last executing test programs: 7m49.026374473s ago: executing program 0 (id=445): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x90}, 0x1, 0x4000000}, 0x0) 7m48.527452788s ago: executing program 0 (id=448): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200c8004, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001f0019"], 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x2000, 0x19d) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0406618, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1, 0x10000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060c9fd4b2dd9263b30000000295a485d45d8ac77a63bc0a00fffe09e29873d522b530cba7398c3a00020073797a32000000000901010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f00000000000000800240000000021400000011000100"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) syz_clone3(&(0x7f0000000380)={0x1000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x6}, &(0x7f0000000240)=""/143, 0x8f, &(0x7f00000001c0)=""/59, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0xa, {r7}}, 0x58) 7m47.486296722s ago: executing program 0 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2062) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x1000a080, 0x0, 0x10, 0x3, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$getenv(0x4201, r1, 0x2, &(0x7f00000002c0)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)=ANY=[@ANYBLOB='nr_ino`es=m,size=0,\x00']) 7m46.411187705s ago: executing program 0 (id=455): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x2}, 0x9}, @ib={0x1b, 0x6, 0x9, {"49c13bc2632ff7799458db1ad3028c6a"}, 0x8, 0x4, 0x6}}}, 0x118) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x20a7699, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 7m46.250085703s ago: executing program 0 (id=457): syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @rand_addr, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {}]}, @cipso={0x86, 0x6}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}]}]}}}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, &(0x7f0000000040)) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x9) 7m44.322410615s ago: executing program 0 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x40c01) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="071db6ce2ce16db87572abe7250000", 0xf}, {&(0x7f0000001300)="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", 0xff2}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setresuid(0x0, 0xee01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f40000006404200027bd7000fedbdf256329448e51a55c5b75fda4a4da5440310491d793cd604e63a40a069c0f66f4c745ec3234a4f5e5b3d833e3eb8f2395ef20ad2beccd478b8daac0ffe824801cfb46e4833134a1339e96b0c42e472f40a56745f8cb6fc5174a71e9ce3fd5f79658eb1b3ae3f5de2834db489db7b51f183d5fec4238d05143bc6e96e699f77780579015cb0a0faa0db28025b759b76c21ee441b05e6c45e9bdf2311de22267f531a55e4270b1fa56a8e256edb93c1ff7f540a448a30ca2f565738e4e9b4c184cb9d43d964a9486b752eca9ab5459be77eaadef15c219d01218e26c921bc609b7d2f3abf5700"], 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000041) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m43.97102396s ago: executing program 32 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x40c01) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="071db6ce2ce16db87572abe7250000", 0xf}, {&(0x7f0000001300)="d38faaeed3fa28ce08ab1d7d724a6a101595303dbf77cc54227335299858ec7b3ad93d10c8ea778d8081353dab08388463581bbb74b8fbf57d0ca10c694510fa5d8b255597c074a40fc5abaa5436248c18658bcb41593333e71eb646063aa6cd8a29c9ced1752f1a82948afcd7b3ba6b1b8eb90fc70020f55ada764310ca7474fe0e636ea5ed07448c82e1716a4002ff7895ec49087f90c1b42084af159e4bc67fe80d335d2d45710a85ecde0d251daf505bef9be5099c52bfc399c513cac606866193438af8a73d7d08781a0b2de378557b658bebbb0e01fa9c8c7fdcad2caf1cc7e3d269eda0ecebd36f9da4ae2f59053b1e1385cfa071f3fa4e997b48410c581ed1252cac345d070d2609922ecd4ef017b1ace905f95e4eceec3f74906d3c15be8d7c3cbccfb8d6f059b73d67ff1a7e170217039c91da6a0c8282bbfd4783bcf61f08c74141f64e9b94e5ce681b1712425cd41b088d80b80b2f696e0ed1fd354caf3520095cdbd60fbb5d8ef8638759e098407d17f12dfb5208c4fcd25c36d058c191d02229935580596f6bdb9aca4366ea163b4758f55fce8d4a43ff317b6177ae17941cc99cdeb4975f702eddbad1bda07820556519732920b1968d1460ff70a1f83c809a73faede16de5a4eda527ba9ee4e2009d41c0877de53ae852fcb7aa59295c75def5d7a9be891e955534d343456a0839bf71506793e704612f135f5f3dc69fd0f469cb673473092bebf638fbaafbbd513c7d211da83a87cde126b3649a9c7aeeac2bf3fa1b6bd6cb28ad12151075edfea063662e2077ce3b8dee34ad09765c122a65ff86112b2934694d90d1cd8e9347a6a03fdeebb36182edeea7bd3130cf44d7952cd589a1b4d81fe692658a6eadec5d7e4e0b3954b57a739d6097f1612bf4a571ae308fb4cd3457c08eeb133549cc17a79ff68dc2b47cd5f75668bb82d7b0ec68bb0b79e181678c49e1ed42ef70c74fb1bb94fa9e9a17fb68e49a8c71ed4f70e7adfd25f76551f930eeb88068f85c75f44e7030f1385a19ecb38b2844d2e9452ac3a2f8e7263de7cb91a4f362a8ec3793165c59d3276a5bd41de076a2974daac9f73d45a00d2210806e4ffa22cf3c22b42c642c483dcf317258cb3e34f3658fb9869a37b3686a4636a118f0865889f0a6c87f7af719027a4574f6e77a638eea8c36d6cbc425fd94932a52c08f45fc831e5f4e1f8d736a41c26c61f6fa3bc8a4adae65e87de12ed0dd06586a1b36c9a225641915fd32221435a420e2c72a7ca5346fa7c376bbb495f2b463aef4fdbccf0f7d30b34bb215b814b6aef4da768bc2654234dc5c2bd094e83ab23dd78a6430a473ea75e7f05264c196902363f8cca326c177f18997fe9e55487cdb0a89de7c6b39b6c222cac287c989b049508a21efcb75a8e09ccdd2245c529ea2648c2adea4f951ec3ce757b949423fbb887e72891547aebcc90205242c92bd5897f8fc661df218efdb2e21820ff00f4736a269b01da10ed212ec2b75592cf6b0203591a64f410380719cba66fde0fb424dfb367ec84f8608998d6e374d88b960efb322ff3af3cabdd0255510f4f26719605f3a664f8594c128b95f617abd165cb44b7746c6ca579f6f4bc2558442a0f5e40ae2f595207f84ecc85acf274ab596cfc5cae00c628f1f91b149a3c9a0bed90a072822ce958f5bdc801c6348e5843c87221d2c01442de73dde18bf3ba56be20c1b61fa5d7afd8c29bf0f38f72720ffd050564bf131facca7030b9bffec39de06fe2e4f2b9bc96b8f56218216b59ce5931ca1c98fc1026a9518a2c97bc40e20791479929aaf72326da373a19a37852f2b50ce2445a9424c57e1fd6e08c71f2f45e668e3141a1810552c275271c770783f93185efe8dd2000b6c051828e5553b820a7abc6af13aeba6af8386f8a2d45dea3932ca9524a85a3004e843542eff5cf73c5eecf678386acaf236d57f43ec8ae89c81ef92b4b1dcfff8ead1b946fc4b5019da31cc61020a07da91f9f69d33264d6dfa88be159b779dee43a0431d312ff95daf5716e22d53458e46dccd1c604d1e078b46811cb41dcf47c1decfaadc7e7750c6cbda672caac96caff6c6930f8718d6be875f768ffbbe4bd445dc1809e7294cf58aba99f570885b98fd50629b2edcc2ce3dcd5c4f141da50f3539c4a9775c1edf070bc39e5e9666ac8b032d01e5aade451d0684255922bf0834372b5ae928f8f3f4e5bc9bcbe4557f53b785a229b82462d31dcbdc3ada17b4f1db2111c1026183e4d3a66e6ecdde91616bc787b9c8ade91eb5bbde76d2fd68cdc8385d5cdc5dc3481143e0725c352815d612869654f3a37bdf0e671499ec7545c68f8a232d524c9e91a086c3c82a6e44feb0f61c81e2c02a72cfe174a6c2418fdaf2df802284ecc2d8441d34050c269128fd7d21e31c5dea4ae19ffe799a9f3ace3535c1ac596ddacc16deddd62ea83b9be60790caee968d9631079cf68cc133396788f391fbcb54a7defb7bc4191bfb8f92aed8acf42c02ed49b88622d1ff629d0f3ba63505e59cd25db82b953908581abd013199794be14b38abdc3daf25e8306f100e010cd9a29804114e1832f8005b582a2a397e43e426df8842cfeff17e40f064a928e6748d6fe6376c91fc9acba67807a4dea42a12a6d61103876fa70c2679e801cd414083ce27ed4b1a469f03054e6789acaa8108f2549037535aa331dcf541cc7cbcd7b896f81fbc41c13ee70d3707cab746b14b2c63a09230ce43972a53eb7926fb9e2a1cadba87232a483931af4fcaba554e81e7809e4d38ed507bbf2859755e41095462834b69f1af701f7dbbbf1e5e2e49008e7df2ddd5c1ff6281973157aaa52062ee983c0f778786b8d06c8ed6618b8389694256996a07b95e18c1c2a8365c4b43e41b9dfd1568adcd7efe5d5aadc04c67b9877a87735618d802f73c79816044254878e37548eca5eb7b40f728e4bf93381827ffcf9aec78d519643f53772f09fe7e1b4f109e68ec41e0db1f406cf62441eabefb5512a032d3904fef63c3bdac35d64434a86934faab39275f93e0125f4607f380100b237ad72e5f378f82a09f66c48d1f748dd2ad5ab77e1ff9f1df90f4847332f9d4f5b21a091ff80a2b3a2a84f29ad26d70c130ae5eb20cb4260f1a54e5fa238d858cf811718f0c2c277d9d60c4c8f3fb836102268d46bead6802bde863c997e55666f536ae08deec70abcddaa01541bb074306fe1278b4b3396bcf9232d00ce2d2b81661aaafedb05a4d4e5cce86775ba59199e15c96e2a5c59446962483191698b5a37b02b3c00ab41b9b187d976451b51c92b3be0987066818eeda575015d9020a1fdf5304348824af143b1713a3c3e9b6e70767c73dec48a431f64836a272e29dca8a511c8255465193f79fa2ea918e1bf84d91918189dd0e9ff76e812071578f1c2b1b4936609fb9b5f74a194299430323d62f588a700ec684c6454dd0ef637e51ed4b1c2747e0656d00dbbbdfc4f66ec1589210c4d7af564cd05b049e5add18ce562846b3daf66693e97bd3463ed3248ffd60d819b9d6a98590b4550046552693df1bce133b6a40ba53e08286d9a6944e036db6d2953222f7fa3e41a7728a4ada3051fef1dbaed895ec3fed572f0d1af24811fa7aa706a9ce35dd6cd4b049f50c590ab60b40e7cee9a81a70ed0ac608d42136c2d21e38fd1b2a9570743a12b57e144bf06132ab887add72935f8c6089c2ef4ce1db9514a7397d7e6ead0ecba21400c92970744894e81511e534b8db8f6b4989ae76301692b84d7e1a295ee7a6f3fb44cd0a02ea2134e77052f6695efd7b986c12721a2033f2cd1f4ae8dd86bcd83c3b6eac01a017c403e1955e6e5750c031c96b5c933e04a657bfd711f265284251a8827487945b8c231490ac088ed8c3077e87d994ed55ad9bddfce451614efcbd5c97689b59760f4a1dd4c98d1902814b5e3ac8041bfb343fc6137c5ace58ae572266c0fed05ca6e99511af1833baf939e25eb317ebc92c7be6637addbc052c63d81d26a124a40993fdd06757124c1b999fc9647342a4b74c72b1564371bb3f822a15af42c906d7bc40d72c7c7e18b3918cffa39b9d7a1badad7e76314577ea6d9f399135e363040704f5c9529f65847196accf35088e2a0d992bfccc6d7e0a6dfd49b82a4bb1aa35e5e36bde7b7a5ab104ccd3721bd8fc8b38852bf9737ddcce9da09a96ca346e09e1c30ed1936ec43f04795bf4a6d10e0c398407400c22db114d4bc0a3e5d2fc46f9aa689f0d5e75d3e32a0c51963452faa435020497ab04de51b4e7794ea24cf8b42096285585242b16e7087662de3c5598edc32d0b6af0cd678682a86989fb10fba6d872c990b14168e63d6f541d2d02ee336b8d30021021809639a97e7eb2a84e2da14d024b028c3cf1d6fd4baa34bee8fd17bd7ea52b3768b305ceb4fdf798cff88afcd8bfbeac38fcabe265c00116fde749b6c7594805907edb517333665a9a04ae834c37c0fb6719e198deb198e174d9a61348abbe8e27a1ecb604f237447d8735c3d542a0412fcf67f12767dc40a65a1d7e94fa8fa6a165fe7efb96b56e1e97128c82356d28af7836af3e03b1ed778ed1da74a86e8d6974eda3898ee71ff26e3de3d0776b65c0c47bd6359d1f7a60230850460159baa0ee2cf673ca1bc34d9b9e6001124471f1c4cf08ac40706c429dfd1ce42dc2609ac2e8a88e26e11eebf65c1a7ecb9cb938c41ac0ad10e0bbe70c983d9b0be25ac4dc6ed2cae14041929b3cfa66f30a8ea95a2a27fe2b1990a4337f029bfe095f24a58d30735bf45192b28a30bf00f0897230b720cae93dbeac4b5359558717e113f9fb7b3f0baa9627ad007d71c1922a644395c61ba0ae4dbe14e26a89789b98198ebb063ce84596b1dc30b85f64455d578b152f5abc3eaaf6d4cba77e14c4ca57de1231f7ff231c17d2d69b96478b1ba544009bf9164362ed94c857046ca20d6241ae1a12420ab6e241e1703ff819043938aaf632b49b804bef3bab61dae568ae78eec788dfd3055dcc0284caa1b25d86746148cf6f555348789411dddee1e1128b5b993c1b4a522f506f918aa86dc6d9f5b78f7a9c331ba2f337683d5adde904f867ff92a956da654faca69c11dfc584d02e04061ddce476949fd3a66ad25b4390d378c94b24cdb03b5bd487c0291f462d1cef0eb0b18c3f56e0969bafcd5810f4d921a9c5f9386485be1cea06c97fc7516850986c0e98ca933a307f81e213c19dec1444ce48fd7b5f61e4b68c05d88aef8c07b070a62d94c899af5d8b9bae115d5ac92d52550ea281d0a3663dc1fdc702c077f2f916210461899ef5df4d1b99819674ce6070dd679c18158fc4680a2643d98dcbab247e8f8954291cfd8741a626efafe869f8190881b210ed021c14371669162e6420795f7b4a967e594754c384f35cde84de73eb5b0517474b06905a483b9a9cee08c2e0002ae339f935d73bc799401e61bc2689e0d607e0a8bf9dad80cf9c9cb224b7fd6ea0f3a7f5cb80b3b1c7a1ce22e0298014f4a1e6eadbc320129980b93ab7666aad573f024a20c4e22fd5aa16f0ce9c839b715f613769051c2ab586318a80e145fdc35927cc608d5c35233331d8ada033068ea02389108b6debc4ea405e5eed30fa62fde2bfeb297e18200062a5c239e01ff958af4e150ddec97d24b26b10015af6db252b7e1ed4f7c27eff839d8f3ece04defa5f870ab15e2f47b1147dae2ff24a06a18d2b5c8199e24916751141d55ac041b48e625bdfccbb56", 0xff2}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setresuid(0x0, 0xee01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f40000006404200027bd7000fedbdf256329448e51a55c5b75fda4a4da5440310491d793cd604e63a40a069c0f66f4c745ec3234a4f5e5b3d833e3eb8f2395ef20ad2beccd478b8daac0ffe824801cfb46e4833134a1339e96b0c42e472f40a56745f8cb6fc5174a71e9ce3fd5f79658eb1b3ae3f5de2834db489db7b51f183d5fec4238d05143bc6e96e699f77780579015cb0a0faa0db28025b759b76c21ee441b05e6c45e9bdf2311de22267f531a55e4270b1fa56a8e256edb93c1ff7f540a448a30ca2f565738e4e9b4c184cb9d43d964a9486b752eca9ab5459be77eaadef15c219d01218e26c921bc609b7d2f3abf5700"], 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000041) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m17.616776369s ago: executing program 5 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x77bc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000340)={r4, 0x2}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e23, @multicast2}}, [0x1, 0x7, 0x4, 0x6, 0x0, 0x3, 0x8, 0x1, 0x2, 0x9, 0x6, 0xffff, 0x81, 0xc07, 0x1]}, &(0x7f00000000c0)=0x100) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) remap_file_pages(&(0x7f0000250000/0x4000)=nil, 0x4000, 0x0, 0x1ff, 0x800) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x5c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000801) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x0, 0x3000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x5e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000002e00090027bd7000fedbdf250400000010001a8004000480080001"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 6m17.0076024s ago: executing program 5 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xffffffffffffffff, 0x0, 0x0, {0x40, 0x8, 0xe, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x121, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x80d}], 0x1) 6m16.369633652s ago: executing program 5 (id=795): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigtimedwait(&(0x7f00000001c0)={[0x100000000023fa]}, 0x0, 0x0, 0x8) rt_sigsuspend(0x0, 0x0) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000180)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) r4 = dup(r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x4, &(0x7f0000000240)={0x9f, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5e1dee93"}}) 6m10.891147553s ago: executing program 5 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20a7699, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 6m10.641952179s ago: executing program 5 (id=812): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0xa44, &(0x7f0000000000)=ANY=[@ANYBLOB="120100028ddf34103d1b90019e6b010203010902320a02030910390904e8080df14a03090624060000be0524000d000d240f0165000000010000e00408241c0a0000070006241a08001006241a01042008241c040038010007241400000a0006241a0800090a24061eada1255157000056779ace4e052400300c0d240f01070000000900000004090580014000063202072501000109000905080200026202090725010098b30d090502010002070140090501031000ff0108072501080e020009050b0340007f1009090504260004007f04090500024000050008f83171e068cb1567339d9435179ce16b1bde229a1f64c4b3a72e60f03fb860a9221e322ca2abb4c10b3891b7ead2ecd50a3b7511747793890b9f8c521d8f3dc88065e603fe0ccb7af93f941e8c091d66b51603f868c6d6a746203e0c4cd7c2698a2a818793454c7786113ac9107ff45d8247a95b8d811b4d6bf88b63cb4f0f7bea6e0aa7ff7b45b49d32dcd5b883c844a724e47c192b8d2be4ded626164fc64591cbd46d7930d5bcb2588bbbcd1b02125b1d780c45113225d7278901d8b973173faded2e54a6efa0ff0b39902281947364048807a262648ed1fe69e277a990cad0ac03dd4459a2abf0225c647626bcd66fef271e910dc3fe072501000ff60009050d000002818603f201f89c2774aac771f9654b8f1ffc6ad2ca4b492ce19c81c2c29b6cac0ce6e63cea12a892085a8158f1c9c3cb853976c9cf5d10be6aed383f7d0dcf8c24229af07a3d2bf5439d4f6f94b5aa3da6da7b5973320c8327bbe31dd016bbac5cb07c7250cc9429d0ae8e89a0c1fd5539f7fd508266d56f82fad8fc185aba52ad44ddf540da26e0321f20c7b9074df7eac72e03fb2e7e97e9168766d67a0e5113150a8245c8fdcb4a2f85711da9f0954227ca540a7502ce436ee8ca03bda0d12f2026fc3656d45b090a85870c1dcfba60bda91af877da645b3053ceba76f98e6c523ca0771c94484d2831bf0051f71ae6ada53dde8e043f7f5ee1c3327a3646e840aa62bb3d4c1c2532793279e36c0e5a84b3d403a3bf4a74b2f5a49fb5c6768cb662977e14dc0dcdd4239a79b303cf9b1a73702696bf256657019cd65735eb3b33598952fdf2243b307c64dbfa9a9d5b5d21e6490331a0ee3bf590ac682f7e6e82949b3276a6dcb548ff7940ba3ad0327a2cceba590399009174c6001ab7377cd967090580002000097e0709058000000200b3040725010c05100009050b08c701027b03e4114407f3eb1eefbb5de83c3e8296f05935b9dbfe82a244e2c7a1bc612d8b3c5d3ee108886271e16a7b145c28f8582cd3f73f6d6f00025fe4fb066ac7b5d13263253429d222b4a4b58554c5c3384af8ad94f337c4d007e85742687d300d375f6377b378ab501e155ef4121288c22ee5b62bcce3633ad5ad27ac23c76585cbea8fd077c7f6e7c69f2b3dbc73eb9e1bf9ea96dd8ac04845b736f922e97ec0623c54ba566d019ce3d69469b970edcf4a3251b4e7935908b502d34b8c231015c3694b2dfa6e211ce12359b2cfb03a49bbd53bb0c768a954c8e94af46391b65f22a431d4daac090505000000080e0009050e0d00040008080725010c0201000904f3060dbae1618109050e104000000cff072501040100108b225ca899b9fa68fed6abfb44e7d1891e6722a142c4bcb2fa5070199c1e62f8a36802f6f4853439e8e22e8ebb6899112473500ea48439c4f09538164d3a466eb8ec488bec8c85190e85d6705cd7e58cb584dbc483036576478808a2d2fd124aa99943d7759a7bcc0f111b2d568a347d19775a69c8925150d5def4039bbc59739d9990fcb4c780b1bcf65f09050c030002ff28ff0905860420000b0302090506000800009b090725010c07f15ec5302ad83fd82fa0d8266a69003690f74a51993ff09985c676ee8ed5aff5269ff0e32530ee61b08be7bdf909f0cb86d124e5c91e5cd3b38558fce4150eab960b5f4dcf31e7d2feb6b96fe854e333fe1c7f9e4b12806f6b95fbcb5c5d0e2734e08f70fee8c5922e6e52253b1554c952267973b33d7bb3af241e0052ecb8b5886c542c4742e8cbe1b19b5adab972f833a8535db7bce06be53103640c667d809e59c0da49a01ffcec281b0114908b14ca25624d3c4f3512ffedc6e490bf52a9030c7d0a128db7090501040800010907090508000000080801eb228340e4706c824c2d438fbde6490e397e3d41e1362c1fa02b9a540032d01942b8f4451f3393580c5a1fd729416bda629bb23dca2e357871aefc579d5e0116efd133e8dd73982bf1fdacd5d10d3f347b8d8f6bb8b0226dbf00df77e5ee09bdb23521b12f51aec6acce27c45242881366ebbc86b4a28b0e1e44e384babf8a98268e8a58335de3f0e824cf02c3b3c3e5338b73b86d37b5685f90e2540a8de0123b98a5efe9967aac946f20539b6b0a83e2e3f77287a4e81026acb96a545adf67b4aa9fda923e16b96fb35644bf66f0a7ab1db428a45ea4090499058bc4ed366d036297a06af9326b6464a309050d00ff030ca5f59e0170956449c38608902910862f5052765cd6701dab3f1231beceab3f22449ebc36bf929be0799beca1692167688f5facd3c0d005d62d35ce85704d0cd151e148de0eea3bcce050c5136838187353bd2f44df1b8b6df690d7c1368749ad4bbbe8271ee08475a1f5c6b53567b901c79c476e719b95fee9cab4a8a089a9f4fa4110b03041f8ff94bada621182f4cc068a2972dd20094c928efed4a9d8f3930725010c0001000905050c080009f18009050d0410020207dd0725010c0300008904c5605e2bdd911ab112208214cb8fb8929d279f41c2ee990c5da33424a0a1a436c77554fef5cc882bfd59df4f8e0c975591c5b84b913668106f0eab5d767196b1949f6670ffbbb7084a910a924fc901a291da1bba76ecde94791e082010c954b4046775a4e90c44fb406813a9b6787a28e21f84495c33f5ab698ce7a245fd825b7142da944bdf0a09058000400065050007250104060600090580012000030d0dfb310808389e67c15a492bd1920abdc8032f5b12adfaad6b557f316b91e082970fbb5bbcd4bae93e89109653955353932d8369129812bacd4e2e3bb2672f59919742f6bda80f3d29cfef26a9568f1cbd0ef0c9c736fd316cba45effaf038303d11dbc4fffbd5abcb3787deaf5268354dafdafaef18ff37bbe4a6c2e927f175d68daafbc9390860b5d2720ea05fc899ad56576579811a8829887858b461d82845a9c03a79c9c6d860b688c95b70c12e6e85281346717df41fbab950408bb522f51fb9d59b03cba9742614d7e39d84516b1df0429ba9362ba92521977c4b6a37a3e6bae80cfd1c582917552eec7d70be63d4840ee31c8910f8529de70725010001080009050e101000090000bc0f8b2f8a73149b81df987f6da79672188896b95a528bf2a88135c077345fbf9d9d847b0bfd5f2a7f27f8b95fe6a470a90fa8c33681256c67336f1bc3ebfcf385fc3c3e728d7de5776abf8349b60f43d7f38ea3428cb41dbce849bdafe06294fe6d8749861d5368a85c0eeabc1c2c458a04acc7fe095c9cef63c31db53e28cb2caf2029b5d61d1232eb38d2a915676d4edd5b21290cbfa5ee3983541cdb6b91506ae5dff22621b1d7c1202d0e5ef93e28b769beb93ec858fb85bbba09050200ff0302057007"], &(0x7f0000000b80)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x300, 0x5, 0x81, 0x0, 0x20, 0x85}, 0x25, &(0x7f0000000ac0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x8, 0xf, 0x96, [0xff00, 0xc180, 0xff00, 0x30, 0xf]}]}, 0x2, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_connect$uac2(0x0, 0xb5, &(0x7f0000000d40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x6, 0x80, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x5, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x8, 0x22, 0x9}, [@selector_unit={0x5, 0x24, 0xb, 0xb}, @selector_unit={0xd, 0x24, 0xb, 0x7, 0x8, "b77963b0201990d4"}, @multiply_unit={0x7, 0x24, 0xc, 0x8, 0x3, 0x5, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x4, 0x0, 0x4, 0x40, 0x1ff, 0xe}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xc, 0x4, 0xc, 0x0, "8318f4a8315c27ba8b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x7f, 0x43, {0x8, 0x25, 0x1, 0x80, 0x3c, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xa, 0x0, 0x40, {0x8, 0x25, 0x1, 0x2, 0x0, 0x3, 0x1}}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x250, 0x6, 0x2c, 0xe, 0x20, 0x3}, 0x5, &(0x7f0000000e40)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x3401}}, {0x102, &(0x7f0000000ec0)=@string={0x102, 0x3, "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"}}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000002680)="e7", 0x1) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000d00)={0x3, 0x1, 0x3, 0x1, 0x8000, 0x7fff, 0x1, 0x2, 0x3, 0x2, 0xfffffffd, 0x2, 0x0, 0x993}) 6m9.897162859s ago: executing program 5 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x178, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x14c, 0x4, 0x0, 0x1, [{0x148, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x138, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x134, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x67, 0x1, "c6c7c3270ecbea0b6371e2b7e5fe56c4ccfeeac2c9d862c99faf60c90bd97eefedf9e321483c7973c91938d574570f6213800bf2d7132e048cf57d34b6ce3e43b1f07b9d2ff081e9a6e47489c76e6d9478814836e19d35b5ba89f4c1ea914b9acb0241"}, @NFTA_DATA_VALUE={0x88, 0x1, "ab49c1ceb500280e70829236875847660842524c8033812399c2fa1740c6044ee44834ad060f9829d3aa644f138c1c43b9a38145bfb23058450e1cf9cc59c6c936692d277ca0990b5f7f8b2e435803436d65e32d9b58a0ffc6199680bb38e338052a5e4f5e6752681c0a7796164996fe0901c1bc28b1562f6defa01127d4b07f87ffe0ba"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1a0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)}, {&(0x7f0000000100)="c47de5", 0x3}], 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00>k\b\x00'], 0x18, 0x40000}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="9430335d1f9598776a2b5008b6", 0xd}], 0x1, &(0x7f0000000380)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}}], 0x38, 0x14}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x48, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r4}, &(0x7f0000000540)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000880)=""/254, 0xfe}], 0x2}) io_uring_enter(r5, 0xf23, 0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 6m9.57879324s ago: executing program 33 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x178, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x14c, 0x4, 0x0, 0x1, [{0x148, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x138, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x134, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x67, 0x1, "c6c7c3270ecbea0b6371e2b7e5fe56c4ccfeeac2c9d862c99faf60c90bd97eefedf9e321483c7973c91938d574570f6213800bf2d7132e048cf57d34b6ce3e43b1f07b9d2ff081e9a6e47489c76e6d9478814836e19d35b5ba89f4c1ea914b9acb0241"}, @NFTA_DATA_VALUE={0x88, 0x1, "ab49c1ceb500280e70829236875847660842524c8033812399c2fa1740c6044ee44834ad060f9829d3aa644f138c1c43b9a38145bfb23058450e1cf9cc59c6c936692d277ca0990b5f7f8b2e435803436d65e32d9b58a0ffc6199680bb38e338052a5e4f5e6752681c0a7796164996fe0901c1bc28b1562f6defa01127d4b07f87ffe0ba"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1a0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)}, {&(0x7f0000000100)="c47de5", 0x3}], 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00>k\b\x00'], 0x18, 0x40000}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="9430335d1f9598776a2b5008b6", 0xd}], 0x1, &(0x7f0000000380)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}}], 0x38, 0x14}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x48, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r4}, &(0x7f0000000540)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000880)=""/254, 0xfe}], 0x2}) io_uring_enter(r5, 0xf23, 0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 3m38.951162243s ago: executing program 6 (id=1289): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x1, 0x0) r2 = socket(0x2a, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 3m34.407681057s ago: executing program 6 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@sco={0x1f, @none}, 0x80, 0x0, 0x50, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}]}, 0x1c}], 0x1}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd70027100c1582100000018"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 3m32.909012591s ago: executing program 6 (id=1302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80480c0}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 3m32.80818012s ago: executing program 6 (id=1303): socket(0x2d, 0x2, 0x0) mbind(&(0x7f0000b31000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x9, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) r5 = syz_io_uring_setup(0x18d7, &(0x7f00000003c0)={0x0, 0xb6d7, 0x2, 0xfffffffe, 0x25b}, &(0x7f0000ffe000), &(0x7f000001b000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe) io_uring_enter(r5, 0x6cfa, 0xcf1e, 0x40, &(0x7f0000000080)={[0x4]}, 0x8) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) add_key(&(0x7f000001b080)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f000001b040)="8e", 0x1, r6) 3m28.802472129s ago: executing program 6 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') pread64(r0, 0x0, 0x0, 0x4eb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3m28.72513465s ago: executing program 6 (id=1320): r0 = socket$inet(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x2095, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r2, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000080)=[0xcf, 0x5], 0x2) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200), 0x0) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x812, r5, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000000c0)={0x3, @sdr={0x20303159, 0x2}}) recvmmsg$unix(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x800) 3m11.485461096s ago: executing program 34 (id=1320): r0 = socket$inet(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x2095, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r2, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000080)=[0xcf, 0x5], 0x2) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200), 0x0) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x812, r5, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000000c0)={0x3, @sdr={0x20303159, 0x2}}) recvmmsg$unix(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x800) 10.781997425s ago: executing program 7 (id=1820): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 8.385351889s ago: executing program 7 (id=1823): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) io_setup(0x81, &(0x7f0000001100)=0x0) r4 = syz_io_uring_setup(0x2afc, &(0x7f00000000c0)={0x0, 0xe369, 0x13090, 0xffffffff, 0x800000}, &(0x7f0000000400), &(0x7f00000005c0)) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) 6.288175607s ago: executing program 7 (id=1827): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2194037642dfcca0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x800, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="2e000000010000", 0x7) 5.437017228s ago: executing program 4 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4000000}, 0x0) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x612740, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000002c0)={0xf27, 0x4000000}}) 4.805725933s ago: executing program 3 (id=1830): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) 3.907886172s ago: executing program 7 (id=1832): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) 3.847299542s ago: executing program 2 (id=1833): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) 3.633235651s ago: executing program 3 (id=1834): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x10, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x1e76, 0xf72c, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e", 0x1d) 3.542716701s ago: executing program 4 (id=1835): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 3.480637151s ago: executing program 7 (id=1836): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000300)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.410492242s ago: executing program 2 (id=1837): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 2.988688993s ago: executing program 1 (id=1839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) 2.84213205s ago: executing program 1 (id=1840): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.771655536s ago: executing program 4 (id=1841): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "00009f3339e40003"}, 0x10}}, 0x20000000) read(r0, &(0x7f0000002340)=""/232, 0xe8) 2.704702561s ago: executing program 2 (id=1842): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x3}}]}}) read$FUSE(r0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) futex(&(0x7f0000000080)=0x1, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000800, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2.546085132s ago: executing program 3 (id=1843): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c"], 0x58) r0 = openat$kvm(0x0, &(0x7f0000000240), 0x181002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000500)={0x2, 0x108000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000065b000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x1000, 0x1}) 2.381445606s ago: executing program 4 (id=1844): socket$packet(0x11, 0x3, 0x300) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2.024207993s ago: executing program 1 (id=1845): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70ad2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6fc84b579dfed949, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144", 0x1c}], 0x1}, 0x4) 2.010146936s ago: executing program 3 (id=1846): unshare(0x40400) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000001c0)) 1.809174787s ago: executing program 3 (id=1847): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) 1.504077512s ago: executing program 2 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000020000000ee1566000008000600020000001800018014000200"], 0x34}}, 0x44800) 1.212792207s ago: executing program 3 (id=1849): syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 1.178316221s ago: executing program 7 (id=1850): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) close(0x3) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) 1.14662971s ago: executing program 4 (id=1851): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000001580)=""/238, 0xee}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x3}}], 0x1, 0x10002, 0x0) 948.358565ms ago: executing program 2 (id=1852): mount$bpf(0x0, 0x0, 0x0, 0x1900040, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 879.870901ms ago: executing program 1 (id=1853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x8, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c854}, 0x20008001) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40048d5}, 0x4084) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000dc0)={0x1, 'ipvlan0\x00', {}, 0x8ed}) 703.962333ms ago: executing program 4 (id=1854): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000880)={0x20, 0x9, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 574.361544ms ago: executing program 1 (id=1855): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000000)) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 204.543145ms ago: executing program 2 (id=1856): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xcb08, 0x3, 0x20002f7}) 0s ago: executing program 1 (id=1857): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[], 0x108}}], 0x1, 0xc040) kernel console output (not intermixed with test programs): id maxpacket 0 [ 560.915676][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 560.959570][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.299154][T10921] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 561.561468][T10921] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 561.579095][T10921] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 561.587186][ T10] usb 3-1: string descriptor 0 read error: -71 [ 561.598792][ T10] keyspan 3-1:3.168: Keyspan 2 port adapter converter detected [ 561.606768][ T10] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 1 [ 561.624853][T10921] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 561.629636][ T10] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 84 [ 561.643673][ T10] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 2 [ 561.663561][T10921] usb 5-1: config 220 has no interface number 2 [ 561.669938][T10921] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 561.671811][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 561.711660][ T10] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 88 [ 561.804909][T10921] usb 5-1: config 220 interface 0 has no altsetting 0 [ 561.813923][T10921] usb 5-1: config 220 interface 76 has no altsetting 0 [ 561.815422][ T10] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 6 [ 561.820900][T10921] usb 5-1: config 220 interface 1 has no altsetting 0 [ 561.823482][T10921] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 561.856745][T10921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.883687][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 562.289138][T10921] usb 5-1: Product: syz [ 562.293430][T10921] usb 5-1: Manufacturer: syz [ 562.298472][T10921] usb 5-1: SerialNumber: syz [ 562.345043][ T10] usb 3-1: USB disconnect, device number 46 [ 562.409339][T12053] netlink: 'syz.3.1520': attribute type 27 has an invalid length. [ 562.451823][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 562.743225][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 562.744848][T10921] usb 5-1: selecting invalid altsetting 0 [ 562.787156][T10921] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 562.817455][ T10] keyspan 3-1:3.168: device disconnected [ 562.909452][T10921] uvcvideo 5-1:220.0: No valid video chain found. [ 562.921707][T10921] usb 5-1: selecting invalid altsetting 0 [ 562.928196][T10921] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 562.940039][T10921] usb 5-1: USB disconnect, device number 48 [ 563.870373][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 563.875345][T12068] tmpfs: Bad value for 'mpol' [ 564.016853][ T641] Bluetooth: hci5: Frame reassembly failed (-90) [ 564.956972][T12078] FAULT_INJECTION: forcing a failure. [ 564.956972][T12078] name fail_futex, interval 1, probability 0, space 0, times 1 [ 565.028485][T12078] CPU: 0 UID: 0 PID: 12078 Comm: syz.4.1526 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.028517][T12078] Tainted: [L]=SOFTLOCKUP [ 565.028523][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.028533][T12078] Call Trace: [ 565.028539][T12078] [ 565.028546][T12078] dump_stack_lvl+0x100/0x190 [ 565.028582][T12078] should_fail_ex.cold+0x5/0xa [ 565.028606][T12078] get_futex_key+0x106f/0x1620 [ 565.028637][T12078] ? __pfx_get_futex_key+0x10/0x10 [ 565.028665][T12078] ? futex_private_hash+0x198/0x470 [ 565.028690][T12078] ? futex_private_hash+0x324/0x470 [ 565.028719][T12078] futex_wait_multiple_setup+0x106/0x720 [ 565.028751][T12078] futex_wait_multiple+0xe5/0x460 [ 565.028775][T12078] ? __pfx_futex_wait_multiple+0x10/0x10 [ 565.028797][T12078] ? __kmalloc_noprof+0x320/0x850 [ 565.028826][T12078] __do_sys_futex_waitv+0x269/0x2c0 [ 565.028845][T12078] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 565.028878][T12078] do_syscall_64+0x106/0xf80 [ 565.028898][T12078] ? clear_bhb_loop+0x40/0x90 [ 565.028920][T12078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.028938][T12078] RIP: 0033:0x7fc9ad39c799 [ 565.028960][T12078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.028978][T12078] RSP: 002b:00007fc9ae1a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 565.028997][T12078] RAX: ffffffffffffffda RBX: 00007fc9ad615fa0 RCX: 00007fc9ad39c799 [ 565.029008][T12078] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 565.029018][T12078] RBP: 00007fc9ae1a4090 R08: 0000000000000000 R09: 0000000000000000 [ 565.029029][T12078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.029039][T12078] R13: 00007fc9ad616038 R14: 00007fc9ad615fa0 R15: 00007ffccbe697a8 [ 565.029064][T12078] [ 565.848949][ T30] audit: type=1400 audit(1772380280.267:602): avc: denied { connect } for pid=12085 comm="syz.4.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 566.168390][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 566.168725][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 568.571472][T12105] netlink: 'syz.2.1534': attribute type 27 has an invalid length. [ 570.427658][ T5913] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 570.733782][T12115] xt_TPROXY: Can be used only with -p tcp or -p udp [ 571.362815][ T5814] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 571.362902][ T5814] Bluetooth: hci0: Malformed LE Event: 0x02 [ 571.570932][ T1160] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 571.653219][T12131] FAULT_INJECTION: forcing a failure. [ 571.653219][T12131] name failslab, interval 1, probability 0, space 0, times 0 [ 571.699213][T12131] CPU: 0 UID: 0 PID: 12131 Comm: syz.2.1539 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.699245][T12131] Tainted: [L]=SOFTLOCKUP [ 571.699251][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 571.699261][T12131] Call Trace: [ 571.699267][T12131] [ 571.699275][T12131] dump_stack_lvl+0x100/0x190 [ 571.699309][T12131] should_fail_ex.cold+0x5/0xa [ 571.699332][T12131] should_failslab+0xc2/0x120 [ 571.699362][T12131] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 571.699386][T12131] ? skb_clone+0x190/0x400 [ 571.699410][T12131] skb_clone+0x190/0x400 [ 571.699429][T12131] netlink_deliver_tap+0xaed/0xcc0 [ 571.699455][T12131] netlink_unicast+0x650/0x870 [ 571.699479][T12131] ? __pfx_netlink_unicast+0x10/0x10 [ 571.699510][T12131] netlink_sendmsg+0x8b0/0xda0 [ 571.699536][T12131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.699555][T12131] ? __might_fault+0xc0/0x140 [ 571.699588][T12131] ____sys_sendmsg+0xa54/0xc30 [ 571.699614][T12131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.699649][T12131] ___sys_sendmsg+0x190/0x1e0 [ 571.699675][T12131] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.699731][T12131] __sys_sendmsg+0x170/0x220 [ 571.699751][T12131] ? __pfx___sys_sendmsg+0x10/0x10 [ 571.699785][T12131] do_syscall_64+0x106/0xf80 [ 571.699804][T12131] ? clear_bhb_loop+0x40/0x90 [ 571.699827][T12131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.699845][T12131] RIP: 0033:0x7ff2ee59c799 [ 571.699860][T12131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.699875][T12131] RSP: 002b:00007ff2ef438028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.699893][T12131] RAX: ffffffffffffffda RBX: 00007ff2ee815fa0 RCX: 00007ff2ee59c799 [ 571.699905][T12131] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 571.699915][T12131] RBP: 00007ff2ef438090 R08: 0000000000000000 R09: 0000000000000000 [ 571.699925][T12131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.699935][T12131] R13: 00007ff2ee816038 R14: 00007ff2ee815fa0 R15: 00007ffc54bd2a38 [ 571.699960][T12131] [ 571.950880][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.967673][ T1160] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 571.975835][ T1160] usb 5-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 571.986693][ T1160] usb 5-1: config 0 has no interface number 0 [ 571.995219][ T1160] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 572.004347][ T1160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.012594][ T1160] usb 5-1: Product: syz [ 572.016729][ T1160] usb 5-1: Manufacturer: syz [ 572.021323][ T1160] usb 5-1: SerialNumber: syz [ 572.027273][ T1160] usb 5-1: config 0 descriptor?? [ 572.038691][ T1160] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 572.046328][ T1160] uvcvideo 5-1:0.64: No valid video chain found. [ 572.224986][T12137] FAULT_INJECTION: forcing a failure. [ 572.224986][T12137] name failslab, interval 1, probability 0, space 0, times 0 [ 572.239134][T12137] CPU: 0 UID: 0 PID: 12137 Comm: syz.7.1537 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.239166][T12137] Tainted: [L]=SOFTLOCKUP [ 572.239172][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 572.239183][T12137] Call Trace: [ 572.239190][T12137] [ 572.239198][T12137] dump_stack_lvl+0x100/0x190 [ 572.239236][T12137] should_fail_ex.cold+0x5/0xa [ 572.239261][T12137] should_failslab+0xc2/0x120 [ 572.239291][T12137] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 572.239317][T12137] ? alloc_inode+0x68/0x250 [ 572.239341][T12137] ? simple_start_creating+0xb0/0x110 [ 572.239359][T12137] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 572.239391][T12137] alloc_inode+0x68/0x250 [ 572.239415][T12137] new_inode+0x22/0x1c0 [ 572.239441][T12137] __debugfs_create_file+0x105/0x4f0 [ 572.239464][T12137] debugfs_create_file_full+0x41/0x60 [ 572.239485][T12137] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 572.239511][T12137] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 572.239557][T12137] ? __kvmalloc_node_noprof+0x6af/0xa00 [ 572.239580][T12137] ? alloc_netdev_mqs+0xd7/0x14f0 [ 572.239601][T12137] ? lockdep_init_map_type+0x5c/0x250 [ 572.239622][T12137] ? __pfx_can_setup+0x10/0x10 [ 572.239649][T12137] alloc_netdev_mqs+0x314/0x14f0 [ 572.239674][T12137] alloc_candev_mqs+0x6b/0x4d0 [ 572.239693][T12137] ? __pfx_slcan_open+0x10/0x10 [ 572.239717][T12137] slcan_open+0x93/0x4c0 [ 572.239741][T12137] ? __pfx_slcan_open+0x10/0x10 [ 572.239763][T12137] tty_ldisc_open+0xa2/0x120 [ 572.239791][T12137] tty_set_ldisc+0x325/0x740 [ 572.239822][T12137] tty_ioctl+0x695/0x1690 [ 572.239842][T12137] ? __pfx_tty_ioctl+0x10/0x10 [ 572.239861][T12137] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 572.239888][T12137] ? irqentry_exit+0x180/0x670 [ 572.239911][T12137] ? hook_file_ioctl_common+0x146/0x410 [ 572.239943][T12137] ? selinux_file_ioctl+0x139/0x290 [ 572.239962][T12137] ? selinux_file_ioctl+0xb4/0x290 [ 572.239983][T12137] ? __pfx_tty_ioctl+0x10/0x10 [ 572.240003][T12137] __x64_sys_ioctl+0x18e/0x210 [ 572.240030][T12137] do_syscall_64+0x106/0xf80 [ 572.240048][T12137] ? clear_bhb_loop+0x40/0x90 [ 572.240070][T12137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.240088][T12137] RIP: 0033:0x7f1cbcd9c799 [ 572.240104][T12137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.240120][T12137] RSP: 002b:00007f1cbdceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.240137][T12137] RAX: ffffffffffffffda RBX: 00007f1cbd016090 RCX: 00007f1cbcd9c799 [ 572.240148][T12137] RDX: 00002000000000c0 RSI: 0000000000005423 RDI: 0000000000000007 [ 572.240158][T12137] RBP: 00007f1cbdceb090 R08: 0000000000000000 R09: 0000000000000000 [ 572.240168][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.240178][T12137] R13: 00007f1cbd016128 R14: 00007f1cbd016090 R15: 00007ffdc1b6f5c8 [ 572.240204][T12137] [ 572.240662][T12137] debugfs: out of free dentries, can not create file 'netdev@ffff88802bf38620' [ 572.744260][T12147] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1541'. [ 573.186537][T12137] can0: slcan on ptm0. [ 573.242763][T12142] tmpfs: Bad value for 'mpol' [ 573.284675][ T1332] Bluetooth: hci5: Frame reassembly failed (-90) [ 573.704155][T12156] overlayfs: failed to clone lowerpath [ 573.947897][T12137] can0 (unregistered): slcan off ptm0. [ 574.284081][ T5865] usb 5-1: USB disconnect, device number 49 [ 574.595960][T12168] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 574.603330][T12168] overlayfs: failed to set xattr on upper [ 574.610447][T12168] overlayfs: ...falling back to redirect_dir=nofollow. [ 574.617723][T12168] overlayfs: ...falling back to index=off. [ 574.623659][T12168] overlayfs: ...falling back to uuid=null. [ 574.671777][T12169] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 574.739106][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1546'. [ 574.839173][ T30] audit: type=1400 audit(1772380288.489:603): avc: denied { mounton } for pid=12164 comm="syz.7.1546" path="/file0" dev="ramfs" ino=39187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 575.249410][T12176] netlink: 'syz.2.1548': attribute type 27 has an invalid length. [ 575.505590][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 575.536994][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 575.677030][T12178] FAULT_INJECTION: forcing a failure. [ 575.677030][T12178] name failslab, interval 1, probability 0, space 0, times 0 [ 575.748844][T12178] CPU: 1 UID: 0 PID: 12178 Comm: syz.7.1549 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.748876][T12178] Tainted: [L]=SOFTLOCKUP [ 575.748882][T12178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.748893][T12178] Call Trace: [ 575.748906][T12178] [ 575.748913][T12178] dump_stack_lvl+0x100/0x190 [ 575.748947][T12178] should_fail_ex.cold+0x5/0xa [ 575.748971][T12178] should_failslab+0xc2/0x120 [ 575.748999][T12178] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 575.749023][T12178] ? security_file_alloc+0x34/0x2c0 [ 575.749044][T12178] ? trace_kmem_cache_alloc+0xf3/0x120 [ 575.749066][T12178] security_file_alloc+0x34/0x2c0 [ 575.749087][T12178] init_file+0x95/0x480 [ 575.749107][T12178] alloc_empty_file+0x73/0x1c0 [ 575.749128][T12178] alloc_file_pseudo+0x13a/0x230 [ 575.749149][T12178] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 575.749169][T12178] ? inode_init_always_gfp+0xd0e/0x1040 [ 575.749195][T12178] sock_alloc_file+0x50/0x210 [ 575.749216][T12178] do_accept+0x242/0x530 [ 575.749239][T12178] ? do_raw_spin_lock+0x128/0x260 [ 575.749259][T12178] ? __pfx_do_accept+0x10/0x10 [ 575.749301][T12178] __sys_accept4+0x108/0x200 [ 575.749327][T12178] ? __pfx___sys_accept4+0x10/0x10 [ 575.749354][T12178] ? __pfx_ksys_write+0x10/0x10 [ 575.749384][T12178] __x64_sys_accept4+0x96/0x100 [ 575.749409][T12178] ? lockdep_hardirqs_on+0x78/0x100 [ 575.749430][T12178] do_syscall_64+0x106/0xf80 [ 575.749448][T12178] ? clear_bhb_loop+0x40/0x90 [ 575.749470][T12178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.749487][T12178] RIP: 0033:0x7f1cbcd9c799 [ 575.749501][T12178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.749517][T12178] RSP: 002b:00007f1cbdd0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 575.749535][T12178] RAX: ffffffffffffffda RBX: 00007f1cbd015fa0 RCX: 00007f1cbcd9c799 [ 575.749545][T12178] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000003 [ 575.749555][T12178] RBP: 00007f1cbdd0c090 R08: 0000000000000000 R09: 0000000000000000 [ 575.749565][T12178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.749574][T12178] R13: 00007f1cbd016038 R14: 00007f1cbd015fa0 R15: 00007ffdc1b6f5c8 [ 575.749598][T12178] [ 576.654085][T12190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.068512][T12194] xt_TPROXY: Can be used only with -p tcp or -p udp [ 577.162511][ T5814] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 577.162720][ T5814] Bluetooth: hci4: Malformed LE Event: 0x02 [ 577.933327][T12202] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1554'. [ 577.934143][T12205] mkiss: ax0: crc mode is auto. [ 577.944216][T12202] Cannot find add_set index 0 as target [ 578.044541][T12207] fuse: Unknown parameter 'grou00000000000000000000' [ 578.738623][T12217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.859465][T12225] tmpfs: Bad value for 'mpol' [ 579.401805][T12230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.480841][ T30] audit: type=1400 audit(1772380293.072:604): avc: denied { setopt } for pid=12231 comm="syz.4.1564" lport=43576 faddr=::ffff:10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 579.536792][ T30] audit: type=1400 audit(1772380293.100:605): avc: denied { create } for pid=12231 comm="syz.4.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 580.028354][T12242] xt_TPROXY: Can be used only with -p tcp or -p udp [ 580.041046][ T51] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 580.041239][ T51] Bluetooth: hci3: Malformed LE Event: 0x02 [ 580.420683][T12244] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1567'. [ 580.767173][T12257] fuse: Unknown parameter 'grou00000000000000000000' [ 581.045006][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 581.051492][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 581.065345][ T5913] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 581.195482][T10921] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 581.385025][T10921] usb 4-1: Using ep0 maxpacket: 16 [ 581.492340][T10921] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 581.514955][T10921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.554509][ T5913] usb 8-1: device descriptor read/64, error -71 [ 581.611197][T10921] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 581.623899][T10921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.677011][T10921] usb 4-1: Product: syz [ 581.692222][T10921] usb 4-1: Manufacturer: syz [ 581.712777][T10921] usb 4-1: SerialNumber: syz [ 581.889976][T12270] vimc link validate: Scaler:src:16x2160 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 581.973500][ T5913] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 582.780717][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.817552][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.924093][ T5913] usb 8-1: device descriptor read/64, error -71 [ 582.967877][T12282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1577'. [ 583.052708][ T5913] usb usb8-port1: attempt power cycle [ 583.108219][T10921] usb 4-1: 0:2 : does not exist [ 583.120874][T10921] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 583.163944][T10921] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 583.522948][T10921] usb 4-1: USB disconnect, device number 40 [ 583.540185][T12285] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1578'. [ 583.549772][ T5913] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 583.694218][ T5913] usb 8-1: device descriptor read/8, error -71 [ 584.218902][T12302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 584.578113][ T5814] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 584.578152][ T5814] Bluetooth: hci3: Malformed LE Event: 0x02 [ 584.740464][T12304] dummy0: entered promiscuous mode [ 584.764965][T12306] fuse: Unknown parameter 'grou00000000000000000000' [ 585.593927][T12303] dummy0: left promiscuous mode [ 586.831210][ T30] audit: type=1400 audit(1772380299.947:606): avc: granted { setsecparam } for pid=12327 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 586.890546][ T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 587.138741][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1591'. [ 588.107326][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 588.251190][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.262509][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.278345][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 588.293160][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.313032][ T10] usb 8-1: config 0 descriptor?? [ 588.698664][ T30] audit: type=1326 audit(1772380301.687:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12338 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ee59c799 code=0x7ffc0000 [ 588.750581][ T5865] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 588.761089][ T30] audit: type=1326 audit(1772380301.687:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12338 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ee59c799 code=0x7ffc0000 [ 588.761184][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 589.015339][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 589.025118][ T30] audit: type=1326 audit(1772380301.697:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12338 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff2ee59c799 code=0x7ffc0000 [ 589.027694][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.072678][ T30] audit: type=1326 audit(1772380301.697:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12338 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ee59c799 code=0x7ffc0000 [ 589.136044][ T10] lg-g15 0003:046D:0A07.0011: hidraw0: USB HID v0.00 Device [HID 046d:0a07] on usb-dummy_hcd.7-1/input0 [ 589.153890][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.179045][ T5865] usb 4-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 589.187196][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.197213][ T5865] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 589.228741][ T30] audit: type=1326 audit(1772380301.697:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12338 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff2ee59c799 code=0x7ffc0000 [ 589.237618][ T5865] usb 4-1: config 0 has no interface number 0 [ 589.253160][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.333418][ T30] audit: type=1326 audit(578.690:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12338 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ee59c799 code=0x7ffc0000 [ 589.336519][ T5865] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.372758][ T5865] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.384486][ T5865] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 589.394865][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.454389][ T30] audit: type=1326 audit(578.690:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12338 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7ff2ee59c799 code=0x7ffc0000 [ 589.482443][ T5865] usb 4-1: config 0 descriptor?? [ 589.548559][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.557622][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.567138][T12323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 589.575438][T12323] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 589.586152][ T10] usb 8-1: USB disconnect, device number 19 [ 589.778461][T12355] xt_TPROXY: Can be used only with -p tcp or -p udp [ 589.797387][ T5814] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 589.797742][ T5814] Bluetooth: hci0: Malformed LE Event: 0x02 [ 590.548304][ T5865] usbhid 4-1:0.1: can't add hid device: -71 [ 590.569994][ T5865] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 590.617580][ T5865] usb 4-1: USB disconnect, device number 41 [ 590.914173][T12368] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1597'. [ 591.146502][T12371] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 591.158965][T12371] overlayfs: failed to set xattr on upper [ 591.164737][T12371] overlayfs: ...falling back to redirect_dir=nofollow. [ 591.171664][T12371] overlayfs: ...falling back to index=off. [ 591.177544][T12371] overlayfs: ...falling back to uuid=null. [ 591.331163][T12372] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 591.610672][ T5865] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 591.861454][ T5865] usb 8-1: Using ep0 maxpacket: 16 [ 591.892049][ T5865] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.955547][ T5865] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 591.979621][ T5865] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 592.009543][ T5865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.031736][ T5865] usb 8-1: config 0 descriptor?? [ 592.059202][T12377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1602'. [ 592.082298][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 592.148680][T12379] fuse: Unknown parameter 'group_i00000000000000000000' [ 592.192675][ T30] kauditd_printk_skb: 213 callbacks suppressed [ 592.192699][ T30] audit: type=1400 audit(581.946:823): avc: denied { create } for pid=12378 comm="syz.1.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.301500][ T30] audit: type=1400 audit(581.983:824): avc: denied { remount } for pid=12378 comm="syz.1.1603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 592.396498][ T30] audit: type=1400 audit(582.011:825): avc: denied { recv } for pid=5789 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 592.396515][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 592.454502][ T30] audit: type=1400 audit(582.011:826): avc: denied { ioctl } for pid=12373 comm="syz.2.1601" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 592.521262][T12382] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1604'. [ 592.636670][ T30] audit: type=1400 audit(582.020:827): avc: denied { recv } for pid=5789 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 592.752076][T12365] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.765089][ T30] audit: type=1400 audit(582.020:828): avc: denied { recv } for pid=5789 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 592.815177][ T30] audit: type=1400 audit(582.030:829): avc: denied { read } for pid=12375 comm="syz.3.1602" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 592.845909][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 592.909152][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 592.930352][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 592.938627][ T10] usb 3-1: config 0 has no interface number 0 [ 592.944853][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 592.950757][T12385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.961130][T12376] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.971372][T12376] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 592.979557][T12376] audit: backlog limit exceeded [ 592.985026][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 592.995089][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.003116][ T10] usb 3-1: Product: syz [ 593.007426][ T10] usb 3-1: Manufacturer: syz [ 593.012099][ T10] usb 3-1: SerialNumber: syz [ 593.048700][T12385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.049252][ T10] usb 3-1: config 0 descriptor?? [ 593.172523][T12365] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.323031][T12365] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.434858][T12365] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.708545][ T7850] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.743032][ T7850] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.774495][ T7850] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.816737][ T7850] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.981462][ T29] usb 8-1: USB disconnect, device number 20 [ 594.350102][T10921] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 594.482584][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 594.513794][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 594.526203][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 594.538377][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 594.549562][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 594.655361][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 594.662381][T10921] usb 4-1: Using ep0 maxpacket: 8 [ 594.913309][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 594.925972][T10921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 594.934482][ T10] usb 3-1: USB disconnect, device number 47 [ 595.000839][T10921] usb 4-1: config 4 interface 0 has no altsetting 0 [ 595.069745][T10921] usb 4-1: string descriptor 0 read error: -22 [ 595.110294][T10921] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 595.201591][T10921] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 595.264217][T10921] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 595.319007][T10921] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 595.354567][T10921] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 595.389293][T10921] usb 4-1: media controller created [ 595.420563][T10921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 596.032577][T12409] xt_TPROXY: Can be used only with -p tcp or -p udp [ 596.832777][T12410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.842494][T12410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.321030][T10921] zl10353_read_register: readreg error (reg=127, ret==0) [ 597.358313][ T5814] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 597.358369][ T5814] Bluetooth: hci4: Malformed LE Event: 0x02 [ 597.453156][T10921] usb 4-1: USB disconnect, device number 42 [ 597.559912][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 597.559928][ T30] audit: type=1400 audit(586.978:1053): avc: denied { read } for pid=12413 comm="syz.4.1611" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 597.643661][ T30] audit: type=1400 audit(587.006:1054): avc: denied { read open } for pid=12413 comm="syz.4.1611" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 598.131170][ T30] audit: type=1400 audit(587.044:1055): avc: denied { prog_load } for pid=12413 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 598.152518][T12417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=12417 comm=syz.7.1609 [ 598.174983][T12405] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1609'. [ 598.248590][ T30] audit: type=1400 audit(587.044:1056): avc: denied { bpf } for pid=12413 comm="syz.4.1611" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 598.306219][ T30] audit: type=1400 audit(587.081:1057): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 598.500836][ T30] audit: type=1400 audit(587.090:1058): avc: denied { read write } for pid=12413 comm="syz.4.1611" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 598.526760][ T30] audit: type=1400 audit(587.090:1059): avc: denied { read write open } for pid=12413 comm="syz.4.1611" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 598.553493][ T30] audit: type=1400 audit(587.090:1060): avc: denied { ioctl } for pid=12413 comm="syz.4.1611" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 598.671327][ T30] audit: type=1400 audit(587.090:1061): avc: denied { create } for pid=12413 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 598.777109][ T30] audit: type=1400 audit(587.109:1062): avc: denied { execmem } for pid=12413 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 599.217168][T12435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1616'. [ 600.614316][T12446] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 600.897357][T12446] netlink: 'syz.1.1618': attribute type 4 has an invalid length. [ 601.061771][T12451] netlink: 'syz.1.1618': attribute type 4 has an invalid length. [ 601.298930][T12456] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 601.311283][T12456] overlayfs: failed to set xattr on upper [ 601.317335][T12456] overlayfs: ...falling back to redirect_dir=nofollow. [ 601.324260][T12456] overlayfs: ...falling back to index=off. [ 601.330092][T12456] overlayfs: ...falling back to uuid=null. [ 601.474823][T12457] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 602.092327][ T29] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 602.306847][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 602.490715][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 602.513466][ T29] usb 3-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 602.681613][T12471] ubi0: attaching mtd0 [ 602.701881][T12471] ubi0: scanning is finished [ 602.706549][T12471] ubi0: empty MTD device detected [ 603.519777][ T30] kauditd_printk_skb: 334 callbacks suppressed [ 603.519797][ T30] audit: type=1400 audit(592.544:1397): avc: denied { create } for pid=12464 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 603.567885][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 603.828124][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.848572][ T30] audit: type=1400 audit(592.544:1398): avc: denied { ioctl } for pid=12464 comm="syz.1.1622" path="socket:[39864]" dev="sockfs" ino=39864 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 603.877953][ T30] audit: type=1400 audit(592.544:1399): avc: denied { module_request } for pid=12464 comm="syz.1.1622" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 603.960075][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 603.985020][T12471] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 604.112994][ T30] audit: type=1400 audit(592.955:1400): avc: denied { ioctl } for pid=12458 comm="syz.2.1621" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 604.137622][ T29] usb 3-1: New USB device strings: Mfr=254, Product=0, SerialNumber=3 [ 604.171280][ T29] usb 3-1: Manufacturer: syz [ 604.176712][T12478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=12478 comm=syz.7.1624 [ 604.189753][ T29] usb 3-1: SerialNumber: syz [ 604.198245][T12478] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1624'. [ 604.299465][ T30] audit: type=1400 audit(592.955:1401): avc: denied { ioctl } for pid=12458 comm="syz.2.1621" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 604.791685][ T30] audit: type=1400 audit(592.955:1402): avc: denied { ioctl } for pid=12458 comm="syz.2.1621" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 605.351247][ T30] audit: type=1400 audit(592.955:1403): avc: denied { ioctl } for pid=12458 comm="syz.2.1621" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 605.529923][T12483] netlink: 'syz.3.1626': attribute type 27 has an invalid length. [ 605.779716][ T30] audit: type=1400 audit(592.955:1404): avc: denied { ioctl } for pid=12458 comm="syz.2.1621" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 605.901312][ T30] audit: type=1400 audit(592.955:1405): avc: denied { ioctl } for pid=12458 comm="syz.2.1621" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 606.038877][ T30] audit: type=1400 audit(592.955:1406): avc: denied { sys_module } for pid=12464 comm="syz.1.1622" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 606.474533][T12488] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1628'. [ 606.955152][T12493] netlink: 'syz.1.1629': attribute type 2 has an invalid length. [ 606.964584][T12493] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 606.974461][T12493] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 607.769339][ T29] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 607.811124][ T29] cdc_ncm 3-1:1.0: bind() failure [ 607.866631][ T29] usb 3-1: USB disconnect, device number 48 [ 609.027366][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 609.027385][ T30] audit: type=1400 audit(597.398:1564): avc: denied { recv } for pid=12499 comm="syz.2.1631" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 609.333295][ T30] audit: type=1400 audit(597.857:1565): avc: denied { recv } for pid=5801 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 609.396574][ T30] audit: type=1400 audit(598.025:1566): avc: denied { create } for pid=12510 comm="syz.7.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 609.498449][ T30] audit: type=1400 audit(598.035:1567): avc: denied { setopt } for pid=12510 comm="syz.7.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 609.613153][ T30] audit: type=1400 audit(598.035:1568): avc: denied { create } for pid=12510 comm="syz.7.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 609.792846][ T30] audit: type=1400 audit(598.035:1569): avc: denied { read } for pid=12510 comm="syz.7.1634" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 609.891368][ T30] audit: type=1400 audit(598.035:1570): avc: denied { read open } for pid=12510 comm="syz.7.1634" path="/dev/nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 609.980672][ T30] audit: type=1400 audit(598.035:1571): avc: denied { create } for pid=12510 comm="syz.7.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 610.361460][T12517] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 610.373421][T12517] overlayfs: failed to set xattr on upper [ 610.379391][T12517] overlayfs: ...falling back to redirect_dir=nofollow. [ 610.386270][T12517] overlayfs: ...falling back to index=off. [ 610.392179][T12517] overlayfs: ...falling back to uuid=null. [ 610.537564][T12518] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 610.641222][ T30] audit: type=1400 audit(598.044:1572): avc: denied { prog_load } for pid=12510 comm="syz.7.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 610.666400][ T30] audit: type=1400 audit(598.063:1573): avc: denied { bpf } for pid=12510 comm="syz.7.1634" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 610.693741][T12515] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1636'. [ 612.607001][T12540] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1642'. [ 613.305238][ T29] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 613.628608][T12549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=12549 comm=syz.3.1644 [ 613.651959][T12549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1644'. [ 613.821599][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 613.870494][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 613.925518][ T29] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 613.968273][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 614.004138][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 614.060228][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.075325][ T29] usb 5-1: New USB device strings: Mfr=254, Product=0, SerialNumber=3 [ 614.119913][ T29] usb 5-1: Manufacturer: syz [ 614.124555][ T29] usb 5-1: SerialNumber: syz [ 614.425955][ T30] kauditd_printk_skb: 266 callbacks suppressed [ 614.425974][ T30] audit: type=1400 audit(602.749:1840): avc: denied { read } for pid=12537 comm="syz.4.1641" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 614.515432][ T30] audit: type=1400 audit(602.777:1841): avc: denied { read open } for pid=12537 comm="syz.4.1641" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 614.584156][T12555] tmpfs: Unknown parameter 'usrqd¨ta_block_hardlimit' [ 614.647095][ T30] audit: type=1400 audit(602.861:1842): avc: denied { map_create } for pid=12537 comm="syz.4.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 614.734611][ T30] audit: type=1400 audit(602.899:1843): avc: denied { mounton } for pid=12554 comm="syz.2.1646" path="/348" dev="tmpfs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 614.784176][ T30] audit: type=1400 audit(602.973:1844): avc: denied { prog_load } for pid=12557 comm="syz.7.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 614.822244][ T30] audit: type=1400 audit(602.973:1845): avc: denied { bpf } for pid=12557 comm="syz.7.1647" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.843157][ T30] audit: type=1400 audit(602.973:1846): avc: denied { prog_load } for pid=12557 comm="syz.7.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 614.862500][ T30] audit: type=1400 audit(602.992:1847): avc: denied { perfmon } for pid=12557 comm="syz.7.1647" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.964862][ T30] audit: type=1400 audit(602.992:1848): avc: denied { perfmon } for pid=12557 comm="syz.7.1647" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 615.043543][ T30] audit: type=1400 audit(603.001:1849): avc: denied { perfmon } for pid=12557 comm="syz.7.1647" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 615.263215][ T5865] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 615.423508][ T5865] usb 8-1: Using ep0 maxpacket: 32 [ 615.475687][ T5865] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 615.490141][ T5865] usb 8-1: config 0 has no interface number 0 [ 615.580015][ T5865] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 615.599817][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.631410][ T5865] usb 8-1: Product: syz [ 615.652240][ T5865] usb 8-1: Manufacturer: syz [ 615.668633][ T5865] usb 8-1: SerialNumber: syz [ 615.713785][ T5865] usb 8-1: config 0 descriptor?? [ 615.771420][ T5865] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 616.014666][ T5865] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 616.025445][ T29] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 616.032237][ T29] cdc_ncm 5-1:1.0: bind() failure [ 616.121187][ T5865] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 616.148727][ T29] usb 5-1: USB disconnect, device number 50 [ 616.188571][T12567] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 616.237715][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 616.456446][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 616.457414][ T5913] usb 8-1: USB disconnect, device number 21 [ 616.489597][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 616.644456][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 616.795568][ T5913] quatech2 8-1:0.51: device disconnected [ 619.235331][T12579] orangefs_mount: mount request failed with -4 [ 619.771094][T12589] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1655'. [ 619.852352][ T30] kauditd_printk_skb: 212 callbacks suppressed [ 619.852372][ T30] audit: type=1400 audit(607.828:2062): avc: denied { read write } for pid=12591 comm="syz.3.1656" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 620.193502][ T30] audit: type=1400 audit(607.828:2063): avc: denied { create } for pid=12588 comm="syz.4.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 620.282356][ T30] audit: type=1400 audit(607.828:2064): avc: denied { create } for pid=12588 comm="syz.4.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 620.476611][ T30] audit: type=1400 audit(607.856:2065): avc: denied { read } for pid=12588 comm="syz.4.1655" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 620.608062][ T30] audit: type=1400 audit(607.856:2066): avc: denied { read open } for pid=12588 comm="syz.4.1655" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 620.719722][ T30] audit: type=1400 audit(607.912:2067): avc: denied { allowed } for pid=12588 comm="syz.4.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 620.899265][ T30] audit: type=1400 audit(607.912:2068): avc: denied { create } for pid=12588 comm="syz.4.1655" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 621.275831][ T30] audit: type=1400 audit(607.922:2069): avc: denied { map } for pid=12588 comm="syz.4.1655" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 621.442392][ T30] audit: type=1400 audit(607.931:2070): avc: denied { read write } for pid=12588 comm="syz.4.1655" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 621.660643][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 621.934705][T12584] netlink: 'syz.2.1653': attribute type 4 has an invalid length. [ 622.030971][T12586] netlink: 'syz.2.1653': attribute type 4 has an invalid length. [ 622.136660][T12614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=12614 comm=syz.7.1658 [ 622.164661][T12614] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1658'. [ 622.664336][ T29] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 622.907028][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 622.978925][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 623.013244][ T29] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 623.054142][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 623.074038][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.228106][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.262065][ T29] usb 5-1: New USB device strings: Mfr=254, Product=0, SerialNumber=3 [ 623.270289][ T29] usb 5-1: Manufacturer: syz [ 623.312359][ T29] usb 5-1: SerialNumber: syz [ 624.975610][ T29] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 625.034377][ T29] cdc_ncm 5-1:1.0: bind() failure [ 625.075175][ T29] usb 5-1: USB disconnect, device number 51 [ 625.208625][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 625.208644][ T30] audit: type=1400 audit(612.833:2321): avc: denied { read write open } for pid=5806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 625.304091][ T30] audit: type=1400 audit(612.833:2322): avc: denied { bpf } for pid=12624 comm="syz.2.1663" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 625.362255][ T30] audit: type=1400 audit(612.870:2323): avc: denied { recv } for pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 625.461627][ T30] audit: type=1400 audit(612.870:2324): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 625.609122][ T30] audit: type=1400 audit(612.917:2325): avc: denied { map_create } for pid=12624 comm="syz.2.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 625.687878][ T29] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 625.707936][ T30] audit: type=1400 audit(612.963:2326): avc: denied { create } for pid=12641 comm="syz.1.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 625.815638][ T30] audit: type=1400 audit(613.001:2327): avc: denied { read write } for pid=12624 comm="syz.2.1663" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 625.960329][ T30] audit: type=1400 audit(613.010:2328): avc: denied { read write open } for pid=12624 comm="syz.2.1663" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 626.095757][ T30] audit: type=1400 audit(613.010:2329): avc: denied { ioctl } for pid=12624 comm="syz.2.1663" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 626.678712][ T30] audit: type=1400 audit(613.010:2330): avc: denied { ioctl } for pid=12624 comm="syz.2.1663" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 626.837527][T12655] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1670'. [ 626.964268][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.001507][ T29] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 627.052632][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 627.895590][T12665] Illegal XDP return value 4294967294 on prog (id 124) dev syz_tun, expect packet loss! [ 628.679955][T10921] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 628.760745][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 628.969679][T10921] usb 5-1: device descriptor read/64, error -71 [ 629.225119][T10921] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 629.300313][ T29] usb 3-1: string descriptor 0 read error: -71 [ 629.306582][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 629.367717][ T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 629.385510][T10921] usb 5-1: device descriptor read/64, error -71 [ 629.414281][ T29] usb 3-1: config 0 descriptor?? [ 629.428265][ T29] usb 3-1: can't set config #0, error -71 [ 629.448930][ T29] usb 3-1: USB disconnect, device number 49 [ 629.503280][T10921] usb usb5-port1: attempt power cycle [ 629.877318][T10921] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 629.942210][T10921] usb 5-1: device descriptor read/8, error -71 [ 630.208674][T10921] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 630.242031][T10921] usb 5-1: device descriptor read/8, error -71 [ 630.370436][T10921] usb usb5-port1: unable to enumerate USB device [ 630.625737][ T30] kauditd_printk_skb: 342 callbacks suppressed [ 630.625780][ T30] audit: type=1400 audit(617.818:2673): avc: denied { create } for pid=12681 comm="syz.2.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 630.626589][T12689] netlink: 'syz.2.1677': attribute type 27 has an invalid length. [ 630.670841][ T30] audit: type=1400 audit(617.837:2674): avc: denied { setopt } for pid=12681 comm="syz.2.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 630.719944][ T30] audit: type=1400 audit(617.930:2675): avc: denied { write } for pid=12660 comm="syz.7.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 630.841861][ T30] audit: type=1400 audit(617.940:2676): avc: denied { write } for pid=12660 comm="syz.7.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 630.925029][ T30] audit: type=1400 audit(617.940:2677): avc: denied { write } for pid=12660 comm="syz.7.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 630.978387][ T30] audit: type=1400 audit(617.940:2678): avc: denied { write } for pid=12660 comm="syz.7.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 631.021223][ T30] audit: type=1400 audit(618.015:2679): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 631.147325][ T30] audit: type=1400 audit(618.024:2680): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 631.286044][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.292639][ C1] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 631.820807][T12701] input: syz0 as /devices/virtual/input/input24 [ 631.990962][T12708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=12708 comm=syz.3.1682 [ 632.198190][T12701] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1683'. [ 632.268555][T12709] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1683'. [ 632.565729][T12711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1685'. [ 632.884375][T12716] FAULT_INJECTION: forcing a failure. [ 632.884375][T12716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.036803][T12716] CPU: 1 UID: 0 PID: 12716 Comm: syz.2.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.036833][T12716] Tainted: [L]=SOFTLOCKUP [ 633.036839][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.036848][T12716] Call Trace: [ 633.036854][T12716] [ 633.036862][T12716] dump_stack_lvl+0x100/0x190 [ 633.036895][T12716] should_fail_ex.cold+0x5/0xa [ 633.036916][T12716] _copy_from_user+0x2e/0xd0 [ 633.036943][T12716] memdup_user+0x6b/0xe0 [ 633.036969][T12716] strndup_user+0x78/0xe0 [ 633.036992][T12716] __do_sys_fsconfig+0x276/0xcb0 [ 633.037015][T12716] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 633.037036][T12716] ? fput+0x79/0x100 [ 633.037061][T12716] do_syscall_64+0x106/0xf80 [ 633.037078][T12716] ? clear_bhb_loop+0x40/0x90 [ 633.037098][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.037114][T12716] RIP: 0033:0x7ff2ee59c799 [ 633.037127][T12716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.037142][T12716] RSP: 002b:00007ff2ef438028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 633.037159][T12716] RAX: ffffffffffffffda RBX: 00007ff2ee815fa0 RCX: 00007ff2ee59c799 [ 633.037169][T12716] RDX: 0000200000000300 RSI: 0000000000000002 RDI: 0000000000000003 [ 633.037179][T12716] RBP: 00007ff2ef438090 R08: 0000000000000001 R09: 0000000000000000 [ 633.037188][T12716] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 633.037198][T12716] R13: 00007ff2ee816038 R14: 00007ff2ee815fa0 R15: 00007ffc54bd2a38 [ 633.037218][T12716] [ 635.778501][ T5913] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 635.991060][ T30] kauditd_printk_skb: 2023 callbacks suppressed [ 635.991075][ T30] audit: type=1400 audit(622.916:3950): avc: denied { recv } for pid=5789 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 636.129290][ T30] audit: type=1400 audit(622.954:3951): avc: denied { ioctl } for pid=12734 comm="syz.3.1691" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 636.129440][ T5913] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 636.220123][ T30] audit: type=1400 audit(622.963:3952): avc: denied { recv } for pid=5789 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 636.254680][T12742] FAULT_INJECTION: forcing a failure. [ 636.254680][T12742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.291899][T12742] CPU: 1 UID: 0 PID: 12742 Comm: syz.2.1693 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.291931][T12742] Tainted: [L]=SOFTLOCKUP [ 636.291937][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.291947][T12742] Call Trace: [ 636.291953][T12742] [ 636.291961][T12742] dump_stack_lvl+0x100/0x190 [ 636.291996][T12742] should_fail_ex.cold+0x5/0xa [ 636.292019][T12742] _copy_from_iter+0x1f4/0x1690 [ 636.292049][T12742] ? alloc_pages_mpol+0x25a/0x550 [ 636.292078][T12742] ? __pfx__copy_from_iter+0x10/0x10 [ 636.292102][T12742] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 636.292139][T12742] copy_page_from_iter+0xde/0x180 [ 636.292169][T12742] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 636.292201][T12742] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 636.292222][T12742] ? unwind_get_return_address+0x59/0xa0 [ 636.292244][T12742] ? arch_stack_walk+0xa6/0xf0 [ 636.292278][T12742] ? _kstrtoull+0x13c/0x1f0 [ 636.292295][T12742] ? __pfx__kstrtoull+0x10/0x10 [ 636.292313][T12742] tun_get_user+0x16d0/0x3e10 [ 636.292339][T12742] ? __pfx_tun_get_user+0x10/0x10 [ 636.292358][T12742] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 636.292381][T12742] ? find_held_lock+0x2b/0x80 [ 636.292395][T12742] ? tun_get+0x191/0x370 [ 636.292406][T12742] ? tun_get+0x191/0x370 [ 636.292422][T12742] tun_chr_write_iter+0xdc/0x200 [ 636.292438][T12742] vfs_write+0x6ac/0x1070 [ 636.292456][T12742] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 636.292472][T12742] ? __pfx_vfs_write+0x10/0x10 [ 636.292487][T12742] ? find_held_lock+0x2b/0x80 [ 636.292510][T12742] ksys_write+0x12a/0x250 [ 636.292527][T12742] ? __pfx_ksys_write+0x10/0x10 [ 636.292548][T12742] do_syscall_64+0x106/0xf80 [ 636.292560][T12742] ? clear_bhb_loop+0x40/0x90 [ 636.292575][T12742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.292586][T12742] RIP: 0033:0x7ff2ee55cfce [ 636.292598][T12742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 636.292610][T12742] RSP: 002b:00007ff2ef437fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 636.292622][T12742] RAX: ffffffffffffffda RBX: 00007ff2ef4386c0 RCX: 00007ff2ee55cfce [ 636.292629][T12742] RDX: 0000000000000086 RSI: 0000200000000500 RDI: 00000000000000c8 [ 636.292636][T12742] RBP: 00007ff2ef438090 R08: 0000000000000000 R09: 0000000000000000 [ 636.292643][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.292649][T12742] R13: 00007ff2ee816038 R14: 00007ff2ee815fa0 R15: 00007ffc54bd2a38 [ 636.292663][T12742] [ 636.293720][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.298938][ T30] audit: type=1400 audit(622.963:3953): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 636.334398][ T5913] usb 4-1: Product: syz [ 636.383204][ T30] audit: type=1400 audit(622.972:3954): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 636.795058][T12744] FAULT_INJECTION: forcing a failure. [ 636.795058][T12744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.847138][T12744] CPU: 0 UID: 0 PID: 12744 Comm: syz.4.1694 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.847174][T12744] Tainted: [L]=SOFTLOCKUP [ 636.847180][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.847191][T12744] Call Trace: [ 636.847198][T12744] [ 636.847206][T12744] dump_stack_lvl+0x100/0x190 [ 636.847241][T12744] should_fail_ex.cold+0x5/0xa [ 636.847266][T12744] _copy_from_iter+0x1f4/0x1690 [ 636.847298][T12744] ? alloc_pages_mpol+0x25a/0x550 [ 636.847329][T12744] ? __pfx__copy_from_iter+0x10/0x10 [ 636.847379][T12744] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 636.847413][T12744] copy_page_from_iter+0xde/0x180 [ 636.847439][T12744] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 636.847468][T12744] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 636.847488][T12744] ? unwind_get_return_address+0x59/0xa0 [ 636.847510][T12744] ? arch_stack_walk+0xa6/0xf0 [ 636.847544][T12744] ? _kstrtoull+0x13c/0x1f0 [ 636.847562][T12744] ? __pfx__kstrtoull+0x10/0x10 [ 636.847583][T12744] tun_get_user+0x16d0/0x3e10 [ 636.847621][T12744] ? __pfx_tun_get_user+0x10/0x10 [ 636.847645][T12744] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 636.847683][T12744] ? find_held_lock+0x2b/0x80 [ 636.847706][T12744] ? tun_get+0x191/0x370 [ 636.847725][T12744] ? tun_get+0x191/0x370 [ 636.847751][T12744] tun_chr_write_iter+0xdc/0x200 [ 636.847774][T12744] vfs_write+0x6ac/0x1070 [ 636.847802][T12744] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 636.847826][T12744] ? __pfx_vfs_write+0x10/0x10 [ 636.847849][T12744] ? find_held_lock+0x2b/0x80 [ 636.847887][T12744] ksys_write+0x12a/0x250 [ 636.847909][T12744] ? __pfx_ksys_write+0x10/0x10 [ 636.847940][T12744] do_syscall_64+0x106/0xf80 [ 636.847958][T12744] ? clear_bhb_loop+0x40/0x90 [ 636.847979][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.847996][T12744] RIP: 0033:0x7fc9ad35cfce [ 636.848011][T12744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 636.848027][T12744] RSP: 002b:00007fc9ae1a3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 636.848045][T12744] RAX: ffffffffffffffda RBX: 00007fc9ae1a46c0 RCX: 00007fc9ad35cfce [ 636.848056][T12744] RDX: 00000000000000be RSI: 0000200000000300 RDI: 00000000000000c8 [ 636.848067][T12744] RBP: 00007fc9ae1a4090 R08: 0000000000000000 R09: 0000000000000000 [ 636.848078][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.848088][T12744] R13: 00007fc9ad616038 R14: 00007fc9ad615fa0 R15: 00007ffccbe697a8 [ 636.848114][T12744] [ 636.868934][ T30] audit: type=1400 audit(622.972:3955): avc: denied { read write open } for pid=5804 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 636.883938][ T5913] usb 4-1: Manufacturer: syz [ 636.933047][ T30] audit: type=1400 audit(622.972:3956): avc: denied { ioctl } for pid=5804 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 636.978335][ T5913] usb 4-1: SerialNumber: syz [ 637.005167][ T30] audit: type=1400 audit(623.000:3957): avc: denied { ioctl } for pid=12734 comm="syz.3.1691" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 637.256230][ T30] audit: type=1400 audit(623.000:3958): avc: denied { ioctl } for pid=12734 comm="syz.3.1691" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 637.283879][ T30] audit: type=1400 audit(623.000:3959): avc: denied { ioctl } for pid=12734 comm="syz.3.1691" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 637.412259][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.445813][ T5913] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 637.499683][T10921] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 637.574597][ T7729] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 637.649618][T10921] usb 3-1: device descriptor read/64, error -71 [ 637.683929][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 637.734894][ T7729] usb 8-1: Using ep0 maxpacket: 16 [ 637.760912][ T7729] usb 8-1: unable to get BOS descriptor or descriptor too short [ 637.802464][ T7729] usb 8-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 637.815330][ T7729] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 637.837232][ T7729] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 637.865214][ T7729] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.876940][ T7729] usb 8-1: New USB device strings: Mfr=254, Product=0, SerialNumber=3 [ 637.889924][ T7729] usb 8-1: Manufacturer: syz [ 637.894721][ T7729] usb 8-1: SerialNumber: syz [ 638.061334][T10921] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 638.126629][ T5913] usb 4-1: USB disconnect, device number 43 [ 638.240969][T10921] usb 3-1: device descriptor read/64, error -71 [ 638.383477][T10921] usb usb3-port1: attempt power cycle [ 638.430273][T12755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1698'. [ 638.761239][T10921] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 638.807791][T10921] usb 3-1: device descriptor read/8, error -71 [ 638.859499][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 638.917134][ T10] ath9k_htc: Failed to initialize the device [ 638.986309][ T5913] usb 4-1: ath9k_htc: USB layer deinitialized [ 639.124691][T10921] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 639.160905][T10921] usb 3-1: device descriptor read/8, error -71 [ 639.299548][T10921] usb usb3-port1: unable to enumerate USB device [ 639.326545][ T5913] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 639.596738][ T5913] usb 4-1: device descriptor read/all, error -71 [ 639.627184][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 639.648409][ T7729] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 639.843663][T12764] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 639.852747][T12764] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 639.864517][T12764] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 640.666864][ T7729] cdc_ncm 8-1:1.0: bind() failure [ 640.677248][ T7729] usb 8-1: USB disconnect, device number 22 [ 641.374661][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 641.374685][ T30] audit: type=1400 audit(627.958:4215): avc: denied { read } for pid=12766 comm="syz.4.1704" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 641.448006][ T30] audit: type=1400 audit(627.986:4216): avc: denied { mounton } for pid=12768 comm="syz.1.1702" path="/336/file0" dev="tmpfs" ino=1813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 641.560582][ T30] audit: type=1400 audit(627.986:4217): avc: denied { read open } for pid=12766 comm="syz.4.1704" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 641.585253][ T30] audit: type=1400 audit(627.995:4218): avc: denied { prog_load } for pid=12766 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 641.764426][T12773] mkiss: ax0: crc mode is auto. [ 642.002444][ T30] audit: type=1400 audit(627.995:4219): avc: denied { bpf } for pid=12766 comm="syz.4.1704" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 642.022569][ T30] audit: type=1400 audit(627.995:4220): avc: denied { read write } for pid=12766 comm="syz.4.1704" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 642.064498][ T5809] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 642.072244][ T30] audit: type=1400 audit(628.005:4221): avc: denied { read write open } for pid=12766 comm="syz.4.1704" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 642.160780][ T30] audit: type=1400 audit(628.005:4222): avc: denied { ioctl } for pid=12766 comm="syz.4.1704" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 642.225232][ T30] audit: type=1400 audit(628.005:4223): avc: denied { ioctl } for pid=12766 comm="syz.4.1704" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 642.277624][ T30] audit: type=1400 audit(628.005:4224): avc: denied { execmem } for pid=12767 comm="syz.2.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 642.297197][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 642.321212][ T5809] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 642.330317][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.445388][ T5809] usb 5-1: config 0 descriptor?? [ 642.462965][ T5809] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 643.286267][T12791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.779423][T12796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1710'. [ 644.802970][T12810] FAULT_INJECTION: forcing a failure. [ 644.802970][T12810] name failslab, interval 1, probability 0, space 0, times 0 [ 644.817382][T12810] CPU: 0 UID: 0 PID: 12810 Comm: syz.3.1712 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.817403][T12810] Tainted: [L]=SOFTLOCKUP [ 644.817407][T12810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.817414][T12810] Call Trace: [ 644.817420][T12810] [ 644.817425][T12810] dump_stack_lvl+0x100/0x190 [ 644.817449][T12810] should_fail_ex.cold+0x5/0xa [ 644.817464][T12810] should_failslab+0xc2/0x120 [ 644.817483][T12810] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 644.817498][T12810] ? fuse_request_alloc+0x22/0x200 [ 644.817512][T12810] ? schedule+0x2bf/0x390 [ 644.817526][T12810] fuse_request_alloc+0x22/0x200 [ 644.817539][T12810] fuse_get_req+0x74a/0xfe0 [ 644.817556][T12810] ? __pfx_fuse_get_req+0x10/0x10 [ 644.817569][T12810] ? rcu_is_watching+0x12/0xc0 [ 644.817583][T12810] ? __pfx_autoremove_wake_function+0x10/0x10 [ 644.817601][T12810] ? __kmalloc_noprof+0x320/0x850 [ 644.817619][T12810] fuse_dev_do_write+0x30bb/0x3c80 [ 644.817641][T12810] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 644.817662][T12810] ? __lock_acquire+0x4a5/0x2630 [ 644.817687][T12810] ? __asan_memset+0x23/0x50 [ 644.817704][T12810] fuse_dev_write+0x169/0x200 [ 644.817719][T12810] ? __pfx_fuse_dev_write+0x10/0x10 [ 644.817739][T12810] ? bpf_lsm_file_permission+0x9/0x10 [ 644.817755][T12810] ? security_file_permission+0x76/0x210 [ 644.817772][T12810] ? rw_verify_area+0xce/0x6d0 [ 644.817789][T12810] vfs_write+0x6ac/0x1070 [ 644.817807][T12810] ? __pfx_fuse_dev_write+0x10/0x10 [ 644.817824][T12810] ? __pfx_vfs_write+0x10/0x10 [ 644.817840][T12810] ? find_held_lock+0x2b/0x80 [ 644.817863][T12810] ksys_write+0x12a/0x250 [ 644.817881][T12810] ? __pfx_ksys_write+0x10/0x10 [ 644.817902][T12810] do_syscall_64+0x106/0xf80 [ 644.817915][T12810] ? clear_bhb_loop+0x40/0x90 [ 644.817930][T12810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.817942][T12810] RIP: 0033:0x7f1e83b9c799 [ 644.817954][T12810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.817966][T12810] RSP: 002b:00007f1e84a45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 644.817978][T12810] RAX: ffffffffffffffda RBX: 00007f1e83e15fa0 RCX: 00007f1e83b9c799 [ 644.817986][T12810] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000003 [ 644.817992][T12810] RBP: 00007f1e84a45090 R08: 0000000000000000 R09: 0000000000000000 [ 644.817999][T12810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.818005][T12810] R13: 00007f1e83e16038 R14: 00007f1e83e15fa0 R15: 00007ffca3af9468 [ 644.818019][T12810] [ 645.619704][T10921] usb 5-1: USB disconnect, device number 56 [ 646.668499][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1721'. [ 646.749945][ T30] kauditd_printk_skb: 414 callbacks suppressed [ 646.749966][ T30] audit: type=1400 audit(632.972:4603): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 646.855782][T12839] openvswitch: netlink: Flow key attr not present in new flow. [ 647.196037][ T30] audit: type=1400 audit(633.018:4604): avc: denied { create } for pid=12834 comm="syz.3.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 647.259017][ T30] audit: type=1400 audit(633.018:4605): avc: denied { write } for pid=12834 comm="syz.3.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 647.333704][ T30] audit: type=1400 audit(633.018:4606): avc: denied { read } for pid=12834 comm="syz.3.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 647.412756][ T30] audit: type=1400 audit(633.018:4607): avc: denied { read } for pid=12834 comm="syz.3.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 647.492482][ T30] audit: type=1400 audit(633.037:4608): avc: denied { recv } for pid=11261 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 647.538185][ T5809] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 647.559479][ T30] audit: type=1400 audit(633.047:4609): avc: denied { recv } for pid=11261 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 647.647366][T10921] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 647.748776][T12850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 647.779035][T12841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 647.793168][ T30] audit: type=1400 audit(633.047:4610): avc: denied { recv } for pid=11261 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 647.992675][ T5809] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 648.029860][ T5809] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 648.057401][ T5809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 648.089179][ T5809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 648.115765][ T5809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 648.142564][T10921] usb 5-1: Using ep0 maxpacket: 8 [ 648.162551][ T5809] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 648.174905][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 648.181553][T10921] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 648.201101][T10921] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 648.254367][ T5809] usb 4-1: Product: syz [ 648.274299][T10921] usb 5-1: config 0 has no interface number 0 [ 648.285142][T10921] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 648.306736][T10921] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 648.327782][ T5809] usb 4-1: Manufacturer: syz [ 648.342170][T10921] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 648.409220][ T5809] cdc_wdm 4-1:1.0: skipping garbage [ 648.412673][T10921] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 648.431523][T10921] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 648.459362][ T5809] cdc_wdm 4-1:1.0: skipping garbage [ 648.472276][T10921] usb 5-1: Product: syz [ 648.487604][ T5809] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 648.507887][ T5809] cdc_wdm 4-1:1.0: Unknown control protocol [ 648.525058][T10921] usb 5-1: config 0 descriptor?? [ 648.544909][T12844] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 650.124100][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 650.155128][ T5809] usb 4-1: USB disconnect, device number 46 [ 650.163250][T10921] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input25 [ 651.884865][ T5809] usb 5-1: USB disconnect, device number 57 [ 651.884960][ C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 651.938279][T12871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.117214][ T30] kauditd_printk_skb: 792 callbacks suppressed [ 652.117233][ T30] audit: type=1400 audit(638.004:5312): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 652.189120][ T5865] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 652.250450][ T30] audit: type=1400 audit(638.004:5313): avc: denied { read write open } for pid=5804 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 652.281444][T12850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 652.297306][T12850] audit: audit_lost=303 audit_rate_limit=0 audit_backlog_limit=64 [ 652.318852][T12876] audit: audit_backlog=65 > audit_backlog_limit=64 [ 652.326685][T12850] audit: backlog limit exceeded [ 652.332447][T12870] audit: audit_backlog=65 > audit_backlog_limit=64 [ 652.339041][T12870] audit: audit_lost=304 audit_rate_limit=0 audit_backlog_limit=64 [ 652.347086][T12870] audit: backlog limit exceeded [ 652.348300][ T30] audit: type=1400 audit(638.004:5314): avc: denied { ioctl } for pid=5804 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 652.456015][ T5809] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 652.467335][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 652.496157][ T5865] usb 4-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 652.536642][ T5865] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 652.599262][ T5865] usb 4-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=4f.2b [ 652.628244][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.657013][ T5865] usb 4-1: Product: syz [ 652.666271][ T5865] usb 4-1: Manufacturer: syz [ 652.678392][ T5809] usb 3-1: not running at top speed; connect to a high speed hub [ 652.683683][ T5865] usb 4-1: SerialNumber: syz [ 652.835673][ T5865] usb 4-1: config 0 descriptor?? [ 653.063556][ T5809] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 653.111762][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.144578][ T5809] usb 3-1: Product: syz [ 653.159193][ T5809] usb 3-1: Manufacturer: syz [ 653.172790][ T5809] usb 3-1: SerialNumber: syz [ 653.514426][ T5809] qmi_wwan 3-1:251.0: probe with driver qmi_wwan failed with error -22 [ 653.527607][ T5809] usb 3-1: USB disconnect, device number 54 [ 655.156907][ T5865] usb 4-1: USB disconnect, device number 47 [ 656.428531][T12899] comedi comedi2: 8255: I/O port conflict (0xffffffffffffffff,4) [ 656.766417][T12908] fuse: Invalid rootmode [ 656.916838][ T793] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 657.159971][ T793] usb 8-1: device descriptor read/64, error -71 [ 657.480417][ T30] kauditd_printk_skb: 932 callbacks suppressed [ 657.480436][ T30] audit: type=1400 audit(642.971:6062): avc: denied { prog_load } for pid=12912 comm="syz.4.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 657.493220][ T5913] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 657.512708][ T793] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 657.565876][ T30] audit: type=1400 audit(642.971:6063): avc: denied { bpf } for pid=12912 comm="syz.4.1741" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 657.596209][ T30] audit: type=1400 audit(643.009:6064): avc: denied { recv } for pid=12912 comm="syz.4.1741" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 657.625440][ T30] audit: type=1400 audit(643.065:6065): avc: denied { getopt } for pid=12902 comm="syz.2.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 657.675214][ T30] audit: type=1400 audit(643.074:6066): avc: denied { ioctl } for pid=12903 comm="syz.7.1738" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 657.700136][ T793] usb 8-1: device descriptor read/64, error -71 [ 657.755362][ T5913] usb 4-1: device descriptor read/64, error -71 [ 657.823821][ T793] usb usb8-port1: attempt power cycle [ 657.831402][ T30] audit: type=1400 audit(643.083:6067): avc: denied { recv } for pid=5789 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 657.893998][ T30] audit: type=1400 audit(643.083:6068): avc: denied { recv } for pid=5789 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 657.963994][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 657.970796][ C1] audit: audit_lost=367 audit_rate_limit=0 audit_backlog_limit=64 [ 657.978634][ C1] audit: backlog limit exceeded [ 658.091259][ T5913] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 658.207467][ T793] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 658.230853][ T793] usb 8-1: device descriptor read/8, error -71 [ 658.253800][ T5913] usb 4-1: device descriptor read/64, error -71 [ 658.378798][ T5913] usb usb4-port1: attempt power cycle [ 658.492273][ T793] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 658.546292][ T793] usb 8-1: device descriptor read/8, error -71 [ 658.679734][ T793] usb usb8-port1: unable to enumerate USB device [ 658.695686][T12928] FAULT_INJECTION: forcing a failure. [ 658.695686][T12928] name failslab, interval 1, probability 0, space 0, times 0 [ 658.716524][T12928] CPU: 1 UID: 0 PID: 12928 Comm: syz.2.1745 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.716556][T12928] Tainted: [L]=SOFTLOCKUP [ 658.716561][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.716572][T12928] Call Trace: [ 658.716578][T12928] [ 658.716586][T12928] dump_stack_lvl+0x100/0x190 [ 658.716622][T12928] should_fail_ex.cold+0x5/0xa [ 658.716646][T12928] should_failslab+0xc2/0x120 [ 658.716674][T12928] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 658.716697][T12928] ? io_submit_one+0x124/0x1fb0 [ 658.716726][T12928] io_submit_one+0x124/0x1fb0 [ 658.716750][T12928] ? __lock_acquire+0x4a5/0x2630 [ 658.716780][T12928] ? irqentry_exit+0x180/0x670 [ 658.716800][T12928] ? lockdep_hardirqs_on+0x78/0x100 [ 658.716819][T12928] ? __pfx_io_submit_one+0x10/0x10 [ 658.716850][T12928] ? __might_fault+0xc5/0x140 [ 658.716881][T12928] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 658.716902][T12928] __x64_sys_io_submit+0x1b1/0x3a0 [ 658.716927][T12928] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 658.716948][T12928] ? fput+0x79/0x100 [ 658.716979][T12928] do_syscall_64+0x106/0xf80 [ 658.716998][T12928] ? clear_bhb_loop+0x40/0x90 [ 658.717020][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.717039][T12928] RIP: 0033:0x7ff2ee59c799 [ 658.717055][T12928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.717072][T12928] RSP: 002b:00007ff2ef438028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 658.717090][T12928] RAX: ffffffffffffffda RBX: 00007ff2ee815fa0 RCX: 00007ff2ee59c799 [ 658.717101][T12928] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 00007ff2ef417000 [ 658.717112][T12928] RBP: 00007ff2ef438090 R08: 0000000000000000 R09: 0000000000000000 [ 658.717122][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.717132][T12928] R13: 00007ff2ee816038 R14: 00007ff2ee815fa0 R15: 00007ffc54bd2a38 [ 658.717157][T12928] [ 658.784753][ T5913] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 658.984094][ T5913] usb 4-1: device descriptor read/8, error -71 [ 658.998628][ T793] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 659.277120][ T5913] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 659.368166][ T5913] usb 4-1: device descriptor read/8, error -71 [ 659.515198][ T5913] usb usb4-port1: unable to enumerate USB device [ 659.678225][ T793] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 659.993789][ T793] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 660.017323][ T793] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 660.026944][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.044598][T12925] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 660.103241][ T793] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 660.609987][T12941] overlayfs: failed to resolve './bus': -2 [ 661.368048][T12945] fuse: Invalid rootmode [ 662.146275][T12925] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1744'. [ 662.240571][ T5809] usb 5-1: USB disconnect, device number 58 [ 662.283828][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'. [ 662.842835][ T30] kauditd_printk_skb: 448 callbacks suppressed [ 662.842855][ T30] audit: type=1400 audit(648.032:6400): avc: denied { recv } for pid=11261 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 662.912899][ T30] audit: type=1400 audit(648.032:6401): avc: denied { recv } for pid=11261 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 662.970733][ T30] audit: type=1400 audit(648.032:6402): avc: denied { recv } for pid=11261 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 663.028530][ T30] audit: type=1400 audit(648.050:6403): avc: denied { recv } for pid=11261 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 663.070601][ T30] audit: type=1400 audit(648.050:6404): avc: denied { recv } for pid=11261 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 663.085723][T12967] hsr0: entered promiscuous mode [ 663.099109][ T30] audit: type=1400 audit(648.050:6405): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.139999][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1757'. [ 663.180129][ T30] audit: type=1400 audit(648.050:6406): avc: denied { read write open } for pid=5806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.205646][T12967] hsr_slave_0: left promiscuous mode [ 663.208140][ T30] audit: type=1400 audit(648.050:6407): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.260323][T12967] hsr_slave_1: left promiscuous mode [ 663.291703][T12967] hsr0 (unregistering): left promiscuous mode [ 663.503974][ T30] audit: type=1400 audit(648.200:6408): avc: denied { recv } for pid=5801 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 663.607144][ T30] audit: type=1400 audit(648.200:6409): avc: denied { create } for pid=12965 comm="syz.7.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 663.701197][T12974] FAULT_INJECTION: forcing a failure. [ 663.701197][T12974] name failslab, interval 1, probability 0, space 0, times 0 [ 663.723795][T12974] CPU: 1 UID: 0 PID: 12974 Comm: syz.4.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.723827][T12974] Tainted: [L]=SOFTLOCKUP [ 663.723834][T12974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.723845][T12974] Call Trace: [ 663.723852][T12974] [ 663.723860][T12974] dump_stack_lvl+0x100/0x190 [ 663.723895][T12974] should_fail_ex.cold+0x5/0xa [ 663.723919][T12974] ? tomoyo_encode2+0xfb/0x3c0 [ 663.723941][T12974] should_failslab+0xc2/0x120 [ 663.723968][T12974] __kmalloc_noprof+0xe0/0x850 [ 663.723998][T12974] tomoyo_encode2+0xfb/0x3c0 [ 663.724025][T12974] tomoyo_encode+0x29/0x50 [ 663.724045][T12974] tomoyo_realpath_from_path+0x18c/0x690 [ 663.724075][T12974] tomoyo_path_number_perm+0x23c/0x580 [ 663.724093][T12974] ? tomoyo_path_number_perm+0x22e/0x580 [ 663.724112][T12974] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 663.724158][T12974] ? find_held_lock+0x2b/0x80 [ 663.724180][T12974] ? __fget_files+0x215/0x3d0 [ 663.724198][T12974] ? hook_file_ioctl_common+0x146/0x410 [ 663.724234][T12974] ? __fget_files+0x21f/0x3d0 [ 663.724257][T12974] security_file_ioctl+0xd3/0x230 [ 663.724281][T12974] __x64_sys_ioctl+0xb7/0x210 [ 663.724309][T12974] do_syscall_64+0x106/0xf80 [ 663.724327][T12974] ? clear_bhb_loop+0x40/0x90 [ 663.724351][T12974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.724370][T12974] RIP: 0033:0x7fc9ad39c799 [ 663.724387][T12974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.724405][T12974] RSP: 002b:00007fc9ae1a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.724425][T12974] RAX: ffffffffffffffda RBX: 00007fc9ad615fa0 RCX: 00007fc9ad39c799 [ 663.724437][T12974] RDX: 00002000000005c0 RSI: 000000004008ae89 RDI: 0000000000000008 [ 663.724448][T12974] RBP: 00007fc9ae1a4090 R08: 0000000000000000 R09: 0000000000000000 [ 663.724466][T12974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.724477][T12974] R13: 00007fc9ad616038 R14: 00007fc9ad615fa0 R15: 00007ffccbe697a8 [ 663.724503][T12974] [ 663.724539][T12974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.438485][T12979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1760'. [ 664.645269][T12979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12979 comm=syz.3.1760 [ 665.214684][T12997] overlayfs: failed to resolve './bus': -2 [ 665.234708][T12991] fuse: Bad value for 'rootmode' [ 667.978528][T13016] can0: slcan on pty26. [ 667.988752][T13015] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1772'. [ 667.998048][T13015] bond_slave_0: entered promiscuous mode [ 668.004057][T13015] bond_slave_1: entered promiscuous mode [ 668.111208][T13017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1771'. [ 668.194268][ T30] kauditd_printk_skb: 237 callbacks suppressed [ 668.194287][ T30] audit: type=1400 audit(653.045:6647): avc: denied { read } for pid=5471 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 668.277133][ T30] audit: type=1400 audit(653.111:6648): avc: denied { recv } for pid=6660 comm="kworker/u8:10" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 668.314315][ T30] audit: type=1400 audit(653.139:6649): avc: denied { search } for pid=5471 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.513200][ T30] audit: type=1400 audit(653.139:6650): avc: denied { search } for pid=5471 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.588785][T13011] can0 (unregistered): slcan off pty26. [ 668.641413][ T30] audit: type=1400 audit(653.139:6651): avc: denied { search } for pid=5471 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.755274][ T30] audit: type=1400 audit(653.139:6652): avc: denied { read } for pid=5471 comm="dhcpcd" name="n149" dev="tmpfs" ino=8419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 668.844528][ T30] audit: type=1400 audit(653.139:6653): avc: denied { read open } for pid=5471 comm="dhcpcd" path="/run/udev/data/n149" dev="tmpfs" ino=8419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 668.930019][ T30] audit: type=1400 audit(653.139:6654): avc: denied { getattr } for pid=5471 comm="dhcpcd" path="/run/udev/data/n149" dev="tmpfs" ino=8419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 669.029800][ T30] audit: type=1400 audit(653.223:6655): avc: denied { recv } for pid=5789 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 669.103322][T13024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.110505][ T5814] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 669.548335][T13032] overlayfs: failed to resolve './bus': -2 [ 669.850817][T13040] fuse: Bad value for 'rootmode' [ 670.850260][T13049] input: syz1 as /devices/virtual/input/input26 [ 671.009132][T13049] binder: Unknown parameter '‚öŽ|£'€™' [ 671.123307][ T7143] udevd[7143]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 671.433104][ T5814] Bluetooth: hci2: unexpected event for opcode 0x202a [ 671.700876][T13063] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 671.844718][T13063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.980464][T13069] bond1: (slave ip6erspan0): making interface the new active one [ 672.019112][T13068] netlink: 'syz.7.1784': attribute type 3 has an invalid length. [ 672.069429][T13069] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 673.566263][ T30] kauditd_printk_skb: 666 callbacks suppressed [ 673.566284][ T30] audit: type=1400 audit(658.068:7320): avc: denied { read write } for pid=11261 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 673.698051][ T30] audit: type=1400 audit(658.078:7321): avc: denied { recv } for pid=13085 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 673.781840][ T30] audit: type=1400 audit(658.078:7322): avc: denied { recv } for pid=13085 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 673.851865][T13089] fuse: Bad value for 'rootmode' [ 673.881652][ T30] audit: type=1400 audit(658.078:7323): avc: denied { recv } for pid=13085 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 674.107359][ T30] audit: type=1400 audit(658.078:7324): avc: denied { recv } for pid=13085 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 674.458965][T13092] mkiss: ax0: crc mode is auto. [ 674.470263][T13092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 674.476779][T13092] audit: audit_lost=408 audit_rate_limit=0 audit_backlog_limit=64 [ 674.484645][T13092] audit: backlog limit exceeded [ 674.490524][T13092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 674.497146][T13092] audit: audit_lost=409 audit_rate_limit=0 audit_backlog_limit=64 [ 675.173677][T13104] overlayfs: failed to resolve './file1': -2 [ 675.206281][T13104] overlayfs: failed to resolve './file1/file0': -2 [ 675.773750][ T5814] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 675.782500][ T5814] Bluetooth: hci2: Injecting HCI hardware error event [ 675.791912][ T51] Bluetooth: hci2: hardware error 0x00 [ 676.193985][T13113] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1790'. [ 677.680597][T13125] tmpfs: Bad value for 'mpol' [ 677.743127][ T12] Bluetooth: hci5: Frame reassembly failed (-90) [ 677.942747][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 678.919399][ T30] kauditd_printk_skb: 578 callbacks suppressed [ 678.919418][ T30] audit: type=1400 audit(663.073:7839): avc: denied { search } for pid=13130 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.014970][ T30] audit: type=1400 audit(663.073:7840): avc: denied { search } for pid=13130 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.090438][T13130] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.110927][ T30] audit: type=1400 audit(663.073:7841): avc: denied { search } for pid=13130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.151476][T13130] audit: audit_lost=431 audit_rate_limit=0 audit_backlog_limit=64 [ 679.196488][T13141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.233711][T13141] audit: audit_lost=432 audit_rate_limit=0 audit_backlog_limit=64 [ 679.235894][T13130] audit: backlog limit exceeded [ 679.245667][ T30] audit: type=1400 audit(663.073:7842): avc: denied { read open } for pid=13130 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.286719][T13130] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.320281][T13141] fuse: Unknown parameter 'use00000000000000000000' [ 679.934613][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 680.046650][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 680.644321][T13159] overlayfs: failed to resolve './file1': -2 [ 680.728597][T13160] overlayfs: failed to resolve './file1/file0': -2 [ 682.100218][T13173] mkiss: ax0: crc mode is auto. [ 682.331862][T13174] FAULT_INJECTION: forcing a failure. [ 682.331862][T13174] name failslab, interval 1, probability 0, space 0, times 0 [ 682.998880][ T793] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 683.095495][T13174] CPU: 1 UID: 0 PID: 13174 Comm: syz.7.1809 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.095528][T13174] Tainted: [L]=SOFTLOCKUP [ 683.095534][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.095545][T13174] Call Trace: [ 683.095552][T13174] [ 683.095559][T13174] dump_stack_lvl+0x100/0x190 [ 683.095598][T13174] should_fail_ex.cold+0x5/0xa [ 683.095621][T13174] ? tomoyo_encode2+0xfb/0x3c0 [ 683.095643][T13174] should_failslab+0xc2/0x120 [ 683.095673][T13174] __kmalloc_noprof+0xe0/0x850 [ 683.095696][T13174] ? d_absolute_path+0x136/0x1b0 [ 683.095725][T13174] tomoyo_encode2+0xfb/0x3c0 [ 683.095749][T13174] tomoyo_encode+0x29/0x50 [ 683.095769][T13174] tomoyo_realpath_from_path+0x18c/0x690 [ 683.095796][T13174] tomoyo_path_number_perm+0x23c/0x580 [ 683.095814][T13174] ? tomoyo_path_number_perm+0x22e/0x580 [ 683.095833][T13174] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 683.095877][T13174] ? find_held_lock+0x2b/0x80 [ 683.095898][T13174] ? __fget_files+0x215/0x3d0 [ 683.095915][T13174] ? hook_file_ioctl_common+0x146/0x410 [ 683.095945][T13174] ? __fget_files+0x21f/0x3d0 [ 683.095966][T13174] security_file_ioctl+0xd3/0x230 [ 683.095988][T13174] __x64_sys_ioctl+0xb7/0x210 [ 683.096017][T13174] do_syscall_64+0x106/0xf80 [ 683.096035][T13174] ? clear_bhb_loop+0x40/0x90 [ 683.096063][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.096081][T13174] RIP: 0033:0x7f1cbcd9c799 [ 683.096096][T13174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.096112][T13174] RSP: 002b:00007f1cbdceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.096130][T13174] RAX: ffffffffffffffda RBX: 00007f1cbd016090 RCX: 00007f1cbcd9c799 [ 683.096142][T13174] RDX: 0000000000000000 RSI: 00000000000054a0 RDI: 0000000000000003 [ 683.096152][T13174] RBP: 00007f1cbdceb090 R08: 0000000000000000 R09: 0000000000000000 [ 683.096162][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.096172][T13174] R13: 00007f1cbd016128 R14: 00007f1cbd016090 R15: 00007ffdc1b6f5c8 [ 683.096198][T13174] [ 683.096215][T13174] ERROR: Out of memory at tomoyo_realpath_from_path. [ 683.554967][ T793] usb 4-1: device not accepting address 52, error -71 [ 684.272710][ T30] kauditd_printk_skb: 448 callbacks suppressed [ 684.272729][ T30] audit: type=1400 audit(668.087:8249): avc: denied { execmem } for pid=13196 comm="syz.3.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 684.414418][ T30] audit: type=1400 audit(668.096:8250): avc: denied { recv } for pid=13196 comm="syz.3.1815" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 684.890034][ T30] audit: type=1400 audit(668.246:8251): avc: denied { sys_module } for pid=13180 comm="syz.4.1811" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 684.983267][T13202] fuse: Unknown parameter 'use00000000000000000000' [ 685.046404][ T30] audit: type=1400 audit(668.246:8252): avc: denied { module_request } for pid=13180 comm="syz.4.1811" kmod="" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 685.439810][ T30] audit: type=1400 audit(668.302:8253): avc: denied { read } for pid=13198 comm="syz.2.1816" dev="nsfs" ino=4026532836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 685.514200][ T30] audit: type=1400 audit(668.311:8254): avc: denied { read open } for pid=13198 comm="syz.2.1816" path="net:[4026532836]" dev="nsfs" ino=4026532836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 685.692892][ T30] audit: type=1400 audit(668.367:8255): avc: denied { create } for pid=13196 comm="syz.3.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 685.768194][ T30] audit: type=1400 audit(668.442:8256): avc: denied { create } for pid=13198 comm="syz.2.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 685.867421][ T30] audit: type=1400 audit(668.536:8257): avc: denied { map_create } for pid=13198 comm="syz.2.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 685.960172][ T30] audit: type=1400 audit(668.723:8258): avc: denied { read write } for pid=13198 comm="syz.2.1816" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 686.206988][ T793] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 687.125423][ T5865] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 687.210974][ T793] usb 5-1: Using ep0 maxpacket: 8 [ 687.328601][ T5865] usb 3-1: device descriptor read/64, error -71 [ 687.397036][ T793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 687.463751][ T793] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 687.584266][ T793] usb 5-1: New USB device found, idVendor=14aa, idProduct=0221, bcdDevice=7f.96 [ 687.593916][ T5865] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 687.606476][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.666327][ T793] usb 5-1: Product: syz [ 687.788819][T13233] overlayfs: failed to resolve './file1': -2 [ 687.877982][T13234] overlayfs: failed to resolve './file1/file0': -2 [ 688.115369][ T793] usb 5-1: Manufacturer: syz [ 688.127882][ T793] usb 5-1: SerialNumber: syz [ 688.173362][ T5865] usb 3-1: device descriptor read/64, error -71 [ 688.330819][ T5865] usb usb3-port1: attempt power cycle [ 689.580067][ T5865] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 689.629302][ T30] kauditd_printk_skb: 3208 callbacks suppressed [ 689.629317][ T30] audit: type=1400 audit(673.072:8548): avc: denied { recv } for pid=13187 comm="syz.4.1811" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 689.677346][ T30] audit: type=1400 audit(673.072:8549): avc: denied { read write open } for pid=13212 comm="syz.4.1817" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 689.703753][ T793] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 689.714054][ T793] dvb-usb: bulk message failed: -22 (2/0) [ 689.720066][ T793] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 689.731189][ T30] audit: type=1400 audit(673.072:8550): avc: denied { ioctl } for pid=13212 comm="syz.4.1817" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 689.759545][ T793] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 689.801169][ T5865] usb 3-1: device descriptor read/8, error -71 [ 689.835377][ T793] usb 5-1: media controller created [ 689.863129][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 689.955345][ T30] audit: type=1400 audit(673.072:8551): avc: denied { recv } for pid=13187 comm="syz.4.1811" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 689.991202][ T793] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 690.000714][ T793] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 690.120475][ T30] audit: type=1400 audit(673.082:8552): avc: denied { recv } for pid=13187 comm="syz.4.1811" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 690.362421][ T30] audit: type=1400 audit(673.082:8553): avc: denied { recv } for pid=13187 comm="syz.4.1811" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 690.472533][ T30] audit: type=1400 audit(673.082:8554): avc: denied { recv } for pid=13187 comm="syz.4.1811" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 690.573523][ T30] audit: type=1400 audit(673.091:8555): avc: denied { recv } for pid=13187 comm="syz.4.1811" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 690.790849][ T30] audit: type=1400 audit(673.128:8556): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 690.819385][ T793] rc_core: IR keymap rc-dtt200u not found [ 690.825946][ T793] Registered IR keymap rc-empty [ 690.832330][ T793] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 690.850721][ T30] audit: type=1400 audit(673.128:8557): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 690.877325][ T793] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input27 [ 690.903196][T13259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 690.913308][ T5814] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 690.913358][ T5814] Bluetooth: hci0: Malformed LE Event: 0x02 [ 690.927237][ T793] dvb-usb: schedule remote query interval to 300 msecs. [ 690.934895][ T793] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 690.958643][ T793] usb 5-1: USB disconnect, device number 59 [ 691.047247][ T793] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 691.070537][ T5865] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 691.122020][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 691.166690][ T5865] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 691.174828][ T5865] usb 3-1: config 0 has no interface number 0 [ 691.262835][ T5865] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 691.275966][ T5865] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 691.326156][ T5865] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 200, changing to 11 [ 691.350469][ T5865] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 691.376198][ T5865] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 691.413195][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.538288][ T5865] usb 3-1: config 0 descriptor?? [ 691.639393][ T5865] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 692.047555][ T793] usb 3-1: USB disconnect, device number 58 [ 692.087561][ T793] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 692.969153][T13274] overlayfs: missing 'lowerdir' [ 693.071770][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1832'. [ 693.796539][ T5865] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 693.869688][T13286] ref_ctr_offset mismatch. inode: 0x806 offset: 0x0 ref_ctr_offset(old): 0x43414d20 ref_ctr_offset(new): 0x0 [ 694.119639][ T5865] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 694.130098][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.151111][ T5865] usb 8-1: Product: syz [ 694.155487][ T5865] usb 8-1: Manufacturer: syz [ 694.160200][ T5865] usb 8-1: SerialNumber: syz [ 694.957225][ T5865] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 694.987072][ T5865] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 695.012070][ T5865] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 695.034839][ T5865] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 695.054293][ T30] kauditd_printk_skb: 358 callbacks suppressed [ 695.054312][ T30] audit: type=1400 audit(678.161:8916): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 695.122541][ T5865] usb 8-1: USB disconnect, device number 27 [ 695.164433][ T30] audit: type=1400 audit(678.198:8917): avc: denied { read write open } for pid=5806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 695.292387][ T30] audit: type=1400 audit(678.208:8918): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 695.412708][ T30] audit: type=1400 audit(678.254:8919): avc: denied { sys_module } for pid=13309 comm="syz.1.1845" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 695.516528][ T30] audit: type=1400 audit(678.254:8920): avc: denied { module_request } for pid=13309 comm="syz.1.1845" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 695.642285][ T30] audit: type=1400 audit(678.348:8921): avc: denied { recv } for pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 695.712657][ T30] audit: type=1400 audit(678.348:8922): avc: denied { recv } for pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 695.833347][ T30] audit: type=1400 audit(678.357:8923): avc: denied { recv } for pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 695.926612][ T30] audit: type=1400 audit(678.357:8924): avc: denied { recv } for pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 696.006809][ T30] audit: type=1400 audit(678.357:8925): avc: denied { recv } for pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.191 dest=53684 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 696.033087][ T5865] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 696.223585][ T5809] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 696.234751][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 696.276332][ T5865] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.297251][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.325393][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.347702][ T5865] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.381575][ T5865] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 696.394201][ T5809] usb 8-1: Using ep0 maxpacket: 8 [ 696.412757][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.415761][ T5809] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 696.439163][ T5809] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 696.471360][ T5809] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.490448][ T5913] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 696.509500][ T5809] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.557340][ T5809] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 696.577880][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.664142][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 696.675812][ T5865] usb 4-1: GET_CAPABILITIES returned 0 [ 696.699096][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 696.710795][ T5865] usbtmc 4-1:16.0: can't read capabilities [ 696.758916][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 696.828749][ T5809] usb 8-1: GET_CAPABILITIES returned 0 [ 696.852674][ T5809] usbtmc 8-1:16.0: can't read capabilities [ 696.864812][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 696.881243][T13343] ------------[ cut here ]------------ [ 696.886919][T13343] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 696.886943][T13343] WARNING: fs/exec.c:118 at path_noexec+0x1cf/0x230, CPU#1: syz.2.1856/13343 [ 696.892431][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.897700][T13343] Modules linked in: [ 696.906526][ T5913] usb 5-1: Product: syz [ 696.914569][T13343] [ 696.918473][ T5913] usb 5-1: Manufacturer: syz [ 696.918492][ T5913] usb 5-1: SerialNumber: syz [ 696.922761][ T5913] usb 5-1: config 0 descriptor?? [ 696.923010][T13343] CPU: 1 UID: 0 PID: 13343 Comm: syz.2.1856 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.953914][T13343] Tainted: [L]=SOFTLOCKUP [ 696.958243][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.968530][T13343] RIP: 0010:path_noexec+0x1cf/0x230 [ 696.973813][T13343] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 9a e2 7d ff 83 e3 01 e8 b2 e7 7d ff 89 d8 5b 5d 41 5c e9 87 44 08 09 e8 a2 e7 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 60 ea ff e9 a3 fe ff ff e8 3a 60 ea [ 696.995017][T13343] RSP: 0018:ffffc900034c7bd8 EFLAGS: 00010283 [ 697.001112][T13343] RAX: 0000000000005e67 RBX: 0000000000000000 RCX: ffffc90005982000 [ 697.009490][T13343] RDX: 0000000000080000 RSI: ffffffff828ab71e RDI: ffff888020b18000 [ 697.017680][T13343] RBP: ffff88801f2eda60 R08: 0000000000000007 R09: 0000000000000000 [ 697.025735][T13343] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 697.033726][T13343] R13: 0000000000000001 R14: ffff88805cf2c208 R15: 0000000000000000 [ 697.040938][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.041786][T13343] FS: 00007ff2ef4386c0(0000) GS:ffff888124444000(0000) knlGS:0000000000000000 [ 697.053243][ T5809] usb 4-1: USB disconnect, device number 54 [ 697.059943][T13343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 697.072403][T13343] CR2: 000000110c3b1dfc CR3: 0000000078137000 CR4: 00000000003526f0 [ 697.080470][T13343] Call Trace: [ 697.083757][T13343] [ 697.086691][T13343] do_mmap+0x857/0x12f0 [ 697.091206][T13343] ? __pfx_do_mmap+0x10/0x10 [ 697.095818][T13343] ? __pfx_down_write_killable+0x10/0x10 [ 697.101755][T13343] vm_mmap_pgoff+0x29e/0x470 [ 697.106375][T13343] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 697.111571][T13343] ? __fget_files+0x215/0x3d0 [ 697.116271][T13343] ? __fget_files+0x21f/0x3d0 [ 697.121194][T13343] ksys_mmap_pgoff+0x3c8/0x650 [ 697.125989][T13343] ? __x64_sys_futex+0x34f/0x4d0 [ 697.131077][T13343] ? __x64_sys_futex+0x358/0x4d0 [ 697.136081][T13343] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 697.141364][T13343] ? xfd_validate_state+0x129/0x190 [ 697.146658][T13343] __x64_sys_mmap+0x125/0x190 [ 697.151356][T13343] do_syscall_64+0x106/0xf80 [ 697.156171][T13343] ? clear_bhb_loop+0x40/0x90 [ 697.160887][T13343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.166889][T13343] RIP: 0033:0x7ff2ee59c799 [ 697.171326][T13343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.176449][ T10] usb 8-1: USB disconnect, device number 28 [ 697.191267][T13343] RSP: 002b:00007ff2ef438028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 697.205861][T13343] RAX: ffffffffffffffda RBX: 00007ff2ee815fa0 RCX: 00007ff2ee59c799 [ 697.214149][T13343] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 697.219485][ T5913] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 697.222280][T13343] RBP: 00007ff2ee632bd9 R08: 0000000000000005 R09: 0000000000000000 [ 697.239658][T13343] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 697.247644][T13343] R13: 00007ff2ee816038 R14: 00007ff2ee815fa0 R15: 00007ffc54bd2a38 [ 697.255764][T13343] [ 697.258792][T13343] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 697.266081][T13343] CPU: 1 UID: 0 PID: 13343 Comm: syz.2.1856 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.277038][T13343] Tainted: [L]=SOFTLOCKUP [ 697.281361][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 697.291420][T13343] Call Trace: [ 697.294702][T13343] [ 697.297638][T13343] dump_stack_lvl+0x100/0x190 [ 697.302345][T13343] vpanic+0x552/0x970 [ 697.306348][T13343] ? __pfx_vpanic+0x10/0x10 [ 697.310868][T13343] panic+0xd1/0xe0 [ 697.314599][T13343] ? __pfx_panic+0x10/0x10 [ 697.319035][T13343] check_panic_on_warn.cold+0x19/0x34 [ 697.324411][T13343] ? path_noexec+0x1cf/0x230 [ 697.328995][T13343] __warn.cold+0x191/0x348 [ 697.333397][T13343] __report_bug+0x296/0x3d0 [ 697.337885][T13343] ? path_noexec+0x1cf/0x230 [ 697.342468][T13343] ? __pfx___report_bug+0x10/0x10 [ 697.347478][T13343] ? slow_avc_audit+0x18b/0x210 [ 697.352320][T13343] ? arch_get_unmapped_area_topdown+0x559/0xa50 [ 697.358552][T13343] ? path_noexec+0x1cf/0x230 [ 697.363137][T13343] report_bug+0xb2/0x220 [ 697.367365][T13343] ? path_noexec+0x1cf/0x230 [ 697.371944][T13343] handle_bug+0x166/0x2a0 [ 697.376263][T13343] exc_invalid_op+0x17/0x50 [ 697.380772][T13343] asm_exc_invalid_op+0x1a/0x20 [ 697.385622][T13343] RIP: 0010:path_noexec+0x1cf/0x230 [ 697.390812][T13343] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 9a e2 7d ff 83 e3 01 e8 b2 e7 7d ff 89 d8 5b 5d 41 5c e9 87 44 08 09 e8 a2 e7 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 60 ea ff e9 a3 fe ff ff e8 3a 60 ea [ 697.410406][T13343] RSP: 0018:ffffc900034c7bd8 EFLAGS: 00010283 [ 697.416460][T13343] RAX: 0000000000005e67 RBX: 0000000000000000 RCX: ffffc90005982000 [ 697.424412][T13343] RDX: 0000000000080000 RSI: ffffffff828ab71e RDI: ffff888020b18000 [ 697.432387][T13343] RBP: ffff88801f2eda60 R08: 0000000000000007 R09: 0000000000000000 [ 697.440344][T13343] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 697.448298][T13343] R13: 0000000000000001 R14: ffff88805cf2c208 R15: 0000000000000000 [ 697.456256][T13343] ? path_noexec+0x1ce/0x230 [ 697.460840][T13343] ? path_noexec+0x1ce/0x230 [ 697.465418][T13343] do_mmap+0x857/0x12f0 [ 697.469562][T13343] ? __pfx_do_mmap+0x10/0x10 [ 697.474136][T13343] ? __pfx_down_write_killable+0x10/0x10 [ 697.479766][T13343] vm_mmap_pgoff+0x29e/0x470 [ 697.484343][T13343] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 697.489439][T13343] ? __fget_files+0x215/0x3d0 [ 697.494109][T13343] ? __fget_files+0x21f/0x3d0 [ 697.498776][T13343] ksys_mmap_pgoff+0x3c8/0x650 [ 697.503524][T13343] ? __x64_sys_futex+0x34f/0x4d0 [ 697.508448][T13343] ? __x64_sys_futex+0x358/0x4d0 [ 697.513374][T13343] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 697.518643][T13343] ? xfd_validate_state+0x129/0x190 [ 697.523844][T13343] __x64_sys_mmap+0x125/0x190 [ 697.528511][T13343] do_syscall_64+0x106/0xf80 [ 697.533112][T13343] ? clear_bhb_loop+0x40/0x90 [ 697.537775][T13343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.543652][T13343] RIP: 0033:0x7ff2ee59c799 [ 697.548053][T13343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.567737][T13343] RSP: 002b:00007ff2ef438028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 697.576154][T13343] RAX: ffffffffffffffda RBX: 00007ff2ee815fa0 RCX: 00007ff2ee59c799 [ 697.584115][T13343] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 697.592073][T13343] RBP: 00007ff2ee632bd9 R08: 0000000000000005 R09: 0000000000000000 [ 697.600033][T13343] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 697.607986][T13343] R13: 00007ff2ee816038 R14: 00007ff2ee815fa0 R15: 00007ffc54bd2a38 [ 697.615957][T13343] [ 697.619267][T13343] Kernel Offset: disabled [ 697.623583][T13343] Rebooting in 86400 seconds..