last executing test programs: 15.951137958s ago: executing program 4 (id=2689): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0xc) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x101000) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f00000001c0)=""/2) close_range(r0, r0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 14.568049301s ago: executing program 4 (id=2695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x11, 0x1000, 0xfe0000, 0xfffffffd}}}}]}, 0x48}}, 0x4891) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) r5 = getpgrp(0x0) (rerun: 64) syz_pidfd_open(r5, 0x0) (async) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r6, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) dup(r7) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000026000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r8 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xf4d7, 0xf000, 0x3, 0x1d6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) io_uring_enter(r8, 0x4095, 0x7721, 0x16, 0x0, 0x0) 13.115935522s ago: executing program 4 (id=2698): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x22, 0x4, 0x3) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="000c0d0000003b4bd897f048653f554ba8e523"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x1, 0x800, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 10.871580086s ago: executing program 2 (id=2707): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) unshare(0x22020600) r4 = eventfd2(0xe5c, 0x80000) r5 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000240)={r5, 0x7, 0x2, r4}) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000001480), 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="001815000000000000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0xffffffffffffffc0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 8.849814767s ago: executing program 2 (id=2711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40010) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40040) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) recvfrom(r6, &(0x7f00000006c0)=""/205, 0xcd, 0x40002000, &(0x7f00000007c0)=@xdp={0x2c, 0x5, r3, 0x1a}, 0x80) ioctl(r6, 0x8b1a, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfdcf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) ioctl(r7, 0x8b1a, &(0x7f0000000040)) 8.569429051s ago: executing program 1 (id=2716): read$FUSE(0xffffffffffffffff, &(0x7f00000059c0)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2711, @hyper}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0xa8, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x21b}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x26cb}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x1ff, 0x8, 0x1, 0x9, 0x200, 0xd]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff842b}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000009a40)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) 8.119892753s ago: executing program 4 (id=2717): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000100010080"], 0x40ed80) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0xee01, 0x0) 7.642271653s ago: executing program 2 (id=2719): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x8}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x22, 0x4, 0x3) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="000c0d0000003b4bd897f048653f554ba8e523"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x1, 0x800, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 7.61568331s ago: executing program 1 (id=2721): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x401, 0xc029, 0x0, 0x0}], 0x1}) 6.458953112s ago: executing program 0 (id=2723): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x13, 0xffffffffffffffff, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) 6.33914056s ago: executing program 0 (id=2725): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.430064154s ago: executing program 3 (id=2726): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.295788736s ago: executing program 3 (id=2727): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x1ff, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60101f00000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5.292524338s ago: executing program 0 (id=2728): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xacd6a4e1331a88dc, 0x0) r0 = socket(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x3}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x6, 0x1, 0xb512, 0x101, 0xe7}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x6, 0x200, 0x101, 0x1, 0x8, 0x400, 0x5, r4}, &(0x7f00000003c0)=0x20) writev(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)="94", 0x9a44}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x1, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, 0x0, &(0x7f0000000400)) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) socket(0x1e, 0x4, 0x0) 5.149178284s ago: executing program 3 (id=2729): socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0xa, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x181000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000080), 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bind$inet(r4, &(0x7f0000000000)={0x2, 0xce23, @rand_addr=0x64010100}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getuid() mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3.721663826s ago: executing program 3 (id=2730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40010) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40040) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) recvfrom(r6, &(0x7f00000006c0)=""/205, 0xcd, 0x40002000, &(0x7f00000007c0)=@xdp={0x2c, 0x5, r3, 0x1a}, 0x80) ioctl(r6, 0x8b1a, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfdcf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) ioctl(r7, 0x8b1a, &(0x7f0000000040)) 3.451757603s ago: executing program 1 (id=2731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001080)="a96a428426d96522dbf395b96cda5289bbfe3d97be8f413c48ec17c91194c66443ac9ed513c32242f54abb9a8ad671c6786dd7161962a8cf0dc4c7c0a1f86f7d1b17cc1660980f64e0b66a61b77eed3c8497ff551a20db0aa749c5ed3d49", 0x5e}], 0x1}}], 0x1, 0x4044805) ioctl$KVM_RUN(r3, 0xae80, 0xf0) 3.323675663s ago: executing program 0 (id=2732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40010) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40040) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) recvfrom(r6, &(0x7f00000006c0)=""/205, 0xcd, 0x40002000, &(0x7f00000007c0)=@xdp={0x2c, 0x5, r3, 0x1a}, 0x80) ioctl(r6, 0x8b1a, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfdcf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) ioctl(r7, 0x8b1a, &(0x7f0000000040)) 3.13215389s ago: executing program 1 (id=2733): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x800001c) r1 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000080)='./file0\x00', r2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000001b000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x20ae) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x6, 0x7ff, {0x5, 0x8010001, 0x7, 0x40c, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0x2000, 0x7ff, r4, r5, 0x3d4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001c400)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)="2f5372b8f4489d6253be6445c03999e3cfc3fb26e72f9aae3e1415854cc0bbbfc579fa20694f45908c790d4a4331b77867fe83b0c8a77251636e55747e59b967c51e3ff3797cc9b9780eb3cbc388d4a1136f90277b56af5f03f808860cb381c0cff83652e614843c2350362085aa56dc63d30711475d35184e0e1845e95e7f90cf", 0x81}], 0x1, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x4040}}, {{&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a80)="70a4242f19c6c5454ca412b798564b123d0dcc95b8a41f974a189e9c1040dc5371164b15af6e91f902c64dd25ce100bdedafffcd3d706249ddf963d6de91974a57", 0x41}], 0x1, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r5}}}], 0x60, 0x40}}, {{&(0x7f0000019c80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000001c1c0)=[{&(0x7f0000019d00)="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", 0x1000}, {&(0x7f000001ad00)="bf117b0095d8bcf53364f003b9b136d38b922915dbbd2d8a548aa277a1f5a08dbebb0e913fc6bd47e2668b5b04ecb5", 0x2f}, {&(0x7f000001ad40)="e9ed300ee6723db0249f92a287c4e7c3dc8382ccfe6654fc9e35474a2d599a56d784a3399d2466c975184b96566dc556e98dd6882713f7ccd24272a0ffbea2c514874c619796bec0e05a8a5a302a6499cf7cf573a96b03a37a2ae3fb1f8bf39043f0ea391e47b0c0658338d2752cf8642338175443dbd669b3", 0x79}, {&(0x7f000001adc0)="4c712c29353629e9d0da64c4cb80ffa047cab9ad2155f96b16423935adbb3650cdeb92f943bbcbdbadaf941979eb", 0x2e}, {&(0x7f000001ae00)="a6f3d62893ea8bd8ed37cd4949a70b0318f903458e2774b55b5da54615c1b11956dfc1b7d7f2c6c4a15a84c2059ca0b3ae012fdf546fcfecf4a44ba93743add220a93e6cc4f62b02c5014de890604cbd8d72330710714fe02f93d661af58a82c4835047c4c5e80efc0973f1e0099cf122a33c666d24c373eeed5b6ff12f9bd802ce2212d4676324fd021e9bb94244ba6c2cfeb707d9e5f7e9da908cfc8546481c9ae18edf6f3fdeca9a0d72c2594b631a58b00d028bd1773126b5525e36089cb7c9b34881528f69dffdce46ad4f637f4db5bd9a36e37c9faab89a7f97cf85dfb480cb0ad8211fd97464c6eef", 0xec}, {&(0x7f000001af00)="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", 0x1000}, {&(0x7f000001bf00)="c570025e0023e4486eb9ea3f9ea83758f5db3398843ff50d8b00601aa975587a1df5a0b304c09722a14d9bcbd4225ec735699a5ea4b56524d16d4f282236bf602bd164a5f9034af9945bf43cbac9bc7893f5c5689edbf3e2e6a0bba705ecbdbdb488f30bede1cae97595d73247237933c758aa966115350a7525b91bd917ed23b776cf73990722a25c8cd4a75f9fddcaf5fc4551219c73b347ef51f021e38d014918bd7772cd60cc950543d8b8bbecb8b5ccc8b54d910cadfa8949688abaf8324a8cc6fa5999f4362e1aba4b173efe0b42", 0xd1}, {&(0x7f000001c000)="5b58a04ee4099b9369565633126df575253401cddff36d05ec17308625987bd905460015ea01bd117412ae84101420914a9fb1999729b14e04510231b13a0bc8e060de08260f4aa2a873093eb81b394a44fe8b8e1e0150360faa1d3cc89af770dc63fd639e2b3db2abd94dded9914562bc7e9d1378548ea5c25f192d7e22626c2470ade5dc376b609132d0f5d51c643b30a6132b19e2f39ab6a2a7f091b7b56747b265aa888c96252ad0dfdf084abd", 0xaf}, {&(0x7f000001c0c0)="ae78a177be10b56333809bb6b42c71ad6c41b9fe2b54c8ecc51ef81fd8668715c306a1d20ca2b24c77db87c8515ee40ac62a30be0ae5b4c04204b5049539744c67bdbe72acae9f9edea5503108b3f0f3a15f6a8861c815b368189d80776720849054eb813ee19099c8efe7fca86ae912fdd4506e4d4d1750b994ace834699f0c7c7b9ccd871094284e1d74cc45dedb217d073e7adf3bee8da9fbff7d005b3eca690be7d99cb9d308bdce99a2ece0d856b7857d69b1060e9690091ab098f44b321eff785c02bf94c63cd032a3fec9dc8895", 0xd1}], 0x9, 0x0, 0x0, 0x4}}, {{&(0x7f000001c280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000001c3c0)=[{&(0x7f000001c300)="c88bc6d008b4e87a25", 0x9}, {&(0x7f000001c340)="79fd9c0f0f1dc4e6326bb927dfd506f724576b4788981548a3a862734af57fe6f1a0e14674c35e52ff5bae30", 0x2c}, {&(0x7f000001c380)="9d", 0x1}], 0x3, 0x0, 0x0, 0x40080d4}}], 0x4, 0x20000000) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000100)) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000c80)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r8, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r10 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r10, 0x8004f50e, &(0x7f0000000140)) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r11, r11, 0x0, 0x400000000000000) 2.86538035s ago: executing program 4 (id=2734): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xacd6a4e1331a88dc, 0x0) r0 = socket(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x3}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x6, 0x1, 0xb512, 0x101, 0xe7}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x6, 0x200, 0x101, 0x1, 0x8, 0x400, 0x5, r4}, &(0x7f00000003c0)=0x20) writev(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)="94", 0x9a44}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x1, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, 0x0, &(0x7f0000000400)) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) socket(0x1e, 0x4, 0x0) 2.331091422s ago: executing program 3 (id=2735): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x6c}) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000003a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x27]}], 0x1) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.786923011s ago: executing program 0 (id=2736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r3, 0xeed, 0xeed, 0x1, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile(r2, r4, 0x0, 0x6) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000680)={0xc001, {{0x2, 0x4e22, @broadcast}}, 0x1, 0x2, [{{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @multicast2}}]}, 0x18c) sendto$inet(r7, &(0x7f0000000300)="425ed2e4", 0x4, 0x1, 0x0, 0x0) 1.639829669s ago: executing program 4 (id=2737): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r2, 0x7}, 0x80, 0x0}, 0x4000011) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = ioctl$KVM_GET_STATS_FD_cpu(r9, 0xaece) preadv(r10, &(0x7f00000004c0)=[{&(0x7f0000001680)=""/4110, 0x100e}], 0x1, 0x27, 0x13) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000040)={0x0, 0x0, [0x5, 0xffff, 0xd, 0x9, 0x1, 0x9, 0x1, 0x4]}) r11 = accept$packet(r6, 0x0, &(0x7f0000000180)) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x4400, 0x4}, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000440)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb6b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "3916f8d66cffe8ef8d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 1.590571406s ago: executing program 2 (id=2738): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x1e) 1.219797405s ago: executing program 1 (id=2739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x303, 0x0, 0x0, {0x7, 0x0, 0x1}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x184}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) io_setup(0x1, &(0x7f0000000200)=0x0) (async, rerun: 32) r2 = eventfd2(0x6, 0x1) (rerun: 32) io_cancel(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000380)="39f5fdf80ec7ea801f5ad72f92c5e645b51634ed68165567ad5cbe24c27e4f828c7fe523153b64", 0x27, 0x9, 0x0, 0x0, r2}, &(0x7f0000000400)) 1.219508738s ago: executing program 2 (id=2740): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x802, 0x0) set_mempolicy(0x1, &(0x7f0000000100)=0x8, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) socket(0x840000000002, 0x3, 0xff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x2) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1f00, 0x0, 0x13, r1, 0x81000000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000000c0)) capset(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) 1.009169815s ago: executing program 3 (id=2741): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r3) flistxattr(r3, &(0x7f0000000040)=""/4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in6=@empty, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000}, {0xfffffffffffffffc, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000006, 0x4, 0x1, 0x0, 0x10, 0x0, 0x1000}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001240)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x2c}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xd678, 0xfff}}}}}}, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000640)=0x5) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r8 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r5, r0, 0x36, 0x0, 0x0, @void, @value=r0}, 0x20) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 677.723975ms ago: executing program 0 (id=2742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r2) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf251d00000008000100", @ANYRES32=0x0, @ANYBLOB="08001e00090000001d00980000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4004001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x48, 0x2, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000045}, 0x20000088) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="190026bd7000fbdbdf401300000008000300", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x14) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r15) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x40, r16, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x74, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r18}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004010}, 0x21000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 576.92325ms ago: executing program 1 (id=2743): r0 = socket$kcm(0x10, 0x2, 0x4) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="042c1101c800aaaaaaaaaad709ba80c00269980dd919331000077a0700000402a668423bf4330748c36ec4db28127d"], 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x7) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x20) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f00000001c0)=0x1, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400012004009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setxattr$security_selinux(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), &(0x7f0000000480)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0xfffffffffffffdd5, 0xc2380e79107784f) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0x6}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00'}) r8 = socket$can_raw(0x1d, 0x3, 0x1) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "2b400fb1eaa506c92539bbe8e32517606d2348a2"}, 0x15, 0x1) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x4002}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}]}, 0x48}}, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=@unlock_all, 0xb) sendmsg$can_raw(r8, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r10}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) 0s ago: executing program 2 (id=2744): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) truncate(0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1: Manufacturer: syz [ 715.422945][ T5617] usb 2-1: SerialNumber: syz [ 715.626799][T13479] siw: device registration error -23 [ 715.703420][T13482] syz.0.2168 (13482): drop_caches: 2 [ 715.869599][ T5617] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 715.879606][ T5617] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 716.783321][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 716.806859][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 716.838501][ T5617] usb 2-1: 2:1 : invalid Cluster Descriptor size [ 716.849827][T13506] usb usb7: usbfs: process 13506 (syz.3.2177) did not claim interface 0 before use [ 716.979327][T13509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2178'. [ 718.936747][T13532] syz.4.2186 (13532): drop_caches: 2 [ 719.053790][ T5801] usb 2-1: USB disconnect, device number 40 [ 719.207665][T13541] bad cache= option: none76 [ 719.207665][T13541] nr_mlock 0 [ 719.207665][T13541] nr_zspages 0 [ 719.207665][T13541] nr_free_cma 0 [ 719.207665][T13541] numa_hit 3591969 [ 719.207665][T13541] numa_miss 1 [ 719.207665][T13541] numa_foreign 1 [ 719.207665][T13541] numa_interleave 8777 [ 719.207665][T13541] numa_local 3587557 [ 719.207665][T13541] numa_other 4413 [ 719.207665][T13541] nr_inactive_anon 0 [ 719.207665][T13541] nr_active_anon 13661 [ 719.207665][T13541] nr_inactive_file 41572 [ 719.207665][T13541] nr_active_file 21396 [ 719.207665][T13541] nr_unevictable 768 [ 719.207665][T13541] nr_slab_reclaimable 8214 [ 719.207665][T13541] nr_slab_unreclaimable 106424 [ 719.207665][T13541] nr_isolated_anon 0 [ 719.207665][T13541] nr_isolated_file 0 [ 719.207665][T13541] workingset_nodes 0 [ 719.207665][T13541] workingset_refault_anon 1440 [ 719.207665][T13541] workingset_refault_file 0 [ 719.207665][T13541] workingset_activate_anon 415 [ 719.207665][T13541] workingset_activate_file 0 [ 719.207665][T13541] workingset_restore_anon 0 [ 719.207665][T13541] workingset_restore_file 0 [ 719.207665][T13541] workingset_nodereclaim 0 [ 719.207665][T13541] nr_anon_pages 8967 [ 719.207665][T13541] nr_mapped 32551 [ 719.207665][T13541] nr_file_pages 68431 [ 719.207665][T13541] nr_dirty 576 [ 719.207665][T13541] nr_writeback 0 [ 719.207665][T13541] nr_shmem 5467 [ 719.207665][T13541] nr_shmem_hugepages 0 [ 719.207665][T13541] nr_shmem_pmdmapped 0 [ 719.207665][T13541] nr_file_hugepages 0 [ 719.207665][T13541] nr_file_pmdmapped 0 [ 719.207665][T13541] nr_anon_transparent_hugepages 0 [ 719.207665][T13541] nr_vmscan_write 2757 [ 719.207665][T13541] nr_vmscan_immediate_reclaim 2048 [ 719.207665][T13541] nr_dirtied 17013 [ 719.207665][T13541] nr_written 14677 [ 719.207665][T13541] nr_throttled_written 0 [ 719.207665][T13541] nr_kernel_misc_reclaimable 0 [ 719.207665][T13541] nr_foll_pin_acquired 10795 [ 719.207665][T13541] nr_foll_pin_released 10795 [ 719.208048][T13541] CIFS: VFS: bad cache= option: none76 [ 719.208048][T13541] nr_mlock 0 [ 719.208048][T13541] nr_zspages 0 [ 719.208048][T13541] nr_free_cma 0 [ 719.208048][T13541] numa_hit 3591969 [ 719.208048][T13541] numa_miss 1 [ 719.208048][T13541] numa_foreign 1 [ 719.208048][T13541] numa_interleave 8777 [ 719.208048][T13541] numa_local 3587557 [ 719.208048][T13541] numa_other 4413 [ 719.208048][T13541] nr_inactive_anon 0 [ 719.208048][T13541] nr_active_anon 13661 [ 719.208048][T13541] nr_inactive_file 41572 [ 719.208048][T13541] nr_active_file 21396 [ 719.208048][T13541] nr_unevictable 768 [ 719.208048][T13541] nr_slab_reclaimable 8214 [ 719.208048][T13541] nr_slab_unreclaimable 106424 [ 719.208048][T13541] nr_isolated_anon 0 [ 719.208048][T13541] nr_isolated_file 0 [ 719.208048][T13541] workingset_nodes 0 [ 719.208048][T13541] workingset_refault_anon 1440 [ 719.208048][T13541] workingset_refault_file 0 [ 719.208048][T13541] workingset_activate_anon 415 [ 719.208048][T13541] workingset_activate_file 0 [ 719.208048][T13541] workingset_restore_anon 0 [ 719.208048][T13541] workingset_restore_file 0 [ 719.208048][T13541] workingset_nodereclaim 0 [ 719.208048][T13541] nr_anon_pages 8967 [ 719.208048][T13541] nr_mapped 32551 [ 719.208048][T13541] nr_file_pages 68431 [ 719.208048][T13541] nr_dirty 576 [ 719.208048][T13541] nr_writeback 0 [ 719.208048][T13541] nr_shmem 5467 [ 719.208048][T13541] nr_shmem_hugepages 0 [ 719.208048][T13541] nr_shmem_pmdmapped 0 [ 719.208048][T13541] nr_file_hugepages 0 [ 719.208048][T13541] nr_file_pmdmapped 0 [ 719.208048][T13541] nr_anon_transparent_hugepages 0 [ 719.208048][T13541] nr_vmscan_write 2757 [ 719.208048][T13541] nr_vmscan_immediate_reclaim 2048 [ 719.208048][T13541] nr_dirtied 17013 [ 719.208048][T13541] nr_written 14677 [ 719.208048][T13541] nr_throttled_written 0 [ 719.208048][T13541] nr_kernel_misc_reclaimable 0 [ 719.208048][T13541] nr_foll_pin_acquired 10795 [ 719.208048][T13541] nr_foll_pin_released 10795 [ 719.583877][ T13] wlan1: Trigger new scan to find an IBSS to join [ 719.639462][ T29] audit: type=1400 audit(1779849269.859:661): avc: denied { setopt } for pid=13543 comm="syz.2.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 719.662554][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'. [ 719.710074][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'. [ 720.355967][T13568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=13568 comm=syz.1.2198 [ 720.889604][T13568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.896970][T13568] IPv6: NLM_F_CREATE should be set when creating new route [ 721.913649][ T5801] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 722.155176][ T5801] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.173612][ T5801] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 722.241828][T13589] siw: device registration error -23 [ 722.603281][ T5801] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 722.632951][ T1100] wlan1: Trigger new scan to find an IBSS to join [ 722.646576][ T5801] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.665920][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.694367][ T5801] usb 1-1: Product: syz [ 722.708694][ T5801] usb 1-1: Manufacturer: syz [ 722.721200][ T5801] usb 1-1: SerialNumber: syz [ 722.832469][T13592] syz.3.2204 (13592): drop_caches: 2 [ 722.847596][ T5801] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 722.988211][ T5801] cdc_ncm 1-1:1.0: bind() failure [ 723.800370][ T5617] kernel write not supported for file /dsp1 (pid: 5617 comm: kworker/1:4) [ 724.031014][T13607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13607 comm=syz.3.2209 [ 724.053503][T13611] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2210'. [ 724.715515][T13627] FAULT_INJECTION: forcing a failure. [ 724.715515][T13627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.734126][T13627] CPU: 0 UID: 0 PID: 13627 Comm: syz.2.2213 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.734156][T13627] Tainted: [L]=SOFTLOCKUP [ 724.734162][T13627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 724.734171][T13627] Call Trace: [ 724.734176][T13627] [ 724.734183][T13627] dump_stack_lvl+0x100/0x190 [ 724.734210][T13627] should_fail_ex.cold+0x5/0xa [ 724.734234][T13627] _copy_to_iter+0x5a4/0x1720 [ 724.734268][T13627] ? __pfx__copy_to_iter+0x10/0x10 [ 724.734295][T13627] ? find_held_lock+0x2b/0x80 [ 724.734313][T13627] ? unix_seq_stop+0xba/0xf0 [ 724.734336][T13627] ? unix_seq_stop+0xba/0xf0 [ 724.734361][T13627] ? do_raw_spin_unlock+0x145/0x1e0 [ 724.734391][T13627] seq_read_iter+0xdab/0x1270 [ 724.734424][T13627] seq_read+0x33b/0x4c0 [ 724.734446][T13627] ? __pfx_seq_read+0x10/0x10 [ 724.734469][T13627] ? __lock_acquire+0x4a5/0x2630 [ 724.734492][T13627] ? import_ubuf+0x1b6/0x220 [ 724.734521][T13627] ? selinux_file_permission+0x8f/0x6d0 [ 724.734552][T13627] ? __pfx_seq_read+0x10/0x10 [ 724.734573][T13627] proc_reg_read+0x240/0x330 [ 724.734598][T13627] ? __pfx_proc_reg_read+0x10/0x10 [ 724.734622][T13627] vfs_readv+0x5d8/0x8d0 [ 724.734648][T13627] ? __pfx_vfs_readv+0x10/0x10 [ 724.734667][T13627] ? find_held_lock+0x2b/0x80 [ 724.734699][T13627] ? __fget_files+0x21f/0x3d0 [ 724.734730][T13627] ? do_preadv+0x1ac/0x270 [ 724.734746][T13627] do_preadv+0x1ac/0x270 [ 724.734765][T13627] ? __pfx_do_preadv+0x10/0x10 [ 724.734785][T13627] ? rcu_is_watching+0x12/0xc0 [ 724.734814][T13627] do_syscall_64+0x10b/0x860 [ 724.734838][T13627] ? clear_bhb_loop+0x40/0x90 [ 724.734859][T13627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.734876][T13627] RIP: 0033:0x7efdfa39ce59 [ 724.734891][T13627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.734906][T13627] RSP: 002b:00007efdfb2a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 724.734923][T13627] RAX: ffffffffffffffda RBX: 00007efdfa615fa0 RCX: 00007efdfa39ce59 [ 724.734934][T13627] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000d [ 724.734943][T13627] RBP: 00007efdfb2a0090 R08: 00000000fffffffe R09: 0000000000000000 [ 724.734953][T13627] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 724.734962][T13627] R13: 00007efdfa616038 R14: 00007efdfa615fa0 R15: 00007ffc139b3878 [ 724.734987][T13627] [ 725.062551][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2216'. [ 725.085499][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2216'. [ 725.105149][T13642] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 725.112745][T13642] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 725.125605][T13642] fuse: Bad value for 'fd' [ 725.136681][T13642] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 725.137693][T13642] FAULT_INJECTION: forcing a failure. [ 725.137693][T13642] name failslab, interval 1, probability 0, space 0, times 0 [ 725.249452][T13642] CPU: 1 UID: 0 PID: 13642 Comm: syz.2.2218 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.249479][T13642] Tainted: [L]=SOFTLOCKUP [ 725.249485][T13642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 725.249494][T13642] Call Trace: [ 725.249501][T13642] [ 725.249507][T13642] dump_stack_lvl+0x100/0x190 [ 725.249534][T13642] should_fail_ex.cold+0x5/0xa [ 725.249557][T13642] ? tomoyo_realpath_from_path+0xb6/0x690 [ 725.249581][T13642] should_failslab+0xc2/0x120 [ 725.249601][T13642] __kmalloc_noprof+0xe0/0x850 [ 725.249626][T13642] ? kfree+0x1dd/0x6c0 [ 725.249653][T13642] tomoyo_realpath_from_path+0xb6/0x690 [ 725.249684][T13642] tomoyo_path_number_perm+0x23c/0x580 [ 725.249706][T13642] ? tomoyo_path_number_perm+0x22e/0x580 [ 725.249728][T13642] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 725.249782][T13642] ? find_held_lock+0x2b/0x80 [ 725.249800][T13642] ? __fget_files+0x215/0x3d0 [ 725.249822][T13642] ? hook_file_ioctl_common+0x149/0x410 [ 725.249838][T13642] ? __fget_files+0x215/0x3d0 [ 725.249863][T13642] ? __fget_files+0x21f/0x3d0 [ 725.249888][T13642] security_file_ioctl+0xd3/0x230 [ 725.249914][T13642] __x64_sys_ioctl+0xb7/0x210 [ 725.249936][T13642] do_syscall_64+0x10b/0x860 [ 725.249962][T13642] ? clear_bhb_loop+0x40/0x90 [ 725.249984][T13642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.250002][T13642] RIP: 0033:0x7efdfa39ce59 [ 725.250017][T13642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.250033][T13642] RSP: 002b:00007efdfb2a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.250051][T13642] RAX: ffffffffffffffda RBX: 00007efdfa615fa0 RCX: 00007efdfa39ce59 [ 725.250068][T13642] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000007 [ 725.250078][T13642] RBP: 00007efdfb2a0090 R08: 0000000000000000 R09: 0000000000000000 [ 725.250088][T13642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.250098][T13642] R13: 00007efdfa616038 R14: 00007efdfa615fa0 R15: 00007ffc139b3878 [ 725.250122][T13642] [ 725.250129][T13642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 725.485216][T13642] @0: renamed from bond_slave_1 (while UP) [ 725.500636][ T5617] usb 1-1: USB disconnect, device number 48 [ 725.521573][T13648] fuse: Bad value for 'fd' [ 725.547235][T13649] syz.4.2219 (13649): drop_caches: 2 [ 725.692895][T13651] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 725.920558][T13651] @0: renamed from bond_slave_1 (while UP) [ 726.623718][ T6939] wlan1: Trigger new scan to find an IBSS to join [ 726.637329][T13670] FAULT_INJECTION: forcing a failure. [ 726.637329][T13670] name failslab, interval 1, probability 0, space 0, times 0 [ 726.654052][T13670] CPU: 0 UID: 0 PID: 13670 Comm: syz.1.2227 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.654082][T13670] Tainted: [L]=SOFTLOCKUP [ 726.654089][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.654099][T13670] Call Trace: [ 726.654106][T13670] [ 726.654113][T13670] dump_stack_lvl+0x100/0x190 [ 726.654140][T13670] should_fail_ex.cold+0x5/0xa [ 726.654173][T13670] ? tomoyo_realpath_from_path+0xb6/0x690 [ 726.654200][T13670] should_failslab+0xc2/0x120 [ 726.654222][T13670] __kmalloc_noprof+0xe0/0x850 [ 726.654248][T13670] ? kfree+0x1dd/0x6c0 [ 726.654276][T13670] tomoyo_realpath_from_path+0xb6/0x690 [ 726.654309][T13670] tomoyo_path_number_perm+0x23c/0x580 [ 726.654332][T13670] ? tomoyo_path_number_perm+0x22e/0x580 [ 726.654356][T13670] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 726.654404][T13670] ? find_held_lock+0x2b/0x80 [ 726.654423][T13670] ? __fget_files+0x215/0x3d0 [ 726.654445][T13670] ? hook_file_ioctl_common+0x149/0x410 [ 726.654463][T13670] ? __fget_files+0x215/0x3d0 [ 726.654490][T13670] ? __fget_files+0x21f/0x3d0 [ 726.654518][T13670] security_file_ioctl+0xd3/0x230 [ 726.654545][T13670] __x64_sys_ioctl+0xb7/0x210 [ 726.654567][T13670] do_syscall_64+0x10b/0x860 [ 726.654593][T13670] ? clear_bhb_loop+0x40/0x90 [ 726.654616][T13670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.654633][T13670] RIP: 0033:0x7f6a6019ce59 [ 726.654648][T13670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.654665][T13670] RSP: 002b:00007f6a61138028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.654682][T13670] RAX: ffffffffffffffda RBX: 00007f6a60415fa0 RCX: 00007f6a6019ce59 [ 726.654694][T13670] RDX: 0000200000000380 RSI: 000000008038550a RDI: 0000000000000003 [ 726.654704][T13670] RBP: 00007f6a61138090 R08: 0000000000000000 R09: 0000000000000000 [ 726.654715][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.654725][T13670] R13: 00007f6a60416038 R14: 00007f6a60415fa0 R15: 00007ffd7e9c3968 [ 726.654750][T13670] [ 726.654757][T13670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 726.873791][T13670] usb usb7: usbfs: process 13670 (syz.1.2227) did not claim interface 0 before use [ 726.874983][ T5801] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 727.916914][T13679] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 727.954702][ T5800] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 727.962352][ T5801] usb 5-1: device descriptor read/64, error -71 [ 727.988639][T13680] 9p: Could not find request transport: tc [ 728.130618][ T1100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 728.183700][ T5800] usb 1-1: Using ep0 maxpacket: 16 [ 728.204335][ T5800] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 728.320081][ T5801] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 728.340430][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.379219][ T5800] usb 1-1: Product: syz [ 728.396862][ T5800] usb 1-1: Manufacturer: syz [ 728.413379][ T5800] usb 1-1: SerialNumber: syz [ 728.496060][ T5801] usb 5-1: device descriptor read/64, error -71 [ 728.514702][ T5800] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 728.526229][ T1100] wlan1: Creating new IBSS network, BSSID 4e:5c:06:f1:f8:47 [ 728.634020][ T5801] usb usb5-port1: attempt power cycle [ 729.910106][ T5800] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 731.205670][ T5800] usb 1-1: USB disconnect, device number 49 [ 731.244621][ T5801] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 731.344245][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.474251][ T5801] usb 5-1: device not accepting address 51, error -71 [ 731.597388][ T29] audit: type=1400 audit(1779849281.779:662): avc: denied { mounton } for pid=13713 comm="syz.2.2239" path="/proc/1404/cgroup" dev="proc" ino=60704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 731.715940][T13712] FAULT_INJECTION: forcing a failure. [ 731.715940][T13712] name failslab, interval 1, probability 0, space 0, times 0 [ 731.729160][T13712] CPU: 0 UID: 0 PID: 13712 Comm: syz.4.2240 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.729179][T13712] Tainted: [L]=SOFTLOCKUP [ 731.729183][T13712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 731.729190][T13712] Call Trace: [ 731.729194][T13712] [ 731.729198][T13712] dump_stack_lvl+0x100/0x190 [ 731.729216][T13712] should_fail_ex.cold+0x5/0xa [ 731.729232][T13712] should_failslab+0xc2/0x120 [ 731.729245][T13712] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 731.729263][T13712] ? zswap_store+0xc6d/0x2e70 [ 731.729280][T13712] zswap_store+0xc6d/0x2e70 [ 731.729294][T13712] ? smp_call_function_many_cond+0x1361/0x1700 [ 731.729314][T13712] ? __pfx_zswap_store+0x10/0x10 [ 731.729328][T13712] ? find_held_lock+0x2b/0x80 [ 731.729339][T13712] ? folio_free_swap+0x60a/0x9f0 [ 731.729351][T13712] ? folio_free_swap+0x60a/0x9f0 [ 731.729366][T13712] ? folio_free_swap+0x3f/0x9f0 [ 731.729387][T13712] swap_writeout+0x47e/0x14f0 [ 731.729408][T13712] shrink_folio_list+0x51c5/0x60c0 [ 731.729430][T13712] ? __pfx_shrink_folio_list+0x10/0x10 [ 731.729445][T13712] ? lock_acquire+0x1b1/0x370 [ 731.729460][T13712] ? __kfree_rcu_sheaf+0x195/0x710 [ 731.729470][T13712] ? __kfree_rcu_sheaf+0x195/0x710 [ 731.729483][T13712] ? __kfree_rcu_sheaf+0x19a/0x710 [ 731.729493][T13712] ? bpf_ksym_find+0x128/0x1c0 [ 731.729511][T13712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 731.729534][T13712] ? __lock_acquire+0x4a5/0x2630 [ 731.729547][T13712] ? __css_rstat_updated+0x1ce/0x5a0 [ 731.729561][T13712] ? __pfx___css_rstat_updated+0x10/0x10 [ 731.729576][T13712] reclaim_folio_list+0xdc/0x5e0 [ 731.729593][T13712] ? __pfx_reclaim_folio_list+0x10/0x10 [ 731.729607][T13712] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 731.729629][T13712] ? lru_gen_update_size+0x431/0xe20 [ 731.729650][T13712] ? lru_gen_del_folio+0x382/0x5f0 [ 731.729665][T13712] reclaim_pages+0x428/0x5e0 [ 731.729681][T13712] ? __pfx_reclaim_pages+0x10/0x10 [ 731.729696][T13712] ? find_held_lock+0x2b/0x80 [ 731.729706][T13712] ? madvise_cold_or_pageout_pte_range+0xb49/0x2620 [ 731.729723][T13712] madvise_cold_or_pageout_pte_range+0x155c/0x2620 [ 731.729742][T13712] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 731.729764][T13712] ? __lock_acquire+0x4a5/0x2630 [ 731.729777][T13712] ? __css_rstat_updated+0x1ce/0x5a0 [ 731.729791][T13712] ? __pfx___css_rstat_updated+0x10/0x10 [ 731.729805][T13712] ? register_lock_class+0x40/0x560 [ 731.729819][T13712] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 731.729834][T13712] walk_pgd_range+0xc1a/0x1dd0 [ 731.729847][T13712] ? rcu_read_unlock+0x17/0x60 [ 731.729864][T13712] ? __pfx_walk_pgd_range+0x10/0x10 [ 731.729875][T13712] ? folios_put_refs+0x716/0xa90 [ 731.729893][T13712] __walk_page_range+0x171/0x850 [ 731.729908][T13712] ? find_held_lock+0x2b/0x80 [ 731.729923][T13712] walk_page_range_vma_unsafe+0x209/0x8f0 [ 731.729935][T13712] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 731.729949][T13712] ? find_held_lock+0x2b/0x80 [ 731.729958][T13712] ? mlock_drain_local+0x254/0x4e0 [ 731.729974][T13712] ? mlock_drain_local+0x254/0x4e0 [ 731.729992][T13712] walk_page_range_vma+0x63/0x90 [ 731.730004][T13712] madvise_pageout+0x259/0x540 [ 731.730016][T13712] ? __pfx_madvise_pageout+0x10/0x10 [ 731.730035][T13712] ? mas_prev_slot+0x760/0x1d20 [ 731.730049][T13712] madvise_vma_behavior+0x452/0x2240 [ 731.730064][T13712] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 731.730082][T13712] ? find_vma_prev+0xd8/0x150 [ 731.730093][T13712] ? _kstrtoull+0x13c/0x1f0 [ 731.730106][T13712] ? __pfx_find_vma_prev+0x10/0x10 [ 731.730125][T13712] madvise_walk_vmas+0x2fe/0xa90 [ 731.730141][T13712] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 731.730158][T13712] madvise_do_behavior+0x1ea/0x510 [ 731.730173][T13712] ? __pfx_madvise_do_behavior+0x10/0x10 [ 731.730187][T13712] ? down_read+0x13b/0x450 [ 731.730203][T13712] do_madvise+0x195/0x240 [ 731.730216][T13712] ? __pfx_do_madvise+0x10/0x10 [ 731.730228][T13712] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 731.730244][T13712] ? __pfx_vfs_write+0x3/0x10 [ 731.730265][T13712] ? ksys_write+0x1ac/0x250 [ 731.730277][T13712] ? __pfx_ksys_write+0x10/0x10 [ 731.730291][T13712] __x64_sys_madvise+0xa9/0x110 [ 731.730304][T13712] ? lockdep_hardirqs_on+0x78/0x100 [ 731.730320][T13712] do_syscall_64+0x10b/0x860 [ 731.730335][T13712] ? clear_bhb_loop+0x40/0x90 [ 731.730348][T13712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.730359][T13712] RIP: 0033:0x7f3c7b99ce59 [ 731.730369][T13712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.730379][T13712] RSP: 002b:00007f3c7c829028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 731.730391][T13712] RAX: ffffffffffffffda RBX: 00007f3c7bc15fa0 RCX: 00007f3c7b99ce59 [ 731.730397][T13712] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 731.730404][T13712] RBP: 00007f3c7c829090 R08: 0000000000000000 R09: 0000000000000000 [ 731.730411][T13712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.730417][T13712] R13: 00007f3c7bc16038 R14: 00007f3c7bc15fa0 R15: 00007ffc4f59f698 [ 731.730431][T13712] [ 732.318053][ T29] audit: type=1400 audit(1779849281.789:663): avc: denied { append } for pid=13713 comm="syz.2.2239" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 733.140703][T13733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13733 comm=syz.1.2247 [ 733.176942][T13735] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 733.190504][ T29] audit: type=1400 audit(1779849283.409:664): avc: denied { firmware_load } for pid=13734 comm="syz.4.2248" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 733.211013][T13735] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 733.243654][ T5800] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 733.447082][ T5800] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.468421][ T5800] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 733.483730][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.553596][ T5800] usb 4-1: config 0 descriptor?? [ 733.698415][ T5800] gspca_main: spca501-2.14.0 probing 0000:0000 [ 734.268863][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2253'. [ 734.301366][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2252'. [ 734.323911][T11249] wlan1: Selected IBSS BSSID 4e:5c:06:f1:f8:47 based on configured SSID [ 734.404138][ T5800] gspca_spca501: reg write: error -110 [ 734.415420][ T5800] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 734.431297][ T5800] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 734.482894][ T1219] usb 4-1: USB disconnect, device number 53 [ 734.994510][ T5617] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 735.034069][ T29] audit: type=1400 audit(1779849285.259:665): avc: denied { create } for pid=13764 comm="syz.3.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 735.157640][ T29] audit: type=1400 audit(1779849285.289:666): avc: denied { sys_admin } for pid=13764 comm="syz.3.2256" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 735.188894][ T5617] usb 3-1: Using ep0 maxpacket: 8 [ 735.207735][ T5617] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 735.225615][ T5617] usb 3-1: config 179 has no interface number 0 [ 735.243650][ T5617] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 735.277359][ T5617] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 735.313733][ T5617] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 735.343730][ T5617] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 735.373686][ T5617] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 735.412771][ T5617] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 735.462519][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.472774][T13765] lo speed is unknown, defaulting to 1000 [ 735.499575][T13761] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 735.551470][T13765] lo speed is unknown, defaulting to 1000 [ 735.696578][T13779] syz.4.2261 (13779): drop_caches: 2 [ 736.856689][ T1219] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 736.873915][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2254'. [ 736.913197][T13761] netlink: 'syz.2.2254': attribute type 7 has an invalid length. [ 736.970304][T13761] netlink: 'syz.2.2254': attribute type 8 has an invalid length. [ 737.023650][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 737.057260][T13785] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 737.077802][T13785] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 737.112426][ T1219] usb 3-1: USB disconnect, device number 54 [ 737.120593][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 737.120642][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 737.962619][ T6995] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 740.242743][T13812] binder: 13810:13812 ioctl c0306201 0 returned -14 [ 740.295460][T13811] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 740.336956][T13811] ucma_write: process 1423 (syz.2.2267) changed security contexts after opening file descriptor, this is not allowed. [ 740.375157][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2268'. [ 740.376067][ T29] audit: type=1400 audit(1779849290.599:667): avc: denied { ioctl } for pid=13815 comm="syz.1.2270" path="socket:[61017]" dev="sockfs" ino=61017 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 741.536582][T13820] syz.1.2271 (13820): drop_caches: 2 [ 741.641422][T13828] fuse: Unknown parameter 'fd0x0000000000000003' [ 741.825691][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.832223][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.193168][T13851] syz.2.2273 (13851): drop_caches: 2 [ 742.209757][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2281'. [ 742.554602][ T6993] wlan1: Trigger new scan to find an IBSS to join [ 743.118937][T13856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2282'. [ 744.161128][T13868] vcan0: tx drop: invalid sa for name 0x00000000fffffffd [ 744.219416][ T6939] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 744.245526][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2285'. [ 744.803751][ T1219] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 744.995546][ T1219] usb 1-1: Using ep0 maxpacket: 32 [ 745.055968][ T1219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.150056][ T1219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.237824][ T1219] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 745.326067][ T1219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.472040][ T1219] usb 1-1: config 0 descriptor?? [ 746.378313][ T6993] wlan1: Trigger new scan to find an IBSS to join [ 746.452203][T13897] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 746.519196][T13898] syz.1.2296 (13898): drop_caches: 2 [ 746.939870][ T1219] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 747.055370][ T1219] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 747.144507][ T1219] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 747.240732][ T1219] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 747.346760][ T1219] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 747.393404][ T1219] savu 0003:1E7D:2D5A.000D: unbalanced collection at end of report description [ 747.415250][ T1219] savu 0003:1E7D:2D5A.000D: parse failed [ 747.448469][ T1219] savu 0003:1E7D:2D5A.000D: probe with driver savu failed with error -22 [ 747.473226][T13903] serio: Serial port ptm0 [ 747.482098][T13905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2299'. [ 747.528536][ T1219] usb 1-1: USB disconnect, device number 50 [ 747.640900][T13917] syzkaller0: entered promiscuous mode [ 747.647405][T13917] syzkaller0: entered allmulticast mode [ 747.747601][ T29] audit: type=1400 audit(1779849297.969:668): avc: denied { open } for pid=13920 comm="syz.1.2306" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 747.787628][ T29] audit: type=1400 audit(1779849297.999:669): avc: denied { ioctl } for pid=13920 comm="syz.1.2306" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 747.903763][ T5719] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 748.057503][ T5719] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 748.077151][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.086117][ T5719] usb 3-1: Product: syz [ 748.090505][ T5719] usb 3-1: Manufacturer: syz [ 748.096000][ T5719] usb 3-1: SerialNumber: syz [ 749.733452][ T1100] wlan1: Trigger new scan to find an IBSS to join [ 749.897185][ T6995] wlan1: Trigger new scan to find an IBSS to join [ 750.594939][ T1219] lo speed is unknown, defaulting to 1000 [ 750.714390][T13944] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2314'. [ 750.826979][ T5719] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 750.867242][ T5719] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 750.898557][ T5719] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 750.912906][ T5719] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 750.931495][ T5719] usb 3-1: USB disconnect, device number 55 [ 750.940770][T13958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2318'. [ 751.074415][ T6939] wlan1: Creating new IBSS network, BSSID 8a:2b:15:1a:bf:f7 [ 751.588611][ T6939] wlan1: Creating new IBSS network, BSSID 9e:a8:7d:54:c2:d7 [ 752.724434][T13972] syzkaller0: entered promiscuous mode [ 752.741851][T13972] syzkaller0: entered allmulticast mode [ 752.805346][T13982] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 752.823638][T13982] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 753.362554][ T5719] lo speed is unknown, defaulting to 1000 [ 754.311993][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2330'. [ 754.355645][ T1100] wlan1: Selected IBSS BSSID 8a:2b:15:1a:bf:f7 based on configured SSID [ 754.615703][ T1219] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 754.829105][ T1219] usb 3-1: not running at top speed; connect to a high speed hub [ 754.897558][ T1219] usb 3-1: config 8 has an invalid interface number: 6 but max is 3 [ 754.970963][ T1219] usb 3-1: config 8 has an invalid interface number: 85 but max is 3 [ 755.044587][ T1219] usb 3-1: config 8 has an invalid interface number: 84 but max is 3 [ 755.122260][ T1219] usb 3-1: config 8 has no interface number 0 [ 755.176755][ T1219] usb 3-1: config 8 has no interface number 1 [ 755.227661][ T1219] usb 3-1: config 8 has no interface number 2 [ 755.298205][ T1219] usb 3-1: config 8 interface 6 altsetting 7 has an endpoint descriptor with address 0x73, changing to 0x3 [ 755.336715][T14015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2335'. [ 755.361162][ T1219] usb 3-1: config 8 interface 6 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 755.498168][ T1219] usb 3-1: config 8 interface 6 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 755.644152][ T1219] usb 3-1: config 8 interface 84 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 755.736004][ T1219] usb 3-1: config 8 interface 84 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 755.779048][ T1219] usb 3-1: config 8 interface 84 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 755.803729][ T1219] usb 3-1: config 8 interface 84 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 755.819959][T14021] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.832240][ T1219] usb 3-1: config 8 interface 84 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 755.863204][ T1219] usb 3-1: config 8 interface 3 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 755.889991][T14020] serio: Serial port ptm1 [ 755.894577][ T1219] usb 3-1: config 8 interface 6 has no altsetting 0 [ 755.909853][ T1219] usb 3-1: config 8 interface 85 has no altsetting 0 [ 755.923777][ T1219] usb 3-1: config 8 interface 84 has no altsetting 0 [ 755.944567][ T1219] usb 3-1: config 8 interface 3 has no altsetting 0 [ 755.960827][ T1219] usb 3-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 755.973497][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.991840][ T1219] usb 3-1: Product: Щ [ 756.000604][ T1219] usb 3-1: Manufacturer: 舣鎀횅㪗稾췠דּ蔓㏚댉幯蓻봨Ⰴ医蘅㲨ⅶ莞ፃ钭쇖紐꫰睸ꯐ传䦳￈椑귉ฉ䣰쐹㓈﹩㷞ക⪟뷶朼庥뫐꣭๜쟶뤆퍀婘勑餎ꚸ膜宰㮌煳뚙捫 [ 756.044032][ T1219] usb 3-1: SerialNumber: 埤흦쑢穤涽č䔈ᐊ퓹襲辺앾⳹跁왻镸벥㿰靉㼸炪㭅킑拱ᆂꞆ嚧喋뽓톣ᨳ↍냖 [ 756.076370][T14009] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 756.296944][ T1219] usb-storage 3-1:8.6: USB Mass Storage device detected [ 756.308469][ T1219] usb-storage 3-1:8.6: Quirks match for vid 090a pid 1001: 2 [ 756.468086][ T1219] usb-storage 3-1:8.85: USB Mass Storage device detected [ 756.477542][ T1219] usb-storage 3-1:8.85: Quirks match for vid 090a pid 1001: 2 [ 756.540571][ T1219] usb-storage 3-1:8.84: USB Mass Storage device detected [ 756.553063][ T1219] usb-storage 3-1:8.84: Quirks match for vid 090a pid 1001: 2 [ 756.600424][ T1219] usb-storage 3-1:8.3: USB Mass Storage device detected [ 756.609328][ T1219] usb-storage 3-1:8.3: Quirks match for vid 090a pid 1001: 2 [ 756.702418][ T1219] usb 3-1: USB disconnect, device number 56 [ 756.872603][T14049] syz.1.2342 (14049): drop_caches: 2 [ 759.228679][ T29] audit: type=1400 audit(1779849309.449:670): avc: denied { create } for pid=14068 comm="syz.2.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 759.263972][T14069] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2350'. [ 760.230608][ T29] audit: type=1400 audit(1779849310.449:671): avc: denied { bind } for pid=14068 comm="syz.2.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 760.515551][T14072] No such timeout policy "syz1" [ 760.634826][T14088] fuse: Bad value for 'fd' [ 760.694083][ T6990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 762.925607][ T29] audit: type=1400 audit(1779849313.149:672): avc: denied { ioctl } for pid=14113 comm="syz.1.2366" path="socket:[62331]" dev="sockfs" ino=62331 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 763.133676][ T5800] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 763.310048][T14124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=14124 comm=syz.2.2368 [ 763.365627][T14124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 763.373002][T14124] IPv6: NLM_F_CREATE should be set when creating new route [ 763.494108][ T5800] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.501924][T14112] lo speed is unknown, defaulting to 1000 [ 763.517177][ T5800] usb 5-1: config 0 has no interfaces? [ 763.528467][ T5800] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 763.535324][T14112] lo speed is unknown, defaulting to 1000 [ 763.935221][T14130] siw: device registration error -23 [ 763.996298][ T5800] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 764.004369][ T5800] usb 5-1: Manufacturer: syz [ 764.011279][ T5800] usb 5-1: config 0 descriptor?? [ 765.184751][T14112] FAULT_INJECTION: forcing a failure. [ 765.184751][T14112] name failslab, interval 1, probability 0, space 0, times 0 [ 765.190873][ T6990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 765.198826][T14112] CPU: 0 UID: 0 PID: 14112 Comm: syz.4.2365 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.198850][T14112] Tainted: [L]=SOFTLOCKUP [ 765.198856][T14112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 765.198864][T14112] Call Trace: [ 765.198870][T14112] [ 765.198876][T14112] dump_stack_lvl+0x100/0x190 [ 765.198900][T14112] should_fail_ex.cold+0x5/0xa [ 765.198921][T14112] should_failslab+0xc2/0x120 [ 765.198940][T14112] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 765.198962][T14112] ? do_getname_kernel+0x5d/0x250 [ 765.198983][T14112] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 765.199011][T14112] do_getname_kernel+0x5d/0x250 [ 765.199034][T14112] vfs_path_lookup+0x7a/0xe0 [ 765.199053][T14112] ? __pfx_vfs_path_lookup+0x10/0x10 [ 765.199072][T14112] ? bpf_lsm_capable+0x9/0x10 [ 765.199088][T14112] ? security_capable+0x80/0x260 [ 765.199112][T14112] mntns_install+0x384/0x600 [ 765.199128][T14112] ? do_raw_spin_lock+0x128/0x260 [ 765.199150][T14112] ? __pfx_mntns_install+0x10/0x10 [ 765.199165][T14112] ? find_held_lock+0x2b/0x80 [ 765.199180][T14112] ? __do_sys_setns+0x151c/0x1f30 [ 765.199199][T14112] __do_sys_setns+0x15d7/0x1f30 [ 765.199215][T14112] ? fput+0x79/0x100 [ 765.199236][T14112] ? __pfx___do_sys_setns+0x10/0x10 [ 765.199249][T14112] ? ksys_write+0x1ac/0x250 [ 765.199269][T14112] ? rcu_is_watching+0x12/0xc0 [ 765.199295][T14112] do_syscall_64+0x10b/0x860 [ 765.199317][T14112] ? clear_bhb_loop+0x40/0x90 [ 765.199336][T14112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.199352][T14112] RIP: 0033:0x7f3c7b99ce59 [ 765.199366][T14112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.199380][T14112] RSP: 002b:00007f3c7c829028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 765.199395][T14112] RAX: ffffffffffffffda RBX: 00007f3c7bc15fa0 RCX: 00007f3c7b99ce59 [ 765.199405][T14112] RDX: 0000000000000000 RSI: 0000000066020000 RDI: 0000000000000005 [ 765.199414][T14112] RBP: 00007f3c7c829090 R08: 0000000000000000 R09: 0000000000000000 [ 765.199423][T14112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.199432][T14112] R13: 00007f3c7bc16038 R14: 00007f3c7bc15fa0 R15: 00007ffc4f59f698 [ 765.199453][T14112] [ 765.200351][ T5800] usb 5-1: USB disconnect, device number 53 [ 765.738483][T14154] siw: device registration error -23 [ 766.870637][ T29] audit: type=1400 audit(1779849317.089:673): avc: denied { accept } for pid=14163 comm="syz.1.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 767.258382][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 767.316986][ T29] audit: type=1400 audit(1779849317.519:674): avc: denied { ioctl } for pid=14179 comm="syz.0.2381" path="socket:[63545]" dev="sockfs" ino=63545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 767.527326][T14195] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 767.536922][ T5617] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 767.719402][ T5617] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 767.842889][ T5617] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 767.911268][ T5617] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.969303][ T5617] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 768.000616][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.032193][ T5617] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 768.054388][ T5617] usb 2-1: invalid MIDI out EP 0 [ 768.070167][T14205] fuse: Bad value for 'fd' [ 768.352956][T14213] serio: Serial port ptm0 [ 768.479998][ T5617] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 768.579121][ T5617] usb 2-1: USB disconnect, device number 41 [ 768.704385][T13774] Bluetooth: hci2: unexpected event for opcode 0xffff [ 768.918646][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2397'. [ 768.951130][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2397'. [ 768.966099][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2397'. [ 768.978442][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2397'. [ 770.075318][ T5617] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 770.275452][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 770.286748][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 770.306982][ T5617] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 770.380130][T14258] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 770.742455][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.771655][ T5617] usb 3-1: config 0 descriptor?? [ 770.780347][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'. [ 771.023622][ T5801] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 771.711013][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2401'. [ 771.895506][ T5617] ath6kl: Failed to submit usb control message: -110 [ 772.045398][ T5801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.063825][ T5801] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 772.074617][ T5801] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 772.091670][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.126868][ T5617] ath6kl: unable to send the bmi data to the device: -110 [ 772.136616][ T5617] ath6kl: Unable to send get target info: -110 [ 772.164711][ T5617] ath6kl: Failed to init ath6kl core: -110 [ 772.171759][ T5617] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 772.176942][ T5801] usb 1-1: config 0 descriptor?? [ 772.217859][ T5801] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 772.232518][ T5801] dvb-usb: bulk message failed: -22 (3/0) [ 772.260651][T14270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2408'. [ 772.279552][T14270] netlink: 'syz.3.2408': attribute type 7 has an invalid length. [ 772.305113][ T5801] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 772.315585][T14270] netlink: 'syz.3.2408': attribute type 8 has an invalid length. [ 772.331231][ T5801] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 772.343113][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2408'. [ 772.355994][ T5801] usb 1-1: media controller created [ 772.379872][ T5801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 772.416855][T14259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.428757][T14259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.464467][T14259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.476561][ T5801] dvb-usb: bulk message failed: -22 (6/0) [ 772.494939][T14259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.518810][ T5801] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 772.536486][T14259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.568419][ T5801] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 772.582329][T14259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.603288][ T5617] usb 3-1: USB disconnect, device number 57 [ 772.636144][ T5801] dvb-usb: schedule remote query interval to 150 msecs. [ 772.649839][ T5801] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 772.671946][ T5801] usb 1-1: USB disconnect, device number 51 [ 772.736784][ T5801] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 772.953144][T14280] serio: Serial port ptm0 [ 773.007672][T14283] fuse: Bad value for 'fd' [ 774.920157][ T29] audit: type=1400 audit(1779849325.139:675): avc: denied { create } for pid=14305 comm="syz.0.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 774.954096][T14321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2423'. [ 774.989937][T14321] netlink: 'syz.3.2423': attribute type 7 has an invalid length. [ 775.016942][T14321] netlink: 'syz.3.2423': attribute type 8 has an invalid length. [ 775.038807][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2423'. [ 775.117841][T14292] lo speed is unknown, defaulting to 1000 [ 775.234899][ T76] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 775.423983][T14292] lo speed is unknown, defaulting to 1000 [ 775.566336][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 775.833498][ T5617] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 775.858726][T14344] serio: Serial port ptm0 [ 775.953934][T14349] siw: device registration error -23 [ 776.035838][ T5617] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 776.333698][ T5617] usb 3-1: config 0 has no interface number 0 [ 776.347951][ T5617] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 776.387064][ T5617] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 776.410519][ T5617] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 776.420208][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.566166][ T5617] usb 3-1: config 0 descriptor?? [ 777.065296][T14331] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 777.090963][ T5617] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 777.169227][T14358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2433'. [ 777.286919][ T5719] usb 3-1: USB disconnect, device number 58 [ 777.403636][ T5617] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 777.532644][ T29] audit: type=1400 audit(1779849327.649:676): avc: denied { create } for pid=14354 comm="syz.0.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 777.597686][ T29] audit: type=1400 audit(1779849327.819:677): avc: denied { setopt } for pid=14354 comm="syz.0.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 777.605659][T14365] fuse: Bad value for 'fd' [ 777.727593][ T5617] usb 2-1: not running at top speed; connect to a high speed hub [ 777.739132][ T5617] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 777.754910][ T5617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.768214][ T5617] usb 2-1: Product: 㠊 [ 777.772540][ T5617] usb 2-1: Manufacturer: 䙢텝呠㴸㰱ꀮ희휅親鬸ⶈ崆㱦닩䎡륑䴆蝴쬄萄閭脇㚇鄏ի轅⵮茏㳝爉䰿췳ᾷ苚᱂քᡉ⾾ᜨ㨃俘陫냈杳ꇳ墇ꃮ丷╜ῆꮍ뻻ﾵ༝弟谎␡蝯狽椻魚襎摍 [ 777.798277][ T5617] usb 2-1: SerialNumber: 䀊 [ 777.813631][ T5801] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 778.016839][ T5801] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.028565][T14359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.039889][ T5801] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 778.050377][T14359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.058801][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.074398][ T5801] usb 5-1: Product: syz [ 778.082676][ T5801] usb 5-1: Manufacturer: syz [ 778.084554][T14359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.095906][ T5801] usb 5-1: SerialNumber: syz [ 778.097627][T14359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.113149][ T5801] usb 5-1: selecting invalid altsetting 1 [ 778.178731][ T5617] usb 2-1: USB disconnect, device number 42 [ 778.199988][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.373729][T10889] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 778.422375][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2443'. [ 778.521223][ T5801] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 778.528317][T10889] usb 3-1: Using ep0 maxpacket: 8 [ 778.533673][ T5801] cdc_ncm 5-1:1.0: bind() failure [ 778.545973][ T5801] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 778.554745][ T5801] cdc_ncm 5-1:1.1: bind() failure [ 778.560380][T10889] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 778.586534][T10889] usb 3-1: config 179 has no interface number 0 [ 778.601989][T10889] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 778.617463][T10889] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 778.632768][T10889] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 778.644080][T10889] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 778.656112][T10889] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 778.669521][T10889] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 778.679123][T10889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.121740][T14381] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 779.424653][T14394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2445'. [ 779.439822][T10889] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14 [ 779.806578][T14381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2442'. [ 779.817020][T14411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=14411 comm=syz.1.2451 [ 779.829787][T14381] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 779.840502][T14381] netlink: 'syz.2.2442': attribute type 8 has an invalid length. [ 779.855099][T14411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 779.862517][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 779.887698][T10889] usb 3-1: USB disconnect, device number 59 [ 779.893682][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 779.893712][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 780.090378][T14419] overlayfs: failed to clone upperpath [ 780.132246][T14418] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 780.380612][T14427] netlink: 'syz.0.2457': attribute type 5 has an invalid length. [ 780.442122][T14428] FAULT_INJECTION: forcing a failure. [ 780.442122][T14428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.455849][T14428] CPU: 1 UID: 0 PID: 14428 Comm: syz.0.2457 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.455878][T14428] Tainted: [L]=SOFTLOCKUP [ 780.455884][T14428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 780.455895][T14428] Call Trace: [ 780.455900][T14428] [ 780.455907][T14428] dump_stack_lvl+0x100/0x190 [ 780.455934][T14428] should_fail_ex.cold+0x5/0xa [ 780.455960][T14428] _copy_from_iter+0x1f4/0x1690 [ 780.455985][T14428] ? __asan_memset+0x23/0x50 [ 780.456017][T14428] ? __pfx__copy_from_iter+0x10/0x10 [ 780.456034][T14428] ? __pfx___alloc_skb+0x10/0x10 [ 780.456051][T14428] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 780.456085][T14428] netlink_sendmsg+0x808/0xda0 [ 780.456112][T14428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.456136][T14428] ? __might_fault+0x80/0x140 [ 780.456169][T14428] ____sys_sendmsg+0x9e1/0xb70 [ 780.456190][T14428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.456220][T14428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 780.456254][T14428] ___sys_sendmsg+0x190/0x1e0 [ 780.456282][T14428] ? __pfx____sys_sendmsg+0x10/0x10 [ 780.456320][T14428] ? rcu_is_watching+0x12/0xc0 [ 780.456361][T14428] __sys_sendmmsg+0x205/0x430 [ 780.456385][T14428] ? __pfx___sys_sendmmsg+0x10/0x10 [ 780.456413][T14428] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 780.456453][T14428] ? fput+0x79/0x100 [ 780.456478][T14428] ? ksys_write+0x1ac/0x250 [ 780.456498][T14428] ? __pfx_ksys_write+0x10/0x10 [ 780.456517][T14428] ? trace_irq_enable.constprop.0+0x31/0x160 [ 780.456546][T14428] __x64_sys_sendmmsg+0x9c/0x100 [ 780.456565][T14428] ? lockdep_hardirqs_on+0x78/0x100 [ 780.456592][T14428] do_syscall_64+0x10b/0x860 [ 780.456618][T14428] ? clear_bhb_loop+0x40/0x90 [ 780.456640][T14428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.456658][T14428] RIP: 0033:0x7fe35f79ce59 [ 780.456680][T14428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.456696][T14428] RSP: 002b:00007fe36065e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 780.456715][T14428] RAX: ffffffffffffffda RBX: 00007fe35fa16180 RCX: 00007fe35f79ce59 [ 780.456728][T14428] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000a [ 780.456739][T14428] RBP: 00007fe36065e090 R08: 0000000000000000 R09: 0000000000000000 [ 780.456750][T14428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.456761][T14428] R13: 00007fe35fa16218 R14: 00007fe35fa16180 R15: 00007fff7079bb68 [ 780.456786][T14428] [ 781.059846][ T76] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 781.186359][ T29] audit: type=1400 audit(1779849331.369:678): avc: denied { create } for pid=14430 comm="syz.1.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 781.572599][ T5719] usb 5-1: USB disconnect, device number 54 [ 782.397252][T14449] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 782.527049][T14454] fuse: Bad value for 'fd' [ 782.783660][ T5719] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 783.213662][T10889] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 783.292394][T14463] FAULT_INJECTION: forcing a failure. [ 783.292394][T14463] name failslab, interval 1, probability 0, space 0, times 0 [ 783.307175][T14463] CPU: 1 UID: 0 PID: 14463 Comm: syz.0.2469 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.307204][T14463] Tainted: [L]=SOFTLOCKUP [ 783.307210][T14463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 783.307221][T14463] Call Trace: [ 783.307228][T14463] [ 783.307236][T14463] dump_stack_lvl+0x100/0x190 [ 783.307262][T14463] should_fail_ex.cold+0x5/0xa [ 783.307288][T14463] should_failslab+0xc2/0x120 [ 783.307310][T14463] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 783.307338][T14463] ? skb_clone+0x190/0x400 [ 783.307366][T14463] skb_clone+0x190/0x400 [ 783.307389][T14463] netlink_deliver_tap+0xaed/0xcc0 [ 783.307420][T14463] netlink_unicast+0x62b/0x850 [ 783.307452][T14463] ? __pfx_netlink_unicast+0x10/0x10 [ 783.307486][T14463] netlink_sendmsg+0x8b0/0xda0 [ 783.307515][T14463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.307540][T14463] ? __might_fault+0x80/0x140 [ 783.307576][T14463] ____sys_sendmsg+0x9e1/0xb70 [ 783.307602][T14463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.307630][T14463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.307667][T14463] ___sys_sendmsg+0x190/0x1e0 [ 783.307696][T14463] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.307753][T14463] __sys_sendmsg+0x170/0x220 [ 783.307775][T14463] ? __pfx___sys_sendmsg+0x10/0x10 [ 783.307807][T14463] ? rcu_is_watching+0x12/0xc0 [ 783.307839][T14463] do_syscall_64+0x10b/0x860 [ 783.307867][T14463] ? clear_bhb_loop+0x40/0x90 [ 783.307889][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.307907][T14463] RIP: 0033:0x7fe35f79ce59 [ 783.307924][T14463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.307941][T14463] RSP: 002b:00007fe3606a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.307959][T14463] RAX: ffffffffffffffda RBX: 00007fe35fa15fa0 RCX: 00007fe35f79ce59 [ 783.307971][T14463] RDX: 0000000004000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 783.307981][T14463] RBP: 00007fe3606a0090 R08: 0000000000000000 R09: 0000000000000000 [ 783.307991][T14463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.308008][T14463] R13: 00007fe35fa16038 R14: 00007fe35fa15fa0 R15: 00007fff7079bb68 [ 783.308033][T14463] [ 783.547652][T10889] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 783.631074][T10889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.785929][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 783.805511][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 783.807171][T10889] usb 3-1: Product: syz [ 783.839781][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 783.866683][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'. [ 783.876065][ T5719] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 783.888725][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.889708][T10889] usb 3-1: Manufacturer: syz [ 783.923599][ T5719] usb 5-1: config 0 descriptor?? [ 783.924282][T10889] usb 3-1: SerialNumber: syz [ 783.965103][T10889] usb 3-1: config 0 descriptor?? [ 783.987007][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'. [ 784.053336][T14474] fuse: Bad value for 'fd' [ 784.183906][T10889] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 784.286345][ T5719] ath6kl: Failed to submit usb control message: -71 [ 784.297940][ T5719] ath6kl: unable to send the bmi data to the device: -71 [ 784.313912][ T5617] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 784.323596][ T5719] ath6kl: Unable to send get target info: -71 [ 784.354118][ T5719] ath6kl: Failed to init ath6kl core: -71 [ 784.360944][ T5719] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 784.382857][ T5719] usb 5-1: USB disconnect, device number 55 [ 784.450399][ T76] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 784.495363][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 784.506516][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 784.517786][ T5617] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 784.526883][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.536982][ T5617] usb 1-1: config 0 descriptor?? [ 784.822650][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2474'. [ 785.204589][ T5617] ath6kl: Failed to submit usb control message: -71 [ 785.211855][ T5617] ath6kl: unable to send the bmi data to the device: -71 [ 785.221044][ T5617] ath6kl: Unable to send get target info: -71 [ 785.224103][T14456] atomic_op ffff88806a7ba198 conn xmit_atomic 0000000000000000 [ 785.228145][ T5617] ath6kl: Failed to init ath6kl core: -71 [ 785.241634][ T5617] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 785.255738][ T5617] usb 1-1: USB disconnect, device number 52 [ 785.264956][T10889] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 785.287424][T10889] usb 3-1: USB disconnect, device number 60 [ 792.335312][ T6993] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 796.328887][ T6990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 803.265380][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.271745][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.183441][ T6993] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 813.225447][ T6990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 815.477708][ T6939] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 823.260227][ T6990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 827.253477][ T6993] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 838.108019][ T6995] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 844.149236][ T6939] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 846.402610][ T6990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 854.185754][ T6993] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 858.178320][ T6993] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 864.705356][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.711726][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.135158][ T6939] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 875.074552][ T6990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 877.429524][ T6990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 883.363414][T14498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2477'. [ 883.858092][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 883.901552][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 883.913618][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 883.927681][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 883.962659][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 883.989600][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 884.010563][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 884.063303][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 884.105901][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 884.212732][T14517] kvm: vcpu 3: requested 128 ns lapic timer period limited to 200000 ns [ 884.242214][T14517] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 884.353616][ T5617] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 884.614101][ T5617] usb 3-1: config 0 has no interfaces? [ 885.111523][ T6995] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 885.352530][ T5617] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 885.366626][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.379872][ T5617] usb 3-1: config 0 descriptor?? [ 885.422638][ T29] audit: type=1400 audit(1779849435.639:679): avc: denied { getopt } for pid=14548 comm="syz.3.2486" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 885.502479][T14523] lo speed is unknown, defaulting to 1000 [ 885.550815][T14523] lo speed is unknown, defaulting to 1000 [ 885.751237][ T5617] usb 3-1: USB disconnect, device number 61 [ 885.772814][T14559] No source specified [ 885.859789][T14561] fuse: Bad value for 'fd' [ 886.195758][T14546] lo speed is unknown, defaulting to 1000 [ 886.215978][T14546] lo speed is unknown, defaulting to 1000 [ 886.343648][ T5719] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 887.420176][ T29] audit: type=1400 audit(1779849437.639:680): avc: denied { ioctl } for pid=14589 comm="syz.1.2501" path="socket:[65789]" dev="sockfs" ino=65789 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 887.509812][T14591] tipc: Started in network mode [ 887.565561][T14591] tipc: Node identity ac1414aa, cluster identity 4711 [ 887.590691][T14591] tipc: Enabled bearer , priority 10 [ 887.883597][ T5719] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 888.043633][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 888.076900][ T5719] usb 2-1: config 0 has no interfaces? [ 888.091046][ T5719] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 888.523008][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.550816][ T5719] usb 2-1: config 0 descriptor?? [ 888.593613][ T5719] tipc: Node number set to 2886997162 [ 888.624171][ T6990] wlan1: Trigger new scan to find an IBSS to join [ 888.965819][T14605] syz.4.2503 (14605): drop_caches: 2 [ 888.972173][T14590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.980987][T14590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.047241][T14592] netlink: 'syz.1.2501': attribute type 1 has an invalid length. [ 889.055059][T14592] __nla_validate_parse: 33 callbacks suppressed [ 889.055075][T14592] netlink: 2096 bytes leftover after parsing attributes in process `syz.1.2501'. [ 889.070573][T14592] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2501'. [ 889.148371][T13774] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 889.155066][ T5617] usb 2-1: USB disconnect, device number 44 [ 890.047131][ T29] audit: type=1400 audit(1779849440.269:681): avc: denied { ioctl } for pid=14612 comm="syz.1.2505" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 890.438928][T14619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.704008][T14633] FAULT_INJECTION: forcing a failure. [ 890.704008][T14633] name failslab, interval 1, probability 0, space 0, times 0 [ 890.716855][T14633] CPU: 0 UID: 0 PID: 14633 Comm: syz.0.2511 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.716884][T14633] Tainted: [L]=SOFTLOCKUP [ 890.716890][T14633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 890.716899][T14633] Call Trace: [ 890.716906][T14633] [ 890.716912][T14633] dump_stack_lvl+0x100/0x190 [ 890.716935][T14633] should_fail_ex.cold+0x5/0xa [ 890.716956][T14633] should_failslab+0xc2/0x120 [ 890.716972][T14633] __kvmalloc_node_noprof+0xfa/0xa00 [ 890.716993][T14633] ? __do_sys_add_key+0x244/0x460 [ 890.717010][T14633] ? memdup_user+0x82/0xe0 [ 890.717027][T14633] __do_sys_add_key+0x244/0x460 [ 890.717043][T14633] ? __pfx___do_sys_add_key+0x10/0x10 [ 890.717057][T14633] ? ksys_write+0x1ac/0x250 [ 890.717075][T14633] ? rcu_is_watching+0x12/0xc0 [ 890.717100][T14633] do_syscall_64+0x10b/0x860 [ 890.717120][T14633] ? clear_bhb_loop+0x40/0x90 [ 890.717138][T14633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.717152][T14633] RIP: 0033:0x7fe35f79ce59 [ 890.717164][T14633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.717178][T14633] RSP: 002b:00007fe36067f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 890.717192][T14633] RAX: ffffffffffffffda RBX: 00007fe35fa16090 RCX: 00007fe35f79ce59 [ 890.717206][T14633] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 890.717215][T14633] RBP: 00007fe36067f090 R08: fffffffffffffffe R09: 0000000000000000 [ 890.717224][T14633] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 890.717232][T14633] R13: 00007fe35fa16128 R14: 00007fe35fa16090 R15: 00007fff7079bb68 [ 890.717254][T14633] [ 890.940984][T14633] No source specified [ 891.121100][ T29] audit: type=1400 audit(1779849441.339:682): avc: denied { read } for pid=14639 comm="syz.2.2514" path="socket:[65212]" dev="sockfs" ino=65212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 891.147555][ T5719] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 891.148606][T14635] option changes via remount are deprecated (pid=14634 comm=syz.4.2513) [ 891.168341][ T29] audit: type=1400 audit(1779849441.369:683): avc: denied { remount } for pid=14634 comm="syz.4.2513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 891.201421][T14635] overlayfs: workdir and upperdir must reside under the same mount [ 891.305050][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.316749][ T5719] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 891.350069][ T5719] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 891.362948][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.371469][ T5719] usb 2-1: Product: syz [ 891.378054][ T5719] usb 2-1: Manufacturer: syz [ 891.382858][ T29] audit: type=1400 audit(1779849441.599:684): avc: denied { setopt } for pid=14649 comm="syz.2.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 891.403151][ T5719] usb 2-1: SerialNumber: syz [ 891.633202][T14660] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 891.646759][ T29] audit: type=1400 audit(1779849441.869:685): avc: denied { shutdown } for pid=14661 comm="syz.3.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 891.687627][ T29] audit: type=1400 audit(1779849441.899:686): avc: denied { write } for pid=14661 comm="syz.3.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 891.812204][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2523'. [ 891.825509][ T1219] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 891.983686][ T1219] usb 5-1: Using ep0 maxpacket: 16 [ 891.995080][ T1219] usb 5-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 892.006095][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.014446][ T1219] usb 5-1: Product: syz [ 892.018763][ T1219] usb 5-1: Manufacturer: syz [ 892.023435][ T1219] usb 5-1: SerialNumber: syz [ 892.035657][ T1219] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 892.237558][ T1219] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 892.266094][ T1219] usb 5-1: USB disconnect, device number 56 [ 892.296766][T14654] udevd[14654]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.445797][ T5719] cdc_ncm 2-1:1.0: bind() failure [ 892.464884][ T5719] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 892.485536][ T5719] cdc_ncm 2-1:1.1: bind() failure [ 892.544248][T11249] wlan1: Trigger new scan to find an IBSS to join [ 892.556635][T14671] input: syz1 as /devices/virtual/input/input15 [ 892.725373][T10889] usb 2-1: USB disconnect, device number 45 [ 893.448778][T11249] wlan1: Creating new IBSS network, BSSID ee:58:88:68:35:18 [ 893.960255][ T29] audit: type=1400 audit(1779849444.129:687): avc: denied { ioctl } for pid=14684 comm="syz.2.2529" path="socket:[66055]" dev="sockfs" ino=66055 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 894.031817][T14695] netlink: 'syz.1.2532': attribute type 7 has an invalid length. [ 894.043747][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2532'. [ 894.089887][ T29] audit: type=1404 audit(1779849444.309:688): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 894.139429][ T29] audit: type=1404 audit(1779849444.339:689): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 894.172591][ T29] audit: type=1400 audit(1779849444.359:690): avc: denied { read write } for pid=14696 comm="syz.2.2533" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 894.196695][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.212034][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.221437][ T29] audit: type=1400 audit(1779849444.359:691): avc: denied { open } for pid=14696 comm="syz.2.2533" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 894.249241][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.269866][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.330766][T14707] FAULT_INJECTION: forcing a failure. [ 894.330766][T14707] name failslab, interval 1, probability 0, space 0, times 0 [ 894.449762][T14704] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 894.493693][T14707] CPU: 1 UID: 0 PID: 14707 Comm: syz.2.2536 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.493730][T14707] Tainted: [L]=SOFTLOCKUP [ 894.493737][T14707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 894.493747][T14707] Call Trace: [ 894.493754][T14707] [ 894.493761][T14707] dump_stack_lvl+0x100/0x190 [ 894.493789][T14707] should_fail_ex.cold+0x5/0xa [ 894.493815][T14707] should_failslab+0xc2/0x120 [ 894.493837][T14707] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 894.493856][T14707] ? sidtab_sid2str_get+0x17a/0x670 [ 894.493890][T14707] kmemdup_noprof+0x29/0x60 [ 894.493910][T14707] sidtab_sid2str_get+0x17a/0x670 [ 894.493940][T14707] security_sid_to_context_core+0x35a/0x6d0 [ 894.493971][T14707] avc_audit_post_callback+0x109/0x900 [ 894.494001][T14707] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 894.494027][T14707] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 894.494054][T14707] ? skb_put+0x138/0x180 [ 894.494079][T14707] ? audit_log_n_string+0x256/0x550 [ 894.494106][T14707] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 894.494133][T14707] common_lsm_audit+0x23f/0x2b0 [ 894.494160][T14707] ? __pfx_common_lsm_audit+0x10/0x10 [ 894.494186][T14707] ? lockdep_hardirqs_on+0x78/0x100 [ 894.494215][T14707] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 894.494248][T14707] slow_avc_audit+0x186/0x210 [ 894.494268][T14707] ? __pfx_slow_avc_audit+0x10/0x10 [ 894.494290][T14707] ? avc_denied+0x14a/0x190 [ 894.494310][T14707] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 894.494334][T14707] avc_has_perm+0x1a6/0x1e0 [ 894.494355][T14707] ? __pfx_avc_has_perm+0x10/0x10 [ 894.494375][T14707] ? is_bpf_text_address+0x94/0x1a0 [ 894.494406][T14707] sock_has_perm+0x253/0x2f0 [ 894.494428][T14707] ? __pfx_sock_has_perm+0x10/0x10 [ 894.494453][T14707] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 894.494481][T14707] ? import_ubuf+0x1b6/0x220 [ 894.494511][T14707] ? __might_fault+0x80/0x140 [ 894.494544][T14707] ? __might_fault+0xc5/0x140 [ 894.494575][T14707] security_socket_sendmsg+0xd3/0x230 [ 894.494599][T14707] ____sys_sendmsg+0x862/0xb70 [ 894.494627][T14707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.494664][T14707] ___sys_sendmsg+0x190/0x1e0 [ 894.494693][T14707] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.494750][T14707] __sys_sendmsg+0x170/0x220 [ 894.494771][T14707] ? __pfx___sys_sendmsg+0x10/0x10 [ 894.494803][T14707] ? rcu_is_watching+0x12/0xc0 [ 894.494834][T14707] do_syscall_64+0x10b/0x860 [ 894.494860][T14707] ? clear_bhb_loop+0x40/0x90 [ 894.494883][T14707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.494902][T14707] RIP: 0033:0x7efdfa39ce59 [ 894.494918][T14707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.494935][T14707] RSP: 002b:00007efdfb2a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.494953][T14707] RAX: ffffffffffffffda RBX: 00007efdfa615fa0 RCX: 00007efdfa39ce59 [ 894.494966][T14707] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 894.494977][T14707] RBP: 00007efdfb2a0090 R08: 0000000000000000 R09: 0000000000000000 [ 894.494988][T14707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.494999][T14707] R13: 00007efdfa616038 R14: 00007efdfa615fa0 R15: 00007ffc139b3878 [ 894.495025][T14707] [ 894.851011][T14711] FAULT_INJECTION: forcing a failure. [ 894.851011][T14711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.865631][T14711] CPU: 0 UID: 0 PID: 14711 Comm: syz.1.2537 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.865659][T14711] Tainted: [L]=SOFTLOCKUP [ 894.865665][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 894.865674][T14711] Call Trace: [ 894.865679][T14711] [ 894.865688][T14711] dump_stack_lvl+0x100/0x190 [ 894.865714][T14711] should_fail_ex.cold+0x5/0xa [ 894.865738][T14711] _copy_from_user+0x2e/0xd0 [ 894.865764][T14711] con_set_cmap+0x9b/0x840 [ 894.865788][T14711] ? avc_has_extended_perms+0x33a/0x1080 [ 894.865810][T14711] ? __pfx_con_set_cmap+0x10/0x10 [ 894.865832][T14711] ? rcu_is_watching+0x12/0xc0 [ 894.865862][T14711] ? bpf_lsm_capable+0x9/0x10 [ 894.865881][T14711] ? security_capable+0x80/0x260 [ 894.865904][T14711] vt_ioctl+0xe36/0x31a0 [ 894.865927][T14711] ? __pfx_vt_ioctl+0x10/0x10 [ 894.865944][T14711] ? find_held_lock+0x2b/0x80 [ 894.865969][T14711] ? tomoyo_path_number_perm+0x188/0x580 [ 894.865998][T14711] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 894.866030][T14711] ? __pfx_vt_ioctl+0x10/0x10 [ 894.866050][T14711] tty_ioctl+0x26a/0x1640 [ 894.866075][T14711] ? __pfx_tty_ioctl+0x10/0x10 [ 894.866097][T14711] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 894.866127][T14711] ? __fget_files+0x215/0x3d0 [ 894.866148][T14711] ? hook_file_ioctl_common+0x149/0x410 [ 894.866171][T14711] ? selinux_file_ioctl+0x13b/0x290 [ 894.866194][T14711] ? selinux_file_ioctl+0xb6/0x290 [ 894.866218][T14711] ? __pfx_tty_ioctl+0x10/0x10 [ 894.866242][T14711] __x64_sys_ioctl+0x18e/0x210 [ 894.866264][T14711] do_syscall_64+0x10b/0x860 [ 894.866287][T14711] ? clear_bhb_loop+0x40/0x90 [ 894.866308][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.866325][T14711] RIP: 0033:0x7f6a6019ce59 [ 894.866341][T14711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.866359][T14711] RSP: 002b:00007f6a61138028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 894.866376][T14711] RAX: ffffffffffffffda RBX: 00007f6a60415fa0 RCX: 00007f6a6019ce59 [ 894.866388][T14711] RDX: 0000000000000000 RSI: 0000000000004b71 RDI: 0000000000000003 [ 894.866397][T14711] RBP: 00007f6a61138090 R08: 0000000000000000 R09: 0000000000000000 [ 894.866406][T14711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.866416][T14711] R13: 00007f6a60416038 R14: 00007f6a60415fa0 R15: 00007ffd7e9c3968 [ 894.866438][T14711] [ 895.120865][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2540'. [ 895.123762][ T1219] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 895.596249][ T1219] usb 3-1: not running at top speed; connect to a high speed hub [ 895.629617][ T1219] usb 3-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 895.703446][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.741661][ T1219] usb 3-1: Product: 㠊 [ 895.772866][ T1219] usb 3-1: Manufacturer: 䙢텝呠㴸㰱ꀮ희휅親鬸ⶈ崆㱦닩䎡륑䴆蝴쬄萄閭脇㚇鄏ի轅⵮茏㳝爉䰿췳ᾷ苚᱂քᡉ⾾ᜨ㨃俘陫냈杳ꇳ墇ꃮ丷╜ῆꮍ뻻ﾵ༝弟谎␡蝯狽椻魚襎摍 [ 895.961817][ T1219] usb 3-1: SerialNumber: 䀊 [ 896.141257][T14755] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 896.189816][T14732] ceph: No mds server is up or the cluster is laggy [ 896.214860][T14713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.237323][T14713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.286471][T14713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.304675][T14713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.361508][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 896.361530][ T29] audit: type=1400 audit(1779849702.578:739): avc: denied { create } for pid=14712 comm="syz.2.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 896.405895][ T29] audit: type=1400 audit(1779849702.628:740): avc: denied { read write } for pid=14712 comm="syz.2.2538" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 896.464427][ T29] audit: type=1400 audit(1779849702.628:741): avc: denied { open } for pid=14712 comm="syz.2.2538" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 896.500606][ T29] audit: type=1400 audit(1779849702.658:742): avc: denied { read write } for pid=14712 comm="syz.2.2538" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 896.552687][ T1219] usb 3-1: USB disconnect, device number 62 [ 896.580131][ T29] audit: type=1400 audit(1779849702.658:743): avc: denied { open } for pid=14712 comm="syz.2.2538" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 896.637109][T14654] udevd[14654]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.644987][ T29] audit: type=1400 audit(1779849702.658:744): avc: denied { ioctl } for pid=14712 comm="syz.2.2538" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 896.688038][ T29] audit: type=1400 audit(1779849702.748:745): avc: denied { getopt } for pid=14762 comm="syz.0.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 896.747851][ T29] audit: type=1400 audit(1779849702.968:746): avc: denied { create } for pid=14771 comm="syz.3.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 896.790348][T14772] trusted_key: encrypted_key: master key parameter 'usez:syz' is invalid [ 896.868425][ T29] audit: type=1400 audit(1779849703.088:747): avc: denied { create } for pid=14776 comm="syz.3.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 896.999959][ T29] audit: type=1400 audit(1779849703.198:748): avc: denied { ioctl } for pid=14776 comm="syz.3.2560" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=66653 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 897.277372][T14794] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 897.373834][ T1219] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 897.545835][ T1219] usb 5-1: Using ep0 maxpacket: 8 [ 897.551052][T14788] ceph: No mds server is up or the cluster is laggy [ 897.584914][ T35] wlan1: Trigger new scan to find an IBSS to join [ 897.597384][ T1219] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 897.620157][ T1219] usb 5-1: config 179 has no interface number 0 [ 897.629073][T14813] trusted_key: encrypted_key: insufficient parameters specified [ 898.079320][ T1219] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 898.090490][ T1219] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 898.101776][ T1219] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 898.112977][ T1219] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 898.194948][ T1219] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 898.285900][ T1219] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 898.312724][ T1219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.358667][T14785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 898.447364][T14823] netlink: 'syz.2.2576': attribute type 4 has an invalid length. [ 898.694385][ T1219] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input16 [ 898.714643][ T5801] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 898.894986][ T5801] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 898.904428][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.921845][ T5801] usb 2-1: config 0 descriptor?? [ 898.936521][T14843] trusted_key: encrypted_key: insufficient parameters specified [ 898.938877][ T5801] cp210x 2-1:0.0: cp210x converter detected [ 899.093041][T10889] usb 5-1: USB disconnect, device number 57 [ 899.093088][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 899.107558][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 899.211522][ T5801] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 899.220664][ T5801] cp210x 2-1:0.0: querying part number failed [ 899.231673][ T5801] usb 2-1: cp210x converter now attached to ttyUSB0 [ 899.382668][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 899.833096][T14858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14858 comm=syz.3.2589 [ 900.214394][ T1100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 900.723084][ T6990] wlan1: Trigger new scan to find an IBSS to join [ 901.494032][ T35] wlan1: Trigger new scan to find an IBSS to join [ 901.638724][T13774] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 901.645770][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 901.645782][ T29] audit: type=1400 audit(1779849707.858:792): avc: denied { create } for pid=14872 comm="syz.3.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 901.673609][ T29] audit: type=1400 audit(1779849707.858:793): avc: denied { write } for pid=14872 comm="syz.3.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 901.694424][ T29] audit: type=1400 audit(1779849707.858:794): avc: denied { nlmsg_write } for pid=14872 comm="syz.3.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 901.706869][T14871] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 901.726276][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 901.753889][T14879] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 901.763311][ T1219] usb 2-1: USB disconnect, device number 46 [ 901.771521][ T1219] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 901.793567][T14876] netlink: 'syz.3.2594': attribute type 30 has an invalid length. [ 901.793793][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 901.829346][ T1219] cp210x 2-1:0.0: device disconnected [ 901.842315][ T29] audit: type=1400 audit(1779849708.058:795): avc: denied { sys_module } for pid=14870 comm="syz.4.2593" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 901.842794][T14871] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 901.943696][T14881] netlink: 'syz.3.2594': attribute type 30 has an invalid length. [ 901.956122][ T29] audit: type=1400 audit(1779849708.058:796): avc: denied { firmware_load } for pid=14870 comm="syz.4.2593" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 902.268825][ T1100] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.268834][ T29] audit: type=1400 audit(1779849708.108:797): avc: denied { bind } for pid=14872 comm="syz.3.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 902.268872][ T29] audit: type=1400 audit(1779849708.198:798): avc: denied { setopt } for pid=14872 comm="syz.3.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 902.357273][ T1100] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.447697][ T1100] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.571136][ T1100] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.973847][ T29] audit: type=1400 audit(1779849708.218:799): avc: denied { read } for pid=14870 comm="syz.4.2593" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 902.996703][ T29] audit: type=1400 audit(1779849708.218:800): avc: denied { open } for pid=14870 comm="syz.4.2593" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 903.020415][ T29] audit: type=1400 audit(1779849708.608:801): avc: denied { name_bind } for pid=14891 comm="syz.2.2598" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 903.049233][T14898] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 903.076256][T14901] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2599'. [ 903.099808][T14898] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 903.585518][ T35] wlan1: Creating new IBSS network, BSSID 0e:fc:44:51:ac:9a [ 903.623681][T10889] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 903.678954][T14921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2603'. [ 903.794641][T10889] usb 3-1: Using ep0 maxpacket: 16 [ 903.807495][T10889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 903.829940][T10889] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 903.851347][T14927] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2605'. [ 903.868862][T10889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.896599][T10889] usb 3-1: Product: syz [ 903.907606][T10889] usb 3-1: Manufacturer: syz [ 903.917451][T10889] usb 3-1: SerialNumber: syz [ 903.942520][T10889] usb 3-1: config 0 descriptor?? [ 903.964961][T10889] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 903.979706][T10889] usb 3-1: Detected FT232R [ 904.166241][T10889] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 904.177840][T10889] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 904.186230][T10889] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 904.197247][T10889] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 904.205821][ T5801] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 904.277975][T14936] Device name cannot be null; rc = [-22] [ 904.621219][T10889] usb 3-1: USB disconnect, device number 63 [ 904.630746][T10889] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 904.641195][T10889] ftdi_sio 3-1:0.0: device disconnected [ 904.794644][ T5801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.805364][T14938] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 904.818173][ T5801] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 904.840149][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.854439][T14938] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 904.872323][T11249] wlan1: Trigger new scan to find an IBSS to join [ 904.876634][ T5801] usb 5-1: config 0 descriptor?? [ 904.980623][T14944] netlink: 'syz.2.2610': attribute type 3 has an invalid length. [ 905.128008][T14947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14947 comm=syz.3.2611 [ 905.416226][ T1219] usb 5-1: USB disconnect, device number 58 [ 905.660159][T14955] siw: device registration error -23 [ 906.121343][T14957] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2613'. [ 906.172586][T13774] Bluetooth: hci2: Malformed LE Event: 0x0b [ 906.355735][ T1219] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 906.511405][ T6939] wlan1: Creating new IBSS network, BSSID ee:21:7d:ac:81:2f [ 906.529110][ T1219] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.551245][ T1219] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 906.563650][ T1219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.586556][ T1219] usb 5-1: config 0 descriptor?? [ 906.606445][ T1219] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 906.621103][ T1219] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 906.753572][ T5719] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 906.917790][ T5719] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 908.317276][ T5719] usb 3-1: config 1 has no interface number 0 [ 908.323447][ T5719] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 908.338666][ T5719] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 908.349765][ T5719] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 908.360631][ T5719] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 908.371906][ T5719] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x61, changing to 0x1 [ 908.383779][ T5719] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 97, changing to 4 [ 908.387959][ T5801] usb 5-1: USB disconnect, device number 59 [ 908.395040][ T5719] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 24929, setting to 1023 [ 908.396804][ T5719] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 908.423304][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.431943][ T5719] usb 3-1: Product: syz [ 908.436377][ T5719] usb 3-1: Manufacturer: syz [ 908.441004][ T5719] usb 3-1: SerialNumber: syz [ 908.460059][T14971] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 908.616276][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 908.616298][ T29] audit: type=1400 audit(1779849714.838:816): avc: denied { create } for pid=14993 comm="syz.4.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 908.668852][T14970] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 908.862800][ T29] audit: type=1400 audit(1779849714.908:817): avc: denied { write } for pid=14993 comm="syz.4.2627" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 909.194180][ T5719] cdc_ncm 3-1:1.1: bind() failure [ 909.390259][ T29] audit: type=1400 audit(1779849715.568:818): avc: denied { append } for pid=14993 comm="syz.4.2627" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 909.395978][ T5719] usb 3-1: USB disconnect, device number 64 [ 909.496335][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2631'. [ 909.530620][ T29] audit: type=1400 audit(1779849715.718:819): avc: denied { create } for pid=15004 comm="syz.0.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 909.558104][T15006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15006 comm=syz.2.2630 [ 909.672231][ T29] audit: type=1400 audit(1779849715.758:820): avc: denied { create } for pid=15008 comm="syz.3.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 909.743758][ T29] audit: type=1400 audit(1779849715.798:821): avc: denied { unlink } for pid=15004 comm="syz.0.2629" name="#a" dev="tmpfs" ino=2893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 909.942436][ T29] audit: type=1400 audit(1779849715.798:822): avc: denied { mount } for pid=15004 comm="syz.0.2629" name="/" dev="overlay" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 910.134696][T15015] FAULT_INJECTION: forcing a failure. [ 910.134696][T15015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.152398][ T29] audit: type=1400 audit(1779849716.358:823): avc: denied { ioctl } for pid=15014 comm="syz.1.2633" path="socket:[67119]" dev="sockfs" ino=67119 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 910.157272][T15015] CPU: 1 UID: 0 PID: 15015 Comm: syz.1.2633 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.157301][T15015] Tainted: [L]=SOFTLOCKUP [ 910.157307][T15015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 910.157316][T15015] Call Trace: [ 910.157323][T15015] [ 910.157330][T15015] dump_stack_lvl+0x100/0x190 [ 910.157354][T15015] should_fail_ex.cold+0x5/0xa [ 910.157377][T15015] _copy_to_user+0x32/0xd0 [ 910.157405][T15015] simple_read_from_buffer+0xcb/0x170 [ 910.157428][T15015] proc_fail_nth_read+0x1af/0x230 [ 910.157463][T15015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 910.157483][T15015] ? rw_verify_area+0xce/0x6d0 [ 910.157498][T15015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 910.157516][T15015] vfs_read+0x1e4/0xb30 [ 910.157537][T15015] ? __pfx_vfs_read+0x10/0x10 [ 910.157559][T15015] ? __fget_files+0x215/0x3d0 [ 910.157585][T15015] ? __fget_files+0x21f/0x3d0 [ 910.157611][T15015] ksys_read+0x12a/0x250 [ 910.157633][T15015] ? __pfx_ksys_read+0x10/0x10 [ 910.157653][T15015] ? rcu_is_watching+0x12/0xc0 [ 910.157679][T15015] do_syscall_64+0x10b/0x860 [ 910.157702][T15015] ? clear_bhb_loop+0x40/0x90 [ 910.157721][T15015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.157745][T15015] RIP: 0033:0x7f6a6015d68e [ 910.157759][T15015] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 910.157774][T15015] RSP: 002b:00007f6a61137fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 910.157790][T15015] RAX: ffffffffffffffda RBX: 00007f6a611386c0 RCX: 00007f6a6015d68e [ 910.157800][T15015] RDX: 000000000000000f RSI: 00007f6a611380a0 RDI: 0000000000000009 [ 910.157809][T15015] RBP: 00007f6a61138090 R08: 0000000000000000 R09: 0000000000000000 [ 910.157819][T15015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.157828][T15015] R13: 00007f6a60416038 R14: 00007f6a60415fa0 R15: 00007ffd7e9c3968 [ 910.157850][T15015] [ 910.507646][ T29] audit: type=1400 audit(1779849716.728:824): avc: denied { create } for pid=15020 comm="syz.1.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 910.605246][ T29] audit: type=1400 audit(1779849716.808:825): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 912.256126][ T5719] IPVS: starting estimator thread 0... [ 912.410481][T15035] syz.4.2638 (15035): drop_caches: 2 [ 912.886379][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2642'. [ 912.923622][T15039] IPVS: using max 48 ests per chain, 115200 per kthread [ 913.378558][T15057] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 913.478768][T13774] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 913.482670][T15063] netlink: 'syz.3.2647': attribute type 30 has an invalid length. [ 913.561522][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2648'. [ 913.604038][ T5719] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 913.663273][T15069] syz.1.2649 (15069): drop_caches: 2 [ 913.674435][ T6995] wlan1: Selected IBSS BSSID ee:58:88:68:35:18 based on configured SSID [ 913.783821][ T1219] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 913.861095][ T5719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.934980][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'. [ 913.960677][ T5719] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 913.992400][ T1219] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.054726][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.093417][ T1219] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 914.164960][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.187211][ T5719] usb 1-1: config 0 descriptor?? [ 914.267542][ T1219] usb 3-1: Product: syz [ 914.327927][ T1219] usb 3-1: Manufacturer: syz [ 914.385678][ T1219] usb 3-1: SerialNumber: syz [ 914.625969][ T1219] usb 3-1: selecting invalid altsetting 1 [ 914.687278][T15058] support for cryptoloop has been removed. Use dm-crypt instead. [ 914.750993][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 914.751011][ T29] audit: type=1400 audit(1779849720.968:827): avc: denied { read write } for pid=15076 comm="syz.4.2652" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 914.798540][T15078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.826886][ T29] audit: type=1400 audit(1779849720.968:828): avc: denied { open } for pid=15076 comm="syz.4.2652" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 914.845660][T15078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.876958][ T29] audit: type=1400 audit(1779849720.998:829): avc: denied { ioctl } for pid=15076 comm="syz.4.2652" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 914.978735][T15092] comedi comedi3: rti802: I/O base address or length out of range [ 915.041199][ T1219] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 915.056285][ T1219] cdc_ncm 3-1:1.0: bind() failure [ 915.080993][ T1219] cdc_ncm 3-1:1.1: skipping garbage [ 915.095694][ T1219] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 915.137826][ T1219] cdc_ncm 3-1:1.1: bind() failure [ 915.163390][T15097] comedi comedi3: rti802: I/O base address or length out of range [ 915.185870][ T29] audit: type=1400 audit(1779849721.398:830): avc: denied { open } for pid=15094 comm="syz.4.2656" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 915.289043][T15100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2656'. [ 915.504070][ T29] audit: type=1400 audit(1779849721.518:831): avc: denied { create } for pid=15094 comm="syz.4.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 915.623126][T15106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2659'. [ 915.632855][ T29] audit: type=1400 audit(1779849721.528:832): avc: denied { connect } for pid=15094 comm="syz.4.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 916.103196][ T29] audit: type=1400 audit(1779849722.318:833): avc: denied { accept } for pid=15111 comm="syz.3.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 916.141090][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'. [ 916.150819][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 916.177458][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2660'. [ 916.193198][ T29] audit: type=1400 audit(1779849722.408:834): avc: denied { create } for pid=15109 comm="syz.4.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 916.227012][ T29] audit: type=1400 audit(1779849722.438:835): avc: denied { read } for pid=15109 comm="syz.4.2660" path="socket:[68002]" dev="sockfs" ino=68002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 916.291850][ T29] audit: type=1400 audit(1779849722.488:836): avc: denied { connect } for pid=15109 comm="syz.4.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 916.356582][T15116] netlink: 'syz.1.2662': attribute type 5 has an invalid length. [ 916.419970][T15116] Illegal XDP return value 4294967294 on prog (id 302) dev N/A, expect packet loss! [ 916.602543][ T5719] ath6kl: Failed to read usb control message: -71 [ 916.614346][ T5719] ath6kl: Unable to read the bmi data from the device: -71 [ 916.631946][ T5719] ath6kl: Unable to recv target info: -71 [ 916.667543][ T5719] ath6kl: Failed to init ath6kl core: -71 [ 916.678510][ T5719] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 916.700810][ T5719] usb 1-1: USB disconnect, device number 53 [ 916.812853][T15126] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 918.309659][T10889] usb 3-1: USB disconnect, device number 65 [ 919.158319][T15156] netlink: 'syz.0.2674': attribute type 1 has an invalid length. [ 919.248483][T15158] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 919.768470][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 919.768487][ T29] audit: type=1400 audit(1779849725.988:843): avc: denied { write } for pid=15164 comm="syz.4.2675" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 919.804966][T15156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 919.838555][T15160] macvlan2: entered promiscuous mode [ 919.844411][T15160] macvlan2: entered allmulticast mode [ 920.037486][T15160] bond1: entered promiscuous mode [ 920.284696][T15160] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 921.277072][T15160] bond1: left promiscuous mode [ 921.856739][T15182] syz.2.2680 (15182): drop_caches: 2 [ 923.121687][ T29] audit: type=1400 audit(1779849729.338:844): avc: denied { setopt } for pid=15193 comm="syz.0.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 923.142349][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2683'. [ 923.151573][ T29] audit: type=1400 audit(1779849729.338:845): avc: denied { setopt } for pid=15193 comm="syz.0.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 923.178027][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2683'. [ 923.254704][ T29] audit: type=1400 audit(1779849729.468:846): avc: denied { bind } for pid=15193 comm="syz.0.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 923.893240][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2686'. [ 924.717570][ T29] audit: type=1400 audit(1779849730.938:847): avc: denied { ioctl } for pid=15214 comm="syz.4.2689" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 924.998163][T10889] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 925.193590][T10889] usb 3-1: Using ep0 maxpacket: 8 [ 925.201219][T10889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 925.586136][ T13] wlan1: Trigger new scan to find an IBSS to join [ 926.088394][T15228] syz.0.2694 (15228): drop_caches: 2 [ 926.147079][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.165576][T10889] usb 3-1: config 5 has an invalid interface number: 92 but max is 0 [ 926.185450][T10889] usb 3-1: config 5 has no interface number 0 [ 926.210996][T10889] usb 3-1: config 5 interface 92 has no altsetting 0 [ 926.293921][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.310548][T10889] usb 3-1: New USB device found, idVendor=1044, idProduct=8002, bcdDevice= 2.66 [ 926.390360][T10889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.511201][T10889] usb 3-1: Product: syz [ 926.570630][T10889] usb 3-1: Manufacturer: syz [ 926.676855][T10889] usb 3-1: SerialNumber: syz [ 926.762819][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2696'. [ 927.048972][T10889] pegasus 3-1:5.92: Missing or invalid endpoints [ 927.193024][T10889] usb 3-1: USB disconnect, device number 66 [ 928.793531][ T29] audit: type=1400 audit(1779849734.998:848): avc: denied { create } for pid=15267 comm="syz.1.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 928.863810][ T5719] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 929.046554][ T29] audit: type=1400 audit(1779849735.058:849): avc: denied { setopt } for pid=15267 comm="syz.1.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 929.119443][ T29] audit: type=1400 audit(1779849735.068:850): avc: denied { write } for pid=15267 comm="syz.1.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 929.149856][T15276] FAULT_INJECTION: forcing a failure. [ 929.149856][T15276] name failslab, interval 1, probability 0, space 0, times 0 [ 929.165389][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2706'. [ 929.193610][T15276] CPU: 0 UID: 0 PID: 15276 Comm: syz.0.2705 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.193639][T15276] Tainted: [L]=SOFTLOCKUP [ 929.193645][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 929.193654][T15276] Call Trace: [ 929.193659][T15276] [ 929.193664][T15276] dump_stack_lvl+0x100/0x190 [ 929.193687][T15276] should_fail_ex.cold+0x5/0xa [ 929.193707][T15276] should_failslab+0xc2/0x120 [ 929.193729][T15276] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 929.193751][T15276] ? __inet_bhash2_update_saddr+0x1b7/0x18d0 [ 929.193775][T15276] ? ip_route_output_key_hash+0x14c/0x2b0 [ 929.193795][T15276] __inet_bhash2_update_saddr+0x1b7/0x18d0 [ 929.193814][T15276] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 929.193842][T15276] tcp_v4_connect+0x15b2/0x1b40 [ 929.193864][T15276] ? __pfx_tcp_v4_connect+0x10/0x10 [ 929.193879][T15276] ? __lock_acquire+0x4a5/0x2630 [ 929.193900][T15276] ? __lock_acquire+0x4a5/0x2630 [ 929.193920][T15276] __inet_stream_connect+0x208/0xfa0 [ 929.193940][T15276] ? __pfx___inet_stream_connect+0x10/0x10 [ 929.193955][T15276] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 929.193978][T15276] ? __pfx_inet_stream_connect+0x10/0x10 [ 929.193993][T15276] ? __local_bh_enable_ip+0x9e/0x120 [ 929.194016][T15276] ? __pfx_inet_stream_connect+0x10/0x10 [ 929.194029][T15276] inet_stream_connect+0x57/0xa0 [ 929.194044][T15276] __sys_connect_file+0x141/0x1a0 [ 929.194060][T15276] __sys_connect+0x141/0x170 [ 929.194073][T15276] ? __pfx___sys_connect+0x10/0x10 [ 929.194085][T15276] ? __fget_files+0x21f/0x3d0 [ 929.194111][T15276] ? __pfx_ksys_write+0x10/0x10 [ 929.194131][T15276] __x64_sys_connect+0x72/0xb0 [ 929.194143][T15276] ? lockdep_hardirqs_on+0x78/0x100 [ 929.194165][T15276] do_syscall_64+0x10b/0x860 [ 929.194185][T15276] ? clear_bhb_loop+0x40/0x90 [ 929.194203][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.194216][T15276] RIP: 0033:0x7fe35f79ce59 [ 929.194230][T15276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.194244][T15276] RSP: 002b:00007fe3606a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 929.194258][T15276] RAX: ffffffffffffffda RBX: 00007fe35fa15fa0 RCX: 00007fe35f79ce59 [ 929.194267][T15276] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 929.194275][T15276] RBP: 00007fe3606a0090 R08: 0000000000000000 R09: 0000000000000000 [ 929.194284][T15276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.194292][T15276] R13: 00007fe35fa16038 R14: 00007fe35fa15fa0 R15: 00007fff7079bb68 [ 929.194311][T15276] [ 929.646640][T11249] wlan1: Trigger new scan to find an IBSS to join [ 929.684718][ T5719] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 930.122433][T15281] syz.1.2708 (15281): drop_caches: 2 [ 930.193364][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.441101][ T5719] usb 5-1: config 0 descriptor?? [ 931.250295][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2711'. [ 931.307059][T11249] wlan1: Selected IBSS BSSID ee:21:7d:ac:81:2f based on configured SSID [ 931.527643][ T29] audit: type=1400 audit(1779849737.738:851): avc: denied { write } for pid=15306 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 931.767953][ T5719] usb 5-1: can't set config #0, error -71 [ 931.805416][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 932.248339][ T5719] usb 5-1: USB disconnect, device number 60 [ 932.704200][ T10] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 933.507883][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.534555][ T5719] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 933.553036][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 933.584073][ T1100] wlan1: Trigger new scan to find an IBSS to join [ 933.586711][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 933.628303][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.745610][ T5719] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 933.758144][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 933.769640][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 933.770178][ T10] usb 2-1: config 0 descriptor?? [ 933.779832][ T5719] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 933.797734][ T5719] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 934.266652][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 934.268313][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.281669][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 934.293189][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 934.302948][T10889] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 934.318151][ T5719] usb 5-1: config 0 descriptor?? [ 934.319437][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 934.342086][ T10] usb 2-1: media controller created [ 934.351701][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 934.388212][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 934.404506][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 934.421175][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 934.467143][T10889] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 934.484268][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 934.496708][T10889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.521902][T15323] dvb-usb: bulk message failed: -22 (2/0) [ 934.532660][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 934.650529][T10889] usb 3-1: config 0 descriptor?? [ 934.666352][ T10] usb 2-1: USB disconnect, device number 47 [ 934.691570][T10889] cp210x 3-1:0.0: cp210x converter detected [ 934.711772][T15348] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.2727'. [ 934.749097][ T5719] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 934.858328][ T6990] wlan1: Creating new IBSS network, BSSID ca:c2:00:b8:ec:b2 [ 935.184256][T10889] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 935.949092][ T29] audit: type=1400 audit(1779849741.828:852): avc: denied { execute_no_trans } for pid=15353 comm="syz.3.2729" path="/556/file2" dev="tmpfs" ino=2942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 936.318301][T15359] tmpfs: Unknown parameter 'grpquota+Z ^ʃ' [ 936.407951][T10889] cp210x 3-1:0.0: querying part number failed [ 936.420779][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 936.444476][ T29] audit: type=1400 audit(1779849741.898:853): avc: denied { create } for pid=15353 comm="syz.3.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 936.465550][T10889] usb 3-1: cp210x converter now attached to ttyUSB0 [ 936.511579][ T5719] usb 5-1: USB disconnect, device number 61 [ 936.591811][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 936.769310][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2732'. [ 936.990958][ T29] audit: type=1400 audit(1779849743.208:854): avc: denied { kexec_image_load } for pid=15369 comm="syz.1.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 937.039964][ T29] audit: type=1400 audit(1779849743.258:855): avc: denied { bind } for pid=15369 comm="syz.1.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 938.157497][ T5719] usb 3-1: USB disconnect, device number 67 [ 938.318460][ T5719] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 938.353144][ T5719] cp210x 3-1:0.0: device disconnected [ 938.755479][T15392] siw: device registration error -23 [ 938.797356][T15383] syz.0.2736 (15383): drop_caches: 2 [ 939.618512][ T1100] wlan1: Trigger new scan to find an IBSS to join [ 939.870942][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2742'. [ 939.880154][T15402] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 939.909887][T13774] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 939.919798][T15398] smc: removing ib device syz1 [ 939.942764][T15398] smbdirect: ib_dev[syz1] removed [ 940.436833][T15398] ------------[ cut here ]------------ [ 940.442303][T15398] !xa_empty(&pool->xa) [ 940.442313][T15398] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.3.2741/15398 [ 940.459191][T15398] Modules linked in: [ 940.463276][T15398] CPU: 0 UID: 0 PID: 15398 Comm: syz.3.2741 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.474233][T15398] Tainted: [L]=SOFTLOCKUP [ 940.478559][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 940.488664][T15398] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 940.494600][T15398] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 e6 1a 4f f9 5b c3 cc cc cc cc e8 db 1a 4f f9 90 <0f> 0b 90 e8 d2 1a 4f f9 5b e9 8c f6 d4 02 e8 a7 eb bc f9 eb d0 0f [ 940.514774][T15398] RSP: 0018:ffffc90003077160 EFLAGS: 00010246 [ 940.520852][T15398] RAX: 0000000000080000 RBX: ffff88804e095398 RCX: ffffc900075b9000 [ 940.528854][T15398] RDX: 0000000000080000 RSI: ffffffff88b99485 RDI: ffff88804e095418 [ 940.536842][T15398] RBP: ffffffff88b7f070 R08: 0000000000000005 R09: 0000000000000001 [ 940.545057][T15398] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88804e094698 [ 940.553045][T15398] R13: ffff88804e093fe0 R14: ffff88804e093fe0 R15: ffff88804e0950f8 [ 940.561037][T15398] FS: 00007f983a26b6c0(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000 [ 940.569991][T15398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.576583][T15398] CR2: 0000001b33821ff8 CR3: 0000000054ed7000 CR4: 00000000003526f0 [ 940.584547][T15398] Call Trace: [ 940.587819][T15398] [ 940.590741][T15398] rxe_dealloc+0x25/0xc0 [ 940.594980][T15398] ib_dealloc_device+0x49/0x230 [ 940.599811][T15398] __ib_unregister_device+0x396/0x480 [ 940.605196][T15398] ib_unregister_device_and_put+0x5a/0x80 [ 940.611338][T15398] nldev_dellink+0x308/0x430 [ 940.616030][T15398] ? __pfx_nldev_dellink+0x10/0x10 [ 940.621206][T15398] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 940.627112][T15398] ? rcu_is_watching+0x12/0xc0 [ 940.631873][T15398] ? cap_capable+0x10b/0x440 [ 940.636463][T15398] ? bpf_lsm_capable+0x9/0x10 [ 940.641130][T15398] ? security_capable+0x80/0x260 [ 940.646082][T15398] ? ns_capable+0xd2/0xf0 [ 940.650403][T15398] ? __pfx_nldev_dellink+0x10/0x10 [ 940.655517][T15398] rdma_nl_rcv_msg+0x392/0x6f0 [ 940.660260][T15398] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 940.665556][T15398] ? __lock_acquire+0x4a5/0x2630 [ 940.670476][T15398] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 940.676886][T15398] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 940.683833][T15398] ? netlink_deliver_tap+0x1ae/0xcc0 [ 940.689102][T15398] netlink_unicast+0x585/0x850 [ 940.693876][T15398] ? __pfx_netlink_unicast+0x10/0x10 [ 940.699169][T15398] netlink_sendmsg+0x8b0/0xda0 [ 940.704277][T15398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.709553][T15398] ? __might_fault+0x80/0x140 [ 940.714634][T15398] ____sys_sendmsg+0x9e1/0xb70 [ 940.719383][T15398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.724680][T15398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.729948][T15398] ? __pfx_futex_wake_mark+0x10/0x10 [ 940.735235][T15398] ___sys_sendmsg+0x190/0x1e0 [ 940.739907][T15398] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.745115][T15398] __sys_sendmsg+0x170/0x220 [ 940.749694][T15398] ? __pfx___sys_sendmsg+0x10/0x10 [ 940.754796][T15398] ? __x64_sys_futex+0x34f/0x4d0 [ 940.759723][T15398] ? rcu_is_watching+0x12/0xc0 [ 940.764515][T15398] do_syscall_64+0x10b/0x860 [ 940.769102][T15398] ? clear_bhb_loop+0x40/0x90 [ 940.773774][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.779644][T15398] RIP: 0033:0x7f983939ce59 [ 940.784178][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.803804][T15398] RSP: 002b:00007f983a26b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.812198][T15398] RAX: ffffffffffffffda RBX: 00007f9839615fa0 RCX: 00007f983939ce59 [ 940.820666][T15398] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 940.828667][T15398] RBP: 00007f9839432d6f R08: 0000000000000000 R09: 0000000000000000 [ 940.836731][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.844704][T15398] R13: 00007f9839616038 R14: 00007f9839615fa0 R15: 00007ffc075f2248 [ 940.852675][T15398] [ 940.855692][T15398] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 940.862950][T15398] CPU: 0 UID: 0 PID: 15398 Comm: syz.3.2741 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.873869][T15398] Tainted: [L]=SOFTLOCKUP [ 940.878167][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 940.888201][T15398] Call Trace: [ 940.891459][T15398] [ 940.894366][T15398] dump_stack_lvl+0x100/0x190 [ 940.899036][T15398] vpanic+0x552/0x970 [ 940.903015][T15398] ? __pfx_vpanic+0x10/0x10 [ 940.907583][T15398] panic+0xd1/0xe0 [ 940.911280][T15398] ? __pfx_panic+0x10/0x10 [ 940.915690][T15398] check_panic_on_warn.cold+0x19/0x34 [ 940.921145][T15398] ? rxe_pool_cleanup+0x46/0x60 [ 940.925993][T15398] __warn.cold+0x191/0x328 [ 940.930395][T15398] __report_bug+0x296/0x3d0 [ 940.934896][T15398] ? rxe_pool_cleanup+0x46/0x60 [ 940.939740][T15398] ? __pfx___report_bug+0x10/0x10 [ 940.944760][T15398] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 940.950557][T15398] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 940.956345][T15398] ? __flush_workqueue+0x426/0x1200 [ 940.961530][T15398] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 940.967142][T15398] ? rxe_pool_cleanup+0x46/0x60 [ 940.972068][T15398] report_bug+0xb2/0x220 [ 940.976303][T15398] ? rxe_pool_cleanup+0x46/0x60 [ 940.981128][T15398] handle_bug+0x16a/0x2a0 [ 940.985534][T15398] exc_invalid_op+0x17/0x50 [ 940.990025][T15398] asm_exc_invalid_op+0x1a/0x20 [ 940.994846][T15398] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 941.000290][T15398] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 e6 1a 4f f9 5b c3 cc cc cc cc e8 db 1a 4f f9 90 <0f> 0b 90 e8 d2 1a 4f f9 5b e9 8c f6 d4 02 e8 a7 eb bc f9 eb d0 0f [ 941.019891][T15398] RSP: 0018:ffffc90003077160 EFLAGS: 00010246 [ 941.025952][T15398] RAX: 0000000000080000 RBX: ffff88804e095398 RCX: ffffc900075b9000 [ 941.033902][T15398] RDX: 0000000000080000 RSI: ffffffff88b99485 RDI: ffff88804e095418 [ 941.041859][T15398] RBP: ffffffff88b7f070 R08: 0000000000000005 R09: 0000000000000001 [ 941.049828][T15398] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88804e094698 [ 941.057879][T15398] R13: ffff88804e093fe0 R14: ffff88804e093fe0 R15: ffff88804e0950f8 [ 941.065862][T15398] ? __pfx_rxe_dealloc+0x10/0x10 [ 941.070880][T15398] ? rxe_pool_cleanup+0x45/0x60 [ 941.075713][T15398] rxe_dealloc+0x25/0xc0 [ 941.079933][T15398] ib_dealloc_device+0x49/0x230 [ 941.084863][T15398] __ib_unregister_device+0x396/0x480 [ 941.090219][T15398] ib_unregister_device_and_put+0x5a/0x80 [ 941.095932][T15398] nldev_dellink+0x308/0x430 [ 941.100512][T15398] ? __pfx_nldev_dellink+0x10/0x10 [ 941.105603][T15398] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 941.111471][T15398] ? rcu_is_watching+0x12/0xc0 [ 941.116227][T15398] ? cap_capable+0x10b/0x440 [ 941.120813][T15398] ? bpf_lsm_capable+0x9/0x10 [ 941.125503][T15398] ? security_capable+0x80/0x260 [ 941.130450][T15398] ? ns_capable+0xd2/0xf0 [ 941.134774][T15398] ? __pfx_nldev_dellink+0x10/0x10 [ 941.139883][T15398] rdma_nl_rcv_msg+0x392/0x6f0 [ 941.144666][T15398] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 941.149947][T15398] ? __lock_acquire+0x4a5/0x2630 [ 941.154883][T15398] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 941.161302][T15398] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 941.168224][T15398] ? netlink_deliver_tap+0x1ae/0xcc0 [ 941.173508][T15398] netlink_unicast+0x585/0x850 [ 941.178299][T15398] ? __pfx_netlink_unicast+0x10/0x10 [ 941.183587][T15398] netlink_sendmsg+0x8b0/0xda0 [ 941.188361][T15398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.193640][T15398] ? __might_fault+0x80/0x140 [ 941.198304][T15398] ____sys_sendmsg+0x9e1/0xb70 [ 941.203066][T15398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.208390][T15398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 941.213657][T15398] ? __pfx_futex_wake_mark+0x10/0x10 [ 941.218924][T15398] ___sys_sendmsg+0x190/0x1e0 [ 941.223593][T15398] ? __pfx____sys_sendmsg+0x10/0x10 [ 941.228810][T15398] __sys_sendmsg+0x170/0x220 [ 941.233386][T15398] ? __pfx___sys_sendmsg+0x10/0x10 [ 941.238479][T15398] ? __x64_sys_futex+0x34f/0x4d0 [ 941.243422][T15398] ? rcu_is_watching+0x12/0xc0 [ 941.248222][T15398] do_syscall_64+0x10b/0x860 [ 941.252812][T15398] ? clear_bhb_loop+0x40/0x90 [ 941.257472][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.263345][T15398] RIP: 0033:0x7f983939ce59 [ 941.267825][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.287680][T15398] RSP: 002b:00007f983a26b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.296073][T15398] RAX: ffffffffffffffda RBX: 00007f9839615fa0 RCX: 00007f983939ce59 [ 941.304019][T15398] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 941.311974][T15398] RBP: 00007f9839432d6f R08: 0000000000000000 R09: 0000000000000000 [ 941.320022][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.327995][T15398] R13: 00007f9839616038 R14: 00007f9839615fa0 R15: 00007ffc075f2248 [ 941.336153][T15398] [ 941.339512][T15398] Kernel Offset: disabled [ 941.343846][T15398] Rebooting in 86400 seconds..