last executing test programs: 13.317993244s ago: executing program 4 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x2a) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$llc(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x9) unshare(0x22020600) r5 = add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x1d) r6 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) wait4(0x0, 0x0, 0x0, 0x0) 11.182008015s ago: executing program 4 (id=820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001900000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) shmdt(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x34, r0, 0x200, 0x270bd28, 0x0, {0x4, 0x7, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x4000) syz_usb_connect(0x0, 0x1b, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x4d, 0x55, 0xd8, 0x40, 0x9c0, 0x203, 0xd283, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0xc0, 0x5}}]}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000002c0)=0x56, 0x4) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x100c75, 0x7, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 10.705892041s ago: executing program 0 (id=825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) getgroups(0x1, &(0x7f0000000140)=[0xee00]) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x1, 0x3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x0, 0x1a0, 0x98, 0x298, 0x1a0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) tgkill(0x0, 0x0, 0x21) fcntl$notify(r2, 0x402, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x8, 0x2, 0x8505}, 0x50) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400e7a2b91db08d9e85d510a51f8fee719b682c5c004dc5c03a262adadd4f372c847f709c65692f596c73b5bc22703bb2f67918fa7cbfa2db8d5575bf99cd6d2cb0f576217ceb54341579d97076a5d5c67942bea2d6c676ec0984ed17365afe36d041f02b51fea201000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e001f0000000c00900000000000000000000c0090000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) 9.271691217s ago: executing program 1 (id=827): unshare(0x8000280) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="34bd003ed5353df5c56aac1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000d00000006000a00ffff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) r3 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff08) 9.165389914s ago: executing program 3 (id=829): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x58300, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x2, 0x9d, 0x18, 0xb, 0x14, 0x6}}]}}]}, 0x44}}, 0x4008010) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100ff0001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x26, 0x10, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000340)={&(0x7f0000000300)=[r4, 0x0, r5, r6, r7], 0x10001, 0x5, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 9.12242646s ago: executing program 0 (id=830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000080000000000000000400000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r1, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) keyctl$get_keyring_id(0x0, r3, 0x3) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) prlimit64(0x0, 0x4, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x9, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000001340)=@userptr={0x6, 0xa, 0x4, 0x2000, 0x6, {0x0, 0x2710}, {0x4, 0xc, 0xd2, 0x9, 0x77}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x0, 0x0, r5}) 9.090511874s ago: executing program 1 (id=831): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 9.009607419s ago: executing program 3 (id=832): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x1000000, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x400040, 0x0, 0x24}, 0x18) 8.815161538s ago: executing program 4 (id=834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001300000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010200010900010073797a30000000000c00024000000000000000010900030073797a30"], 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) 8.787870352s ago: executing program 1 (id=835): sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x48) r4 = getpgrp(0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x40f24e7f6606f3b8) close(r5) syz_usb_connect(0x4, 0x24, &(0x7f0000000200)=ANY=[], 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) 8.712606883s ago: executing program 3 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_usb_connect(0x3, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x13, 0x3c, 0x3b, 0x10, 0x497, 0xc001, 0xd516, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7d, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0xa5, 0x81, 0x0, 0x88, 0xc8, 0x76, 0x61}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) writev(0xffffffffffffffff, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x801) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x6, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x0, 0xdddd1000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x8, 0xf, 0xa5, 0xee, 0x81}, {0x8000000, 0x0, 0x4, 0x88, 0xf0, 0x81, 0x8c, 0x6, 0x7, 0x99, 0x1, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0xfc, 0x5, 0x1, 0x7, 0x5, 0x2}, {0x0, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0x2, 0x80}, {0xeeee8000, 0xeeef0000, 0x9, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xf, 0x8}, {0xe6ef8000, 0x0, 0x4, 0x3, 0x53, 0xa1, 0xc3, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332b2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xa0, 0x6}, {0x80a0000, 0x6}, {0x1, 0x3}, 0x12, 0x0, 0x80a0000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x0, 0xa]}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f00000000c0)={0x6, 0x81}) r7 = socket(0x11, 0xa, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x7) getsockname$packet(r7, 0x0, &(0x7f0000000080)) 8.71145522s ago: executing program 2 (id=837): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081fff300bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.656812454s ago: executing program 2 (id=838): r0 = socket$inet(0x2b, 0x6, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_clone(0x41204011, 0x0, 0x61, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = syz_pidfd_open(r3, 0x0) read$FUSE(r2, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x32, 0x0, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2001, 0x8e) writev(r10, &(0x7f0000001c40)=[{&(0x7f0000000900)="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", 0x1000}], 0x1) close(r2) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a80)={0x6, 0x27, &(0x7f0000001f00)=ANY=[@ANYBLOB="4e33000007000000340000000000000000452e7449d220ba6ce2fd7804c191cb18b543964ff18d497e3d", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186500000c0000000000000003000000184300000400000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0100008500000006000000183400000600000000000000000000001836000002000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018420000070000000000000000000000b8b6e0ffe1ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x2dd, 0x99, &(0x7f0000001900)=""/153, 0x40f00, 0x48, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000880)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001ec0)={0x2, 0xa, 0x5, 0xa4f6f1f}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000019c0), &(0x7f0000001a00)=[{0x5, 0x2, 0x7, 0x4}, {0x2, 0x4, 0x8, 0xb}, {0x3, 0x1, 0x6, 0x8}, {0x0, 0x4, 0x6, 0x8}, {0x1, 0x5, 0x0, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e40)={r1, 0xe0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000001c00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001c80), &(0x7f0000001cc0), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000001d00)}}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x5b0, [0x0, 0x200000000100, 0x2000000003ec, 0x20000000041c], 0x0, &(0x7f0000000000), &(0x7f00000049c0)=ANY=[@ANYBLOB="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"]}, 0x65a) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000006c0)={0x0, 0x5}, 0x8) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r13 = getpid() sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r14, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r15, &(0x7f0000002800)=[{{&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000002580)="8664984fc897320b9dabd84ca011cf36c46e12eb6892170cefb2d5cbfcd755e7e5f4a617656ea1295cbf657d8b1dba743b8030eacb4ba25e9a4b8bc424ccb86b66ae00268aae9b7e0753b8bc6b4b40d68e5f9be56e5ec8174be8da9b7468e2919e72d85ecff409c66d14297eb31d525e24db990701a77bea08954121ceee6f0e9ad1b01879eb067a2e918f968b0e829baa0ab408a0487a6c87e488a75a4df06a08dc1d5849e0929142bfeb47c6ccb88c40b9f2ff9dfe48d152438a15c1ffda5f653d18c2267d996fd1e810dccb5b802a4d133c82139f", 0xd6}, {&(0x7f0000000780)="3d16edf4544f85a49b2cde1021184ec34f6142c2d765a4db4fac0af526facf41f568d5a9359b2d8b9685fe0b393191b948f7626c1efea76b99262888a1abd9d533d7c01d88ab75f170a49cf2ad8c876999406e02c2ba448fb943b0673666f24787da872f8d75eaa17e9bb1ce90b9520a0aeda938720083940d8d066e3221bdd9c9d0e718e3133bffe857566f9e92c78efc5f9b5eb9665fc2970cf154f7216d8028b1484b1465292f3d9836452258e2845ebdd89c13", 0xb5}, {&(0x7f00000008c0)="309678339e08bb5d39", 0x9}], 0x3, &(0x7f0000002300)=[@cred={{0x1c, 0x1, 0x2, {r13, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, r10, r5]}}, @rights={{0x20, 0x1, 0x1, [r11, r15, r11, r2]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x28, 0x1, 0x1, [r10, r0, r0, 0xffffffffffffffff, r12, r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, r7, r8}}}, @rights={{0x34, 0x1, 0x1, [r15, r1, r0, 0xffffffffffffffff, r15, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0xf8, 0x40000}}, {{&(0x7f0000002400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002480)="6b76342ec8b16ec55baca0660e1b3b1cf77fc565482d1d4f23f92b94969f2b5eeeb2aa51862522162a01fd5afce6e14b5272e66c7fa7fd3611061d1be4010ad3461ac3e531b6e234abf47491d2444ce353677653c0eddc02690cb5200e55e6f7487a13f2417132f9a35c0a484eafc66d750e141cbad2c91e2df83005961816a9c6e86804086cd5c9dbf02a204511f6f33b398bfd1bba5b54a4d813e5f110c552488df6d9dffd0ed489678243656ca6343971ead4416cd9f7c08ea102582269e76a0464c2c63fdb4020321440051ac1b7945bea8d088f7eac591cbf0f71fcfb272c", 0xe1}, {&(0x7f0000002880)="aea157e07dd8f90df7be88e99e3ff3441e1948d898b11d2d9ca0ef738da25c14f3fdae04ad83f9a2bb4c943c0820ecf4f9c1a81509647f4f754798ce7c8e669b0febd50160e7bac89a606abc3c5f51fe82050c7c85cb2f06667cf5df0d0ee6962481e01f247fcbb43ec723afb431585f91f6362f6fd4eacea672a25cd8d0a0c6a5b390abe0eb66d138cda968ed5cea4b1f034cae52622c131a78e9e98f922c79561a7d2c60f930271a4364612bb5b0493e067b9cb2d63d7161ef33ccb04602156d0025c09d2bc041", 0xc8}, {&(0x7f0000002680)="669007f7a8ef50f6f6ed6211941725552edfbceb4e9c9ede8c980ce20ab1cb825f08e7324a6802a6e1c9c2db7368699da8388789fab0ea34d32c3080c9669123cb443b4d80be9f188263d9e50f448e6533457721c4be5c7378b702fd4d428ce9865828b853a41fb8b7e9b0f0dd1e51880da1386ba2d592a90ecce83f0316fe6b1bdc0ab7dd07449b00821db62f6d3f72b1bba1b678fb0dd2e441fc487b68bddd966e1188468da350d1ce52a683", 0xad}], 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="380000008000000088c649cfa3b460a1071e4cfc0d79b5ac52385fc894fde675508f43938d4355fbe11f010000002c14324693d2", @ANYRES32=r4, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32, @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r10], 0x38, 0x24000804}}], 0x2, 0x0) recvmmsg(r14, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.274031896s ago: executing program 4 (id=839): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)}], 0x1) landlock_create_ruleset(&(0x7f00000002c0)={0x2041, 0x2, 0x2}, 0x4b, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x4f, 0xfffffffe}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$ppp(r2, &(0x7f00000001c0)='\x00\x00', 0x2) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f00000000c0)=[{0x2, 0x0, 0x2b, &(0x7f0000000180)="c7c94e40013990f0926ad3d664e8c794777e05f4359f0029bed3734971738c41780135b647940516e3e082"}, {0x2, 0x0, 0x0, 0x0}, {0x4, 0x2810, 0x0, 0x0}], 0x3}) 6.576558496s ago: executing program 0 (id=840): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='block_bio_remap\x00', 0xffffffffffffffff, 0x0, 0x7}, 0xfffffee4) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x5, 0x102}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) pipe(0x0) syz_open_procfs(0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x2) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x10007) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x400}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x15) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.03670431s ago: executing program 1 (id=841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) getgroups(0x1, &(0x7f0000000140)=[0xee00]) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x1, 0x3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x0, 0x1a0, 0x98, 0x298, 0x1a0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) tgkill(0x0, 0x0, 0x21) fcntl$notify(r2, 0x402, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x8, 0x2, 0x8505}, 0x50) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400e7a2b91db08d9e85d510a51f8fee719b682c5c004dc5c03a262adadd4f372c847f709c65692f596c73b5bc22703bb2f67918fa7cbfa2db8d5575bf99cd6d2cb0f576217ceb54341579d97076a5d5c67942bea2d6c676ec0984ed17365afe36d041f02b51fea201000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e001f0000000c00900000000000000000000c0090000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) 5.412447482s ago: executing program 0 (id=842): syz_usb_connect(0x3, 0x190, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x39, 0xcd, 0x2c, 0x40, 0x1371, 0x14, 0x6a1c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x17e, 0x1, 0xf8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x5, 0x2e, 0x3c, 0xa8, 0x0, [], [{{0x9, 0x5, 0x7, 0x3, 0x8, 0x8, 0x7f}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xf8, 0x5, 0x3}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x2, 0x1f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1000}, @generic={0x29, 0xd, "5bdaac37c7d682d8f90ae4dcb7e29ffe58077b34f81a0818258242503438bf336bf7d9a380d560"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x0, 0x5, 0x8, [@generic={0x101, 0x7, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x40, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1}]}}]}}]}}]}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x2c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4, {[@sack={0x5, 0x16, [0x0, 0x2, 0x7fffffff, 0x7, 0x0]}]}}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="2700000014000707030e0000120f11000100f5fe0012ff000000073e8a151f7508bfb4df056439", 0x27) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24004801}, 0x24004010) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbf9, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x24040000) 5.000001073s ago: executing program 4 (id=843): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x3d72, &(0x7f0000000640)={0x0, 0xb43d, 0x4000, 0x9, 0xfefffffd}) r2 = msgget(0x2, 0xda) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(r3, 0xe, &(0x7f0000000300)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) preadv2(r6, &(0x7f0000000140)=[{&(0x7f0000000080)=""/55, 0x37}, {&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f00000004c0)=""/246, 0xf6}], 0x3, 0xe551, 0x7, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/30) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f00000002c0)=0x1, 0x2) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000000007917b0000000000005000000000000009500740000000000355fe6a6c49a8e2a6340725e6d7036b13fe76fab2142a05f361122c59f7ff4863f167bc2eb7041bac27b17b159b9ca9b122592074859ffcea4d12bbbdd7369af1472a68b27101c297e2ad1053bafda3de8669078c2b4006b91d37406"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x3, 0x2060000, 0x0, 0x800, 0x7, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fstat(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000600)=[{0x200000000006, 0x0, 0xfe, 0x5}]}) 4.767965683s ago: executing program 3 (id=844): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) pipe2(0x0, 0x0) listen(0xffffffffffffffff, 0x1ff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x401) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree_skb\x00', r5, 0x0, 0x5}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r6) sendmsg$NET_DM_CMD_START(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x6600, 0x0, 0x40880}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x30}, 0x791}, 0x1c) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000540)={0xc}) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) 3.511964995s ago: executing program 3 (id=845): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x20502, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001c0005090000000000000000000008003a4e301c018b8f4157008562f560e1b2822480b44eb43b222de9d870b1ff9bf0b8365b284327ca279f67c5b39344f49cb03c962e9913899772fbce813c8059c16ba60cb724e0ec8f22edad7e3aa48da9bb5eef32532af4012909c5faf53082a994202e480085b226801dd4172ad559553e32be421284482ef3e627cae5f07e65e1ed3e26b2beebf7741a7c9249ba46ce97f87df841d0fdd7d92d6021cc70ec26d44ec6dce7faf99f274db0f9856db1fe828e4c3010649bd9fe3dbd077c9d46365c6d145f0f04a3551b"], 0x14}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r4, 0x0, 0x0) close_range(0xffffffffffffffff, r4, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) io_setup(0x8, &(0x7f0000004200)) syz_usb_connect(0x5, 0x27, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000003c0)=ANY=[@ANYBLOB="8580f83288e10e4595e465ab000c02000060220100009dd25f46380e1dfe"], 0x0) 3.228068459s ago: executing program 2 (id=846): mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000009}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2981026, 0x0) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x84, &(0x7f0000000040)={[{@none}, {@clone_children}]}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000100)=@nfc={0x27, r2, 0x1, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="03f18ce7ccbc0b47091d3dfee559305f26821d859bf993376bbce384630e625abb4ed0267815ed1833963d3100c602dc1f61839b58af638c094411ccc1769f354fc7fc2b681075a216429810b7a23d5f4c6fa497ce06a7f1ee43591f9c48ec288d3e8198aaaa57d3998a4dd95d86768822d183cda5d24bd335f89e51d0add23042753ffdba4dca54ff855193409f56c70facc9a2", 0x94}], 0x1, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1150}, 0x40005) 2.856563927s ago: executing program 2 (id=847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0xac, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local}, {0x3, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x8, 0x0, @val=0x80}}}}}}}}, 0x36) 2.503713005s ago: executing program 0 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x3d, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1, 0xfc}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="38eaffff", @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.578596342s ago: executing program 4 (id=849): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() prlimit64(r2, 0x1, &(0x7f0000000180)={0x9, 0x9}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x0, @ANYBLOB], 0x50) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xb, &(0x7f00000004c0)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xc9}], 0x0, 0x80009, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x58) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x37, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000ffffff3f18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018460000ffffffff00000000000000008500000003000000185600000b00000000000000000000001858000004000000000000000000000018110000", @ANYRES32, @ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000061424ab76b2967c4bfab671e06be186ea0168b9af0caf050eb6f89eaa3b668b000a9e8a449dc331a0d5ad6a09984761153bd6c3b7453fe415d0164f021272e2899e60525576655d9335ee12596a1aaa20f66a2a6978a1364542c18894c9dcf5941bac1cc97fa73b4bd1d3eb1f87ff28a12ba096c1ec1a4650ef90e707fff980e12af7768ade94f58eb43b405865b89d92160f880937ce882f354618d7b11a11dcf0fdd6e3a9665e9891a6028de11d3ebcdf3e1e6c108b23845312de56b11"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x4000000) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000003c0)=@caif=@dgm={0x25, 0x1}, 0x80, 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "03000100", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", '\x00', "00000000000000000100"]}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) 1.572949744s ago: executing program 1 (id=850): socket$kcm(0x11, 0x4, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000100)=0xa0b0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000500)='coredump_filter\x00') write$6lowpan_enable(r5, &(0x7f0000000140)='0', 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r6 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x7fff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r6, 0xc040564b, &(0x7f0000000040)={0x458000, 0x0, 0x1014, 0x3, 0x2, {0x40, 0x6}, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='GPL\x00'}, 0x30) socket$inet6_sctp(0xa, 0x5, 0x84) 428.288857ms ago: executing program 2 (id=851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc29cc000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r5, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='@', 0x1}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_j1939(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/30, 0x1e}], 0x1}, 0x2140) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="2b0604030308040000000000000000000003000000000001fe8000000000000000000000000000aafe8800b11e9bfe6789b88c0000000001"], 0x38) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 289.50084ms ago: executing program 3 (id=852): syz_open_procfs(0x0, 0x0) io_uring_setup(0x7d0d, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x71}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x580}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x800000000000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 251.469163ms ago: executing program 1 (id=853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a9ac8578bf8011ccb9606da2998936a5ec4899ff961444bf01b91d145a63037b", 0x5, 0x8, 0xfffffffb, 0x7f, 0x0, 0x2, 0x7ff, 0x7f600efd}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a02000000ff00180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1c}, 0x94) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_generic(r0, 0x0, 0xc000) socket$nl_xfrm(0x10, 0x3, 0x6) ftruncate(r1, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYBLOB="c57316e2bb29e7339b32d8bbc82ceb2fc396f61ce023bdf266bae4480fdd2fc4b6d71ec7888aa4362866918c0c679b5f669f2d8282a0a86e19537a0b86403a648bc082902d2781d14018b2bdc4ae0f268efb9ef7f94f4d42534ddf491d5cba6a152813bb953b1f9cdd6d0425e9aae231e16d1d30076caaa2bdf387cf64d52d961dec0e75e7d28aec5f4090b9d7e33beaef58e2e7314db6329270d5e27e8b26a64bb0307bb3dc9d08744036295b405b8e69b366384f9102549aa05cadfb3d1b4586415627c196c9c3c42bb46c8f3a4c6709de0b60c3410811ac248549d22098f62831694b1072ddf34259", @ANYRES64=r0, @ANYRES16=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4044}, 0x24040084) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x64, 0x1a, 0x300, 0x70bd27, 0x25dfdbfb, {0xf}, [@generic="5c3dfc1b0473c28c0a648cda5fba2a3df5c2ad5edacc737c4f391dcbc411094ac87d2dfbfd6126c2ae5851d57edfb90b4c7532fc554e6456310fb4a6d3fc73a04c400aca6f4d943f6377fd0b194308"]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x48000) socket(0x80000000000000a, 0x2, 0x0) 76.545065ms ago: executing program 2 (id=854): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x5f]}}, 0x0, 0x27}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf4000000, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 0s ago: executing program 0 (id=855): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000100)=0x2c) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x40090004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x260}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 192.640127][ T5876] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 192.721331][ T30] audit: type=1400 audit(1768187423.679:1526): avc: denied { write } for pid=8351 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.061035][ T5876] usb 1-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=fb.88 [ 193.070357][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.098100][ T5876] usb 1-1: Product: syz [ 193.204462][ T5876] usb 1-1: Manufacturer: syz [ 193.213835][ T5876] usb 1-1: SerialNumber: syz [ 193.249587][ T5876] usb 1-1: config 0 descriptor?? [ 193.260098][ T30] audit: type=1400 audit(1768187424.279:1527): avc: denied { ioctl } for pid=8351 comm="syz.2.451" path="socket:[16515]" dev="sockfs" ino=16515 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.391633][ T5885] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -110 [ 193.450416][ T5890] usb 4-1: USB disconnect, device number 9 [ 193.514065][ T5876] kaweth 1-1:0.0: Firmware present in device. [ 193.705182][ T5876] kaweth 1-1:0.0: Statistics collection: 0 [ 193.736754][ T5876] kaweth 1-1:0.0: Multicast filter limit: 0 [ 193.744039][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.841148][ T30] audit: type=1400 audit(1768187424.859:1528): avc: denied { append } for pid=8364 comm="syz.2.456" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.984466][ T8372] hub 2-0:1.0: USB hub found [ 193.990593][ T8372] hub 2-0:1.0: 1 port detected [ 194.300893][ T5876] kaweth 1-1:0.0: MTU: 0 [ 194.308471][ T5876] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 194.328114][ T30] audit: type=1400 audit(1768187424.889:1529): avc: denied { open } for pid=8364 comm="syz.2.456" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 194.387294][ T5856] IPVS: starting estimator thread 0... [ 194.721339][ T8375] IPVS: using max 39 ests per chain, 93600 per kthread [ 195.350170][ T30] audit: type=1400 audit(1768187424.889:1530): avc: denied { ioctl } for pid=8364 comm="syz.2.456" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 195.402257][ T8370] netlink: 76 bytes leftover after parsing attributes in process `syz.4.452'. [ 195.454520][ T8370] netlink: 'syz.4.452': attribute type 12 has an invalid length. [ 195.476968][ T30] audit: type=1400 audit(1768187424.889:1531): avc: denied { bind } for pid=8364 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 195.552714][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.457'. [ 195.599917][ T30] audit: type=1400 audit(1768187425.339:1532): avc: denied { execute } for pid=8361 comm="syz.4.452" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 195.629072][ T30] audit: type=1400 audit(1768187425.389:1533): avc: denied { read write } for pid=8364 comm="syz.2.456" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 195.653486][ T5876] kaweth 1-1:0.0: kaweth interface created at eth1 [ 195.736645][ T30] audit: type=1400 audit(1768187426.589:1534): avc: denied { mounton } for pid=8378 comm="syz.3.457" path="/103/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 197.246249][ T5876] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 197.453674][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 197.524342][ T5876] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 197.547125][ T5876] usb 5-1: config 179 has no interface number 0 [ 197.565063][ T5876] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 197.631967][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 198.047138][ T5876] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 198.059715][ T30] audit: type=1400 audit(1768187428.559:1545): avc: denied { add_name } for pid=8395 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.087857][ T5885] usb 1-1: USB disconnect, device number 14 [ 198.095856][ T5876] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 198.154802][ T30] audit: type=1400 audit(1768187428.559:1546): avc: denied { create } for pid=8395 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.285349][ T5876] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 198.297920][ T5876] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 198.311301][ T30] audit: type=1400 audit(1768187428.559:1547): avc: denied { write } for pid=8395 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.337382][ T5876] usb 5-1: config 179 interface 65 has no altsetting 0 [ 198.345327][ T5876] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 198.382851][ T8431] lo speed is unknown, defaulting to 1000 [ 198.390236][ T8431] vxcan1 speed is unknown, defaulting to 1000 [ 198.409623][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.478806][ T8441] netlink: 31 bytes leftover after parsing attributes in process `syz.2.469'. [ 198.497832][ T30] audit: type=1400 audit(1768187428.559:1548): avc: denied { append } for pid=8395 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.896048][ T30] audit: type=1400 audit(1768187429.119:1549): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 198.916842][ T30] audit: type=1400 audit(1768187429.339:1550): avc: denied { remove_name } for pid=8426 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.944549][ T30] audit: type=1400 audit(1768187429.339:1551): avc: denied { unlink } for pid=8426 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.544921][ T30] audit: type=1400 audit(1768187429.389:1552): avc: denied { read write } for pid=8428 comm="syz.3.465" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.687434][ T30] audit: type=1400 audit(1768187429.389:1553): avc: denied { open } for pid=8428 comm="syz.3.465" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.874969][ T30] audit: type=1400 audit(1768187432.889:1554): avc: denied { read write } for pid=8454 comm="syz.0.472" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.899458][ T5885] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 202.187074][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'. [ 202.540706][ T849] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 202.648755][ T5876] usb 5-1: can't set config #179, error -71 [ 202.669858][ T5876] usb 5-1: USB disconnect, device number 13 [ 202.700105][ T849] usb 3-1: device descriptor read/64, error -71 [ 202.756923][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 202.756932][ T30] audit: type=1400 audit(1768187433.769:1585): avc: denied { unlink } for pid=5819 comm="syz-executor" name="file0" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 202.983666][ T8470] openvswitch: netlink: Missing key (keys=2020040, expected=100) [ 203.030165][ T849] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 203.240344][ T849] usb 3-1: device descriptor read/64, error -71 [ 203.362652][ T849] usb usb3-port1: attempt power cycle [ 203.715261][ T30] audit: type=1400 audit(1768187434.729:1586): avc: denied { read append } for pid=8482 comm="syz.4.477" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 203.744386][ T30] audit: type=1400 audit(1768187434.729:1587): avc: denied { open } for pid=8482 comm="syz.4.477" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 203.865176][ T849] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 203.890580][ T849] usb 3-1: device descriptor read/8, error -71 [ 203.962513][ T8488] FAULT_INJECTION: forcing a failure. [ 203.962513][ T8488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.976341][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.4.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.976368][ T8488] Tainted: [L]=SOFTLOCKUP [ 203.976374][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.976386][ T8488] Call Trace: [ 203.976391][ T8488] [ 203.976398][ T8488] dump_stack_lvl+0x16c/0x1f0 [ 203.976427][ T8488] should_fail_ex+0x512/0x640 [ 203.976465][ T8488] _copy_from_user+0x2e/0xd0 [ 203.976493][ T8488] copy_msghdr_from_user+0x98/0x160 [ 203.976515][ T8488] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 203.976541][ T8488] ? __lock_acquire+0x436/0x2890 [ 203.976567][ T8488] ___sys_sendmsg+0xfe/0x1d0 [ 203.976589][ T8488] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.976610][ T8488] ? lock_acquire+0x179/0x330 [ 203.976659][ T8488] __sys_sendmsg+0x16d/0x220 [ 203.976679][ T8488] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.976699][ T8488] ? __pfx___schedule+0x10/0x10 [ 203.976727][ T8488] ? rcu_is_watching+0x12/0xc0 [ 203.976752][ T8488] do_syscall_64+0xcd/0xf80 [ 203.976778][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.976797][ T8488] RIP: 0033:0x7f0922b8f749 [ 203.976811][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.976828][ T8488] RSP: 002b:00007f0923a08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.976847][ T8488] RAX: ffffffffffffffda RBX: 00007f0922de6180 RCX: 00007f0922b8f749 [ 203.976859][ T8488] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 203.976870][ T8488] RBP: 00007f0923a08090 R08: 0000000000000000 R09: 0000000000000000 [ 203.976880][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.976891][ T8488] R13: 00007f0922de6218 R14: 00007f0922de6180 R15: 00007ffe157ca8c8 [ 203.976916][ T8488] [ 204.246800][ T30] audit: type=1400 audit(1768187435.259:1588): avc: denied { block_suspend } for pid=8494 comm="syz.3.480" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.646886][ T849] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 204.713575][ T849] usb 3-1: device descriptor read/8, error -71 [ 205.009484][ T849] usb usb3-port1: unable to enumerate USB device [ 205.792435][ T30] audit: type=1400 audit(1768187436.809:1589): avc: denied { bind } for pid=8510 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.083614][ T30] audit: type=1400 audit(1768187436.829:1590): avc: denied { connect } for pid=8510 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.105723][ T30] audit: type=1400 audit(1768187436.829:1591): avc: denied { write } for pid=8510 comm="syz.2.484" path="socket:[16711]" dev="sockfs" ino=16711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.139600][ T30] audit: type=1400 audit(1768187437.149:1592): avc: denied { read write } for pid=8508 comm="syz.0.483" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 206.139793][ T30] audit: type=1400 audit(1768187437.149:1593): avc: denied { open } for pid=8508 comm="syz.0.483" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 206.167162][ T30] audit: type=1400 audit(1768187437.149:1594): avc: denied { ioctl } for pid=8508 comm="syz.0.483" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 207.477953][ T8537] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 207.488564][ T8537] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 207.547655][ T8535] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 207.559358][ T8535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.568455][ T8535] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 207.634377][ T8537] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 207.645176][ T8537] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 207.658174][ T8537] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 207.668919][ T8537] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 207.681271][ T8537] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 207.691214][ T8537] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 207.700803][ T8537] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 207.918044][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 207.918058][ T30] audit: type=1400 audit(1768187438.319:1596): avc: denied { watch } for pid=8531 comm="syz.1.489" path="/77/file0" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.128826][ T5822] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 208.136831][ T8545] netlink: 36 bytes leftover after parsing attributes in process `syz.2.491'. [ 208.364511][ T30] audit: type=1400 audit(1768187438.319:1597): avc: denied { watch_sb watch_reads } for pid=8531 comm="syz.1.489" path="/77/file0" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 209.138380][ T8544] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 209.146050][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 210.870213][ T30] audit: type=1400 audit(1768187441.849:1598): avc: denied { create } for pid=8578 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 210.933651][ T30] audit: type=1400 audit(1768187441.849:1599): avc: denied { write } for pid=8578 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 211.437187][ T8586] sg_write: process 386 (syz.3.502) changed security contexts after opening file descriptor, this is not allowed. [ 211.743338][ T30] audit: type=1326 audit(1768187442.759:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943678f749 code=0x7ffc0000 [ 211.785451][ T30] audit: type=1326 audit(1768187442.759:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943678f749 code=0x7ffc0000 [ 211.816338][ T30] audit: type=1326 audit(1768187442.789:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f943678f749 code=0x7ffc0000 [ 212.075192][ T30] audit: type=1326 audit(1768187442.789:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943678f749 code=0x7ffc0000 [ 212.142420][ T30] audit: type=1326 audit(1768187442.789:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943678f749 code=0x7ffc0000 [ 212.290368][ T30] audit: type=1326 audit(1768187442.789:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f943678f749 code=0x7ffc0000 [ 212.336463][ T8600] netlink: 256 bytes leftover after parsing attributes in process `syz.4.504'. [ 212.359552][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.504'. [ 212.660131][ T5856] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.800156][ T5856] usb 5-1: device descriptor read/64, error -71 [ 213.259921][ T8606] FAULT_INJECTION: forcing a failure. [ 213.259921][ T8606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.273262][ T8606] CPU: 0 UID: 0 PID: 8606 Comm: syz.0.507 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.273286][ T8606] Tainted: [L]=SOFTLOCKUP [ 213.273290][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.273296][ T8606] Call Trace: [ 213.273301][ T8606] [ 213.273306][ T8606] dump_stack_lvl+0x16c/0x1f0 [ 213.273325][ T8606] should_fail_ex+0x512/0x640 [ 213.273344][ T8606] _copy_to_iter+0x463/0x1710 [ 213.273364][ T8606] ? __pfx__copy_to_iter+0x10/0x10 [ 213.273382][ T8606] ? ipv6_route_seq_next+0xe1/0x7e0 [ 213.273400][ T8606] ? seq_read_iter+0xa7b/0x12d0 [ 213.273415][ T8606] ? seq_read_iter+0xa8d/0x12d0 [ 213.273430][ T8606] seq_read_iter+0xd02/0x12d0 [ 213.273450][ T8606] seq_read+0x3a3/0x570 [ 213.273464][ T8606] ? __pfx_seq_read+0x10/0x10 [ 213.273477][ T8606] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.273492][ T8606] ? irqentry_exit+0x1dd/0x8c0 [ 213.273515][ T8606] ? __pfx_seq_read+0x10/0x10 [ 213.273528][ T8606] proc_reg_read+0x240/0x330 [ 213.273544][ T8606] ? __pfx_proc_reg_read+0x10/0x10 [ 213.273559][ T8606] vfs_read+0x1e4/0xcf0 [ 213.273575][ T8606] ? __pfx_vfs_read+0x10/0x10 [ 213.273587][ T8606] ? find_held_lock+0x2b/0x80 [ 213.273605][ T8606] ? __fget_files+0x204/0x3c0 [ 213.273622][ T8606] ? __fget_files+0x20e/0x3c0 [ 213.273636][ T8606] ? __fget_files+0x110/0x3c0 [ 213.273655][ T8606] __x64_sys_pread64+0x1eb/0x250 [ 213.273670][ T8606] ? __pfx___x64_sys_pread64+0x10/0x10 [ 213.273689][ T8606] do_syscall_64+0xcd/0xf80 [ 213.273704][ T8606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.273715][ T8606] RIP: 0033:0x7f21f8b8f749 [ 213.273725][ T8606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.273735][ T8606] RSP: 002b:00007f21f9a10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 213.273746][ T8606] RAX: ffffffffffffffda RBX: 00007f21f8de6090 RCX: 00007f21f8b8f749 [ 213.273753][ T8606] RDX: 0000000000018ff3 RSI: 000020000001a240 RDI: 0000000000000006 [ 213.273760][ T8606] RBP: 00007f21f9a10090 R08: 0000000000000000 R09: 0000000000000000 [ 213.273766][ T8606] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 213.273772][ T8606] R13: 00007f21f8de6128 R14: 00007f21f8de6090 R15: 00007ffd8fc25c88 [ 213.273786][ T8606] [ 214.095529][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 214.095541][ T30] audit: type=1400 audit(1768187445.109:1634): avc: denied { set_context_mgr } for pid=8601 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 214.150087][ T5856] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 214.223275][ T30] audit: type=1400 audit(1768187445.209:1635): avc: denied { write } for pid=8611 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.310107][ T5856] usb 5-1: device descriptor read/64, error -71 [ 214.440285][ T5856] usb usb5-port1: attempt power cycle [ 214.860146][ T5856] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.892828][ T5856] usb 5-1: device descriptor read/8, error -71 [ 215.750858][ T8630] FAULT_INJECTION: forcing a failure. [ 215.750858][ T8630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.771432][ T5856] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 215.810116][ T8630] CPU: 0 UID: 0 PID: 8630 Comm: syz.3.513 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.810144][ T8630] Tainted: [L]=SOFTLOCKUP [ 215.810149][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.810159][ T8630] Call Trace: [ 215.810165][ T8630] [ 215.810172][ T8630] dump_stack_lvl+0x16c/0x1f0 [ 215.810198][ T8630] should_fail_ex+0x512/0x640 [ 215.810228][ T8630] _copy_from_user+0x2e/0xd0 [ 215.810255][ T8630] copy_msghdr_from_user+0x98/0x160 [ 215.810274][ T8630] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 215.810302][ T8630] ___sys_sendmsg+0xfe/0x1d0 [ 215.810322][ T8630] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.810369][ T8630] __sys_sendmsg+0x16d/0x220 [ 215.810388][ T8630] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.810423][ T8630] do_syscall_64+0xcd/0xf80 [ 215.810448][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.810466][ T8630] RIP: 0033:0x7fc7e118f749 [ 215.810480][ T8630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.810496][ T8630] RSP: 002b:00007fc7e1f7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.810514][ T8630] RAX: ffffffffffffffda RBX: 00007fc7e13e6180 RCX: 00007fc7e118f749 [ 215.810525][ T8630] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 215.810535][ T8630] RBP: 00007fc7e1f7d090 R08: 0000000000000000 R09: 0000000000000000 [ 215.810545][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.810555][ T8630] R13: 00007fc7e13e6218 R14: 00007fc7e13e6180 R15: 00007fff81d289b8 [ 215.810578][ T8630] [ 215.981942][ T5856] usb 5-1: device descriptor read/8, error -71 [ 216.126427][ T5856] usb usb5-port1: unable to enumerate USB device [ 217.946823][ T30] audit: type=1400 audit(1768187448.839:1636): avc: denied { unlink } for pid=8631 comm="syz.0.508" name="#8" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 218.092225][ T30] audit: type=1400 audit(1768187448.839:1637): avc: denied { mount } for pid=8631 comm="syz.0.508" name="/" dev="overlay" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 218.672046][ T30] audit: type=1400 audit(1768187449.669:1638): avc: denied { write } for pid=8646 comm="syz.2.515" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 219.057927][ T30] audit: type=1400 audit(1768187449.929:1639): avc: denied { create } for pid=8646 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 219.100862][ T8646] delete_channel: no stack [ 219.137592][ T30] audit: type=1400 audit(1768187449.929:1640): avc: denied { create } for pid=8646 comm="syz.2.515" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 219.200142][ T30] audit: type=1400 audit(1768187450.129:1641): avc: denied { ioctl } for pid=8657 comm="syz.1.520" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 219.297905][ T30] audit: type=1400 audit(1768187450.179:1642): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 219.974961][ T30] audit: type=1400 audit(1768187450.979:1643): avc: denied { append } for pid=8673 comm="syz.0.525" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 220.180732][ T8678] input: syz1 as /devices/virtual/input/input12 [ 220.812158][ T30] audit: type=1400 audit(1768187451.829:1644): avc: denied { write } for pid=8680 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.040481][ T8686] lo speed is unknown, defaulting to 1000 [ 221.046892][ T8686] vxcan1 speed is unknown, defaulting to 1000 [ 221.220089][ T5876] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 221.464738][ T5876] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 221.537563][ T5876] usb 3-1: config 0 has no interface number 0 [ 221.604105][ T5876] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.620095][ T5876] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.659063][ T5876] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 221.675270][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.695668][ T5876] usb 3-1: Product: syz [ 221.699850][ T5876] usb 3-1: Manufacturer: syz [ 221.714910][ T5876] usb 3-1: SerialNumber: syz [ 222.336951][ T8700] input: syz1 as /devices/virtual/input/input14 [ 222.344908][ T8700] FAULT_INJECTION: forcing a failure. [ 222.344908][ T8700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.358131][ T8700] CPU: 0 UID: 0 PID: 8700 Comm: syz.3.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.358148][ T8700] Tainted: [L]=SOFTLOCKUP [ 222.358152][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.358159][ T8700] Call Trace: [ 222.358163][ T8700] [ 222.358167][ T8700] dump_stack_lvl+0x16c/0x1f0 [ 222.358185][ T8700] should_fail_ex+0x512/0x640 [ 222.358204][ T8700] _copy_to_user+0x32/0xd0 [ 222.358222][ T8700] simple_read_from_buffer+0xcb/0x170 [ 222.358239][ T8700] proc_fail_nth_read+0x197/0x240 [ 222.358251][ T8700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.358263][ T8700] ? rw_verify_area+0xcf/0x6c0 [ 222.358275][ T8700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.358286][ T8700] vfs_read+0x1e4/0xcf0 [ 222.358300][ T8700] ? __pfx___mutex_lock+0x10/0x10 [ 222.358317][ T8700] ? __pfx_vfs_read+0x10/0x10 [ 222.358334][ T8700] ? __fget_files+0x20e/0x3c0 [ 222.358353][ T8700] ksys_read+0x12a/0x250 [ 222.358366][ T8700] ? __pfx_ksys_read+0x10/0x10 [ 222.358383][ T8700] do_syscall_64+0xcd/0xf80 [ 222.358400][ T8700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.358411][ T8700] RIP: 0033:0x7fc7e118e15c [ 222.358420][ T8700] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.358431][ T8700] RSP: 002b:00007fc7e1fbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.358441][ T8700] RAX: ffffffffffffffda RBX: 00007fc7e13e5fa0 RCX: 00007fc7e118e15c [ 222.358448][ T8700] RDX: 000000000000000f RSI: 00007fc7e1fbf0a0 RDI: 0000000000000007 [ 222.358454][ T8700] RBP: 00007fc7e1fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 222.358460][ T8700] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.358466][ T8700] R13: 00007fc7e13e6038 R14: 00007fc7e13e5fa0 R15: 00007fff81d289b8 [ 222.358480][ T8700] [ 222.544115][ T5869] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 222.544390][ T5885] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 222.710091][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 222.710137][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 222.715275][ T5876] usb 3-1: config 0 descriptor?? [ 222.727278][ T5885] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 222.740865][ T5885] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 222.753814][ T5885] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.765522][ T5876] yurex 3-1:0.50: Could not submitting URB [ 222.772768][ T5876] yurex 3-1:0.50: probe with driver yurex failed with error -5 [ 222.773359][ T5869] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.783228][ T5885] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 222.807419][ T5885] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 222.816712][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.842315][ T5885] usb 5-1: Product: syz [ 222.846480][ T5885] usb 5-1: Manufacturer: syz [ 222.848072][ T5869] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.870487][ T5885] usb 5-1: SerialNumber: syz [ 222.877930][ T5869] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 222.887291][ T5869] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 222.891769][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 222.907313][ T5869] usb 1-1: Product: syz [ 222.917417][ T5869] usb 1-1: Manufacturer: syz [ 222.925786][ T5885] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input15 [ 222.937415][ T5869] hub 1-1:4.0: USB hub found [ 222.975125][ T6354] usb 3-1: USB disconnect, device number 10 [ 223.111160][ T5885] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 223.129868][ T5885] (id 0x00) [ 223.138685][ T5869] hub 1-1:4.0: 2 ports detected [ 223.222949][ T30] audit: type=1400 audit(1768187454.239:1645): avc: denied { read } for pid=8693 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.250552][ T5885] rc_core: IR keymap rc-imon-pad not found [ 223.256674][ T5885] Registered IR keymap rc-empty [ 223.264622][ T5885] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 223.290299][ T30] audit: type=1400 audit(1768187454.289:1646): avc: denied { write } for pid=8693 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.324551][ T5885] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 223.364157][ T5885] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 223.380521][ T5885] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input16 [ 223.410178][ T5885] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:18> initialized [ 223.580978][ T8695] imon:vfd_write: invalid payload size [ 223.783917][ T30] audit: type=1326 audit(1768187454.799:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 223.939380][ T5885] usb 5-1: USB disconnect, device number 18 [ 223.959820][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.970533][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.983453][ T30] audit: type=1326 audit(1768187454.819:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 224.048632][ T30] audit: type=1326 audit(1768187454.819:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 224.161247][ T8719] evm: overlay not supported [ 224.500803][ T5869] hub 1-1:4.0: activate --> -90 [ 224.936480][ T5869] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 224.944338][ T6354] usb 1-1: USB disconnect, device number 16 [ 224.958104][ T5869] hub_port_connect: 16 callbacks suppressed [ 224.958121][ T5869] usb 1-1-port2: connect-debounce failed [ 225.143397][ T30] audit: type=1400 audit(1768187456.159:1666): avc: denied { mounton } for pid=8746 comm="syz.3.542" path="/121/file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 225.183017][ T8743] netlink: 300 bytes leftover after parsing attributes in process `syz.2.540'. [ 225.410158][ T5856] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 225.561761][ T5856] usb 5-1: not running at top speed; connect to a high speed hub [ 225.572740][ T5856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.007350][ T5856] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 226.016844][ T5856] usb 5-1: config 1 has no interface number 1 [ 226.023019][ T5856] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 226.036671][ T5856] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.170085][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.232933][ T5856] usb 5-1: Product: syz [ 226.253558][ T5856] usb 5-1: Manufacturer: syz [ 226.278396][ T5856] usb 5-1: SerialNumber: syz [ 226.540130][ T30] audit: type=1400 audit(1768187457.529:1667): avc: denied { create } for pid=8761 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 226.594344][ T30] audit: type=1400 audit(1768187457.599:1668): avc: denied { getopt } for pid=8761 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 226.617613][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.631002][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.812134][ T30] audit: type=1400 audit(1768187457.819:1669): avc: denied { connect } for pid=8747 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.891061][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.930218][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.179800][ T5822] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 227.373481][ T5885] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 227.518765][ T8770] Cannot find add_set index 0 as target [ 227.590097][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 227.607828][ T30] audit: type=1400 audit(1768187458.509:1670): avc: denied { write } for pid=8767 comm="syz.2.549" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 227.803141][ T5885] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 227.811481][ T5885] usb 1-1: config 0 has no interface number 0 [ 227.817728][ T5885] usb 1-1: config 0 interface 84 altsetting 246 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 227.830332][ T5885] usb 1-1: config 0 interface 84 altsetting 246 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 227.842962][ T5885] usb 1-1: config 0 interface 84 altsetting 246 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 227.855161][ T5885] usb 1-1: config 0 interface 84 altsetting 246 endpoint 0xE has invalid wMaxPacketSize 0 [ 227.865428][ T5885] usb 1-1: config 0 interface 84 has no altsetting 0 [ 227.875093][ T5885] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 227.884398][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.892670][ T5885] usb 1-1: Product: syz [ 227.897138][ T5885] usb 1-1: Manufacturer: syz [ 227.903771][ T5885] usb 1-1: SerialNumber: syz [ 227.910774][ T5885] usb 1-1: config 0 descriptor?? [ 227.947177][ T5856] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 227.968598][ T5856] usb 5-1: USB disconnect, device number 19 [ 228.002225][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.123137][ T8777] FAULT_INJECTION: forcing a failure. [ 228.123137][ T8777] name failslab, interval 1, probability 0, space 0, times 0 [ 228.136943][ T8777] CPU: 1 UID: 0 PID: 8777 Comm: syz.1.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.136969][ T8777] Tainted: [L]=SOFTLOCKUP [ 228.136976][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.136986][ T8777] Call Trace: [ 228.136992][ T8777] [ 228.136999][ T8777] dump_stack_lvl+0x16c/0x1f0 [ 228.137027][ T8777] should_fail_ex+0x512/0x640 [ 228.137053][ T8777] ? fs_reclaim_acquire+0xae/0x150 [ 228.137080][ T8777] should_failslab+0xc2/0x120 [ 228.137105][ T8777] __kmalloc_noprof+0xeb/0x910 [ 228.137134][ T8777] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 228.137165][ T8777] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 228.137189][ T8777] tomoyo_realpath_from_path+0xc2/0x6e0 [ 228.137216][ T8777] ? tomoyo_profile+0x47/0x60 [ 228.137246][ T8777] tomoyo_path_number_perm+0x245/0x580 [ 228.137266][ T8777] ? tomoyo_path_number_perm+0x237/0x580 [ 228.137294][ T8777] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 228.137317][ T8777] ? find_held_lock+0x2b/0x80 [ 228.137366][ T8777] ? find_held_lock+0x2b/0x80 [ 228.137393][ T8777] ? hook_file_ioctl_common+0x144/0x410 [ 228.137426][ T8777] ? __fget_files+0x20e/0x3c0 [ 228.137455][ T8777] security_file_ioctl+0x9b/0x240 [ 228.137481][ T8777] __x64_sys_ioctl+0xb7/0x210 [ 228.137504][ T8777] do_syscall_64+0xcd/0xf80 [ 228.137530][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.137548][ T8777] RIP: 0033:0x7f386b18f749 [ 228.137562][ T8777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.137578][ T8777] RSP: 002b:00007f386c019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.137596][ T8777] RAX: ffffffffffffffda RBX: 00007f386b3e5fa0 RCX: 00007f386b18f749 [ 228.137608][ T8777] RDX: 0000000000000000 RSI: 0000000080049367 RDI: 0000000000000003 [ 228.137618][ T8777] RBP: 00007f386c019090 R08: 0000000000000000 R09: 0000000000000000 [ 228.137628][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.137638][ T8777] R13: 00007f386b3e6038 R14: 00007f386b3e5fa0 R15: 00007ffc4a713748 [ 228.137664][ T8777] [ 228.137670][ T8777] ERROR: Out of memory at tomoyo_realpath_from_path. [ 228.296996][ T5885] comedi comedi5: Endpoint has wrong direction [ 228.368785][ T5885] dt9812 1-1:0.84: driver 'dt9812' failed to auto-configure device. [ 228.389211][ T30] audit: type=1400 audit(1768187459.399:1671): avc: denied { ioctl } for pid=8776 comm="syz.1.551" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.428375][ T5885] usb 1-1: USB disconnect, device number 17 [ 228.600740][ T30] audit: type=1400 audit(1768187459.619:1672): avc: denied { mounton } for pid=8790 comm="syz.2.556" path="/120/file0/bus" dev="ramfs" ino=18141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 228.626252][ T8791] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 228.633903][ T8791] overlayfs: failed to set xattr on upper [ 228.639618][ T8791] overlayfs: ...falling back to redirect_dir=nofollow. [ 228.647365][ T8791] overlayfs: ...falling back to index=off. [ 228.780086][ T5885] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 228.841486][ T8791] overlayfs: ...falling back to uuid=null. [ 228.877841][ T30] audit: type=1400 audit(1768187459.759:1673): avc: denied { ioctl } for pid=8788 comm="syz.3.555" path="socket:[18151]" dev="sockfs" ino=18151 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.014551][ T30] audit: type=1400 audit(1768187459.889:1674): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 229.116817][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 229.126605][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 229.145405][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 229.158152][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 229.168053][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 229.181776][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.473947][ T8809] SELinux: Context Ü is not valid (left unmapped). [ 229.498619][ T5885] usb 2-1: config 0 descriptor?? [ 229.707105][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 229.716319][ T8786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'. [ 229.728297][ T5885] hdpvr 2-1:0.0: firmware version 0x0 dated [ 229.737626][ T5885] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 229.928763][ T5885] hdpvr 2-1:0.0: device init failed [ 229.938059][ T5885] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 230.050797][ T8826] Cannot find del_set index 4 as target [ 230.437502][ T5885] usb 2-1: USB disconnect, device number 14 [ 231.231762][ T5822] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 231.246917][ T5822] Bluetooth: hci0: Injecting HCI hardware error event [ 231.270954][ T5822] Bluetooth: hci0: hardware error 0x00 [ 232.495719][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 232.590146][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 233.852881][ T5822] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 234.040397][ T6354] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 234.320312][ T6354] usb 5-1: Using ep0 maxpacket: 16 [ 234.322576][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.328453][ T6354] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 234.343204][ T6354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.352321][ T6354] usb 5-1: Product: syz [ 234.356523][ T6354] usb 5-1: Manufacturer: syz [ 234.361851][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.386061][ T6354] usb 5-1: SerialNumber: syz [ 234.416676][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.426933][ T6354] usb 5-1: config 0 descriptor?? [ 234.446888][ T6354] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 234.455797][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.540156][ T6060] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 234.660930][ T6354] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 234.693815][ T6060] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.706216][ T6354] usb 5-1: USB disconnect, device number 20 [ 234.712331][ T6060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.740073][ T6060] usb 4-1: Product: syz [ 234.745044][ T6060] usb 4-1: Manufacturer: syz [ 234.749763][ T6060] usb 4-1: SerialNumber: syz [ 235.053848][ T6060] cdc_ncm 4-1:1.0: bind() failure [ 235.127942][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 235.285770][ T30] audit: type=1400 audit(1768187722.143:1681): avc: denied { bind } for pid=8883 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.552271][ T30] audit: type=1400 audit(1768187722.143:1682): avc: denied { listen } for pid=8883 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.558350][ T6060] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 235.572328][ T30] audit: type=1400 audit(1768187722.163:1683): avc: denied { write } for pid=8883 comm="syz.2.576" path="socket:[18315]" dev="sockfs" ino=18315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.660668][ T30] audit: type=1400 audit(1768187722.163:1684): avc: denied { ioctl } for pid=8883 comm="syz.2.576" path="socket:[18315]" dev="sockfs" ino=18315 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.670247][ T6060] cdc_ncm 4-1:1.1: bind() failure [ 235.841496][ T30] audit: type=1400 audit(1768187722.163:1685): avc: denied { read } for pid=8883 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.857884][ T6060] usb 4-1: USB disconnect, device number 10 [ 235.874789][ T8892] mmap: syz.4.580 (8892) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 235.939818][ T30] audit: type=1400 audit(1768187722.853:1686): avc: denied { read } for pid=8890 comm="syz.2.579" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 236.360097][ T30] audit: type=1400 audit(1768187722.853:1687): avc: denied { open } for pid=8890 comm="syz.2.579" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 236.425338][ T30] audit: type=1400 audit(1768187722.903:1688): avc: denied { map } for pid=8890 comm="syz.2.579" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 236.664477][ T8893] gre1: entered promiscuous mode [ 236.672002][ T30] audit: type=1400 audit(1768187723.693:1689): avc: denied { write } for pid=8901 comm="syz.1.583" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 236.706677][ T30] audit: type=1400 audit(1768187723.693:1690): avc: denied { open } for pid=8901 comm="syz.1.583" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 237.702497][ T5885] lo speed is unknown, defaulting to 1000 [ 237.708344][ T5885] syz: Port: 1 Link DOWN [ 238.782926][ T8925] IPv6: sit1: Disabled Multicast RS [ 238.798206][ T8925] sit1: entered allmulticast mode [ 240.251647][ T8947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.592'. [ 240.262989][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 240.263001][ T30] audit: type=1400 audit(1768187727.273:1692): avc: denied { write } for pid=8945 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 240.640177][ T6060] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 240.981465][ T6060] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 241.001724][ T6060] usb 1-1: config 0 has no interface number 0 [ 241.021159][ T6060] usb 1-1: too many endpoints for config 0 interface 116 altsetting 117: 109, using maximum allowed: 30 [ 241.047672][ T6060] usb 1-1: config 0 interface 116 altsetting 117 has 0 endpoint descriptors, different from the interface descriptor's value: 109 [ 241.077563][ T30] audit: type=1400 audit(1768187728.093:1693): avc: denied { write } for pid=8968 comm="syz.3.597" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 241.086305][ T6060] usb 1-1: config 0 interface 116 has no altsetting 0 [ 241.199858][ T6060] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 241.200946][ T30] audit: type=1400 audit(1768187728.123:1694): avc: denied { open } for pid=8968 comm="syz.3.597" path="/130/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 241.236257][ T6060] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.273590][ T6060] usb 1-1: config 0 descriptor?? [ 241.287935][ T30] audit: type=1400 audit(1768187728.133:1695): avc: denied { ioctl } for pid=8968 comm="syz.3.597" path="/130/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 241.499409][ T30] audit: type=1400 audit(1768187728.513:1696): avc: denied { name_connect } for pid=8974 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 241.501688][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 241.545238][ T6060] usb 1-1: string descriptor 0 read error: -71 [ 241.566150][ T6060] usb 1-1: Cannot read MAC address [ 241.581930][ T6060] MOSCHIP usb-ethernet driver 1-1:0.116: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 241.605418][ T6060] usb 1-1: USB disconnect, device number 18 [ 241.630254][ T5890] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 241.830495][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 241.907594][ T5890] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 241.963149][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.983118][ T5890] usb 2-1: Product: syz [ 241.991408][ T5890] usb 2-1: Manufacturer: syz [ 241.998888][ T5890] usb 2-1: SerialNumber: syz [ 242.014861][ T5890] usb 2-1: config 0 descriptor?? [ 242.425273][ T5890] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 242.453543][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.479097][ T8989] autofs: Unknown parameter 'À' [ 242.480769][ T5890] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 242.510215][ T5890] usb 2-1: media controller created [ 242.522898][ T8989] syzkaller0: entered promiscuous mode [ 242.525431][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.528480][ T8989] syzkaller0: entered allmulticast mode [ 242.650932][ T30] audit: type=1400 audit(1768187729.673:1697): avc: denied { ioctl } for pid=8990 comm="syz.0.602" path="socket:[19550]" dev="sockfs" ino=19550 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.676274][ T5876] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 242.850119][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 242.861343][ T5876] usb 3-1: config 6 has an invalid interface number: 195 but max is 0 [ 242.881681][ T5876] usb 3-1: config 6 has no interface number 0 [ 242.906545][ T5876] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b8.a1 [ 242.925830][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.956106][ T5876] usb 3-1: Product: syz [ 242.960315][ T5876] usb 3-1: Manufacturer: syz [ 242.965024][ T5876] usb 3-1: SerialNumber: syz [ 243.111362][ T8973] dtv5100: wlen = d4, aborting. [ 243.154639][ T30] audit: type=1400 audit(1768187730.023:1698): avc: denied { map } for pid=8972 comm="syz.1.598" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 243.196349][ T5890] zl10353_read_register: readreg error (reg=127, ret==0) [ 243.204000][ T5890] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 243.212014][ T5890] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 243.230398][ T30] audit: type=1400 audit(1768187730.023:1699): avc: denied { execute } for pid=8972 comm="syz.1.598" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 243.267511][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.280399][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.304142][ T5876] snd-usb-audio 3-1:6.195: probe with driver snd-usb-audio failed with error -71 [ 243.342759][ T5876] usb 3-1: USB disconnect, device number 11 [ 244.059799][ T9007] FAULT_INJECTION: forcing a failure. [ 244.059799][ T9007] name failslab, interval 1, probability 0, space 0, times 0 [ 244.072600][ T9007] CPU: 1 UID: 0 PID: 9007 Comm: syz.2.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.072627][ T9007] Tainted: [L]=SOFTLOCKUP [ 244.072633][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.072644][ T9007] Call Trace: [ 244.072650][ T9007] [ 244.072657][ T9007] dump_stack_lvl+0x16c/0x1f0 [ 244.072685][ T9007] should_fail_ex+0x512/0x640 [ 244.072712][ T9007] ? fs_reclaim_acquire+0xae/0x150 [ 244.072739][ T9007] should_failslab+0xc2/0x120 [ 244.072762][ T9007] __kmalloc_noprof+0xeb/0x910 [ 244.072791][ T9007] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 244.072822][ T9007] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 244.072846][ T9007] tomoyo_realpath_from_path+0xc2/0x6e0 [ 244.072873][ T9007] ? tomoyo_profile+0x47/0x60 [ 244.072903][ T9007] tomoyo_path_number_perm+0x245/0x580 [ 244.072923][ T9007] ? tomoyo_path_number_perm+0x237/0x580 [ 244.072947][ T9007] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.072969][ T9007] ? preempt_schedule_common+0x44/0xc0 [ 244.073016][ T9007] ? find_held_lock+0x2b/0x80 [ 244.073042][ T9007] ? hook_file_ioctl_common+0x144/0x410 [ 244.073076][ T9007] ? __fget_files+0x20e/0x3c0 [ 244.073106][ T9007] security_file_ioctl+0x9b/0x240 [ 244.073132][ T9007] __x64_sys_ioctl+0xb7/0x210 [ 244.073155][ T9007] do_syscall_64+0xcd/0xf80 [ 244.073186][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.073204][ T9007] RIP: 0033:0x7f943678f749 [ 244.073219][ T9007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.073236][ T9007] RSP: 002b:00007f94349b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.073254][ T9007] RAX: ffffffffffffffda RBX: 00007f94369e6180 RCX: 00007f943678f749 [ 244.073266][ T9007] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000008 [ 244.073277][ T9007] RBP: 00007f94349b4090 R08: 0000000000000000 R09: 0000000000000000 [ 244.073287][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.073298][ T9007] R13: 00007f94369e6218 R14: 00007f94369e6180 R15: 00007ffdd9a18708 [ 244.073324][ T9007] [ 244.073354][ T9007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.431346][ T5876] usb 2-1: USB disconnect, device number 15 [ 244.464044][ T5876] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 245.613821][ T30] audit: type=1400 audit(1768187732.263:1700): avc: denied { getopt } for pid=9012 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 245.687650][ T30] audit: type=1400 audit(1768187732.273:1701): avc: denied { mount } for pid=9012 comm="syz.2.608" name="/" dev="ocfs2_dlmfs" ino=18590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 245.724386][ T9029] netlink: 'syz.4.610': attribute type 12 has an invalid length. [ 245.732196][ T9029] netlink: 'syz.4.610': attribute type 29 has an invalid length. [ 245.740099][ T9029] netlink: 148 bytes leftover after parsing attributes in process `syz.4.610'. [ 245.749461][ T9029] netlink: 43 bytes leftover after parsing attributes in process `syz.4.610'. [ 245.758410][ T30] audit: type=1326 audit(1768187732.683:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.4.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 245.785129][ T30] audit: type=1326 audit(1768187732.683:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.4.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 245.872277][ T9031] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001 [ 245.951565][ T30] audit: type=1326 audit(1768187732.943:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.4.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 246.039689][ T30] audit: type=1326 audit(1768187732.973:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.4.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 246.126949][ T9037] xt_hashlimit: overflow, try lower: 3/0 [ 246.146815][ T30] audit: type=1400 audit(1768187733.143:1706): avc: denied { append } for pid=9035 comm="syz.0.613" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 246.327609][ T30] audit: type=1400 audit(1768187733.343:1707): avc: denied { accept } for pid=9034 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 246.530295][ T9045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9045 comm=syz.1.614 [ 246.961318][ T30] audit: type=1400 audit(1768187733.983:1708): avc: denied { read } for pid=9055 comm="syz.4.619" name="file0" dev="fuse" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 246.998051][ T30] audit: type=1400 audit(1768187734.003:1709): avc: denied { open } for pid=9055 comm="syz.4.619" path="/115/file0/file0" dev="fuse" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 247.026606][ T9057] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 247.050323][ T9057] block device autoloading is deprecated and will be removed. [ 247.052251][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.065307][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.142182][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 247.156695][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 247.194579][ T9054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.204809][ T9054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.231599][ T9054] veth1_vlan: left allmulticast mode [ 247.272034][ T5890] vxcan1 speed is unknown, defaulting to 1000 [ 247.278725][ T5890] syz1: Port: 1 Link DOWN [ 247.287055][ T4145] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.309739][ T6354] vxcan1 speed is unknown, defaulting to 1000 [ 247.316063][ T4145] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.330215][ T4145] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.340195][ T4145] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.472539][ T9066] lo speed is unknown, defaulting to 1000 [ 247.491667][ T9066] vxcan1 speed is unknown, defaulting to 1000 [ 248.262831][ T6354] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 248.488427][ T6354] usb 5-1: config 0 has no interfaces? [ 248.538405][ T6354] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 248.592336][ T6354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.632357][ T6354] usb 5-1: Product: syz [ 248.644376][ T6354] usb 5-1: Manufacturer: syz [ 248.672334][ T6354] usb 5-1: SerialNumber: syz [ 248.703618][ T6354] usb 5-1: config 0 descriptor?? [ 248.849294][ T9085] netlink: 'syz.0.628': attribute type 12 has an invalid length. [ 248.857764][ T9085] netlink: 'syz.0.628': attribute type 29 has an invalid length. [ 248.866377][ T9085] netlink: 148 bytes leftover after parsing attributes in process `syz.0.628'. [ 249.002994][ T9085] netlink: 43 bytes leftover after parsing attributes in process `syz.0.628'. [ 249.028408][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.080444][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.701020][ T9066] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.767034][ T849] usb 5-1: USB disconnect, device number 21 [ 250.669032][ T9099] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 250.836062][ T9099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.881543][ T9104] mmap: syz.4.632 (9104): VmData 21090304 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 250.986401][ T9102] bond2: (slave veth3): Enslaving as an active interface with a down link [ 251.128468][ T9103] vlan2: entered allmulticast mode [ 251.599864][ T9103] veth1: entered allmulticast mode [ 251.635239][ T9103] bond2: (slave vlan2): Opening slave failed [ 251.755695][ T9109] tipc: Started in network mode [ 251.760622][ T9109] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 251.769961][ T9109] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 251.778423][ T9109] tipc: Enabled bearer , priority 10 [ 251.982651][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 251.982665][ T30] audit: type=1400 audit(1768187739.003:1731): avc: denied { ioctl } for pid=9116 comm="syz.2.636" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 252.014749][ T9117] serio: Serial port pty25 [ 252.041433][ T9119] ./cgroup: Can't lookup blockdev [ 252.275309][ T30] audit: type=1400 audit(1768187739.193:1732): avc: denied { shutdown } for pid=9118 comm="syz.0.637" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.357166][ T30] audit: type=1400 audit(1768187739.193:1733): avc: denied { read } for pid=9118 comm="syz.0.637" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.610935][ T30] audit: type=1400 audit(1768187739.413:1734): avc: denied { link } for pid=9120 comm="syz.4.638" name="#10" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 252.637241][ T30] audit: type=1400 audit(1768187739.413:1735): avc: denied { rename } for pid=9120 comm="syz.4.638" name="#11" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 254.468284][ T6354] tipc: Node number set to 1 [ 254.476585][ T9139] IPv6: sit1: Disabled Multicast RS [ 254.482305][ T9139] sit1: entered allmulticast mode [ 254.888556][ T9161] tipc: Enabling of bearer rejected, failed to enable media [ 254.993175][ T10] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 255.448091][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.465884][ T9163] tipc: Enabled bearer , priority 10 [ 255.571521][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 255.596836][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.620087][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 255.679499][ T9179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.646'. [ 255.728073][ T10] usb 5-1: config 1 has no interface number 1 [ 255.895017][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 255.923834][ T9183] FAULT_INJECTION: forcing a failure. [ 255.923834][ T9183] name failslab, interval 1, probability 0, space 0, times 0 [ 255.936541][ T9183] CPU: 0 UID: 0 PID: 9183 Comm: syz.0.648 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.936567][ T9183] Tainted: [L]=SOFTLOCKUP [ 255.936573][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.936583][ T9183] Call Trace: [ 255.936589][ T9183] [ 255.936595][ T9183] dump_stack_lvl+0x16c/0x1f0 [ 255.936624][ T9183] should_fail_ex+0x512/0x640 [ 255.936651][ T9183] ? kmem_cache_alloc_noprof+0x62/0x770 [ 255.936672][ T9183] should_failslab+0xc2/0x120 [ 255.936695][ T9183] kmem_cache_alloc_noprof+0x83/0x770 [ 255.936711][ T9183] ? find_held_lock+0x2b/0x80 [ 255.936738][ T9183] ? fuse_request_alloc+0x22/0x200 [ 255.936763][ T9183] ? fuse_request_alloc+0x22/0x200 [ 255.936781][ T9183] fuse_request_alloc+0x22/0x200 [ 255.936801][ T9183] fuse_get_req+0x748/0xff0 [ 255.936826][ T9183] ? __pfx_fuse_get_req+0x10/0x10 [ 255.936857][ T9183] ? __pfx___might_resched+0x10/0x10 [ 255.936876][ T9183] ? find_held_lock+0x2b/0x80 [ 255.936905][ T9183] __fuse_simple_request+0xb5/0xe20 [ 255.936932][ T9183] fuse_do_getattr+0x281/0x540 [ 255.936959][ T9183] ? process_measurement+0x1e6/0x22d0 [ 255.936983][ T9183] ? __pfx_fuse_do_getattr+0x10/0x10 [ 255.937012][ T9183] ? __lock_acquire+0x436/0x2890 [ 255.937053][ T9183] ? lockref_get_not_dead+0x6a/0x80 [ 255.937080][ T9183] ? find_held_lock+0x2b/0x80 [ 255.937108][ T9183] fuse_permission+0x4eb/0x670 [ 255.937127][ T9183] ? __pfx_fuse_permission+0x10/0x10 [ 255.937144][ T9183] inode_permission+0x400/0x640 [ 255.937167][ T9183] link_path_walk+0x1518/0x1c70 [ 255.937198][ T9183] path_lookupat+0x74/0xc40 [ 255.937219][ T9183] ? do_raw_spin_lock+0x12c/0x2b0 [ 255.937246][ T9183] filename_lookup+0x224/0x5f0 [ 255.937271][ T9183] ? __pfx_filename_lookup+0x10/0x10 [ 255.937292][ T9183] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.937344][ T9183] vfs_statx+0x101/0x3f0 [ 255.937372][ T9183] ? __pfx_vfs_statx+0x10/0x10 [ 255.937405][ T9183] do_statx+0xef/0x170 [ 255.937425][ T9183] ? __pfx_do_statx+0x10/0x10 [ 255.937440][ T9183] ? __might_fault+0xe3/0x190 [ 255.937470][ T9183] ? getname_flags.part.0+0x1c5/0x550 [ 255.937491][ T9183] ? getname_flags+0x9b/0xf0 [ 255.937515][ T9183] __x64_sys_statx+0x136/0x1e0 [ 255.937536][ T9183] do_syscall_64+0xcd/0xf80 [ 255.937562][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.937579][ T9183] RIP: 0033:0x7f21f8b8f749 [ 255.937593][ T9183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.937610][ T9183] RSP: 002b:00007f21f9a31038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 255.937627][ T9183] RAX: ffffffffffffffda RBX: 00007f21f8de5fa0 RCX: 00007f21f8b8f749 [ 255.937638][ T9183] RDX: 0000000000001000 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 255.937649][ T9183] RBP: 00007f21f9a31090 R08: 0000000000000000 R09: 0000000000000000 [ 255.937659][ T9183] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 255.937669][ T9183] R13: 00007f21f8de6038 R14: 00007f21f8de5fa0 R15: 00007ffd8fc25c88 [ 255.937693][ T9183] [ 256.278277][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.287359][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.295498][ T10] usb 5-1: Product: syz [ 256.299630][ T10] usb 5-1: Manufacturer: syz [ 256.304327][ T10] usb 5-1: SerialNumber: syz [ 256.344744][ T30] audit: type=1400 audit(1768187743.283:1736): avc: denied { bind } for pid=9186 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.385978][ T9191] misc userio: Invalid payload size [ 256.418937][ T30] audit: type=1400 audit(1768187743.403:1737): avc: denied { ioctl } for pid=9182 comm="syz.0.648" path="socket:[19002]" dev="sockfs" ino=19002 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 256.575391][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.605907][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.257980][ T9214] siw: device registration error -23 [ 257.643685][ T5890] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 257.936753][ T30] audit: type=1400 audit(1768187744.333:1738): avc: denied { bind } for pid=9210 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.083331][ T9221] netlink: 'syz.0.656': attribute type 13 has an invalid length. [ 258.091213][ T30] audit: type=1400 audit(1768187744.333:1739): avc: denied { name_bind } for pid=9210 comm="syz.1.654" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 258.175169][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.411734][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.436402][ T30] audit: type=1400 audit(1768187744.333:1740): avc: denied { node_bind } for pid=9210 comm="syz.1.654" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 258.464445][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.476320][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.526243][ T5890] usb 2-1: Product: syz [ 258.535029][ T30] audit: type=1400 audit(1768187744.333:1741): avc: denied { connect } for pid=9210 comm="syz.1.654" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.558689][ T5890] usb 2-1: Manufacturer: syz [ 258.565962][ T5890] usb 2-1: SerialNumber: syz [ 258.602544][ T5890] cdc_mbim 2-1:1.0: skipping garbage [ 258.618405][ T30] audit: type=1400 audit(1768187744.403:1742): avc: denied { write } for pid=9210 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 259.045686][ T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 259.162223][ T30] audit: type=1326 audit(1768187746.173:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 259.234245][ T9237] netlink: 'syz.3.659': attribute type 12 has an invalid length. [ 259.242194][ T9237] netlink: 'syz.3.659': attribute type 29 has an invalid length. [ 259.256535][ T9237] netlink: 148 bytes leftover after parsing attributes in process `syz.3.659'. [ 259.304844][ T30] audit: type=1326 audit(1768187746.173:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 259.324785][ T10] usb 5-1: USB disconnect, device number 22 [ 259.340178][ T9237] netlink: 43 bytes leftover after parsing attributes in process `syz.3.659'. [ 259.412645][ T30] audit: type=1326 audit(1768187746.233:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 259.503823][ T30] audit: type=1326 audit(1768187746.233:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 259.528916][ T30] audit: type=1326 audit(1768187746.233:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 259.607120][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.711007][ T9249] macvtap1: entered promiscuous mode [ 259.716499][ T9249] macvtap1: entered allmulticast mode [ 259.734981][ T9249] dummy0: entered allmulticast mode [ 259.753218][ T9249] dummy0: entered promiscuous mode [ 259.769443][ T9249] team0: Device macvtap1 failed to register rx_handler [ 259.778344][ T9249] dummy0: left allmulticast mode [ 259.783660][ T9249] dummy0: left promiscuous mode [ 260.065951][ T5890] cdc_mbim 2-1:1.0: bind() failure [ 260.082403][ T5890] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 260.110186][ T5890] usb 2-1: USB disconnect, device number 16 [ 260.428677][ T9265] /dev/nullb0: Can't open blockdev [ 260.637073][ T9266] ptrace attach of "./syz-executor exec"[9269] was attempted by "./syz-executor exec"[9266] [ 260.981894][ T9276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=9276 comm=syz.2.668 [ 261.076889][ T9276] bridge0: entered allmulticast mode [ 261.103900][ T9276] netlink: 'syz.2.668': attribute type 2 has an invalid length. [ 261.121737][ T9276] bridge_slave_1: left allmulticast mode [ 261.128400][ T9276] bridge_slave_1: left promiscuous mode [ 261.244824][ T9283] capability: warning: `syz.2.668' uses 32-bit capabilities (legacy support in use) [ 261.438770][ T9276] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.522504][ T9276] bridge_slave_0: left allmulticast mode [ 261.558993][ T9276] bridge_slave_0: left promiscuous mode [ 261.586791][ T9276] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.361609][ T9305] netlink: 84 bytes leftover after parsing attributes in process `syz.2.675'. [ 263.370538][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 263.383581][ T9304] netlink: 84 bytes leftover after parsing attributes in process `syz.2.675'. [ 263.400846][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 263.668262][ T9309] netlink: 'syz.2.678': attribute type 12 has an invalid length. [ 263.811058][ T9313] netlink: 'syz.0.679': attribute type 3 has an invalid length. [ 263.819195][ T9313] netlink: 244 bytes leftover after parsing attributes in process `syz.0.679'. [ 263.880339][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 263.880352][ T30] audit: type=1400 audit(1768187750.905:1761): avc: denied { map } for pid=9312 comm="syz.0.679" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 263.930312][ T5876] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 264.171300][ T5876] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 264.179502][ T5876] usb 5-1: config 0 has no interface number 1 [ 264.185633][ T5876] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.197170][ T5876] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 264.208812][ T5876] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 264.219951][ T5876] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.233064][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 264.244635][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 264.257814][ T5876] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 264.266922][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.277781][ T5876] usb 5-1: Product: syz [ 264.285546][ T5876] usb 5-1: Manufacturer: syz [ 264.290173][ T5876] usb 5-1: SerialNumber: syz [ 264.296641][ T5876] usb 5-1: config 0 descriptor?? [ 264.300093][ T849] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 264.305630][ T9310] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.317970][ T5876] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.327785][ T5876] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.461592][ T849] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e [ 264.470740][ T849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.492137][ T849] pwc: Logitech QuickCam Zoom USB webcam detected. [ 264.689169][ T849] pwc: Failed to set LED on/off time (-71) [ 264.697458][ T849] pwc: send_video_command error -71 [ 264.704723][ T849] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 264.712537][ T849] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 264.729023][ T849] usb 1-1: USB disconnect, device number 19 [ 264.780834][ T30] audit: type=1400 audit(1768187751.805:1762): avc: denied { listen } for pid=9321 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.178667][ T9332] netlink: 'syz.3.685': attribute type 12 has an invalid length. [ 265.186503][ T9332] netlink: 'syz.3.685': attribute type 29 has an invalid length. [ 265.200593][ T9332] netlink: 148 bytes leftover after parsing attributes in process `syz.3.685'. [ 265.210179][ T30] audit: type=1326 audit(1768187752.145:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 265.236938][ T9332] netlink: 43 bytes leftover after parsing attributes in process `syz.3.685'. [ 265.249046][ T30] audit: type=1326 audit(1768187752.145:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 265.274834][ T30] audit: type=1326 audit(1768187752.295:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 265.280104][ T5876] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 265.305871][ T30] audit: type=1326 audit(1768187752.295:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 265.550107][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 265.556368][ T5876] usb 2-1: config 0 has an invalid interface number: 121 but max is 0 [ 265.570049][ T5876] usb 2-1: config 0 has no interface number 0 [ 265.576118][ T5876] usb 2-1: too many endpoints for config 0 interface 121 altsetting 117: 112, using maximum allowed: 30 [ 265.610064][ T5876] usb 2-1: config 0 interface 121 altsetting 117 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 265.645016][ T5876] usb 2-1: config 0 interface 121 has no altsetting 0 [ 265.661957][ T5876] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 265.671362][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.679345][ T5876] usb 2-1: Product: syz [ 265.686897][ T5876] usb 2-1: Manufacturer: syz [ 265.694940][ T5876] usb 2-1: SerialNumber: syz [ 265.700575][ T80] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 265.710653][ T5876] usb 2-1: config 0 descriptor?? [ 265.758852][ T30] audit: type=1400 audit(1768187752.775:1767): avc: denied { write } for pid=9337 comm="syz.0.687" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 265.758955][ T9341] random: crng reseeded on system resumption [ 265.795708][ T30] audit: type=1400 audit(1768187752.815:1768): avc: denied { connect } for pid=9337 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 265.846864][ T30] audit: type=1400 audit(1768187752.865:1769): avc: denied { module_load } for pid=9337 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 265.846974][ T9342] Invalid ELF header type: 3 != 1 [ 265.871385][ T80] usb 3-1: Using ep0 maxpacket: 8 [ 265.878207][ T30] audit: type=1400 audit(1768187752.895:1770): avc: denied { ioctl } for pid=9337 comm="syz.0.687" path="socket:[20145]" dev="sockfs" ino=20145 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 265.878693][ T80] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.913351][ T80] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.925241][ T80] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 265.940403][ T80] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 265.949556][ T80] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.957842][ T80] usb 3-1: Product: syz [ 265.962053][ T80] usb 3-1: Manufacturer: syz [ 265.966631][ T80] usb 3-1: SerialNumber: syz [ 265.971290][ T849] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 265.983661][ T80] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 265.992382][ T80] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 265.998536][ T80] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 266.130136][ T849] usb 4-1: Using ep0 maxpacket: 8 [ 266.137323][ T849] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 266.148830][ T849] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 266.158916][ T849] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.168914][ T849] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.182003][ T849] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.191291][ T849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.221648][ T5876] usb 3-1: USB disconnect, device number 12 [ 266.405943][ T849] usb 4-1: usb_control_msg returned -32 [ 266.411626][ T849] usbtmc 4-1:16.0: can't read capabilities [ 266.599418][ T5876] usb 5-1: USB disconnect, device number 23 [ 266.820249][ T849] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 267.145069][ T9358] IPv6: sit1: Disabled Multicast RS [ 267.154390][ T9358] sit1: entered allmulticast mode [ 267.271094][ T849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 267.273427][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 267.410532][ T849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 267.421326][ T849] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 267.430388][ T849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.446525][ T849] usb 1-1: config 0 descriptor?? [ 267.461762][ T9345] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 267.610726][ T80] usb 2-1: USB disconnect, device number 17 [ 267.675740][ T849] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 267.883919][ T9345] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 267.892101][ T9345] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 267.900316][ T9345] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 267.914123][ T9345] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 267.935869][ T849] usb 1-1: USB disconnect, device number 20 [ 268.017528][ T9385] sp0: Synchronizing with TNC [ 268.204563][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'. [ 268.553213][ T9394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27928 sclass=netlink_route_socket pid=9394 comm=syz.1.701 [ 270.409743][ T5869] usb 4-1: USB disconnect, device number 11 [ 271.587945][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 271.587977][ T30] audit: type=1400 audit(1768187758.605:1781): avc: denied { mounton } for pid=9414 comm="syz.4.706" path="/132/file0" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 272.801815][ T6060] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 272.848024][ T9430] netlink: 'syz.0.710': attribute type 10 has an invalid length. [ 272.865083][ T9430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.710'. [ 272.884238][ T9430] veth0_vlan: entered allmulticast mode [ 273.028939][ T9430] bridge0: port 3(veth0_vlan) entered blocking state [ 273.039795][ T9430] bridge0: port 3(veth0_vlan) entered disabled state [ 273.059394][ T9430] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 273.240985][ T6060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.271393][ T6060] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.284576][ T6060] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 273.294209][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.417900][ T9437] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 273.594468][ T9437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.633546][ T9407] syz.3.704 (9407): drop_caches: 2 [ 273.653530][ T6060] usb 3-1: config 0 descriptor?? [ 273.950246][ T5809] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 273.960127][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 274.103319][ T5809] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 274.126310][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.373021][ T9439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.381636][ T9439] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 274.424997][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.436040][ T9439] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 274.500545][ T5809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.589338][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 274.609988][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 274.636194][ T10] usb 1-1: New USB device strings: Mfr=21, Product=0, SerialNumber=3 [ 274.677907][ T5809] usb 2-1: SerialNumber: syz [ 274.735879][ T10] usb 1-1: Manufacturer: syz [ 274.753646][ T9442] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 274.780516][ T9442] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 274.838468][ T10] usb 1-1: SerialNumber: syz [ 275.323389][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.367382][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.438883][ T6060] usb 3-1: can't set config #0, error -71 [ 275.446350][ T9453] netlink: 'syz.3.715': attribute type 12 has an invalid length. [ 275.456715][ T6060] usb 3-1: USB disconnect, device number 13 [ 275.481996][ T10] usb 1-1: 0:2 : does not exist [ 275.486892][ T10] usb 1-1: unit 52 not found! [ 275.510395][ T9453] netlink: 'syz.3.715': attribute type 29 has an invalid length. [ 275.518804][ T9453] netlink: 148 bytes leftover after parsing attributes in process `syz.3.715'. [ 275.530053][ T30] audit: type=1326 audit(1768187762.395:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 275.580150][ T9453] netlink: 43 bytes leftover after parsing attributes in process `syz.3.715'. [ 275.637774][ T10] usb 1-1: USB disconnect, device number 21 [ 275.909396][ T30] audit: type=1326 audit(1768187762.395:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 275.957445][ T30] audit: type=1326 audit(1768187762.605:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 276.002359][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.007040][ T30] audit: type=1326 audit(1768187762.605:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 276.067792][ T9462] FAULT_INJECTION: forcing a failure. [ 276.067792][ T9462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.082147][ T9462] CPU: 0 UID: 0 PID: 9462 Comm: syz.2.718 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.082173][ T9462] Tainted: [L]=SOFTLOCKUP [ 276.082177][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.082184][ T9462] Call Trace: [ 276.082188][ T9462] [ 276.082192][ T9462] dump_stack_lvl+0x16c/0x1f0 [ 276.082211][ T9462] should_fail_ex+0x512/0x640 [ 276.082231][ T9462] strncpy_from_user+0x3b/0x2e0 [ 276.082251][ T9462] getname_flags.part.0+0x8f/0x550 [ 276.082265][ T9462] getname_flags+0x93/0xf0 [ 276.082279][ T9462] user_path_at+0x24/0x60 [ 276.082293][ T9462] __x64_sys_mount+0x1fb/0x310 [ 276.082306][ T9462] ? __pfx___x64_sys_mount+0x10/0x10 [ 276.082329][ T9462] do_syscall_64+0xcd/0xf80 [ 276.082353][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.082370][ T9462] RIP: 0033:0x7f943678f749 [ 276.082384][ T9462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.082395][ T9462] RSP: 002b:00007f94349f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.082405][ T9462] RAX: ffffffffffffffda RBX: 00007f94369e5fa0 RCX: 00007f943678f749 [ 276.082412][ T9462] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 276.082419][ T9462] RBP: 00007f94349f6090 R08: 0000200000000080 R09: 0000000000000000 [ 276.082425][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.082431][ T9462] R13: 00007f94369e6038 R14: 00007f94369e5fa0 R15: 00007ffdd9a18708 [ 276.082445][ T9462] [ 276.330446][ T30] audit: type=1326 audit(1768187762.625:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 276.364036][ T30] audit: type=1326 audit(1768187762.625:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 276.388007][ T30] audit: type=1326 audit(1768187762.625:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 276.412968][ T30] audit: type=1326 audit(1768187762.625:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 276.449949][ T30] audit: type=1326 audit(1768187762.625:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 276.506260][ T5809] usb 2-1: bad CDC descriptors [ 276.515496][ T5809] usb 2-1: USB disconnect, device number 18 [ 277.213084][ T9471] usb usb7: usbfs: process 9471 (syz.0.721) did not claim interface 0 before use [ 278.324053][ T9478] Dead loop on virtual device ip6_vti0, fix it urgently! [ 279.598816][ T9489] geneve2: entered promiscuous mode [ 279.610619][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 58030 - 0 [ 279.649516][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 58030 - 0 [ 279.660640][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 58030 - 0 [ 279.670914][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 58030 - 0 [ 279.947001][ T9494] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 279.994516][ T9494] kvm: requested 108114 ns i8254 timer period limited to 200000 ns [ 280.019315][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 280.019361][ T30] audit: type=1400 audit(1768187767.035:1801): avc: denied { connect } for pid=9491 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 280.510099][ T9494] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 280.616639][ T9494] kvm: requested 139962 ns i8254 timer period limited to 200000 ns [ 280.686478][ T9494] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 280.759883][ T9494] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 280.775040][ T9509] netlink: 'syz.1.733': attribute type 32 has an invalid length. [ 280.800124][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 280.904815][ T9509] bond2: Setting coupled_control to off (0) [ 282.097453][ T30] audit: type=1326 audit(1768187769.115:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f8b8f749 code=0x7ffc0000 [ 282.157397][ T30] audit: type=1326 audit(1768187769.145:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f21f8b8f749 code=0x7ffc0000 [ 282.183453][ T9531] netlink: 'syz.0.736': attribute type 12 has an invalid length. [ 282.192275][ T9531] netlink: 'syz.0.736': attribute type 29 has an invalid length. [ 282.250082][ T9531] netlink: 148 bytes leftover after parsing attributes in process `syz.0.736'. [ 282.289394][ T9531] netlink: 43 bytes leftover after parsing attributes in process `syz.0.736'. [ 282.300197][ T9529] block device autoloading is deprecated and will be removed. [ 282.326970][ T30] audit: type=1400 audit(1768187769.345:1804): avc: denied { read } for pid=9532 comm="syz.1.738" dev="sockfs" ino=20725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 282.353077][ T9533] batman_adv: batadv0: Adding interface: dummy0 [ 282.388391][ T9533] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.390227][ T30] audit: type=1326 audit(1768187769.385:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f8b8f749 code=0x7ffc0000 [ 282.441027][ T9529] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.572724][ T30] audit: type=1326 audit(1768187769.385:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f8b8f749 code=0x7ffc0000 [ 282.628704][ T9533] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 282.699928][ T9536] batman_adv: batadv0: Removing interface: dummy0 [ 282.873857][ T9540] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 283.130968][ T9545] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 283.498040][ T9555] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 16832 [ 283.523727][ T9555] binder: 9552:9555 ioctl 4018620d 200000000100 returned -1 [ 284.560811][ T9568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.747'. [ 284.611533][ T9568] netlink: 'syz.3.747': attribute type 7 has an invalid length. [ 284.619178][ T9568] netlink: 'syz.3.747': attribute type 8 has an invalid length. [ 284.730330][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 284.760069][ T30] audit: type=1400 audit(1768187771.775:1807): avc: denied { bind } for pid=9557 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.850134][ T30] audit: type=1400 audit(1768187771.775:1808): avc: denied { write } for pid=9557 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.070107][ T5885] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 285.183935][ T9577] IPv6: sit1: Disabled Multicast RS [ 285.191726][ T9577] sit1: entered allmulticast mode [ 285.330058][ T5885] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 285.338115][ T5885] usb 4-1: config 1 has no interface number 0 [ 285.350048][ T5885] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 285.350606][ T6060] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 285.390351][ T5869] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 285.483705][ T5885] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 285.520076][ T5885] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.548836][ T5885] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 285.561145][ T5869] usb 3-1: not running at top speed; connect to a high speed hub [ 285.569807][ T5869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.588453][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.619460][ T5885] usb 4-1: Product: syz [ 285.629584][ T5885] usb 4-1: Manufacturer: syz [ 285.634815][ T5885] usb 4-1: SerialNumber: syz [ 285.641131][ T6060] usb 2-1: not running at top speed; connect to a high speed hub [ 285.652718][ T5869] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.659321][ T9568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 285.675166][ T6060] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.695220][ T5869] usb 3-1: config 1 has no interface number 1 [ 285.701384][ T6060] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.720344][ T5869] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 285.741177][ T6060] usb 2-1: config 1 has no interface number 1 [ 285.747277][ T6060] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 285.764044][ T5869] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.783243][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.792960][ T6060] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.810046][ T5869] usb 3-1: Product: syz [ 285.820245][ T6060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.828228][ T6060] usb 2-1: Product: syz [ 285.832460][ T5869] usb 3-1: Manufacturer: syz [ 285.842542][ T5869] usb 3-1: SerialNumber: syz [ 285.860123][ T6060] usb 2-1: Manufacturer: syz [ 285.871290][ T6060] usb 2-1: SerialNumber: syz [ 285.972004][ T9568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.072756][ T9575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.079009][ T9585] lo speed is unknown, defaulting to 1000 [ 286.108733][ T9573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.119113][ T9575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.121946][ T9585] vxcan1 speed is unknown, defaulting to 1000 [ 286.127727][ T9573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.307790][ T5822] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 286.380862][ T5822] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 287.043560][ T5885] usb 4-1: Incompatible driver and firmware versions [ 287.059175][ T5885] usb 4-1: USB disconnect, device number 12 [ 287.603260][ T9595] comedi comedi3: pcl812: I/O port conflict (0xb,16) [ 288.014342][ T9601] sp0: Synchronizing with TNC [ 288.271018][ T5869] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 288.423464][ T5885] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 288.461680][ T5869] usb 3-1: USB disconnect, device number 14 [ 288.671567][ T6060] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 288.704047][ T6101] udevd[6101]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.819910][ T30] audit: type=1400 audit(1768187775.805:1809): avc: denied { create } for pid=9606 comm="syz.2.758" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 289.220775][ T9613] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 289.229180][ T9613] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 289.241228][ T9599] [U] è [ 289.257780][ T30] audit: type=1400 audit(1768187775.885:1810): avc: denied { link } for pid=9606 comm="syz.2.758" name="file1" dev="ramfs" ino=20937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 289.288640][ T6060] usb 2-1: USB disconnect, device number 19 [ 289.298441][ T9613] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 289.340863][ T9613] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 289.504775][ T30] audit: type=1326 audit(1768187776.525:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.0.757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21f8b8f749 code=0x0 [ 289.542915][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.493160][ T9613] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 290.500718][ T5822] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 290.510410][ T5822] Bluetooth: hci4: Injecting HCI hardware error event [ 290.517583][ T5822] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 290.526821][ T5822] Bluetooth: hci1: Injecting HCI hardware error event [ 290.534518][ T5822] Bluetooth: hci4: hardware error 0x00 [ 290.560460][ T5814] Bluetooth: hci1: hardware error 0x00 [ 290.735297][ T9613] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 290.772797][ T9613] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 290.811492][ T9613] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 290.833045][ T9613] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 290.844677][ T9613] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 291.009873][ T9624] futex_wake_op: syz.0.761 tries to shift op by -1; fix this program [ 292.224599][ T30] audit: type=1400 audit(1768187779.245:1812): avc: denied { connect } for pid=9639 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.292843][ T30] audit: type=1400 audit(1768187779.245:1813): avc: denied { read } for pid=9639 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.590352][ T5822] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 292.598194][ T5814] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 292.855719][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 293.223911][ T9661] IPv6: sit1: Disabled Multicast RS [ 293.274674][ T9661] sit1: entered allmulticast mode [ 293.456416][ T30] audit: type=1400 audit(1768187780.475:1814): avc: denied { read } for pid=9659 comm="syz.2.771" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 293.557395][ T30] audit: type=1400 audit(1768187780.505:1815): avc: denied { open } for pid=9659 comm="syz.2.771" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 293.623415][ T30] audit: type=1400 audit(1768187780.515:1816): avc: denied { ioctl } for pid=9659 comm="syz.2.771" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 293.677352][ T30] audit: type=1400 audit(1768187780.515:1817): avc: denied { shutdown } for pid=9659 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.728338][ T9660] lo speed is unknown, defaulting to 1000 [ 293.739604][ T9660] vxcan1 speed is unknown, defaulting to 1000 [ 293.790053][ T9669] openvswitch: netlink: nsh attr 0 has unexpected len 2 expected 0 [ 293.829347][ T30] audit: type=1400 audit(1768187780.845:1818): avc: denied { bind } for pid=9668 comm="syz.4.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.832856][ T9669] netlink: 48 bytes leftover after parsing attributes in process `syz.4.773'. [ 293.906537][ T9672] netlink: 228 bytes leftover after parsing attributes in process `syz.1.774'. [ 294.088435][ T5809] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 294.181195][ T9675] gre2: entered promiscuous mode [ 294.252730][ T5809] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 294.373869][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.606439][ T5809] usb 1-1: config 0 has no interface number 0 [ 294.622742][ T5809] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 294.677779][ T5809] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.745492][ T5809] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 294.764660][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.349667][ T30] audit: type=1400 audit(1768187782.365:1819): avc: denied { setopt } for pid=9690 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.457872][ T9696] Bluetooth: MGMT ver 1.23 [ 295.590917][ T9693] xt_socket: unknown flags 0x4c [ 295.715302][ T30] audit: type=1400 audit(1768187782.365:1820): avc: denied { listen } for pid=9690 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.749340][ T5809] usb 1-1: Product: syz [ 295.762480][ T5809] usb 1-1: Manufacturer: syz [ 295.799898][ T5809] usb 1-1: SerialNumber: syz [ 295.808764][ T5809] usb 1-1: config 0 descriptor?? [ 295.834691][ T9670] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.922484][ T5809] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 295.990790][ T9700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.083682][ T5809] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 296.133542][ T30] audit: type=1400 audit(1768187783.155:1821): avc: denied { setopt } for pid=9666 comm="syz.0.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 296.180209][ T5809] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 296.271358][ T5809] usb 1-1: USB disconnect, device number 22 [ 296.310572][ T5809] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 296.354655][ T5809] cyberjack 1-1:0.69: device disconnected [ 296.778788][ T9707] tmpfs: Bad value for 'mpol' [ 296.943970][ T30] audit: type=1326 audit(1768187783.955:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 296.944008][ T30] audit: type=1326 audit(1768187783.955:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 297.191094][ T9720] validate_nla: 45 callbacks suppressed [ 297.191116][ T9720] netlink: 'syz.4.783': attribute type 12 has an invalid length. [ 297.204530][ T9720] netlink: 'syz.4.783': attribute type 29 has an invalid length. [ 297.212287][ T9720] netlink: 148 bytes leftover after parsing attributes in process `syz.4.783'. [ 297.221254][ T9720] netlink: 43 bytes leftover after parsing attributes in process `syz.4.783'. [ 297.351746][ T30] audit: type=1326 audit(1768187784.375:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 297.407162][ T30] audit: type=1326 audit(1768187784.375:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0922b8f749 code=0x7ffc0000 [ 298.170675][ T30] audit: type=1400 audit(1768187785.095:1826): avc: denied { setattr } for pid=9732 comm="syz.1.786" name="dmmidi2" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 298.330077][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 298.482735][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 298.622406][ T10] usb 3-1: New USB device found, idVendor=b817, idProduct=e528, bcdDevice= 9.00 [ 298.631716][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.649811][ T10] usb 3-1: Product: syz [ 299.618372][ T10] usb 3-1: Manufacturer: syz [ 299.628377][ T10] usb 3-1: SerialNumber: syz [ 299.652105][ T10] usb 3-1: config 0 descriptor?? [ 300.510498][ T10] usb 3-1: USB disconnect, device number 15 [ 301.450078][ T30] audit: type=1400 audit(1768187788.445:1827): avc: denied { map } for pid=9748 comm="syz.0.792" path="socket:[21244]" dev="sockfs" ino=21244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 302.695045][ T9775] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 303.219273][ T30] audit: type=1326 audit(1768187790.235:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943678f749 code=0x7ffc0000 [ 303.284615][ T30] audit: type=1326 audit(1768187790.235:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f943678f749 code=0x7ffc0000 [ 303.324609][ T9783] input: syz0 as /devices/virtual/input/input18 [ 303.347726][ T30] audit: type=1326 audit(1768187790.365:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943678f749 code=0x7ffc0000 [ 303.405377][ T30] audit: type=1326 audit(1768187790.365:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943678f749 code=0x7ffc0000 [ 303.724390][ T30] audit: type=1400 audit(1768187790.745:1832): avc: denied { bind } for pid=9793 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 304.284150][ T30] audit: type=1400 audit(1768187791.305:1833): avc: denied { ioctl } for pid=9801 comm="syz.3.806" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 304.311401][ T30] audit: type=1400 audit(1768187791.335:1834): avc: denied { create } for pid=9801 comm="syz.3.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 304.765900][ T9806] netlink: 'syz.4.807': attribute type 1 has an invalid length. [ 304.872686][ T9806] gre2: entered promiscuous mode [ 304.897774][ T9806] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 304.940311][ T9806] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 304.955066][ T9806] bond3: (slave gre2): making interface the new active one [ 304.981793][ T9806] bond3: (slave gre2): Enslaving as an active interface with an up link [ 305.050109][ T80] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 305.230489][ T80] usb 1-1: Using ep0 maxpacket: 8 [ 305.445778][ T80] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.515885][ T9819] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 16832 [ 305.522704][ T9819] binder: 9815:9819 ioctl 4018620d 200000000100 returned -1 [ 305.530139][ T80] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.533150][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 305.560193][ T30] audit: type=1400 audit(1768187792.555:1835): avc: denied { write } for pid=9815 comm="syz.3.811" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 305.604987][ T80] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 305.899363][ T80] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 305.974598][ T80] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.041339][ T80] usb 1-1: Product: syz [ 306.083087][ T80] usb 1-1: Manufacturer: syz [ 306.156983][ T80] usb 1-1: SerialNumber: syz [ 306.446501][ T80] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 306.750161][ T80] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 306.756339][ T80] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 307.391802][ T9828] usb usb7: usbfs: process 9828 (syz.2.813) did not claim interface 0 before use [ 307.830295][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 307.870383][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 307.873651][ T80] usb 1-1: USB disconnect, device number 23 [ 308.545249][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 308.571255][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 309.137165][ T5869] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 309.494943][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.607634][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 309.632972][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 309.810204][ T80] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 309.934892][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 309.990488][ T5869] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 310.011517][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.045407][ T5869] usb 2-1: config 0 descriptor?? [ 310.079639][ T80] usb 5-1: config 0 has no interfaces? [ 310.110785][ T80] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d2.83 [ 310.121154][ T80] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.129149][ T80] usb 5-1: Product: syz [ 310.148871][ T80] usb 5-1: Manufacturer: syz [ 310.159188][ T80] usb 5-1: SerialNumber: syz [ 310.170938][ T80] usb 5-1: config 0 descriptor?? [ 310.426064][ T30] audit: type=1326 audit(1768187797.445:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 310.484652][ T9870] netlink: 'syz.3.823': attribute type 12 has an invalid length. [ 310.492567][ T9870] netlink: 'syz.3.823': attribute type 29 has an invalid length. [ 310.584871][ T9870] netlink: 148 bytes leftover after parsing attributes in process `syz.3.823'. [ 310.600139][ T30] audit: type=1326 audit(1768187797.445:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 310.705401][ T9870] netlink: 43 bytes leftover after parsing attributes in process `syz.3.823'. [ 310.725832][ T30] audit: type=1326 audit(1768187797.445:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 310.934221][ T30] audit: type=1326 audit(1768187797.875:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 311.043158][ T30] audit: type=1326 audit(1768187797.985:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 311.308675][ T30] audit: type=1326 audit(1768187797.985:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 311.579309][ T30] audit: type=1326 audit(1768187797.985:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 311.603169][ T30] audit: type=1326 audit(1768187797.985:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 311.631202][ T30] audit: type=1326 audit(1768187797.985:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 311.654973][ T30] audit: type=1326 audit(1768187797.985:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e118f749 code=0x7ffc0000 [ 311.824325][ T10] usb 2-1: USB disconnect, device number 20 [ 311.975528][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 312.393166][ T10] usb 5-1: USB disconnect, device number 25 [ 314.003207][ T9921] lo speed is unknown, defaulting to 1000 [ 314.009590][ T9921] vxcan1 speed is unknown, defaulting to 1000 [ 314.080127][ T80] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 314.230071][ T80] usb 4-1: Using ep0 maxpacket: 16 [ 314.236792][ T80] usb 4-1: config 125 has an invalid interface number: 165 but max is 0 [ 314.250340][ T80] usb 4-1: config 125 has no interface number 0 [ 314.256599][ T80] usb 4-1: config 125 interface 165 has no altsetting 0 [ 314.270418][ T80] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 314.279442][ T80] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.293176][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 314.473881][ T10] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 314.493103][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.510083][ T10] usb 5-1: Product: syz [ 314.514279][ T10] usb 5-1: Manufacturer: syz [ 314.518860][ T10] usb 5-1: SerialNumber: syz [ 314.561100][ T10] usb 5-1: config 0 descriptor?? [ 315.166626][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 315.200594][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 315.259072][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 315.565831][ T10] usb 5-1: media controller created [ 315.603522][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.705536][ T10] DVB: Unable to find symbol mt352_attach() [ 315.779083][ T10] DVB: Unable to find symbol nxt6000_attach() [ 315.802174][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 315.838053][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 315.865845][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 315.883377][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 315.904718][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 315.919080][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 315.936950][ T10] usb 5-1: USB disconnect, device number 26 [ 316.038685][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 316.142675][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 316.407708][ T80] usb 4-1: string descriptor 0 read error: -71 [ 316.442018][ T80] gspca_main: spca501-2.14.0 probing 0497:c001 [ 316.468893][ T80] gspca_spca501: reg write: error -71 [ 316.476930][ T80] spca501 4-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 316.505374][ T80] spca501 4-1:125.165: probe with driver spca501 failed with error -22 [ 317.657291][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.701935][ T80] usb 4-1: USB disconnect, device number 13 [ 318.041578][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 318.063945][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 318.063959][ T30] audit: type=1400 audit(1768187805.085:1855): avc: denied { remount } for pid=9962 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 318.102050][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 318.109587][ T24] usb 1-1: can't read configurations, error -71 [ 318.116616][ T9965] cgroup: Need name or subsystem set [ 318.410387][ T9967] usb usb7: usbfs: process 9967 (syz.4.843) did not claim interface 0 before use [ 319.670142][ T9978] syzkaller0: entered promiscuous mode [ 319.690093][ T9978] syzkaller0: entered allmulticast mode [ 320.955634][ T30] audit: type=1400 audit(1768187807.975:1856): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 321.330377][ T5814] ================================================================== [ 321.338461][ T5814] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe47/0x1010 [ 321.346446][ T5814] Read of size 8 at addr ffff8880267dc480 by task kworker/u9:3/5814 [ 321.354420][ T5814] [ 321.356738][ T5814] CPU: 1 UID: 0 PID: 5814 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.356767][ T5814] Tainted: [L]=SOFTLOCKUP [ 321.356774][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.356788][ T5814] Workqueue: hci3 hci_rx_work [ 321.356812][ T5814] Call Trace: [ 321.356818][ T5814] [ 321.356825][ T5814] dump_stack_lvl+0x116/0x1f0 [ 321.356854][ T5814] print_report+0xcd/0x630 [ 321.356880][ T5814] ? __virt_addr_valid+0x81/0x610 [ 321.356899][ T5814] ? __phys_addr+0xe8/0x180 [ 321.356917][ T5814] ? l2cap_connect_cfm+0xe47/0x1010 [ 321.356938][ T5814] kasan_report+0xe0/0x110 [ 321.356963][ T5814] ? l2cap_connect_cfm+0xe47/0x1010 [ 321.356987][ T5814] l2cap_connect_cfm+0xe47/0x1010 [ 321.357011][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 321.357035][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 321.357056][ T5814] le_conn_complete_evt+0x1991/0x1fa0 [ 321.357082][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 321.357107][ T5814] hci_le_conn_complete_evt+0x23c/0x3a0 [ 321.357131][ T5814] hci_le_meta_evt+0x357/0x610 [ 321.357154][ T5814] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 321.357178][ T5814] hci_event_packet+0x685/0x1210 [ 321.357199][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 321.357224][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 321.357247][ T5814] ? kcov_remote_start+0x399/0x680 [ 321.357268][ T5814] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.357297][ T5814] hci_rx_work+0x2c9/0x1020 [ 321.357320][ T5814] process_one_work+0x9ba/0x1b20 [ 321.357349][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 321.357378][ T5814] ? assign_work+0x1a0/0x250 [ 321.357401][ T5814] worker_thread+0x6c8/0xf10 [ 321.357436][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 321.357460][ T5814] kthread+0x3c5/0x780 [ 321.357483][ T5814] ? __pfx_kthread+0x10/0x10 [ 321.357507][ T5814] ? rcu_is_watching+0x12/0xc0 [ 321.357525][ T5814] ? __pfx_kthread+0x10/0x10 [ 321.357549][ T5814] ret_from_fork+0x983/0xb10 [ 321.357571][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 321.357592][ T5814] ? rcu_is_watching+0x12/0xc0 [ 321.357609][ T5814] ? __switch_to+0x7af/0x10d0 [ 321.357633][ T5814] ? __pfx_kthread+0x10/0x10 [ 321.357656][ T5814] ret_from_fork_asm+0x1a/0x30 [ 321.357690][ T5814] [ 321.357696][ T5814] [ 321.576081][ T5814] Allocated by task 5814: [ 321.580386][ T5814] kasan_save_stack+0x33/0x60 [ 321.585054][ T5814] kasan_save_track+0x14/0x30 [ 321.589708][ T5814] __kasan_kmalloc+0xaa/0xb0 [ 321.594287][ T5814] l2cap_chan_create+0x44/0x930 [ 321.599122][ T5814] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 321.604908][ T5814] l2cap_sock_new_connection_cb+0x101/0x240 [ 321.610784][ T5814] l2cap_connect_cfm+0x4f0/0x1010 [ 321.615787][ T5814] le_conn_complete_evt+0x1991/0x1fa0 [ 321.621139][ T5814] hci_le_conn_complete_evt+0x23c/0x3a0 [ 321.626662][ T5814] hci_le_meta_evt+0x357/0x610 [ 321.631407][ T5814] hci_event_packet+0x685/0x1210 [ 321.636330][ T5814] hci_rx_work+0x2c9/0x1020 [ 321.640811][ T5814] process_one_work+0x9ba/0x1b20 [ 321.645730][ T5814] worker_thread+0x6c8/0xf10 [ 321.650304][ T5814] kthread+0x3c5/0x780 [ 321.654353][ T5814] ret_from_fork+0x983/0xb10 [ 321.658920][ T5814] ret_from_fork_asm+0x1a/0x30 [ 321.663667][ T5814] [ 321.665969][ T5814] Freed by task 9994: [ 321.669922][ T5814] kasan_save_stack+0x33/0x60 [ 321.674601][ T5814] kasan_save_track+0x14/0x30 [ 321.679257][ T5814] kasan_save_free_info+0x3b/0x60 [ 321.684255][ T5814] __kasan_slab_free+0x5f/0x80 [ 321.688999][ T5814] kfree+0x2f8/0x6e0 [ 321.692871][ T5814] l2cap_chan_put+0x1bb/0x310 [ 321.697532][ T5814] l2cap_sock_cleanup_listen+0x4d/0x2f0 [ 321.703062][ T5814] l2cap_sock_release+0x69/0x280 [ 321.707983][ T5814] __sock_release+0xb3/0x270 [ 321.712552][ T5814] sock_close+0x1c/0x30 [ 321.716688][ T5814] __fput+0x402/0xb70 [ 321.720653][ T5814] task_work_run+0x150/0x240 [ 321.725226][ T5814] exit_to_user_mode_loop+0xfb/0x540 [ 321.730496][ T5814] do_syscall_64+0x4ee/0xf80 [ 321.735070][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.740941][ T5814] [ 321.743242][ T5814] The buggy address belongs to the object at ffff8880267dc000 [ 321.743242][ T5814] which belongs to the cache kmalloc-2k of size 2048 [ 321.757270][ T5814] The buggy address is located 1152 bytes inside of [ 321.757270][ T5814] freed 2048-byte region [ffff8880267dc000, ffff8880267dc800) [ 321.771218][ T5814] [ 321.773528][ T5814] The buggy address belongs to the physical page: [ 321.779925][ T5814] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x267d8 [ 321.788663][ T5814] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 321.797146][ T5814] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 321.804677][ T5814] page_type: f5(slab) [ 321.808641][ T5814] raw: 00fff00000000040 ffff88813ff27000 ffffea0001d6f000 dead000000000002 [ 321.817211][ T5814] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 321.825777][ T5814] head: 00fff00000000040 ffff88813ff27000 ffffea0001d6f000 dead000000000002 [ 321.834433][ T5814] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 321.843080][ T5814] head: 00fff00000000003 ffffea000099f601 00000000ffffffff 00000000ffffffff [ 321.851732][ T5814] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 321.860382][ T5814] page dumped because: kasan: bad access detected [ 321.866777][ T5814] page_owner tracks the page as allocated [ 321.872468][ T5814] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5819, tgid 5819 (syz-executor), ts 63119953952, free_ts 63117132129 [ 321.893201][ T5814] post_alloc_hook+0x1af/0x220 [ 321.897960][ T5814] get_page_from_freelist+0xd0b/0x31a0 [ 321.903401][ T5814] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 321.909277][ T5814] alloc_pages_mpol+0x1fb/0x550 [ 321.914110][ T5814] new_slab+0x2c3/0x430 [ 321.918254][ T5814] ___slab_alloc+0xe18/0x1c90 [ 321.922917][ T5814] __slab_alloc.constprop.0+0x63/0x110 [ 321.928365][ T5814] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 321.934761][ T5814] kmalloc_reserve+0xef/0x2c0 [ 321.939427][ T5814] __alloc_skb+0x186/0x410 [ 321.943819][ T5814] inet6_ifinfo_notify+0x77/0x150 [ 321.948823][ T5814] addrconf_notify+0x81a/0x19f0 [ 321.953650][ T5814] notifier_call_chain+0xbc/0x3e0 [ 321.958655][ T5814] call_netdevice_notifiers_info+0xbe/0x110 [ 321.964532][ T5814] __dev_notify_flags+0x12c/0x2e0 [ 321.969537][ T5814] netif_change_flags+0x108/0x160 [ 321.974543][ T5814] page last free pid 5813 tgid 5813 stack trace: [ 321.980845][ T5814] __free_frozen_pages+0x7df/0x1170 [ 321.986029][ T5814] __put_partials+0x130/0x170 [ 321.990681][ T5814] qlist_free_all+0x4c/0xf0 [ 321.995163][ T5814] kasan_quarantine_reduce+0x195/0x1e0 [ 322.000603][ T5814] __kasan_slab_alloc+0x69/0x90 [ 322.005434][ T5814] __kmalloc_cache_noprof+0x282/0x800 [ 322.010783][ T5814] psp_dev_create+0x1b5/0x620 [ 322.015437][ T5814] nsim_psp_init+0x92/0x150 [ 322.019926][ T5814] nsim_create+0xe00/0x13f0 [ 322.024421][ T5814] __nsim_dev_port_add+0x451/0x7a0 [ 322.029515][ T5814] nsim_drv_probe+0xebb/0x15c0 [ 322.034265][ T5814] really_probe+0x241/0xb20 [ 322.038753][ T5814] __driver_probe_device+0x1de/0x470 [ 322.044012][ T5814] driver_probe_device+0x4c/0x1b0 [ 322.049014][ T5814] __device_attach_driver+0x1df/0x350 [ 322.054362][ T5814] bus_for_each_drv+0x159/0x1e0 [ 322.059195][ T5814] [ 322.061494][ T5814] Memory state around the buggy address: [ 322.067096][ T5814] ffff8880267dc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.075131][ T5814] ffff8880267dc400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.083167][ T5814] >ffff8880267dc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.091202][ T5814] ^ [ 322.095244][ T5814] ffff8880267dc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.103279][ T5814] ffff8880267dc580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.111315][ T5814] ================================================================== [ 322.178302][ T30] audit: type=1400 audit(1768187809.165:1857): avc: denied { read } for pid=5166 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 322.406645][ T30] audit: type=1400 audit(1768187809.165:1858): avc: denied { search } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.515788][ T30] audit: type=1400 audit(1768187809.165:1859): avc: denied { search } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.590141][ T5814] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 322.597367][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.608386][ T5814] Tainted: [L]=SOFTLOCKUP [ 322.612702][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.622751][ T5814] Workqueue: hci3 hci_rx_work [ 322.627433][ T5814] Call Trace: [ 322.630700][ T5814] [ 322.633620][ T5814] dump_stack_lvl+0x3d/0x1f0 [ 322.638215][ T5814] vpanic+0x640/0x6f0 [ 322.642194][ T5814] panic+0xca/0xd0 [ 322.645921][ T5814] ? __pfx_panic+0x10/0x10 [ 322.650333][ T5814] ? l2cap_connect_cfm+0xe47/0x1010 [ 322.655527][ T5814] ? preempt_schedule_common+0x44/0xc0 [ 322.660987][ T5814] ? preempt_schedule_thunk+0x16/0x30 [ 322.666355][ T5814] check_panic_on_warn+0xab/0xb0 [ 322.671292][ T5814] end_report+0x107/0x160 [ 322.675622][ T5814] kasan_report+0xee/0x110 [ 322.680040][ T5814] ? l2cap_connect_cfm+0xe47/0x1010 [ 322.685233][ T5814] l2cap_connect_cfm+0xe47/0x1010 [ 322.690252][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 322.695705][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 322.701168][ T5814] le_conn_complete_evt+0x1991/0x1fa0 [ 322.706539][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 322.712255][ T5814] hci_le_conn_complete_evt+0x23c/0x3a0 [ 322.717799][ T5814] hci_le_meta_evt+0x357/0x610 [ 322.722558][ T5814] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 322.728623][ T5814] hci_event_packet+0x685/0x1210 [ 322.733561][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 322.738843][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 322.744210][ T5814] ? kcov_remote_start+0x399/0x680 [ 322.749307][ T5814] ? lockdep_hardirqs_on+0x7c/0x110 [ 322.754495][ T5814] hci_rx_work+0x2c9/0x1020 [ 322.758981][ T5814] process_one_work+0x9ba/0x1b20 [ 322.763908][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 322.769265][ T5814] ? assign_work+0x1a0/0x250 [ 322.773837][ T5814] worker_thread+0x6c8/0xf10 [ 322.778415][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 322.783510][ T5814] kthread+0x3c5/0x780 [ 322.787563][ T5814] ? __pfx_kthread+0x10/0x10 [ 322.792138][ T5814] ? rcu_is_watching+0x12/0xc0 [ 322.796884][ T5814] ? __pfx_kthread+0x10/0x10 [ 322.801458][ T5814] ret_from_fork+0x983/0xb10 [ 322.806029][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 322.811123][ T5814] ? rcu_is_watching+0x12/0xc0 [ 322.815863][ T5814] ? __switch_to+0x7af/0x10d0 [ 322.820525][ T5814] ? __pfx_kthread+0x10/0x10 [ 322.825099][ T5814] ret_from_fork_asm+0x1a/0x30 [ 322.829855][ T5814] [ 322.833109][ T5814] Kernel Offset: disabled [ 322.837406][ T5814] Rebooting in 86400 seconds..