last executing test programs: 1m54.498357659s ago: executing program 3 (id=1861): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x400, 0x400, {}, {0x0}, 0x7, 0x7}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x884002, &(0x7f0000000180)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_off}, {@uuid_auto}], [{@obj_type={'obj_type', 0x3d, '/dev/vhost-net\x00'}}, {@audit}, {@fowner_gt={'fowner>', r2}}]}) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d30, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x13, 0xffffffffffffffff, 0xec776000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 1m54.360844088s ago: executing program 3 (id=1865): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fanotify_init(0xf00, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[]) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r2, &(0x7f0000004940)={0x2020}, 0xfd42) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r2, 0x0, r3, 0x0, 0x7c1c, 0x8) r4 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r4) 1m53.346516478s ago: executing program 3 (id=1871): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$inet6(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0xa, 0x4e20, 0xc, @private2, 0x1b557b87}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f190f33d937c0136caf4885a59c4b97280d64fc5e39eac44de816d5cb28fdcb402a612b58229510f92365478567a12aa0fa9e6bb4424178afa3ace48c75d77a69f6339e7828c94ab5cd5881c3e17af86def36db5b271e8e3527f3761c4bec7ba977de365564600d2c60448b2e167cf795c6ce8c5a23999e5280ccbd64fe011b933eb9740eb6f5690d452077f0e38db1de716c4b5e9db0a87309af2af4154f8f36ee4562973419bdc57ab9f091a678b05fb4fa29ef9e0bdcf19a5f562b0b3e179", 0xc0}, {&(0x7f0000000540)="e9f4c4880d1148edd5eb7ab6a76b8b9b612075ba84bd45bc5880d8f5ebbbcebd8bd40f4bb83a67f28ac24929b8dd5a7b02d4e4daa2e96e14a8a103cbffe865c828e85f80a26d07d156a629156f081f5521a8f1bc033f657eb400718fd8b6e2394f7c3b3d9df1dce3826f322385bb1681c113bc0d874d6d4b09cf016a23a1d2c83abe1ba33e0890308d9b6fe9887ae48da04e10f478b695ae7b920fc7b401698e3c6788a08879dede9199cf3f21db1b304f059cd2103cfcf62852de55b7cdc55feb7bc109c6451d211d55d7e7a6901e8c37bf", 0xd2}, {&(0x7f0000000640)="0e610572e08ee61e0ae3dc79", 0xc}, {&(0x7f0000000680)="dfd53cf6d9bf1366728e1f43f0c5f6a2f6b587662d22e1741f10ab2ec94e841bbed68576ec7b6ec04cb5bc57f02055773982255c1396e9ea346c3c4d6afa88921b7510a847820745d3b1b886f72e88ae5d7c00b1fffb8a4713b91625c027d26b24f7eba523963b400384736ef339d4d034fbe9eca54db2a0ce68687863a8622689ca102044d073e412a1f94cf7fb5b65d1489fea11eb594aafd7ff0d550f01888969cfa4a29a468fecd3e2d6d521060b88dda81a0ba6b330db186d22201d4f46be6d3fef07404c82488a512f71db13cc7e09e63a9120768442c7edd1b27857ac644791754ca364", 0xe7}, {&(0x7f0000000840)="b380a310924b03011465e97bcd7d860ac9050ec4546817e2967e43898f14c41177998fea78aa395f0d9ebb9887cdfeef72849a36c5c968fafd3a4894f15bd08bf971d003e86a44cba25bc5cc8c27f4384cfc425f77e64b8b8aa46a4c7207d24b30", 0x61}, {&(0x7f00000008c0)="040fc2b667bfe99c7afbb3b708e2fa38ca6406091c0acb66869042635bb41fa1e4a184caec4d56d677b521b6565d63b8c2e2e27de8bfd81f04590c5903c998d862e7e3ce8768", 0x46}, {&(0x7f0000000940)="5ea0e05f8420074614a0393b29ad5a1511270a5201e13ae9a472f87d7846a6664577519c0abf34a1a8798faefec035bb2239fa6e8fca12d9538623ebf3f079cf25382bc3a0abad19b0be5aed69aac444fc3f5849afe46f86def9d2929a444e0d872b3729ee3fbfb3d1549331a100586556f76a976a541eb8cc1fad901210535144162d9fb400178a0023173e9e378ad8a8a81a1fc18a3709d60664f1268c26eaa92895ebe5ec910caeb061edbfb19db333b812c583bbff1b84f4ad91fc84f9329011b627aa81", 0xc6}, {&(0x7f0000000a40)="e5ffac417ffd03ed8ad3fbf8a7f1dbc01a8d6f492caddba6a1ed912403a4bca3780940d8c9c597c46add0d477db82ffb6407dafc55c10a38c648a76ec3216b7e5cf477cfeba7629910586656b3a9b5a390a0eb3b2537a128cb3d2f1328b3a50e9b5d9ea00e81e669caeabf90449404d6a4637c534c72d58a8ba173d1372d39621e97432fc4635de2c63277bb9b0712ebf95e45fe55030ef3d33e669ebee6f71048c97635358bddf95b0e0efe0f45cb3baefcad3d48b389406f658db887a465763a5e9c97525dd599ce675d119014e3090a0a52cfbfae0f1b6f96ebd23ae2e36e1d97da3e", 0xe4}], 0x8}, 0x20000014) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x10, 0x5, 0x801, 0x0, &(0x7f0000000280), 0x2) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ff5000/0x3000)=nil, 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000017ffe800000000000300000018110080", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', r3}, 0x94) 1m51.25742543s ago: executing program 3 (id=1880): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000010000000cd0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create1(0x80000) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x60242) pselect6(0x40, &(0x7f0000000240)={0xfeffffffffffff, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m49.606737771s ago: executing program 3 (id=1887): socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x625b3224, 0x121501) r1 = io_uring_setup(0x47f0, &(0x7f0000000000)={0x0, 0xd7af, 0x10000, 0x0, 0x2b}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180), 0x1900) 1m48.996047848s ago: executing program 3 (id=1889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) geteuid() (async) r2 = geteuid() openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f00000031c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r3, &(0x7f00000002c0)={0x130, 0x0, r4, {0x7, 0xc, 0x0, '\x00', {0x86, 0x4af22, 0x6, 0x9, 0x0, r5, 0xa000, '\x00', 0x6, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff3}, {0x203d7f, 0x7, 0xc000000}, {0x4000100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000019300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r2, @ANYBLOB="1e0cd5d4b42cfba55d4b3014f7c1781469a5e4297d610c47e4e74c44e6b84cd7ad32c234a69246699c84e3cc7e850deaafebe0e5e7793d2b84a98a50187c4c", @ANYRESDEC=r5, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000001c00,smackfsroot=/dev/ptmx\x00,rw,subj_type=/dev/net/tun\x00,func=MODULE_CHECK,dont_hash,smackfsroot=\\,\x00']) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x301081, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$sndmidi(0x0, 0x8, 0x0) fanotify_init(0x20, 0x800) (async) fanotify_init(0x20, 0x800) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) (async) r7 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lsm_list_modules(&(0x7f0000002600), &(0x7f0000000000), 0x0) (async) lsm_list_modules(&(0x7f0000002600), &(0x7f0000000000), 0x0) r8 = socket$netlink(0x10, 0x3, 0x9) sendfile(r8, 0xffffffffffffffff, 0x0, 0x7ffff088) (async) sendfile(r8, 0xffffffffffffffff, 0x0, 0x7ffff088) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() (async) sync() shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 1m33.465911768s ago: executing program 32 (id=1889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) geteuid() (async) r2 = geteuid() openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f00000031c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r3, &(0x7f00000002c0)={0x130, 0x0, r4, {0x7, 0xc, 0x0, '\x00', {0x86, 0x4af22, 0x6, 0x9, 0x0, r5, 0xa000, '\x00', 0x6, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff3}, {0x203d7f, 0x7, 0xc000000}, {0x4000100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000019300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r2, @ANYBLOB="1e0cd5d4b42cfba55d4b3014f7c1781469a5e4297d610c47e4e74c44e6b84cd7ad32c234a69246699c84e3cc7e850deaafebe0e5e7793d2b84a98a50187c4c", @ANYRESDEC=r5, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000001c00,smackfsroot=/dev/ptmx\x00,rw,subj_type=/dev/net/tun\x00,func=MODULE_CHECK,dont_hash,smackfsroot=\\,\x00']) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x301081, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$sndmidi(0x0, 0x8, 0x0) fanotify_init(0x20, 0x800) (async) fanotify_init(0x20, 0x800) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) (async) r7 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lsm_list_modules(&(0x7f0000002600), &(0x7f0000000000), 0x0) (async) lsm_list_modules(&(0x7f0000002600), &(0x7f0000000000), 0x0) r8 = socket$netlink(0x10, 0x3, 0x9) sendfile(r8, 0xffffffffffffffff, 0x0, 0x7ffff088) (async) sendfile(r8, 0xffffffffffffffff, 0x0, 0x7ffff088) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() (async) sync() shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 9.921297472s ago: executing program 5 (id=2346): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x1000, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x7, 0x9, 0x4, 0xed, 0x5}, {0x7fff, 0x0, 0x0, 0x6, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x4, 0xa, 0x20, 0x9, 0x40, 0x0, 0x61, 0x1, 0x2, 0xfc, 0x0, 0x0, 0xfffffffffffffffd}], 0x7d2}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x6, 0xa01}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x8b22, 0x0, 0x0, 0x16, 0x11, "fee8a2ab78fc829fd1e00d96072000000ba89de2b7fb0000e6a180b8785d9600010041eb8109af000000000000002c7f5211e95610ed15c652e300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x0, 0x2000000000001]}}) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000a40)={{[0x2, 0x80000000, 0x9, 0xffffffff]}, 0x0, 0x1, 0x3, 0x0, &(0x7f0000000900)=[{{@align=0x321, {0x9, 0x5, 0x7, 0x7}}, 0x4, 0x0, '/proc/stat\x00'}, {{@_ha_fsid={[0x0, 0x3]}, {0x94a, 0xaff2, 0x6, 0x8}}, 0x2, 0x0, '\'&:*\x00'}, {{@align=0xbbaf, {0x2, 0x7, 0x1, 0x1}}, 0x400, 0x0, '.\x00'}, {{@_ha_fsid={[0x1ff, 0x5]}, {0x9, 0x9de7, 0x10000, 0x4}}, 0x602b3ad2, 0x0, '/proc/stat\x00'}, {{@align=0x1, {0x66, 0x1, 0x0, 0xb9f}}, 0x2, 0x0, 'syzkaller\x00'}, {{@_ha_fsid={[0xd8f6, 0x4]}, {0x2, 0x7fff, 0x4, 0x4e}}, 0x1, 0x0, '/dev/uhid\x00'}, {{@align=0x1, {0x2, 0x80, 0xfffffff7, 0x1}}, 0x2, 0x0, '&}[+%:}\'%&\x05]\x00'}]}) ioctl$KVM_GET_DEVICE_ATTR_vm(r3, 0x4018aee2, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x0, &(0x7f0000000100)=0xfffffffffffffff7}) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r5 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000040)='stat\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0xd4, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x32}}}}, [@NL80211_ATTR_TESTDATA={0xb1, 0x45, "49dc9b4f7431ad8b3e801517f670393569187836c707187bd7653305004e3224a2428b65842c80ee3e78a264e811125cc2afbcebab455955cf6ea45bea4f8c4023dfdaa0f228067b2e28711d34db21e29dc249931d336c2fbf051570486e8ac1b424156d1a9c31b6156bbb8f4de4cd4a6105bac4e57f681118229219afb3fc94f55019160da4008a781fed002b3b5ade6615c7e15fc8c1ac887b0c7e79a915cf855bfb6e967997bc72e1bb5bca"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0e0000"], 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b2bf8ff00000000bd21feff0000000007010000f8ffffffb502020008000000b70300000000000085000000b400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f2}, 0x94) 9.420231275s ago: executing program 5 (id=2349): socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x20, 0x21, 0xfa, {0xfa, 0x21, "7e13ba01bbca65ef29891111dd3da13b0f287b27d968e11ee988104f2c9983349c8fabace55590382ddbd62848620342dcb54293cccbbd761aefacda6c397feab6582fa5304502493a8afecfe9b50f5b34b886fd664a5ed317bf413aa73db624f5e43f7d6880d8efba0f7fbb4d6c1cdb1018f43af62f505098d5aea9038d3443b1ff4909136ac84bb7c0c48093eb4225897ef838086a5f8d07ab309b56ef1cc4a62d8d6401c67aa8548d153a381cddb2f3ba04ccdfb179e164446f48899be075d5893f0f2da812474930ed79861e2969edf4858e331c02586c901d11b641e19580f0d9837577f3f4c2f4745b144fe410eb9e7004f6497468"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000540)={0x40, 0xc, 0xc7, "83fea9f5cef487ecac53a20219f2d09972fe97c841230ed831b5d6732dfafd27c9f8fca828be7054000ca074bda5dda0f1a8137e7360e068ae540f6c709142abb822154eba0d08c15468ce38295118188f52ffda5c634575f0db30947b95d1eef3033af4f9d8ff0ec784cb492bf211e63181078118be6b6b858df576cd98dbc14fcfed71ee54ab7558271897ec0ffb1500da2b11875a3724d1a8f160a574d5c76b469478f78cea6ca6d5d8cdc2d9aa2d633485da7521ecdb3cfebe7b25dfc5e3904d4df6b6e229"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x87}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000006c0)={0x20, 0x81, 0x3, "e92790"}, &(0x7f0000000700)={0x20, 0x82, 0x2, "fe7e"}, &(0x7f0000000740)={0x20, 0x83, 0x2, "d0e1"}, &(0x7f0000000780)={0x20, 0x84, 0x3, "64a005"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "1614bb"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="02013600002d3922ff65b4355e95", 0xe}]}, 0x44000) 8.036250232s ago: executing program 1 (id=2358): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0xfffe, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) 7.885212992s ago: executing program 1 (id=2360): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8000, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x80000, r3}, 0x38) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 7.341140973s ago: executing program 0 (id=2363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711203000000000095", @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000c20008000000000000000008000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x17}, 0x12000) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f00000004c0)={0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) (async) setsockopt$sock_attach_bpf(r4, 0x10f, 0x8a, &(0x7f0000000180)=r3, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000028020000060000000400000041610000", @ANYRES32, @ANYBLOB="45c400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300020000000000050000000700"/28], 0x50) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read(r8, &(0x7f0000000180)=""/199, 0xc7) (async) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x29, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa15}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7cff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, &(0x7f00000004c0), 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x3, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x1, r7, r8, r9, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0x8, 0x5}, {0x1, 0x1, 0x8}, {0x5, 0x3, 0x3}, {0x2, 0x1, 0xa, 0x8}, {0x0, 0x5, 0x0, 0x9}, {0x3, 0x3, 0x4, 0x9}, {0x1, 0x1, 0x3, 0x1}], 0x10, 0x9}, 0x94) (async) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r10 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, 0x0, 0x0) (async) sendmmsg$unix(r12, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r11, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) 6.872125093s ago: executing program 0 (id=2364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) r1 = memfd_create(&(0x7f0000000000)='\\\\&\x0e\x00', 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x8, 0x4, {{0x3b, 0x4, 0x0, 0xa, 0xec, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast2, @local, {[@cipso={0x86, 0x5c, 0x3, [{0x2, 0xc, "8ababf75509c5b126258"}, {0x6, 0x2}, {0x4, 0x9, "4a5ec71c4aff2f"}, {0x1, 0xb, "c693971a082469805b"}, {0x7, 0xb, "5dab6806aec773266e"}, {0x7, 0x9, "86b2d63ee26070"}, {0x5, 0x7, "4c87948cbc"}, {0x0, 0xe, "0d733527adec9a30ef3de82c"}, {0x6, 0xb, "998835d793033280de"}]}, @cipso={0x86, 0x13, 0x2, [{0x6, 0xd, "d1b124c8e1e98a86356693"}]}, @cipso={0x86, 0x35, 0x2, [{0x5, 0xe, "9bbb690f348837b77df5952a"}, {0x1, 0xb, "5b85c791f0b37bee59"}, {0x6, 0xb, "b2c029add3be563edc"}, {0x7, 0x2}, {0x6, 0x9, "70167e8f0696e3"}]}, @timestamp_addr={0x44, 0x34, 0xca, 0x1, 0x1, [{@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x3}, {@multicast1, 0x8}, {@remote}, {@empty, 0xfffffffd}]}]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x16}, @generic={0x1, 0x1, 0x5, 0x7}], &(0x7f00000004c0)='GPL\x00', 0xf899, 0xb3, &(0x7f0000000500)=""/179, 0x41000, 0x56, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x0, 0x5, 0xffff0001}, 0x10, 0x1493b, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[r0], &(0x7f0000000680)=[{0x2, 0x4, 0x3, 0x8}], 0x10, 0x36}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x11, &(0x7f00000000c0)=@raw=[@exit, @map_idx, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @ldst={0x0, 0x0, 0x3, 0x1, 0x7, 0xfffffffffffffff4, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}], &(0x7f0000000180)='GPL\x00', 0x7, 0xe0, &(0x7f00000001c0)=""/224, 0x0, 0x60, '\x00', r4, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x0, 0x3, 0x7fff}, 0x10, r6, r7, 0x0, &(0x7f0000000780)=[r8, r0], 0x0, 0x10, 0x2b40}, 0x94) fchmod(r1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x50) r9 = syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x220000) ioctl$KDADDIO(r9, 0x4b34, 0x0) 6.521736383s ago: executing program 1 (id=2368): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) listen(r0, 0xb91) 6.485055865s ago: executing program 1 (id=2369): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1f00}, 0x94) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000480)={0x14, &(0x7f0000000300)={0x0, 0x8, 0x2, {0x2, 0x22}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x0, 0xa, 0x1e, "450d77d5d760b0734c33c6c21072e5dc6f5cf933254cc50df3fb67097318"}, 0x0, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000040)=0x200, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e00010908"], 0x4a) 6.302653516s ago: executing program 0 (id=2370): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = inotify_init() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44810}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@delchain={0x2c, 0x65, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x5, 0xffe6}, {0xc, 0xffe0}, {0xe, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2204403c}, 0x800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r8 = syz_clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB="3d6b149754e1d18816000e00000000", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x7) wait4(r8, 0x0, 0x1000000, 0x0) tkill(r9, 0x3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000300)={0x248, @tick=0xf8b7, 0x8, {0x1, 0x38}, 0x6}) set_mempolicy(0x4000, &(0x7f0000000080)=0x8001, 0xff) accept4(r2, 0x0, 0x0, 0x80000) 5.563812434s ago: executing program 2 (id=2373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x718c, &(0x7f0000000180)={0x0, 0x154e, 0x800, 0x1, 0x28f}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000480)) r4 = syz_ublk_setup_io_uring(0x7b63, &(0x7f0000000040)={0x0, 0x7d27, 0x800, 0x1, 0x19e, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r11, r9, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x0, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x1, 0x1, 0x0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 4.901195517s ago: executing program 4 (id=2374): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, 0x0) io_setup(0x6, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, 0x0, 0x0) r3 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, &(0x7f0000000300)) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="02c5be3c8c3036", 0x7}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="c0b414", 0x3}], 0x1}}], 0x4, 0x400c404) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8905, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x80) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r8, 0xe) 4.561899909s ago: executing program 0 (id=2375): madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000006000000040000000000000e0000000000000000001e00612e006cff784461d08344534b65b394639b282e4d19354279402357c7c81a76547799e8381af6ed0129ab041855abbe1e9b688702fefb27c883f6491d496eb17fccba7120a2bd017a3b843d8d3cc74b81353b82d8529ae94c7e5b047a2de4f1ae7c7bd7ba632258329237bf84d4a7"], 0x0, 0x2e, 0x0, 0x0, 0x8001}, 0x28) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioperm(0x5, 0x6, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40008c0}, 0x8040) socket(0x2, 0x80805, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) read$FUSE(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() r4 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x5d, 0x8005, 0x0, @loopback, @private1, 0x80, 0x80, 0xb0, 0x7}}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x20010, r1, 0xb4e02000) r5 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}, 0x0, 0x0, 0x2, 0x100000000, 0xff, 0x1, 0xfffffffffffffffe, 0x9, 0x3, 0x7, r3, r5}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000015, 0x0, 0xa00, 0x0, 0x0, 0x0) pread64(r6, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000040)={0x6}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000006c0)=""/134, 0x0, 0x86, 0x0, 0x1e}, 0x28) 3.692012456s ago: executing program 4 (id=2376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x28, 0x2, 0x80010, 0x0, 0x40, 0x4b, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 3.477246545s ago: executing program 0 (id=2377): socket(0x2, 0x3, 0xff) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x200, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.476136804s ago: executing program 4 (id=2378): socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10001) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x5c0, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x528, 0x2a8, 0x2a8, 0x528, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'netdevsim0\x00', {0xff}, {}, 0x1}, 0x40000, 0x3f8, 0x458, 0x0, {0x0, 0x5803}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010102, [0xff000000, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff000000, 0x0, 0xffffff00], 0x4d6, 0x0, 0x1, 0x1, 0x4, 0xc}, {@ipv4=@empty, [0xff, 0xffffffff, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xffffffff, 0xffffffff, 0x0, 0xff000000], 0x4d6, 0x3506, 0x0, 0x1, 0x2, 0xd}, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0xffffff00, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], 0x4d2, 0x0, 0x8c, 0x1, 0xa, 0x2}, {@ipv6=@mcast1, [0xff, 0xff, 0xffff00, 0xffffff00], @ipv6=@private2, [0x0, 0xff, 0xff, 0xffffff00], 0x4d2, 0x0, 0x67, 0x1, 0x18, 0x10}], 0x1, 0x84}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @fd}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 0xff47, 0x4, [0x2a, 0x10, 0x6, 0x2c, 0x10, 0x3e, 0x7, 0x12, 0x32, 0x1, 0x21, 0xb, 0x3b, 0x1e, 0x2e, 0x1e], 0x1, 0x8000, 0x8000}}}, {{@ip={@remote, @multicast2, 0xffffff00, 0x0, 'virt_wifi0\x00', 'caif0\x00', {}, {0xff}, 0xd1b6c305b1e83769, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x5, 0x3, 0x4, 0x1], 0x6, 0x4}, {0x0, [0x1, 0x1, 0x1, 0x0, 0x6, 0x4], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x620) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfea7) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x7fffffff, 0x1, 0x40000, 0x7c6d, 0xffffffff, 0x8001, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x7, 0xd0, 0x0, 0xff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000019300)={{{@in=@multicast1, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in=@private}}, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) socket$tipc(0x1e, 0x5, 0x0) 3.385516325s ago: executing program 5 (id=2379): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0xfffffffe, 0x1000, 0x4, 0xfffffffa}, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0xfffffbff, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)) r6 = socket(0x2, 0x80805, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0xd, 0x401, 0x21, @dev={0xfe, 0x80, '\x00', 0x3c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x0, 0x200}}) sendmmsg$inet(r6, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, &(0x7f0000000640)) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000400)={0x83de, 0x81, 0x603, 0x3, 0x1ff, 0x7, 0xdff8, 0xe, r8}, 0x20) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r8}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000010000000000", @ANYRES32, @ANYBLOB="7c9800"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="03000000ffffffff000000a17b14a400"/28], 0x50) syz_usb_connect$midi(0x3, 0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000020ba0d00303b000102030109022c000101181001090400"], 0x0) 2.943419101s ago: executing program 2 (id=2380): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)={0x1}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x8010, r1, 0xc528d000) 2.815342071s ago: executing program 1 (id=2381): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3457, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x2200, 0x1}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x30, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.649414004s ago: executing program 0 (id=2382): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet(r3, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x80) r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0x4, 0x81, 0x3fc, 0xfffd, 0x5, 0x2, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) sendmsg$inet(r3, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x80) (async) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0x4, 0x81, 0x3fc, 0xfffd, 0x5, 0x2, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) 2.617255603s ago: executing program 4 (id=2383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_io_uring_setup(0x390b, &(0x7f0000000080)={0x0, 0xef67, 0x1, 0x3, 0x17a}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002e00090027bd70000000000004000000040018004fdcbf0fddae8f7237d04b10b7853d312c08934fb714dbd61719b899ffeba831c27f9ea3dae2128c"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r9 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 2.478273696s ago: executing program 2 (id=2384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x2, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x1, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0xffffffff, 0x3, 0x100f5, 0x10009, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x4, 0xfffff76d, 0x300000, 0x10, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x2, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xa8, 0x4, 0x2, 0x0, 0x8, 0xc5, 0x1, 0x199f, 0x5, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x80000040, 0x9, 0x5b, 0x5], [0x6, 0x1e, 0x3, 0x4ef4, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x39ca, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x80, 0x4, 0x100, 0x89b, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0xd65, 0x1, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0xb, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0xbde], [0x401, 0xc584, 0xffff, 0x8cd4, 0x7, 0x20, 0xb, 0x4, 0x8, 0x10, 0x7, 0x44c, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x401000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe57, 0x6807, 0x80000001, 0x4, 0x7b, 0x10000005, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x4a, 0x2, 0x3, 0x4, 0x20007, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x44, 0x3, 0x6, 0x100fffd, 0x2005, 0x2000007, 0x4, 0xea, 0x9, 0x80000001, 0x2, 0xd9, 0x0, 0x807ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x20000800, 0x9, 0x1000, 0x7f, 0x5, 0x3fb6, 0x4, 0x8e8, 0x6348, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1800, 0x3b, 0xffffffff, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3e, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x801, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0xbf3a, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x6]}, 0x45c) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x7, 0x7f, 0x1}, 0x1001) unshare(0x40020000) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) 2.341466646s ago: executing program 1 (id=2385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x13, r1, 0x7243b000) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) r3 = getpid() kcmp(r3, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="00000c00008722e9c8"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x0, 0x11, 0x4, "c88b8cfe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(0xffffffffffffffff, 0x0, 0x72) flock(r1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x3d, 0x1, 0xc, 0xa, 0x7}) 1.321639433s ago: executing program 2 (id=2386): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, 0x0) io_setup(0x6, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, 0x0, 0x0) r3 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, &(0x7f0000000300)) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="02c5be3c8c3036", 0x7}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="c0b414", 0x3}], 0x1}}], 0x4, 0x400c404) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8905, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x80) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r8, 0xe) 775.687948ms ago: executing program 4 (id=2387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800b0001006e756d67656e000a420002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0x84}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000440)={0x1, 0x80000, r0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', '', [], 0x8}, 0x4) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="e061b9bc0200000f32b8000000000f23d00f21f835200000060f23f82e36f30f09f3ab66260f20d7b9800000c00f3235000800000f300f01c566baf80cb82338cd81ef66bafc0cecc4c248f50b", 0x4d}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r11, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3d}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 664.420965ms ago: executing program 2 (id=2388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x28, 0x2, 0x80010, 0x0, 0x40, 0x4b, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 544.138007ms ago: executing program 2 (id=2389): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c12510000000000010902"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) getrlimit(0xf, &(0x7f0000000040)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000004) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000780)={{r3}, "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"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x0, 0x27}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 496.62332ms ago: executing program 4 (id=2390): sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, 0x1, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048010}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xd}, 0x1c) r2 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 266.320586ms ago: executing program 5 (id=2391): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) writev(r3, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000000580)="d9e83bdbb3883b267debb390dcf9064ecb517aa60fe2df5b93edd169486df829a90b55a0a2dd0755a058077255496bb96d065e976854b20382b071b30db3d6894820b4b0c4c29b7c01e76a11dd37a309e33c2c94df4e156eed53f5ba2dbe150f91a70ba8d09b74cdc1bbd8c9d8ccb568bea9671dca7a2d94fb6164c9b23a9ec70fdff1db11c243ac56330c74c5e76b397b15d49b2f7af084d26032717d82c83821fddca620680dbcc4030e3434f1fd867dc1e350ae88cf8062de5f", 0xffffff8f}], 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000000c0)={0x6, {"4772ffacff04856ec9e8776f8ee911be", "2dfad343e15ead11f40c897700", "0000c9d55ee6e2e92586000200"}, 0x3eaf, 0x4}) 0s ago: executing program 5 (id=2392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x10230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xc1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24004004) kernel console output (not intermixed with test programs): it(1781777736.668:1283): avc: denied { create } for pid=23975 comm="syz.4.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 478.110813][ T5795] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 478.150182][T23978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.159226][T23978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.200306][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 478.212109][T23566] usb 2-1: USB disconnect, device number 80 [ 478.282341][ T5795] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 478.304156][ T5795] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.315343][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.325596][ T5795] usb 6-1: Product: syz [ 478.329881][T24007] ubi: mtd0 is already attached to ubi16 [ 478.335969][ T5795] usb 6-1: Manufacturer: syz [ 478.341414][ T5795] usb 6-1: SerialNumber: syz [ 478.373666][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.396195][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.408177][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 478.418171][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.447705][ T10] usb 1-1: config 0 descriptor?? [ 478.563582][T23958] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 478.572237][ T30] audit: type=1400 audit(1781777737.168:1284): avc: denied { accept } for pid=24012 comm="syz.4.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 478.658191][ T30] audit: type=1400 audit(1781777737.248:1285): avc: denied { bind } for pid=23962 comm="syz.0.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 478.978038][ T5795] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 478.985825][ T5795] cdc_ncm 6-1:1.0: bind() failure [ 478.997536][ T5795] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 479.004783][ T5795] cdc_ncm 6-1:1.1: bind() failure [ 479.023268][ T5795] usb 6-1: USB disconnect, device number 10 [ 479.050584][ T5613] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 479.083565][ T10] usb 1-1: language id specifier not provided by device, defaulting to English [ 479.216143][ T5613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.228411][ T5613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.243177][ T5613] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 479.252737][ T5613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.278466][ T5613] usb 2-1: config 0 descriptor?? [ 479.316759][T24051] FAULT_INJECTION: forcing a failure. [ 479.316759][T24051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.329979][T24051] CPU: 0 UID: 0 PID: 24051 Comm: syz.4.2126 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.330006][T24051] Tainted: [L]=SOFTLOCKUP [ 479.330012][T24051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.330025][T24051] Call Trace: [ 479.330031][T24051] [ 479.330037][T24051] dump_stack_lvl+0x100/0x190 [ 479.330060][T24051] should_fail_ex.cold+0x5/0xa [ 479.330080][T24051] strncpy_from_user+0x3b/0x2d0 [ 479.330107][T24051] do_getname+0x78/0x390 [ 479.330128][T24051] do_sys_openat2+0xc7/0x1e0 [ 479.330146][T24051] ? __pfx_do_sys_openat2+0x10/0x10 [ 479.330165][T24051] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 479.330188][T24051] ? __fget_files+0x21f/0x3d0 [ 479.330206][T24051] __x64_sys_openat+0x12d/0x210 [ 479.330226][T24051] ? __pfx___x64_sys_openat+0x10/0x10 [ 479.330244][T24051] ? ksys_write+0x1ac/0x250 [ 479.330269][T24051] ? rcu_is_watching+0x12/0xc0 [ 479.330293][T24051] do_syscall_64+0x115/0x870 [ 479.330314][T24051] ? clear_bhb_loop+0x40/0x90 [ 479.330334][T24051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.330351][T24051] RIP: 0033:0x7f878559ce59 [ 479.330365][T24051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.330382][T24051] RSP: 002b:00007f8786534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.330400][T24051] RAX: ffffffffffffffda RBX: 00007f8785815fa0 RCX: 00007f878559ce59 [ 479.330412][T24051] RDX: 000000000000f000 RSI: 0000200000000040 RDI: 0000000000000003 [ 479.330422][T24051] RBP: 00007f8786534090 R08: 0000000000000000 R09: 0000000000000000 [ 479.330433][T24051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.330443][T24051] R13: 00007f8785816038 R14: 00007f8785815fa0 R15: 00007ffc5ba6cf48 [ 479.330460][T24051] [ 479.518143][ T5795] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 479.528566][ T10] uclogic 0003:256C:006D.0016: interface is invalid, ignoring [ 479.559810][ T10] usb 1-1: USB disconnect, device number 90 [ 479.670561][ T5795] usb 6-1: Using ep0 maxpacket: 8 [ 479.676910][ T5795] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 123, changing to 7 [ 479.695982][ T5795] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 479.705320][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.713723][ T5795] usb 6-1: Product: ф [ 479.717927][ T5795] usb 6-1: Manufacturer: 湢␧ရ쒚餫层춛쇑‐ᓎ륕ꤻ掟ᠹ距繹ࡣ쳴⑼뻠됇脥㹿㏿ퟙ쐇Ｕ蔝쨦м狁莠絧⣹₎ᙣ꽃疼鯆雳촣ᑊ昳哵ᖒ韮숊样Ӯ垨磝닏慝絽뫤緢诞接첑隻㜤䂢 [ 479.740188][ T5795] usb 6-1: SerialNumber: ʱ퉫娫㱍밭ⳅᶦ痼뿚绉뼆鄐誃蝥䀁䕑펒ꛏ间̊蹚ݕ뤈⋺鏾컰鉸橋뤕悔肋꫋ﵾ໵㞼뎅诖ꗋ領龙獨⮰䅋采ส釃䓌◶෱鬬뭭ꔺ헋뺤ꄬ껡䂜䔤辄塺ꠍ簱쮳䇮ｼ髙艔ﴒ羶䦬荒⍖긨৷ഊꌞᒔ흡ᘟ䎙 [ 479.809698][ T5795] usb 6-1: 1:1 : format type 0 is detected, processed as PCM [ 479.817405][ T5795] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 480.168171][T22727] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 480.177914][ T5613] uclogic 0003:256C:006D.0017: failed retrieving Huion firmware version: -71 [ 480.188794][ T5613] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 480.196507][ T5613] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 480.213496][ T5613] usb 2-1: USB disconnect, device number 81 [ 480.305516][ T30] audit: type=1400 audit(1781777738.898:1286): avc: denied { map } for pid=24096 comm="syz.0.2133" path="/dev/ttynull" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 480.329595][T22727] usb 3-1: Using ep0 maxpacket: 16 [ 480.335488][T24097] tmpfs: Bad value for 'mpol' [ 480.337027][T22727] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 480.349750][T22727] usb 3-1: config 0 has no interface number 0 [ 480.358788][T22727] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.370250][T22727] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.381340][T22727] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 480.391223][T22727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.405831][T22727] usb 3-1: config 0 descriptor?? [ 480.645873][T24112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2135'. [ 480.657092][ T30] audit: type=1400 audit(1781777739.238:1287): avc: denied { write } for pid=24111 comm="syz.4.2135" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 480.692190][ T30] audit: type=1400 audit(1781777739.238:1288): avc: denied { open } for pid=24111 comm="syz.4.2135" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 480.735777][ T30] audit: type=1400 audit(1781777739.308:1289): avc: denied { create } for pid=24111 comm="syz.4.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 480.770378][ T5795] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 480.887343][T24070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.900718][T24070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.912738][ T5795] usb 6-1: USB disconnect, device number 11 [ 480.913215][T24070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.936382][T22727] hid (null): report_id 0 is invalid [ 480.952397][ T30] audit: type=1400 audit(1781777739.538:1290): avc: denied { write } for pid=24140 comm="syz.4.2137" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 480.982696][ T30] audit: type=1400 audit(1781777739.538:1291): avc: denied { open } for pid=24140 comm="syz.4.2137" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 481.251314][ T30] audit: type=1400 audit(1781777739.578:1292): avc: denied { ioctl } for pid=24140 comm="syz.4.2137" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 481.299128][T22727] usb 3-1: USB disconnect, device number 97 [ 481.318691][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.033162][ T30] audit: type=1400 audit(1781777740.628:1293): avc: denied { setopt } for pid=24196 comm="syz.4.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 482.209886][T24203] No source specified [ 483.282218][ T2048] block nbd0: Possible stuck request ffff888028b25080: control (read@0,1024B). Runtime 120 seconds [ 483.581520][T24251] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 483.951625][T22727] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 484.160344][T22727] usb 2-1: Using ep0 maxpacket: 8 [ 484.174408][T22727] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 484.191825][T22727] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 484.202393][T22727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.214483][T22727] usb 2-1: config 0 descriptor?? [ 484.464461][T24283] No source specified [ 484.593132][ T5613] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 484.771750][ T5613] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 484.800182][ T5613] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.826569][ T5613] usb 3-1: config 0 interface 0 has no altsetting 0 [ 484.845392][T22727] greenasia 0003:0E8F:0012.0019: unknown main item tag 0x0 [ 484.860126][ T5613] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 484.877047][T22727] greenasia 0003:0E8F:0012.0019: unknown main item tag 0x0 [ 484.886786][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.894890][T22727] greenasia 0003:0E8F:0012.0019: unknown main item tag 0x0 [ 484.902499][T22727] greenasia 0003:0E8F:0012.0019: unknown main item tag 0x0 [ 484.910092][ T5613] usb 3-1: config 0 descriptor?? [ 484.915364][T22727] greenasia 0003:0E8F:0012.0019: unknown main item tag 0x0 [ 484.924314][T24276] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 484.935498][T22727] greenasia 0003:0E8F:0012.0019: unknown main item tag 0x0 [ 484.942962][T22727] greenasia 0003:0E8F:0012.0019: unknown main item tag 0x0 [ 484.950434][T22727] greenasia 0003:0E8F:0012.0019: unknown main item tag 0x0 [ 484.957680][T22727] greenasia 0003:0E8F:0012.0019: unknown main item tag 0x0 [ 484.965020][T22727] greenasia 0003:0E8F:0012.0019: unknown main item tag 0x0 [ 484.973266][T22727] greenasia 0003:0E8F:0012.0019: hidraw0: USB HID v0.09 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 484.985589][T22727] greenasia 0003:0E8F:0012.0019: no inputs found [ 485.050024][T24259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.060126][T24259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.074012][T24259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'. [ 485.083016][ T5795] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 485.110447][ T1236] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 485.133101][ T10] usb 2-1: USB disconnect, device number 82 [ 485.220257][ T5795] usb 5-1: device descriptor read/64, error -71 [ 485.264294][ T1236] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.290343][ T1236] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x2 has invalid wMaxPacketSize 0 [ 485.310265][ T1236] usb 6-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 485.340241][ T1236] usb 6-1: config 0 interface 0 has no altsetting 0 [ 485.349236][ T1236] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 485.371261][ T1236] usb 6-1: New USB device strings: Mfr=18, Product=0, SerialNumber=0 [ 485.390634][ T1236] usb 6-1: Manufacturer: syz [ 485.398046][ T1236] usb 6-1: config 0 descriptor?? [ 485.481515][ T5795] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 485.671978][ T5795] usb 5-1: device descriptor read/64, error -71 [ 485.791882][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 485.791898][ T30] audit: type=1400 audit(1781777744.388:1295): avc: denied { read } for pid=24347 comm="syz.1.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 485.819679][ T5795] usb usb5-port1: attempt power cycle [ 485.826655][T24337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.835830][ T1236] hid (null): report_id 1761895314 is invalid [ 485.850427][ T30] audit: type=1400 audit(1781777744.448:1296): avc: denied { write } for pid=24347 comm="syz.1.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 485.851155][T24337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.880323][ T1236] corsair-psu 0003:1B1C:1C0B.001A: report_id 1761895314 is invalid [ 485.888365][T22727] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 485.910267][ T1236] corsair-psu 0003:1B1C:1C0B.001A: item 0 4 1 8 parsing failed [ 485.919326][ T1236] corsair-psu 0003:1B1C:1C0B.001A: probe with driver corsair-psu failed with error -22 [ 485.943891][T24355] [U] [ 485.946608][T24355] [U] [ 485.949665][T24355] [U] DDp% [ 485.953370][T24355] [U]  [ 485.977718][T24355] [U]  [ 485.980587][T24355] [U] [ 485.983243][T24355] [U] [ 485.998874][ T30] audit: type=1400 audit(1781777744.588:1297): avc: denied { ioctl } for pid=24347 comm="syz.1.2169" path="socket:[53460]" dev="sockfs" ino=53460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 486.020311][T24355] [U] [ 486.024504][ T30] audit: type=1400 audit(1781777744.618:1298): avc: denied { write } for pid=24347 comm="syz.1.2169" path="socket:[53455]" dev="sockfs" ino=53455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 486.026255][T24355] [U] [ 486.050172][ T30] audit: type=1400 audit(1781777744.618:1299): avc: denied { read } for pid=24347 comm="syz.1.2169" path="socket:[53455]" dev="sockfs" ino=53455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 486.052328][T24355] [U] [ 486.078317][T24355] [U] [ 486.092946][ T5753] usb 6-1: USB disconnect, device number 12 [ 486.130246][T22727] usb 1-1: Using ep0 maxpacket: 32 [ 486.160220][T22727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.160443][T24355] [U] [ 486.173016][T22727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.173770][T24355] [U] [ 486.186108][T24355] [U] [ 486.186521][ T5613] usbhid 3-1:0.0: can't add hid device: -71 [ 486.188782][T24355] [U] [ 486.197693][ T5795] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 486.198314][ T5613] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 486.206577][T24355] [U] [ 486.214757][T22727] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 486.215804][T24355] [U] [ 486.225274][T22727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.227487][T24355] [U] [ 486.238110][T24355] [U] [ 486.240845][ T5613] usb 3-1: USB disconnect, device number 98 [ 486.241515][ T5795] usb 5-1: device descriptor read/8, error -71 [ 486.254253][T24355] [U] [ 486.256958][T24355] [U] [ 486.259385][T22727] usb 1-1: config 0 descriptor?? [ 486.259637][T24355] [U] [ 486.267213][T24355] [U] [ 486.270985][T24355] [U] [ 486.273668][T24355] [U] [ 486.276327][T24355] [U] [ 486.278984][T24355] [U] [ 486.282673][T24355] [U] [ 486.285363][T24355] [U] [ 486.288066][T24355] [U] [ 486.288404][T22727] hub 1-1:0.0: USB hub found [ 486.290754][T24355] [U] [ 486.291456][T24355] [U] [ 486.300879][T24355] [U] [ 486.303565][T24355] [U] [ 486.306239][T24355] [U] [ 486.309464][T24355] [U] [ 486.312152][T24355] [U] [ 486.314833][T24355] [U] [ 486.317517][T24355] [U] [ 486.321118][T24355] [U] [ 486.323811][T24355] [U] [ 486.326480][T24355] [U] [ 486.329153][T24355] [U] [ 486.332364][T24355] [U] [ 486.335047][T24355] [U] [ 486.337720][T24355] [U] [ 486.340406][T24355] [U] [ 486.343390][T24355] [U] [ 486.346073][T24355] [U] [ 486.348741][T24355] [U] [ 486.351417][T24355] [U] [ 486.354326][T24355] [U] [ 486.357006][T24355] [U] [ 486.359674][T24355] [U] [ 486.362337][T24355] [U] [ 486.365957][T24355] [U] [ 486.368638][T24355] [U] [ 486.371319][T24355] [U] [ 486.373990][T24355] [U] [ 486.376834][T24355] [U] [ 486.379521][T24355] [U] [ 486.382196][T24355] [U] [ 486.384873][T24355] [U] [ 486.388132][T24355] [U] [ 486.390813][T24355] [U] [ 486.393484][T24355] [U] [ 486.396154][T24355] [U] [ 486.398828][T24355] [U] [ 486.401849][T24355] [U] [ 486.404524][T24355] [U] [ 486.407189][T24355] [U] [ 486.409872][T24355] [U] [ 486.412722][T24355] [U] [ 486.415397][T24355] [U] [ 486.418072][T24355] [U] [ 486.420741][T24355] [U] [ 486.423620][T24355] [U] [ 486.426301][T24355] [U] [ 486.428992][T24355] [U] [ 486.431659][T24355] [U] [ 486.434582][T24355] [U] [ 486.437259][T24355] [U] [ 486.439928][T24355] [U] [ 486.442596][T24355] [U] [ 486.445430][T24355] [U] [ 486.448116][T24355] [U] [ 486.450780][T24355] [U] [ 486.453443][T24355] [U] [ 486.456563][T24355] [U] [ 486.459246][T24355] [U] [ 486.461927][T24355] [U] [ 486.464601][T24355] [U] [ 486.467480][T24355] [U] [ 486.470161][T24355] [U] [ 486.472833][T24355] [U] [ 486.475497][T24355] [U] [ 486.479136][T24355] [U] [ 486.481841][T24355] [U] [ 486.484508][T24355] [U] [ 486.487172][T24355] [U] [ 486.490043][T24355] [U] [ 486.492723][T24355] [U] [ 486.495390][T24355] [U] [ 486.498055][T24355] [U] [ 486.502615][T24355] [U] [ 486.502791][T22727] hub 1-1:0.0: 1 port detected [ 486.505299][T24355] [U] [ 486.512709][T24355] [U] [ 486.515379][T24355] [U] [ 486.518132][ T5795] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 486.525958][T24355] [U] [ 486.528626][T24355] [U] [ 486.531291][T24355] [U] [ 486.533972][T24355] [U] [ 486.536927][T24355] [U] [ 486.539607][T24355] [U] [ 486.542288][T24355] [U] [ 486.544978][T24355] [U] [ 486.547926][T24355] [U] [ 486.550625][T24355] [U] [ 486.553312][T24355] [U] [ 486.555987][T24355] [U] [ 486.558882][T24355] [U] [ 486.561571][T24355] [U] [ 486.564238][T24355] [U] [ 486.566899][T24355] [U] [ 486.570096][ T5795] usb 5-1: device descriptor read/8, error -71 [ 486.576716][T24355] [U] [ 486.579407][T24355] [U] [ 486.582085][T24355] [U] [ 486.584757][T24355] [U] [ 486.587589][T24355] [U] [ 486.680347][ T5795] usb usb5-port1: unable to enumerate USB device [ 486.850251][ T5613] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 486.880196][ T5711] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 487.015104][ T5613] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 487.026643][ T5613] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.040655][ T5613] usb 2-1: config 0 interface 0 has no altsetting 0 [ 487.048345][ T5613] usb 2-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 487.058745][ T5711] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 487.070236][ T5711] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.083668][ T5613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.093291][ T5613] usb 2-1: config 0 descriptor?? [ 487.098973][ T5711] usb 6-1: config 0 interface 0 has no altsetting 0 [ 487.106032][ T5711] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 487.115634][T24378] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 487.122982][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.136527][ T5711] usb 6-1: config 0 descriptor?? [ 487.145586][T24384] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 487.730288][T22727] hub 1-1:0.0: activate --> -90 [ 487.730853][ T5795] usb 1-1: USB disconnect, device number 91 [ 487.941346][ T5613] usbhid 2-1:0.0: can't add hid device: -71 [ 487.958185][ T5613] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 487.979867][ T5613] usb 2-1: USB disconnect, device number 83 [ 488.280118][ T5753] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 488.440179][ T5753] usb 5-1: Using ep0 maxpacket: 32 [ 488.451174][ T5753] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 488.471032][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.484555][ T5753] usb 5-1: Product: syz [ 488.487103][ T5711] usbhid 6-1:0.0: can't add hid device: -71 [ 488.489616][ T5753] usb 5-1: Manufacturer: syz [ 488.495029][ T5711] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 488.516357][ T5711] usb 6-1: USB disconnect, device number 13 [ 488.517637][ T5753] usb 5-1: SerialNumber: syz [ 488.574724][T24449] No source specified [ 488.856877][ T5753] usb 5-1: config 0 descriptor?? [ 488.863834][ T5753] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 488.871860][ T5753] dvb-usb: bulk message failed: -22 (4/0) [ 488.877920][ T5753] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 488.894493][ T5753] dvb-usb: bulk message failed: -22 (5/0) [ 488.902078][ T5753] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 488.914930][ T5753] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 488.924564][ T5753] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 488.932709][ T5753] usb 5-1: media controller created [ 489.009937][ T30] audit: type=1400 audit(1781777747.598:1300): avc: denied { read } for pid=24461 comm="syz.2.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 489.035315][ T5753] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.113734][T24469] FAULT_INJECTION: forcing a failure. [ 489.113734][T24469] name failslab, interval 1, probability 0, space 0, times 0 [ 489.126575][T24469] CPU: 1 UID: 0 PID: 24469 Comm: syz.1.2180 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.126603][T24469] Tainted: [L]=SOFTLOCKUP [ 489.126609][T24469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.126620][T24469] Call Trace: [ 489.126626][T24469] [ 489.126633][T24469] dump_stack_lvl+0x100/0x190 [ 489.126656][T24469] should_fail_ex.cold+0x5/0xa [ 489.126677][T24469] should_failslab+0xc2/0x120 [ 489.126703][T24469] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 489.126725][T24469] ? skb_clone+0x190/0x400 [ 489.126752][T24469] skb_clone+0x190/0x400 [ 489.126777][T24469] netlink_deliver_tap+0xaed/0xcc0 [ 489.126798][T24469] netlink_unicast+0x62b/0x850 [ 489.126820][T24469] ? __pfx_netlink_unicast+0x10/0x10 [ 489.126842][T24469] ? bpf_lsm_netlink_send+0x4/0x10 [ 489.126866][T24469] netlink_sendmsg+0x8b0/0xda0 [ 489.126889][T24469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.126913][T24469] ____sys_sendmsg+0x9e1/0xb70 [ 489.126932][T24469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.126953][T24469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.126974][T24469] ? rcu_is_watching+0x12/0xc0 [ 489.126996][T24469] ? __perf_event_task_sched_in+0x21a/0xa10 [ 489.127014][T24469] ? lock_release+0x24d/0x310 [ 489.127033][T24469] ___sys_sendmsg+0x190/0x1e0 [ 489.127054][T24469] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.127073][T24469] ? rcu_is_watching+0x12/0xc0 [ 489.127094][T24469] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 489.127114][T24469] ? rcu_is_watching+0x12/0xc0 [ 489.127139][T24469] ? rcu_is_watching+0x12/0xc0 [ 489.127168][T24469] __sys_sendmsg+0x160/0x210 [ 489.127193][T24469] ? __pfx___sys_sendmsg+0x10/0x10 [ 489.127220][T24469] ? trace_hardirqs_off+0x70/0x170 [ 489.127240][T24469] ? rcu_is_watching+0x12/0xc0 [ 489.127262][T24469] do_syscall_64+0x115/0x870 [ 489.127284][T24469] ? clear_bhb_loop+0x40/0x90 [ 489.127302][T24469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.127320][T24469] RIP: 0033:0x7f3964f9ce59 [ 489.127334][T24469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.127350][T24469] RSP: 002b:00007f3965db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.127369][T24469] RAX: ffffffffffffffda RBX: 00007f3965216180 RCX: 00007f3964f9ce59 [ 489.127380][T24469] RDX: 00000000040080c0 RSI: 0000200000000240 RDI: 0000000000000009 [ 489.127391][T24469] RBP: 00007f3965db4090 R08: 0000000000000000 R09: 0000000000000000 [ 489.127402][T24469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.127412][T24469] R13: 00007f3965216218 R14: 00007f3965216180 R15: 00007fff4fafa118 [ 489.127429][T24469] [ 489.852714][ T30] audit: type=1326 audit(1781777747.608:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.2.2179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a119ce59 code=0x7ffc0000 [ 489.879829][ T5753] usb 5-1: selecting invalid altsetting 3 [ 489.885842][ T5753] ttusb2: set interface to alts=3 failed [ 489.919369][T24421] dvb-usb: bulk message failed: -22 (7/0) [ 489.949510][T24421] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 489.986077][ T5753] DVB: Unable to find symbol tda10086_attach() [ 489.998126][T24421] ttusb2: i2c transfer failed. [ 490.021840][ T30] audit: type=1326 audit(1781777747.608:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.2.2179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a119ce59 code=0x7ffc0000 [ 490.058697][ T5753] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 490.289966][ T5753] dvb-usb: bulk message failed: -22 (4/0) [ 490.303641][ T5753] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 490.304758][T24482] syzkaller0: entered promiscuous mode [ 490.330281][T24482] syzkaller0: entered allmulticast mode [ 490.347208][ T5753] dvb-usb: bulk message failed: -22 (5/0) [ 490.511635][ T30] audit: type=1326 audit(1781777747.608:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.2.2179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a119ce59 code=0x7ffc0000 [ 490.552061][ T5753] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 490.587166][ T5753] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 490.660052][ T5753] usb 5-1: USB disconnect, device number 104 [ 490.667880][ T30] audit: type=1326 audit(1781777747.608:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.2.2179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f09a119ce59 code=0x7ffc0000 [ 490.718497][ T5753] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 490.736009][T24492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2185'. [ 491.029959][ T5711] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 491.039599][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 491.039616][ T30] audit: type=1400 audit(1781777749.628:1311): avc: denied { watch watch_reads } for pid=24528 comm="syz.5.2191" path="/" dev="ramfs" ino=53693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 491.164424][ T30] audit: type=1400 audit(1781777749.758:1312): avc: denied { watch watch_reads } for pid=24522 comm="syz.1.2189" path="/455/file1" dev="tmpfs" ino=2438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 491.260599][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 491.262099][T24543] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2194'. [ 491.291936][ T5711] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 491.311022][ T5711] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 491.347250][ T5711] usb 3-1: config 0 interface 0 has no altsetting 0 [ 491.360078][T22727] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 491.379479][ T5711] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 491.413242][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.458763][ T5711] usb 3-1: Product: syz [ 491.519993][T22727] usb 1-1: Using ep0 maxpacket: 8 [ 491.525480][ T5711] usb 3-1: Manufacturer: syz [ 491.563365][ T5711] usb 3-1: SerialNumber: syz [ 491.571799][T22727] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 491.704234][ T5711] usb 3-1: config 0 descriptor?? [ 491.753770][T22727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.957380][T22727] usb 1-1: Product: syz [ 492.040078][T22727] usb 1-1: Manufacturer: syz [ 492.116285][ T30] audit: type=1400 audit(1781777750.679:1313): avc: denied { map } for pid=24555 comm="syz.5.2198" path="socket:[53713]" dev="sockfs" ino=53713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 492.147129][T22727] usb 1-1: SerialNumber: syz [ 492.263320][T22727] usb 1-1: config 0 descriptor?? [ 492.431242][T22727] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 492.443040][ T5711] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 492.453221][T22727] dvb-usb: bulk message failed: -22 (2/0) [ 492.484328][T22727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 492.505002][T22727] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 492.527712][T22727] usb 1-1: media controller created [ 492.573438][T22727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.630998][ T5711] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 492.642341][ T5711] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 492.717812][ T5711] usb 3-1: USB disconnect, device number 99 [ 494.141430][T22727] cxusb: set interface failed [ 494.467355][T22727] dvb-usb: bulk message failed: -22 (1/0) [ 494.962253][ T30] audit: type=1400 audit(1781777753.399:1314): avc: denied { watch } for pid=24607 comm="syz.2.2204" path="/441/file0" dev="tmpfs" ino=2399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 495.039793][ T30] audit: type=1400 audit(1781777753.399:1315): avc: denied { watch_sb } for pid=24607 comm="syz.2.2204" path="/441/file0" dev="tmpfs" ino=2399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 495.117547][ T30] audit: type=1400 audit(1781777753.689:1316): avc: denied { create } for pid=24639 comm="syz.5.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 495.190283][T22727] DVB: Unable to find symbol mt352_attach() [ 495.221506][ T30] audit: type=1400 audit(1781777753.699:1317): avc: denied { sys_admin } for pid=24639 comm="syz.5.2208" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 495.246693][T22727] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 495.430122][ T30] audit: type=1400 audit(1781777754.009:1318): avc: denied { read } for pid=24646 comm="syz.5.2209" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 495.439739][T22727] rc_core: IR keymap rc-dvico-portable not found [ 495.504505][ T30] audit: type=1400 audit(1781777754.069:1319): avc: denied { write } for pid=24653 comm="syz.2.2211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 495.523935][T22727] Registered IR keymap rc-empty [ 495.524344][T22727] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 495.589753][T22727] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input47 [ 495.604496][ T30] audit: type=1400 audit(1781777754.079:1320): avc: denied { setattr } for pid=24653 comm="syz.2.2211" name="NFC_LLCP" dev="sockfs" ino=52824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 495.643007][T22727] dvb-usb: schedule remote query interval to 100 msecs. [ 495.662592][T22727] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 495.680098][ T5711] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 495.724067][T22727] usb 1-1: USB disconnect, device number 92 [ 495.741594][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'. [ 495.788723][T22727] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 495.820044][ T5613] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 495.839653][ T5711] usb 6-1: Using ep0 maxpacket: 16 [ 495.852095][ T5711] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 495.871652][ T5711] usb 6-1: config 0 has no interface number 0 [ 495.889656][ T5711] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 495.910478][ T5711] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 495.933089][ T5711] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 495.951153][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.969828][ T5711] usb 6-1: Product: syz [ 495.975530][ T5711] usb 6-1: Manufacturer: syz [ 495.990012][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 495.995192][ T5711] usb 6-1: SerialNumber: syz [ 496.002474][ T5613] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 496.013041][ T5711] usb 6-1: config 0 descriptor?? [ 496.029708][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.037902][T24649] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 496.045071][T24649] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 496.059894][ T5613] usb 3-1: Product: syz [ 496.069624][ T5613] usb 3-1: Manufacturer: syz [ 496.080546][ T5613] usb 3-1: SerialNumber: syz [ 496.081152][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.092634][ T5613] usb 3-1: config 0 descriptor?? [ 496.111627][ T5613] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 496.119671][T22727] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 496.130598][ T5613] dvb-usb: bulk message failed: -22 (4/0) [ 496.149903][ T5613] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 496.169687][ T5613] dvb-usb: bulk message failed: -22 (5/0) [ 496.182018][ T5613] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 496.212261][ T5613] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 496.221657][ T1236] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 496.246648][ T5613] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 496.257371][T24649] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 496.264621][T24649] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 496.279687][ T5613] usb 3-1: media controller created [ 496.291260][T22727] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 496.304419][ T5613] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.313292][T22727] usb 1-1: config 1 has no interface number 0 [ 496.319421][T22727] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 496.344322][ T5613] usb 3-1: selecting invalid altsetting 3 [ 496.350448][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 496.350464][ T30] audit: type=1400 audit(1781777754.939:1322): avc: denied { mounton } for pid=24662 comm="syz.2.2212" path="/proc/1424/task" dev="proc" ino=52882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 496.381947][T22727] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x83 has invalid maxpacket 53223, setting to 1024 [ 496.393359][ T5613] ttusb2: set interface to alts=3 failed [ 496.399425][T22727] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 496.421167][ T1236] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 496.429193][ T30] audit: type=1400 audit(1781777754.979:1323): avc: denied { associate } for pid=24706 comm="syz.2.2212" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 496.453739][T22727] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 128, changing to 11 [ 496.453867][ T1236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 496.491124][ T5613] DVB: Unable to find symbol tda10086_attach() [ 496.503905][ T5711] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 496.514943][ T5613] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 496.525185][T22727] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 496.537204][T22727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.546968][ T5613] dvb-usb: bulk message failed: -22 (4/0) [ 496.552885][ T5711] asix 6-1:0.34: probe with driver asix failed with error -61 [ 496.559670][ T30] audit: type=1400 audit(1781777755.099:1324): avc: denied { connect } for pid=24662 comm="syz.2.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 496.561478][ T1236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 496.601464][ T30] audit: type=1400 audit(1781777755.099:1325): avc: denied { write } for pid=24662 comm="syz.2.2212" path="socket:[52881]" dev="sockfs" ino=52881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 496.670771][ T5613] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 496.671020][T24663] dvb-usb: bulk message failed: -22 (7/0) [ 496.681635][T22727] usb 1-1: Product: syz [ 496.716011][T24649] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2209'. [ 496.725198][T24649] nbd: must specify a size in bytes for the device [ 496.735606][T22727] usb 1-1: Manufacturer: syz [ 496.739254][T24663] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 496.740271][ T5613] dvb-usb: bulk message failed: -22 (5/0) [ 496.740287][ T5613] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 496.740327][ T5613] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 496.741994][ T5613] usb 3-1: USB disconnect, device number 100 [ 496.779222][T24663] ttusb2: i2c transfer failed. [ 496.781856][T22727] usb 1-1: SerialNumber: syz [ 496.799146][ T1236] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 496.808472][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.817044][ T1236] usb 2-1: Product: syz [ 496.830888][T24634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 496.846906][T24634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 496.887640][T24718] block device autoloading is deprecated and will be removed. [ 496.953169][ T1236] usb 2-1: Manufacturer: syz [ 497.084881][ T1236] usb 2-1: SerialNumber: syz [ 497.102631][ T1236] usb 2-1: config 0 descriptor?? [ 497.290058][T24634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 497.297463][T24634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 497.305827][T22727] usb 1-1: No status endpoint found [ 497.321933][T24694] netlink: 'syz.1.2216': attribute type 21 has an invalid length. [ 497.330099][T24694] netlink: 'syz.1.2216': attribute type 6 has an invalid length. [ 497.337891][T24694] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2216'. [ 497.526783][ T10] usb 1-1: USB disconnect, device number 93 [ 497.656355][ T5613] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 497.759630][T22727] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 497.911245][T22727] usb 5-1: config index 0 descriptor too short (expected 33867, got 68) [ 497.919805][T22727] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 497.930311][T22727] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 497.944184][T22727] usb 5-1: config index 1 descriptor too short (expected 33867, got 68) [ 497.952948][T22727] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 497.963202][T22727] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 498.009562][ T5613] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 498.211015][ T5613] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 498.222660][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 498.234290][ T5613] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 498.246045][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 498.257485][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 498.279781][ T24] usb 6-1: USB disconnect, device number 14 [ 498.298770][ T5613] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 498.309762][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.317891][ T5613] usb 3-1: Product: syz [ 498.324849][ T5613] usb 3-1: Manufacturer: syz [ 498.331017][ T5613] usb 3-1: SerialNumber: syz [ 498.336731][ T5613] usb 3-1: config 0 descriptor?? [ 498.344556][ T5613] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 498.419563][ T5711] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 498.569729][ T5711] usb 1-1: Using ep0 maxpacket: 8 [ 498.582944][ T5711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.611253][ T5711] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 498.639587][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.659018][ T5711] usb 1-1: config 0 descriptor?? [ 498.669465][ T5711] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 498.750556][ T5711] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 498.758566][ T5711] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 498.765149][ T5711] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 498.917140][ T5711] usb 3-1: USB disconnect, device number 101 [ 499.298181][ T30] audit: type=1400 audit(1781777757.879:1326): avc: denied { read write } for pid=24776 comm="syz.0.2222" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 499.538044][ T30] audit: type=1400 audit(1781777757.879:1327): avc: denied { open } for pid=24776 comm="syz.0.2222" path="/dev/ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 500.769985][T24825] siw: device registration error -23 [ 500.791206][ T30] audit: type=1804 audit(1781777759.389:1328): pid=24825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2226" name="bus" dev="ramfs" ino=52952 res=1 errno=0 [ 501.047730][T22727] usb 5-1: string descriptor 0 read error: -71 [ 501.069134][T22727] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 501.122388][T22727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.162722][T22727] usb 5-1: can't set config #1, error -71 [ 501.183093][T22727] usb 5-1: USB disconnect, device number 105 [ 501.227665][T24843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2228'. [ 501.295344][ T30] audit: type=1400 audit(1781777759.889:1329): avc: denied { read write } for pid=24859 comm="syz.4.2231" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 501.322138][ T30] audit: type=1400 audit(1781777759.889:1330): avc: denied { open } for pid=24859 comm="syz.4.2231" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 501.462601][ T30] audit: type=1400 audit(1781777760.059:1331): avc: denied { ioctl } for pid=24859 comm="syz.4.2231" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 501.499357][ T5711] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 501.649314][ T5711] usb 6-1: Using ep0 maxpacket: 32 [ 501.655761][ T5711] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 501.665979][ T5711] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 501.675962][ T5711] usb 6-1: config 0 interface 0 has no altsetting 0 [ 501.684407][ T5711] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 501.693538][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.701613][ T5711] usb 6-1: Product: syz [ 501.706153][ T5711] usb 6-1: Manufacturer: syz [ 501.711174][ T5711] usb 6-1: SerialNumber: syz [ 501.717210][ T5711] usb 6-1: config 0 descriptor?? [ 502.103786][ T30] audit: type=1400 audit(1781777760.699:1332): avc: denied { listen } for pid=24873 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 502.125543][ T30] audit: type=1400 audit(1781777760.719:1333): avc: denied { accept } for pid=24873 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 502.137456][ T5711] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 502.166431][ T24] usb 1-1: USB disconnect, device number 94 [ 502.176362][T24875] FAULT_INJECTION: forcing a failure. [ 502.176362][T24875] name failslab, interval 1, probability 0, space 0, times 0 [ 502.191664][ T30] audit: type=1400 audit(1781777760.769:1334): avc: denied { write } for pid=24873 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 502.220140][T24875] CPU: 0 UID: 0 PID: 24875 Comm: syz.2.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.220169][T24875] Tainted: [L]=SOFTLOCKUP [ 502.220175][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 502.220185][T24875] Call Trace: [ 502.220191][T24875] [ 502.220197][T24875] dump_stack_lvl+0x100/0x190 [ 502.220222][T24875] should_fail_ex.cold+0x5/0xa [ 502.220241][T24875] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 502.220262][T24875] should_failslab+0xc2/0x120 [ 502.220286][T24875] __kmalloc_cache_noprof+0x7a/0x6e0 [ 502.220304][T24875] ? p9_client_create+0xaf/0xd40 [ 502.220330][T24875] p9_client_create+0xaf/0xd40 [ 502.220355][T24875] ? __pfx_p9_client_create+0x10/0x10 [ 502.220382][T24875] ? lockdep_init_map_type+0x5c/0x250 [ 502.220399][T24875] ? __raw_spin_lock_init+0x3a/0x110 [ 502.220421][T24875] v9fs_session_init+0x3c/0xd20 [ 502.220443][T24875] ? kasan_save_track+0x14/0x30 [ 502.220469][T24875] v9fs_get_tree+0xb8/0xb50 [ 502.220492][T24875] ? rcu_is_watching+0x12/0xc0 [ 502.220514][T24875] ? __pfx_v9fs_get_tree+0x10/0x10 [ 502.220539][T24875] ? bpf_lsm_capable+0x9/0x10 [ 502.220562][T24875] ? security_capable+0x80/0x260 [ 502.220581][T24875] vfs_get_tree+0x92/0x320 [ 502.220604][T24875] path_mount+0x7d0/0x23d0 [ 502.220626][T24875] ? __pfx_path_mount+0x10/0x10 [ 502.220652][T24875] ? putname+0xb1/0x110 [ 502.220669][T24875] ? kmem_cache_free+0x127/0x6b0 [ 502.220691][T24875] ? __x64_sys_mount+0x293/0x310 [ 502.220710][T24875] __x64_sys_mount+0x293/0x310 [ 502.220730][T24875] ? __pfx___x64_sys_mount+0x10/0x10 [ 502.220751][T24875] ? rcu_is_watching+0x12/0xc0 [ 502.220773][T24875] do_syscall_64+0x115/0x870 [ 502.220793][T24875] ? clear_bhb_loop+0x40/0x90 [ 502.220812][T24875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.220829][T24875] RIP: 0033:0x7f09a119ce59 [ 502.220844][T24875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.220860][T24875] RSP: 002b:00007f09a1f8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 502.220877][T24875] RAX: ffffffffffffffda RBX: 00007f09a1416090 RCX: 00007f09a119ce59 [ 502.220889][T24875] RDX: 0000200000000e40 RSI: 0000200000000040 RDI: 0000000000000000 [ 502.220899][T24875] RBP: 00007f09a1f8f090 R08: 0000200000000300 R09: 0000000000000000 [ 502.220910][T24875] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000002 [ 502.220921][T24875] R13: 00007f09a1416128 R14: 00007f09a1416090 R15: 00007fffe2164718 [ 502.220937][T24875] [ 502.807593][T24888] wg1 speed is unknown, defaulting to 1000 [ 502.826157][ T30] audit: type=1400 audit(1781777761.419:1335): avc: denied { mount } for pid=24903 comm="syz.0.2238" name="/" dev="hugetlbfs" ino=53046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 502.855082][T24854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.874653][T24854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.933296][ T30] audit: type=1326 audit(1781777761.529:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24903 comm="syz.0.2238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff16359ce59 code=0x0 [ 503.205485][T24931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.218710][T24931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.359906][ T5711] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 503.361540][ T30] audit: type=1400 audit(1781777761.949:1337): avc: denied { getopt } for pid=24939 comm="syz.4.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 503.379867][ T5711] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 503.439555][ T24] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 503.526722][ T5711] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 503.649366][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 503.659806][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 503.668641][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 503.679274][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 503.698755][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 503.721031][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.734491][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 503.744042][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.905383][ T30] audit: type=1400 audit(1781777762.499:1338): avc: denied { getopt } for pid=24957 comm="syz.4.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 503.995440][ T24] usb 3-1: usb_control_msg returned -32 [ 504.008482][ T30] audit: type=1400 audit(1781777762.579:1339): avc: denied { read } for pid=24957 comm="syz.4.2244" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 504.031943][ T24] usbtmc 3-1:16.0: can't read capabilities [ 504.310844][ T10] usb 6-1: USB disconnect, device number 15 [ 504.406211][T24986] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2246'. [ 504.438278][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.466826][T24993] xt_nfacct: accounting object `syz1' does not exist [ 504.476404][ T5795] usb 3-1: USB disconnect, device number 102 [ 504.481306][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.509189][T24986] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24986 comm=syz.5.2246 [ 504.848276][T24980] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 505.192037][T25031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 505.309090][ T5795] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 505.332188][ T30] audit: type=1400 audit(1781777763.919:1340): avc: denied { create } for pid=25022 comm="syz.4.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.579107][ T5795] usb 1-1: Using ep0 maxpacket: 8 [ 505.593070][ T5795] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 505.675202][T25040] No source specified [ 505.924668][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.967159][ T5795] usb 1-1: Product: syz [ 505.981469][ T5795] usb 1-1: Manufacturer: syz [ 505.998077][ T5795] usb 1-1: SerialNumber: syz [ 506.025027][ T5795] usb 1-1: config 0 descriptor?? [ 506.045919][ T5795] gspca_main: se401-2.14.0 probing 047d:5003 [ 506.446279][T24992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.589487][T25053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.619672][T24992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.846226][ T5795] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 506.865947][ T5795] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 506.895164][ T5795] usb 1-1: USB disconnect, device number 95 [ 507.599548][ T1236] iguanair 2-1:0.0: failed to get version [ 507.842694][ T1236] iguanair 2-1:0.0: probe with driver iguanair failed with error -110 [ 507.897232][ T1236] usb 2-1: USB disconnect, device number 84 [ 508.069261][T25084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.100944][T25085] netlink: 'syz.0.2260': attribute type 14 has an invalid length. [ 508.120684][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 508.120700][ T30] audit: type=1400 audit(1781777766.709:1342): avc: denied { getopt } for pid=25080 comm="syz.0.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 508.223775][ T30] audit: type=1400 audit(1781777766.749:1343): avc: denied { map } for pid=25083 comm="syz.5.2262" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 508.509115][ T5795] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 508.644211][ T30] audit: type=1400 audit(1781777767.239:1344): avc: denied { create } for pid=25121 comm="syz.0.2267" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 508.665158][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 508.668992][ T5795] usb 6-1: Using ep0 maxpacket: 8 [ 508.700552][ T5795] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 508.741172][ T5795] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 508.759598][ T5795] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 508.781747][ T5795] usb 6-1: Product: syz [ 508.791097][ T5795] usb 6-1: Manufacturer: syz [ 508.804813][ T5795] usb 6-1: SerialNumber: syz [ 508.825254][T25125] kAFS: unable to lookup cell '' [ 508.839959][ T24] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 508.893854][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.914464][T25129] 9pnet_fd: Insufficient options for proto=fd [ 509.054130][ T24] usb 5-1: Product: syz [ 509.064863][ T24] usb 5-1: Manufacturer: syz [ 509.181870][ T5795] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 509.219129][ T5795] visor 6-1:1.0: probe with driver visor failed with error -71 [ 509.230438][T25131] pim6reg: entered allmulticast mode [ 509.240623][ T24] usb 5-1: SerialNumber: syz [ 509.256867][T25125] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 509.272274][ T5795] usb 6-1: USB disconnect, device number 16 [ 509.273328][ T24] usb 5-1: config 0 descriptor?? [ 509.295244][T25133] team0: entered allmulticast mode [ 509.308984][T25133] team_slave_0: entered allmulticast mode [ 509.577025][T25133] team_slave_1: entered allmulticast mode [ 509.590198][T25140] team0: left allmulticast mode [ 509.595318][T25140] team_slave_0: left allmulticast mode [ 509.606814][ T24] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 509.614377][T25151] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 509.623173][T25140] team_slave_1: left allmulticast mode [ 509.630102][T25140] pim6reg: left allmulticast mode [ 509.854991][T25125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.871418][T25138] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 509.945536][T25125] team0: Port device netdevsim1 added [ 509.967951][T25151] team0: Port device netdevsim1 removed [ 509.985014][T25151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.233426][T25162] netlink: 'syz.1.2270': attribute type 7 has an invalid length. [ 510.248447][T25162] netlink: 'syz.1.2270': attribute type 5 has an invalid length. [ 510.256536][T25162] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2270'. [ 510.538772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 510.548770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 510.709746][ T24] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 510.733518][T25151] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 510.739670][ T24] sq905c 5-1:0.0: Reading version command failed [ 510.761979][T25161] wg1 speed is unknown, defaulting to 1000 [ 510.841915][ T24] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 511.062732][ T30] audit: type=1400 audit(1781777769.660:1345): avc: denied { accept } for pid=25192 comm="syz.5.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 511.181373][ T30] audit: type=1326 audit(1781777769.780:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25205 comm="syz.2.2276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09a119ce59 code=0x0 [ 511.300947][ T30] audit: type=1400 audit(1781777769.900:1347): avc: denied { write } for pid=25217 comm="syz.5.2277" name="usbmon2" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 511.350203][ T30] audit: type=1400 audit(1781777769.940:1348): avc: denied { unlink } for pid=5602 comm="syz-executor" name="file0" dev="tmpfs" ino=2465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 511.403417][T25223] FAULT_INJECTION: forcing a failure. [ 511.403417][T25223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.440542][T25223] CPU: 1 UID: 0 PID: 25223 Comm: syz.0.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.440572][T25223] Tainted: [L]=SOFTLOCKUP [ 511.440578][T25223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.440589][T25223] Call Trace: [ 511.440595][T25223] [ 511.440602][T25223] dump_stack_lvl+0x100/0x190 [ 511.440627][T25223] should_fail_ex.cold+0x5/0xa [ 511.440649][T25223] strncpy_from_user+0x3b/0x2d0 [ 511.440676][T25223] ? get_pid_task+0x106/0x250 [ 511.440698][T25223] path_setxattrat+0x127/0x3b0 [ 511.440726][T25223] ? __pfx_path_setxattrat+0x10/0x10 [ 511.440745][T25223] ? preempt_count_add+0x76/0x150 [ 511.440762][T25223] ? ksys_write+0x190/0x250 [ 511.440786][T25223] ? rcu_is_watching+0x12/0xc0 [ 511.440808][T25223] ? ksys_write+0x190/0x250 [ 511.440837][T25223] ? fput+0x79/0x100 [ 511.440855][T25223] ? ksys_write+0x1ac/0x250 [ 511.440879][T25223] ? __pfx_ksys_write+0x10/0x10 [ 511.440904][T25223] __x64_sys_fsetxattr+0xc5/0x140 [ 511.440923][T25223] ? trace_irq_enable.constprop.0+0x122/0x160 [ 511.440944][T25223] do_syscall_64+0x115/0x870 [ 511.440965][T25223] ? clear_bhb_loop+0x40/0x90 [ 511.440984][T25223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.441002][T25223] RIP: 0033:0x7ff16359ce59 [ 511.441016][T25223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.441032][T25223] RSP: 002b:00007ff1643cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 511.441051][T25223] RAX: ffffffffffffffda RBX: 00007ff163815fa0 RCX: 00007ff16359ce59 [ 511.441063][T25223] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 511.441073][T25223] RBP: 00007ff1643cd090 R08: 0000000000000001 R09: 0000000000000000 [ 511.441083][T25223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.441093][T25223] R13: 00007ff163816038 R14: 00007ff163815fa0 R15: 00007fffbe6122e8 [ 511.441109][T25223] [ 511.644334][ T10] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 511.841992][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 511.850319][ T10] usb 3-1: config 0 has no interface number 0 [ 511.862494][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 511.897846][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 511.909376][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.927985][ T10] usb 3-1: Product: syz [ 511.962487][ T10] usb 3-1: Manufacturer: syz [ 511.973250][ T10] usb 3-1: SerialNumber: syz [ 511.992114][ T10] usb 3-1: config 0 descriptor?? [ 512.230225][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 512.275540][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 512.303194][ T10] usb 3-1: USB disconnect, device number 103 [ 512.478839][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 512.487669][T25265] siw: device registration error -23 [ 512.573909][T25265] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2285'. [ 512.668262][ T30] audit: type=1804 audit(1781777771.160:1349): pid=25265 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2285" name="bus" dev="ramfs" ino=55511 res=1 errno=0 [ 512.832620][ T10] usb 5-1: USB disconnect, device number 106 [ 512.838732][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 512.846437][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.862268][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 512.874089][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 512.886037][ T24] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 512.899693][ T24] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 512.907987][ T24] usb 2-1: Product: syz [ 512.912607][ T24] usb 2-1: Manufacturer: syz [ 512.917645][ T24] usb 2-1: SerialNumber: syz [ 512.926947][ T24] usb 2-1: config 0 descriptor?? [ 512.944430][ T24] imon_raw 2-1:0.0: IR endpoint missing [ 512.954922][ T30] audit: type=1404 audit(1781777771.550:1350): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 512.995384][ T30] audit: type=1400 audit(1781777771.550:1351): avc: denied { read write } for pid=25304 comm="syz.4.2290" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 513.052679][T25309] tipc: Enabling of bearer rejected, failed to enable media [ 513.078960][T22727] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 513.134719][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 513.134752][ T30] audit: type=1400 audit(1781777771.720:1364): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.204905][ T24] usb 2-1: USB disconnect, device number 85 [ 513.241754][T22727] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 513.264489][T22727] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.278276][ T30] audit: type=1400 audit(1781777771.720:1365): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.284465][T25335] netlink: 'syz.5.2292': attribute type 1 has an invalid length. [ 513.304031][T22727] usb 1-1: config 0 has no interface number 0 [ 513.316878][T25335] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2292'. [ 513.318232][T22727] usb 1-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.327633][T25335] netlink: 658 bytes leftover after parsing attributes in process `syz.5.2292'. [ 513.341615][ T30] audit: type=1400 audit(1781777771.720:1366): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.348406][T25335] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2292'. [ 513.374114][ T30] audit: type=1400 audit(1781777771.730:1367): avc: denied { recv } for pid=25320 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.1.76 dest=56628 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 513.408630][ T2048] block nbd0: Possible stuck request ffff888028b25080: control (read@0,1024B). Runtime 150 seconds [ 513.420280][ T30] audit: type=1400 audit(1781777771.800:1368): avc: denied { ioctl } for pid=25323 comm="syz.2.2291" path="socket:[55566]" dev="sockfs" ino=55566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 513.448482][ T30] audit: type=1400 audit(1781777771.860:1369): avc: denied { create } for pid=25334 comm="syz.5.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 513.469387][T22727] usb 1-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 513.478447][T22727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.486686][T22727] usb 1-1: Product: syz [ 513.490928][T22727] usb 1-1: Manufacturer: syz [ 513.495552][T22727] usb 1-1: SerialNumber: syz [ 513.501432][T22727] usb 1-1: config 0 descriptor?? [ 513.511073][T22727] vmk80xx 1-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 513.520567][ T30] audit: type=1400 audit(1781777771.860:1370): avc: denied { read } for pid=25334 comm="syz.5.2292" name="v4l-subdev0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 513.586324][ T30] audit: type=1400 audit(1781777771.860:1371): avc: denied { open } for pid=25334 comm="syz.5.2292" path="/dev/v4l-subdev0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 513.810675][ T30] audit: type=1400 audit(1781777771.860:1372): avc: denied { write } for pid=25334 comm="syz.5.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 513.830707][ T30] audit: type=1400 audit(1781777771.860:1373): avc: denied { connect } for pid=25334 comm="syz.5.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 513.896056][T22727] usb 1-1: USB disconnect, device number 96 [ 514.300105][T25365] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 514.848845][T22727] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 514.958327][T25388] kvm: pic: non byte write [ 515.013224][T22727] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 515.030456][T22727] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 515.056703][T22727] usb 1-1: config 0 interface 0 has no altsetting 0 [ 515.067137][T22727] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 515.094044][T22727] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 515.110560][T22727] usb 1-1: Product: syz [ 515.114765][T22727] usb 1-1: Manufacturer: syz [ 515.120307][T22727] usb 1-1: SerialNumber: syz [ 515.126768][T22727] usb 1-1: config 0 descriptor?? [ 515.136203][T22727] hub 1-1:0.0: bad descriptor, ignoring hub [ 515.144155][T22727] hub 1-1:0.0: probe with driver hub failed with error -5 [ 515.153050][T22727] usb 1-1: selecting invalid altsetting 0 [ 515.338600][ T5711] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 515.348555][ T5753] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 515.499800][ T5711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.511670][ T5711] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 515.518511][ T5753] usb 3-1: Using ep0 maxpacket: 16 [ 515.520867][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.528850][ T5753] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.533957][ T5711] usb 2-1: Product: syz [ 515.544247][ T5753] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 515.558931][ T5711] usb 2-1: Manufacturer: syz [ 515.559242][ T5753] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 515.576498][ T5711] usb 2-1: SerialNumber: syz [ 515.578363][ T5753] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 515.591453][ T5711] usb 2-1: config 0 descriptor?? [ 515.603097][ T5711] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 515.605061][ T5753] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 515.620006][ T5753] usb 3-1: Manufacturer: syz [ 515.629167][ T5753] usb 3-1: config 0 descriptor?? [ 515.721894][T25423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.734540][T25423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.799198][ T5711] usb 1-1: USB disconnect, device number 97 [ 516.012494][T11822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.021412][T11822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.236018][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 517.110181][ T5753] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 517.288436][ T5711] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 517.297908][ T5753] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 517.308254][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.317636][ T5753] usb 5-1: config 0 descriptor?? [ 517.328322][ T5753] cp210x 5-1:0.0: cp210x converter detected [ 517.452673][ T5711] usb 1-1: unable to get BOS descriptor or descriptor too short [ 517.461605][ T5711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.471861][ T5711] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 517.481654][ T5711] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 177 [ 517.493118][ T5711] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 517.502248][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.510304][ T5711] usb 1-1: Product: syz [ 517.514570][ T5711] usb 1-1: Manufacturer: syz [ 517.519215][ T5711] usb 1-1: SerialNumber: syz [ 517.524888][ T5711] usb 1-1: config 0 descriptor?? [ 517.534214][T25513] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 517.541792][T25513] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 517.550048][ C1] usb 1-1: NFC: Urb failure (status -71) [ 517.555934][ C1] usb 1-1: NFC: Urb failure (status -71) [ 517.562124][ T5711] usb 1-1: NFC: Unable to get FW version [ 517.567905][ T5711] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -71 [ 517.734721][ T5753] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 517.771180][ T5795] usb 1-1: USB disconnect, device number 98 [ 517.829853][T25508] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 517.854970][T25508] netlink: 'syz.4.2311': attribute type 12 has an invalid length. [ 517.862981][T25508] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2311'. [ 517.902456][ T5753] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 517.910800][ T5753] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 517.920815][ T5753] usb 5-1: cp210x converter now attached to ttyUSB0 [ 518.008465][ T5795] usb 3-1: USB disconnect, device number 104 [ 518.143873][ T5711] usb 2-1: USB disconnect, device number 86 [ 518.161426][ T5753] usb 5-1: USB disconnect, device number 107 [ 518.219124][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 518.219139][ T30] audit: type=1400 audit(1781777776.820:1473): avc: denied { write } for pid=25598 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.252803][ T5753] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 518.295781][ T5753] cp210x 5-1:0.0: device disconnected [ 518.626527][T25629] fuse: Unknown parameter 'use_id' [ 518.650791][ T30] audit: type=1800 audit(1781777777.250:1474): pid=25629 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2317" name="file0" dev="overlay" ino=2569 res=0 errno=0 [ 518.758571][ T30] audit: type=1400 audit(1781777777.350:1475): avc: denied { mounton } for pid=25633 comm="syz.1.2318" path="/syzcgroup/unified/syz1" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 518.838673][ T5711] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 518.855091][ T30] audit: type=1400 audit(1781777777.360:1476): avc: denied { mount } for pid=25633 comm="syz.1.2318" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 519.001433][ T5711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 519.030501][T25648] tipc: Started in network mode [ 519.045168][ T5711] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 519.068129][T25648] tipc: Node identity de33fed1434b, cluster identity 4711 [ 519.089816][ T30] audit: type=1400 audit(1781777777.680:1477): avc: denied { write } for pid=25620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.108991][ T5711] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 519.115988][T25648] tipc: Enabled bearer , priority 0 [ 519.151647][T25656] syzkaller0: entered promiscuous mode [ 519.161839][T25656] syzkaller0: entered allmulticast mode [ 519.171617][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 519.185663][T25594] kexec: Could not allocate control_code_buffer [ 519.203252][T25648] tipc: Resetting bearer [ 519.217226][ T5711] usb 1-1: SerialNumber: syz [ 519.247859][T25622] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 519.253841][ T30] audit: type=1400 audit(1781777777.840:1478): avc: denied { write } for pid=25662 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.296062][ T5711] usb 1-1: No union descriptors [ 519.338315][T22727] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 519.371697][T25647] tipc: Resetting bearer [ 519.386152][T25647] tipc: Disabling bearer [ 519.508626][T25622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.581844][ T30] audit: type=1400 audit(1781777778.180:1479): avc: denied { write } for pid=25674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.608875][T25622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.611720][ T5753] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 519.628593][T22727] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 519.640650][ T5711] usb 1-1: USB disconnect, device number 99 [ 519.647899][T22727] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.701541][T22727] usb 5-1: config 0 interface 0 has no altsetting 0 [ 519.726651][T22727] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 519.731083][ T30] audit: type=1400 audit(1781777778.320:1480): avc: denied { write } for pid=25699 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.747998][T22727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.794177][ T30] audit: type=1400 audit(1781777778.390:1481): avc: denied { map } for pid=25683 comm="syz.5.2323" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 519.823111][ T30] audit: type=1400 audit(1781777778.390:1482): avc: denied { read write } for pid=25683 comm="syz.5.2323" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 519.849253][ T5753] usb 3-1: Using ep0 maxpacket: 32 [ 519.865936][ T5753] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 519.867141][T22727] usb 5-1: config 0 descriptor?? [ 519.880768][ T5753] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 519.880797][ T5753] usb 3-1: config 0 interface 0 has no altsetting 0 [ 519.882285][ T5753] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 519.937121][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.955382][ T5753] usb 3-1: Product: syz [ 519.962023][ T5753] usb 3-1: Manufacturer: syz [ 519.972842][ T5753] usb 3-1: SerialNumber: syz [ 519.980852][T25655] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 519.989620][ T5753] usb 3-1: config 0 descriptor?? [ 520.259077][T25710] Invalid ELF header len 16 [ 520.411130][ T5753] gs_usb 3-1:0.0: Configuring for 246 interfaces [ 520.568275][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 520.618666][ T5753] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 520.637091][ T5753] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 520.648255][ T5711] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 520.708333][ T10] usb 2-1: device descriptor read/64, error -71 [ 520.780474][T22727] usbhid 5-1:0.0: can't add hid device: -71 [ 520.793959][T22727] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 520.802967][ T5711] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 520.828784][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.832595][ T5753] usb 3-1: USB disconnect, device number 105 [ 520.842387][T22727] usb 5-1: USB disconnect, device number 108 [ 520.862903][ T5711] usb 1-1: config 0 descriptor?? [ 520.883827][ T5711] cp210x 1-1:0.0: cp210x converter detected [ 520.968235][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 521.007259][T25751] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2327'. [ 521.108233][ T10] usb 2-1: device descriptor read/64, error -71 [ 521.218515][ T10] usb usb2-port1: attempt power cycle [ 521.248204][ T5795] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 521.284585][ T5711] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 521.292604][ T5711] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 521.300771][ T5711] usb 1-1: cp210x converter now attached to ttyUSB0 [ 521.340457][T25762] binder: 25761:25762 unknown command 0 [ 521.346028][T25762] binder: 25761:25762 ioctl c0306201 200000000080 returned -22 [ 521.355742][T25762] netlink: 'syz.4.2328': attribute type 11 has an invalid length. [ 521.399624][ T5795] usb 6-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 521.410522][ T5795] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.420940][ T5795] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 521.430779][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.442801][ T5795] usb 6-1: Product: syz [ 521.450378][ T5795] usb 6-1: Manufacturer: syz [ 521.455038][ T5795] usb 6-1: SerialNumber: syz [ 521.467285][ T5795] usb 6-1: 0:1 : does not exist [ 521.495840][T25719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2326'. [ 521.506820][T23566] usb 1-1: USB disconnect, device number 100 [ 521.514724][T23566] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 521.532999][T23566] cp210x 1-1:0.0: device disconnected [ 521.558200][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 521.579645][ T10] usb 2-1: device descriptor read/8, error -71 [ 521.618409][ T5753] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 521.666840][ T5795] usb 6-1: 3:0: failed to get current value for ch 0 (-32) [ 521.677086][ T5795] usb 6-1: unit 62 not found! [ 521.768173][ T5753] usb 5-1: Using ep0 maxpacket: 16 [ 521.774672][ T5753] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 521.785980][ T5753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 521.797510][ T5753] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1E, changing to 0xE [ 521.812238][ T5753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 47046, setting to 1024 [ 521.823424][ T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 521.831148][ T5753] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 521.841341][ T5753] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.855133][ T5753] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 521.864227][ T5753] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 521.872348][ T5753] usb 5-1: Manufacturer: syz [ 521.877175][ T10] usb 2-1: device descriptor read/8, error -71 [ 521.893348][ T5753] usb 5-1: config 0 descriptor?? [ 521.903174][ T5795] usb 6-1: USB disconnect, device number 17 [ 521.917283][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.008987][ T10] usb usb2-port1: unable to enumerate USB device [ 522.158225][ T5753] rc_core: IR keymap rc-hauppauge not found [ 522.166853][ T5753] Registered IR keymap rc-empty [ 522.171997][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.208390][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.248613][ T5753] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 522.269750][ T5753] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input51 [ 522.299832][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.328608][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.368369][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.402087][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.499003][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.520149][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.570901][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.599305][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.654542][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.857209][T25826] cgroup: Invalid name [ 522.918378][ T5753] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 522.939010][ T5753] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 522.948978][ T5753] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 522.969805][ T5753] usb 5-1: USB disconnect, device number 109 [ 523.124493][T25809] kexec: Could not allocate control_code_buffer [ 523.275556][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 523.275575][ T30] audit: type=1400 audit(1781777781.870:1506): avc: denied { create } for pid=25851 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 523.477176][ T30] audit: type=1400 audit(1781777782.070:1507): avc: denied { create } for pid=25851 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 523.499033][ T30] audit: type=1400 audit(1781777782.070:1508): avc: denied { bind } for pid=25851 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 523.676535][ T30] audit: type=1400 audit(1781777782.070:1509): avc: denied { listen } for pid=25851 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 523.728054][ T5753] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 523.734308][T25870] tipc: Enabled bearer , priority 0 [ 523.743286][ T30] audit: type=1400 audit(1781777782.070:1510): avc: denied { accept } for pid=25851 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 523.769723][T25870] syzkaller0: entered promiscuous mode [ 523.779666][T25870] syzkaller0: entered allmulticast mode [ 523.791799][ T30] audit: type=1400 audit(1781777782.250:1511): avc: denied { unmount } for pid=22354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 523.865663][T25870] syzkaller0: mtu greater than device maximum [ 523.872443][T25868] tipc: Resetting bearer [ 523.899510][T25868] tipc: Disabling bearer [ 523.921974][ T5753] usb 1-1: Using ep0 maxpacket: 32 [ 523.932109][ T5753] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 523.940875][ T5753] usb 1-1: config 0 has no interface number 0 [ 523.947021][ T5753] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.958286][ T5753] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 523.969069][ T5753] usb 1-1: config 0 interface 85 has no altsetting 0 [ 523.978126][ T5753] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 523.987571][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.996576][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 524.004540][ T5753] usb 1-1: Product: syz [ 524.010125][ T5753] usb 1-1: Manufacturer: syz [ 524.015309][ T5753] usb 1-1: SerialNumber: syz [ 524.021173][ T5753] usb 1-1: config 0 descriptor?? [ 524.167633][ T30] audit: type=1400 audit(1781777782.760:1512): avc: denied { read write } for pid=25888 comm="syz.2.2344" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 524.197327][ T30] audit: type=1400 audit(1781777782.760:1513): avc: denied { open } for pid=25888 comm="syz.2.2344" path="/dev/ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 524.221286][ T30] audit: type=1400 audit(1781777782.790:1514): avc: denied { ioctl } for pid=25888 comm="syz.2.2344" path="/dev/ppp" dev="devtmpfs" ino=714 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 524.231248][ T10] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 524.270821][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.280915][ T10] usb 2-1: Product: syz [ 524.285212][ T10] usb 2-1: Manufacturer: syz [ 524.293519][ T10] usb 2-1: SerialNumber: syz [ 524.302701][ T10] usb 2-1: config 0 descriptor?? [ 524.313194][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 524.475765][ T5753] appletouch 1-1:0.85: Failed to request geyser raw mode [ 524.493803][ T5753] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 524.511801][ T5753] usb 1-1: USB disconnect, device number 101 [ 524.634783][ T30] audit: type=1400 audit(1781777783.230:1515): avc: denied { checkpoint_restore } for pid=25913 comm="syz.2.2347" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 524.919730][ T5711] hid_parser_main: 32 callbacks suppressed [ 524.919750][ T5711] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 524.962643][ T5711] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 525.250924][T25942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2351'. [ 525.779334][T25952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2351'. [ 525.836692][ T5711] usb 2-1: USB disconnect, device number 91 [ 526.140334][ T5753] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 526.309262][ T5753] usb 6-1: Using ep0 maxpacket: 32 [ 526.320701][ T5753] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 526.330928][ T5753] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 526.341099][ T5753] usb 6-1: config 0 interface 0 has no altsetting 0 [ 526.350120][ T5753] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 526.366249][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.375278][ T5753] usb 6-1: Product: syz [ 526.379493][ T5753] usb 6-1: Manufacturer: syz [ 526.384109][ T5753] usb 6-1: SerialNumber: syz [ 526.395155][ T5753] usb 6-1: config 0 descriptor?? [ 526.504511][T25988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 526.521909][T25990] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 526.627391][T25996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25996 comm=syz.4.2359 [ 526.836556][ T5753] gs_usb 6-1:0.0: Configuring for 246 interfaces [ 526.897888][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 526.906521][T26011] binder: 26005:26011 ioctl c00c620f 2000000003c0 returned -22 [ 527.598613][ T5753] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 527.607667][ T5753] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 527.763850][ T10] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 527.773316][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.795934][ T10] usb 3-1: config 0 has no interface number 0 [ 527.809345][ T10] usb 3-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.816054][T22727] usb 6-1: USB disconnect, device number 18 [ 527.827925][ T10] usb 3-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 527.844115][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.853151][ T10] usb 3-1: Product: syz [ 527.857698][ T10] usb 3-1: Manufacturer: syz [ 527.864099][ T10] usb 3-1: SerialNumber: syz [ 527.887444][ T10] usb 3-1: config 0 descriptor?? [ 527.906226][ T10] vmk80xx 3-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 528.112791][T22727] usb 3-1: USB disconnect, device number 106 [ 528.186370][T26064] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 528.197005][ T10] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 528.297824][ T5753] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 528.356702][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 528.356720][ T30] audit: type=1326 audit(1781777786.951:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.5.2371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe521d9ce59 code=0x7ffc0000 [ 528.389680][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 528.397335][ T30] audit: type=1326 audit(1781777786.951:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.5.2371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe521d9ce59 code=0x7ffc0000 [ 528.424156][ T30] audit: type=1326 audit(1781777786.991:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.5.2371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe521d9ce59 code=0x7ffc0000 [ 528.451260][ T10] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 528.459677][ T10] usb 5-1: config 0 has no interface number 0 [ 528.465800][ T10] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 528.491764][ T5753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.502059][ T5753] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 528.511283][ T30] audit: type=1326 audit(1781777786.991:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.5.2371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe521d9ce59 code=0x7ffc0000 [ 528.537864][T23566] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 528.545535][ T10] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 528.560004][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.569397][ T5753] usb 2-1: config 0 descriptor?? [ 528.574829][ T30] audit: type=1326 audit(1781777786.991:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.5.2371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe521d9ce59 code=0x7ffc0000 [ 528.603204][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 528.614937][ T5753] pwc: Askey VC010 type 2 USB webcam detected. [ 528.624091][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.634668][ T10] usb 5-1: Product: syz [ 528.639867][ T10] usb 5-1: Manufacturer: syz [ 528.644523][ T10] usb 5-1: SerialNumber: syz [ 528.656563][ T10] usb 5-1: config 0 descriptor?? [ 528.662213][ T30] audit: type=1326 audit(1781777786.991:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.5.2371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe521d9ce59 code=0x7ffc0000 [ 528.694839][T26043] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 528.703473][T26043] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 528.723364][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.734819][T23566] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.a1 [ 528.744564][T23566] usb 1-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 528.761754][ T30] audit: type=1326 audit(1781777786.991:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.5.2371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe521d9ce59 code=0x7ffc0000 [ 528.792292][T23566] usb 1-1: Product: syz [ 528.811618][T23566] usb 1-1: config 0 descriptor?? [ 528.820301][ T30] audit: type=1326 audit(1781777786.991:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.5.2371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe521d9ce59 code=0x7ffc0000 [ 528.849520][T23566] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 528.858265][T23566] ftdi_sio ttyUSB0: unknown device type: 0xc6a1 [ 528.956251][ T30] audit: type=1326 audit(1781777786.991:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.5.2371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe521d9ce59 code=0x7ffc0000 [ 528.992827][T22727] usb 5-1: USB disconnect, device number 110 [ 529.053510][ T30] audit: type=1326 audit(1781777786.991:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.5.2371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe521d9ce59 code=0x7ffc0000 [ 529.115498][ T5753] pwc: recv_control_msg error -32 req 02 val 2b00 [ 529.138428][ T5753] pwc: recv_control_msg error -32 req 02 val 2700 [ 529.144455][ T5711] usb 1-1: USB disconnect, device number 102 [ 529.162774][ T5753] pwc: recv_control_msg error -32 req 02 val 2c00 [ 529.169937][ T5711] ftdi_sio 1-1:0.0: device disconnected [ 529.194633][ T5753] pwc: recv_control_msg error -32 req 04 val 1000 [ 529.225350][ T5753] pwc: recv_control_msg error -32 req 04 val 1300 [ 529.238174][ T5753] pwc: recv_control_msg error -32 req 04 val 1400 [ 529.245443][ T5753] pwc: recv_control_msg error -32 req 02 val 2000 [ 529.255132][ T5753] pwc: recv_control_msg error -32 req 02 val 2100 [ 529.263495][ T5753] pwc: recv_control_msg error -32 req 04 val 1500 [ 529.272165][ T5753] pwc: recv_control_msg error -32 req 02 val 2500 [ 529.281812][ T5753] pwc: recv_control_msg error -32 req 02 val 2400 [ 529.493356][ T5753] pwc: recv_control_msg error -32 req 02 val 2900 [ 529.500759][ T5753] pwc: recv_control_msg error -32 req 02 val 2800 [ 529.904521][T26137] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 529.961019][ T5753] pwc: recv_control_msg error -71 req 04 val 1200 [ 529.984056][ T5753] pwc: Registered as video103. [ 530.350052][T26157] wg1 speed is unknown, defaulting to 1000 [ 530.749120][ T5753] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53 [ 530.809367][ T5753] usb 2-1: USB disconnect, device number 92 [ 531.461047][T26206] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 531.677640][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 531.797992][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 531.883548][T26221] bond11: Invalid ad_actor_system MAC address. [ 531.898446][T26221] bond11: option ad_actor_system: invalid value (1) [ 531.930878][T26221] bond11 (unregistering): Released all slaves [ 532.017608][ T1236] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 532.115687][T23566] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 532.322773][T26308] wg1 speed is unknown, defaulting to 1000 [ 532.601252][T26310] hfs: can't find a HFS filesystem on dev nullb0 [ 533.158151][ T1236] usb 6-1: Using ep0 maxpacket: 32 [ 533.181353][ T1236] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.194635][ T1236] usb 6-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.3b [ 533.204046][ T1236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.213459][ T1236] usb 6-1: Product: syz [ 533.214180][T23566] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.218029][ T1236] usb 6-1: Manufacturer: syz [ 533.228638][ T5753] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 533.233405][ T1236] usb 6-1: SerialNumber: syz [ 533.264976][T23566] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 533.276919][T23566] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.286165][T23566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.294199][T23566] usb 1-1: Product: syz [ 533.300251][T23566] usb 1-1: Manufacturer: syz [ 533.304891][T23566] usb 1-1: SerialNumber: syz [ 533.315456][T23566] cdc_mbim 1-1:1.0: skipping garbage [ 533.436056][ T5753] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 533.523457][T26224] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 533.607494][T26342] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 533.608284][ T1236] usb 6-1: Invalid firmware size=18. [ 533.633869][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 533.662855][ T1236] usb 6-1: USB disconnect, device number 19 [ 533.668238][ T5753] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 533.679765][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.738366][ T5753] usb 2-1: config 0 descriptor?? [ 533.747227][T26302] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 533.765171][ T5753] hub 2-1:0.0: USB hub found [ 533.775223][T26363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2387'. [ 533.802920][T26363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2387'. [ 533.898328][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 533.898340][ T30] audit: type=1400 audit(1781777792.501:1567): avc: denied { ioctl } for pid=26362 comm="syz.4.2387" path="socket:[57787]" dev="sockfs" ino=57787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 534.174540][ T5753] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 534.208319][ T5711] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 534.257810][ T1236] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 534.266259][T26224] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 534.274608][T23566] cdc_mbim 1-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 534.283489][T23566] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 534.292533][ T30] audit: type=1404 audit(1781777792.891:1568): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 534.327226][ T30] audit: type=1400 audit(1781777792.921:1569): avc: denied { ioctl } for pid=26384 comm="syz.5.2391" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=930 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 534.355069][ T30] audit: type=1400 audit(1781777792.951:1570): avc: denied { ioctl } for pid=26378 comm="syz.4.2390" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 534.380199][ T5711] usb 3-1: Using ep0 maxpacket: 16 [ 534.386148][ T30] audit: type=1400 audit(1781777792.981:1571): avc: denied { ioctl } for pid=26300 comm="syz.1.2385" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 534.398811][ T5753] usbhid 2-1:0.0: can't add hid device: -71 [ 534.412258][ T30] audit: type=1400 audit(1781777792.991:1572): avc: denied { read } for pid=26300 comm="syz.1.2385" dev="nsfs" ino=4026533196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 534.438503][ T1236] usb 5-1: Using ep0 maxpacket: 16 [ 534.443996][ T30] audit: type=1400 audit(1781777793.011:1573): avc: denied { ioctl } for pid=26372 comm="syz.2.2389" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 534.474555][ T5753] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 534.479245][ T30] audit: type=1400 audit(1781777793.051:1574): avc: denied { recv } for pid=4973 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.76 dest=56628 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 534.517019][ T30] audit: type=1400 audit(1781777793.071:1575): avc: denied { read } for pid=26372 comm="syz.2.2389" dev="nsfs" ino=4026533101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 534.539367][ T5711] usb 3-1: device descriptor read/all, error -71 [ 534.553553][ T5753] usb 2-1: USB disconnect, device number 93 [ 534.560791][ T30] audit: type=1400 audit(1781777793.071:1576): avc: denied { read write } for pid=22354 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 534.586747][ T1236] usb 5-1: device descriptor read/all, error -71 [ 534.591194][T23566] cdc_mbim 1-1:1.0: setting tx_max = 32 [ 534.618176][T23566] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 534.625527][T23566] wwan wwan0: port wwan0mbim0 attached [ 534.637348][T23566] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 36:c3:1f:dc:a1:58 [ 534.664620][T23566] usb 1-1: USB disconnect, device number 103 [ 534.699451][T23566] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 534.778966][T23566] wwan wwan0: port wwan0mbim0 disconnected [ 535.357416][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 537.813856][ T4973] udevd[4973]: worker [5596] /devices/virtual/block/nbd0 is taking a long time [ 538.907288][ T30] kauditd_printk_skb: 37631 callbacks suppressed [ 538.907305][ T30] audit: type=1400 audit(1781777797.501:39208): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 538.935118][ T30] audit: type=1400 audit(1781777797.511:39209): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 538.956928][ T30] audit: type=1400 audit(1781777797.511:39210): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 538.981562][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.989707][ T5268] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 538.992184][ T30] audit: type=1400 audit(1781777797.511:39211): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 538.997715][ T5268] audit: backlog limit exceeded [ 539.018916][ T30] audit: type=1400 audit(1781777797.511:39212): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 539.023756][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 539.044791][ T30] audit: type=1400 audit(1781777797.511:39213): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 543.437127][ T2048] block nbd0: Possible stuck request ffff888028b25080: control (read@0,1024B). Runtime 180 seconds [ 543.828481][ T4973] udevd[4973]: worker [5596] /devices/virtual/block/nbd0 timeout; kill it [ 543.837736][ T4973] udevd[4973]: seq 18986 '/devices/virtual/block/nbd0' killed [ 543.916923][ T30] kauditd_printk_skb: 47712 callbacks suppressed [ 543.916939][ T30] audit: type=1400 audit(1781777802.511:86852): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 543.944773][ T30] audit: type=1400 audit(1781777802.521:86853): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 543.961717][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 543.966191][ T30] audit: type=1400 audit(1781777802.521:86854): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 543.994321][ T30] audit: type=1400 audit(1781777802.521:86855): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 543.996371][ T5268] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 544.023853][ T30] audit: type=1400 audit(1781777802.521:86856): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 544.044942][ T5268] audit: backlog limit exceeded [ 544.050219][ T30] audit: type=1400 audit(1781777802.521:86857): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 544.050698][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.926667][ T30] kauditd_printk_skb: 49497 callbacks suppressed [ 548.926692][ T30] audit: type=1400 audit(1781777807.522:136353): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 548.954774][ T30] audit: type=1400 audit(1781777807.532:136354): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 548.970879][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.976513][ T30] audit: type=1400 audit(1781777807.532:136355): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 548.982537][ T5268] audit: audit_lost=29 audit_rate_limit=0 audit_backlog_limit=64 [ 549.011695][ T5268] audit: backlog limit exceeded [ 549.016883][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.016910][ T30] audit: type=1400 audit(1781777807.532:136356): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 549.023375][ T5268] audit: audit_lost=30 audit_rate_limit=0 audit_backlog_limit=64 [ 549.048600][ T30] audit: type=1400 audit(1781777807.532:136357): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 553.936381][ T30] kauditd_printk_skb: 51160 callbacks suppressed [ 553.936406][ T30] audit: type=1400 audit(1781777812.522:186344): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 553.964296][ T30] audit: type=1400 audit(1781777812.532:186345): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 553.985892][ T30] audit: type=1400 audit(1781777812.532:186346): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 554.007489][ T30] audit: type=1400 audit(1781777812.532:186347): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 554.028655][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.028944][ T30] audit: type=1400 audit(1781777812.532:186348): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 554.035278][ T5268] audit: audit_lost=422 audit_rate_limit=0 audit_backlog_limit=64 [ 554.056560][ T30] audit: type=1400 audit(1781777812.532:186349): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 554.090337][ T5268] audit: backlog limit exceeded [ 554.091277][ T30] audit: type=1400 audit(1781777812.532:186350): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 557.517135][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 558.946142][ T30] kauditd_printk_skb: 50228 callbacks suppressed [ 558.946188][ T30] audit: type=1400 audit(1781777817.542:236291): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 558.979999][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.986541][ T5268] audit: audit_lost=519 audit_rate_limit=0 audit_backlog_limit=64 [ 558.994333][ T5268] audit: backlog limit exceeded [ 558.994350][ T30] audit: type=1400 audit(1781777817.542:236292): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 558.999724][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 559.027079][ T5268] audit: audit_lost=520 audit_rate_limit=0 audit_backlog_limit=64 [ 559.034886][ T5268] audit: backlog limit exceeded [ 559.035951][ T30] audit: type=1400 audit(1781777817.542:236293): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 559.040181][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.955814][ T30] kauditd_printk_skb: 50870 callbacks suppressed [ 563.955839][ T30] audit: type=1400 audit(1781777822.543:287162): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 563.985505][ T30] audit: type=1400 audit(1781777822.553:287163): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 564.009767][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.016405][ T30] audit: type=1400 audit(1781777822.553:287164): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 564.016429][ T5268] audit: audit_lost=522 audit_rate_limit=0 audit_backlog_limit=64 [ 564.037793][ T30] audit: type=1400 audit(1781777822.553:287165): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 564.045820][ T5268] audit: backlog limit exceeded [ 564.066824][ T30] audit: type=1400 audit(1781777822.553:287166): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 564.071800][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.099326][ T5268] audit: audit_lost=523 audit_rate_limit=0 audit_backlog_limit=64 [ 568.965512][ T30] kauditd_printk_skb: 50360 callbacks suppressed [ 568.965529][ T30] audit: type=1400 audit(1781777827.553:337526): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 568.994226][ T30] audit: type=1400 audit(1781777827.563:337527): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 569.015764][ T30] audit: type=1400 audit(1781777827.563:337528): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 569.037407][ T30] audit: type=1400 audit(1781777827.563:337529): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 569.059007][ T30] audit: type=1400 audit(1781777827.563:337530): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 569.080726][ T30] audit: type=1400 audit(1781777827.563:337531): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 569.082120][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 569.102330][ T30] audit: type=1400 audit(1781777827.563:337532): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 569.130416][ T30] audit: type=1400 audit(1781777827.563:337533): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 569.151609][ T5268] audit: audit_lost=524 audit_rate_limit=0 audit_backlog_limit=64 [ 573.515443][ T2048] block nbd0: Possible stuck request ffff888028b25080: control (read@0,1024B). Runtime 210 seconds [ 573.975284][ T30] kauditd_printk_skb: 50479 callbacks suppressed [ 573.975302][ T30] audit: type=1400 audit(1781777832.573:387886): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 574.004661][ T30] audit: type=1400 audit(1781777832.573:387887): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 574.027248][ T30] audit: type=1400 audit(1781777832.573:387888): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 574.035897][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 574.048876][ T30] audit: type=1400 audit(1781777832.573:387889): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 574.055194][ T5268] audit: audit_lost=567 audit_rate_limit=0 audit_backlog_limit=64 [ 574.076617][ T30] audit: type=1400 audit(1781777832.573:387890): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 574.084322][ T5268] audit: backlog limit exceeded [ 574.106387][ T30] audit: type=1400 audit(1781777832.573:387891): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 574.110536][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.985119][ T30] kauditd_printk_skb: 50755 callbacks suppressed [ 578.985135][ T30] audit: type=1400 audit(1781777837.583:438645): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 579.015367][ T30] audit: type=1400 audit(1781777837.583:438646): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 579.042222][ T30] audit: type=1400 audit(1781777837.583:438647): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 579.063672][ T5268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.063769][ T30] audit: type=1400 audit(1781777837.583:438648): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 579.071378][ T5268] audit: audit_lost=569 audit_rate_limit=0 audit_backlog_limit=64 [ 579.091646][ T30] audit: type=1400 audit(1781777837.583:438649): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 579.120556][ T30] audit: type=1400 audit(1781777837.583:438650): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 579.125388][ T5268] audit: backlog limit exceeded [ 579.142031][ T30] audit: type=1400 audit(1781777837.583:438651): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 579.275284][ T31] INFO: task syz.3.1889:21816 blocked for more than 143 seconds. [ 579.283365][ T31] Tainted: G L syzkaller #0 [ 579.290286][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.299423][ T31] task:syz.3.1889 state:D stack:26392 pid:21816 tgid:21810 ppid:5610 task_flags:0x400040 flags:0x00080002 [ 579.311937][ T31] Call Trace: [ 579.315685][ T31] [ 579.318994][ T31] __schedule+0x125c/0x6730 [ 579.324005][ T31] ? __pfx___schedule+0x10/0x10 [ 579.329522][ T31] ? rcu_is_watching+0x12/0xc0 [ 579.334739][ T31] ? schedule+0x2bf/0x390 [ 579.339659][ T31] ? lock_release+0x24d/0x310 [ 579.344786][ T31] schedule+0xdd/0x390 [ 579.349384][ T31] schedule_preempt_disabled+0x13/0x30 [ 579.355612][ T31] __mutex_lock+0xccc/0x1bd0 [ 579.360645][ T31] ? sync_bdevs+0x153/0x480 [ 579.365668][ T31] ? rcu_is_watching+0x12/0xc0 [ 579.370956][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 579.376584][ T31] ? __mutex_unlock_slowpath+0x350/0x910 [ 579.382889][ T31] ? iput.part.0+0x1a0/0x1050 [ 579.388116][ T31] ? sync_bdevs+0x103/0x480 [ 579.393079][ T31] ? lock_release+0x1d1/0x310 [ 579.398258][ T31] ? sync_bdevs+0x153/0x480 [ 579.403216][ T31] sync_bdevs+0x153/0x480 [ 579.407936][ T31] ksys_sync+0xb0/0xf0 [ 579.412439][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 579.417802][ T31] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 579.424624][ T31] ? rcu_is_watching+0x12/0xc0 [ 579.429939][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 579.436546][ T31] __do_sys_sync+0xe/0x20 [ 579.440903][ T31] do_syscall_64+0x115/0x870 [ 579.445545][ T31] ? clear_bhb_loop+0x40/0x90 [ 579.450530][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.457031][ T31] RIP: 0033:0x7fcf1d59ce59 [ 579.461917][ T31] RSP: 002b:00007fcf1e4df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 579.471267][ T31] RAX: ffffffffffffffda RBX: 00007fcf1d816180 RCX: 00007fcf1d59ce59 [ 579.480096][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.488892][ T31] RBP: 00007fcf1d816180 R08: 0000000000000000 R09: 0000000000000000 [ 579.497604][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.506390][ T31] R13: 00007fcf1d816218 R14: 00007fcf1d816180 R15: 00007fffccabddd8 [ 579.515117][ T31] [ 579.518408][ T31] INFO: lockdep is turned off. [ 579.523627][ T31] NMI backtrace for cpu 1 [ 579.523643][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 579.523667][ T31] Tainted: [L]=SOFTLOCKUP [ 579.523673][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 579.523684][ T31] Call Trace: [ 579.523689][ T31] [ 579.523696][ T31] dump_stack_lvl+0x100/0x190 [ 579.523721][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 579.523742][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 579.523764][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 579.523784][ T31] sys_info+0x141/0x190 [ 579.523808][ T31] watchdog+0xcb1/0x1030 [ 579.523827][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 579.523849][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.523865][ T31] ? __kthread_parkme+0x18c/0x230 [ 579.523887][ T31] ? kthread+0x13a/0x450 [ 579.523910][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.523924][ T31] kthread+0x370/0x450 [ 579.523947][ T31] ? __pfx_kthread+0x10/0x10 [ 579.523971][ T31] ret_from_fork+0x72b/0xd50 [ 579.523992][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 579.524012][ T31] ? __switch_to+0x800/0x10f0 [ 579.524037][ T31] ? __pfx_kthread+0x10/0x10 [ 579.524061][ T31] ret_from_fork_asm+0x1a/0x30 [ 579.524090][ T31] [ 579.524098][ T31] Sending NMI from CPU 1 to CPUs 0: [ 579.655460][ C0] NMI backtrace for cpu 0 [ 579.655478][ C0] CPU: 0 UID: 0 PID: 30 Comm: kauditd Tainted: G L syzkaller #0 PREEMPT(full) [ 579.655499][ C0] Tainted: [L]=SOFTLOCKUP [ 579.655504][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 579.655512][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 579.655533][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 71 4e f6 48 89 df e8 ce c0 4e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 15 cf 3d f6 65 8b 05 1e 49 78 08 85 c0 74 16 5b [ 579.655547][ C0] RSP: 0000:ffffc90000a67ce0 EFLAGS: 00000246 [ 579.655561][ C0] RAX: 0000000000000046 RBX: ffffffff9b1ed198 RCX: ffffffff8211b23f [ 579.655570][ C0] RDX: 0000000000000000 RSI: ffffffff8c1cef00 RDI: ffffffff8b969722 [ 579.655579][ C0] RBP: 0000000000000293 R08: 0000000000000000 R09: fffffbfff21b3292 [ 579.655587][ C0] R10: 0000000000000000 R11: 000000000000752b R12: 0000000000000293 [ 579.655596][ C0] R13: ffffffff9b1ed198 R14: ffff888022b90b40 R15: ffffffff8205d8c0 [ 579.655606][ C0] FS: 0000000000000000(0000) GS:ffff888124332000(0000) knlGS:0000000000000000 [ 579.655620][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.655630][ C0] CR2: 000055669e4dd660 CR3: 0000000033bff000 CR4: 00000000003526f0 [ 579.655639][ C0] Call Trace: [ 579.655649][ C0] [ 579.655655][ C0] skb_dequeue+0x126/0x180 [ 579.655671][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 579.655689][ C0] kauditd_send_queue+0x85/0x2e0 [ 579.655705][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 579.655724][ C0] kauditd_thread+0x645/0xb30 [ 579.655741][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 579.655757][ C0] ? rcu_is_watching+0x12/0xc0 [ 579.655774][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 579.655796][ C0] ? __kthread_parkme+0x18c/0x230 [ 579.655813][ C0] ? kthread+0x13a/0x450 [ 579.655830][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 579.655846][ C0] kthread+0x370/0x450 [ 579.655863][ C0] ? __pfx_kthread+0x10/0x10 [ 579.655881][ C0] ret_from_fork+0x72b/0xd50 [ 579.655897][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 579.655913][ C0] ? __switch_to+0x800/0x10f0 [ 579.655932][ C0] ? __pfx_kthread+0x10/0x10 [ 579.655950][ C0] ret_from_fork_asm+0x1a/0x30 [ 579.655972][ C0] [ 579.879244][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 579.886099][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 579.896776][ T31] Tainted: [L]=SOFTLOCKUP [ 579.901100][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 579.911150][ T31] Call Trace: [ 579.914421][ T31] [ 579.917344][ T31] dump_stack_lvl+0x100/0x190 [ 579.922019][ T31] vpanic+0x552/0x970 [ 579.925996][ T31] ? __pfx_vpanic+0x10/0x10 [ 579.930494][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 579.936645][ T31] panic+0xd1/0xe0 [ 579.940361][ T31] ? __pfx_panic+0x10/0x10 [ 579.944773][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 579.950925][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 579.957078][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 579.963222][ T31] ? watchdog.cold+0x1ec/0x234 [ 579.967982][ T31] ? watchdog+0xcc1/0x1030 [ 579.972389][ T31] watchdog.cold+0x1fd/0x234 [ 579.976975][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 579.983037][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.987705][ T31] ? __kthread_parkme+0x18c/0x230 [ 579.992713][ T31] ? kthread+0x13a/0x450 [ 579.996951][ T31] ? __pfx_watchdog+0x10/0x10 [ 580.001606][ T31] kthread+0x370/0x450 [ 580.005656][ T31] ? __pfx_kthread+0x10/0x10 [ 580.010229][ T31] ret_from_fork+0x72b/0xd50 [ 580.014800][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 580.019895][ T31] ? __switch_to+0x800/0x10f0 [ 580.024553][ T31] ? __pfx_kthread+0x10/0x10 [ 580.029125][ T31] ret_from_fork_asm+0x1a/0x30 [ 580.033875][ T31] [ 580.037082][ T31] Kernel Offset: disabled [ 580.041379][ T31] Rebooting in 86400 seconds..