last executing test programs: 41m42.134521184s ago: executing program 1 (id=333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000140)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="5a181e9f51242cb3d81414ef4a74", 0xe, 0x90, &(0x7f0000000000)={0x11, 0x8, r1, 0x1, 0x6}, 0x14) 41m41.948176077s ago: executing program 1 (id=334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 41m41.230429359s ago: executing program 1 (id=337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) listen(r0, 0x400000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9, 0x42073, 0xffffffffffffffff, 0x0) 41m39.962344122s ago: executing program 1 (id=343): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) renameat(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x3}, 0x41) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfc0, 0x65, 0x0, 0xd, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='cifs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000100037040400"/20, @ANYRES32=0x0, @ANYBLOB="87000100841c0500200012800f000100626f6e645f736c61766500000c0005800600050000000000140035006f6e645f736c6176655f300000000089c16c74790d64bae348bab0c0322ce97f78e4d2a1fc6d51388e368953e8be294d7bfd2612cfbc7833a8f1e7cf4f0496ce7f8810c8355c01eadd962d0faf935dc9e52ff1c22674baa0911eee9428472316d9497c951a66270b313ad21d04951372570f9af9c7b23b361fba5b33320031c9c70d74493078c071bfc5df27c9d5414b8a1a595b8c84"], 0x54}, 0x1, 0x0, 0x0, 0x9005}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) (async) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) (async) renameat(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') (async) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x3}, 0x41) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r3, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfc0, 0x65, 0x0, 0xd, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='cifs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000100037040400"/20, @ANYRES32=0x0, @ANYBLOB="87000100841c0500200012800f000100626f6e645f736c61766500000c0005800600050000000000140035006f6e645f736c6176655f300000000089c16c74790d64bae348bab0c0322ce97f78e4d2a1fc6d51388e368953e8be294d7bfd2612cfbc7833a8f1e7cf4f0496ce7f8810c8355c01eadd962d0faf935dc9e52ff1c22674baa0911eee9428472316d9497c951a66270b313ad21d04951372570f9af9c7b23b361fba5b33320031c9c70d74493078c071bfc5df27c9d5414b8a1a595b8c84"], 0x54}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async) 41m37.659894147s ago: executing program 1 (id=349): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x35, 0x0, @void}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) 41m36.848036784s ago: executing program 1 (id=353): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x300, '\x00', @bt={0x4, 0x2, 0x38000, 0x3, 0x9, 0xfffffffffffffe00, 0x3, 0xb}}) 41m36.64470912s ago: executing program 32 (id=353): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x300, '\x00', @bt={0x4, 0x2, 0x38000, 0x3, 0x9, 0xfffffffffffffe00, 0x3, 0xb}}) 22.124255432s ago: executing program 2 (id=9495): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r2 = add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000200)="1d", 0xff48, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) fanotify_init(0x200, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000340)={0x1, 0x0, [{0x0, 0x0, 0x4}]}) 21.0363306s ago: executing program 2 (id=9498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 20.203698469s ago: executing program 2 (id=9500): r0 = memfd_create(&(0x7f0000001440)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:Z>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x80\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\xf1\x0e\xccq*\xabM\x97}\x18\x8c5\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\x00\x00\x00\x00\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*\x7f]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9bW\x02\xd2K\xba8~\x83\x19\xfa\xf7\x9b\f\xfa\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XIkh\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\x05\x00\x00\x00\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1l 1\x8d \xc1\xab\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7;\xc0-\x9c\xac\xb9~\x9a\xdc\x15\x8d\xee*\x17\x82\x1e\xd2m+$\xb4\x8cOJ0\x85\x7f\xa0\x7f\xa8\xcc#\x0e\xa4\x86\x0fmO\xca\xa4\xd2\x9a\x16\xbb\x16\xb1\xd46l2ak[\xec\xe33\xae=\xaf\xffU)\x1fQ`\x81\xa2:\xf61\xafQ\xa6V-K;\xc50\n,\xb1j\x9b\x8f\xd0\xbd|\xbd\xb1+\x06\x98\xd4\x04\r!2\xe8\x16?H\x96\x182(\xcf\xf2\"\xf7.\x85\xc1-\xa3)|\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x5) fcntl$addseals(r0, 0x40a, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) 20.118216708s ago: executing program 2 (id=9501): r0 = syz_open_dev$cec(&(0x7f0000002280), 0x0, 0x101480) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000140)={0x78, 0x0, r2, {0x27, 0x5, 0x0, {0x5, 0x7, 0x8, 0x6, 0x5, 0x100000001, 0xb7000000, 0x11c0, 0x100, 0x2000, 0x128000, 0x0, r3, 0x2, 0x7}}}, 0x78) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000022c0)={'\x00', 0x4, 0x86, 0xf, 0x1, 0x1ec, "a859f1d1f395f7352e1b7062bfedfe", "493d26f4", "8fc9b0d0", "67b9ef89", ["fb6e5ef096e6604ca50f8eb0", "8d241021a658b273c7c879e8", "6749ff9994c08fda0ba20883", "2306000000000000008eedda"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) 20.048243532s ago: executing program 2 (id=9502): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = dup(r13) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r14, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r14, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xd8c}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x0) 16.728018472s ago: executing program 2 (id=9513): socket$netlink(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r6, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x10000a) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00001f1000010026bd70800000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e310000000000000000000008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) 6.756261377s ago: executing program 4 (id=9551): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\v\x00\b'], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0xa, 0x1, 0x6}, 0x0, 0x0, 0x0}) 5.432222642s ago: executing program 5 (id=9557): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x89841) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x8000000fcd, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x4, 0x2]}}) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs$userns(r7, &(0x7f0000000280)) read$msr(r6, &(0x7f0000002080)=""/102400, 0x19000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e18eb063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)='ethtool\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 4.892229912s ago: executing program 5 (id=9560): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fadbdf25010000001400020077673100000000000046b0000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.790457436s ago: executing program 3 (id=9561): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x401) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000540)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) r3 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x405}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) uname(&(0x7f0000002280)=""/4096) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.655517809s ago: executing program 3 (id=9562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) r1 = getpgrp(0x0) pipe(&(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x19) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_emit_ethernet(0xbe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c6f42, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x18081) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x1, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x4, 0x300, 0x1, 0x1, 0x9, 0x0, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x80000089, 0xa, 0x400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0x485b]}) writev(r6, &(0x7f0000000840)=[{&(0x7f0000000000)="94", 0x1}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) socket$inet(0x2, 0x1, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 4.621467624s ago: executing program 4 (id=9563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0xa, 0x100) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0xa0, 0x2, 0x1, 0x8, 0x10, 0x1}, &(0x7f00000001c0)=0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x1042000, &(0x7f0000000400)) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r5 = syz_open_dev$video4linux(&(0x7f00000009c0), 0xffffffffffffffff, 0xc2000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f0000000a00)={0x0, {0xff78, 0x7e07}}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000000)) 4.574938276s ago: executing program 5 (id=9564): pipe2(&(0x7f00000003c0), 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5a, 0xba, 0x41, 0x10, 0xc0b, 0xa109, 0xeb2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0xa6, 0x52, 0xe2}}]}}]}}, 0x0) 4.122775332s ago: executing program 0 (id=9565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x800003ffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4c080) ioctl$KVM_RUN(r3, 0xae80, 0x700) 3.635340813s ago: executing program 3 (id=9566): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="0906cf80920f3332d117b9625691c4fa62666a8e18b9f9b0d1f2cc76acdccc87b6785e7a77a9e65fbe5daa9925b04b21cea076e4642b5b5cc803a394da24d87ffeb060246a3681c1222bfeafb59d876032a2df7e8c4eb64ada80150abe948d7d9f92de80960c5754725e2849c5a58c540680ec6b4c9c47e3bd29b2531ee584c784d06890bcec794d7fcac0c95f785d9070eb94770a8faf632881cd4cd216e05f95149ddc2b4d62d267a7664573fec02c1ea863941858518a091fe1cfd87c75d991feb3ef21dff9cca8bf190cee14b2a57d2ae49b8140f56e", 0xd8, 0x0}) syz_open_dev$amidi(&(0x7f0000000200), 0x80000001, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000080)=[r1, 0x0, r2, r2, 0x0, 0x0], 0x6}) 3.634782217s ago: executing program 0 (id=9567): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_regs={0x4, 0x6}}) sendmsg$nl_generic(r0, 0x0, 0x4044080) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000000c0)=0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f00000f3000/0x4000)=nil, &(0x7f00008bb000/0xc000)=nil, &(0x7f0000682000/0x1000)=nil, &(0x7f0000a4c000/0x2000)=nil, &(0x7f0000124000/0x4000)=nil, &(0x7f0000949000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000201000/0x4000)=nil, &(0x7f000004b000/0x400000)=nil, &(0x7f0000a4e000/0x2000)=nil, &(0x7f00000000c0), 0x0, r10}, 0x68) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="ffffffff000000000000000000000000ffffffff32000000ac1414aa000000000000000000000000fefffffffffffffffeffffffffffffff0000000000000000000000000000000000000000000000007f000000000000000000000000000000000000000000000000000000000000000008400000000000000000000000000000000000000000000000000000000000000000000000000000000000020004032c000000000000004c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}}, 0x4050) syz_emit_ethernet(0x1e, &(0x7f0000000240)={@broadcast, @random="706ab144ffe0", @void, {@can={0xc, {{0x0, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "1142d69271ae5893"}}}}, 0x0) r11 = fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 3.399751312s ago: executing program 3 (id=9568): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fadbdf25010000001400020077673100000000000046b0000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 2.656224324s ago: executing program 5 (id=9569): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000380)=0x9b) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000003c0)) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x81) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) close(r5) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x0, 0x13, r6, 0x83000000) setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES64=r5, @ANYRESOCT=r5, @ANYRES32=r6, @ANYRES16=r5, @ANYRES32=r4, @ANYRES8=0x0, @ANYRESHEX=r5, @ANYRESOCT=0x0, @ANYRESHEX=r4, @ANYRES16=r4, @ANYRES32=r4, @ANYRESHEX=r5, @ANYBLOB="28a2769017d0b7cfb2dab3f19e32a6b5b2c775856f403636c2f0d15e1ddbc000b6e9592ef0c5418e56d913c75f9a63cacce0394041ef6a18dd5555ce8f404a9dc45b1e062dc6b499ec6af3f4317bf7f284679ecaa88d12e8b905b6d220154988d1af8164656200ac053beba5a36096c07d9791f32defb249a4f46a60d0b84bbffd6085f24a094db713c833398acfbbdc7c7b4ca407e6a934492b1d8a35b754e91c3cd40d35649637efff0fadc4e786", @ANYRESHEX=r6], 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x20044854) 2.619913697s ago: executing program 4 (id=9570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xf5ff, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(r0, 0xb, &(0x7f0000000080)={0x240000000000, 0x7ff}, 0x0) 2.576382703s ago: executing program 0 (id=9571): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r0, 0x7fbda000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x401a8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000029c0)={0xc, {"a2e3ad214fc7529b1b5f470787f70e06d038e7ff7fc6e5539b3267078b089b3b08386c090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31340d095dfd35cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ed30c000000000000040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000007008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07845754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcdddd754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfbb655548cf99c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad03f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a12810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de0ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac34b308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2dd9bb96e222d8e904f6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79a3fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xfffffffffffffe87}}, 0x1006) 2.306740841s ago: executing program 3 (id=9572): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x401) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000540)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) r3 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x405}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) uname(&(0x7f0000002280)=""/4096) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.969848731s ago: executing program 3 (id=9573): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000019840)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000225bd7000fbdbdf2705000000480005800800010065746800080001007564700007000100696200002c0002800800020001000000080004000600000008000100080000000800040000604b0508000100150000000c00098008000200080000001c0003800800010008000000080001000200000008000200020000000c00098008000100ff00000034000280040004000800010010020000240003800800020001000000080001000e000000080001000400000008000100000000000c0007800800010000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000019800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000197c0)={&(0x7f0000019440)=ANY=[@ANYBLOB="540300d2", @ANYRES16=r2, @ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x4001}, 0x4000008) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x118, &(0x7f0000000080)=0xfbfffff9, 0x0, 0x4) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2166994bd8d20fda, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0x1f}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000001400"], 0xa4}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000019300)=0x6, 0x4) socket$kcm(0x10, 0x2, 0x0) 1.902505649s ago: executing program 4 (id=9574): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) setxattr$security_capability(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x50b402, 0x0) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') close(r0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 1.75031738s ago: executing program 0 (id=9575): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r1, 0x7fffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='z', 0x1}], 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0xa4ff, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 693.460139ms ago: executing program 33 (id=9513): socket$netlink(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r6, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x10000a) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00001f1000010026bd70800000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e310000000000000000000008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) 687.405883ms ago: executing program 0 (id=9577): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xa, 0x1, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x8, 0x10, 0x1, 0x2}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x6, 0x300000}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x2, 0x4, 0x6, 0x3, 0x4, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x6a, &(0x7f00000003c0)=""/106, 0x41000, 0x33, '\x00', r3, @lsm=0x2b, r0, 0x8, &(0x7f00000004c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x5, 0xd6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000005c0)=[r1, r4, r0, r5, r0, r0, r0, r0], &(0x7f0000000600)=[{0x5, 0x5, 0x6, 0x3}, {0x3, 0x2, 0x9, 0xa}, {0x1, 0x2, 0xd, 0x8}, {0x2, 0x2, 0x8, 0x4}, {0x2, 0xb53, 0x8, 0x9}, {0x3, 0x5, 0xf, 0x5}, {0x0, 0x4, 0x0, 0x2}, {0x1, 0x1, 0x6, 0x2}, {0x1, 0x3, 0xf, 0xa}], 0x10, 0x2}, 0x94) 624.559626ms ago: executing program 4 (id=9578): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="0906cf80920f3332d117b9625691c4fa62666a8e18b9f9b0d1f2cc76acdccc87b6785e7a77a9e65fbe5daa9925b04b21cea076e4642b5b5cc803a394da24d87ffeb060246a3681c1222bfeafb59d876032a2df7e8c4eb64ada80150abe948d7d9f92de80960c5754725e2849c5a58c540680ec6b4c9c47e3bd29b2531ee584c784d06890bcec794d7fcac0c95f785d9070eb94770a8faf632881cd4cd216e05f95149ddc2b4d62d267a7664573fec02c1ea863941858518a091fe1cfd87c75d991feb3ef21dff9cca8bf190cee14b2a57d2ae49b8140f56e", 0xd8, 0x0}) syz_open_dev$amidi(&(0x7f0000000200), 0x80000001, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000080)=[r1, 0x0, r2, r2, 0x0, 0x0], 0x6}) 540.953352ms ago: executing program 5 (id=9579): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r4) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r8, 0x4068aea3, &(0x7f0000000100)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x4, 0x0, 0x2080, {0x8080000, 0xffffffffffffffff, {}, 0x0, 0xff}, {"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", "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"}}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) close_range(r0, 0xffffffffffffffff, 0x2000000) 484.053432ms ago: executing program 4 (id=9580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0xa, 0x100) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0xa0, 0x2, 0x1, 0x8, 0x10, 0x1}, &(0x7f00000001c0)=0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x1042000, &(0x7f0000000400)) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r5 = syz_open_dev$video4linux(&(0x7f00000009c0), 0xffffffffffffffff, 0xc2000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f0000000a00)={0x0, {0xff78, 0x7e07}}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000000)) 0s ago: executing program 5 (id=9581): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x10000, &(0x7f0000000300)='usrquota') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0) utimes(&(0x7f0000000240)='./file1\x00', &(0x7f0000000500)={{0x77359400}, {0x0, 0xea60}}) kernel console output (not intermixed with test programs): 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2576.876672][T25472] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input138 [ 2576.910526][ T5875] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2577.809719][T25472] rc_core: IR keymap rc-imon-pad not found [ 2577.815735][T25472] Registered IR keymap rc-empty [ 2577.820732][T25472] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2577.893295][T25472] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2577.906066][T25546] usb 4-1: USB disconnect, device number 93 [ 2577.962434][T12449] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2577.993209][T25472] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2578.003341][ T5875] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2578.010272][ T5875] ath9k_htc: Failed to initialize the device [ 2578.034330][T25472] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input139 [ 2578.045848][T25546] usb 4-1: ath9k_htc: USB layer deinitialized [ 2578.057542][T25472] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:87> initialized [ 2578.147094][T12449] usb 3-1: Using ep0 maxpacket: 16 [ 2578.169122][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2578.195294][T12449] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2578.200076][ T5853] usb 5-1: USB disconnect, device number 87 [ 2578.220898][T12449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.230087][T12449] usb 3-1: Product: syz [ 2578.265577][T12449] usb 3-1: Manufacturer: syz [ 2578.270234][T12449] usb 3-1: SerialNumber: syz [ 2578.409016][T12449] usb 3-1: config 0 descriptor?? [ 2578.421309][T12449] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 2578.436715][ T7346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2578.651417][T12449] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 2578.683833][T12449] visor 3-1:0.0: probe with driver visor failed with error -5 [ 2578.910313][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 2578.910329][ T29] audit: type=1400 audit(1771634811.023:9038): avc: denied { read } for pid=7354 comm="syz.5.9258" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2578.958967][ T29] audit: type=1400 audit(1771634811.053:9039): avc: denied { open } for pid=7354 comm="syz.5.9258" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2579.021149][ T29] audit: type=1400 audit(1771634811.133:9040): avc: denied { read } for pid=7359 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2579.052476][ T29] audit: type=1400 audit(1771634811.133:9041): avc: denied { open } for pid=7359 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2579.079516][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2579.126775][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2579.134568][ T29] audit: type=1400 audit(1771634811.163:9042): avc: denied { ioctl } for pid=7359 comm="syz-executor" path="socket:[189121]" dev="sockfs" ino=189121 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2579.165462][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2579.200925][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2579.212607][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2579.571261][ T29] audit: type=1400 audit(1771634811.193:9043): avc: denied { read write } for pid=7354 comm="syz.5.9258" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2579.605545][ T29] audit: type=1400 audit(1771634811.193:9044): avc: denied { open } for pid=7354 comm="syz.5.9258" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2579.688252][ T29] audit: type=1400 audit(1771634811.193:9045): avc: denied { ioctl } for pid=7354 comm="syz.5.9258" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2579.856125][ T29] audit: type=1400 audit(1771634811.213:9046): avc: denied { mount } for pid=7349 comm="syz.3.9256" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2580.010147][ T29] audit: type=1400 audit(1771634811.293:9047): avc: denied { name_bind } for pid=7364 comm="syz.4.9260" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2580.146491][ T190] bridge_slave_1: left allmulticast mode [ 2580.152357][ T190] bridge_slave_1: left promiscuous mode [ 2580.174722][ T190] bridge0: port 2(bridge_slave_1) entered disabled state [ 2580.607307][ T190] bridge_slave_0: left allmulticast mode [ 2580.616090][T19456] usb 3-1: USB disconnect, device number 59 [ 2580.671415][ T190] bridge_slave_0: left promiscuous mode [ 2580.695057][ T190] bridge0: port 1(bridge_slave_0) entered disabled state [ 2581.143725][T12449] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2581.262418][ T5807] Bluetooth: hci1: command tx timeout [ 2581.302372][T12449] usb 3-1: Using ep0 maxpacket: 8 [ 2581.319471][T12449] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 2581.328409][T12449] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2581.365125][T12449] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2581.400043][T12449] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2581.436756][T12449] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2581.470790][T12449] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2581.501831][T12449] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2581.529295][T12449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.557985][ T190] bond0 (unregistering): (slave 30): Releasing backup interface [ 2581.571416][ T190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2581.589667][ T190] bond0 (unregistering): Released all slaves [ 2581.615405][ T190] bond1 (unregistering): Released all slaves [ 2581.854316][T12449] usb 3-1: GET_CAPABILITIES returned 0 [ 2581.859915][T12449] usbtmc 3-1:16.0: can't read capabilities [ 2581.919045][ T190] tipc: Left network mode [ 2581.958596][ T7359] chnl_net:caif_netlink_parms(): no params data found [ 2581.985486][ T7413] input: syz1 as /devices/virtual/input/input140 [ 2582.560674][ T190] hsr_slave_0: left promiscuous mode [ 2582.581704][ T190] hsr_slave_1: left promiscuous mode [ 2582.604219][ T190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2582.635708][ T190] pim6reg (unregistering): left allmulticast mode [ 2583.476753][ T5807] Bluetooth: hci1: command tx timeout [ 2583.524171][ T190] team0 (unregistering): Port device team_slave_1 removed [ 2583.763834][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9275'. [ 2583.780447][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state [ 2583.799790][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state [ 2583.824731][T19456] usb 3-1: USB disconnect, device number 60 [ 2583.834523][ T7359] bridge_slave_0: entered allmulticast mode [ 2583.854547][ T7359] bridge_slave_0: entered promiscuous mode [ 2583.876388][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state [ 2583.926898][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state [ 2584.195534][ T7359] bridge_slave_1: entered allmulticast mode [ 2584.237282][ T7359] bridge_slave_1: entered promiscuous mode [ 2584.725732][ T7359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2584.773572][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 2584.773590][ T29] audit: type=1400 audit(1771634816.893:9085): avc: denied { create } for pid=7453 comm="syz.5.9278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2584.793893][ T7359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2584.872930][ T29] audit: type=1400 audit(1771634816.983:9086): avc: denied { read write } for pid=7453 comm="syz.5.9278" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2585.003036][ T29] audit: type=1400 audit(1771634816.983:9087): avc: denied { open } for pid=7453 comm="syz.5.9278" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2585.029629][ T7447] sp0: Synchronizing with TNC [ 2585.042821][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2585.049201][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2585.057587][ T29] audit: type=1400 audit(1771634816.983:9088): avc: denied { ioctl } for pid=7453 comm="syz.5.9278" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2586.042862][ T5807] Bluetooth: hci1: command tx timeout [ 2586.127596][ T29] audit: type=1400 audit(1771634818.243:9089): avc: denied { read } for pid=7465 comm="syz.5.9280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2586.196512][ T7359] team0: Port device team_slave_0 added [ 2586.261237][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9274'. [ 2586.277588][ T7359] team0: Port device team_slave_1 added [ 2586.308983][ T29] audit: type=1400 audit(1771634818.363:9090): avc: denied { create } for pid=7455 comm="syz.4.9274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2586.310817][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2586.336495][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2586.392348][ T7359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2586.458746][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2586.489785][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2586.580702][ T7476] input: syz1 as /devices/virtual/input/input141 [ 2586.737981][ T7359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2587.126578][ T7359] hsr_slave_0: entered promiscuous mode [ 2587.164242][ T7359] hsr_slave_1: entered promiscuous mode [ 2587.170520][ T7359] debugfs: 'hsr0' already exists in 'hsr' [ 2587.238312][ T7359] Cannot create hsr debugfs directory [ 2587.507485][ T29] audit: type=1400 audit(1771634819.623:9091): avc: denied { setopt } for pid=7486 comm="syz.2.9283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2587.767439][ T29] audit: type=1400 audit(1771634819.883:9092): avc: denied { connect } for pid=7490 comm="syz.5.9285" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2587.869065][ T29] audit: type=1400 audit(1771634819.903:9093): avc: denied { accept } for pid=7490 comm="syz.5.9285" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2587.979789][ T29] audit: type=1400 audit(1771634820.093:9094): avc: denied { ioctl } for pid=7495 comm="syz.3.9281" path="socket:[188363]" dev="sockfs" ino=188363 ioctlcmd=0x5875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2588.062366][ T4765] Bluetooth: hci1: command tx timeout [ 2589.494455][T12449] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 2589.665536][ T7359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2589.675883][T12449] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 2589.697151][T12449] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 2589.718350][T12449] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2589.743811][ T7359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2589.754398][T12449] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2589.772392][T12449] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.790681][T12449] usb 4-1: Product: syz [ 2589.798492][ T7359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2589.812575][T12449] usb 4-1: Manufacturer: syz [ 2589.825409][ T7359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2589.833288][T12449] usb 4-1: SerialNumber: syz [ 2589.854203][T12449] cdc_mbim 4-1:1.0: skipping garbage [ 2589.902431][ T5807] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2590.059654][ T7507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2590.073038][ T7507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2590.325994][ T7359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2590.363949][ T7359] 8021q: adding VLAN 0 to HW filter on device team0 [ 2590.394015][T27962] bridge0: port 1(bridge_slave_0) entered blocking state [ 2590.401159][T27962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2590.434768][T27962] bridge0: port 2(bridge_slave_1) entered blocking state [ 2590.441956][T27962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2590.584652][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2590.584667][ T29] audit: type=1400 audit(1771634822.703:9097): avc: denied { mount } for pid=7546 comm="syz.4.9289" name="/" dev="rpc_pipefs" ino=189872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 2590.630890][ T29] audit: type=1400 audit(1771634822.733:9098): avc: denied { append } for pid=7549 comm="syz.5.9290" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2590.709845][ T7507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2590.733983][ T7507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2590.741468][ T29] audit: type=1400 audit(1771634822.813:9099): avc: denied { sys_module } for pid=7359 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2591.195806][T12449] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2591.215515][T12449] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 2591.226964][T12449] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 2591.257371][T12449] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2591.285704][T12449] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2591.318022][T12449] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 2591.365256][T12449] usb 4-1: USB disconnect, device number 94 [ 2591.417099][ T7359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2591.630522][ T7359] veth0_vlan: entered promiscuous mode [ 2591.725365][ T7359] veth1_vlan: entered promiscuous mode [ 2591.757339][ T7571] input: syz1 as /devices/virtual/input/input142 [ 2591.843243][ T29] audit: type=1400 audit(1771634823.963:9100): avc: denied { mounton } for pid=7575 comm="syz.3.9294" path="/38/bus" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2591.876703][ T7359] veth0_macvtap: entered promiscuous mode [ 2591.897446][ T7359] veth1_macvtap: entered promiscuous mode [ 2592.155442][ T7359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2592.169625][T12449] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 2592.179406][ T7359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2592.377944][ T190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2592.411787][T12449] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2592.416431][ T190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2592.419365][T12449] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2592.602325][T12449] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2592.622419][T12449] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2592.711170][ T7579] sp0: Synchronizing with TNC [ 2592.802395][T12449] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2592.833508][T12449] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2592.837928][ T190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2592.852850][T12449] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2592.874797][ T190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2592.894341][T12449] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2592.972352][T12449] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2593.009925][T12449] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2593.033883][T12449] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2593.045758][T12449] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2593.052325][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2593.108116][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2593.109630][T12449] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2593.146039][T12449] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2593.178252][T12449] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2593.223085][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2593.225238][T12449] usb 4-1: string descriptor 0 read error: -22 [ 2593.231517][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2593.237763][T12449] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2593.258024][T12449] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2593.280569][ T29] audit: type=1400 audit(1771634825.393:9101): avc: denied { mounton } for pid=7359 comm="syz-executor" path="/root/syzkaller.NMxEVA/syz-tmp" dev="sda1" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2593.338869][T12449] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2593.383608][ T29] audit: type=1400 audit(1771634825.423:9102): avc: denied { mount } for pid=7359 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2593.426432][ T29] audit: type=1400 audit(1771634825.423:9103): avc: denied { mounton } for pid=7359 comm="syz-executor" path="/root/syzkaller.NMxEVA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2593.454814][ T29] audit: type=1400 audit(1771634825.423:9104): avc: denied { mounton } for pid=7359 comm="syz-executor" path="/root/syzkaller.NMxEVA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=190225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2593.526471][ T29] audit: type=1400 audit(1771634825.433:9105): avc: denied { unmount } for pid=7359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2593.602589][ T29] audit: type=1400 audit(1771634825.433:9107): avc: denied { mounton } for pid=7359 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2594.441231][ T7623] xt_hashlimit: size too large, truncated to 1048576 [ 2594.922823][ T5875] usb 4-1: USB disconnect, device number 95 [ 2594.959916][ T7628] new mount options do not match the existing superblock, will be ignored [ 2595.815712][T12449] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 2597.810028][ T7649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2598.275521][T12449] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2598.286474][T12449] usb 1-1: not running at top speed; connect to a high speed hub [ 2598.303113][T12449] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2598.369534][T12449] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2598.371034][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 2598.371049][ T29] audit: type=1400 audit(1771634830.483:9121): avc: denied { sqpoll } for pid=7650 comm="syz.4.9312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2598.452425][T12449] usb 1-1: string descriptor 0 read error: -71 [ 2598.465722][T12449] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2598.517566][T12449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.582469][T12449] usb 1-1: can't set config #1, error -71 [ 2598.993555][T12449] usb 1-1: USB disconnect, device number 61 [ 2599.692420][ T29] audit: type=1400 audit(1771634831.793:9122): avc: denied { write } for pid=7663 comm="syz.2.9315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2599.869723][ T29] audit: type=1400 audit(1771634831.803:9123): avc: denied { listen } for pid=7663 comm="syz.2.9315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2600.056777][ T29] audit: type=1400 audit(1771634832.063:9124): avc: denied { execute } for pid=7673 comm="syz.3.9316" name="file1" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2600.239649][ T29] audit: type=1400 audit(1771634832.073:9125): avc: denied { execute_no_trans } for pid=7673 comm="syz.3.9316" path="/41/file1" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2600.279720][ T7674] bond1: entered promiscuous mode [ 2600.311858][ T7674] bond1: entered allmulticast mode [ 2600.332437][ T7674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2601.013563][ T29] audit: type=1400 audit(1771634832.773:9126): avc: denied { watch_mount watch_reads } for pid=7679 comm="syz.2.9318" path="/109" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2601.879643][ T7701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2602.217205][ T29] audit: type=1400 audit(1771634834.333:9127): avc: denied { append } for pid=7705 comm="syz.5.9311" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2602.592650][ T7706] Bluetooth: MGMT ver 1.23 [ 2602.632844][ T29] audit: type=1400 audit(1771634834.703:9128): avc: denied { open } for pid=7705 comm="syz.5.9311" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2602.691584][ T29] audit: type=1400 audit(1771634834.703:9129): avc: denied { bind } for pid=7705 comm="syz.5.9311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2602.750835][ T7712] bond1 (unregistering): Released all slaves [ 2602.757018][ T29] audit: type=1400 audit(1771634834.713:9130): avc: denied { write } for pid=7705 comm="syz.5.9311" path="socket:[190889]" dev="sockfs" ino=190889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2602.914570][ T7721] input: syz1 as /devices/virtual/input/input143 [ 2602.952622][ T5853] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2603.096330][ T7730] pim6reg: entered allmulticast mode [ 2603.112467][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 2603.118439][ T5853] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 2603.162993][T19456] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2603.253633][ T5853] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2603.264499][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.289150][ T5853] usb 1-1: Product: syz [ 2603.295249][ T5853] usb 1-1: Manufacturer: syz [ 2603.299945][ T5853] usb 1-1: SerialNumber: syz [ 2603.307428][ T5853] usb 1-1: config 0 descriptor?? [ 2603.318858][ T5853] gspca_main: 047d:5003 too many config [ 2603.332450][ T5875] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2603.682507][T19456] usb 5-1: Using ep0 maxpacket: 8 [ 2603.706540][ T5105] usb 1-1: USB disconnect, device number 62 [ 2603.713646][T19456] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2603.723722][T19456] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2603.737503][T19456] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2603.758765][T19456] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2603.773574][T19456] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2603.782931][T19456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.796940][T19456] usbtmc 5-1:16.0: bulk endpoints not found [ 2603.822710][ T5875] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 2603.830823][ T5875] usb 3-1: config 1 has no interface number 0 [ 2603.837024][ T5875] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2603.862311][ T5875] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2603.872241][ T5875] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.885377][ T5875] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2603.894709][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.902808][ T5875] usb 3-1: Product: syz [ 2603.907023][ T5875] usb 3-1: Manufacturer: syz [ 2603.911679][ T5875] usb 3-1: SerialNumber: syz [ 2603.919335][ T7709] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2604.028649][ T5105] usb 5-1: USB disconnect, device number 88 [ 2604.057245][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 2604.057261][ T29] audit: type=1400 audit(1771634836.173:9138): avc: denied { ioctl } for pid=7736 comm="syz.5.9333" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2604.116474][ T29] audit: type=1400 audit(1771634836.173:9139): avc: denied { set_context_mgr } for pid=7736 comm="syz.5.9333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2604.137413][ T29] audit: type=1400 audit(1771634836.173:9140): avc: denied { map } for pid=7736 comm="syz.5.9333" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2604.143244][ T7709] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2604.176619][ T29] audit: type=1400 audit(1771634836.293:9141): avc: denied { call } for pid=7736 comm="syz.5.9333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2604.197536][ T29] audit: type=1400 audit(1771634836.293:9142): avc: denied { transfer } for pid=7736 comm="syz.5.9333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2604.850398][ T2710] block nbd0: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 30 seconds [ 2604.863208][ T2710] block nbd0: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 30 seconds [ 2604.875723][ T2710] block nbd0: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 30 seconds [ 2604.886932][ T2710] block nbd0: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 30 seconds [ 2604.915903][ T5875] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 2604.948696][ T29] audit: type=1326 audit(1771634837.063:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.5.9333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999c629 code=0x7fc00000 [ 2605.191858][ T29] audit: type=1400 audit(1771634837.253:9144): avc: denied { unmount } for pid=29689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2605.228427][ T5875] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 2605.237352][ T5875] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 2605.272409][ T5105] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 2605.672531][ T29] audit: type=1400 audit(1771634837.773:9145): avc: denied { read write } for pid=7745 comm="syz.0.9335" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2605.842471][ T5875] usb 3-1: USB disconnect, device number 61 [ 2605.850471][ T5875] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 2605.873172][ T29] audit: type=1400 audit(1771634837.783:9146): avc: denied { open } for pid=7745 comm="syz.0.9335" path="/8/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2605.944240][ T5105] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 2605.955732][ T5105] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 2605.967546][ T5875] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 2605.971884][ T5105] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2606.840943][ T5105] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2606.850234][ T5105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.858364][ T5105] usb 6-1: Product: syz [ 2606.862581][ T5105] usb 6-1: Manufacturer: syz [ 2606.867396][ T5105] usb 6-1: SerialNumber: syz [ 2606.881273][ T5105] cdc_mbim 6-1:1.0: skipping garbage [ 2606.954862][ T29] audit: type=1400 audit(1771634839.073:9147): avc: denied { unmount } for pid=7359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2607.080397][ T7744] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2607.102908][ T7744] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2607.880022][ T7744] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2607.921033][ T7744] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2607.990199][ T5105] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2608.138121][ T5105] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 2608.186984][ T5105] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 2608.196753][ T5105] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2608.207574][ T5105] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2608.281656][ T5105] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 2608.488836][ T5105] usb 6-1: USB disconnect, device number 103 [ 2609.575825][ T29] audit: type=1400 audit(1771634841.673:9148): avc: denied { write } for pid=7775 comm="syz.4.9345" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2609.631303][ T7778] IPVS: set_ctl: invalid protocol: 3 172.20.20.44:20001 [ 2609.647648][ T29] audit: type=1400 audit(1771634841.743:9149): avc: denied { setopt } for pid=7775 comm="syz.4.9345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2610.312838][ T5105] usb 6-1: new low-speed USB device number 104 using dummy_hcd [ 2610.390172][ T7792] FAULT_INJECTION: forcing a failure. [ 2610.390172][ T7792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2610.403621][ T7792] CPU: 0 UID: 0 PID: 7792 Comm: syz.4.9350 Tainted: G L syzkaller #0 PREEMPT(full) [ 2610.403647][ T7792] Tainted: [L]=SOFTLOCKUP [ 2610.403653][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2610.403663][ T7792] Call Trace: [ 2610.403669][ T7792] [ 2610.403675][ T7792] dump_stack_lvl+0x100/0x190 [ 2610.403707][ T7792] should_fail_ex.cold+0x5/0xa [ 2610.403729][ T7792] _copy_to_user+0x32/0xd0 [ 2610.403762][ T7792] do_statfs_native+0xa2/0x110 [ 2610.403788][ T7792] ? __pfx_do_statfs_native+0x10/0x10 [ 2610.403823][ T7792] ? fput+0x79/0x100 [ 2610.403845][ T7792] __do_sys_fstatfs+0xf4/0x100 [ 2610.403870][ T7792] ? __pfx___do_sys_fstatfs+0x10/0x10 [ 2610.403911][ T7792] do_syscall_64+0x106/0xf80 [ 2610.403929][ T7792] ? clear_bhb_loop+0x40/0x90 [ 2610.403951][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2610.403969][ T7792] RIP: 0033:0x7f2e3299c629 [ 2610.403984][ T7792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2610.404001][ T7792] RSP: 002b:00007f2e337a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 2610.404019][ T7792] RAX: ffffffffffffffda RBX: 00007f2e32c16090 RCX: 00007f2e3299c629 [ 2610.404030][ T7792] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 2610.404040][ T7792] RBP: 00007f2e337a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2610.404050][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2610.404061][ T7792] R13: 00007f2e32c16128 R14: 00007f2e32c16090 R15: 00007fff09790748 [ 2610.404085][ T7792] [ 2610.408137][T12449] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2610.807196][ T5105] usb 6-1: device descriptor read/64, error -71 [ 2610.832368][T12449] usb 4-1: Using ep0 maxpacket: 8 [ 2610.968532][ T29] audit: type=1400 audit(1771634843.083:9150): avc: denied { create } for pid=7795 comm="syz.2.9352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2610.998923][T12449] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2611.012785][T12449] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2611.035129][ T29] audit: type=1400 audit(1771634843.103:9151): avc: denied { setopt } for pid=7795 comm="syz.2.9352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2611.055479][ T7798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9352'. [ 2611.057919][T12449] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2611.090668][T12449] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2611.107973][T12449] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2611.121550][T12449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2611.142368][ T5105] usb 6-1: new low-speed USB device number 105 using dummy_hcd [ 2611.174829][T12449] usbtmc 4-1:16.0: bulk endpoints not found [ 2611.188943][ T29] audit: type=1400 audit(1771634843.303:9152): avc: denied { read } for pid=7802 comm="syz.4.9354" path="socket:[191687]" dev="sockfs" ino=191687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2611.282417][ T5105] usb 6-1: device descriptor read/64, error -71 [ 2611.292514][ T5865] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2611.390679][ T7786] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 2611.403482][ T5105] usb usb6-port1: attempt power cycle [ 2611.410231][ T7786] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 2611.428391][ T4879] usb 4-1: USB disconnect, device number 96 [ 2611.453724][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 2611.468509][ T5865] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 2611.481785][T12449] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2611.491930][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2611.505830][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2611.519259][ T5865] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2611.532355][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.540534][ T5865] usb 1-1: Product: syz [ 2611.548104][ T5865] usb 1-1: Manufacturer: syz [ 2611.555966][ T5865] usb 1-1: SerialNumber: syz [ 2611.561949][ T5865] usb 1-1: config 0 descriptor?? [ 2611.572585][ T7797] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2611.589480][ T5865] usb 1-1: ucan: probing device on interface #0 [ 2611.596928][ T5865] usb 1-1: ucan: invalid endpoint configuration [ 2611.606800][ T5865] usb 1-1: ucan: probe failed; try to update the device firmware [ 2611.652336][T12449] usb 5-1: Using ep0 maxpacket: 8 [ 2611.660243][T12449] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2611.672914][T12449] usb 5-1: config 7 has an invalid interface number: 58 but max is 0 [ 2611.682450][T12449] usb 5-1: config 7 has no interface number 0 [ 2611.688650][T12449] usb 5-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 2611.746935][T12449] usb 5-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2611.760356][T12449] usb 5-1: config 7 interface 58 has no altsetting 0 [ 2611.769815][T12449] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 2611.779137][T12449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.787325][T12449] usb 5-1: Product: syz [ 2611.791513][T12449] usb 5-1: Manufacturer: syz [ 2611.796166][T12449] usb 5-1: SerialNumber: syz [ 2611.802384][ T5105] usb 6-1: new low-speed USB device number 106 using dummy_hcd [ 2611.848647][ T5105] usb 6-1: device descriptor read/8, error -71 [ 2611.911035][ T7797] netlink: 'syz.0.9351': attribute type 20 has an invalid length. [ 2611.929213][ T29] audit: type=1400 audit(1771634844.043:9153): avc: denied { create } for pid=7794 comm="syz.0.9351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2612.111092][ T7805] tmpfs: Bad value for 'mpol' [ 2612.431056][ T29] audit: type=1400 audit(1771634844.063:9154): avc: denied { write } for pid=7794 comm="syz.0.9351" path="socket:[191704]" dev="sockfs" ino=191704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2612.459861][ T29] audit: type=1400 audit(1771634844.153:9155): avc: denied { bind } for pid=7806 comm="syz.2.9355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2612.542769][ T29] audit: type=1400 audit(1771634844.573:9156): avc: denied { setopt } for pid=7794 comm="syz.0.9351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2613.153063][ T5105] usb 6-1: new low-speed USB device number 107 using dummy_hcd [ 2613.164881][ T5875] usb 1-1: USB disconnect, device number 63 [ 2613.388517][ T5105] usb 6-1: device not accepting address 107, error -71 [ 2613.401993][ T5105] usb usb6-port1: unable to enumerate USB device [ 2613.458102][ T7820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2613.684560][ T29] audit: type=1400 audit(1771634845.793:9157): avc: denied { mount } for pid=7819 comm="syz.5.9358" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2614.262018][T12449] usb 5-1: USB disconnect, device number 89 [ 2614.599015][ T7844] sp0: Synchronizing with TNC [ 2614.621896][ T4879] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 2614.909091][ T4879] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 2614.927868][ T4879] usb 1-1: config 0 has no interface number 0 [ 2614.941321][ T4879] usb 1-1: config 0 interface 87 has no altsetting 0 [ 2614.958202][ T4879] usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=7d.82 [ 2614.972567][ T4879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.983543][ T4879] usb 1-1: Product: syz [ 2614.987843][ T4879] usb 1-1: Manufacturer: syz [ 2614.993045][ T4879] usb 1-1: SerialNumber: syz [ 2615.003146][ T4879] usb 1-1: config 0 descriptor?? [ 2615.925998][ T7853] IPVS: Error connecting to the multicast addr [ 2615.990031][ T7862] FAULT_INJECTION: forcing a failure. [ 2615.990031][ T7862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2616.024988][ T5875] usb 1-1: USB disconnect, device number 64 [ 2616.054469][ T7862] CPU: 0 UID: 0 PID: 7862 Comm: syz.3.9371 Tainted: G L syzkaller #0 PREEMPT(full) [ 2616.054504][ T7862] Tainted: [L]=SOFTLOCKUP [ 2616.054509][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2616.054520][ T7862] Call Trace: [ 2616.054526][ T7862] [ 2616.054531][ T7862] dump_stack_lvl+0x100/0x190 [ 2616.054563][ T7862] should_fail_ex.cold+0x5/0xa [ 2616.054584][ T7862] _copy_to_user+0x32/0xd0 [ 2616.054610][ T7862] bpf_prog_test_run_raw_tp+0x53d/0x700 [ 2616.054632][ T7862] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 2616.054652][ T7862] ? fput+0x79/0x100 [ 2616.054671][ T7862] ? __bpf_prog_get+0x97/0x2a0 [ 2616.054696][ T7862] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 2616.054715][ T7862] __sys_bpf+0x1725/0x4b90 [ 2616.054737][ T7862] ? __pfx___sys_bpf+0x10/0x10 [ 2616.054752][ T7862] ? proc_fail_nth_write+0x9f/0x220 [ 2616.054775][ T7862] ? find_held_lock+0x2b/0x80 [ 2616.054801][ T7862] ? find_held_lock+0x2b/0x80 [ 2616.054822][ T7862] ? ksys_write+0x190/0x250 [ 2616.054853][ T7862] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2616.054874][ T7862] ? __fget_files+0x215/0x3d0 [ 2616.054904][ T7862] ? fput+0x79/0x100 [ 2616.054923][ T7862] ? ksys_write+0x1ac/0x250 [ 2616.054946][ T7862] ? __pfx_ksys_write+0x10/0x10 [ 2616.054975][ T7862] __x64_sys_bpf+0x7b/0xc0 [ 2616.054993][ T7862] ? lockdep_hardirqs_on+0x78/0x100 [ 2616.055012][ T7862] do_syscall_64+0x106/0xf80 [ 2616.055029][ T7862] ? clear_bhb_loop+0x40/0x90 [ 2616.055051][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2616.055069][ T7862] RIP: 0033:0x7f49e4f9c629 [ 2616.055085][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2616.055102][ T7862] RSP: 002b:00007f49e5de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2616.055119][ T7862] RAX: ffffffffffffffda RBX: 00007f49e5215fa0 RCX: 00007f49e4f9c629 [ 2616.055131][ T7862] RDX: 0000000000000015 RSI: 00002000000002c0 RDI: 000000000000000a [ 2616.055141][ T7862] RBP: 00007f49e5de5090 R08: 0000000000000000 R09: 0000000000000000 [ 2616.055152][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2616.055161][ T7862] R13: 00007f49e5216038 R14: 00007f49e5215fa0 R15: 00007ffe37326e98 [ 2616.055185][ T7862] [ 2616.430003][ T7867] overlay: Unknown parameter 'smackfstransmute' [ 2616.942443][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2616.942459][ T29] audit: type=1400 audit(1771634849.053:9160): avc: denied { setopt } for pid=7889 comm="syz.4.9380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2616.985366][ T29] audit: type=1400 audit(1771634849.083:9161): avc: denied { map } for pid=7889 comm="syz.4.9380" path="socket:[191943]" dev="sockfs" ino=191943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2617.036479][ T29] audit: type=1400 audit(1771634849.083:9162): avc: denied { write } for pid=7889 comm="syz.4.9380" name="sockstat" dev="proc" ino=4026533883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2617.660485][ T7903] input: syz1 as /devices/virtual/input/input144 [ 2618.030701][ T7908] Invalid ELF header type: 3 != 1 [ 2618.039149][ T29] audit: type=1400 audit(1771634849.943:9163): avc: denied { create } for pid=7904 comm="syz.2.9384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2618.574646][ T29] audit: type=1400 audit(1771634850.143:9164): avc: denied { module_load } for pid=7904 comm="syz.2.9384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2618.651027][ T7910] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2618.718607][ T29] audit: type=1400 audit(1771634850.823:9165): avc: denied { load_policy } for pid=7909 comm="syz.4.9385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2618.762542][ T7916] tmpfs: Too few inodes for current use [ 2618.766067][ T7918] netlink: 1056 bytes leftover after parsing attributes in process `syz.4.9385'. [ 2618.800480][ T29] audit: type=1400 audit(1771634850.883:9166): avc: denied { remount } for pid=7915 comm="syz.3.9388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2618.849362][ T7921] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9385'. [ 2619.007893][ T7931] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2619.018688][ T7910] SELinux: failed to load policy [ 2619.981947][ T7944] Invalid ELF header type: 3 != 1 [ 2620.424403][ T7949] FAULT_INJECTION: forcing a failure. [ 2620.424403][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 2620.438080][ T7949] CPU: 0 UID: 0 PID: 7949 Comm: syz.5.9396 Tainted: G L syzkaller #0 PREEMPT(full) [ 2620.438100][ T7949] Tainted: [L]=SOFTLOCKUP [ 2620.438104][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2620.438111][ T7949] Call Trace: [ 2620.438116][ T7949] [ 2620.438122][ T7949] dump_stack_lvl+0x100/0x190 [ 2620.438147][ T7949] should_fail_ex.cold+0x5/0xa [ 2620.438163][ T7949] should_failslab+0xc2/0x120 [ 2620.438182][ T7949] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2620.438198][ T7949] ? __alloc_skb+0x140/0x710 [ 2620.438218][ T7949] __alloc_skb+0x140/0x710 [ 2620.438234][ T7949] ? __alloc_skb+0x5b7/0x710 [ 2620.438251][ T7949] ? __pfx___alloc_skb+0x10/0x10 [ 2620.438267][ T7949] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 2620.438292][ T7949] netlink_alloc_large_skb+0x69/0x150 [ 2620.438306][ T7949] netlink_sendmsg+0x680/0xda0 [ 2620.438321][ T7949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2620.438333][ T7949] ? PageHuge+0x170/0x180 [ 2620.438352][ T7949] ____sys_sendmsg+0xa54/0xc30 [ 2620.438368][ T7949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2620.438387][ T7949] ___sys_sendmsg+0x190/0x1e0 [ 2620.438403][ T7949] ? __pfx____sys_sendmsg+0x10/0x10 [ 2620.438433][ T7949] __sys_sendmsg+0x170/0x220 [ 2620.438445][ T7949] ? __pfx___sys_sendmsg+0x10/0x10 [ 2620.438463][ T7949] do_syscall_64+0x106/0xf80 [ 2620.438475][ T7949] ? clear_bhb_loop+0x40/0x90 [ 2620.438488][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2620.438500][ T7949] RIP: 0033:0x7f16f999c629 [ 2620.438515][ T7949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2620.438526][ T7949] RSP: 002b:00007f16fa944028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2620.438537][ T7949] RAX: ffffffffffffffda RBX: 00007f16f9c15fa0 RCX: 00007f16f999c629 [ 2620.438545][ T7949] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2620.438551][ T7949] RBP: 00007f16fa944090 R08: 0000000000000000 R09: 0000000000000000 [ 2620.438557][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2620.438564][ T7949] R13: 00007f16f9c16038 R14: 00007f16f9c15fa0 R15: 00007ffcb7b05318 [ 2620.438577][ T7949] [ 2621.172391][ T29] audit: type=1400 audit(1771634852.863:9167): avc: denied { read write } for pid=7945 comm="syz.4.9395" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2621.224556][ T29] audit: type=1400 audit(1771634852.863:9168): avc: denied { ioctl } for pid=7945 comm="syz.4.9395" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2621.461813][ T7958] input: syz1 as /devices/virtual/input/input145 [ 2621.927939][ T7974] FAULT_INJECTION: forcing a failure. [ 2621.927939][ T7974] name failslab, interval 1, probability 0, space 0, times 0 [ 2621.946813][ T7974] CPU: 1 UID: 0 PID: 7974 Comm: syz.2.9404 Tainted: G L syzkaller #0 PREEMPT(full) [ 2621.946843][ T7974] Tainted: [L]=SOFTLOCKUP [ 2621.946850][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2621.946859][ T7974] Call Trace: [ 2621.946866][ T7974] [ 2621.946873][ T7974] dump_stack_lvl+0x100/0x190 [ 2621.946904][ T7974] should_fail_ex.cold+0x5/0xa [ 2621.946927][ T7974] should_failslab+0xc2/0x120 [ 2621.946954][ T7974] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2621.946976][ T7974] ? io_submit_one+0x124/0x1fb0 [ 2621.947001][ T7974] io_submit_one+0x124/0x1fb0 [ 2621.947023][ T7974] ? __lock_acquire+0x4a5/0x2630 [ 2621.947051][ T7974] ? irqentry_exit+0x180/0x670 [ 2621.947070][ T7974] ? lockdep_hardirqs_on+0x78/0x100 [ 2621.947087][ T7974] ? __pfx_io_submit_one+0x10/0x10 [ 2621.947115][ T7974] ? __might_fault+0xc5/0x140 [ 2621.947143][ T7974] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 2621.947163][ T7974] __x64_sys_io_submit+0x1b1/0x3a0 [ 2621.947187][ T7974] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 2621.947207][ T7974] ? fput+0x79/0x100 [ 2621.947235][ T7974] do_syscall_64+0x106/0xf80 [ 2621.947254][ T7974] ? clear_bhb_loop+0x40/0x90 [ 2621.947275][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2621.947292][ T7974] RIP: 0033:0x7f355259c629 [ 2621.947308][ T7974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2621.947324][ T7974] RSP: 002b:00007f355353c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2621.947341][ T7974] RAX: ffffffffffffffda RBX: 00007f3552815fa0 RCX: 00007f355259c629 [ 2621.947352][ T7974] RDX: 0000200000001300 RSI: 0000000000000001 RDI: 00007f355351b000 [ 2621.947363][ T7974] RBP: 00007f355353c090 R08: 0000000000000000 R09: 0000000000000000 [ 2621.947373][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2621.947384][ T7974] R13: 00007f3552816038 R14: 00007f3552815fa0 R15: 00007ffd3d664ee8 [ 2621.947406][ T7974] [ 2622.151503][ T5875] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2622.264038][ T7982] FAULT_INJECTION: forcing a failure. [ 2622.264038][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.276867][ T7982] CPU: 1 UID: 0 PID: 7982 Comm: syz.0.9406 Tainted: G L syzkaller #0 PREEMPT(full) [ 2622.276894][ T7982] Tainted: [L]=SOFTLOCKUP [ 2622.276901][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2622.276911][ T7982] Call Trace: [ 2622.276917][ T7982] [ 2622.276924][ T7982] dump_stack_lvl+0x100/0x190 [ 2622.276956][ T7982] should_fail_ex.cold+0x5/0xa [ 2622.276979][ T7982] ? tomoyo_encode2+0xfb/0x3c0 [ 2622.276999][ T7982] should_failslab+0xc2/0x120 [ 2622.277026][ T7982] __kmalloc_noprof+0xe0/0x850 [ 2622.277055][ T7982] tomoyo_encode2+0xfb/0x3c0 [ 2622.277078][ T7982] tomoyo_unix_entry+0x343/0x640 [ 2622.277099][ T7982] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 2622.277129][ T7982] ? get_pid_task+0x106/0x250 [ 2622.277159][ T7982] tomoyo_socket_bind_permission+0x307/0x350 [ 2622.277182][ T7982] ? __pfx_tomoyo_socket_bind_permission+0x10/0x10 [ 2622.277201][ T7982] ? __might_fault+0xc5/0x140 [ 2622.277223][ T7982] ? __might_fault+0xc5/0x140 [ 2622.277254][ T7982] security_socket_bind+0xd3/0x230 [ 2622.277281][ T7982] __sys_bind+0x140/0x260 [ 2622.277307][ T7982] ? __pfx___sys_bind+0x10/0x10 [ 2622.277328][ T7982] ? __fget_files+0x21f/0x3d0 [ 2622.277354][ T7982] ? __pfx_ksys_write+0x10/0x10 [ 2622.277385][ T7982] __x64_sys_bind+0x72/0xb0 [ 2622.277407][ T7982] ? lockdep_hardirqs_on+0x78/0x100 [ 2622.277426][ T7982] do_syscall_64+0x106/0xf80 [ 2622.277442][ T7982] ? clear_bhb_loop+0x40/0x90 [ 2622.277464][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2622.277482][ T7982] RIP: 0033:0x7f345039c629 [ 2622.277498][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2622.277514][ T7982] RSP: 002b:00007f344e5ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2622.277530][ T7982] RAX: ffffffffffffffda RBX: 00007f3450616180 RCX: 00007f345039c629 [ 2622.277542][ T7982] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000006 [ 2622.277552][ T7982] RBP: 00007f344e5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 2622.277563][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2622.277573][ T7982] R13: 00007f3450616218 R14: 00007f3450616180 R15: 00007fff41d1a858 [ 2622.277597][ T7982] [ 2622.522396][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 2622.616689][ T7982] ip6erspan0: entered promiscuous mode [ 2622.622369][ T29] audit: type=1400 audit(1771634854.673:9169): avc: denied { create } for pid=7976 comm="syz.3.9405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2622.622417][ T29] audit: type=1400 audit(1771634854.683:9170): avc: denied { ioctl } for pid=7976 comm="syz.3.9405" path="socket:[192782]" dev="sockfs" ino=192782 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2622.899986][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2622.993813][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2623.111295][ T5875] usb 5-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 2623.161201][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.211104][ T5875] usb 5-1: config 0 descriptor?? [ 2623.310373][ T29] audit: type=1400 audit(1771634855.423:9171): avc: denied { ioctl } for pid=7989 comm="syz.2.9409" path="/131/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2623.412552][T19456] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2623.572228][T19456] usb 6-1: Using ep0 maxpacket: 16 [ 2623.904325][ T5875] evision 0003:320F:5041.005B: item fetching failed at offset 5/9 [ 2623.924500][ T5875] evision 0003:320F:5041.005B: probe with driver evision failed with error -22 [ 2623.934189][T19456] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2623.944000][T19456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2623.956795][T19456] usb 6-1: Product: syz [ 2623.961030][T19456] usb 6-1: Manufacturer: syz [ 2623.966137][T19456] usb 6-1: SerialNumber: syz [ 2623.995829][T19456] usb 6-1: config 0 descriptor?? [ 2624.011980][T19456] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 2624.170738][ T5875] usb 5-1: USB disconnect, device number 90 [ 2624.610360][T19456] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 2624.626390][ T29] audit: type=1400 audit(1771634856.743:9172): avc: denied { read write } for pid=8010 comm="syz.2.9415" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2624.663742][ T29] audit: type=1400 audit(1771634856.743:9173): avc: denied { open } for pid=8010 comm="syz.2.9415" path="/dev/usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2624.691963][ T29] audit: type=1400 audit(1771634856.743:9174): avc: denied { ioctl } for pid=8010 comm="syz.2.9415" path="/dev/usbmon1" dev="devtmpfs" ino=717 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2624.739303][ T5853] usb 6-1: USB disconnect, device number 108 [ 2624.758030][ T5853] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 2624.768670][ T5853] visor 6-1:0.0: device disconnected [ 2625.177803][ T8021] input: syz1 as /devices/virtual/input/input146 [ 2625.361954][ T8028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2625.794616][T12449] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 2625.940379][ T29] audit: type=1400 audit(1771634858.043:9175): avc: denied { getopt } for pid=8032 comm="syz.5.9421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2626.054419][T12449] usb 5-1: config 4 has an invalid interface number: 120 but max is 0 [ 2626.065384][T12449] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2626.077167][T12449] usb 5-1: config 4 has no interface number 0 [ 2626.085370][T12449] usb 5-1: too many endpoints for config 4 interface 120 altsetting 194: 44, using maximum allowed: 30 [ 2626.096648][T12449] usb 5-1: config 4 interface 120 altsetting 194 has 0 endpoint descriptors, different from the interface descriptor's value: 44 [ 2626.110145][T12449] usb 5-1: config 4 interface 120 has no altsetting 0 [ 2626.117104][T12449] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2626.126347][T12449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2626.242668][ T8031] sp0: Synchronizing with TNC [ 2626.247870][ T29] audit: type=1400 audit(1771634858.363:9176): avc: denied { read write } for pid=8039 comm="syz.5.9423" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2626.817091][ T29] audit: type=1400 audit(1771634858.363:9177): avc: denied { open } for pid=8039 comm="syz.5.9423" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2626.968289][ T29] audit: type=1400 audit(1771634859.083:9178): avc: denied { create } for pid=8053 comm="syz.3.9427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2627.123100][ T4879] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2627.131351][ T5865] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2627.514126][ T4879] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 2627.526469][ T4879] usb 3-1: config 1 has no interface number 0 [ 2627.537746][ T4879] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 2627.555964][ T4879] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2627.582421][ T5865] usb 1-1: device descriptor read/64, error -71 [ 2627.592376][ T4879] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2627.609931][ T4879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2627.626444][ T4879] usb 3-1: Product: syz [ 2627.636569][ T4879] usb 3-1: Manufacturer: syz [ 2627.647493][ T4879] usb 3-1: SerialNumber: syz [ 2627.672386][ T8047] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2627.752141][ T4879] usb 3-1: Error in usbnet_get_endpoints (-22) [ 2627.884370][ T5865] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2628.605349][ T5865] usb 1-1: device descriptor read/64, error -71 [ 2628.616165][ T29] audit: type=1400 audit(1771634860.313:9179): avc: denied { create } for pid=8060 comm="syz.3.9429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2628.690402][ T29] audit: type=1400 audit(1771634860.313:9180): avc: denied { getopt } for pid=8060 comm="syz.3.9429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2628.732521][ T5865] usb usb1-port1: attempt power cycle [ 2628.767227][T12449] usb 5-1: string descriptor 0 read error: -71 [ 2628.835389][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9430'. [ 2628.992940][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2628.999023][T12449] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2629.034309][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2629.384756][ T8074] sp0: Synchronizing with TNC [ 2629.428112][T28495] usb 3-1: USB disconnect, device number 62 [ 2629.545927][ T8078] input: syz1 as /devices/virtual/input/input147 [ 2629.774844][ T8086] random: crng reseeded on system resumption [ 2630.012445][ T29] audit: type=1400 audit(1771634861.893:9181): avc: denied { write } for pid=8079 comm="syz.2.9435" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2630.066307][T12449] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 2631.027851][ T29] audit: type=1400 audit(1771634861.893:9182): avc: denied { open } for pid=8079 comm="syz.2.9435" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2631.051532][ T29] audit: type=1400 audit(1771634861.913:9183): avc: denied { ioctl } for pid=8079 comm="syz.2.9435" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2631.102069][T12449] stv0680 5-1:4.120: STV(e): camera ping failed!! [ 2631.119196][T12449] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2631.142347][T12449] stv0680 5-1:4.120: last error: 0, command = 0x0 [ 2631.534106][T12449] usb 5-1: USB disconnect, device number 91 [ 2631.691023][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9439'. [ 2631.803684][ T8106] FAULT_INJECTION: forcing a failure. [ 2631.803684][ T8106] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.840143][ T8106] CPU: 0 UID: 0 PID: 8106 Comm: syz.5.9442 Tainted: G L syzkaller #0 PREEMPT(full) [ 2631.840173][ T8106] Tainted: [L]=SOFTLOCKUP [ 2631.840179][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2631.840189][ T8106] Call Trace: [ 2631.840196][ T8106] [ 2631.840203][ T8106] dump_stack_lvl+0x100/0x190 [ 2631.840236][ T8106] should_fail_ex.cold+0x5/0xa [ 2631.840259][ T8106] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2631.840280][ T8106] should_failslab+0xc2/0x120 [ 2631.840308][ T8106] __kmalloc_noprof+0xe0/0x850 [ 2631.840334][ T8106] tomoyo_realpath_from_path+0xb6/0x690 [ 2631.840360][ T8106] tomoyo_path_number_perm+0x23c/0x580 [ 2631.840387][ T8106] ? tomoyo_path_number_perm+0x22e/0x580 [ 2631.840416][ T8106] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2631.840465][ T8106] ? find_held_lock+0x2b/0x80 [ 2631.840485][ T8106] ? __fget_files+0x215/0x3d0 [ 2631.840499][ T8106] ? hook_file_ioctl_common+0x146/0x410 [ 2631.840527][ T8106] ? __fget_files+0x21f/0x3d0 [ 2631.840548][ T8106] security_file_ioctl+0xd3/0x230 [ 2631.840568][ T8106] __x64_sys_ioctl+0xb7/0x210 [ 2631.840596][ T8106] do_syscall_64+0x106/0xf80 [ 2631.840613][ T8106] ? clear_bhb_loop+0x40/0x90 [ 2631.840635][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2631.840652][ T8106] RIP: 0033:0x7f16f999c629 [ 2631.840666][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2631.840683][ T8106] RSP: 002b:00007f16fa944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2631.840702][ T8106] RAX: ffffffffffffffda RBX: 00007f16f9c15fa0 RCX: 00007f16f999c629 [ 2631.840714][ T8106] RDX: 0000200000000000 RSI: 000000000000460f RDI: 0000000000000003 [ 2631.840726][ T8106] RBP: 00007f16fa944090 R08: 0000000000000000 R09: 0000000000000000 [ 2631.840737][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2631.840747][ T8106] R13: 00007f16f9c16038 R14: 00007f16f9c15fa0 R15: 00007ffcb7b05318 [ 2631.840779][ T8106] [ 2631.840788][ T8106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2631.845514][ T8110] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9441'. [ 2632.188568][ T29] audit: type=1400 audit(1771634864.293:9184): avc: denied { getopt } for pid=8098 comm="syz.2.9439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2632.758886][T29199] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2632.782422][ T5865] usb 6-1: new low-speed USB device number 109 using dummy_hcd [ 2632.804183][T29199] bond0 (unregistering): Released all slaves [ 2632.827332][T29199] bond1 (unregistering): Released all slaves [ 2632.862685][T29199] bond2 (unregistering): Released all slaves [ 2632.946782][ T5865] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2632.960800][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9446'. [ 2632.976874][ T8134] sp0: Synchronizing with TNC [ 2632.985033][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2632.999483][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9446'. [ 2633.016959][ T5865] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2633.051646][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2633.093532][T29199] tipc: Left network mode [ 2633.112318][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2633.181327][ T5865] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2633.198128][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2633.233971][ T5865] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2633.252336][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2633.370693][ T8137] FAULT_INJECTION: forcing a failure. [ 2633.370693][ T8137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2633.393805][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2633.393911][ T8137] CPU: 1 UID: 0 PID: 8137 Comm: syz.4.9449 Tainted: G L syzkaller #0 PREEMPT(full) [ 2633.393934][ T8137] Tainted: [L]=SOFTLOCKUP [ 2633.393940][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2633.393948][ T8137] Call Trace: [ 2633.393954][ T8137] [ 2633.393960][ T8137] dump_stack_lvl+0x100/0x190 [ 2633.393992][ T8137] should_fail_ex.cold+0x5/0xa [ 2633.394013][ T8137] _copy_to_user+0x32/0xd0 [ 2633.394036][ T8137] copy_siginfo_to_user+0x27/0xc0 [ 2633.394058][ T8137] x64_setup_rt_frame+0xa03/0xce0 [ 2633.394084][ T8137] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 2633.394110][ T8137] arch_do_signal_or_restart+0x59e/0x7a0 [ 2633.394132][ T8137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2633.394164][ T8137] exit_to_user_mode_loop+0x86/0x4a0 [ 2633.394192][ T8137] do_syscall_64+0x67c/0xf80 [ 2633.394208][ T8137] ? clear_bhb_loop+0x40/0x90 [ 2633.394228][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2633.394244][ T8137] RIP: 0033:0x7f2e3299c627 [ 2633.394259][ T8137] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 2633.394273][ T8137] RSP: 002b:00007f2e337c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2633.394289][ T8137] RAX: 0000000000000113 RBX: 00007f2e32c15fa0 RCX: 00007f2e3299c629 [ 2633.394298][ T8137] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 2633.394307][ T8137] RBP: 00007f2e337c6090 R08: 0000000000000002 R09: 0000000000000000 [ 2633.394316][ T8137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2633.394325][ T8137] R13: 00007f2e32c16038 R14: 00007f2e32c15fa0 R15: 00007fff09790748 [ 2633.394346][ T8137] [ 2633.690605][ T5865] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2633.699185][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2633.721154][ T5865] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2633.733212][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2633.819004][ T8148] loop7: detected capacity change from 0 to 7 [ 2633.832471][ T8148] buffer_io_error: 14 callbacks suppressed [ 2633.832524][ T8148] Buffer I/O error on dev loop7, logical block 0, async page read [ 2633.846565][ T8148] Buffer I/O error on dev loop7, logical block 0, async page read [ 2633.855005][ T8148] Buffer I/O error on dev loop7, logical block 0, async page read [ 2633.863314][ T8148] Buffer I/O error on dev loop7, logical block 0, async page read [ 2633.871528][ T8148] Buffer I/O error on dev loop7, logical block 0, async page read [ 2633.879760][ T8148] Buffer I/O error on dev loop7, logical block 0, async page read [ 2633.887861][ T8148] Buffer I/O error on dev loop7, logical block 0, async page read [ 2633.895860][ T8148] ldm_validate_partition_table(): Disk read failed. [ 2633.902761][ T8148] Buffer I/O error on dev loop7, logical block 0, async page read [ 2633.910808][ T8148] Buffer I/O error on dev loop7, logical block 0, async page read [ 2633.918941][ T8148] Buffer I/O error on dev loop7, logical block 0, async page read [ 2633.927029][ T8148] Dev loop7: unable to read RDB block 0 [ 2633.932931][ T8148] loop7: unable to read partition table [ 2633.939434][ T8148] loop7: partition table beyond EOD, truncated [ 2633.945791][ T8148] loop_reread_partitions: partition scan of loop7 (úùƒå¡7x~¾SêjÌ–ã¢P@½?ã•X) failed (rc=-5) [ 2634.034315][ T5853] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2634.175694][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2634.204158][ T5853] usb 4-1: Using ep0 maxpacket: 16 [ 2634.244674][ T5865] usb 6-1: string descriptor 0 read error: -22 [ 2634.248556][ T5853] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2634.251153][ T5865] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2634.492422][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2634.498515][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2634.662579][ T5853] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2634.691028][ T5865] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2634.843760][ T5853] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2635.121632][ T2710] block nbd0: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 60 seconds [ 2635.136041][ T2710] block nbd0: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 60 seconds [ 2635.147018][ T2710] block nbd0: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 60 seconds [ 2635.157945][ T2710] block nbd0: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 60 seconds [ 2635.209675][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2635.530387][ T5853] usb 4-1: config 0 descriptor?? [ 2635.602851][ T5875] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2635.718879][T29199] hsr_slave_0: left promiscuous mode [ 2635.747114][ T5865] usb 6-1: USB disconnect, device number 109 [ 2635.778863][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 2635.789711][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2635.808566][T29199] hsr_slave_1: left promiscuous mode [ 2635.828577][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 2635.828609][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2635.828629][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2635.833133][ T5875] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2635.929673][T29199] pim6reg (unregistering): left allmulticast mode [ 2635.935477][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2636.368312][ T5875] usb 3-1: Product: syz [ 2636.373282][ T5875] usb 3-1: Manufacturer: syz [ 2636.377952][ T5875] usb 3-1: SerialNumber: syz [ 2636.546178][ T8169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2636.719857][ T5875] usb 3-1: config 0 descriptor?? [ 2636.722344][ T8169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2636.961873][ T5875] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2637.089967][T29199] team0 (unregistering): Port device batadv1 removed [ 2637.242582][ T5865] usb 3-1: USB disconnect, device number 63 [ 2637.971330][ T5865] usb 4-1: USB disconnect, device number 97 [ 2638.084084][ T8190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9459'. [ 2638.093377][ T8190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9459'. [ 2638.102378][ T29] audit: type=1400 audit(1771634870.193:9185): avc: denied { bind } for pid=8186 comm="syz.2.9459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2638.218127][ T29] audit: type=1400 audit(1771634870.203:9186): avc: denied { listen } for pid=8186 comm="syz.2.9459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2638.442480][T28495] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2638.615753][ T29] audit: type=1326 audit(1771634870.673:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.5.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999c629 code=0x7ffc0000 [ 2638.750478][ T29] audit: type=1326 audit(1771634870.673:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.5.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999c629 code=0x7ffc0000 [ 2639.274747][ T29] audit: type=1400 audit(1771634871.393:9189): avc: denied { create } for pid=8213 comm="syz.5.9464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2639.362319][ T29] audit: type=1400 audit(1771634871.423:9190): avc: denied { write } for pid=8213 comm="syz.5.9464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2639.882071][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9464'. [ 2639.986880][ T8225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2640.015940][ T8225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2640.182768][T28495] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 2640.418010][ T29] audit: type=1400 audit(1771634872.533:9191): avc: denied { create } for pid=8234 comm="syz.0.9468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2640.450007][T28495] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2640.458223][T28495] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2640.478586][ T29] audit: type=1400 audit(1771634872.563:9192): avc: denied { read } for pid=8234 comm="syz.0.9468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2640.604747][T28495] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2640.639141][T28495] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2640.662375][ T29] audit: type=1400 audit(1771634872.673:9193): avc: denied { setopt } for pid=8234 comm="syz.0.9468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2640.692367][T28495] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2640.725340][T28495] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2640.745234][ T29] audit: type=1400 audit(1771634872.673:9194): avc: denied { bind } for pid=8234 comm="syz.0.9468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2640.846461][T28495] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2640.883379][ T8241] tipc: Enabling of bearer rejected, failed to enable media [ 2640.906777][T28495] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2642.439914][T28495] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2642.591700][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9475'. [ 2642.635230][T28495] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2642.702100][T28495] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2642.722408][T28495] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2642.752496][T28495] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2642.775151][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9475'. [ 2642.857852][T28495] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2642.882294][T28495] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2642.894335][T28495] usb 3-1: string descriptor 0 read error: -71 [ 2642.900779][T28495] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2642.941108][T28495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2642.990351][T28495] usb 3-1: can't set config #168, error -71 [ 2643.025142][T28495] usb 3-1: USB disconnect, device number 64 [ 2643.247741][ T29] audit: type=1400 audit(1771634875.363:9195): avc: denied { append } for pid=8264 comm="syz.5.9478" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2643.572540][T28495] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2643.742432][T28495] usb 6-1: Using ep0 maxpacket: 8 [ 2643.749513][T28495] usb 6-1: config 0 has an invalid interface number: 107 but max is 0 [ 2643.758944][T28495] usb 6-1: config 0 has no interface number 0 [ 2643.768317][T28495] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 2643.909228][ T5865] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 2643.916937][T28495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2643.979681][ T8274] dns_resolver: Unsupported server list version (6) [ 2644.014271][ T8274] netlink: 'syz.3.9474': attribute type 4 has an invalid length. [ 2644.036133][ T29] audit: type=1326 audit(1771634876.103:9196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e4f9c629 code=0x7ffc0000 [ 2644.317201][T28495] usb 6-1: config 0 descriptor?? [ 2644.353961][ T29] audit: type=1326 audit(1771634876.103:9197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49e4f5cece code=0x7ffc0000 [ 2644.379715][ T29] audit: type=1326 audit(1771634876.103:9198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49e4f5cece code=0x7ffc0000 [ 2644.431593][ T29] audit: type=1326 audit(1771634876.113:9199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e4f9c629 code=0x7ffc0000 [ 2644.456525][ T5865] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2644.475370][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2644.528829][ T8278] netlink: 'syz.0.9482': attribute type 1 has an invalid length. [ 2644.539812][ T4879] usb 6-1: USB disconnect, device number 111 [ 2644.560960][ T29] audit: type=1326 audit(1771634876.113:9200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f49e4f9c629 code=0x7ffc0000 [ 2644.569046][ T5865] usb 5-1: config 0 descriptor?? [ 2644.658749][ T29] audit: type=1326 audit(1771634876.113:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e4f9c629 code=0x7ffc0000 [ 2644.703742][ T29] audit: type=1326 audit(1771634876.113:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f49e4f9c629 code=0x7ffc0000 [ 2644.705183][ T5865] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2644.899174][ T8270] xt_hashlimit: size too large, truncated to 1048576 [ 2644.912556][ T29] audit: type=1326 audit(1771634876.113:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e4f9c629 code=0x7ffc0000 [ 2644.921276][ T8285] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9485'. [ 2645.162540][T28495] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 2645.432192][ T29] audit: type=1326 audit(1771634876.113:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f49e4f9c629 code=0x7ffc0000 [ 2645.764712][T28495] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2645.789678][T28495] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2645.817832][T28495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.840717][T28495] usb 3-1: Product: syz [ 2646.012541][T28495] usb 3-1: Manufacturer: syz [ 2646.018375][T28495] usb 3-1: SerialNumber: syz [ 2646.040189][T28495] usb 3-1: config 0 descriptor?? [ 2646.272594][ T4879] usb 6-1: new low-speed USB device number 112 using dummy_hcd [ 2646.414590][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2646.421003][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2646.434218][T28495] hub 3-1:0.0: bad descriptor, ignoring hub [ 2646.440226][T28495] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2646.477155][T28495] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input148 [ 2646.557417][ T5865] gp8psk: usb in 128 operation failed. [ 2646.575683][ T5865] gp8psk: usb in 137 operation failed. [ 2646.620526][ T4879] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2646.630068][ T5865] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2646.658297][ T4879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2646.669683][ T5865] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2646.683277][ T4879] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2646.714301][ T5865] usb 5-1: USB disconnect, device number 92 [ 2646.723515][ T4879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2646.762137][ T4879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2646.803622][ T4879] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2646.811065][ T4879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2646.852727][ T4879] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2646.890302][ T4879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2647.852324][ T4879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2647.874012][ T4879] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2647.881596][ T4879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2647.892357][ T4879] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2647.904188][ T4879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2647.915365][ T4879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2647.934395][ T4879] usb 6-1: string descriptor 0 read error: -22 [ 2647.940672][ T4879] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2647.949813][ T4879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2647.983559][ T4879] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2648.299371][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 2648.299391][ T29] audit: type=1400 audit(1771634880.413:9233): avc: denied { read } for pid=8314 comm="syz.2.9493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2648.325528][ T4879] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2648.392345][ T5865] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 2648.482587][ T4879] usb 4-1: Using ep0 maxpacket: 8 [ 2648.493813][ T4879] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2648.509933][ T4879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.528852][ T4879] usb 4-1: Product: syz [ 2648.538866][ T4879] usb 4-1: Manufacturer: syz [ 2648.548627][ T5865] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2648.570763][ T4879] usb 4-1: SerialNumber: syz [ 2648.581713][ T5865] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2648.597672][ T4879] usb 4-1: config 0 descriptor?? [ 2648.616053][ T4879] gspca_main: se401-2.14.0 probing 047d:5003 [ 2648.622124][ T5865] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2648.633101][ T5875] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2648.646808][ T5865] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 2648.671549][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.700675][ T5865] usb 5-1: config 0 descriptor?? [ 2648.772854][ T5875] usb 1-1: device descriptor read/64, error -71 [ 2649.020298][ T4879] gspca_se401: Wrong descriptor type [ 2649.032608][ T5875] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2649.154916][ T5865] lenovo 0003:17EF:60EE.005C: unknown main item tag 0x0 [ 2649.161986][ T5865] lenovo 0003:17EF:60EE.005C: unknown main item tag 0x0 [ 2649.169404][ T5865] lenovo 0003:17EF:60EE.005C: unknown main item tag 0x0 [ 2649.176557][ T5865] lenovo 0003:17EF:60EE.005C: unknown main item tag 0x0 [ 2649.184297][ T5865] lenovo 0003:17EF:60EE.005C: unknown main item tag 0x0 [ 2649.192702][ T5875] usb 1-1: device descriptor read/64, error -71 [ 2649.201519][ T5865] lenovo 0003:17EF:60EE.005C: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 2649.246199][ T4879] usb 6-1: USB disconnect, device number 112 [ 2649.318463][ T5875] usb usb1-port1: attempt power cycle [ 2649.367445][ T29] audit: type=1400 audit(1771634881.433:9234): avc: denied { create } for pid=8312 comm="syz.3.9491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2649.418460][ T29] audit: type=1400 audit(1771634881.433:9235): avc: denied { setopt } for pid=8312 comm="syz.3.9491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2649.548951][T12449] usb 4-1: USB disconnect, device number 98 [ 2649.591711][T29198] Bluetooth: hci5: Frame reassembly failed (-84) [ 2649.691861][ T29] audit: type=1400 audit(1771634881.803:9236): avc: denied { getopt } for pid=8317 comm="syz.4.9492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2649.772886][ T5875] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2649.812945][ T5875] usb 1-1: device descriptor read/8, error -71 [ 2650.062335][ T5875] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2650.092769][ T5875] usb 1-1: device descriptor read/8, error -71 [ 2650.202587][ T5875] usb usb1-port1: unable to enumerate USB device [ 2650.402348][T12449] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2650.446885][T28495] usb 3-1: USB disconnect, device number 65 [ 2650.553644][T12449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2650.564815][T12449] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2650.573892][T12449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.584085][T12449] usb 4-1: config 0 descriptor?? [ 2650.796400][ T29] audit: type=1400 audit(1771634882.913:9237): avc: denied { watch } for pid=8341 comm="syz.3.9499" path="/85/file0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2650.819875][ T29] audit: type=1400 audit(1771634882.913:9238): avc: denied { watch_sb watch_reads } for pid=8341 comm="syz.3.9499" path="/85/file0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2650.845183][T12449] usbhid 4-1:0.0: can't add hid device: -71 [ 2650.851330][T12449] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2650.861696][T12449] usb 4-1: USB disconnect, device number 99 [ 2651.044979][ T8346] netlink: 'syz.2.9500': attribute type 10 has an invalid length. [ 2651.147103][ T5865] lenovo 0003:17EF:60EE.005C: Fn-lock setting failed: -71 [ 2651.164582][ T5865] lenovo 0003:17EF:60EE.005C: Sensitivity setting failed: -71 [ 2651.179613][ T5865] usb 5-1: USB disconnect, device number 93 [ 2651.292407][T28495] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2651.422813][ T8357] FAULT_INJECTION: forcing a failure. [ 2651.422813][ T8357] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.435613][ T8357] CPU: 1 UID: 0 PID: 8357 Comm: syz.4.9503 Tainted: G L syzkaller #0 PREEMPT(full) [ 2651.435643][ T8357] Tainted: [L]=SOFTLOCKUP [ 2651.435649][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2651.435659][ T8357] Call Trace: [ 2651.435666][ T8357] [ 2651.435673][ T8357] dump_stack_lvl+0x100/0x190 [ 2651.435705][ T8357] should_fail_ex.cold+0x5/0xa [ 2651.435728][ T8357] should_failslab+0xc2/0x120 [ 2651.435756][ T8357] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2651.435781][ T8357] ? __alloc_skb+0x140/0x710 [ 2651.435812][ T8357] __alloc_skb+0x140/0x710 [ 2651.435837][ T8357] ? __alloc_skb+0x5b7/0x710 [ 2651.435861][ T8357] ? __pfx___alloc_skb+0x10/0x10 [ 2651.435894][ T8357] netlink_alloc_large_skb+0x69/0x150 [ 2651.435915][ T8357] netlink_sendmsg+0x680/0xda0 [ 2651.435940][ T8357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2651.435957][ T8357] ? PageHuge+0x170/0x180 [ 2651.435987][ T8357] ____sys_sendmsg+0xa54/0xc30 [ 2651.436010][ T8357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2651.436043][ T8357] ___sys_sendmsg+0x190/0x1e0 [ 2651.436068][ T8357] ? __pfx____sys_sendmsg+0x10/0x10 [ 2651.436090][ T8357] ? irqentry_exit+0x180/0x670 [ 2651.436136][ T8357] __sys_sendmsg+0x170/0x220 [ 2651.436153][ T8357] ? __pfx___sys_sendmsg+0x10/0x10 [ 2651.436185][ T8357] do_syscall_64+0x106/0xf80 [ 2651.436202][ T8357] ? clear_bhb_loop+0x40/0x90 [ 2651.436223][ T8357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2651.436241][ T8357] RIP: 0033:0x7f2e3299c629 [ 2651.436256][ T8357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2651.436272][ T8357] RSP: 002b:00007f2e33784028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2651.436289][ T8357] RAX: ffffffffffffffda RBX: 00007f2e32c16180 RCX: 00007f2e3299c629 [ 2651.436300][ T8357] RDX: 9590f6cc3ea35512 RSI: 0000200000000000 RDI: 0000000000000003 [ 2651.436311][ T8357] RBP: 00007f2e33784090 R08: 0000000000000000 R09: 0000000000000000 [ 2651.436321][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2651.436331][ T8357] R13: 00007f2e32c16218 R14: 00007f2e32c16180 R15: 00007fff09790748 [ 2651.436355][ T8357] [ 2651.582827][ T4765] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2651.625360][T28495] usb 4-1: Using ep0 maxpacket: 32 [ 2651.667172][ T5875] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2651.679003][T28495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2651.690141][T28495] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2651.699467][T28495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2651.710663][T28495] usb 4-1: config 0 descriptor?? [ 2651.719149][T28495] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2651.734000][T28495] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2652.280761][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2652.438782][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2652.742327][ T5875] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2652.751516][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2652.784185][ T5875] usb 3-1: config 0 descriptor?? [ 2652.920128][T28495] usb 4-1: USB disconnect, device number 100 [ 2653.126140][T28495] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 2653.148715][ T29] audit: type=1400 audit(1771634885.253:9239): avc: denied { ioctl } for pid=8373 comm="syz.5.9507" path="socket:[193477]" dev="sockfs" ino=193477 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2653.214574][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9506'. [ 2653.524256][ T5875] cm6533_jd 0003:0D8C:0022.005D: unknown main item tag 0x0 [ 2653.552413][ T5875] cm6533_jd 0003:0D8C:0022.005D: unknown main item tag 0x0 [ 2653.571115][ T5875] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.005D/input/input149 [ 2653.739839][ T5875] cm6533_jd 0003:0D8C:0022.005D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 2653.761456][ T29] audit: type=1400 audit(1771634885.873:9240): avc: denied { mount } for pid=8381 comm="syz.5.9508" name="/" dev="hugetlbfs" ino=194605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2653.920657][ T5875] usb 3-1: USB disconnect, device number 66 [ 2653.953515][ T5865] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 2654.123913][ T5865] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2654.133248][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2654.156883][ T5865] usb 4-1: config 0 descriptor?? [ 2654.375182][ T5865] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2654.552628][ T8398] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 2654.603899][ T5865] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 2654.632410][ T5865] [drm] Initialized udl on minor 2 [ 2654.791605][ T5865] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 2654.804765][ T5865] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2654.820578][ T8403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2655.146213][ T5865] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2655.236253][T12449] usb 4-1: USB disconnect, device number 101 [ 2655.254756][ T5865] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2655.270540][ T5865] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2655.586093][ T29] audit: type=1400 audit(1771634887.703:9241): avc: denied { read write } for pid=8413 comm="syz.4.9518" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2655.630812][ T29] audit: type=1400 audit(1771634887.703:9242): avc: denied { open } for pid=8413 comm="syz.4.9518" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2655.740853][T28495] IPVS: starting estimator thread 0... [ 2655.759029][ T29] audit: type=1400 audit(1771634887.703:9243): avc: denied { map } for pid=8413 comm="syz.4.9518" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2655.852372][ T8420] IPVS: using max 51 ests per chain, 122400 per kthread [ 2656.000722][ T29] audit: type=1400 audit(1771634887.793:9244): avc: denied { ioctl } for pid=8410 comm="syz.5.9517" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2656.487141][ T29] audit: type=1400 audit(1771634887.793:9245): avc: denied { open } for pid=8410 comm="syz.5.9517" path="/dev/ttyqf" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2656.583730][ T29] audit: type=1400 audit(1771634888.703:9246): avc: denied { shutdown } for pid=8426 comm="syz.3.9521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2656.617923][ T8433] xt_policy: neither incoming nor outgoing policy selected [ 2656.932690][ T5105] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2657.010006][ T8435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9523'. [ 2657.102426][ T5105] usb 6-1: Using ep0 maxpacket: 32 [ 2657.111966][ T5105] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2657.126793][ T5105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.144150][ T5105] usb 6-1: Product: syz [ 2657.152681][ T5105] usb 6-1: Manufacturer: syz [ 2657.163198][ T5105] usb 6-1: SerialNumber: syz [ 2657.198858][ T5105] usb 6-1: config 0 descriptor?? [ 2657.216569][ T5105] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2657.231936][ T5105] dvb-usb: bulk message failed: -22 (4/0) [ 2657.242217][ T5105] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2657.272026][ T5105] dvb-usb: bulk message failed: -22 (5/0) [ 2657.292042][ T5105] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2657.321538][ T5105] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2657.339470][ T5105] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2657.355603][ T5105] usb 6-1: media controller created [ 2657.377982][ T5105] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2657.395529][ T8442] FAULT_INJECTION: forcing a failure. [ 2657.395529][ T8442] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.417076][ T8433] dvb-usb: bulk message failed: -22 (8/0) [ 2657.429593][ T8433] ttusb2: there might have been an error during control message transfer. (rlen = 22, was 0) [ 2657.452386][ T8442] CPU: 1 UID: 0 PID: 8442 Comm: syz.0.9526 Tainted: G L syzkaller #0 PREEMPT(full) [ 2657.452415][ T8442] Tainted: [L]=SOFTLOCKUP [ 2657.452421][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2657.452430][ T8442] Call Trace: [ 2657.452436][ T8442] [ 2657.452442][ T8442] dump_stack_lvl+0x100/0x190 [ 2657.452474][ T8442] should_fail_ex.cold+0x5/0xa [ 2657.452499][ T8442] should_failslab+0xc2/0x120 [ 2657.452525][ T8442] __kvmalloc_node_noprof+0xfa/0xa00 [ 2657.452547][ T8442] ? hash_ipportip_create+0x408/0x1280 [ 2657.452573][ T8442] hash_ipportip_create+0x408/0x1280 [ 2657.452597][ T8442] ? __pfx_hash_ipportip_create+0x10/0x10 [ 2657.452620][ T8442] ip_set_create+0x6b8/0x14f0 [ 2657.452654][ T8442] ? __mutex_lock+0x26a/0x1b90 [ 2657.452679][ T8442] ? __pfx_ip_set_create+0x10/0x10 [ 2657.452717][ T8442] ? find_held_lock+0x2b/0x80 [ 2657.452746][ T8442] nfnetlink_rcv_msg+0x9f4/0x1200 [ 2657.452778][ T8442] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2657.452802][ T8442] ? __lock_acquire+0x4a5/0x2630 [ 2657.452845][ T8442] ? avc_has_perm_noaudit+0x145/0x3b0 [ 2657.452877][ T8442] netlink_rcv_skb+0x159/0x420 [ 2657.452898][ T8442] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2657.452924][ T8442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2657.452956][ T8442] ? ns_capable+0xd2/0xf0 [ 2657.452979][ T8442] nfnetlink_rcv+0x1b3/0x440 [ 2657.453004][ T8442] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2657.453028][ T8442] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2657.453052][ T8442] netlink_unicast+0x5aa/0x870 [ 2657.453076][ T8442] ? __pfx_netlink_unicast+0x10/0x10 [ 2657.453106][ T8442] netlink_sendmsg+0x8b0/0xda0 [ 2657.453130][ T8442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2657.453148][ T8442] ? PageHuge+0x170/0x180 [ 2657.453178][ T8442] ____sys_sendmsg+0xa54/0xc30 [ 2657.453204][ T8442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2657.453239][ T8442] ___sys_sendmsg+0x190/0x1e0 [ 2657.453263][ T8442] ? __pfx____sys_sendmsg+0x10/0x10 [ 2657.453317][ T8442] __sys_sendmsg+0x170/0x220 [ 2657.453335][ T8442] ? __pfx___sys_sendmsg+0x10/0x10 [ 2657.453369][ T8442] do_syscall_64+0x106/0xf80 [ 2657.453386][ T8442] ? clear_bhb_loop+0x40/0x90 [ 2657.453409][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2657.453427][ T8442] RIP: 0033:0x7f345039c629 [ 2657.453442][ T8442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2657.453459][ T8442] RSP: 002b:00007f344e5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2657.453477][ T8442] RAX: ffffffffffffffda RBX: 00007f3450615fa0 RCX: 00007f345039c629 [ 2657.453488][ T8442] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2657.453499][ T8442] RBP: 00007f344e5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2657.453509][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2657.453519][ T8442] R13: 00007f3450616038 R14: 00007f3450615fa0 R15: 00007fff41d1a858 [ 2657.453544][ T8442] [ 2657.457500][ T8433] ttusb2: i2c transfer failed. [ 2657.733100][ T8449] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 2657.736765][ T5105] usb 6-1: selecting invalid altsetting 3 [ 2657.767202][ T8449] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2657.780392][ T8449] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2657.802721][ T5105] ttusb2: set interface to alts=3 failed [ 2657.868053][ T8451] sp0: Synchronizing with TNC [ 2657.932131][ T5105] DVB: Unable to find symbol tda10086_attach() [ 2658.074786][ T5105] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2658.115331][ T5105] dvb-usb: bulk message failed: -22 (4/0) [ 2658.133690][ T5105] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2658.157641][ T5105] dvb-usb: bulk message failed: -22 (5/0) [ 2658.187083][ T5105] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2658.211838][ T5105] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2658.535451][ T8465] tmpfs: Bad value for 'mpol' [ 2658.544060][ T8465] fuse: Unknown parameter 'group' [ 2658.558965][ T8465] support for cryptoloop has been removed. Use dm-crypt instead. [ 2658.581331][ T29] audit: type=1400 audit(1771634890.643:9247): avc: denied { create } for pid=8460 comm="syz.4.9533" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2658.883823][ T29] audit: type=1400 audit(1771634890.663:9248): avc: denied { mounton } for pid=8460 comm="syz.4.9533" path="/551/file0" dev="tmpfs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2658.908504][ T29] audit: type=1400 audit(1771634890.673:9249): avc: denied { setattr } for pid=8460 comm="syz.4.9533" name="file0" dev="tmpfs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2658.932969][ T8464] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 2659.053567][ T8472] FAULT_INJECTION: forcing a failure. [ 2659.053567][ T8472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2659.088528][ T8472] CPU: 1 UID: 0 PID: 8472 Comm: syz.0.9535 Tainted: G L syzkaller #0 PREEMPT(full) [ 2659.088559][ T8472] Tainted: [L]=SOFTLOCKUP [ 2659.088566][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2659.088576][ T8472] Call Trace: [ 2659.088582][ T8472] [ 2659.088589][ T8472] dump_stack_lvl+0x100/0x190 [ 2659.088623][ T8472] should_fail_ex.cold+0x5/0xa [ 2659.088657][ T8472] copy_fpstate_to_sigframe+0x861/0xb20 [ 2659.088686][ T8472] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2659.088708][ T8472] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 2659.088739][ T8472] ? posixtimer_deliver_signal+0x3da/0x6b0 [ 2659.088760][ T8472] ? x86_task_fpu+0x5f/0x90 [ 2659.088784][ T8472] get_sigframe+0x3fb/0x940 [ 2659.088811][ T8472] ? __pfx_get_sigframe+0x10/0x10 [ 2659.088833][ T8472] ? rcu_is_watching+0x12/0xc0 [ 2659.088855][ T8472] ? siginfo_layout+0x156/0x290 [ 2659.088880][ T8472] x64_setup_rt_frame+0x12f/0xce0 [ 2659.088909][ T8472] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 2659.088940][ T8472] arch_do_signal_or_restart+0x59e/0x7a0 [ 2659.088964][ T8472] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2659.089002][ T8472] exit_to_user_mode_loop+0x86/0x4a0 [ 2659.089033][ T8472] do_syscall_64+0x67c/0xf80 [ 2659.089052][ T8472] ? clear_bhb_loop+0x40/0x90 [ 2659.089074][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2659.089092][ T8472] RIP: 0033:0x7f345039c627 [ 2659.089108][ T8472] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 2659.089124][ T8472] RSP: 002b:00007f344e5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2659.089142][ T8472] RAX: 0000000000000113 RBX: 00007f3450615fa0 RCX: 00007f345039c629 [ 2659.089152][ T8472] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2659.089162][ T8472] RBP: 00007f344e5ee090 R08: 0000000000000af2 R09: 0000000000000000 [ 2659.089173][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2659.089183][ T8472] R13: 00007f3450616038 R14: 00007f3450615fa0 R15: 00007fff41d1a858 [ 2659.089207][ T8472] [ 2659.614941][ T29] audit: type=1400 audit(1771634891.703:9250): avc: denied { unlink } for pid=29689 comm="syz-executor" name="file0" dev="tmpfs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2659.824020][T25472] usb 6-1: USB disconnect, device number 113 [ 2659.879175][ T8479] netlink: 'syz.4.9536': attribute type 1 has an invalid length. [ 2659.912491][T25472] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2659.945227][ T8479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2661.142378][ T5105] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2661.960883][ T8494] can0: slcan on ttyS3. [ 2662.294339][ T8494] can0 (unregistered): slcan off ttyS3. [ 2662.442326][ T5105] usb 1-1: device descriptor read/64, error -71 [ 2663.047031][ T5105] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2663.178729][ T29] audit: type=1400 audit(1771634895.293:9251): avc: denied { getopt } for pid=8505 comm="syz.5.9542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2663.410787][ T8510] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9543'. [ 2663.444679][ T8514] tmpfs: Bad value for 'mpol' [ 2664.158562][ T8531] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 2664.177813][ T8531] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2664.283275][ T5105] usb 1-1: device descriptor read/64, error -71 [ 2664.433549][ T5105] usb usb1-port1: attempt power cycle [ 2664.604828][ T29] audit: type=1400 audit(1771634896.723:9252): avc: denied { create } for pid=8534 comm="syz.5.9552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2664.762471][T25472] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2664.772336][ T5105] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2664.794255][ T5105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2664.807767][ T5105] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 2664.817028][ T5105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.825216][ T5105] usb 1-1: Product: syz [ 2664.829481][ T5105] usb 1-1: Manufacturer: syz [ 2664.834157][ T5105] usb 1-1: SerialNumber: syz [ 2664.840704][ T5105] usb 1-1: config 0 descriptor?? [ 2664.913703][T25472] usb 5-1: Using ep0 maxpacket: 16 [ 2664.922550][T25472] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2664.931745][T25472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.939884][T25472] usb 5-1: Product: syz [ 2664.944427][T25472] usb 5-1: Manufacturer: syz [ 2664.961195][T25472] usb 5-1: SerialNumber: syz [ 2664.973544][T25472] usb 5-1: config 0 descriptor?? [ 2664.994558][T25472] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 2665.053291][ T8520] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2665.097803][ T5105] usb 1-1: USB disconnect, device number 74 [ 2665.207605][ T29] audit: type=1400 audit(1771634897.323:9253): avc: denied { watch } for pid=8542 comm="syz.3.9553" path="/100/file0/file3" dev="tmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2665.237947][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9553'. [ 2665.391138][ T29] audit: type=1400 audit(1771634897.503:9254): avc: denied { append } for pid=8546 comm="syz.5.9554" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2665.407076][T25472] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 2665.433782][ T8547] FAULT_INJECTION: forcing a failure. [ 2665.433782][ T8547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2665.454630][ T8547] CPU: 1 UID: 0 PID: 8547 Comm: syz.5.9554 Tainted: G L syzkaller #0 PREEMPT(full) [ 2665.454660][ T8547] Tainted: [L]=SOFTLOCKUP [ 2665.454665][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2665.454673][ T8547] Call Trace: [ 2665.454678][ T8547] [ 2665.454684][ T8547] dump_stack_lvl+0x100/0x190 [ 2665.454711][ T8547] should_fail_ex.cold+0x5/0xa [ 2665.454731][ T8547] _copy_from_user+0x2e/0xd0 [ 2665.454753][ T8547] copy_mount_options+0x76/0x190 [ 2665.454779][ T8547] __x64_sys_mount+0x1ab/0x310 [ 2665.454800][ T8547] ? __pfx___x64_sys_mount+0x10/0x10 [ 2665.454827][ T8547] do_syscall_64+0x106/0xf80 [ 2665.454842][ T8547] ? clear_bhb_loop+0x40/0x90 [ 2665.454864][ T8547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2665.454881][ T8547] RIP: 0033:0x7f16f999c629 [ 2665.454896][ T8547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2665.454912][ T8547] RSP: 002b:00007f16fa944028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2665.454929][ T8547] RAX: ffffffffffffffda RBX: 00007f16f9c15fa0 RCX: 00007f16f999c629 [ 2665.454940][ T8547] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 2665.454951][ T8547] RBP: 00007f16fa944090 R08: 0000200000000400 R09: 0000000000000000 [ 2665.454961][ T8547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2665.454971][ T8547] R13: 00007f16f9c16038 R14: 00007f16f9c15fa0 R15: 00007ffcb7b05318 [ 2665.454997][ T8547] [ 2665.462188][T25472] kernel read not supported for file /dsp1 (pid: 25472 comm: kworker/1:0) [ 2665.599435][ T2710] block nbd0: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 90 seconds [ 2665.631846][T25472] usb 5-1: USB disconnect, device number 94 [ 2665.634586][ T2710] block nbd0: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 90 seconds [ 2665.653070][ T2710] block nbd0: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 90 seconds [ 2665.664386][ T2710] block nbd0: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 90 seconds [ 2665.709411][T25472] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 2665.767540][T25472] visor 5-1:0.0: device disconnected [ 2666.163233][ T8558] fuse: Unknown parameter '}' [ 2666.932332][ T5865] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2667.092360][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 2667.107595][ T5865] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 2667.131653][ T5865] usb 6-1: config 0 has no interface number 0 [ 2667.147831][ T5865] usb 6-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=eb.2d [ 2667.181471][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2667.214549][ T5865] usb 6-1: Product: syz [ 2667.229151][ T5865] usb 6-1: Manufacturer: syz [ 2667.242120][ T5865] usb 6-1: SerialNumber: syz [ 2667.268992][ T5865] usb 6-1: config 0 descriptor?? [ 2667.293298][ T5865] ums-datafab 6-1:0.19: USB Mass Storage device detected [ 2667.324967][ T5865] ums-datafab 6-1:0.19: Quirks match for vid 0c0b pid a109: 1 [ 2667.398287][ T5865] ums-sddr55 6-1:0.19: USB Mass Storage device detected [ 2667.580697][ T5865] usb 6-1: USB disconnect, device number 114 [ 2667.706373][ T8611] ref_ctr_offset mismatch. inode: 0x13e offset: 0x0 ref_ctr_offset(old): 0x248 ref_ctr_offset(new): 0x0 [ 2668.996383][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 2669.305645][ T8630] sp0: Synchronizing with TNC [ 2670.556788][ T29] audit: type=1400 audit(1771634902.673:9255): avc: denied { bind } for pid=8632 comm="syz.3.9573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2670.627146][ T29] audit: type=1400 audit(1771634902.673:9256): avc: denied { setopt } for pid=8632 comm="syz.3.9573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2671.480067][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2671.504466][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2671.518462][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2671.526390][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2671.534461][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2672.207925][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 2672.389313][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 2672.398302][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 2672.407651][ T8657] bridge_slave_0: entered allmulticast mode [ 2672.415075][ T8657] bridge_slave_0: entered promiscuous mode [ 2672.428592][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 2672.435969][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 2672.448201][ T8657] bridge_slave_1: entered allmulticast mode [ 2672.462514][ T8657] bridge_slave_1: entered promiscuous mode [ 2672.542054][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2672.569936][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2672.734017][ T8657] team0: Port device team_slave_0 added [ 2672.741363][ T8657] team0: Port device team_slave_1 added [ 2672.814404][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2672.828425][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2672.860866][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2672.919295][ T29] audit: type=1400 audit(1771634905.033:9257): avc: denied { ioctl } for pid=8665 comm="syz.4.9584" path="socket:[194543]" dev="sockfs" ino=194543 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2673.011128][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2673.031455][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2673.102481][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2673.434202][ T8657] hsr_slave_0: entered promiscuous mode [ 2673.464546][ T8657] hsr_slave_1: entered promiscuous mode [ 2673.536870][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9588'. [ 2673.605602][ T5807] Bluetooth: hci5: command tx timeout [ 2673.882993][ T8697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8697 comm=syz.5.9588 [ 2673.984366][ T29] audit: type=1400 audit(1771634906.043:9258): avc: denied { create } for pid=8688 comm="syz.5.9588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2674.292538][ T29] audit: type=1400 audit(1771634906.083:9259): avc: denied { sys_admin } for pid=8688 comm="syz.5.9588" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2674.349101][ T8693] sp0: Synchronizing with TNC [ 2675.130036][ T8657] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2675.164446][ T8657] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2675.303971][ T8657] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2675.356855][ T8657] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2675.663410][ T5807] Bluetooth: hci5: command tx timeout [ 2675.714744][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2675.789317][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 2675.899043][ T8657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2675.962951][ T8657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2676.015165][T14461] bridge0: port 1(bridge_slave_0) entered blocking state [ 2676.022328][T14461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2676.044039][T14461] bridge0: port 2(bridge_slave_1) entered blocking state [ 2676.051234][T14461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2676.410288][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2676.798482][ T8657] veth0_vlan: entered promiscuous mode [ 2676.808127][ T8657] veth1_vlan: entered promiscuous mode [ 2676.828721][ T8657] veth0_macvtap: entered promiscuous mode [ 2676.836980][ T8657] veth1_macvtap: entered promiscuous mode [ 2676.850530][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2676.864775][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2676.877620][T29198] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.886775][T29198] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.895622][T29198] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.905486][T29198] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.977837][T14461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2676.990203][T14461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2677.010157][T14461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2677.018155][T14461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2677.742525][ T5807] Bluetooth: hci5: command tx timeout [ 2679.822436][ T5807] Bluetooth: hci5: command tx timeout [ 2680.410172][ T5176] udevd[5176]: worker [3109] /devices/virtual/block/nbd0 is taking a long time [ 2695.662828][ T2710] block nbd0: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 120 seconds [ 2695.673618][ T2710] block nbd0: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 120 seconds [ 2695.684660][ T2710] block nbd0: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 120 seconds [ 2695.699696][ T2710] block nbd0: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 120 seconds [ 2704.782414][ T4765] Bluetooth: hci1: command 0x0406 tx timeout [ 2707.828201][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2707.834707][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2725.742552][ T2710] block nbd0: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 150 seconds [ 2725.753389][ T2710] block nbd0: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 150 seconds [ 2725.764378][ T2710] block nbd0: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 150 seconds [ 2725.775415][ T2710] block nbd0: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 150 seconds [ 2755.822913][ T2710] block nbd0: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 180 seconds [ 2755.833755][ T2710] block nbd0: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 180 seconds [ 2755.844814][ T2710] block nbd0: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 180 seconds [ 2755.856396][ T2710] block nbd0: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 180 seconds [ 2755.910366][ T5176] udevd[5176]: worker [3109] /devices/virtual/block/nbd0 timeout; kill it [ 2755.919021][ T5176] udevd[5176]: seq 44817 '/devices/virtual/block/nbd0' killed [ 2769.265271][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2769.271613][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2785.932336][ T2710] block nbd0: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 210 seconds [ 2785.943196][ T2710] block nbd0: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 210 seconds [ 2785.954238][ T2710] block nbd0: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 210 seconds [ 2785.965239][ T2710] block nbd0: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 210 seconds [ 2796.942289][ T4765] Bluetooth: hci5: command 0x0406 tx timeout [ 2801.262564][ T30] INFO: task syz.2.9513:8407 blocked for more than 143 seconds. [ 2801.270227][ T30] Tainted: G L syzkaller #0 [ 2801.277355][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2801.286065][ T30] task:syz.2.9513 state:D stack:25368 pid:8407 tgid:8397 ppid:5264 task_flags:0x400140 flags:0x00080002 [ 2801.298024][ T30] Call Trace: [ 2801.301290][ T30] [ 2801.304319][ T30] __schedule+0xfee/0x60e0 [ 2801.308765][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2801.313721][ T30] ? __pfx___schedule+0x10/0x10 [ 2801.318565][ T30] ? find_held_lock+0x2b/0x80 [ 2801.323316][ T30] ? schedule+0x2bf/0x390 [ 2801.327652][ T30] schedule+0xdd/0x390 [ 2801.331703][ T30] io_schedule+0x8a/0xf0 [ 2801.336045][ T30] folio_wait_bit_common+0x414/0xa70 [ 2801.341342][ T30] ? folio_wait_bit_common+0x2a0/0xa70 [ 2801.347215][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 2801.353117][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 2801.358663][ T30] ? __pfx___might_resched+0x10/0x10 [ 2801.363996][ T30] ? compaction_free+0x182/0x430 [ 2801.368929][ T30] migrate_pages_batch+0x1b85/0x4530 [ 2801.374271][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 2801.379747][ T30] ? __pfx_compaction_free+0x10/0x10 [ 2801.385100][ T30] ? __pfx_migrate_pages_batch+0x10/0x10 [ 2801.390728][ T30] ? trace_sched_exit_tp+0x13a/0x180 [ 2801.396076][ T30] ? __schedule+0x1000/0x60e0 [ 2801.400750][ T30] ? __schedule+0x1000/0x60e0 [ 2801.405466][ T30] migrate_pages_sync+0x4db/0x880 [ 2801.410489][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 2801.415907][ T30] ? __pfx_compaction_free+0x10/0x10 [ 2801.421193][ T30] ? __pfx_migrate_pages_sync+0x10/0x10 [ 2801.426764][ T30] migrate_pages+0x1aae/0x28a0 [ 2801.431521][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 2801.436935][ T30] ? __pfx_compaction_free+0x10/0x10 [ 2801.442271][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 2801.447375][ T30] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 2801.453660][ T30] ? __nr_to_section+0xaa/0x100 [ 2801.458501][ T30] ? pfn_to_online_page+0x178/0x4c0 [ 2801.463734][ T30] compact_zone+0x2464/0x44c0 [ 2801.468413][ T30] ? debug_object_free+0x295/0x550 [ 2801.473576][ T30] ? __pfx_compact_zone+0x10/0x10 [ 2801.478715][ T30] ? __flush_work+0xa38/0xcb0 [ 2801.483418][ T30] ? __flush_work+0xa38/0xcb0 [ 2801.488087][ T30] compact_node+0x17f/0x2c0 [ 2801.492634][ T30] ? __pfx_compact_node+0x10/0x10 [ 2801.497653][ T30] ? __lru_add_drain_all+0x43c/0x650 [ 2801.503154][ T30] ? __lru_add_drain_all+0x441/0x650 [ 2801.508445][ T30] sysctl_compaction_handler+0x141/0x210 [ 2801.514122][ T30] proc_sys_call_handler+0x47f/0x5a0 [ 2801.519402][ T30] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 2801.525247][ T30] ? splice_from_pipe_next+0x1ec/0x5a0 [ 2801.530706][ T30] iter_file_splice_write+0x82b/0x10a0 [ 2801.536232][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2801.542126][ T30] ? __pfx_copy_splice_read+0x10/0x10 [ 2801.547562][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2801.553479][ T30] direct_splice_actor+0x192/0x6c0 [ 2801.558577][ T30] splice_direct_to_actor+0x345/0xa30 [ 2801.563984][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 2801.569612][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2801.575528][ T30] do_splice_direct+0x174/0x240 [ 2801.580541][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 2801.586019][ T30] ? avc_policy_seqno+0x9/0x20 [ 2801.590783][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2801.596704][ T30] ? rw_verify_area+0xce/0x6d0 [ 2801.601462][ T30] do_sendfile+0xadc/0xe20 [ 2801.605895][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 2801.610832][ T30] __x64_sys_sendfile64+0x154/0x220 [ 2801.616048][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2801.621765][ T30] do_syscall_64+0x106/0xf80 [ 2801.626380][ T30] ? clear_bhb_loop+0x40/0x90 [ 2801.631056][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2801.636974][ T30] RIP: 0033:0x7f355259c629 [ 2801.641377][ T30] RSP: 002b:00007f35534d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2801.649821][ T30] RAX: ffffffffffffffda RBX: 00007f3552816270 RCX: 00007f355259c629 [ 2801.657808][ T30] RDX: 00002000000000c0 RSI: 000000000000000a RDI: 000000000000000b [ 2801.665806][ T30] RBP: 00007f3552632b39 R08: 0000000000000000 R09: 0000000000000000 [ 2801.673836][ T30] R10: 000000000010000a R11: 0000000000000246 R12: 0000000000000000 [ 2801.681819][ T30] R13: 00007f3552816308 R14: 00007f3552816270 R15: 00007ffd3d664ee8 [ 2801.690317][ T30] [ 2801.694095][ T30] [ 2801.694095][ T30] Showing all locks held in the system: [ 2801.701798][ T30] 1 lock held by khungtaskd/30: [ 2801.706722][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2801.716637][ T30] 2 locks held by getty/5563: [ 2801.721288][ T30] #0: ffff888033c250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2801.731039][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2801.741165][ T30] 1 lock held by udevd/3109: [ 2801.746021][ T30] #0: ffff888027f51358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2801.755397][ T30] 1 lock held by syz.2.9513/8407: [ 2801.760395][ T30] #0: ffff888063ed6420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 2801.770452][ T30] [ 2801.772787][ T30] ============================================= [ 2801.772787][ T30] [ 2801.781168][ T30] NMI backtrace for cpu 0 [ 2801.781178][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2801.781194][ T30] Tainted: [L]=SOFTLOCKUP [ 2801.781198][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2801.781204][ T30] Call Trace: [ 2801.781209][ T30] [ 2801.781214][ T30] dump_stack_lvl+0x100/0x190 [ 2801.781235][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2801.781247][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2801.781266][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2801.781284][ T30] sys_info+0x141/0x190 [ 2801.781297][ T30] watchdog+0xd25/0x1050 [ 2801.781316][ T30] ? __pfx_watchdog+0x10/0x10 [ 2801.781331][ T30] ? __kthread_parkme+0x18c/0x230 [ 2801.781348][ T30] ? kthread+0x13a/0x450 [ 2801.781361][ T30] ? __pfx_watchdog+0x10/0x10 [ 2801.781375][ T30] kthread+0x370/0x450 [ 2801.781384][ T30] ? __pfx_kthread+0x10/0x10 [ 2801.781395][ T30] ret_from_fork+0x754/0xd80 [ 2801.781407][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2801.781419][ T30] ? __switch_to+0x7b4/0x1120 [ 2801.781432][ T30] ? __pfx_kthread+0x10/0x10 [ 2801.781443][ T30] ret_from_fork_asm+0x1a/0x30 [ 2801.781463][ T30] [ 2801.781467][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2801.906749][ C1] NMI backtrace for cpu 1 [ 2801.906766][ C1] CPU: 1 UID: 0 PID: 190 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2801.906786][ C1] Tainted: [L]=SOFTLOCKUP [ 2801.906791][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2801.906800][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 2801.906823][ C1] RIP: 0010:curve25519_ever64_base+0x5be/0x7a0 [ 2801.906847][ C1] Code: 24 08 66 4c 0f 38 f6 d1 4d 89 54 24 10 66 4c 0f 38 f6 d9 4d 89 5c 24 18 48 c7 c0 00 00 00 00 48 0f 42 c2 49 01 c0 4d 89 04 24 <4c> 89 ea 4c 89 e6 4c 89 e7 e8 04 eb ff ff 4c 89 e9 4c 89 e2 4c 89 [ 2801.906860][ C1] RSP: 0018:ffffc900027276b0 EFLAGS: 00000202 [ 2801.906870][ C1] RAX: 0000000000000000 RBX: ffffc90002727810 RCX: 0000000000000000 [ 2801.906879][ C1] RDX: 0000000000000026 RSI: ffffc90002727850 RDI: ffffc900027277f0 [ 2801.906888][ C1] RBP: 0000000000000000 R08: 0a6b131f20bc9346 R09: 42dfc8cf1c79cf81 [ 2801.906897][ C1] R10: 071d6e89a72650c3 R11: af4035be756537eb R12: ffffc900027277d0 [ 2801.906906][ C1] R13: ffffc90002727850 R14: 000000000000002e R15: ffffc90002727750 [ 2801.906915][ C1] FS: 0000000000000000(0000) GS:ffff888124448000(0000) knlGS:0000000000000000 [ 2801.906930][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2801.906938][ C1] CR2: 000055f7e504e168 CR3: 000000000e598000 CR4: 00000000003526f0 [ 2801.906947][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2801.906955][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2801.906963][ C1] Call Trace: [ 2801.906968][ C1] [ 2801.906979][ C1] ? __pfx_curve25519_ever64_base+0x10/0x10 [ 2801.906999][ C1] ? crng_fast_key_erasure+0x1d6/0x260 [ 2801.907030][ C1] ? __crypto_memneq+0x1fe/0x430 [ 2801.907047][ C1] curve25519_generate_public+0x50/0xc0 [ 2801.907061][ C1] wg_noise_handshake_create_initiation+0x248/0x610 [ 2801.907077][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 2801.907094][ C1] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 2801.907117][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 2801.907131][ C1] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 2801.907148][ C1] ? ktime_get_coarse_with_offset+0x150/0x240 [ 2801.907167][ C1] wg_packet_send_handshake_initiation+0x19c/0x360 [ 2801.907184][ C1] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 2801.907200][ C1] ? __lock_acquire+0x4a5/0x2630 [ 2801.907226][ C1] ? rcu_is_watching+0x12/0xc0 [ 2801.907242][ C1] wg_packet_handshake_send_worker+0x1c/0x30 [ 2801.907258][ C1] process_one_work+0x9d7/0x1920 [ 2801.907276][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2801.907293][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 2801.907311][ C1] worker_thread+0x5da/0xe40 [ 2801.907327][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2801.907341][ C1] ? kthread+0x13a/0x450 [ 2801.907353][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2801.907365][ C1] kthread+0x370/0x450 [ 2801.907376][ C1] ? __pfx_kthread+0x10/0x10 [ 2801.907389][ C1] ret_from_fork+0x754/0xd80 [ 2801.907403][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2801.907416][ C1] ? __switch_to+0x7b4/0x1120 [ 2801.907432][ C1] ? __pfx_kthread+0x10/0x10 [ 2801.907445][ C1] ret_from_fork_asm+0x1a/0x30 [ 2801.907466][ C1] [ 2802.220558][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2802.227388][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2802.238035][ T30] Tainted: [L]=SOFTLOCKUP [ 2802.242338][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2802.252401][ T30] Call Trace: [ 2802.255665][ T30] [ 2802.258577][ T30] dump_stack_lvl+0x100/0x190 [ 2802.263249][ T30] vpanic+0x552/0x970 [ 2802.267215][ T30] ? __pfx_vpanic+0x10/0x10 [ 2802.271700][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2802.277843][ T30] panic+0xd1/0xe0 [ 2802.281546][ T30] ? __pfx_panic+0x10/0x10 [ 2802.285946][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2802.292087][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2802.298230][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2802.304372][ T30] ? watchdog.cold+0x198/0x1ca [ 2802.309119][ T30] ? watchdog+0xd35/0x1050 [ 2802.313525][ T30] watchdog.cold+0x1a9/0x1ca [ 2802.318113][ T30] ? __pfx_watchdog+0x10/0x10 [ 2802.322774][ T30] ? __kthread_parkme+0x18c/0x230 [ 2802.327786][ T30] ? kthread+0x13a/0x450 [ 2802.332022][ T30] ? __pfx_watchdog+0x10/0x10 [ 2802.336685][ T30] kthread+0x370/0x450 [ 2802.340731][ T30] ? __pfx_kthread+0x10/0x10 [ 2802.345301][ T30] ret_from_fork+0x754/0xd80 [ 2802.349873][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2802.354965][ T30] ? __switch_to+0x7b4/0x1120 [ 2802.359628][ T30] ? __pfx_kthread+0x10/0x10 [ 2802.364213][ T30] ret_from_fork_asm+0x1a/0x30 [ 2802.368971][ T30] [ 2802.372268][ T30] Kernel Offset: disabled [ 2802.376568][ T30] Rebooting in 86400 seconds..