfs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 510.793101][ T29] audit: type=1400 audit(1780514523.615:766): avc: denied { write } for pid=5613 comm="syz-executor" name="284" dev="tmpfs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 510.856472][ T29] audit: type=1400 audit(1780514523.615:767): avc: denied { write } for pid=5613 comm="syz-executor" name="284" dev="tmpfs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 510.900311][ T29] audit: type=1400 audit(1780514523.615:768): avc: denied { rmdir } for pid=5613 comm="syz-executor" name="284" dev="tmpfs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 511.043616][ T29] audit: type=1400 audit(1780514523.815:769): avc: denied { bind } for pid=11277 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 511.092921][ T5747] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 511.101719][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 511.242794][ T5747] usb 1-1: device descriptor read/64, error -71 [ 511.256165][ T29] audit: type=1400 audit(1780514524.525:770): avc: denied { ioctl } for pid=11290 comm="syz.2.1532" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 511.482818][ T5747] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 511.599815][T11300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1536'. [ 511.632939][ T5747] usb 1-1: device descriptor read/64, error -71 [ 511.643789][T11300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1536'. [ 511.768218][ T5747] usb usb1-port1: attempt power cycle [ 511.833077][ T10] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 511.878286][T11309] FAULT_INJECTION: forcing a failure. [ 511.878286][T11309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.917825][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1538 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.917855][T11309] Tainted: [L]=SOFTLOCKUP [ 511.917862][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.917872][T11309] Call Trace: [ 511.917877][T11309] [ 511.917884][T11309] dump_stack_lvl+0x100/0x190 [ 511.917911][T11309] should_fail_ex.cold+0x5/0xa [ 511.917936][T11309] _copy_from_user+0x2e/0xd0 [ 511.917959][T11309] kstrtouint_from_user+0xd6/0x1d0 [ 511.917985][T11309] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 511.918013][T11309] ? __lock_acquire+0x4a5/0x2630 [ 511.918039][T11309] ? preempt_schedule_thunk+0x16/0x30 [ 511.918072][T11309] proc_fail_nth_write+0x83/0x220 [ 511.918093][T11309] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 511.918120][T11309] vfs_write+0x2aa/0x1070 [ 511.918141][T11309] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 511.918163][T11309] ? __pfx_vfs_write+0x10/0x10 [ 511.918181][T11309] ? __fget_files+0x215/0x3d0 [ 511.918210][T11309] ? __fget_files+0x21f/0x3d0 [ 511.918239][T11309] ksys_write+0x12a/0x250 [ 511.918257][T11309] ? __pfx_ksys_write+0x10/0x10 [ 511.918275][T11309] ? exit_to_user_mode_loop+0xf3/0x670 [ 511.918300][T11309] ? rcu_is_watching+0x12/0xc0 [ 511.918329][T11309] do_syscall_64+0x115/0x870 [ 511.918350][T11309] ? clear_bhb_loop+0x40/0x90 [ 511.918372][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.918395][T11309] RIP: 0033:0x7f1b1a95d68e [ 511.918411][T11309] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 511.918427][T11309] RSP: 002b:00007f1b18bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 511.918445][T11309] RAX: ffffffffffffffda RBX: 00007f1b18bf66c0 RCX: 00007f1b1a95d68e [ 511.918456][T11309] RDX: 0000000000000001 RSI: 00007f1b18bf60a0 RDI: 0000000000000003 [ 511.918466][T11309] RBP: 00007f1b18bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 511.918476][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.918486][T11309] R13: 00007f1b1ac16128 R14: 00007f1b1ac16090 R15: 00007fff4d9a8b78 [ 511.918511][T11309] [ 511.935915][T11305] netlink: 'syz.4.1536': attribute type 28 has an invalid length. [ 512.112744][ T5747] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 512.157178][T11305] netlink: 'syz.4.1536': attribute type 29 has an invalid length. [ 512.168050][T11305] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1536'. [ 512.173214][ T5747] usb 1-1: device descriptor read/8, error -71 [ 512.229151][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.256730][ T10] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 512.287633][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.304582][ T10] usb 4-1: Product: syz [ 512.313088][ T10] usb 4-1: Manufacturer: syz [ 512.322735][ T10] usb 4-1: SerialNumber: syz [ 512.348810][ T10] usb 4-1: config 0 descriptor?? [ 512.379255][ T10] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 512.437097][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'. [ 512.467386][ T5747] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 512.587825][ T5747] usb 1-1: device descriptor read/8, error -71 [ 512.601222][ T5710] usb 4-1: USB disconnect, device number 44 [ 512.724655][ T5747] usb usb1-port1: unable to enumerate USB device [ 513.215792][T11329] trusted_key: encrypted_key: insufficient parameters specified [ 513.680817][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 513.698184][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 513.856122][T11334] fido_id[11334]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 514.075321][T11343] binder_alloc: 11342: binder_alloc_buf size 1024 failed, no address space [ 514.113119][T11343] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 514.145193][ T5747] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 514.192864][ T46] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 514.315310][ T5747] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.323562][ T5747] usb 5-1: config 0 has no interface number 0 [ 514.329754][ T5747] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 514.347755][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.366416][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 514.373054][ T5614] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 514.384194][ T5747] usb 5-1: config 0 descriptor?? [ 514.391083][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 514.402596][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 514.413028][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 514.425985][ T5747] usb 5-1: selecting invalid altsetting 1 [ 514.433307][ T5747] dvb_ttusb_budget: ttusb_init_controller: error [ 514.439710][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.452753][ T5747] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 514.464702][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.480474][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.522736][ T5614] usb 4-1: device descriptor read/64, error -71 [ 514.547979][ T5747] DVB: Unable to find symbol cx22700_attach() [ 514.602100][ T5747] DVB: Unable to find symbol tda10046_attach() [ 514.608982][ T5747] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 514.645831][T11339] binder: 11337:11339 ioctl 4018620d 0 returned -22 [ 514.656966][ T5633] Bluetooth: hci3: Malformed LE Event: 0x02 [ 514.769179][ T46] usb 3-1: GET_CAPABILITIES returned 0 [ 514.776817][ T46] usbtmc 3-1:16.0: can't read capabilities [ 514.812788][ T5614] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 514.874047][T11350] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1545'. [ 514.972906][ T5614] usb 4-1: device descriptor read/64, error -71 [ 515.356820][ T5614] usb usb4-port1: attempt power cycle [ 516.392747][ T5614] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 516.402820][T11360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1551'. [ 516.418216][ T5614] usb 4-1: device descriptor read/8, error -71 [ 516.440847][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1551'. [ 516.483747][T11360] netlink: 'syz.1.1551': attribute type 28 has an invalid length. [ 516.491630][T11360] netlink: 'syz.1.1551': attribute type 29 has an invalid length. [ 516.499478][T11360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1551'. [ 516.667160][T11365] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 516.696655][T11365] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 516.722881][ T5614] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 516.774284][ T5614] usb 4-1: device descriptor read/8, error -71 [ 516.878654][ T46] usb 5-1: USB disconnect, device number 46 [ 516.908083][ T5614] usb usb4-port1: unable to enumerate USB device [ 517.000769][ T5614] usb 3-1: USB disconnect, device number 35 [ 517.572408][T11375] trusted_key: encrypted_key: insufficient parameters specified [ 518.057838][ T46] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 518.084713][ T46] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 518.698204][T11404] atomic_op ffff88802635a998 conn xmit_atomic 0000000000000000 [ 518.706524][T11404] netlink: 'syz.0.1562': attribute type 5 has an invalid length. [ 518.727777][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 518.727796][ T29] audit: type=1400 audit(1780514531.995:772): avc: granted { setsecparam } for pid=11399 comm="syz.0.1562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 519.009720][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 519.151378][ T29] audit: type=1400 audit(1780514532.415:773): avc: denied { map } for pid=11416 comm="syz.3.1567" path="socket:[34083]" dev="sockfs" ino=34083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 519.199789][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 519.271201][ T29] audit: type=1400 audit(1780514532.415:774): avc: denied { accept } for pid=11416 comm="syz.3.1567" path="socket:[34083]" dev="sockfs" ino=34083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 519.689818][T11432] trusted_key: encrypted_key: insufficient parameters specified [ 520.150752][ T5747] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 520.262444][T11435] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 520.270982][T11435] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 520.280015][T11435] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 520.594250][ T5747] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 520.943728][T11446] fuse: Bad value for 'group_id' [ 520.968412][T11446] fuse: Bad value for 'group_id' [ 521.259090][ T29] audit: type=1400 audit(1780514534.515:775): avc: denied { accept } for pid=11445 comm="syz.3.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 521.332629][T11443] fido_id[11443]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 522.066003][ T29] audit: type=1326 audit(1780514535.315:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 522.414518][T11480] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1583'. [ 522.425429][ T29] audit: type=1326 audit(1780514535.315:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 522.537060][ T29] audit: type=1326 audit(1780514535.315:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 522.813169][ T29] audit: type=1326 audit(1780514535.315:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 522.842194][ T29] audit: type=1326 audit(1780514535.315:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 522.981488][T11490] trusted_key: encrypted_key: insufficient parameters specified [ 523.394804][ T5747] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 523.426627][ T5747] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 524.944742][ T29] audit: type=1326 audit(1780514535.325:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faffe75d68e code=0x7ffc0000 [ 525.925084][ T29] audit: type=1326 audit(1780514535.325:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 526.057203][ T29] audit: type=1326 audit(1780514535.325:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 526.242763][ T29] audit: type=1326 audit(1780514535.335:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 526.288899][T11495] fido_id[11495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 526.402927][ T29] audit: type=1400 audit(1780514535.335:785): avc: denied { create } for pid=11472 comm="syz.1.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 526.488407][ T29] audit: type=1400 audit(1780514535.435:786): avc: denied { getopt } for pid=11472 comm="syz.1.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 526.606248][ T29] audit: type=1326 audit(1780514535.765:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 526.644327][ T46] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 526.658379][ T29] audit: type=1326 audit(1780514535.765:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 526.685570][ T29] audit: type=1400 audit(1780514539.365:789): avc: denied { connect } for pid=11497 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 526.736837][ T29] audit: type=1400 audit(1780514539.585:790): avc: denied { mount } for pid=11496 comm="syz.4.1587" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 526.878009][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 526.892783][ T5710] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 526.936655][ T46] usb 3-1: config 172 has an invalid interface number: 190 but max is 1 [ 526.964766][ T46] usb 3-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 526.991719][ T46] usb 3-1: config 172 has no interface number 1 [ 527.011028][ T46] usb 3-1: config 172 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.032239][ T46] usb 3-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 527.042753][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 527.068957][ T46] usb 3-1: string descriptor 0 read error: -22 [ 527.069373][ T5710] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 527.078937][ T46] usb 3-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 527.112697][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.200808][ T5710] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 527.213218][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.221392][ T5710] usb 4-1: Product: syz [ 527.227267][ T5710] usb 4-1: Manufacturer: syz [ 527.231992][ T5710] usb 4-1: SerialNumber: syz [ 527.252809][ T46] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 527.261181][T11523] atomic_op ffff88802675e198 conn xmit_atomic 0000000000000000 [ 527.270075][T11523] netlink: 'syz.0.1598': attribute type 5 has an invalid length. [ 527.287544][ T5710] usb 4-1: config 0 descriptor?? [ 527.310840][ T5710] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 527.330269][ T5710] usb 4-1: setting power ON [ 527.351412][ T5710] dvb-usb: bulk message failed: -22 (2/0) [ 527.417905][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 527.468169][ T5710] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 527.475405][T11506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.593959][T11506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.624822][ T5710] usb 4-1: media controller created [ 528.131166][ T46] usb 3-1: USB disconnect, device number 36 [ 528.174181][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.277202][ T5710] usb 4-1: selecting invalid altsetting 6 [ 528.298026][ T5710] usb 4-1: digital interface selection failed (-22) [ 528.306672][ T5710] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 528.319917][ T5710] usb 4-1: setting power OFF [ 528.325355][ T5710] dvb-usb: bulk message failed: -22 (2/0) [ 528.399851][ T5710] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 528.409415][T11537] Failed to initialize the IGMP autojoin socket (err -2) [ 528.417587][ T5710] (NULL device *): no alternate interface [ 529.100960][ T46] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 529.117888][ T46] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 529.221091][T11535] Failed to initialize the IGMP autojoin socket (err -2) [ 529.332985][T11546] fido_id[11546]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 529.641745][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1607'. [ 529.662808][ T5816] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 529.738311][ T5710] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 529.793660][ T5710] usb 4-1: USB disconnect, device number 49 [ 529.830593][ T5816] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 529.858978][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.928350][ T5816] usb 3-1: config 0 descriptor?? [ 530.044775][T11564] FAULT_INJECTION: forcing a failure. [ 530.044775][T11564] name failslab, interval 1, probability 0, space 0, times 0 [ 530.721631][ T5633] Bluetooth: hci2: SCO packet for unknown connection handle 3410 [ 530.729465][ T5816] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 530.751677][T11564] CPU: 1 UID: 0 PID: 11564 Comm: syz.3.1609 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.751696][T11564] Tainted: [L]=SOFTLOCKUP [ 530.751700][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.751706][T11564] Call Trace: [ 530.751710][T11564] [ 530.751715][T11564] dump_stack_lvl+0x100/0x190 [ 530.751735][T11564] should_fail_ex.cold+0x5/0xa [ 530.751759][T11564] should_failslab+0xc2/0x120 [ 530.751779][T11564] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 530.751803][T11564] ? skb_clone+0x190/0x400 [ 530.751828][T11564] skb_clone+0x190/0x400 [ 530.751844][T11564] netlink_deliver_tap+0xaed/0xcc0 [ 530.751861][T11564] netlink_unicast+0x62b/0x850 [ 530.751876][T11564] ? __pfx_netlink_unicast+0x10/0x10 [ 530.751902][T11564] netlink_sendmsg+0x8b0/0xda0 [ 530.751926][T11564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.751944][T11564] ? __might_fault+0x60/0x140 [ 530.751972][T11564] ____sys_sendmsg+0x9e1/0xb70 [ 530.751984][T11564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.752000][T11564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.752018][T11564] ___sys_sendmsg+0x190/0x1e0 [ 530.752035][T11564] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.752083][T11564] __sys_sendmsg+0x170/0x220 [ 530.752108][T11564] ? __pfx___sys_sendmsg+0x10/0x10 [ 530.752132][T11564] ? rcu_is_watching+0x12/0xc0 [ 530.752149][T11564] do_syscall_64+0x115/0x870 [ 530.752163][T11564] ? clear_bhb_loop+0x40/0x90 [ 530.752177][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.752193][T11564] RIP: 0033:0x7f459b99ce59 [ 530.752208][T11564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.752223][T11564] RSP: 002b:00007f459c895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.752240][T11564] RAX: ffffffffffffffda RBX: 00007f459bc15fa0 RCX: 00007f459b99ce59 [ 530.752250][T11564] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 530.752260][T11564] RBP: 00007f459c895090 R08: 0000000000000000 R09: 0000000000000000 [ 530.752268][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.752274][T11564] R13: 00007f459bc16038 R14: 00007f459bc15fa0 R15: 00007ffc25072048 [ 530.752288][T11564] [ 531.269474][ T5816] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 531.292748][ T5816] [drm] Initialized udl on minor 2 [ 531.310186][ T5816] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 531.332468][ T5816] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 532.318681][ T5633] Bluetooth: hci3: SCO packet for unknown connection handle 3410 [ 532.395899][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 532.460346][ T5816] usb 3-1: USB disconnect, device number 37 [ 532.575169][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 533.815841][ T5816] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 533.864972][ T5816] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 534.031267][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 534.052341][T11590] netlink: 'syz.3.1616': attribute type 2 has an invalid length. [ 534.092497][T11588] fido_id[11588]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 534.096202][T11590] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 534.129354][T11590] netlink: 'syz.3.1616': attribute type 2 has an invalid length. [ 535.072829][ T5633] Bluetooth: hci4: SCO packet for unknown connection handle 3410 [ 535.072910][ T5633] Bluetooth: hci2: Malformed LE Event: 0x02 [ 535.164926][T11590] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 535.231724][T11603] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1613'. [ 536.506782][T11613] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 536.515217][T11613] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 536.523854][T11613] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 537.684782][T11628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1625'. [ 537.695545][T11628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1625'. [ 538.814696][T11628] netlink: 'syz.0.1625': attribute type 28 has an invalid length. [ 538.822668][T11628] netlink: 'syz.0.1625': attribute type 29 has an invalid length. [ 538.830625][T11628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1625'. [ 539.633366][ T5710] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 539.668364][ T5710] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 539.683782][ T5816] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 539.852732][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 539.871821][T11645] fido_id[11645]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 539.896620][ T5816] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 539.907342][ T5816] usb 3-1: config 179 has no interface number 0 [ 539.917496][T11647] netlink: 'syz.0.1629': attribute type 1 has an invalid length. [ 539.931375][ T5816] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 539.946202][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1631'. [ 539.959496][ T5816] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 539.975784][ T5816] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 539.988220][ T5816] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 539.998833][ T5816] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 540.016162][ T5816] usb 3-1: config 179 interface 65 has no altsetting 0 [ 540.016776][T11652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.023549][ T5816] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 540.032373][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 540.032388][ T29] audit: type=1400 audit(1780514553.285:793): avc: denied { connect } for pid=11651 comm="syz.4.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 540.043983][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.090442][ T5816] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input51 [ 540.122959][T11653] bond3: (slave bridge0): making interface the new active one [ 540.151216][T11653] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 540.473472][ T5816] usb 3-1: USB disconnect, device number 38 [ 540.479500][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 540.578976][ T29] audit: type=1326 audit(1780514553.845:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.1635" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x0 [ 540.732915][ T5710] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 540.763965][T11679] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 540.773187][T11679] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 540.950114][ T5710] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 541.042975][ T5710] usb 1-1: config 0 has no interface number 0 [ 541.102727][ T5710] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 541.240974][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.251699][ T5710] usb 1-1: config 0 descriptor?? [ 541.263854][ T5710] usb 1-1: selecting invalid altsetting 1 [ 541.269780][ T5710] dvb_ttusb_budget: ttusb_init_controller: error [ 541.276564][ T5710] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 541.348010][T11689] trusted_key: encrypted_key: insufficient parameters specified [ 541.843001][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 541.856777][ T10] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 541.871765][T11663] binder: 11662:11663 ioctl 4018620d 0 returned -22 [ 542.528891][ T5710] DVB: Unable to find symbol cx22700_attach() [ 542.609029][T11705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1644'. [ 542.623272][T11694] fido_id[11694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 542.676483][ T5710] DVB: Unable to find symbol tda10046_attach() [ 542.704385][ T5710] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 542.721673][T11705] netlink: 'syz.1.1644': attribute type 28 has an invalid length. [ 542.729907][T11705] netlink: 'syz.1.1644': attribute type 29 has an invalid length. [ 542.738319][T11705] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1644'. [ 543.172794][ T5747] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 543.262829][ T46] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 543.302766][ T5747] usb 3-1: device descriptor read/64, error -71 [ 543.415580][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 543.437864][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 543.460323][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 543.479865][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.505465][ T46] usb 5-1: config 0 descriptor?? [ 543.515548][ T5710] usb 1-1: USB disconnect, device number 59 [ 543.562716][ T5747] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 543.813988][ T5747] usb 3-1: device descriptor read/64, error -71 [ 543.924006][ T46] usb 5-1: USB disconnect, device number 47 [ 543.999637][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 544.106304][ T5747] usb usb3-port1: attempt power cycle [ 544.208484][T11750] trusted_key: encrypted_key: insufficient parameters specified [ 544.680742][ T5710] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 544.696784][ T5710] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 544.770870][T11756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1655'. [ 544.942925][ T5747] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 544.965705][T11757] netlink: 'syz.3.1655': attribute type 28 has an invalid length. [ 544.973748][T11757] netlink: 'syz.3.1655': attribute type 29 has an invalid length. [ 544.982729][T11757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1655'. [ 545.197248][ T5747] usb 3-1: device descriptor read/8, error -71 [ 545.452757][ T5747] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 545.483282][ T5747] usb 3-1: device descriptor read/8, error -71 [ 545.586957][ T29] audit: type=1326 audit(1780514558.855:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11771 comm="syz.1.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faffe79ce59 code=0x0 [ 545.614561][ T2170] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 545.622932][ T5747] usb usb3-port1: unable to enumerate USB device [ 545.703011][ T5710] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 545.784024][ T2170] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 545.792175][ T2170] usb 4-1: config 0 has no interface number 0 [ 545.799252][ T2170] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 545.808528][ T2170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.813967][T11778] FAULT_INJECTION: forcing a failure. [ 545.813967][T11778] name failslab, interval 1, probability 0, space 0, times 0 [ 545.820783][ T2170] usb 4-1: config 0 descriptor?? [ 545.829774][T11778] CPU: 0 UID: 0 PID: 11778 Comm: syz.4.1662 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.829799][T11778] Tainted: [L]=SOFTLOCKUP [ 545.829804][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.829813][T11778] Call Trace: [ 545.829818][T11778] [ 545.829824][T11778] dump_stack_lvl+0x100/0x190 [ 545.829847][T11778] should_fail_ex.cold+0x5/0xa [ 545.829869][T11778] should_failslab+0xc2/0x120 [ 545.829887][T11778] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 545.829910][T11778] ? alloc_empty_file+0x5b/0x1c0 [ 545.829937][T11778] ? __pfx_stack_trace_save+0x10/0x10 [ 545.829955][T11778] alloc_empty_file+0x5b/0x1c0 [ 545.829978][T11778] path_openat+0xe8/0x31a0 [ 545.829996][T11778] ? kasan_save_stack+0x3f/0x50 [ 545.830010][T11778] ? kasan_save_stack+0x30/0x50 [ 545.830024][T11778] ? kasan_save_track+0x14/0x30 [ 545.830037][T11778] ? __kasan_slab_alloc+0x89/0x90 [ 545.830051][T11778] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 545.830071][T11778] ? do_getname+0x35/0x390 [ 545.830091][T11778] ? do_sys_openat2+0xc5/0x1e0 [ 545.830112][T11778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.830131][T11778] ? __pfx_path_openat+0x10/0x10 [ 545.830157][T11778] do_file_open+0x20e/0x430 [ 545.830178][T11778] ? __pfx_do_file_open+0x10/0x10 [ 545.830213][T11778] ? alloc_fd+0x476/0x790 [ 545.830234][T11778] ? do_getname+0x191/0x390 [ 545.830258][T11778] do_sys_openat2+0x10d/0x1e0 [ 545.830279][T11778] ? __pfx_do_sys_openat2+0x10/0x10 [ 545.830300][T11778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 545.830323][T11778] ? __fget_files+0x21f/0x3d0 [ 545.830345][T11778] __x64_sys_openat+0x12d/0x210 [ 545.830367][T11778] ? __pfx___x64_sys_openat+0x10/0x10 [ 545.830388][T11778] ? ksys_write+0x1ac/0x250 [ 545.830407][T11778] ? rcu_is_watching+0x12/0xc0 [ 545.830431][T11778] do_syscall_64+0x115/0x870 [ 545.830453][T11778] ? clear_bhb_loop+0x40/0x90 [ 545.830471][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.830487][T11778] RIP: 0033:0x7f06add9ce59 [ 545.830501][T11778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.830515][T11778] RSP: 002b:00007f06aebd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 545.830530][T11778] RAX: ffffffffffffffda RBX: 00007f06ae016090 RCX: 00007f06add9ce59 [ 545.830539][T11778] RDX: 0000000003002a8d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 545.830548][T11778] RBP: 00007f06aebd0090 R08: 0000000000000000 R09: 0000000000000000 [ 545.830557][T11778] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 545.830566][T11778] R13: 00007f06ae016128 R14: 00007f06ae016090 R15: 00007ffdf2c6be08 [ 545.830587][T11778] [ 545.852695][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 545.898757][ T2170] usb 4-1: selecting invalid altsetting 1 [ 545.904193][ T5710] usb 1-1: config 1 interface 0 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 32 [ 545.912821][ T2170] dvb_ttusb_budget: ttusb_init_controller: error [ 545.916391][ T5710] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x82 has invalid maxpacket 2007, setting to 1024 [ 545.927792][ T2170] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 545.932072][ T5710] usb 1-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 1024 [ 546.007215][ T2170] DVB: Unable to find symbol cx22700_attach() [ 546.012011][ T5710] usb 1-1: config 1 interface 0 has no altsetting 0 [ 546.083603][T11782] ÿ: renamed from dummy0 (while UP) [ 546.086405][ T5710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 546.092919][ T2170] DVB: Unable to find symbol tda10046_attach() [ 546.100387][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.117918][T11768] binder: 11767:11768 ioctl 4018620d 0 returned -22 [ 546.126860][ T5710] usb 1-1: Product: syz [ 546.152836][ T2170] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 546.230818][ T5710] usb 1-1: Manufacturer: ㇵá¡ì©­ï¬¼æ¨œîžä¢­ä®‡é‹–饘鴽ë£å‹é‚£é‹ëˆ½ç“¨è·§â¡±ç¾‚뭎粅பí틶篸â‡ï±‘íš‹ï¤㦼㔩莬阃昕뺌鷄䚉鄃⺩甥댱删꬙á­ç¨î²è¤¶ï¤¤åƒï”†é°æ °à¹¥á²Û²éªâ¯¼ê…žîž·â¦è¢»ãƒŒì”¥è†¾Ýšâ¡¸îŒ¾ç…šë‹‚兮싾Ϸ㻱骆訣ëºä³¹ëµ—承ᢖ﫥ê¼ï€à²œ [ 546.257794][ T5633] Bluetooth: hci1: Malformed LE Event: 0x02 [ 546.264351][ T5710] usb 1-1: SerialNumber: syz [ 546.348145][T11770] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 546.370780][T11770] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 547.032180][T11796] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 547.053510][T11796] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 547.767464][ T5710] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 14 proto 2 vid 0x0525 pid 0xA4A8 [ 547.843704][ T5710] usb 1-1: USB disconnect, device number 60 [ 547.887183][ T5710] usblp0: removed [ 548.462800][ T5710] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 548.618064][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.631638][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.641831][ T5710] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 548.651605][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.681781][ T5710] usb 5-1: config 0 descriptor?? [ 548.736375][T11826] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 548.746163][T11826] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 549.183534][ T5710] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 549.192465][ T5710] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 549.200658][ T5710] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 549.223544][ T5710] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 549.226218][ T2170] usb 4-1: USB disconnect, device number 50 [ 549.241578][ T5710] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 549.317554][T11838] FAULT_INJECTION: forcing a failure. [ 549.317554][T11838] name failslab, interval 1, probability 0, space 0, times 0 [ 549.330249][T11838] CPU: 1 UID: 0 PID: 11838 Comm: syz.0.1678 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.330277][T11838] Tainted: [L]=SOFTLOCKUP [ 549.330283][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 549.330292][T11838] Call Trace: [ 549.330298][T11838] [ 549.330303][T11838] dump_stack_lvl+0x100/0x190 [ 549.330325][T11838] should_fail_ex.cold+0x5/0xa [ 549.330341][T11838] ? tomoyo_encode2+0xfb/0x3c0 [ 549.330357][T11838] should_failslab+0xc2/0x120 [ 549.330369][T11838] __kmalloc_noprof+0xe0/0x850 [ 549.330385][T11838] ? rcu_is_watching+0x12/0xc0 [ 549.330404][T11838] tomoyo_encode2+0xfb/0x3c0 [ 549.330421][T11838] tomoyo_encode+0x29/0x50 [ 549.330437][T11838] tomoyo_realpath_from_path+0x18c/0x690 [ 549.330456][T11838] tomoyo_path_number_perm+0x23c/0x580 [ 549.330470][T11838] ? tomoyo_path_number_perm+0x22e/0x580 [ 549.330485][T11838] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 549.330513][T11838] ? find_held_lock+0x2b/0x80 [ 549.330522][T11838] ? __fget_files+0x215/0x3d0 [ 549.330535][T11838] ? hook_file_ioctl_common+0x149/0x410 [ 549.330545][T11838] ? __fget_files+0x215/0x3d0 [ 549.330561][T11838] ? __fget_files+0x21f/0x3d0 [ 549.330576][T11838] security_file_ioctl+0xd3/0x230 [ 549.330592][T11838] __x64_sys_ioctl+0xb7/0x210 [ 549.330605][T11838] do_syscall_64+0x115/0x870 [ 549.330618][T11838] ? clear_bhb_loop+0x40/0x90 [ 549.330631][T11838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.330641][T11838] RIP: 0033:0x7f477759ce59 [ 549.330651][T11838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.330662][T11838] RSP: 002b:00007f47757d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.330672][T11838] RAX: ffffffffffffffda RBX: 00007f4777816180 RCX: 00007f477759ce59 [ 549.330679][T11838] RDX: 0000200000000000 RSI: 0000000000005423 RDI: 0000000000000004 [ 549.330685][T11838] RBP: 00007f47757d5090 R08: 0000000000000000 R09: 0000000000000000 [ 549.330691][T11838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.330697][T11838] R13: 00007f4777816218 R14: 00007f4777816180 R15: 00007ffeb02f03f8 [ 549.330711][T11838] [ 549.330724][T11838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 549.366389][ T5710] playstation 0003:054C:0DF2.001D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 550.472353][ T5710] playstation 0003:054C:0DF2.001D: Failed to retrieve feature with reportID 5: -71 [ 550.490151][ T5710] playstation 0003:054C:0DF2.001D: Failed to retrieve DualSense calibration info: -71 [ 550.500315][ T5710] playstation 0003:054C:0DF2.001D: Failed to get calibration data from DualSense [ 550.530663][T11850] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 550.539993][ T5710] playstation 0003:054C:0DF2.001D: Failed to create dualsense. [ 550.558956][ T5710] playstation 0003:054C:0DF2.001D: probe with driver playstation failed with error -71 [ 550.609017][ T5710] usb 5-1: USB disconnect, device number 48 [ 550.680777][T11853] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 550.993141][ T46] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 551.173805][ T5633] Bluetooth: Unknown LE signaling command 0x1d [ 551.182106][ T5633] Bluetooth: Wrong link type (-22) [ 551.444669][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.469628][T11864] netlink: 'syz.2.1687': attribute type 5 has an invalid length. [ 551.537017][T11864] netlink: 'syz.2.1687': attribute type 5 has an invalid length. [ 551.592184][ T46] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 551.642742][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.665178][ T46] usb 4-1: Product: syz [ 551.748987][ T46] usb 4-1: Manufacturer: syz [ 552.046405][ T46] usb 4-1: SerialNumber: syz [ 553.184247][ T46] usb 4-1: config 0 descriptor?? [ 553.277109][ T46] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 553.976369][T11888] netlink: 'syz.2.1693': attribute type 1 has an invalid length. [ 554.039168][ T46] usb 4-1: USB disconnect, device number 51 [ 554.076806][T11888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 554.121125][T11890] bond1: (slave geneve2): making interface the new active one [ 554.132208][T11890] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 554.349530][T11888] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.356927][T11888] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.459683][T11888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.572719][T11888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.681477][ T29] audit: type=1400 audit(1780514567.935:796): avc: denied { audit_write } for pid=11900 comm="syz.1.1695" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 555.444846][ T5710] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 555.612888][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 555.624228][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 555.747552][ T5710] usb 5-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 555.776586][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.812565][ T5710] usb 5-1: Product: syz [ 555.855076][ T5710] usb 5-1: Manufacturer: syz [ 555.880887][ T5710] usb 5-1: SerialNumber: syz [ 556.446149][ T5898] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.464334][ T5898] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.501348][ T29] audit: type=1400 audit(1780514569.765:797): avc: denied { read } for pid=11914 comm="syz.0.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 556.523879][ T5898] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.543773][ T5898] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.559890][T11913] syzkaller0: entered promiscuous mode [ 556.567324][T11913] syzkaller0: entered allmulticast mode [ 556.600080][ T5710] usb 5-1: 1:1 : unsupported format bits 0x2004 [ 556.622986][ T5710] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 556.648655][ T5710] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 556.730832][ T5710] usb 5-1: USB disconnect, device number 49 [ 556.783214][ T5614] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 556.977263][ T5614] usb 4-1: Using ep0 maxpacket: 16 [ 556.985128][ T5614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.996942][ T5614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.006893][ T5614] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.027923][ T5614] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 557.039115][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.060013][ T5614] usb 4-1: config 0 descriptor?? [ 557.446262][ T29] audit: type=1400 audit(1780514570.715:798): avc: denied { load_policy } for pid=11934 comm="syz.4.1705" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 557.467101][T11935] SELinux: policydb version -1223864827 does not match my version range 15-35 [ 557.478704][T11935] SELinux: failed to load policy [ 557.487775][ T5614] usbhid 4-1:0.0: can't add hid device: -71 [ 557.501599][ T5614] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 557.532230][ T5614] usb 4-1: USB disconnect, device number 52 [ 557.545225][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.551608][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.589682][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1706'. [ 557.658661][T11938] trusted_key: encrypted_key: master key parameter 'ôúu000004093' is invalid [ 558.603179][ T29] audit: type=1400 audit(1780514571.865:799): avc: denied { map } for pid=11940 comm="syz.0.1707" path="/proc/1066" dev="proc" ino=36009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 558.636403][T11945] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 558.712230][ T29] audit: type=1400 audit(1780514571.905:800): avc: denied { execute } for pid=11940 comm="syz.0.1707" path="/proc/1066" dev="proc" ino=36009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 558.879818][T11963] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 558.886399][T11963] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 558.896399][T11963] vhci_hcd vhci_hcd.0: Device attached [ 558.939599][T11968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.142835][ T5710] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 559.462750][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 559.659487][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 559.693655][ T10] usb 4-1: config 0 has no interface number 0 [ 559.712756][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 559.750343][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.790825][ T10] usb 4-1: config 0 descriptor?? [ 559.816392][ T10] usb 4-1: selecting invalid altsetting 1 [ 559.827186][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 559.837785][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 559.939752][T11964] vhci_hcd: connection reset by peer [ 559.960850][ T5898] vhci_hcd vhci_hcd.4: stop threads [ 559.987100][ T5898] vhci_hcd vhci_hcd.4: release socket [ 560.009373][T11977] binder: 11976:11977 ioctl 4018620d 0 returned -22 [ 560.020652][ T5898] vhci_hcd vhci_hcd.4: disconnect device [ 560.049852][ T10] DVB: Unable to find symbol cx22700_attach() [ 560.049884][ T5633] Bluetooth: hci1: Malformed LE Event: 0x02 [ 560.711418][ T10] DVB: Unable to find symbol tda10046_attach() [ 560.741302][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 561.018303][T11994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1719'. [ 561.324108][ T10] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 561.492755][ T10] usb 1-1: device descriptor read/64, error -71 [ 561.551512][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 561.558234][T11994] netlink: 'syz.2.1719': attribute type 28 has an invalid length. [ 561.566132][T11994] netlink: 'syz.2.1719': attribute type 29 has an invalid length. [ 561.574236][T11994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1719'. [ 561.587715][T12002] binder: 12001:12002 ioctl 4018620d 200000000040 returned -16 [ 561.657965][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1722'. [ 561.714687][ T29] audit: type=1400 audit(1780514574.985:801): avc: denied { create } for pid=12007 comm="syz.4.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 561.742793][ T10] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 561.953112][ T10] usb 1-1: device descriptor read/64, error -71 [ 562.057059][T12018] netlink: 'syz.1.1728': attribute type 2 has an invalid length. [ 562.065509][ T5815] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 562.108178][ T10] usb usb1-port1: attempt power cycle [ 562.115470][T12018] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 562.123879][T12018] netlink: 'syz.1.1728': attribute type 2 has an invalid length. [ 562.131650][T12018] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 562.211260][T12023] random: crng reseeded on system resumption [ 562.433110][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 562.632902][ T10] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 562.635787][ T5614] usb 4-1: USB disconnect, device number 53 [ 562.674183][ T5815] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 562.701025][ T5815] usb 5-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 562.714845][ T10] usb 1-1: device descriptor read/8, error -71 [ 562.731089][ T5815] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 562.769439][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 562.799154][ T5815] usb 5-1: Product: syz [ 562.808288][T12027] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 562.816537][T12027] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 562.824994][T12027] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 562.836876][ T5815] usb 5-1: SerialNumber: syz [ 562.892909][ T5747] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 562.972850][ T10] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 563.005920][ T10] usb 1-1: device descriptor read/8, error -71 [ 563.043392][ T5747] usb 3-1: device descriptor read/64, error -71 [ 563.334820][ T10] usb usb1-port1: unable to enumerate USB device [ 563.397286][ T10] usb 5-1: USB disconnect, device number 50 [ 563.452763][ T5747] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 563.550544][ T29] audit: type=1400 audit(1780514576.815:802): avc: denied { connect } for pid=12024 comm="syz.3.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 563.607393][ T5747] usb 3-1: device descriptor read/64, error -71 [ 563.642677][ T29] audit: type=1400 audit(1780514576.845:803): avc: denied { create } for pid=12024 comm="syz.3.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 563.733516][ T29] audit: type=1400 audit(1780514576.845:804): avc: denied { ioctl } for pid=12024 comm="syz.3.1730" path="socket:[35392]" dev="sockfs" ino=35392 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 563.779601][ T5747] usb usb3-port1: attempt power cycle [ 564.093991][T12044] netlink: 'syz.1.1736': attribute type 2 has an invalid length. [ 564.139661][T12044] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 564.163888][ T5747] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 564.189085][T12044] netlink: 'syz.1.1736': attribute type 2 has an invalid length. [ 564.213403][ T5747] usb 3-1: device descriptor read/8, error -71 [ 564.235012][T12044] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 564.262840][ T5710] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 564.463583][ T5747] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 564.519605][ T5747] usb 3-1: device descriptor read/8, error -71 [ 564.682155][ T5747] usb usb3-port1: unable to enumerate USB device [ 564.743451][T12052] atomic_op ffff88807a5ea198 conn xmit_atomic 0000000000000000 [ 564.763299][ T29] audit: type=1400 audit(1780514578.035:805): avc: granted { setsecparam } for pid=12050 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 565.641792][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 565.826576][T12066] Failed to initialize the IGMP autojoin socket (err -2) [ 565.955026][T12067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1742'. [ 566.685267][T12069] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 566.985554][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.989292][T12069] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 567.012731][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 567.022812][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.063215][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.161894][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.179363][ T10] usb 4-1: Product: syz [ 567.193049][ T10] usb 4-1: Manufacturer: syz [ 568.239280][ T10] usb 4-1: SerialNumber: syz [ 568.275388][ T10] usb 4-1: can't set config #1, error -71 [ 568.376583][ T10] usb 4-1: USB disconnect, device number 54 [ 568.452380][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1746'. [ 568.500421][T12084] validate_nla: 5 callbacks suppressed [ 568.500439][T12084] netlink: 'syz.3.1747': attribute type 2 has an invalid length. [ 568.522982][T12084] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 568.571740][T12084] netlink: 'syz.3.1747': attribute type 2 has an invalid length. [ 568.590565][T12084] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 569.491122][T12104] FAULT_INJECTION: forcing a failure. [ 569.491122][T12104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.597529][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.3.1752 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.597560][T12104] Tainted: [L]=SOFTLOCKUP [ 569.597566][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 569.597577][T12104] Call Trace: [ 569.597583][T12104] [ 569.597590][T12104] dump_stack_lvl+0x100/0x190 [ 569.597615][T12104] should_fail_ex.cold+0x5/0xa [ 569.597632][T12104] _copy_to_user+0x32/0xd0 [ 569.597647][T12104] simple_read_from_buffer+0xcb/0x170 [ 569.597664][T12104] proc_fail_nth_read+0x1af/0x230 [ 569.597676][T12104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 569.597689][T12104] ? rw_verify_area+0xce/0x6d0 [ 569.597699][T12104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 569.597710][T12104] vfs_read+0x1e4/0xb30 [ 569.597724][T12104] ? __pfx_vfs_read+0x10/0x10 [ 569.597735][T12104] ? __fget_files+0x215/0x3d0 [ 569.597754][T12104] ? __fget_files+0x21f/0x3d0 [ 569.597771][T12104] ksys_read+0x12a/0x250 [ 569.597783][T12104] ? __pfx_ksys_read+0x10/0x10 [ 569.597796][T12104] ? rcu_is_watching+0x12/0xc0 [ 569.597813][T12104] do_syscall_64+0x115/0x870 [ 569.597827][T12104] ? clear_bhb_loop+0x40/0x90 [ 569.597841][T12104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.597851][T12104] RIP: 0033:0x7f459b95d68e [ 569.597862][T12104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 569.597872][T12104] RSP: 002b:00007f459c894fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 569.597883][T12104] RAX: ffffffffffffffda RBX: 00007f459c8956c0 RCX: 00007f459b95d68e [ 569.597889][T12104] RDX: 000000000000000f RSI: 00007f459c8950a0 RDI: 0000000000000006 [ 569.597896][T12104] RBP: 00007f459c895090 R08: 0000000000000000 R09: 0000000000000000 [ 569.597902][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.597908][T12104] R13: 00007f459bc16038 R14: 00007f459bc15fa0 R15: 00007ffc25072048 [ 569.597921][T12104] [ 569.798024][T12107] atomic_op ffff888052f69198 conn xmit_atomic 0000000000000000 [ 569.806435][T12107] netlink: 'syz.4.1753': attribute type 5 has an invalid length. [ 569.828135][ T29] audit: type=1400 audit(1780514583.095:806): avc: granted { setsecparam } for pid=12105 comm="syz.4.1753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 570.191552][ T29] audit: type=1400 audit(1780514583.455:807): avc: denied { mount } for pid=12111 comm="syz.2.1754" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 570.269453][T12114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1756'. [ 570.401085][ T29] audit: type=1400 audit(1780514583.645:808): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 570.425681][T12116] netlink: 'syz.3.1756': attribute type 28 has an invalid length. [ 570.438220][T12116] netlink: 'syz.3.1756': attribute type 29 has an invalid length. [ 570.451752][T12116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1756'. [ 570.833978][ T29] audit: type=1400 audit(1780514584.105:809): avc: denied { create } for pid=12122 comm="syz.2.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 570.880252][T12126] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 570.903937][T12126] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 571.031840][T12130] netlink: 'syz.2.1761': attribute type 2 has an invalid length. [ 571.041361][T12130] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 571.053801][T12130] netlink: 'syz.2.1761': attribute type 2 has an invalid length. [ 572.417537][ T29] audit: type=1804 audit(1780514585.685:810): pid=12147 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1757" name="file0" dev="tmpfs" ino=2311 res=1 errno=0 [ 572.709248][T12158] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 572.715779][T12158] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 572.729512][T12158] vhci_hcd vhci_hcd.0: Device attached [ 572.962962][ T5747] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 573.022746][T12167] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1770'. [ 573.205485][T12168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1770'. [ 573.650416][T12159] vhci_hcd: connection reset by peer [ 573.676105][ T81] vhci_hcd vhci_hcd.4: stop threads [ 573.707902][ T81] vhci_hcd vhci_hcd.4: release socket [ 573.745659][ T81] vhci_hcd vhci_hcd.4: disconnect device [ 574.504562][T12179] validate_nla: 7 callbacks suppressed [ 574.504581][T12179] netlink: 'syz.3.1774': attribute type 2 has an invalid length. [ 575.123444][T12179] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 575.156573][T12179] netlink: 'syz.3.1774': attribute type 2 has an invalid length. [ 575.187228][T12179] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 576.292848][T12206] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1782'. [ 576.330245][T12210] FAULT_INJECTION: forcing a failure. [ 576.330245][T12210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.389069][T12210] CPU: 0 UID: 0 PID: 12210 Comm: syz.2.1783 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.389100][T12210] Tainted: [L]=SOFTLOCKUP [ 576.389106][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.389116][T12210] Call Trace: [ 576.389122][T12210] [ 576.389127][T12210] dump_stack_lvl+0x100/0x190 [ 576.389153][T12210] should_fail_ex.cold+0x5/0xa [ 576.389175][T12210] strncpy_from_user+0x3b/0x2d0 [ 576.389201][T12210] do_getname+0x78/0x390 [ 576.389229][T12210] do_sys_openat2+0xc5/0x1e0 [ 576.389254][T12210] ? __pfx_do_sys_openat2+0x10/0x10 [ 576.389277][T12210] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 576.389304][T12210] ? __fget_files+0x21f/0x3d0 [ 576.389328][T12210] __x64_sys_openat+0x12d/0x210 [ 576.389353][T12210] ? __pfx___x64_sys_openat+0x10/0x10 [ 576.389376][T12210] ? ksys_write+0x1ac/0x250 [ 576.389398][T12210] ? rcu_is_watching+0x12/0xc0 [ 576.389425][T12210] do_syscall_64+0x115/0x870 [ 576.389445][T12210] ? clear_bhb_loop+0x40/0x90 [ 576.389466][T12210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.389484][T12210] RIP: 0033:0x7f1b1a99ce59 [ 576.389499][T12210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.389515][T12210] RSP: 002b:00007f1b18bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 576.389533][T12210] RAX: ffffffffffffffda RBX: 00007f1b1ac16090 RCX: 00007f1b1a99ce59 [ 576.389544][T12210] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 576.389556][T12210] RBP: 00007f1b18bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 576.389566][T12210] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 576.389576][T12210] R13: 00007f1b1ac16128 R14: 00007f1b1ac16090 R15: 00007fff4d9a8b78 [ 576.389599][T12210] [ 576.769180][T12211] netlink: 'syz.0.1782': attribute type 28 has an invalid length. [ 576.777121][T12211] netlink: 'syz.0.1782': attribute type 29 has an invalid length. [ 576.785076][T12211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1782'. [ 576.838850][T12214] ALSA: mixer_oss: invalid OSS volume '' [ 577.177263][T12216] overlayfs: missing 'workdir' [ 577.231997][T12218] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 577.238551][T12218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 577.278672][T12218] vhci_hcd vhci_hcd.0: Device attached [ 577.513094][ T5614] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 578.107866][ T5747] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 578.412228][T12232] netlink: 'syz.4.1789': attribute type 2 has an invalid length. [ 578.526819][T12219] vhci_hcd: connection reset by peer [ 578.541619][ T5898] vhci_hcd vhci_hcd.2: stop threads [ 578.547697][ T5898] vhci_hcd vhci_hcd.2: release socket [ 578.562109][T12232] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 578.572430][ T5898] vhci_hcd vhci_hcd.2: disconnect device [ 578.699207][T12232] netlink: 'syz.4.1789': attribute type 2 has an invalid length. [ 578.821895][T12232] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 580.766276][T12265] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 580.774684][T12265] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 580.783278][T12265] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 581.162380][T12275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1799'. [ 581.428104][T12277] trusted_key: encrypted_key: insufficient parameters specified [ 581.915578][ T2170] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 581.942570][ T2170] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 582.095456][T12282] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 582.117169][T12282] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 582.204820][T12281] fido_id[12281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 582.245237][T12291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1802'. [ 582.352955][ T2170] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 582.792822][ T5614] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 582.822714][ T2170] usb 3-1: Using ep0 maxpacket: 8 [ 582.842470][ T2170] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 582.853941][ T2170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.890817][ T2170] usb 3-1: Product: syz [ 582.906962][ T2170] usb 3-1: Manufacturer: syz [ 582.925649][ T2170] usb 3-1: SerialNumber: syz [ 582.971852][ T2170] usb 3-1: config 0 descriptor?? [ 582.990589][ T2170] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 583.040179][T12301] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 583.046704][T12301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 583.082475][T12301] vhci_hcd vhci_hcd.0: Device attached [ 583.313210][ T46] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 583.372773][ T5747] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 583.391801][ T2170] gspca_sonixj: reg_r err -71 [ 583.403738][ T2170] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 583.439474][ T2170] usb 3-1: USB disconnect, device number 47 [ 583.472999][T10694] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 583.542715][ T5747] usb 4-1: Using ep0 maxpacket: 32 [ 583.556652][ T5747] usb 4-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 583.584093][ T5747] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 583.615442][ T5747] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 583.632769][T10694] usb 5-1: device descriptor read/64, error -71 [ 583.648012][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.764782][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.813503][ T5747] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 583.865964][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.905890][T12303] vhci_hcd: connection reset by peer [ 583.932802][T10694] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 583.945335][ T5747] usb 4-1: config 0 descriptor?? [ 583.950602][ T9265] vhci_hcd vhci_hcd.0: stop threads [ 583.968314][ T9265] vhci_hcd vhci_hcd.0: release socket [ 583.980925][ T5747] hub 4-1:0.0: USB hub found [ 583.996723][ T9265] vhci_hcd vhci_hcd.0: disconnect device [ 584.103557][T10694] usb 5-1: device descriptor read/64, error -71 [ 584.213014][ T5747] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 584.233467][T10694] usb usb5-port1: attempt power cycle [ 584.250319][ T5747] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 584.283328][ T5747] usbhid 4-1:0.0: can't add hid device: -22 [ 584.312998][ T5747] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 584.336981][T12312] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 584.403953][T12315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=12315 comm=syz.2.1807 [ 584.416879][ T5747] usb 4-1: USB disconnect, device number 55 [ 584.592833][T10694] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 584.634718][T10694] usb 5-1: device descriptor read/8, error -71 [ 584.883614][T10694] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 584.933912][T10694] usb 5-1: device descriptor read/8, error -71 [ 585.053839][T10694] usb usb5-port1: unable to enumerate USB device [ 586.408535][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1821'. [ 586.421373][ T5747] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 586.516685][ T29] audit: type=1400 audit(1780514599.785:811): avc: denied { create } for pid=12358 comm="syz.1.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 586.609163][ T5747] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 586.636371][ T5747] usb 3-1: config 0 has no interface number 0 [ 586.649465][ T5747] usb 3-1: config 0 interface 41 has no altsetting 0 [ 586.667808][ T5747] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 586.688308][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.702699][ T5747] usb 3-1: Product: syz [ 586.710750][ T5747] usb 3-1: Manufacturer: syz [ 586.721776][ T5747] usb 3-1: SerialNumber: syz [ 586.735388][ T5747] usb 3-1: config 0 descriptor?? [ 586.811500][T12369] overlayfs: failed to resolve './cgroup': -2 [ 586.892835][T10694] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 587.067196][T10694] usb 5-1: config 0 has an invalid descriptor of length 228, skipping remainder of the config [ 587.084491][T10694] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 587.104175][T10694] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 6.00 [ 587.122342][T10694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.137290][T10694] usb 5-1: config 0 descriptor?? [ 587.606245][T10694] usb 5-1: string descriptor 0 read error: -71 [ 587.635839][T10694] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 587.663425][T10694] usb 5-1: USB disconnect, device number 55 [ 588.442586][ T29] audit: type=1400 audit(1780514601.705:812): avc: denied { map } for pid=12393 comm="syz.0.1836" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 588.581268][ T46] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 588.632713][T10694] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 588.743821][T12407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1839'. [ 588.876577][T12408] netlink: 'syz.0.1839': attribute type 28 has an invalid length. [ 588.884616][T12408] netlink: 'syz.0.1839': attribute type 29 has an invalid length. [ 588.892525][T12408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1839'. [ 589.043412][T10694] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.054480][T10694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.133679][T10694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.152519][T10694] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 589.173564][T10694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.183253][ T5747] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 589.204059][T10694] usb 4-1: config 0 descriptor?? [ 589.211206][ T5747] usb 3-1: USB disconnect, device number 48 [ 589.397164][T12413] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1840'. [ 589.738356][T10694] hid-rmi 0003:0461:4E72.001F: unknown main item tag 0x0 [ 589.760555][T10694] hid-rmi 0003:0461:4E72.001F: unknown main item tag 0x0 [ 589.763387][T12413] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1840'. [ 589.809042][T10694] hid-rmi 0003:0461:4E72.001F: unknown main item tag 0x0 [ 589.833887][T10694] hid-rmi 0003:0461:4E72.001F: unknown main item tag 0x0 [ 589.853596][T10694] hid-rmi 0003:0461:4E72.001F: unknown main item tag 0x0 [ 589.868790][T12421] openvswitch: netlink: nsh attr 0 has unexpected len 12 expected 0 [ 589.869450][T10694] hid-rmi 0003:0461:4E72.001F: unknown main item tag 0x0 [ 589.890236][T10694] hid-rmi 0003:0461:4E72.001F: unknown main item tag 0x0 [ 589.906373][T10694] hid-rmi 0003:0461:4E72.001F: unknown main item tag 0x0 [ 589.922233][T10694] hid-rmi 0003:0461:4E72.001F: unknown main item tag 0x0 [ 589.922250][T12421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.941793][T12392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1834'. [ 590.050044][T10694] hid-rmi 0003:0461:4E72.001F: unknown main item tag 0x0 [ 590.079052][T10694] hid-rmi 0003:0461:4E72.001F: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 590.605212][T10694] usb 4-1: USB disconnect, device number 56 [ 590.770773][T12427] fido_id[12427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 590.854795][T12421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 594.081459][T12459] FAULT_INJECTION: forcing a failure. [ 594.081459][T12459] name failslab, interval 1, probability 0, space 0, times 0 [ 594.094362][T12459] CPU: 1 UID: 0 PID: 12459 Comm: syz.4.1851 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.094391][T12459] Tainted: [L]=SOFTLOCKUP [ 594.094398][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.094408][T12459] Call Trace: [ 594.094415][T12459] [ 594.094423][T12459] dump_stack_lvl+0x100/0x190 [ 594.094450][T12459] should_fail_ex.cold+0x5/0xa [ 594.094475][T12459] ? cgroup_mkdir+0x277/0x1310 [ 594.094494][T12459] should_failslab+0xc2/0x120 [ 594.094516][T12459] __kmalloc_noprof+0xe0/0x850 [ 594.094549][T12459] cgroup_mkdir+0x277/0x1310 [ 594.094575][T12459] ? __pfx_cgroup_mkdir+0x10/0x10 [ 594.094596][T12459] kernfs_iop_mkdir+0x111/0x190 [ 594.094621][T12459] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 594.094648][T12459] vfs_mkdir+0x361/0x850 [ 594.094670][T12459] filename_mkdirat+0x48b/0x5e0 [ 594.094698][T12459] ? __pfx_filename_mkdirat+0x10/0x10 [ 594.094727][T12459] ? do_getname+0x10d/0x390 [ 594.094758][T12459] __x64_sys_mkdirat+0x89/0xc0 [ 594.094782][T12459] do_syscall_64+0x115/0x870 [ 594.094805][T12459] ? clear_bhb_loop+0x40/0x90 [ 594.094828][T12459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.094846][T12459] RIP: 0033:0x7f06add9ce59 [ 594.094862][T12459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.094878][T12459] RSP: 002b:00007f06aebd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 594.094896][T12459] RAX: ffffffffffffffda RBX: 00007f06ae016090 RCX: 00007f06add9ce59 [ 594.094908][T12459] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 594.094918][T12459] RBP: 00007f06aebd0090 R08: 0000000000000000 R09: 0000000000000000 [ 594.094928][T12459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.094938][T12459] R13: 00007f06ae016128 R14: 00007f06ae016090 R15: 00007ffdf2c6be08 [ 594.094963][T12459] [ 594.816163][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1852'. [ 596.306248][ T29] audit: type=1400 audit(2000000007.820:813): avc: denied { mounton } for pid=12495 comm="syz.4.1864" path="/369/file0" dev="tmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 596.793811][T12503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.820028][ T29] audit: type=1400 audit(2000000008.330:814): avc: denied { map } for pid=12495 comm="syz.4.1864" path="/369/file0" dev="tmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 597.076205][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1868'. [ 598.251614][ T29] audit: type=1804 audit(2000000009.760:815): pid=12536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1875" name="/newroot/335/file0" dev="tmpfs" ino=1810 res=1 errno=0 [ 598.945686][T12550] binder: 12549:12550 ioctl c0306201 200000000080 returned -14 [ 598.975391][T12550] binder: 12549:12550 ioctl c0306201 2000000003c0 returned -14 [ 599.120457][T12554] netlink: 'syz.4.1881': attribute type 2 has an invalid length. [ 599.240268][T12556] binder: 12555:12556 ioctl c0306201 200000000780 returned -14 [ 599.252440][T12554] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 599.543307][T12554] netlink: 'syz.4.1881': attribute type 2 has an invalid length. [ 599.557606][T12556] binder: 12555:12556 ioctl c0306201 200000001440 returned -11 [ 599.590989][T12554] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 599.853317][T12571] ªªªªªª: renamed from vlan0 [ 600.152497][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 601.100999][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 601.210452][T12603] binder: 12602:12603 ioctl c0306201 2000000003c0 returned -14 [ 601.223564][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 601.251410][T12595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 602.399321][T12613] atomic_op ffff888075042998 conn xmit_atomic 0000000000000000 [ 602.447396][T12618] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 602.642858][ T29] audit: type=1400 audit(2000000014.150:816): avc: denied { ioctl } for pid=12624 comm="syz.0.1903" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 603.423106][ T29] audit: type=1400 audit(2000000014.940:817): avc: denied { mount } for pid=12645 comm="syz.0.1907" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 603.469697][T12627] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 603.506154][ T29] audit: type=1400 audit(2000000014.940:818): avc: denied { mounton } for pid=12645 comm="syz.0.1907" path="/362/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 603.549661][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 603.586730][ T29] audit: type=1400 audit(2000000015.100:819): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 603.744698][T12627] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 603.966055][T12654] loop2: detected capacity change from 0 to 7 [ 603.972477][T12654] buffer_io_error: 10 callbacks suppressed [ 603.972488][T12654] Buffer I/O error on dev loop2, logical block 0, async page read [ 603.986195][T12654] Buffer I/O error on dev loop2, logical block 0, async page read [ 603.994060][T12654] Buffer I/O error on dev loop2, logical block 0, async page read [ 604.001887][T12654] Buffer I/O error on dev loop2, logical block 0, async page read [ 604.015784][T12654] Buffer I/O error on dev loop2, logical block 0, async page read [ 604.023718][T12654] Buffer I/O error on dev loop2, logical block 0, async page read [ 604.031539][T12654] Buffer I/O error on dev loop2, logical block 0, async page read [ 604.039365][T12654] ldm_validate_partition_table(): Disk read failed. [ 604.045975][T12654] Buffer I/O error on dev loop2, logical block 0, async page read [ 604.056337][T12654] Buffer I/O error on dev loop2, logical block 0, async page read [ 604.064916][T12654] Buffer I/O error on dev loop2, logical block 0, async page read [ 604.072993][T12654] Dev loop2: unable to read RDB block 0 [ 604.078766][T12654] loop2: unable to read partition table [ 604.084529][T12654] loop2: partition table beyond EOD, truncated [ 604.090684][T12654] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 604.150967][T12627] bond4 (unregistering): Released all slaves [ 604.245487][T12660] trusted_key: encrypted_key: insufficient parameters specified [ 604.812714][ T46] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 604.828089][ T5710] hid_parser_main: 1 callbacks suppressed [ 604.828101][ T5710] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 604.870867][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 604.917029][ T5710] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 605.023390][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 605.048058][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.076787][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 605.091661][T12664] fido_id[12664]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 605.115883][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 605.148122][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.884574][ T46] usb 5-1: string descriptor 0 read error: -71 [ 605.890870][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 605.892186][T12673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1915'. [ 605.924622][T12673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1915'. [ 606.022271][ T46] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 606.059985][ T46] usb 5-1: config 0 descriptor?? [ 606.120867][T12674] netlink: 'syz.3.1915': attribute type 28 has an invalid length. [ 606.128901][T12674] netlink: 'syz.3.1915': attribute type 29 has an invalid length. [ 606.136865][T12674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1915'. [ 606.295125][ T46] usb 5-1: can't set config #0, error -71 [ 606.342515][ T46] usb 5-1: USB disconnect, device number 56 [ 606.943106][ T29] audit: type=1400 audit(2000000018.450:820): avc: denied { read } for pid=12676 comm="syz.4.1917" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 607.037225][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 607.705218][ T5815] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 607.786602][T12720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1924'. [ 607.864366][ T5815] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.892692][ T5815] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.904442][ T5815] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.915087][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.931772][T12707] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 607.955873][ T5815] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.963827][ T5710] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 608.093434][ T5710] usb 1-1: device descriptor read/64, error -71 [ 608.254776][ T5815] usb 3-1: USB disconnect, device number 49 [ 608.352005][T12724] trusted_key: encrypted_key: insufficient parameters specified [ 608.915586][ T5710] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 609.092708][ T5710] usb 1-1: device descriptor read/64, error -71 [ 609.165244][T12736] netlink: 'syz.1.1933': attribute type 4 has an invalid length. [ 609.199429][T12736] netlink: 'syz.1.1933': attribute type 4 has an invalid length. [ 609.203664][ T5710] usb usb1-port1: attempt power cycle [ 609.562755][ T5710] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 609.586481][ T5710] usb 1-1: device descriptor read/8, error -71 [ 610.176006][ T5710] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 610.274864][ T5710] usb 1-1: device descriptor read/8, error -71 [ 610.456548][ T5710] usb usb1-port1: unable to enumerate USB device [ 610.698928][T12795] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 610.705476][T12795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 610.722197][T12795] vhci_hcd vhci_hcd.0: Device attached [ 610.855619][ T29] audit: type=1400 audit(2000000022.370:821): avc: denied { ioctl } for pid=12803 comm="syz.4.1954" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 610.890853][T12804] /dev/nullb0: Can't open blockdev [ 610.955124][T10694] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 610.992114][T12802] Failed to initialize the IGMP autojoin socket (err -2) [ 611.212199][T12810] trusted_key: encrypted_key: insufficient parameters specified [ 611.700098][ T5710] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 611.729714][ T5710] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 611.897355][T12796] vhci_hcd: connection reset by peer [ 611.914500][ T5898] vhci_hcd vhci_hcd.2: stop threads [ 611.950618][ T5898] vhci_hcd vhci_hcd.2: release socket [ 611.979271][ T5898] vhci_hcd vhci_hcd.2: disconnect device [ 611.990096][ T29] audit: type=1400 audit(2000000023.500:822): avc: denied { setopt } for pid=12816 comm="syz.4.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 612.029621][T12821] overlayfs: failed to clone upperpath [ 612.397392][T12834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1965'. [ 612.409013][T12834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1965'. [ 612.582824][ T5710] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 612.583084][ T46] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 612.712101][T12834] netlink: 'syz.0.1965': attribute type 28 has an invalid length. [ 612.720064][T12834] netlink: 'syz.0.1965': attribute type 29 has an invalid length. [ 612.727949][T12834] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1965'. [ 612.812736][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 612.812900][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 612.826238][ T5710] usb 4-1: config 0 has no interfaces? [ 612.839745][ T5710] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 612.854500][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.857460][ T46] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 612.870131][ T5710] usb 4-1: Product: syz [ 612.892166][ T46] usb 5-1: config 179 has an invalid descriptor of length 48, skipping remainder of the config [ 612.892530][ T5710] usb 4-1: Manufacturer: syz [ 612.910422][T12846] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1967'. [ 612.915062][ T46] usb 5-1: config 179 has no interface number 0 [ 612.923125][ T5710] usb 4-1: SerialNumber: syz [ 612.931434][T12846] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1967'. [ 612.932346][ T46] usb 5-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 612.963912][ T5710] usb 4-1: config 0 descriptor?? [ 613.001974][ T46] usb 5-1: config 179 interface 65 has no altsetting 0 [ 613.022677][ T46] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 613.128594][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.236386][T12855] trusted_key: encrypted_key: insufficient parameters specified [ 613.713202][ T5747] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 613.743635][ T5747] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 613.787993][ T5815] usb 5-1: USB disconnect, device number 57 [ 613.810391][ T10] usb 4-1: USB disconnect, device number 57 [ 613.900535][T12860] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1971'. [ 613.945521][T12858] fido_id[12858]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 614.275971][ T46] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 614.463223][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 614.535800][ T46] usb 1-1: config 0 has no interfaces? [ 614.619606][ T46] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 614.726506][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.830817][ T46] usb 1-1: Product: syz [ 614.912647][ T46] usb 1-1: Manufacturer: syz [ 615.059337][ T46] usb 1-1: SerialNumber: syz [ 615.094792][ T46] usb 1-1: config 0 descriptor?? [ 615.717236][T12885] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 615.723796][T12885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 615.732172][ T29] audit: type=1400 audit(2000000027.220:823): avc: denied { connect } for pid=12877 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 615.775028][T12885] vhci_hcd vhci_hcd.0: Device attached [ 615.887589][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 616.034761][T12862] FAULT_INJECTION: forcing a failure. [ 616.034761][T12862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.073045][T12862] CPU: 0 UID: 0 PID: 12862 Comm: syz.0.1972 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.073075][T12862] Tainted: [L]=SOFTLOCKUP [ 616.073079][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.073087][T12862] Call Trace: [ 616.073092][T12862] [ 616.073099][T12862] dump_stack_lvl+0x100/0x190 [ 616.073124][T12862] should_fail_ex.cold+0x5/0xa [ 616.073147][T12862] _copy_from_iter+0x1f4/0x1690 [ 616.073167][T12862] ? __pfx__copy_from_iter+0x10/0x10 [ 616.073180][T12862] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 616.073199][T12862] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 616.073217][T12862] skb_copy_datagram_from_iter+0x11f/0x720 [ 616.073236][T12862] packet_sendmsg+0x227e/0x5100 [ 616.073256][T12862] ? __lock_acquire+0x4a5/0x2630 [ 616.073272][T12862] ? sock_has_perm+0x25a/0x2f0 [ 616.073286][T12862] ? __pfx_sock_has_perm+0x10/0x10 [ 616.073301][T12862] ? __pfx_packet_sendmsg+0x10/0x10 [ 616.073322][T12862] ____sys_sendmsg+0x9e1/0xb70 [ 616.073334][T12862] ? __pfx_packet_sendmsg+0x10/0x10 [ 616.073349][T12862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.073363][T12862] ? __pfx__kstrtoull+0x10/0x10 [ 616.073382][T12862] ___sys_sendmsg+0x190/0x1e0 [ 616.073396][T12862] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.073416][T12862] ? find_held_lock+0x2b/0x80 [ 616.073437][T12862] __sys_sendmmsg+0x205/0x430 [ 616.073456][T12862] ? __pfx___sys_sendmmsg+0x10/0x10 [ 616.073476][T12862] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 616.073498][T12862] ? fput+0x79/0x100 [ 616.073513][T12862] ? ksys_write+0x1ac/0x250 [ 616.073525][T12862] ? __pfx_ksys_write+0x10/0x10 [ 616.073540][T12862] __x64_sys_sendmmsg+0x9c/0x100 [ 616.073556][T12862] ? lockdep_hardirqs_on+0x78/0x100 [ 616.073570][T12862] do_syscall_64+0x115/0x870 [ 616.073583][T12862] ? clear_bhb_loop+0x40/0x90 [ 616.073597][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.073608][T12862] RIP: 0033:0x7f477759ce59 [ 616.073619][T12862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.073630][T12862] RSP: 002b:00007f4778375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 616.073641][T12862] RAX: ffffffffffffffda RBX: 00007f4777815fa0 RCX: 00007f477759ce59 [ 616.073648][T12862] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000012 [ 616.073655][T12862] RBP: 00007f4778375090 R08: 0000000000000000 R09: 0000000000000000 [ 616.073661][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.073667][T12862] R13: 00007f4777816038 R14: 00007f4777815fa0 R15: 00007ffeb02f03f8 [ 616.073681][T12862] [ 616.818472][T12886] vhci_hcd: connection reset by peer [ 616.830350][ T46] usb 1-1: USB disconnect, device number 69 [ 616.841989][ T48] vhci_hcd vhci_hcd.2: stop threads [ 616.849280][ T48] vhci_hcd vhci_hcd.2: release socket [ 616.869865][ T48] vhci_hcd vhci_hcd.2: disconnect device [ 616.932895][T10694] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 616.944754][T12904] fuse: Unknown parameter 'rootmvde' [ 617.138263][ T29] audit: type=1400 audit(2000000028.650:824): avc: denied { search } for pid=12901 comm="syz.4.1982" name="/" dev="configfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 617.344500][T12914] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.1986'. [ 617.873659][T12920] FAULT_INJECTION: forcing a failure. [ 617.873659][T12920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.887976][T12920] CPU: 0 UID: 0 PID: 12920 Comm: syz.2.1988 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.888005][T12920] Tainted: [L]=SOFTLOCKUP [ 617.888009][T12920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.888016][T12920] Call Trace: [ 617.888020][T12920] [ 617.888025][T12920] dump_stack_lvl+0x100/0x190 [ 617.888043][T12920] should_fail_ex.cold+0x5/0xa [ 617.888060][T12920] _copy_to_user+0x32/0xd0 [ 617.888075][T12920] simple_read_from_buffer+0xcb/0x170 [ 617.888091][T12920] proc_fail_nth_read+0x1af/0x230 [ 617.888104][T12920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 617.888117][T12920] ? rw_verify_area+0xce/0x6d0 [ 617.888128][T12920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 617.888140][T12920] vfs_read+0x1e4/0xb30 [ 617.888152][T12920] ? irqentry_exit+0x24d/0x970 [ 617.888167][T12920] ? __pfx_vfs_read+0x10/0x10 [ 617.888178][T12920] ? irqentry_exit+0x24d/0x970 [ 617.888198][T12920] ? ksys_read+0xcd/0x250 [ 617.888211][T12920] ksys_read+0x12a/0x250 [ 617.888222][T12920] ? __pfx_ksys_read+0x10/0x10 [ 617.888235][T12920] ? rcu_is_watching+0x12/0xc0 [ 617.888254][T12920] do_syscall_64+0x115/0x870 [ 617.888267][T12920] ? clear_bhb_loop+0x40/0x90 [ 617.888281][T12920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.888292][T12920] RIP: 0033:0x7f1b1a95d68e [ 617.888303][T12920] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 617.888313][T12920] RSP: 002b:00007f1b18bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 617.888324][T12920] RAX: ffffffffffffffda RBX: 00007f1b18bf66c0 RCX: 00007f1b1a95d68e [ 617.888331][T12920] RDX: 000000000000000f RSI: 00007f1b18bf60a0 RDI: 0000000000000006 [ 617.888338][T12920] RBP: 00007f1b18bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 617.888345][T12920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.888352][T12920] R13: 00007f1b1ac16128 R14: 00007f1b1ac16090 R15: 00007fff4d9a8b78 [ 617.888367][T12920] [ 618.482576][ T29] audit: type=1400 audit(2000000029.380:825): avc: denied { create } for pid=12918 comm="syz.2.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 618.987536][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.994062][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.354013][ T29] audit: type=1400 audit(2000000030.850:826): avc: denied { read } for pid=12931 comm="syz.4.1991" dev="sockfs" ino=41098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 619.541685][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'. [ 620.358014][T12951] trusted_key: encrypted_key: insufficient parameters specified [ 620.885177][ T10] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 620.908530][ T10] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 621.195884][T12957] fido_id[12957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 621.295488][T12963] trusted_key: encrypted_key: insufficient parameters specified [ 621.761996][ T5747] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 621.795211][ T5747] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 622.008206][T12966] fido_id[12966]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 622.140541][T12971] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2001'. [ 622.172457][T12971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2001'. [ 622.252912][ T5747] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 622.505758][ T29] audit: type=1400 audit(2000000034.020:827): avc: denied { mounton } for pid=12974 comm="syz.2.1989" path="/bus" dev="hugetlbfs" ino=40489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 622.505932][T12975] overlayfs: failed to resolve './file0': -2 [ 622.586031][T12971] netlink: 'syz.4.2001': attribute type 28 has an invalid length. [ 622.593907][T12971] netlink: 'syz.4.2001': attribute type 29 has an invalid length. [ 622.601995][T12971] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2001'. [ 622.652720][ T5747] usb 1-1: Using ep0 maxpacket: 8 [ 622.661823][ T5747] usb 1-1: config 1 interface 0 has no altsetting 0 [ 622.671751][ T5747] usb 1-1: language id specifier not provided by device, defaulting to English [ 622.784765][ T5747] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.40 [ 622.846340][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.928680][ T5747] usb 1-1: Product: syz [ 622.971489][ T5747] usb 1-1: SerialNumber: syz [ 623.153882][T10694] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 623.389911][T10694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.507338][T10694] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 623.536472][T10694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.578595][T10694] usb 5-1: Product: syz [ 623.590362][T10694] usb 5-1: Manufacturer: syz [ 623.602696][T10694] usb 5-1: SerialNumber: syz [ 623.632448][T10694] usb 5-1: config 0 descriptor?? [ 623.657398][T10694] ums_eneub6250 5-1:0.0: USB Mass Storage device detected [ 624.475228][ T29] audit: type=1400 audit(2000000035.910:828): avc: denied { relabelfrom } for pid=12992 comm="syz.3.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 624.837168][ T29] audit: type=1400 audit(2000000035.920:829): avc: denied { relabelto } for pid=12992 comm="syz.3.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 624.915241][ T29] audit: type=1326 audit(2000000036.430:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 624.986616][ T5747] usbhid 1-1:1.0: can't add hid device: -71 [ 625.008995][ T5747] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 625.032520][ T29] audit: type=1326 audit(2000000036.460:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 625.074651][ T5747] usb 1-1: USB disconnect, device number 70 [ 625.205733][ T29] audit: type=1326 audit(2000000036.470:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 625.304216][T13012] trusted_key: encrypted_key: insufficient parameters specified [ 625.778537][ T46] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 625.791944][ T46] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 625.803171][T13009] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2012'. [ 625.820143][ T29] audit: type=1326 audit(2000000036.470:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 626.001727][T13005] syzkaller0: entered promiscuous mode [ 626.017769][ T29] audit: type=1326 audit(2000000036.470:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 626.046997][ T5747] usb 5-1: USB disconnect, device number 58 [ 626.090067][T13005] syzkaller0: entered allmulticast mode [ 626.121510][ T29] audit: type=1326 audit(2000000036.470:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 626.172000][T13016] fido_id[13016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 626.224537][ T29] audit: type=1326 audit(2000000036.470:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffe79ce59 code=0x7ffc0000 [ 626.414693][T13026] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 627.136250][ T5815] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 627.738910][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short [ 627.747846][ T5815] usb 4-1: config 1 has an invalid interface number: 5 but max is 0 [ 627.756393][ T5815] usb 4-1: config 1 has no interface number 0 [ 627.762557][ T5815] usb 4-1: config 1 interface 5 has no altsetting 0 [ 627.777879][ T5815] usb 4-1: string descriptor 0 read error: -22 [ 627.784561][ T5815] usb 4-1: New USB device found, idVendor=2dee, idProduct=4d22, bcdDevice=f5.d3 [ 627.794303][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.832916][ T5815] qmi_wwan 4-1:1.5: bogus CDC Union: master=0, slave=0 [ 628.135980][T13039] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.2017'. [ 628.206745][ T5815] qmi_wwan 4-1:1.5: probe with driver qmi_wwan failed with error -22 [ 628.229741][ T5815] option 4-1:1.5: GSM modem (1-port) converter detected [ 628.322335][T13041] overlayfs: failed to clone lowerpath [ 629.197896][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 629.197910][ T29] audit: type=1400 audit(2000000039.860:845): avc: denied { read } for pid=13037 comm="syz.1.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 629.510411][ T5815] usb 4-1: USB disconnect, device number 58 [ 629.518311][ T5815] option 4-1:1.5: device disconnected [ 629.566666][T13044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2020'. [ 629.577750][T13044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2020'. [ 629.605546][T13044] netlink: 'syz.1.2020': attribute type 28 has an invalid length. [ 629.613570][T13044] netlink: 'syz.1.2020': attribute type 29 has an invalid length. [ 629.621405][T13044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2020'. [ 629.941216][T13048] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 630.015036][T13053] trusted_key: encrypted_key: insufficient parameters specified [ 630.470098][T13048] netlink: 'syz.1.2022': attribute type 2 has an invalid length. [ 630.488729][ T5633] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 630.489803][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 630.511113][ T9] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 630.595229][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 630.982846][ T5747] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 631.168084][ T5747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.182145][ T5747] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 631.191552][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.200670][ T5747] usb 4-1: Product: syz [ 631.205330][ T5747] usb 4-1: Manufacturer: syz [ 631.209986][ T5747] usb 4-1: SerialNumber: syz [ 631.227589][ T5747] usb 4-1: config 0 descriptor?? [ 631.236463][ T5747] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 632.278821][ T5747] usb 4-1: USB disconnect, device number 59 [ 632.316705][T13025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=13025 comm=syz.4.2014 [ 632.566942][T13074] netlink: 'syz.0.2026': attribute type 5 has an invalid length. [ 633.148599][T13083] binder: 13082:13083 ioctl c0306201 200000000780 returned -14 [ 633.149203][T13085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2033'. [ 633.465194][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 634.006966][T13096] trusted_key: encrypted_key: insufficient parameters specified [ 634.466707][ T10] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 634.484965][ T29] audit: type=1400 audit(2000000045.090:846): avc: denied { write } for pid=13090 comm="syz.4.2035" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 634.511389][T11465] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 634.523005][T11465] Bluetooth: hci2: Injecting HCI hardware error event [ 634.534342][T11465] Bluetooth: hci2: hardware error 0x00 [ 634.583622][ T10] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 634.731308][ T29] audit: type=1400 audit(2000000046.220:847): avc: denied { write } for pid=13101 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 634.751483][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 634.760955][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.770735][ T9] usb 1-1: Product: syz [ 634.779895][ T9] usb 1-1: Manufacturer: syz [ 634.793106][ T9] usb 1-1: SerialNumber: syz [ 634.873747][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 635.244600][T13104] fido_id[13104]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 635.310661][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 636.622193][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 636.639424][ T10] ath9k_htc: Failed to initialize the device [ 636.719869][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 636.743607][T11465] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 637.001563][T13118] batman_adv: batadv0: Interface deactivated: bridge_slave_0 [ 637.050720][T13133] trusted_key: encrypted_key: insufficient parameters specified [ 637.190262][ T5815] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 637.202281][ T5815] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 637.381478][ T5747] usb 1-1: USB disconnect, device number 71 [ 637.427488][T13138] netlink: 'syz.0.2049': attribute type 2 has an invalid length. [ 637.437174][T13138] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 637.446765][T13138] netlink: 'syz.0.2049': attribute type 2 has an invalid length. [ 637.455103][T13138] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 637.581975][ T81] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.616519][ T81] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.660261][ T81] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.698357][ T81] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.774273][ T29] audit: type=1400 audit(2000000049.290:848): avc: denied { watch_mount watch_reads } for pid=13142 comm="syz.4.2050" path="/405" dev="tmpfs" ino=2148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 638.151557][T13153] binder: 13148:13153 ioctl c0306201 200000001440 returned -11 [ 638.528412][T13164] binder: 13156:13164 ioctl 40046205 0 returned -22 [ 638.612680][T13165] netlink: 396 bytes leftover after parsing attributes in process `syz.1.2054'. [ 639.908725][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'. [ 640.167702][T13187] netlink: 'syz.3.2060': attribute type 4 has an invalid length. [ 640.208097][T13187] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2060'. [ 640.232560][ T29] audit: type=1400 audit(2000000051.740:849): avc: denied { write } for pid=13141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.356991][T11465] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 640.562713][ T5747] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 640.574178][ T29] audit: type=1400 audit(2000000052.070:850): avc: denied { write } for pid=13198 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.712741][ T5747] usb 4-1: Using ep0 maxpacket: 32 [ 640.720982][ T5747] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 640.828266][ T5747] usb 4-1: config 0 has no interface number 0 [ 640.850942][ T5747] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 640.872302][T13211] trusted_key: encrypted_key: insufficient parameters specified [ 641.015966][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.300173][ T5747] usb 4-1: Product: syz [ 641.464318][ T5747] usb 4-1: Manufacturer: syz [ 641.481966][ T5747] usb 4-1: SerialNumber: syz [ 641.504302][ T5747] usb 4-1: config 0 descriptor?? [ 641.529412][ T5747] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 641.791804][T13221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2064'. [ 641.805636][T13221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2064'. [ 642.065643][ T5747] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 642.082289][ T5747] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 642.165202][T13187] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 642.252854][ T5815] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 642.536179][ T5815] usb 3-1: device descriptor read/64, error -71 [ 643.154662][ T5815] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 643.164351][ T29] audit: type=1400 audit(2000000054.630:851): avc: denied { ioctl } for pid=13241 comm="syz.1.2069" path="socket:[41788]" dev="sockfs" ino=41788 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 643.209867][T13188] bond2: (slave geneve2): Opening slave failed [ 643.247020][T13195] bond2: (slave geneve2): Opening slave failed [ 643.327459][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 643.335590][ T5747] usb 4-1: USB disconnect, device number 60 [ 643.342779][ T5815] usb 3-1: device descriptor read/64, error -71 [ 643.348036][ T5747] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 643.403759][ T29] audit: type=1400 audit(2000000054.920:852): avc: denied { write } for pid=13210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.440045][ T5747] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 643.463197][ T5815] usb usb3-port1: attempt power cycle [ 643.467981][ T5747] quatech2 4-1:0.51: device disconnected [ 643.480244][T13252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 643.596585][T13252] smc: removing ib device syz0 [ 643.636143][T13252] smbdirect: ib_dev[syz0] removed [ 644.129587][T13252] ------------[ cut here ]------------ [ 644.135078][T13252] !xa_empty(&pool->xa) [ 644.135088][T13252] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.1.2071/13252 [ 644.150532][T13252] Modules linked in: [ 644.156118][T13252] CPU: 1 UID: 0 PID: 13252 Comm: syz.1.2071 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.167108][T13252] Tainted: [L]=SOFTLOCKUP [ 644.171420][T13252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 644.181610][T13252] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 644.187096][T13252] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 06 33 51 f9 5b e9 40 2f d5 02 e8 fb 32 51 f9 90 <0f> 0b 90 e8 f2 32 51 f9 5b c3 cc cc cc cc e8 a7 17 bf f9 eb d0 0f [ 644.206962][T13252] RSP: 0018:ffffc9000efd7160 EFLAGS: 00010246 [ 644.213035][T13252] RAX: 0000000000080000 RBX: ffff88807a289398 RCX: ffffc90003ed1000 [ 644.221081][T13252] RDX: 0000000000080000 RSI: ffffffff88b77d65 RDI: ffff88807a289418 [ 644.229191][T13252] RBP: ffffffff88b5d950 R08: 0000000000000005 R09: 0000000000000001 [ 644.237195][T13252] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807a288698 [ 644.245189][T13252] R13: ffff88807a287fe0 R14: ffff88807a287fe0 R15: ffff88807a2890f8 [ 644.253161][T13252] FS: 00007fafff6506c0(0000) GS:ffff888124483000(0000) knlGS:0000000000000000 [ 644.262073][T13252] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.268735][T13252] CR2: 00007f4777586480 CR3: 000000001dbb7000 CR4: 00000000003526f0 [ 644.276712][T13252] Call Trace: [ 644.279970][T13252] [ 644.282923][T13252] rxe_dealloc+0x25/0xc0 [ 644.287153][T13252] ib_dealloc_device+0x49/0x230 [ 644.291999][T13252] __ib_unregister_device+0x396/0x480 [ 644.297379][T13252] ib_unregister_device_and_put+0x5a/0x80 [ 644.303120][T13252] nldev_dellink+0x308/0x430 [ 644.307904][T13252] ? __pfx_nldev_dellink+0x10/0x10 [ 644.313058][T13252] ? rcu_is_watching+0x12/0xc0 [ 644.317803][T13252] ? cap_capable+0x10b/0x440 [ 644.322376][T13252] ? bpf_lsm_capable+0x9/0x10 [ 644.327069][T13252] ? security_capable+0x80/0x260 [ 644.331984][T13252] ? ns_capable+0xd2/0xf0 [ 644.336309][T13252] ? __pfx_nldev_dellink+0x10/0x10 [ 644.341401][T13252] rdma_nl_rcv_msg+0x392/0x6f0 [ 644.346245][T13252] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 644.351540][T13252] ? __lock_acquire+0x4a5/0x2630 [ 644.356503][T13252] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 644.362933][T13252] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 644.369858][T13252] ? netlink_deliver_tap+0x1ae/0xcc0 [ 644.375155][T13252] netlink_unicast+0x585/0x850 [ 644.379916][T13252] ? __pfx_netlink_unicast+0x10/0x10 [ 644.385216][T13252] netlink_sendmsg+0x8b0/0xda0 [ 644.389961][T13252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.395237][T13252] ? __might_fault+0x60/0x140 [ 644.399911][T13252] ____sys_sendmsg+0x9e1/0xb70 [ 644.404679][T13252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.410177][T13252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.415481][T13252] ? __pfx_futex_wake_mark+0x10/0x10 [ 644.420757][T13252] ___sys_sendmsg+0x190/0x1e0 [ 644.425457][T13252] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.430673][T13252] __sys_sendmsg+0x170/0x220 [ 644.435272][T13252] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.440367][T13252] ? __x64_sys_futex+0x34f/0x4d0 [ 644.445319][T13252] ? rcu_is_watching+0x12/0xc0 [ 644.450066][T13252] do_syscall_64+0x115/0x870 [ 644.454646][T13252] ? clear_bhb_loop+0x40/0x90 [ 644.459301][T13252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.465219][T13252] RIP: 0033:0x7faffe79ce59 [ 644.469620][T13252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.491076][T13252] RSP: 002b:00007fafff650028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.499579][T13252] RAX: ffffffffffffffda RBX: 00007faffea15fa0 RCX: 00007faffe79ce59 [ 644.507854][T13252] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 644.508142][T13261] netlink: 'syz.3.2073': attribute type 2 has an invalid length. [ 644.516166][T13252] RBP: 00007faffe832d6f R08: 0000000000000000 R09: 0000000000000000 [ 644.516210][T13252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.516221][T13252] R13: 00007faffea16038 R14: 00007faffea15fa0 R15: 00007fffee89ea78 [ 644.516247][T13252] [ 644.551054][T13252] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 644.558322][T13252] CPU: 1 UID: 0 PID: 13252 Comm: syz.1.2071 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.569269][T13252] Tainted: [L]=SOFTLOCKUP [ 644.573575][T13252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 644.583617][T13252] Call Trace: [ 644.586891][T13252] [ 644.589802][T13252] dump_stack_lvl+0x100/0x190 [ 644.594461][T13252] vpanic+0x552/0x970 [ 644.598418][T13252] ? __pfx_vpanic+0x10/0x10 [ 644.602898][T13252] panic+0xd1/0xe0 [ 644.606611][T13252] ? __pfx_panic+0x10/0x10 [ 644.611007][T13252] check_panic_on_warn.cold+0x19/0x34 [ 644.616373][T13252] ? rxe_pool_cleanup+0x46/0x60 [ 644.621206][T13252] __warn.cold+0x191/0x328 [ 644.625663][T13252] __report_bug+0x296/0x3d0 [ 644.630177][T13252] ? rxe_pool_cleanup+0x46/0x60 [ 644.635026][T13252] ? __pfx___report_bug+0x10/0x10 [ 644.640036][T13252] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 644.645817][T13252] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 644.651610][T13252] ? __flush_workqueue+0x426/0x1200 [ 644.656788][T13252] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 644.662422][T13252] ? rxe_pool_cleanup+0x46/0x60 [ 644.667256][T13252] report_bug+0xb2/0x220 [ 644.671495][T13252] ? rxe_pool_cleanup+0x46/0x60 [ 644.676349][T13252] handle_bug+0x16a/0x2a0 [ 644.680675][T13252] exc_invalid_op+0x17/0x50 [ 644.685169][T13252] asm_exc_invalid_op+0x1a/0x20 [ 644.690014][T13252] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 644.695461][T13252] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 06 33 51 f9 5b e9 40 2f d5 02 e8 fb 32 51 f9 90 <0f> 0b 90 e8 f2 32 51 f9 5b c3 cc cc cc cc e8 a7 17 bf f9 eb d0 0f [ 644.715052][T13252] RSP: 0018:ffffc9000efd7160 EFLAGS: 00010246 [ 644.721138][T13252] RAX: 0000000000080000 RBX: ffff88807a289398 RCX: ffffc90003ed1000 [ 644.729194][T13252] RDX: 0000000000080000 RSI: ffffffff88b77d65 RDI: ffff88807a289418 [ 644.737153][T13252] RBP: ffffffff88b5d950 R08: 0000000000000005 R09: 0000000000000001 [ 644.745128][T13252] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807a288698 [ 644.753107][T13252] R13: ffff88807a287fe0 R14: ffff88807a287fe0 R15: ffff88807a2890f8 [ 644.761071][T13252] ? __pfx_rxe_dealloc+0x10/0x10 [ 644.766023][T13252] ? rxe_pool_cleanup+0x45/0x60 [ 644.770896][T13252] rxe_dealloc+0x25/0xc0 [ 644.775161][T13252] ib_dealloc_device+0x49/0x230 [ 644.780026][T13252] __ib_unregister_device+0x396/0x480 [ 644.785416][T13252] ib_unregister_device_and_put+0x5a/0x80 [ 644.791128][T13252] nldev_dellink+0x308/0x430 [ 644.795715][T13252] ? __pfx_nldev_dellink+0x10/0x10 [ 644.800878][T13252] ? rcu_is_watching+0x12/0xc0 [ 644.805632][T13252] ? cap_capable+0x10b/0x440 [ 644.810210][T13252] ? bpf_lsm_capable+0x9/0x10 [ 644.814884][T13252] ? security_capable+0x80/0x260 [ 644.819807][T13252] ? ns_capable+0xd2/0xf0 [ 644.824152][T13252] ? __pfx_nldev_dellink+0x10/0x10 [ 644.829253][T13252] rdma_nl_rcv_msg+0x392/0x6f0 [ 644.834015][T13252] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 644.839333][T13252] ? __lock_acquire+0x4a5/0x2630 [ 644.844280][T13252] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 644.850695][T13252] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 644.857633][T13252] ? netlink_deliver_tap+0x1ae/0xcc0 [ 644.862911][T13252] netlink_unicast+0x585/0x850 [ 644.867664][T13252] ? __pfx_netlink_unicast+0x10/0x10 [ 644.872961][T13252] netlink_sendmsg+0x8b0/0xda0 [ 644.877738][T13252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.883097][T13252] ? __might_fault+0x60/0x140 [ 644.887782][T13252] ____sys_sendmsg+0x9e1/0xb70 [ 644.892543][T13252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.897818][T13252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.903095][T13252] ? __pfx_futex_wake_mark+0x10/0x10 [ 644.908375][T13252] ___sys_sendmsg+0x190/0x1e0 [ 644.913061][T13252] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.918270][T13252] __sys_sendmsg+0x170/0x220 [ 644.922858][T13252] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.927986][T13252] ? __x64_sys_futex+0x34f/0x4d0 [ 644.932922][T13252] ? rcu_is_watching+0x12/0xc0 [ 644.937682][T13252] do_syscall_64+0x115/0x870 [ 644.942265][T13252] ? clear_bhb_loop+0x40/0x90 [ 644.946927][T13252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.952817][T13252] RIP: 0033:0x7faffe79ce59 [ 644.957216][T13252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.976826][T13252] RSP: 002b:00007fafff650028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.985257][T13252] RAX: ffffffffffffffda RBX: 00007faffea15fa0 RCX: 00007faffe79ce59 [ 644.993247][T13252] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 645.001213][T13252] RBP: 00007faffe832d6f R08: 0000000000000000 R09: 0000000000000000 [ 645.009172][T13252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.017126][T13252] R13: 00007faffea16038 R14: 00007faffea15fa0 R15: 00007fffee89ea78 [ 645.025108][T13252] [ 645.028339][T13252] Kernel Offset: disabled [ 645.032642][T13252] Rebooting in 86400 seconds..