last executing test programs: 2m34.315510216s ago: executing program 2 (id=1060): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback={0x300000000000000}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x3}}]}, 0xfc}}, 0x0) 2m34.016598456s ago: executing program 2 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x3, 0x7}}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 2m32.761477564s ago: executing program 2 (id=1064): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)={0x10000, 0x0, '\x00', {0x0, @bt={0x100, 0x5, 0x1, 0x1, 0x6, 0xae95, 0x9a9a, 0x6, 0x4, 0x0, 0x8, 0x8, 0x101, 0x7, 0xe, 0x34, {0x3, 0x8}, 0xfa, 0x95}}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000180000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 2m32.140413368s ago: executing program 2 (id=1065): syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) r2 = socket(0x28, 0x5, 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x78, 0xd, 0x66, 0x0, 0x3}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000cc527b1298c25234334114c848bc19616ac2c23de3a4237ab14b2d3e00b7ff176c6f34b5090366d74e"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r7}, 0x20) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x74, 0x0, 0x0, @tick=0x1f4, {0x0, 0xfc}, {}, @raw32={[0x2600, 0x4]}}], 0x1c) 2m29.341370755s ago: executing program 2 (id=1076): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x4, r0, 0x1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, &(0x7f0000000080)) read$FUSE(r0, &(0x7f0000001140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setown(r1, 0x8, r3) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f00000002c0)) r5 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030101"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000020701f109a2c0fcc58f1e000009"], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) close(r6) r7 = socket$nl_crypto(0x10, 0x3, 0x15) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x50, &(0x7f0000000480)=ANY=[@ANYBLOB="500374c98b6b61a75c8838f1f678b36b371536b77e35045c6cb193f862ad37632a2515ceedc0ce0c0ab46020c1a56e279979653b18afc1845ed393234372055a6f216452930799b01de2a5cd0636984c86a23d6268cad6180bb6ee40899aea18d28aa54ea8205ec7e194687ae4871cecbc27a892b0b6d1e94bba5f841258135b6140d7bc371c377a9b9423008d203ab31ac08f7639cf46101edc779a7fb4111311f75d5a9d0dec1d954fdf17613230242fc17790857dcd5fff7f000000000000ceaac1dd918967433c37826a9daf6947a044f0bcf83eb027"]}]}) sendmsg$netlink(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e0000000100009"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r5) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) ptrace$setregs(0xd, r3, 0x8, &(0x7f0000000200)="900bf4a89dd33bd2d5f87dfd1d4b5964cee00dea21b3f221eb080f321fba3ca39abeff02c0247b3b45b5695fb2b9f4c7bc753f7e1503bd25de7b4f62faab3ef7b1a51ecf387d505d627fe5298947a29f0cf2797ace6f86ac10db8a61d521aaf9e414e453072a6f49e247c6f647393929548b29dc9e9511ae37a0c2837d51143450a28edc3ef971dd77f5fe8ab175e365ef0605f0c6afbe332250394d24fe1af5c9de4469e96cd5cd6a27") keyctl$unlink(0x9, r8, r5) r10 = socket$inet(0x2, 0x3, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4004814) keyctl$unlink(0x9, r8, r5) pipe(&(0x7f00000001c0)) 2m28.097514809s ago: executing program 2 (id=1078): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DISCONNECT(r2, 0xab08) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x10010, r0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x64}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f00000002c0), 0x8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x800, 0x2, 0x8, r0, 0x340c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x2}, 0x50) socket$netlink(0x10, 0x3, 0x9) 2m24.170377327s ago: executing program 1 (id=1093): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0xb75}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7fffffff, 0x0, 0xb49, 0x9, 0x8, 0x1000, 0x3}, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000700)=[{&(0x7f0000000bc0)=@in6={0xa, 0x4e20, 0x2, @mcast2, 0x400}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000002c0)="c120acd611a14b08b11271ccaf7d49e643a69005feca0c7108c53f50a496ba1cb62f80e624a1b75174f83bb3c7371508adb29a98202bf2e6a01a5ba6a2a24c6e9d66bfd59b7370cf5cbfd55f43057e907bf41359f443784f920d18bab859fb0d078e02c6", 0x64}, {&(0x7f0000000340)="502a552af1068fcf04ef36e49b97bf5117abc62c56ff4352ec76f6c5370637b3ec61cd696e5ecf68a2c8f63399435ffe00eca025fdc9177b8f0ea38d5ac3ebc1f1444b838d9436081511b2204895b139648f8855", 0x54}, {&(0x7f0000000540)="9d4bf9372983ad03be61c9bb298b9fff9329bb4af615c8c6adc78b7ee17363ae642c4aebbb09f0907059e7c8f90ff2288211785263cfd08de072697f7097df2561ea95a00661df191a464e657c248d2f73d7d69a4afd51a8973819557de04f0607d933533620453b3de846f1e279ae3fe4002fcdb08d0e699c366e5108dfb8b958bf2027a6ca", 0x86}, {&(0x7f0000000600)="f7cc9720981be8b27d296be93a9503947a8fb702b0680728cb97366b3e26292641b3eac3c301bc7514bca50887ab9f790756cc8e96d27bf814b55aadb5a85d40f65c8c", 0x43}, {&(0x7f0000000480)="9ab611d29d9f13f200bb923108ad6248db2c9f4b8e866b748c15", 0x1a}, {&(0x7f0000000680)="a30897603f1c55e7cfa5d38e09689e373c5cba2ee83a0ccb552a174ea2dedb3865d42660a83387873dbb2fed7bae19a89a398ec36be967c8991516e4a40c2dd69811d0c066e3de56bcdfffb5b81bccefce2d62bfbbc6fc86f1cfee43c37f760255347422a36a74cc21053ba19204229dfab2f54d3f98f6f3", 0x78}, {&(0x7f00000007c0)="a500bf6dc2ed2f313c9651450e603d907ee03c0b72a05e00ce8f77474e6ec507d80234b074803db1d1a84788a7d578cebdd1fd44816538acaa4c749dd642fadce10b468c0084b22db1ee6b71273b6908329b2f06f23b675abbd82c433c8c2d2862f1eeff918056cee883a5c64ff2cee09b43e011b83265c16708537791723a8663d018520668f068c66ba8935ee77aafecdba79846325b61936e47ab58aea1b828df34bdc82842ec89", 0xa9}, {&(0x7f0000000880)="f067ede968664ea4088e6417784c1f294dbf43f3e2dadd7c8316f909f76633df9a61dd7515e590ac52d462284b5074876cb07fcbc1a6fc67507d62636ad4cc781dce868127a85208ccf306bb126e9da19e4fce08f9025cbf4c289ab18976fbe3ec09a5b5576d8c3d4f3551dd9569e13d00", 0x71}, {&(0x7f0000000900)="00d7c7050482928682df07c9aa1e3f52e84a6cb4200c5f6313bb3de88e08b491e9032062c1a5f2682081220fe8d394a2731a259b0ae0d4b9358a22bfa74881a4461be220e96ce9a73ebc08faf3ca9a96c4995f400871380f26a7a3cc6c1a59b92393107831514d4d73e532bf60cc083e1bdd5fd055b7d0f8919102deff9d0ea4d62e8e925c093418d7a72aecb3df5941322f36014c5ffbbde49ee8311ea6104b2a5fc3da6726a9ffce891fbcc860b144ae750be629e65ed43696b1c16505d6698ba11309505b6cc26867a65c5612", 0xce}, {&(0x7f0000000a00)="294434a3ad37914ba5e198ce47e6d52306838b6ea01a666345f625de597ebc83a81c045a86b75d1c72ddc37d021f8959639a62d660051244784837f9e01806861ba4b7d331e4524249dc8eba7a0c821668c06e0a558182067d30090993435524ed26bd5d739b3fa8b97815ebd77c39a33388e8893911104f87cf311fe5d9ff85822754c1486cb736b5035769b8d27299f94ad3c146230ab76d304ba1e4e9178b20d792dd6afef89ae78309025ba8ea49616a5f5407e481e6fd022a1a68a64140053481cdc463eff004ea6678e107bb32202fc782a2", 0xd5}], 0xa, 0x0, 0x0, 0x20000000}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r2, &(0x7f00000032c0), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x80, 0x2, 0x315, 0x0, r3}, &(0x7f0000000500), &(0x7f00000003c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000000705000004000000000000070000060c00064000000800000000d20c00024000000000000080000900010073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) (async) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x4a}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) setuid(0xee00) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000001c0)={0x18, 0x0, 0x1, 0x0, 0x0, 0x100}) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) 2m22.964614316s ago: executing program 1 (id=1097): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f8071d6c1d33277f4e094b9ad1f6a120100000400a5418d69d000", 0x7}, 0x60) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff7ffc}]}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) connect$nfc_llcp(r0, &(0x7f0000000180)={0x27, r2, 0xffffffffffffffff, 0x6, 0x1, 0x7f, "83a49991002202b94992e330dc23efc076bb1c1ef31bbf345a0f5f009e89036af6b82b9290ce89c829796238d842bac3745f92a56335e48888201def1ee36a", 0x2d}, 0x60) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ff"], 0x0) 2m20.996463177s ago: executing program 1 (id=1105): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x526e3000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00, 0x0, 0x1000000}]) dup3(r4, r2, 0x0) 2m19.751484215s ago: executing program 1 (id=1112): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = syz_io_uring_setup(0x512d, &(0x7f0000000540)={0x0, 0xbade, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000000)) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x2e}, 0x14) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000000500)={0x9, 0x4}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}], 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffffffffffe2d, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0xfffffffe}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x100080, &(0x7f0000000400)={[{@uuid_null}, {@redirect_dir_nofollow}, {@redirect_dir_off}, {@xino_on}, {@index_off}, {@nfs_export_on}, {@redirect_dir_off}], [{@smackfsroot={'smackfsroot', 0x3d, 'net_prio.prioidx\x00'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_measure}, {@uid_gt={'uid>', r7}}, {@uid_lt={'uid<', r8}}]}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, 0x0, 0x4) 2m18.473678053s ago: executing program 1 (id=1115): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x9, 0xffffffff, 0x45, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)) connect$tipc(r3, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659f", 0x47}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) 2m17.344519101s ago: executing program 1 (id=1119): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xffc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r2 = syz_io_uring_setup(0x1f3e, &(0x7f0000000100)={0x0, 0x15db, 0x4000, 0x0, 0x176}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0xeee, 0xc1be, 0x0, &(0x7f0000000200)={[0x5]}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xd, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000040)) 2m17.073568995s ago: executing program 32 (id=1119): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xffc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r2 = syz_io_uring_setup(0x1f3e, &(0x7f0000000100)={0x0, 0x15db, 0x4000, 0x0, 0x176}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0xeee, 0xc1be, 0x0, &(0x7f0000000200)={[0x5]}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xd, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000040)) 2m12.572067773s ago: executing program 33 (id=1078): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DISCONNECT(r2, 0xab08) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x10010, r0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x64}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f00000002c0), 0x8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x800, 0x2, 0x8, r0, 0x340c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x2}, 0x50) socket$netlink(0x10, 0x3, 0x9) 11.946609646s ago: executing program 6 (id=1545): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)=@get={0xe0, 0x13, 0x701, 0x70bd2d, 0x25dfdbff, {{'gcm(aes)\x00'}, '\x00', '\x00', 0x4400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) close(0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = timerfd_create(0x7, 0x0) timerfd_gettime(r1, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = epoll_create(0xaf2) epoll_pwait2(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000080)={0xe000200f}) 10.854513902s ago: executing program 6 (id=1548): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\a\a\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\a\a\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) (async) 10.643016018s ago: executing program 4 (id=1551): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x80081) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x20040840) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}, @sadb_address={0x5, 0x6, 0x2b, 0x20, 0x0, @in6={0xa, 0x4e21, 0xfffffffd, @mcast1, 0xca}}]}, 0xc0}}, 0x0) 9.269447395s ago: executing program 4 (id=1558): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sched_getattr(0xffffffffffffffff, &(0x7f00000001c0)={0x38}, 0x1b, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4b, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 8.164480159s ago: executing program 4 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2081) io_setup(0x200, &(0x7f00000010c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010007bd7000fddbdf255500000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf251f00000008000100740000dc909bdca700050092"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x2200c800) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r4, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) 7.669445075s ago: executing program 6 (id=1562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) (fail_nth: 1) 6.478576677s ago: executing program 3 (id=1565): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2404e004}, 0x804) r0 = socket$packet(0x11, 0x3, 0x300) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x1, 0x0, 0x4, {0xa, 0x4e23, 0x9, @loopback, 0x5}}}, 0x80, 0x0, 0xfffffffffffffeb3}, 0x2000f765) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="4ede00"}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756ee1ffffffffffffff000500030046000000"], 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x40) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r9 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffc, 0x4102) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000000000000a0000090600024088f80000050003002100000006000240658f000005000300840000000900010073797a3100000000050003000e000000"], 0x48}, 0x1, 0x0, 0x0, 0x2040000}, 0x20000000) socket(0x10, 0x3, 0x0) 4.890109798s ago: executing program 5 (id=1568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.820483347s ago: executing program 0 (id=1569): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x80000) timer_create(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, 0x1, 0x9, 0x101, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x400c894}, 0x4000014) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x101200) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x639f0}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x100000000000000, 0x0, 0x4000}, 0x0) 4.434041692s ago: executing program 5 (id=1570): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x8041) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='net/icmp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x8000000, 0x0, 0x4000080}, 0xc010) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r3 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) pread64(r3, 0x0, 0x0, 0x4eb) fspick(r3, &(0x7f0000000300)='./file0\x00', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44050) 3.370978719s ago: executing program 6 (id=1571): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x9, 0xffffffff, 0x45, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)) connect$tipc(r3, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b6484202", 0x90}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) 3.326190118s ago: executing program 5 (id=1572): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x38}, 0x1, 0x0, 0x100000000000000}, 0x0) 3.323293633s ago: executing program 3 (id=1573): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000540)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xc, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x25}, 0xfffffff8, 0x7}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @remote, 0x7, 0x5, [0x10001, 0x9]}, 0xff, 0x3}}}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$radio(0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x19f}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) 3.269319544s ago: executing program 0 (id=1574): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x800) 2.312761683s ago: executing program 5 (id=1575): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000003e70000000200e70308000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a0003a16000008009f00e3f80000080026000816"], 0x40}}, 0x0) 2.307581016s ago: executing program 3 (id=1576): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2c9, 0x100000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000380)=""/175) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x8000000, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x7, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x10, 0x120, 0x2000, 0x4, r7, r8, 0x200501, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f0000411000/0x1000)=nil, 0x1000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x20000080) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.221692647s ago: executing program 0 (id=1577): openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x406200, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, r0, &(0x7f0000000380)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0xa600, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8000, 0x5e, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0xc, 0x9, 0x7, 0x7effffff}, 0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x21c, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfe, {}, [{0x208, 0x1, [@m_police={0x17c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x0, 0x3, 0x1000, {0x0, 0x1, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x40, 0x2}}}]]}, {0x113, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x88, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x4c, 0x3, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3ff, 0x9, 0x2, 0x7, 0x3}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x21c}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r6}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)=0x12) ioctl$CEC_S_MODE(r7, 0x40046109, 0x0) 2.100333112s ago: executing program 4 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, 0x0, 0x26000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000020c0)="767059112ddf53e413976dd5eb960e13219e3f88260d79294e7f11ede5bb5af9a408532b0738a4eaabdcbbfdd97ad6c0bf608e01e28762fce2cc7b6854596525aa3d31393a5c506317d7a10c513cdd8f9659a4f7ebad62b7b9abaec15666ff00bc14e0ebdaf11f80bb644535c1f7a8c904f1c9a2001c26277e2dc5358be38e94d6e2e5339aad02c83579603c88898455782dc1b0553b31ea6e4d954f2fc9551594f845a1e006e3cafdffc12e6fd5a519f93717fde77272496029335d4fc7d12518da676870672c8cbc25961acc247e7c82a4fdf89ac7476dc735aebe2e3d872ca842e03b392918e320f3609ee7ead4dc23", 0xf1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffff800}, 0x1c, &(0x7f0000001c80), 0x0, &(0x7f00000021c0)=[@hopopts_2292={{0x58, 0x29, 0x36, {0x33, 0x7, '\x00', [@generic={0xc, 0x37, "084aa0418342f16a00c00efe73882c495db639dbc60dd6a3c3e232b82b3140eec29531af3e0d9e94af92677d913a1bec16e384d98c20d1"}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x2b}}}, @hopopts={{0x18, 0x29, 0x36, {0x33}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x400}}, @rthdr_2292={{0x98, 0x29, 0x39, {0xa5, 0x10, 0x2, 0x14, 0x0, [@loopback, @remote, @loopback, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @private2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x43}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdr={{0x88, 0x29, 0x39, {0x87, 0xe, 0x2, 0x5, 0x0, [@empty, @loopback, @rand_addr=' \x01\x00', @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x16, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0xf, 0x4}}, @pad1]}}}], 0x200}}], 0x2, 0x4400c800) sendto$inet6(r2, &(0x7f00000002c0)="1dc9682245df07e8d8dd3ebe6eb7e39ec8a23350525647166bf75ca355b6f042ea454d0bb7f990de8ea1dc1dece87df3adfdfb882743cb4a4f1cd9376588230bbdb17c2cf73983a42570a85d1468df53036856834d9f6754941fe7d1da88a8e673f6d6e74440713f4f261ff07e6b37a8a57ac18e77bd2aa426706ed23c0274dcef402d3d8a1a", 0x86, 0x3b00, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') 2.006050442s ago: executing program 3 (id=1579): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000a0002000080c2000000000007"], 0x30}}, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x8052) 1.440444184s ago: executing program 5 (id=1580): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100000023c516cb584e1d39e94ca97c1881b7624097d8c9436a4ecd8e298f9fb26d0b380fd56c63df9f51ebafcadd74a354112742625fee132323618d019b333b1aa6384a832f4e35d22c5357745ed2af8ff7f02c4ff8eb0ac97f842885c41a21c3a3e2c4ee07ac313a46b2ea9ca1af126a2d78ac6636e4ca9812cdfe50390f19b024870c13d045bb58a171", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket(0xa, 0x3, 0x87) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xb, r7}) (async) ioprio_set$pid(0x1, r2, 0x2000) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r1}, 0x10) (async) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) 1.210379765s ago: executing program 0 (id=1581): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x4}}, @common=@icmp={{0x28}, {0xb, "4b97"}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x2, 0x0, 'syz1\x00', {0x1000}}}}, {{@ip={@multicast1, @empty, 0xffffffff, 0xffffffff, 'dvmrp1\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x2, 0x1, 0x1}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x40, 0x10, [0x30, 0x3f, 0x22, 0x39, 0x33, 0x31, 0x21, 0x40, 0x1d, 0x29, 0x2a, 0x39, 0x9, 0x4, 0x26, 0x28], 0x2, 0x1, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x45, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4000, 0x0, @mcast2, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r8, r9, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$KVM_CREATE_VCPU(r10, 0x80204d01, 0x2) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) 1.186601705s ago: executing program 4 (id=1582): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) (async) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x201) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') (async) r3 = io_uring_setup(0x3c8e, &(0x7f0000000340)={0x0, 0x3, 0x800, 0x2}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r3, 0x5e50, 0xab62, 0x2, 0x0, 0x0) (async) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r4, 0x0) (async) accept(r4, 0x0, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) sendfile(r2, r2, 0x0, 0x0) (async) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000080)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x9}) 420.252337ms ago: executing program 5 (id=1583): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x8) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = eventfd(0x2641d82c) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=0x0) ptrace$pokeuser(0x6, r5, 0xd, 0x1ff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setstatus(r7, 0x4, 0x2800) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000c00)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000000202010100000000000000000a0000060800054000000004080009400000000268000180060003400002000006000340000000001400018008000100ac1e0001080002006401010014000180080001007f00000108000200ac14141c0c00028005000100010000000c00028005000100880000001400017c08000100ac1414aa08000200ac14142e0800084000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) 417.743318ms ago: executing program 4 (id=1584): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {r1, r2+60000000}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1000000, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x1, 0x0, 0x2000}, 'syz1\x00', 0x35}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 248.615602ms ago: executing program 6 (id=1585): syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2d65) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x2022, 0x0, 0x0) mlock(&(0x7f000040b000/0x1000)=nil, 0x1000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='contention_begin\x00', r2, 0x0, 0x1200003}, 0x18) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82040) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x1a) unshare(0x60600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000700000008000000ffff00"], 0x48) r5 = eventfd2(0x8, 0x80800) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x0, r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r7 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x108) add_key$keyring(&(0x7f0000000c40), &(0x7f0000000c80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10) ioctl$HIDIOCGRDESCSIZE(r7, 0x80044801, &(0x7f0000000340)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000f7a42f59be9260590100"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix={0x2402, 0xf, 0x32314147, 0x3, 0x9, 0x9, 0x3, 0x2, 0x0, 0x8, 0x0, 0x2}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x30}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000500)={{0x0, 0xe, 0x8ab8, 0x10000, 0x20000000000cbc, 0x7f, 0x100000001, 0x4, 0x1, 0xe2, 0x99, 0x0, 0x8, 0x9, 0x20000000059d2}, 0x8, [0x0]}) 198.017336ms ago: executing program 0 (id=1586): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x2, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000014}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000500)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000004c0)={0x1}}) listen(0xffffffffffffffff, 0x7ff) socket$tipc(0x1e, 0x5, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x10e00, 0x0) read$FUSE(r9, &(0x7f0000000580)={0x2020}, 0x2020) flistxattr(0xffffffffffffffff, &(0x7f00000025c0)=""/136, 0x88) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x40, 0x1405, 0x400, 0x70bd26, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008881}, 0x240c4081) ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f0000002780)={0x0, 0x2, [0x400, 0x874b, 0x3, 0xffffffffffffffff, 0x6b, 0x5]}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000002800)={'ip_vti0\x00', &(0x7f00000027c0)=@ethtool_channels={0x3d, 0x3, 0x5, 0x2, 0x1ff, 0x7, 0x3ff, 0x4}}) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000002840)={r9}, 0x8) getsockname$packet(r9, &(0x7f00000028c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002900)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000029c0)={'ip6gre0\x00', &(0x7f0000002940)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x4, 0xffff6c75, 0x78, @private0, @private0, 0x80, 0x7800, 0x8, 0x7}}) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000002a00)={0x0}, &(0x7f0000002a40)=0xc) sendmsg$nl_route(r12, &(0x7f0000002b40)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)=@bridge_delneigh={0x60, 0x1d, 0x10, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r13, 0x80, 0x10, 0x6}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_LINK_NETNSID={0x8, 0xa, 0x62c}, @NDA_IFINDEX={0x8, 0x8, r14}, @NDA_IFINDEX={0x8, 0x8, r15}, @NDA_VLAN={0x6}, @NDA_NH_ID={0x8, 0xd, 0x9}, @NDA_PROBES={0x8, 0x4, 0xbfd}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002c00)={0x1, 0x58, &(0x7f0000002b80)}, 0x10) socket$xdp(0x2c, 0x3, 0x0) 154.367164ms ago: executing program 3 (id=1587): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x800) 1.103103ms ago: executing program 0 (id=1588): io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xffd0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 554.831µs ago: executing program 6 (id=1589): prctl$PR_SET_IO_FLUSHER(0x41, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) socket$kcm(0x2, 0xa, 0x73) prctl$PR_SET_ENDIAN(0x14, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0xcd87, 0x7}, 0x50) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019640)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) socket$inet(0x2, 0x3, 0x2) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={[&(0x7f0000000400)='\xd0\x11-%@\x00']}, &(0x7f0000000480)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) 0s ago: executing program 3 (id=1590): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000008400000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) kernel console output (not intermixed with test programs): `syz.0.1132'. [ 415.521254][ T30] audit: type=1400 audit(1760115023.602:894): avc: denied { map_read map_write } for pid=10362 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 415.545130][ T30] audit: type=1400 audit(1760115023.612:895): avc: denied { setopt } for pid=10362 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 415.580460][ T30] audit: type=1400 audit(1760115023.732:896): avc: denied { ioctl } for pid=10367 comm="syz.4.1133" path="socket:[27888]" dev="sockfs" ino=27888 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 415.641232][ T1213] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 415.824184][ T1213] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.834632][ T1213] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.861426][ T1213] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 415.874807][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 415.887332][ T1213] usb 4-1: SerialNumber: syz [ 416.078550][ T6262] bond0 (unregistering): Released all slaves [ 416.248749][ T1213] usb 4-1: 0:2 : does not exist [ 416.265059][ T1213] usb 4-1: unit 255 not found! [ 416.335880][ T1213] usb 4-1: USB disconnect, device number 26 [ 416.394118][ T6262] bond1 (unregistering): (slave veth3): Releasing active interface [ 416.404635][ T6512] udevd[6512]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.427350][ T6262] bond1 (unregistering): Released all slaves [ 416.454775][T10315] chnl_net:caif_netlink_parms(): no params data found [ 416.486418][ T30] audit: type=1400 audit(1760115024.662:897): avc: denied { setopt } for pid=10383 comm="syz.3.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.653117][ T30] audit: type=1400 audit(1760115024.842:898): avc: denied { read } for pid=10386 comm="syz.3.1137" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 416.699817][ T6262] tipc: Left network mode [ 416.780554][ T30] audit: type=1400 audit(1760115024.842:899): avc: denied { open } for pid=10386 comm="syz.3.1137" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 416.808232][ T30] audit: type=1400 audit(1760115024.872:900): avc: denied { ioctl } for pid=10386 comm="syz.3.1137" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 416.834378][ T53] Bluetooth: hci0: command tx timeout [ 416.892820][ T5133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 416.904466][ T5133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 416.922125][ T5133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.939586][ T5133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.948375][ T5133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 417.126541][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.159217][T10315] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.180029][T10315] bridge_slave_0: entered allmulticast mode [ 417.223061][T10315] bridge_slave_0: entered promiscuous mode [ 417.230127][T10315] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.244958][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.261205][T10315] bridge_slave_1: entered allmulticast mode [ 417.274556][T10315] bridge_slave_1: entered promiscuous mode [ 417.609456][T10315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.664576][T10315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.916782][T10315] team0: Port device team_slave_0 added [ 417.962269][T10315] team0: Port device team_slave_1 added [ 418.470733][T10420] rdma_rxe: rxe_newlink: failed to add bond0 [ 418.505020][T10315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.512343][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.570168][T10315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.702846][T10315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.714256][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.742896][T10315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.758126][ T6262] hsr_slave_0: left promiscuous mode [ 418.764083][ T6262] hsr_slave_1: left promiscuous mode [ 418.778301][ T6262] veth1_macvtap: left promiscuous mode [ 418.784149][ T6262] veth0_macvtap: left promiscuous mode [ 418.789713][ T6262] veth1_vlan: left promiscuous mode [ 418.847183][ T6262] veth0_vlan: left promiscuous mode [ 418.923250][ T5133] Bluetooth: hci0: command tx timeout [ 418.981884][ T5133] Bluetooth: hci5: command tx timeout [ 419.540545][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 420.353010][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1144'. [ 420.375135][T10438] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1144'. [ 420.379815][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 420.426809][T10315] hsr_slave_0: entered promiscuous mode [ 420.437686][T10315] hsr_slave_1: entered promiscuous mode [ 420.451090][T10315] debugfs: 'hsr0' already exists in 'hsr' [ 420.456833][T10315] Cannot create hsr debugfs directory [ 420.503033][T10445] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1145'. [ 420.522456][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 420.522475][ T30] audit: type=1400 audit(1760115028.682:920): avc: denied { connect } for pid=10440 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 420.578011][T10445] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1145'. [ 420.594514][ T30] audit: type=1400 audit(1760115028.762:921): avc: denied { ioctl } for pid=10440 comm="syz.0.1145" path="socket:[28025]" dev="sockfs" ino=28025 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 421.573852][ T53] Bluetooth: hci0: command tx timeout [ 421.579468][ T5133] Bluetooth: hci5: command tx timeout [ 421.644448][ T1213] IPVS: starting estimator thread 0... [ 421.757178][T10441] netlink: 'syz.0.1145': attribute type 33 has an invalid length. [ 421.773831][T10441] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1145'. [ 421.910789][ T30] audit: type=1400 audit(1760115030.082:922): avc: denied { write } for pid=10449 comm="syz.4.1147" name="protocols" dev="proc" ino=4026533089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 422.105779][T10455] IPVS: using max 74 ests per chain, 177600 per kthread [ 422.216797][T10394] chnl_net:caif_netlink_parms(): no params data found [ 422.319019][ T30] audit: type=1400 audit(1760115030.462:923): avc: denied { firmware_load } for pid=10449 comm="syz.4.1147" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 422.671091][ T30] audit: type=1400 audit(1760115030.862:924): avc: denied { create } for pid=10468 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 422.693680][T10471] rdma_rxe: rxe_newlink: failed to add bond0 [ 422.711798][ T30] audit: type=1400 audit(1760115030.892:925): avc: denied { connect } for pid=10468 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 422.738575][ T30] audit: type=1400 audit(1760115030.902:926): avc: denied { read } for pid=10468 comm="syz.0.1149" path="socket:[27143]" dev="sockfs" ino=27143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 422.784809][ T30] audit: type=1400 audit(1760115030.952:927): avc: denied { create } for pid=10468 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.846530][ T6262] IPVS: stop unused estimator thread 0... [ 422.857237][ T30] audit: type=1400 audit(1760115030.952:928): avc: denied { write } for pid=10468 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.880153][ T30] audit: type=1400 audit(1760115030.972:929): avc: denied { read } for pid=10468 comm="syz.0.1149" path="socket:[27147]" dev="sockfs" ino=27147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.906634][T10394] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.916751][T10394] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.924965][T10394] bridge_slave_0: entered allmulticast mode [ 422.931964][T10394] bridge_slave_0: entered promiscuous mode [ 422.981497][T10394] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.989063][T10394] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.997789][T10394] bridge_slave_1: entered allmulticast mode [ 423.017727][T10394] bridge_slave_1: entered promiscuous mode [ 423.085916][T10394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.103485][T10394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.154130][T10315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.170300][T10394] team0: Port device team_slave_0 added [ 423.178100][T10315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.193468][T10315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.205107][T10394] team0: Port device team_slave_1 added [ 423.306654][T10394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.317329][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.343953][T10394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.356338][T10315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.386603][T10394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.394819][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.421567][T10394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.630702][ T5133] Bluetooth: hci5: command tx timeout [ 424.021871][T10394] hsr_slave_0: entered promiscuous mode [ 424.125515][T10504] rdma_rxe: rxe_newlink: failed to add bond0 [ 424.200544][T10394] hsr_slave_1: entered promiscuous mode [ 424.262001][T10394] debugfs: 'hsr0' already exists in 'hsr' [ 424.271346][T10394] Cannot create hsr debugfs directory [ 424.972647][T10315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.013617][T10519] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 425.134270][T10315] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.174883][T10198] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.182107][T10198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.240370][T10198] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.247568][T10198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.283437][T10527] netlink: 'syz.4.1160': attribute type 1 has an invalid length. [ 425.364004][T10527] bond2: entered promiscuous mode [ 425.369497][T10527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.453122][T10394] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 425.489244][T10394] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.514780][T10394] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 425.701854][ T5133] Bluetooth: hci5: command tx timeout [ 425.716653][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 425.716680][ T30] audit: type=1400 audit(1760115033.902:942): avc: denied { mounton } for pid=10534 comm="syz.4.1162" path="/220/file0" dev="tmpfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 425.852604][T10315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.863500][ T30] audit: type=1400 audit(1760115034.002:943): avc: denied { mount } for pid=10534 comm="syz.4.1162" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 425.900528][T10394] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.657489][T10394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.667818][ T30] audit: type=1400 audit(1760115034.862:944): avc: denied { map } for pid=10558 comm="syz.0.1166" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 426.758305][T10315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.850906][T10394] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.863797][T10198] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.870973][T10198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.965180][ T30] audit: type=1400 audit(1760115035.152:945): avc: denied { call } for pid=10558 comm="syz.0.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 427.191735][ T30] audit: type=1400 audit(1760115035.312:946): avc: denied { mount } for pid=10568 comm="syz.3.1167" name="/" dev="ramfs" ino=28317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 427.310777][ T30] audit: type=1400 audit(1760115035.432:947): avc: denied { execute } for pid=10568 comm="syz.3.1167" name="file1" dev="ramfs" ino=28319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 427.316412][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.332694][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.333456][ T30] audit: type=1400 audit(1760115035.432:948): avc: denied { execute_no_trans } for pid=10568 comm="syz.3.1167" path="/file1" dev="ramfs" ino=28319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 427.339850][ T6262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.605211][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 427.714239][T10591] ======================================================= [ 427.714239][T10591] WARNING: The mand mount option has been deprecated and [ 427.714239][T10591] and is ignored by this kernel. Remove the mand [ 427.714239][T10591] option from the mount to silence this warning. [ 427.714239][T10591] ======================================================= [ 427.749151][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.762797][T10594] FAULT_INJECTION: forcing a failure. [ 427.762797][T10594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.780058][T10594] CPU: 0 UID: 0 PID: 10594 Comm: syz.0.1170 Not tainted syzkaller #0 PREEMPT(full) [ 427.780080][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 427.780090][T10594] Call Trace: [ 427.780094][T10594] [ 427.780099][T10594] dump_stack_lvl+0x16c/0x1f0 [ 427.780119][T10594] should_fail_ex+0x512/0x640 [ 427.780139][T10594] _copy_from_user+0x2e/0xd0 [ 427.780150][T10594] copy_msghdr_from_user+0x98/0x160 [ 427.780167][T10594] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 427.780186][T10594] ? kfree+0x252/0x6d0 [ 427.780200][T10594] ? __lock_acquire+0x62e/0x1ce0 [ 427.780221][T10594] ___sys_recvmsg+0xdb/0x1a0 [ 427.780237][T10594] ? __pfx____sys_recvmsg+0x10/0x10 [ 427.780260][T10594] ? __pfx___might_resched+0x10/0x10 [ 427.780278][T10594] do_recvmmsg+0x2fe/0x750 [ 427.780300][T10594] ? __pfx_do_recvmmsg+0x10/0x10 [ 427.780319][T10594] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 427.780334][T10594] ? __fget_files+0x20e/0x3c0 [ 427.780344][T10594] ? __kvm_handle_async_pf+0x70/0xb0 [ 427.780363][T10594] __x64_sys_recvmmsg+0x22a/0x280 [ 427.780381][T10594] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 427.780413][T10594] do_syscall_64+0xcd/0xfa0 [ 427.780439][T10594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.780457][T10594] RIP: 0033:0x7fc6b678eec9 [ 427.780471][T10594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.780488][T10594] RSP: 002b:00007fc6b49f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 427.780503][T10594] RAX: ffffffffffffffda RBX: 00007fc6b69e6090 RCX: 00007fc6b678eec9 [ 427.780514][T10594] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 427.780524][T10594] RBP: 00007fc6b49f6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.780533][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.780539][T10594] R13: 00007fc6b69e6128 R14: 00007fc6b69e6090 R15: 00007ffc80b4aaf8 [ 427.780554][T10594] [ 427.996080][ T30] audit: type=1400 audit(1760115035.962:949): avc: denied { mount } for pid=10583 comm="syz.3.1169" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 428.055706][T10584] overlayfs: overlapping lowerdir path [ 428.065111][T10584] netlink: 'syz.3.1169': attribute type 3 has an invalid length. [ 428.228619][T10394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.335493][T10600] input: syz1 as /devices/virtual/input/input19 [ 428.482026][ T30] audit: type=1400 audit(1760115036.662:950): avc: denied { read } for pid=5167 comm="acpid" name="event4" dev="devtmpfs" ino=3148 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 428.661295][ T30] audit: type=1400 audit(1760115036.662:951): avc: denied { open } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3148 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 428.684690][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.728802][T10315] veth0_vlan: entered promiscuous mode [ 428.859042][T10315] veth1_vlan: entered promiscuous mode [ 429.434720][T10315] veth0_macvtap: entered promiscuous mode [ 429.557854][T10315] veth1_macvtap: entered promiscuous mode [ 429.607348][T10315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.137964][T10315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.190522][ T6248] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.199412][ T6248] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.452021][ T6250] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.471275][ T6250] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.934331][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 430.934363][ T30] audit: type=1400 audit(1760115039.122:960): avc: denied { read write } for pid=10629 comm="syz.3.1176" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 431.041575][ T24] hid_parser_main: 5 callbacks suppressed [ 431.041594][ T24] hid-generic 0003:0004:FFFFFFFD.000D: unknown main item tag 0x0 [ 431.041650][ T24] hid-generic 0003:0004:FFFFFFFD.000D: unknown main item tag 0x0 [ 431.041670][ T24] hid-generic 0003:0004:FFFFFFFD.000D: unknown main item tag 0x0 [ 431.041690][ T24] hid-generic 0003:0004:FFFFFFFD.000D: unknown main item tag 0x0 [ 431.041709][ T24] hid-generic 0003:0004:FFFFFFFD.000D: unknown main item tag 0x0 [ 431.041728][ T24] hid-generic 0003:0004:FFFFFFFD.000D: unknown main item tag 0x0 [ 431.041747][ T24] hid-generic 0003:0004:FFFFFFFD.000D: unknown main item tag 0x0 [ 431.041767][ T24] hid-generic 0003:0004:FFFFFFFD.000D: unknown main item tag 0x0 [ 431.041787][ T24] hid-generic 0003:0004:FFFFFFFD.000D: unknown main item tag 0x0 [ 431.041808][ T24] hid-generic 0003:0004:FFFFFFFD.000D: unknown main item tag 0x0 [ 431.053225][ T30] audit: type=1400 audit(1760115039.122:961): avc: denied { open } for pid=10629 comm="syz.3.1176" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 431.310174][ T6248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.310194][ T6248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.475887][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1179'. [ 431.511609][ T6250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.513579][ T24] hid-generic 0003:0004:FFFFFFFD.000D: hidraw0: USB HID v7.ff Device [syz0] on syz1 [ 431.525503][ T6250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.532351][ T30] audit: type=1400 audit(1760115039.212:962): avc: denied { append } for pid=10634 comm="syz.0.1178" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 431.619181][T10394] veth0_vlan: entered promiscuous mode [ 431.631084][ T30] audit: type=1400 audit(1760115039.792:963): avc: denied { mounton } for pid=10315 comm="syz-executor" path="/root/syzkaller.zdtzmG/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 431.657496][T10394] veth1_vlan: entered promiscuous mode [ 431.740095][ T30] audit: type=1400 audit(1760115039.792:964): avc: denied { mount } for pid=10315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 431.768208][T10651] fido_id[10651]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 431.777362][T10394] veth0_macvtap: entered promiscuous mode [ 431.833993][ T30] audit: type=1400 audit(1760115039.792:965): avc: denied { mount } for pid=10315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 431.901305][ T30] audit: type=1400 audit(1760115039.792:966): avc: denied { mounton } for pid=10315 comm="syz-executor" path="/root/syzkaller.zdtzmG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 431.927994][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.936120][T10654] veth5: entered promiscuous mode [ 431.941512][ T30] audit: type=1400 audit(1760115039.812:967): avc: denied { mounton } for pid=10315 comm="syz-executor" path="/root/syzkaller.zdtzmG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 431.978479][ T30] audit: type=1400 audit(1760115039.862:968): avc: denied { mounton } for pid=10315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 432.002922][T10394] veth1_macvtap: entered promiscuous mode [ 432.250473][ T30] audit: type=1400 audit(1760115039.862:969): avc: denied { mount } for pid=10315 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 432.273013][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.276195][T10394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.447561][T10394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.504444][ T2927] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.505763][T10674] tmpfs: Bad value for 'mpol' [ 432.517286][ T2927] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.532806][ T2927] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.665122][ T2927] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.084585][ T6262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.099929][ T6262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.194596][T10197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.212124][T10197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.332152][T10694] rdma_rxe: rxe_newlink: failed to add bond0 [ 433.780883][ T42] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 433.953077][ T42] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 433.974863][ T5856] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 434.389302][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.398631][ T10] IPVS: starting estimator thread 0... [ 434.439762][ T42] usb 4-1: Product: syz [ 434.445339][ T42] usb 4-1: Manufacturer: syz [ 434.450696][ T42] usb 4-1: SerialNumber: syz [ 434.527460][T10704] IPVS: using max 74 ests per chain, 177600 per kthread [ 434.849063][ T5856] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 434.858636][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.881059][ T5856] usb 7-1: Product: syz [ 434.960102][ T5856] usb 7-1: Manufacturer: syz [ 434.970230][ T5856] usb 7-1: SerialNumber: syz [ 435.010104][ T5856] usb 7-1: config 0 descriptor?? [ 435.060940][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 435.103880][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 435.122440][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'. [ 435.166111][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 435.235920][ T42] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 435.273332][ T42] usb 4-1: USB disconnect, device number 27 [ 435.801615][T10728] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1196'. [ 436.199875][T10736] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1198'. [ 436.800321][ T5856] usb 7-1: f81604_read: reg: 200e failed: -EPROTO [ 436.889730][T10743] rdma_rxe: rxe_newlink: failed to add bond0 [ 437.132895][ T57] block nbd2: Possible stuck request ffff888026777000: control (read@0,1024B). Runtime 90 seconds [ 437.143973][ T57] block nbd2: Possible stuck request ffff8880267771c0: control (read@1024,1024B). Runtime 90 seconds [ 437.155108][ T57] block nbd2: Possible stuck request ffff888026777380: control (read@2048,1024B). Runtime 90 seconds [ 437.166424][ T57] block nbd2: Possible stuck request ffff888026777540: control (read@3072,1024B). Runtime 90 seconds [ 437.181797][ T5856] usb 7-1: USB disconnect, device number 2 [ 437.270782][ T5477] usb 7-1: f81604_read: reg: 100f failed: -ENODEV [ 437.313510][ T5477] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 437.331136][ T5856] usb 7-1: f81604_read: reg: 100f failed: -ENODEV [ 437.715247][ T5856] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 437.828873][T10751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1202'. [ 437.895675][T10751] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1202'. [ 439.053472][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 439.053483][ T30] audit: type=1400 audit(1760115047.242:993): avc: denied { setopt } for pid=10755 comm="syz.4.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 439.202522][ T30] audit: type=1400 audit(1760115047.372:994): avc: denied { ioctl } for pid=10761 comm="syz.6.1206" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 439.317361][T10769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1207'. [ 439.581561][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.581614][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.948314][ T30] audit: type=1400 audit(1760115048.122:995): avc: denied { connect } for pid=10774 comm="syz.5.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 440.978756][T10788] libceph: resolve 'c8' (ret=-3): failed [ 441.274886][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1213'. [ 441.469419][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 441.668404][T10819] IPv6: Can't replace route, no match found [ 441.885387][T10823] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1217'. [ 442.278145][ T30] audit: type=1400 audit(1760115050.442:996): avc: denied { write } for pid=10808 comm="syz.0.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 442.342885][ T30] audit: type=1400 audit(1760115050.442:997): avc: denied { nlmsg_write } for pid=10808 comm="syz.0.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 442.396234][ T30] audit: type=1400 audit(1760115050.452:998): avc: denied { mount } for pid=10808 comm="syz.0.1215" name="/" dev="hugetlbfs" ino=30882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 442.410616][ T5856] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 442.432790][ T30] audit: type=1400 audit(1760115050.622:999): avc: denied { bind } for pid=10827 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 442.452482][T10828] netlink: 'syz.4.1219': attribute type 4 has an invalid length. [ 443.096655][ T5856] usb 7-1: Using ep0 maxpacket: 16 [ 443.105376][ T5856] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 443.119914][ T5856] usb 7-1: config 0 has no interface number 0 [ 443.159168][ T5856] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 443.225211][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.238538][ T30] audit: type=1400 audit(1760115051.422:1000): avc: denied { create } for pid=10818 comm="syz.5.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 443.279805][ T5856] usb 7-1: Product: syz [ 443.327362][ T5856] usb 7-1: Manufacturer: syz [ 443.487569][ T5856] usb 7-1: SerialNumber: syz [ 443.614689][ T5856] usb 7-1: config 0 descriptor?? [ 443.666262][ T5856] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 443.760556][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 443.930533][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 443.945408][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 443.965103][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.182596][ T24] usb 5-1: config 0 descriptor?? [ 444.196000][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 444.240069][ T5856] gspca_spca1528: reg_w err -110 [ 444.300616][ T5856] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 444.536704][T10870] cgroup: Unknown subsys name 'cpuset' [ 444.556485][ T30] audit: type=1400 audit(1760115052.742:1001): avc: denied { read } for pid=10869 comm="syz.5.1224" path="socket:[30194]" dev="sockfs" ino=30194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 444.893223][ T1213] hid_parser_main: 8 callbacks suppressed [ 444.893242][ T1213] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 444.918180][ T1213] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 444.941393][ T1213] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 444.987472][ T1213] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 445.005553][ T5856] usb 7-1: USB disconnect, device number 3 [ 445.028073][ T1213] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 445.073705][ T1213] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 445.110923][ T1213] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 445.129878][T10886] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1227'. [ 445.139947][ T1213] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 445.156242][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1227'. [ 445.171633][ T1213] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 445.218780][ T1213] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 445.546535][ T1213] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.43 Device [syz1] on syz1 [ 445.675981][T10892] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1228'. [ 445.807323][T10896] fido_id[10896]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 445.899690][T10892] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1228'. [ 446.450435][ T24] gspca_sonixj: i2c_w8 err -110 [ 446.998281][ T24] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 447.615193][T10905] rdma_rxe: rxe_newlink: failed to add bond0 [ 447.950795][ T5856] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 448.566438][ T10] usb 5-1: USB disconnect, device number 19 [ 448.603720][ T5856] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 448.617528][ T5856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.642470][ T5856] usb 7-1: config 0 has no interface number 0 [ 448.659879][ T5856] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 448.689060][ T5856] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.695019][T10928] sch_tbf: peakrate 8258501590674852125 is lower than or equals to rate 15692466028677415803 ! [ 448.753561][ T5856] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 448.799905][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.829302][ T5856] usb 7-1: Product: syz [ 448.838483][ T5856] usb 7-1: Manufacturer: syz [ 448.845092][ T5856] usb 7-1: SerialNumber: syz [ 448.853650][ T5856] usb 7-1: config 0 descriptor?? [ 450.785401][ T30] audit: type=1400 audit(1760115058.972:1002): avc: denied { execute } for pid=10949 comm="syz.5.1242" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 450.830287][ T30] audit: type=1400 audit(1760115059.012:1003): avc: denied { name_bind } for pid=10949 comm="syz.5.1242" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 450.906219][T10914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.918553][T10914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.486078][ T30] audit: type=1400 audit(1760115059.322:1004): avc: denied { read } for pid=10951 comm="syz.4.1243" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 451.518850][ T30] audit: type=1400 audit(1760115059.322:1005): avc: denied { lock } for pid=10911 comm="syz.6.1232" path="socket:[30430]" dev="sockfs" ino=30430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 451.542938][ T5856] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 451.563971][ T30] audit: type=1400 audit(1760115059.542:1006): avc: denied { open } for pid=10951 comm="syz.4.1243" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 451.602409][T10955] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 451.609197][T10955] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 451.620041][T10955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 451.626266][T10955] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 451.636197][T10955] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 451.643772][T10955] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 451.649757][T10955] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 451.656878][T10955] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 451.662955][T10955] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 451.671998][T10955] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 451.678001][T10955] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 451.686494][T10955] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 451.693802][T10955] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 451.699791][T10955] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 451.710347][T10955] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 451.762896][ T5856] usb 6-1: Using ep0 maxpacket: 8 [ 451.776709][ T5856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.792074][ T5856] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 451.803360][ T5856] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 451.813901][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 451.832759][ T5856] usb 6-1: Product: syz [ 451.837975][ T5856] usb 6-1: Manufacturer: syz [ 451.843750][ T5856] usb 6-1: SerialNumber: syz [ 451.868740][T10962] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 451.886611][ T5856] usb 6-1: config 0 descriptor?? [ 452.715742][ T42] usb 7-1: USB disconnect, device number 4 [ 452.953394][T10983] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1242'. [ 453.445346][ T30] audit: type=1400 audit(1760115061.622:1007): avc: denied { read } for pid=10973 comm="syz.6.1247" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 453.511577][ T30] audit: type=1400 audit(1760115061.622:1008): avc: denied { open } for pid=10973 comm="syz.6.1247" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 453.556611][ T5133] Bluetooth: hci1: command 0x0406 tx timeout [ 453.622412][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 453.700601][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout [ 453.706773][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 453.712972][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 453.780501][ T5133] Bluetooth: hci5: command 0x0c1a tx timeout [ 454.480673][ T30] audit: type=1326 audit(1760115062.622:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.3.1249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f316af8eec9 code=0x0 [ 454.868609][ T10] usb 6-1: USB disconnect, device number 2 [ 455.620560][ T5133] Bluetooth: hci1: command 0x0406 tx timeout [ 455.700503][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 455.781846][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 455.787899][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 455.794031][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout [ 455.881489][ T5133] Bluetooth: hci5: command 0x0c1a tx timeout [ 455.990097][ T30] audit: type=1400 audit(1760115064.172:1010): avc: denied { execute } for pid=11014 comm="syz.3.1256" name="file0" dev="tmpfs" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 456.489771][ T30] audit: type=1400 audit(1760115064.172:1011): avc: denied { execute_no_trans } for pid=11014 comm="syz.3.1256" path="/266/file0" dev="tmpfs" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 456.810641][ T30] audit: type=1400 audit(1760115064.992:1012): avc: denied { wake_alarm } for pid=11023 comm="syz.3.1258" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 457.537255][ T30] audit: type=1400 audit(1760115065.712:1013): avc: denied { bind } for pid=11023 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 457.603100][T11032] trusted_key: encrypted_key: master key parameter '‚rusted:syz' is invalid [ 457.655672][T11032] trusted_key: encrypted_key: keylen parameter is missing [ 457.780527][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 457.855262][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 457.860525][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout [ 457.970840][ T5133] Bluetooth: hci5: command 0x0c1a tx timeout [ 458.040515][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 458.055184][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 458.066563][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.438497][ T10] usb 5-1: config 0 descriptor?? [ 458.470050][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 458.698402][ T30] audit: type=1400 audit(1760115066.882:1014): avc: denied { create } for pid=11040 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 458.729521][ T30] audit: type=1400 audit(1760115066.882:1015): avc: denied { write } for pid=11040 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 458.776239][T11042] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 458.782851][T11042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 458.896115][T11042] vhci_hcd vhci_hcd.0: Device attached [ 458.967080][T11047] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 458.973695][T11047] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.024256][T11047] vhci_hcd vhci_hcd.0: Device attached [ 459.058106][T11042] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 459.064733][T11042] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 459.108085][T11042] vhci_hcd vhci_hcd.0: Device attached [ 459.121018][T11047] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 459.130454][ T5889] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 459.162652][T11054] tipc: Started in network mode [ 459.167543][T11054] tipc: Node identity 4, cluster identity 4711 [ 459.173749][T11054] tipc: Node number set to 4 [ 459.202802][ T30] audit: type=1400 audit(1760115067.342:1016): avc: denied { setopt } for pid=11052 comm="syz.5.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 459.574562][T11050] vhci_hcd: connection closed [ 459.576013][T11048] vhci_hcd: connection closed [ 459.583968][T11043] vhci_hcd: connection reset by peer [ 459.599067][ T6257] vhci_hcd: stop threads [ 459.606525][ T6257] vhci_hcd: release socket [ 459.616985][ T6257] vhci_hcd: disconnect device [ 459.626837][ T6257] vhci_hcd: stop threads [ 459.632565][ T6257] vhci_hcd: release socket [ 459.637337][ T6257] vhci_hcd: disconnect device [ 459.643349][ T6257] vhci_hcd: stop threads [ 459.647825][ T6257] vhci_hcd: release socket [ 459.653078][ T6257] vhci_hcd: disconnect device [ 459.954953][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1266'. [ 459.988829][T11060] veth3: entered promiscuous mode [ 461.621882][ T10] gspca_sonixj: reg_r err -110 [ 461.638719][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 461.689874][ T30] audit: type=1400 audit(1760115069.872:1017): avc: denied { ioctl } for pid=11074 comm="syz.3.1270" path="socket:[30586]" dev="sockfs" ino=30586 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 461.809488][T11085] rdma_rxe: rxe_newlink: failed to add bond0 [ 462.148614][ T1213] usb 5-1: USB disconnect, device number 20 [ 463.264395][T11095] FAULT_INJECTION: forcing a failure. [ 463.264395][T11095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.278951][T11095] CPU: 0 UID: 0 PID: 11095 Comm: syz.0.1275 Not tainted syzkaller #0 PREEMPT(full) [ 463.278976][T11095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 463.278986][T11095] Call Trace: [ 463.278989][T11095] [ 463.278994][T11095] dump_stack_lvl+0x16c/0x1f0 [ 463.279014][T11095] should_fail_ex+0x512/0x640 [ 463.279034][T11095] _copy_from_user+0x2e/0xd0 [ 463.279045][T11095] copy_msghdr_from_user+0x98/0x160 [ 463.279062][T11095] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 463.279085][T11095] ___sys_sendmsg+0xfe/0x1d0 [ 463.279102][T11095] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.279135][T11095] __sys_sendmsg+0x16d/0x220 [ 463.279151][T11095] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.279175][T11095] do_syscall_64+0xcd/0xfa0 [ 463.279193][T11095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.279204][T11095] RIP: 0033:0x7fc6b678eec9 [ 463.279214][T11095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.279224][T11095] RSP: 002b:00007fc6b755a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.279235][T11095] RAX: ffffffffffffffda RBX: 00007fc6b69e5fa0 RCX: 00007fc6b678eec9 [ 463.279242][T11095] RDX: 0000000020008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 463.279249][T11095] RBP: 00007fc6b755a090 R08: 0000000000000000 R09: 0000000000000000 [ 463.279255][T11095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.279261][T11095] R13: 00007fc6b69e6038 R14: 00007fc6b69e5fa0 R15: 00007ffc80b4aaf8 [ 463.279275][T11095] [ 463.627074][ T30] audit: type=1326 audit(1760115071.812:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11096 comm="syz.6.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 463.673729][ T30] audit: type=1326 audit(1760115071.812:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11096 comm="syz.6.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 463.697569][ T30] audit: type=1326 audit(1760115071.812:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11096 comm="syz.6.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 463.722798][ T30] audit: type=1326 audit(1760115071.812:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11096 comm="syz.6.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 463.746562][ T30] audit: type=1326 audit(1760115071.812:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11096 comm="syz.6.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 463.770612][ T30] audit: type=1326 audit(1760115071.812:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11096 comm="syz.6.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 464.254357][ T5889] vhci_hcd: vhci_device speed not set [ 464.262384][T11108] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 464.280364][T11108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4880 sclass=netlink_route_socket pid=11108 comm=syz.3.1278 [ 464.629269][T11114] Cannot find del_set index 4 as target [ 465.960571][ T30] audit: type=1400 audit(1760115073.672:1024): avc: denied { setopt } for pid=11119 comm="syz.5.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 468.401525][ T9855] block nbd2: Possible stuck request ffff888026777000: control (read@0,1024B). Runtime 120 seconds [ 468.412905][ T9855] block nbd2: Possible stuck request ffff8880267771c0: control (read@1024,1024B). Runtime 120 seconds [ 468.424016][ T9855] block nbd2: Possible stuck request ffff888026777380: control (read@2048,1024B). Runtime 120 seconds [ 468.435085][ T9855] block nbd2: Possible stuck request ffff888026777540: control (read@3072,1024B). Runtime 120 seconds [ 468.661309][ T30] audit: type=1400 audit(1760115076.732:1025): avc: denied { append } for pid=11133 comm="syz.6.1286" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 468.683241][T11135] binder: 11133:11135 ioctl c0306201 200000002880 returned -14 [ 468.685910][ T30] audit: type=1400 audit(1760115076.742:1026): avc: denied { bind } for pid=11126 comm="syz.5.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 468.981453][ T1213] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 469.342186][ T1213] usb 6-1: Using ep0 maxpacket: 32 [ 469.354438][ T30] audit: type=1400 audit(1760115077.542:1027): avc: denied { append } for pid=11143 comm="syz.6.1289" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 469.455381][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 469.559448][ T30] audit: type=1400 audit(1760115077.712:1028): avc: denied { mounton } for pid=11142 comm="syz.3.1290" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 469.574472][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 469.582365][T11147] overlayfs: failed to resolve './file0': -2 [ 469.645666][ T1213] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 469.657681][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.696744][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 469.752568][T11148] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1289'. [ 469.804709][T11148] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1289'. [ 469.843833][ T1213] usb 6-1: string descriptor 0 read error: -71 [ 469.901713][ T1213] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 469.992521][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.049197][ T1213] usb 6-1: config 0 descriptor?? [ 470.090363][ T1213] usb 6-1: can't set config #0, error -71 [ 470.157380][ T1213] usb 6-1: USB disconnect, device number 3 [ 470.504627][ T1213] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 470.542458][T11161] tipc: Enabled bearer , priority 0 [ 470.566882][T11165] Invalid logical block size (-905969665) [ 470.575570][T11160] syzkaller0: entered promiscuous mode [ 470.590664][T11160] syzkaller0: entered allmulticast mode [ 470.619420][T11143] ALSA: mixer_oss: invalid OSS volume '' [ 470.629052][T11160] tipc: Resetting bearer [ 470.682277][ T1213] usb 6-1: config 0 has no interfaces? [ 470.701454][ T1213] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 470.712491][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.721008][ T1213] usb 6-1: Product: syz [ 470.725463][ T1213] usb 6-1: Manufacturer: syz [ 470.732809][ T1213] usb 6-1: SerialNumber: syz [ 470.782082][ T1213] usb 6-1: config 0 descriptor?? [ 470.975616][T11157] tipc: Resetting bearer [ 471.168401][T11157] tipc: Disabling bearer [ 471.362372][T11180] random: crng reseeded on system resumption [ 471.373310][ T30] audit: type=1400 audit(1760115079.542:1029): avc: denied { bind } for pid=11178 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 471.416143][T11179] Restarting kernel threads ... [ 471.424369][T11179] Done restarting kernel threads. [ 471.458193][ T30] audit: type=1400 audit(1760115079.552:1030): avc: denied { write } for pid=11178 comm="syz.0.1299" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 471.765870][ T30] audit: type=1400 audit(1760115079.582:1031): avc: denied { ioctl } for pid=11178 comm="syz.0.1299" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 471.798218][ T30] audit: type=1400 audit(1760115079.812:1032): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.32 dest=42028 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 471.978249][ T30] audit: type=1400 audit(1760115080.052:1033): avc: denied { setopt } for pid=11188 comm="syz.4.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 472.209974][ T5937] usb 6-1: USB disconnect, device number 4 [ 472.672417][T11202] xt_hashlimit: overflow, try lower: 3/0 [ 473.889827][T11213] tipc: Failed to remove unknown binding: 66,1,1/4:4159120409/4159120411 [ 473.922836][T11213] tipc: Failed to remove unknown binding: 66,1,1/4:4159120409/4159120411 [ 474.686976][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 475.042814][T11227] 9pnet_fd: Insufficient options for proto=fd [ 476.041807][ T30] audit: type=1400 audit(1760115083.272:1034): avc: denied { getopt } for pid=11211 comm="syz.6.1308" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 476.465178][ T30] audit: type=1400 audit(1760115084.642:1035): avc: denied { create } for pid=11223 comm="syz.4.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 476.643331][T11221] team0 (unregistering): Port device team_slave_0 removed [ 476.779903][T11221] team0 (unregistering): Port device team_slave_1 removed [ 477.394111][T11237] FAULT_INJECTION: forcing a failure. [ 477.394111][T11237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.932248][ T30] audit: type=1400 audit(1760115085.932:1036): avc: denied { create } for pid=11238 comm="syz.5.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 478.040684][T11237] CPU: 1 UID: 0 PID: 11237 Comm: syz.0.1315 Not tainted syzkaller #0 PREEMPT(full) [ 478.040709][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 478.040717][T11237] Call Trace: [ 478.040721][T11237] [ 478.040725][T11237] dump_stack_lvl+0x16c/0x1f0 [ 478.040746][T11237] should_fail_ex+0x512/0x640 [ 478.040766][T11237] core_sys_select+0x94e/0xc20 [ 478.040780][T11237] ? __pfx_core_sys_select+0x10/0x10 [ 478.040799][T11237] ? __pfx___schedule+0x10/0x10 [ 478.040826][T11237] ? set_user_sigmask+0x21b/0x2b0 [ 478.040839][T11237] ? __pfx_set_user_sigmask+0x10/0x10 [ 478.040851][T11237] ? do_pselect.constprop.0+0x82/0x1e0 [ 478.040863][T11237] do_pselect.constprop.0+0x19f/0x1e0 [ 478.040874][T11237] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 478.040894][T11237] __x64_sys_pselect6+0x182/0x240 [ 478.040905][T11237] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 478.040920][T11237] do_syscall_64+0xcd/0xfa0 [ 478.040937][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.040948][T11237] RIP: 0033:0x7fc6b678eec9 [ 478.040958][T11237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.040968][T11237] RSP: 002b:00007fc6b49f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 478.040979][T11237] RAX: ffffffffffffffda RBX: 00007fc6b69e6090 RCX: 00007fc6b678eec9 [ 478.040986][T11237] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 478.040992][T11237] RBP: 00007fc6b49f6090 R08: 0000000000000000 R09: 0000000000000000 [ 478.040999][T11237] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 478.041005][T11237] R13: 00007fc6b69e6128 R14: 00007fc6b69e6090 R15: 00007ffc80b4aaf8 [ 478.041019][T11237] [ 478.222909][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.441209][ T30] audit: type=1400 audit(1760115085.932:1037): avc: denied { setopt } for pid=11238 comm="syz.5.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 478.460708][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.518530][ T30] audit: type=1400 audit(1760115085.942:1038): avc: denied { connect } for pid=11238 comm="syz.5.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 478.592081][ T30] audit: type=1400 audit(1760115086.772:1039): avc: denied { read } for pid=11253 comm="syz.6.1319" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 478.687554][ T30] audit: type=1400 audit(1760115086.772:1040): avc: denied { open } for pid=11253 comm="syz.6.1319" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 478.827547][ T30] audit: type=1400 audit(1760115086.782:1041): avc: denied { ioctl } for pid=11253 comm="syz.6.1319" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 478.985146][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 478.992452][ T5937] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 479.064000][T11273] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1326'. [ 479.190797][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 479.244774][ T5937] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 479.253411][ T5937] usb 4-1: config 0 has no interface number 0 [ 479.275506][ T5937] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 479.477335][ T30] audit: type=1400 audit(1760115087.482:1042): avc: denied { create } for pid=11276 comm="syz.6.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 479.517978][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.591899][ T5937] usb 4-1: Product: syz [ 479.600476][ T30] audit: type=1400 audit(1760115087.482:1043): avc: denied { write } for pid=11276 comm="syz.6.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 479.628671][ T5937] usb 4-1: Manufacturer: syz [ 479.637247][ T5937] usb 4-1: SerialNumber: syz [ 479.653588][ T5937] usb 4-1: config 0 descriptor?? [ 479.663506][ T5937] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 479.901080][ T5937] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 479.949280][ T5937] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 480.078229][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 480.097518][ T5937] usb 4-1: USB disconnect, device number 28 [ 480.229653][ T5937] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 480.295478][ T5937] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 480.342822][ T5937] quatech2 4-1:0.51: device disconnected [ 480.755934][T11294] loop2: detected capacity change from 0 to 7 [ 480.824932][T11294] Dev loop2: unable to read RDB block 7 [ 480.848729][T11294] loop2: unable to read partition table [ 480.933428][T11294] loop2: partition table beyond EOD, truncated [ 480.939636][T11294] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 481.015160][T11292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.550438][ T30] audit: type=1400 audit(1760115089.632:1044): avc: denied { bind } for pid=11303 comm="syz.4.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 481.595851][ T30] audit: type=1400 audit(1760115089.782:1045): avc: denied { read write } for pid=11303 comm="syz.4.1336" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 482.200512][ T30] audit: type=1400 audit(1760115089.782:1046): avc: denied { open } for pid=11303 comm="syz.4.1336" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 482.786831][T11318] binder: 11314:11318 ioctl 40107446 0 returned -22 [ 482.797146][T11318] binder: 11314:11318 ioctl c0405602 200000000180 returned -22 [ 483.149397][ T30] audit: type=1400 audit(1760115091.002:1047): avc: denied { transfer } for pid=11314 comm="syz.4.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 483.194325][ T5937] IPVS: starting estimator thread 0... [ 483.288960][ T30] audit: type=1400 audit(1760115091.472:1048): avc: denied { create } for pid=11322 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 483.315685][T11321] IPVS: using max 38 ests per chain, 91200 per kthread [ 483.344608][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1341'. [ 483.354587][ T30] audit: type=1400 audit(1760115091.522:1049): avc: denied { setopt } for pid=11322 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 483.609803][ T30] audit: type=1400 audit(1760115091.792:1050): avc: denied { write } for pid=11328 comm="syz.4.1342" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 483.647806][ T30] audit: type=1400 audit(1760115091.792:1051): avc: denied { open } for pid=11328 comm="syz.4.1342" path="/266/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 484.984043][ T30] audit: type=1400 audit(1760115093.172:1052): avc: denied { egress } for pid=5889 comm="kworker/1:4" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 485.054382][ T30] audit: type=1400 audit(1760115093.172:1053): avc: denied { sendto } for pid=5889 comm="kworker/1:4" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 485.402760][T11354] 9pnet: Could not find request transport: rdm`Bpor000 [ 486.352341][T11327] veth5: entered promiscuous mode [ 486.385436][T11353] tipc: Started in network mode [ 486.390752][T11353] tipc: Node identity , cluster identity 4711 [ 486.396945][T11353] tipc: Failed to obtain node identity [ 486.407253][T11353] tipc: Enabling of bearer rejected, failed to enable media [ 486.574562][T11367] netlink: zone id is out of range [ 486.584656][T11367] netlink: zone id is out of range [ 486.604846][T11367] netlink: zone id is out of range [ 486.609985][T11367] netlink: zone id is out of range [ 486.662344][T11367] netlink: zone id is out of range [ 486.667486][T11367] netlink: zone id is out of range [ 486.701204][T11372] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 486.709034][T11372] CPU: 0 UID: 0 PID: 11372 Comm: syz.6.1351 Not tainted syzkaller #0 PREEMPT(full) [ 486.709060][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.709073][T11372] Call Trace: [ 486.709080][T11372] [ 486.709088][T11372] dump_stack_lvl+0x16c/0x1f0 [ 486.709123][T11372] sysfs_warn_dup+0x7f/0xa0 [ 486.709148][T11372] sysfs_do_create_link_sd+0x124/0x140 [ 486.709175][T11372] sysfs_create_link+0x61/0xc0 [ 486.709198][T11372] device_add+0x62c/0x1aa0 [ 486.709230][T11372] ? __pfx_device_add+0x10/0x10 [ 486.709255][T11372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.709279][T11372] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 486.709306][T11372] wiphy_register+0x1eb0/0x2b20 [ 486.709321][T11372] ? netdev_run_todo+0x864/0x1320 [ 486.709340][T11372] ? __pfx_wiphy_register+0x10/0x10 [ 486.709367][T11372] ieee80211_register_hw+0x253d/0x4120 [ 486.709390][T11372] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 486.709405][T11372] ? __pfx___debug_object_init+0x10/0x10 [ 486.709427][T11372] ? find_held_lock+0x2b/0x80 [ 486.709446][T11372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.709470][T11372] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 486.709490][T11372] ? __hrtimer_setup+0x176/0x280 [ 486.709507][T11372] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 486.709535][T11372] ? kasan_check_range+0x62/0x1b0 [ 486.709554][T11372] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 486.709572][T11372] ? __asan_memcpy+0x3c/0x60 [ 486.709598][T11372] hwsim_new_radio_nl+0xba2/0x1330 [ 486.709616][T11372] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 486.709639][T11372] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 486.709656][T11372] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 486.709678][T11372] genl_family_rcv_msg_doit+0x209/0x2f0 [ 486.709696][T11372] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 486.709720][T11372] ? bpf_lsm_capable+0x9/0x10 [ 486.709736][T11372] ? security_capable+0x7e/0x260 [ 486.709757][T11372] ? ns_capable+0xd7/0x110 [ 486.709777][T11372] genl_rcv_msg+0x55c/0x800 [ 486.709795][T11372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.709811][T11372] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 486.709829][T11372] ? irqentry_exit+0x3b/0x90 [ 486.709854][T11372] netlink_rcv_skb+0x158/0x420 [ 486.709868][T11372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.709885][T11372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.709913][T11372] genl_rcv+0x28/0x40 [ 486.709926][T11372] netlink_unicast+0x5a7/0x870 [ 486.709943][T11372] ? __pfx_netlink_unicast+0x10/0x10 [ 486.709965][T11372] netlink_sendmsg+0x8c8/0xdd0 [ 486.709983][T11372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.710005][T11372] ____sys_sendmsg+0xa95/0xc70 [ 486.710023][T11372] ? copy_msghdr_from_user+0x10a/0x160 [ 486.710044][T11372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.710070][T11372] ___sys_sendmsg+0x134/0x1d0 [ 486.710092][T11372] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.710140][T11372] __sys_sendmsg+0x16d/0x220 [ 486.710161][T11372] ? __pfx___sys_sendmsg+0x10/0x10 [ 486.710191][T11372] ? __secure_computing+0x28e/0x3b0 [ 486.710209][T11372] do_syscall_64+0xcd/0xfa0 [ 486.710232][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.710246][T11372] RIP: 0033:0x7ff562b8eec9 [ 486.710259][T11372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.710273][T11372] RSP: 002b:00007ff560df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.710287][T11372] RAX: ffffffffffffffda RBX: 00007ff562de6180 RCX: 00007ff562b8eec9 [ 486.710297][T11372] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007 [ 486.710305][T11372] RBP: 00007ff562c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 486.710320][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.710330][T11372] R13: 00007ff562de6218 R14: 00007ff562de6180 R15: 00007ffce6df4b18 [ 486.710352][T11372] [ 487.497644][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 487.497662][ T30] audit: type=1326 audit(1760115094.872:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 487.581799][T11367] netlink: zone id is out of range [ 487.586933][T11367] netlink: zone id is out of range [ 487.605059][ T30] audit: type=1326 audit(1760115094.872:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 487.633619][ T30] audit: type=1326 audit(1760115094.872:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 487.657496][ T30] audit: type=1326 audit(1760115094.872:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 487.691495][ T30] audit: type=1326 audit(1760115094.872:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 487.722083][T11367] netlink: zone id is out of range [ 487.727499][T11367] netlink: zone id is out of range [ 487.732116][ T30] audit: type=1326 audit(1760115094.872:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 487.964535][T11376] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 488.037822][T11376] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 488.464315][ T30] audit: type=1326 audit(1760115094.872:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 488.810568][ T30] audit: type=1326 audit(1760115094.872:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 488.837223][ T30] audit: type=1400 audit(1760115095.332:1065): avc: denied { bind } for pid=11364 comm="syz.5.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 489.150309][T11387] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1356'. [ 489.159876][T11387] syz.0.1356: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 489.174588][T11387] CPU: 1 UID: 0 PID: 11387 Comm: syz.0.1356 Not tainted syzkaller #0 PREEMPT(full) [ 489.174605][T11387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 489.174612][T11387] Call Trace: [ 489.174617][T11387] [ 489.174621][T11387] dump_stack_lvl+0x16c/0x1f0 [ 489.174642][T11387] warn_alloc+0x248/0x3a0 [ 489.174661][T11387] ? __pfx_warn_alloc+0x10/0x10 [ 489.174676][T11387] ? __pfx_stack_trace_save+0x10/0x10 [ 489.174698][T11387] ? kasan_save_stack+0x42/0x60 [ 489.174708][T11387] ? kasan_save_stack+0x33/0x60 [ 489.174717][T11387] ? kasan_save_track+0x14/0x30 [ 489.174727][T11387] ? xskq_create+0x52/0x1d0 [ 489.174740][T11387] ? xsk_setsockopt+0x74e/0x9a0 [ 489.174751][T11387] ? do_sock_setsockopt+0xf0/0x1d0 [ 489.174763][T11387] ? xskq_create+0xfb/0x1d0 [ 489.174781][T11387] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 489.174800][T11387] ? xskq_create+0xfb/0x1d0 [ 489.174816][T11387] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 489.174835][T11387] ? xskq_create+0xfb/0x1d0 [ 489.174848][T11387] vmalloc_user_noprof+0x9e/0xe0 [ 489.174861][T11387] ? xskq_create+0xfb/0x1d0 [ 489.174876][T11387] xskq_create+0xfb/0x1d0 [ 489.174891][T11387] xsk_setsockopt+0x74e/0x9a0 [ 489.174905][T11387] ? __pfx_xsk_setsockopt+0x10/0x10 [ 489.174918][T11387] ? find_held_lock+0x2b/0x80 [ 489.174935][T11387] ? selinux_socket_setsockopt+0x6a/0x80 [ 489.174953][T11387] ? __pfx_xsk_setsockopt+0x10/0x10 [ 489.174967][T11387] do_sock_setsockopt+0xf0/0x1d0 [ 489.174979][T11387] __sys_setsockopt+0x1a0/0x230 [ 489.174997][T11387] __x64_sys_setsockopt+0xbd/0x160 [ 489.175013][T11387] ? do_syscall_64+0x91/0xfa0 [ 489.175028][T11387] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.175044][T11387] do_syscall_64+0xcd/0xfa0 [ 489.175061][T11387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.175073][T11387] RIP: 0033:0x7fc6b678eec9 [ 489.175082][T11387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.175092][T11387] RSP: 002b:00007fc6b755a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 489.175103][T11387] RAX: ffffffffffffffda RBX: 00007fc6b69e5fa0 RCX: 00007fc6b678eec9 [ 489.175110][T11387] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 489.175117][T11387] RBP: 00007fc6b6811f91 R08: 0000000000000004 R09: 0000000000000000 [ 489.175124][T11387] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 489.175130][T11387] R13: 00007fc6b69e6038 R14: 00007fc6b69e5fa0 R15: 00007ffc80b4aaf8 [ 489.175144][T11387] [ 489.175148][T11387] Mem-Info: [ 489.427820][T11387] active_anon:26729 inactive_anon:0 isolated_anon:0 [ 489.427820][T11387] active_file:11614 inactive_file:51029 isolated_file:0 [ 489.427820][T11387] unevictable:1792 dirty:514 writeback:0 [ 489.427820][T11387] slab_reclaimable:12295 slab_unreclaimable:108613 [ 489.427820][T11387] mapped:40443 shmem:17765 pagetables:1521 [ 489.427820][T11387] sec_pagetables:0 bounce:0 [ 489.427820][T11387] kernel_misc_reclaimable:0 [ 489.427820][T11387] free:1247997 free_pcp:17736 free_cma:0 [ 489.473555][T11387] Node 0 active_anon:106916kB inactive_anon:0kB active_file:46412kB inactive_file:203884kB unevictable:5632kB isolated(anon):0kB isolated(file):0kB mapped:161696kB dirty:2056kB writeback:0kB shmem:69524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13728kB pagetables:5960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 489.505922][T11387] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 489.535930][T11387] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.565731][T11387] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 489.571472][T11387] Node 0 DMA32 free:1087936kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106916kB inactive_anon:0kB active_file:46412kB inactive_file:203884kB unevictable:5632kB writepending:2056kB zspages:0kB present:3129332kB managed:2541400kB mlocked:0kB bounce:0kB free_pcp:51496kB local_pcp:25616kB free_cma:0kB [ 489.604912][T11387] lowmem_reserve[]: 0 0 1 1 1 [ 489.609948][T11387] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.639507][T11387] lowmem_reserve[]: 0 0 0 0 0 [ 489.644221][T11387] Node 1 Normal free:3888692kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:232kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19448kB local_pcp:5424kB free_cma:0kB [ 489.676456][T11387] lowmem_reserve[]: 0 0 0 0 0 [ 489.681149][T11387] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 489.693705][T11387] Node 0 DMA32: 2*4kB (ME) 103*8kB (UM) 270*16kB (UM) 286*32kB (ME) 91*64kB (M) 52*128kB (M) 25*256kB (UM) 10*512kB (UME) 5*1024kB (UM) 4*2048kB (UME) 253*4096kB (UM) = 1087904kB [ 489.711863][T11387] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 489.723311][T11387] Node 1 Normal: 3*4kB (ME) 3*8kB (ME) 7*16kB (UE) 115*32kB (UME) 45*64kB (UE) 10*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 0*2048kB 946*4096kB (M) = 3888692kB [ 489.740469][T11387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 489.749982][T11387] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 489.759252][T11387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 489.768807][T11387] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 489.778100][T11387] 80402 total pagecache pages [ 489.782811][T11387] 0 pages in swap cache [ 489.786947][T11387] Free swap = 113520kB [ 489.791090][T11387] Total swap = 124996kB [ 489.795212][T11387] 2097051 pages RAM [ 489.798986][T11387] 0 pages HighMem/MovableOnly [ 489.803653][T11387] 429675 pages reserved [ 489.807787][T11387] 0 pages cma reserved [ 489.901961][ T30] audit: type=1400 audit(1760115095.712:1066): avc: denied { unmount } for pid=10315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 491.283308][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1363'. [ 491.498100][T11415] veth5: entered promiscuous mode [ 491.719105][T11422] usb usb8: usbfs: process 11422 (syz.6.1365) did not claim interface 0 before use [ 491.900678][T10456] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 492.282021][T10456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.333920][T10456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.344227][T10456] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 492.357384][T10456] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.366696][T10456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.377581][T10456] usb 6-1: config 0 descriptor?? [ 492.479973][T11435] netlink: 'syz.6.1369': attribute type 13 has an invalid length. [ 492.492838][T11435] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 492.525012][T11435] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 492.533983][T11435] gretap1: entered promiscuous mode [ 492.557735][T11435] gretap1: entered allmulticast mode [ 492.849356][T10456] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 492.875583][T11439] syz_tun: entered allmulticast mode [ 492.906898][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 492.906913][ T30] audit: type=1400 audit(1760115101.092:1086): avc: denied { bind } for pid=11437 comm="syz.6.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 493.449687][T11448] netlink: 'syz.5.1366': attribute type 2 has an invalid length. [ 493.457590][T11448] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1366'. [ 493.564529][T11437] syz_tun: left allmulticast mode [ 494.350497][T10456] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 494.785918][ T30] audit: type=1400 audit(1760115102.972:1087): avc: denied { block_suspend } for pid=11463 comm="syz.4.1377" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 495.742654][ T30] audit: type=1400 audit(1760115103.902:1088): avc: denied { getopt } for pid=11478 comm="syz.3.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 496.848970][T11491] 9pnet_fd: Insufficient options for proto=fd [ 497.353424][ T42] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 497.363403][ T30] audit: type=1400 audit(1760115105.542:1089): avc: denied { nosuid_transition } for pid=11495 comm="syz.4.1386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 497.437831][ T30] audit: type=1400 audit(1760115105.542:1090): avc: denied { transition } for pid=11495 comm="syz.4.1386" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 497.613643][ T42] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 497.622636][ T42] usb 4-1: config 0 has no interface number 0 [ 497.628835][ T42] usb 4-1: config 0 interface 184 has no altsetting 0 [ 497.637864][ T42] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 497.669198][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.673527][ T30] audit: type=1400 audit(1760115105.542:1091): avc: denied { entrypoint } for pid=11495 comm="syz.4.1386" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=208 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 498.090550][ T42] usb 4-1: Product: syz [ 498.094751][ T42] usb 4-1: Manufacturer: syz [ 498.099359][ T42] usb 4-1: SerialNumber: syz [ 498.110915][ T42] usb 4-1: config 0 descriptor?? [ 498.118849][ T42] smsc75xx v1.0.0 [ 498.122521][ T42] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 498.160559][ T30] audit: type=1400 audit(1760115105.542:1092): avc: denied { noatsecure } for pid=11495 comm="syz.4.1386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 498.181186][ T42] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 498.337853][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.421049][ T9855] block nbd2: Possible stuck request ffff888026777000: control (read@0,1024B). Runtime 150 seconds [ 498.432065][ T9855] block nbd2: Possible stuck request ffff8880267771c0: control (read@1024,1024B). Runtime 150 seconds [ 498.450979][ T9855] block nbd2: Possible stuck request ffff888026777380: control (read@2048,1024B). Runtime 150 seconds [ 498.467907][ T9855] block nbd2: Possible stuck request ffff888026777540: control (read@3072,1024B). Runtime 150 seconds [ 498.468249][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.502956][ T5889] usb 6-1: USB disconnect, device number 5 [ 498.503574][T11508] 9pnet_fd: Insufficient options for proto=fd [ 498.517882][ T30] audit: type=1400 audit(1760115106.692:1093): avc: denied { write } for pid=11507 comm="syz.4.1390" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 498.681516][T11494] gre1: entered promiscuous mode [ 498.686490][T11494] gre1: entered allmulticast mode [ 500.122441][ T10] usb 4-1: USB disconnect, device number 29 [ 500.969825][ T30] audit: type=1400 audit(1760115109.152:1094): avc: denied { setopt } for pid=11554 comm="syz.4.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 500.999082][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.005648][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.005889][T11555] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1403'. [ 501.029277][T11555] batadv1: entered promiscuous mode [ 501.035655][T11555] batadv1: entered allmulticast mode [ 501.448925][ T30] audit: type=1400 audit(1760115109.582:1095): avc: denied { setopt } for pid=11556 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 501.599658][ T30] audit: type=1400 audit(1760115109.642:1096): avc: denied { kexec_image_load } for pid=11556 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 502.655172][T11572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11572 comm=syz.4.1408 [ 502.953726][T11577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=11577 comm=syz.3.1410 [ 503.428146][ T30] audit: type=1400 audit(1760115111.612:1097): avc: denied { ioctl } for pid=11593 comm="syz.6.1417" path="socket:[32685]" dev="sockfs" ino=32685 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 504.977596][T11631] syz_tun: entered allmulticast mode [ 504.989307][T11631] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 504.998328][T11631] net_ratelimit: 40 callbacks suppressed [ 504.998342][T11631] mroute: pending queue full, dropping entries [ 505.026577][ T30] audit: type=1400 audit(1760115113.202:1098): avc: denied { create } for pid=11628 comm="syz.4.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 505.095074][ T30] audit: type=1400 audit(1760115113.202:1099): avc: denied { ioctl } for pid=11628 comm="syz.4.1427" path="socket:[33847]" dev="sockfs" ino=33847 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 505.120004][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.433382][T11624] syz_tun: left allmulticast mode [ 506.632370][T11646] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1432'. [ 506.768867][ T5863] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 507.030506][ T5863] usb 4-1: device descriptor read/64, error -71 [ 507.270451][ T5863] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 507.450455][ T5863] usb 4-1: device descriptor read/64, error -71 [ 507.615847][ T5863] usb usb4-port1: attempt power cycle [ 508.027955][T11670] binder: 11662:11670 ioctl c0405602 200000000180 returned -22 [ 508.086690][ T5863] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 508.738800][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 508.961636][ T5863] usb 4-1: device descriptor read/8, error -71 [ 509.452419][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 509.462618][T11681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11681 comm=syz.0.1440 [ 509.510467][ T5863] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 509.638456][ T30] audit: type=1400 audit(1760115117.822:1100): avc: denied { create } for pid=11691 comm="syz.4.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 509.661360][ T30] audit: type=1400 audit(1760115117.852:1101): avc: denied { ioctl } for pid=11691 comm="syz.4.1443" path="socket:[33383]" dev="sockfs" ino=33383 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 509.686191][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.740792][ T5863] usb 4-1: device not accepting address 33, error -71 [ 509.748365][ T5863] usb usb4-port1: unable to enumerate USB device [ 509.920811][ T42] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 510.062677][T11696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.110735][ T42] usb 5-1: Invalid ep0 maxpacket: 64 [ 510.142487][T11701] 9pnet_fd: Insufficient options for proto=fd [ 510.159597][ T30] audit: type=1400 audit(1760115118.332:1102): avc: denied { mounton } for pid=11694 comm="syz.0.1444" path="/syzcgroup/net/syz0/cgroup.procs" dev="cgroup" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 510.468013][ T5863] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 510.574488][T11700] veth3: entered promiscuous mode [ 510.586507][T11700] bond1: (slave veth3): Enslaving as an active interface with an up link [ 510.610476][ T42] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 510.630882][ T5863] usb 4-1: no configurations [ 510.635517][ T5863] usb 4-1: can't read configurations, error -22 [ 510.770972][ T5863] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 510.817016][ T42] usb 5-1: Invalid ep0 maxpacket: 64 [ 510.827382][ T42] usb usb5-port1: attempt power cycle [ 510.957884][ T5863] usb 4-1: no configurations [ 511.240014][ T5863] usb 4-1: can't read configurations, error -22 [ 511.342662][ T42] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 511.360135][ T5863] usb usb4-port1: attempt power cycle [ 511.371105][ T42] usb 5-1: Invalid ep0 maxpacket: 64 [ 511.386346][T11706] mkiss: ax0: crc mode is auto. [ 511.403159][ T30] audit: type=1400 audit(1760115119.592:1103): avc: denied { getopt } for pid=11702 comm="syz.6.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 511.479334][T11714] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1448'. [ 511.480431][ T30] audit: type=1400 audit(1760115119.662:1104): avc: denied { nlmsg_read } for pid=11711 comm="syz.0.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 511.511387][ T42] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 511.532966][ T42] usb 5-1: Invalid ep0 maxpacket: 64 [ 511.540854][ T42] usb usb5-port1: unable to enumerate USB device [ 511.720491][ T5863] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 511.751757][ T5863] usb 4-1: no configurations [ 511.756384][ T5863] usb 4-1: can't read configurations, error -22 [ 511.910494][ T5863] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 511.932002][ T5863] usb 4-1: no configurations [ 511.937030][ T5863] usb 4-1: can't read configurations, error -22 [ 511.950748][ T5863] usb usb4-port1: unable to enumerate USB device [ 512.090458][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 512.138879][T11726] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1453'. [ 512.243033][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 512.263611][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 512.276454][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 512.301411][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 512.302805][T11730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=805 sclass=netlink_route_socket pid=11730 comm=syz.0.1454 [ 512.312775][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 512.383034][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 512.392530][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 512.406104][ T10] usb 6-1: Product: syz [ 512.410459][ T10] usb 6-1: Manufacturer: syz [ 512.446922][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 512.452247][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 512.467794][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 512.481785][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 512.661726][ T30] audit: type=1400 audit(1760115120.842:1105): avc: denied { read write } for pid=11720 comm="syz.5.1451" name="cdc-wdm0" dev="devtmpfs" ino=3200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 512.786259][ T30] audit: type=1400 audit(1760115120.842:1106): avc: denied { open } for pid=11720 comm="syz.5.1451" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 512.810555][ T30] audit: type=1400 audit(1760115120.842:1107): avc: denied { read } for pid=11720 comm="syz.5.1451" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 512.938742][ T30] audit: type=1400 audit(1760115120.842:1108): avc: denied { open } for pid=11720 comm="syz.5.1451" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 512.963832][ T30] audit: type=1400 audit(1760115120.842:1109): avc: denied { create } for pid=11720 comm="syz.5.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 513.095258][T11739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.191818][T11743] veth5: entered promiscuous mode [ 513.215648][T11743] bond2: (slave veth5): Enslaving as an active interface with an up link [ 513.676094][ T42] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 513.960496][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 513.976070][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.510663][ T42] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 514.533311][ T42] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 514.550472][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 514.558776][ T42] usb 5-1: Product: syz [ 514.563270][ T42] usb 5-1: Manufacturer: syz [ 514.567976][ T42] usb 5-1: SerialNumber: syz [ 514.610225][ T42] usb 5-1: config 0 descriptor?? [ 514.882273][T10456] usb 6-1: USB disconnect, device number 6 [ 515.426135][T11773] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1459'. [ 515.963158][T11774] mkiss: ax0: crc mode is auto. [ 516.466048][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 516.466059][ T30] audit: type=1400 audit(1760115124.652:1115): avc: denied { append } for pid=11787 comm="syz.0.1470" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 516.523292][T11784] fuse: Unknown parameter '' [ 516.534281][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1471'. [ 516.567338][ T30] audit: type=1400 audit(1760115124.742:1116): avc: denied { watch watch_reads } for pid=11779 comm="syz.6.1468" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 516.794756][ T10] usb 5-1: USB disconnect, device number 25 [ 516.830693][T10456] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 516.986681][T10456] usb 4-1: Using ep0 maxpacket: 32 [ 516.994551][T10456] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 517.025480][T10456] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 517.044053][T10456] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 517.067922][T10456] usb 4-1: Product: syz [ 517.078002][T10456] usb 4-1: Manufacturer: syz [ 517.084407][T10456] usb 4-1: SerialNumber: syz [ 517.100018][T10456] usb 4-1: config 0 descriptor?? [ 517.107364][T11788] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 517.336712][T11801] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 517.762696][T10456] usb 4-1: USB disconnect, device number 38 [ 517.880937][ T30] audit: type=1400 audit(1760115126.062:1117): avc: denied { relabelfrom } for pid=11803 comm="syz.0.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 517.903144][ T30] audit: type=1400 audit(1760115126.092:1118): avc: denied { relabelto } for pid=11803 comm="syz.0.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 518.067814][T11813] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1477'. [ 518.563786][ T30] audit: type=1400 audit(1760115126.752:1119): avc: denied { append } for pid=11818 comm="syz.4.1479" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 518.594931][ T30] audit: type=1400 audit(1760115126.782:1120): avc: denied { map } for pid=11818 comm="syz.4.1479" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 518.623323][ T30] audit: type=1400 audit(1760115126.782:1121): avc: denied { execute } for pid=11818 comm="syz.4.1479" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 518.926965][ T30] audit: type=1400 audit(1760115127.092:1122): avc: denied { bind } for pid=11820 comm="syz.4.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 519.028733][T11828] random: crng reseeded on system resumption [ 519.049685][T11832] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 519.079602][T11834] bad cache= option: noneê [ 519.079602][T11834] [ 519.086466][T11834] CIFS: VFS: bad cache= option: noneê [ 519.385360][T11836] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 519.495984][ T30] audit: type=1400 audit(1760115127.642:1123): avc: denied { create } for pid=11831 comm="syz.0.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 519.518993][T11832] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 519.543601][T11836] UDF-fs: Scanning with blocksize 512 failed [ 519.665700][ T30] audit: type=1400 audit(1760115127.832:1124): avc: denied { ioctl } for pid=11824 comm="syz.5.1482" path="socket:[33721]" dev="sockfs" ino=33721 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 519.926547][T11832] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 519.956611][T11836] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 519.968904][T11836] UDF-fs: Scanning with blocksize 1024 failed [ 519.978551][T11832] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 519.987213][T11836] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 519.994910][T11836] UDF-fs: Scanning with blocksize 2048 failed [ 520.007973][T11836] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 520.015602][T11836] UDF-fs: Scanning with blocksize 4096 failed [ 520.181005][T11832] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 520.202292][T11832] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 520.212502][T11832] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 520.220778][T11832] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 520.232549][T11832] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 520.274689][T11832] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 520.921773][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 521.082740][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 521.093250][ T10] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 521.106864][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.134453][ T10] usb 4-1: Product: syz [ 521.156512][ T10] usb 4-1: Manufacturer: syz [ 521.189405][ T10] usb 4-1: SerialNumber: syz [ 521.211164][ T10] usb 4-1: config 0 descriptor?? [ 521.229649][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 521.247661][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 521.331751][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 521.369547][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 521.389256][ T10] usb 4-1: media controller created [ 521.433090][T11852] cxusb: i2c wr: len=173 is too big! [ 521.433090][T11852] [ 521.507688][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 521.508912][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.059301][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 522.059313][ T30] audit: type=1400 audit(1760115130.162:1128): avc: denied { getopt } for pid=11867 comm="syz.4.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 522.213206][T11876] trusted_key: encrypted_key: insufficient parameters specified [ 522.473904][T11877] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1494'. [ 522.571026][T11880] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1491'. [ 522.591377][ T10] usb 4-1: selecting invalid altsetting 7 [ 522.604725][ T10] cxusb: set interface failed [ 522.628059][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 522.781416][T11911] fuse: blksize only supported for fuseblk [ 523.126091][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 523.176437][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 523.320474][ T42] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 523.473194][ T10] rc_core: IR keymap rc-dvico-portable not found [ 523.509584][ T10] Registered IR keymap rc-empty [ 523.520744][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 523.530803][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 523.556740][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input21 [ 523.575372][ T42] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 523.646836][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.652831][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 523.672424][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 523.700983][ T10] usb 4-1: USB disconnect, device number 39 [ 523.749823][ T42] usb 5-1: Product: syz [ 523.759261][ T42] usb 5-1: Manufacturer: syz [ 523.770528][ T42] usb 5-1: SerialNumber: syz [ 523.782234][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 523.797820][ T42] usb 5-1: config 0 descriptor?? [ 523.822399][ T42] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 523.946301][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 524.294523][ T42] gspca_topro: reg_w err -71 [ 524.330519][T11935] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1501'. [ 524.352580][ T42] gspca_topro: Sensor soi763a [ 524.384020][ T42] usb 5-1: USB disconnect, device number 26 [ 524.440674][ T5863] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 524.550311][ T30] audit: type=1400 audit(1760115132.732:1129): avc: denied { mount } for pid=11940 comm="syz.6.1502" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 524.610587][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 524.621248][ T5863] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 524.632026][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.690981][ T5863] usb 6-1: config 0 descriptor?? [ 524.721918][ T5863] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 525.355788][ C0] hrtimer: interrupt took 22479 ns [ 526.004342][T11967] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1510'. [ 526.085945][T11969] Bluetooth: MGMT ver 1.23 [ 526.120067][ T30] audit: type=1400 audit(1760115134.282:1130): avc: denied { mounton } for pid=11958 comm="syz.4.1507" path="/proc/1074/cgroup" dev="proc" ino=34434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 526.154122][ T30] audit: type=1400 audit(1760115134.282:1131): avc: denied { setopt } for pid=11958 comm="syz.4.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 526.181085][ T30] audit: type=1400 audit(1760115134.292:1132): avc: denied { read } for pid=11958 comm="syz.4.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 526.270219][ T30] audit: type=1400 audit(1760115134.452:1133): avc: denied { shutdown } for pid=11958 comm="syz.4.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 526.270265][ T30] audit: type=1400 audit(1760115134.452:1134): avc: denied { setopt } for pid=11961 comm="syz.3.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 526.290839][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.369121][T11970] Bluetooth: hci0: invalid len left 7, exp >= 48 [ 526.423831][ T30] audit: type=1400 audit(1760115134.552:1135): avc: denied { read } for pid=11961 comm="syz.3.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 528.358154][ T5863] gspca_sonixj: reg_r err -110 [ 528.363094][ T5863] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 528.502610][ T9855] block nbd2: Possible stuck request ffff888026777000: control (read@0,1024B). Runtime 180 seconds [ 528.513487][ T9855] block nbd2: Possible stuck request ffff8880267771c0: control (read@1024,1024B). Runtime 180 seconds [ 528.525231][ T9855] block nbd2: Possible stuck request ffff888026777380: control (read@2048,1024B). Runtime 180 seconds [ 528.536314][ T9855] block nbd2: Possible stuck request ffff888026777540: control (read@3072,1024B). Runtime 180 seconds [ 528.619647][T10456] usb 6-1: USB disconnect, device number 7 [ 530.341177][T11996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.353873][T12002] validate_nla: 46 callbacks suppressed [ 530.353896][T12002] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 530.485100][T12002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.654706][T12006] 9pnet_fd: Insufficient options for proto=fd [ 531.019130][T12000] veth3: entered promiscuous mode [ 531.029616][T12000] bond1: (slave veth3): Enslaving as an active interface with an up link [ 531.083380][T12002] veth7: entered promiscuous mode [ 531.088530][T12011] XFS (nullb0): Invalid superblock magic number [ 531.108407][T12002] bond3: (slave veth7): Enslaving as an active interface with an up link [ 532.166740][T12032] netlink: 'syz.5.1526': attribute type 1 has an invalid length. [ 532.308309][T12032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.360646][ T30] audit: type=1400 audit(1760115140.532:1136): avc: denied { append } for pid=12026 comm="syz.4.1524" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 532.420509][T10456] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 532.770913][T12041] netlink: 'syz.5.1527': attribute type 1 has an invalid length. [ 532.860417][T10456] usb 4-1: Using ep0 maxpacket: 16 [ 532.869953][T10456] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 532.879882][T10456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.029881][T12041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 533.076381][T10456] usb 4-1: config 0 descriptor?? [ 533.084957][T10456] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 533.236535][T12049] FAULT_INJECTION: forcing a failure. [ 533.236535][T12049] name failslab, interval 1, probability 0, space 0, times 0 [ 533.249679][T12049] CPU: 1 UID: 0 PID: 12049 Comm: syz.0.1528 Not tainted syzkaller #0 PREEMPT(full) [ 533.249703][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 533.249713][T12049] Call Trace: [ 533.249719][T12049] [ 533.249726][T12049] dump_stack_lvl+0x16c/0x1f0 [ 533.249758][T12049] should_fail_ex+0x512/0x640 [ 533.249793][T12049] should_failslab+0xc2/0x120 [ 533.249814][T12049] __kmalloc_cache_noprof+0x72/0x780 [ 533.249839][T12049] ? bt_sock_alloc+0x305/0x3a0 [ 533.249861][T12049] ? l2cap_chan_create+0x44/0x920 [ 533.249884][T12049] ? l2cap_chan_create+0x44/0x920 [ 533.249901][T12049] ? bt_sock_alloc+0x13a/0x3a0 [ 533.249922][T12049] l2cap_chan_create+0x44/0x920 [ 533.249941][T12049] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 533.249972][T12049] l2cap_sock_create+0x123/0x1f0 [ 533.250007][T12049] bt_sock_create+0x182/0x350 [ 533.250031][T12049] __sock_create+0x335/0x8d0 [ 533.250057][T12049] __sys_socket+0x14d/0x260 [ 533.250076][T12049] ? __x64_sys_openat+0x174/0x210 [ 533.250099][T12049] ? __pfx___sys_socket+0x10/0x10 [ 533.250117][T12049] ? ksys_write+0x1ac/0x250 [ 533.250140][T12049] __x64_sys_socket+0x72/0xb0 [ 533.250159][T12049] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.250185][T12049] do_syscall_64+0xcd/0xfa0 [ 533.250219][T12049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.250237][T12049] RIP: 0033:0x7fc6b678eec9 [ 533.250251][T12049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.250274][T12049] RSP: 002b:00007fc6b49f5fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 533.250299][T12049] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fc6b678eec9 [ 533.250310][T12049] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001f [ 533.250320][T12049] RBP: 00007fc6b49f6090 R08: 0000000000000000 R09: 0000000000000000 [ 533.250331][T12049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.250341][T12049] R13: 00007fc6b69e6128 R14: 00007fc6b69e6090 R15: 00007ffc80b4aaf8 [ 533.250365][T12049] [ 533.453354][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.461022][T12042] veth5: entered promiscuous mode [ 533.468906][T12042] bond3: (slave veth5): Enslaving as an active interface with an up link [ 533.725331][T12051] netlink: 'syz.6.1529': attribute type 3 has an invalid length. [ 533.733165][T12051] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1529'. [ 533.830617][T12054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12054 comm=syz.6.1529 [ 534.212955][T12062] tipc: Started in network mode [ 534.217883][T12062] tipc: Node identity 4, cluster identity 4711 [ 534.224094][T12062] tipc: Node number set to 4 [ 534.698673][T12070] FAULT_INJECTION: forcing a failure. [ 534.698673][T12070] name failslab, interval 1, probability 0, space 0, times 0 [ 534.711426][T12070] CPU: 0 UID: 0 PID: 12070 Comm: syz.6.1535 Not tainted syzkaller #0 PREEMPT(full) [ 534.711450][T12070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.711460][T12070] Call Trace: [ 534.711467][T12070] [ 534.711475][T12070] dump_stack_lvl+0x16c/0x1f0 [ 534.711504][T12070] should_fail_ex+0x512/0x640 [ 534.711531][T12070] ? __kmalloc_noprof+0xca/0x880 [ 534.711557][T12070] should_failslab+0xc2/0x120 [ 534.711578][T12070] __kmalloc_noprof+0xdd/0x880 [ 534.711602][T12070] ? copy_splice_read+0x1a8/0xc20 [ 534.711632][T12070] ? copy_splice_read+0x1a8/0xc20 [ 534.711658][T12070] copy_splice_read+0x1a8/0xc20 [ 534.711691][T12070] ? __pfx_copy_splice_read+0x10/0x10 [ 534.711720][T12070] ? look_up_lock_class+0x59/0x150 [ 534.711750][T12070] ? lockdep_init_map_type+0x5c/0x280 [ 534.711770][T12070] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 534.711789][T12070] ? __pfx_copy_splice_read+0x10/0x10 [ 534.711815][T12070] do_splice_read+0x285/0x370 [ 534.711845][T12070] splice_direct_to_actor+0x2a1/0xa30 [ 534.711864][T12070] ? __pfx_direct_splice_actor+0x10/0x10 [ 534.711886][T12070] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 534.711921][T12070] do_splice_direct+0x174/0x240 [ 534.711938][T12070] ? __pfx_do_splice_direct+0x10/0x10 [ 534.711956][T12070] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 534.711987][T12070] ? rw_verify_area+0xcf/0x6c0 [ 534.712014][T12070] do_sendfile+0xb06/0xe50 [ 534.712049][T12070] ? __pfx_do_sendfile+0x10/0x10 [ 534.712076][T12070] ? __fget_files+0x20e/0x3c0 [ 534.712099][T12070] __x64_sys_sendfile64+0x1d8/0x220 [ 534.712119][T12070] ? ksys_write+0x1ac/0x250 [ 534.712134][T12070] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 534.712161][T12070] do_syscall_64+0xcd/0xfa0 [ 534.712189][T12070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.712207][T12070] RIP: 0033:0x7ff562b8eec9 [ 534.712221][T12070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.712238][T12070] RSP: 002b:00007ff560df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 534.712255][T12070] RAX: ffffffffffffffda RBX: 00007ff562de6180 RCX: 00007ff562b8eec9 [ 534.712267][T12070] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 534.712277][T12070] RBP: 00007ff560df6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.712286][T12070] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 534.712296][T12070] R13: 00007ff562de6218 R14: 00007ff562de6180 R15: 00007ffce6df4b18 [ 534.712321][T12070] [ 535.233518][ T30] audit: type=1400 audit(1760115143.412:1137): avc: denied { module_load } for pid=12071 comm="syz.4.1536" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 536.130483][ T5863] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 536.271032][ T5863] usb 6-1: device descriptor read/64, error -71 [ 536.410704][T10456] gspca_sonixj: reg_r err -110 [ 536.415660][T10456] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 536.604918][T12106] rdma_rxe: rxe_newlink: failed to add bond0 [ 536.760656][ T5863] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 536.900492][ T5863] usb 6-1: device descriptor read/64, error -71 [ 536.970154][ T30] audit: type=1400 audit(1760115145.152:1138): avc: denied { create } for pid=12107 comm="syz.6.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 536.992179][ T30] audit: type=1400 audit(1760115145.152:1139): avc: denied { write } for pid=12107 comm="syz.6.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 537.023396][ T5863] usb usb6-port1: attempt power cycle [ 537.029716][ T30] audit: type=1326 audit(1760115145.152:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.038402][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1545'. [ 537.110506][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1545'. [ 537.110683][T10456] usb 4-1: USB disconnect, device number 40 [ 537.143886][ T30] audit: type=1326 audit(1760115145.152:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.178674][ T30] audit: type=1326 audit(1760115145.182:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.202680][ T30] audit: type=1326 audit(1760115145.182:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.229549][ T30] audit: type=1326 audit(1760115145.182:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.253013][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.358388][ T30] audit: type=1326 audit(1760115145.182:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.381995][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.600522][ T30] audit: type=1326 audit(1760115145.182:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.607102][ T5863] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 537.636677][ T30] audit: type=1326 audit(1760115145.182:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.661157][ T30] audit: type=1326 audit(1760115145.202:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff562b8ef03 code=0x7ffc0000 [ 537.684656][ T5863] usb 6-1: device descriptor read/8, error -71 [ 537.690926][ T30] audit: type=1326 audit(1760115145.202:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff562b8ef03 code=0x7ffc0000 [ 537.714618][ T30] audit: type=1326 audit(1760115145.202:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.739403][ T30] audit: type=1326 audit(1760115145.212:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.763065][ T30] audit: type=1326 audit(1760115145.212:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.957845][ T30] audit: type=1326 audit(1760115145.212:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 537.990781][ T5863] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 538.045683][ T30] audit: type=1326 audit(1760115145.212:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 538.060884][ T5863] usb 6-1: device descriptor read/8, error -71 [ 538.069443][ T30] audit: type=1326 audit(1760115145.212:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff562b8eec9 code=0x7ffc0000 [ 538.231550][ T5863] usb usb6-port1: unable to enumerate USB device [ 538.321402][T12127] comedi comedi3: comedi_config --init_data is deprecated [ 539.484731][T12144] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1556'. [ 539.500673][T12144] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1556'. [ 539.540693][T10456] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 539.720459][T10456] usb 6-1: Using ep0 maxpacket: 16 [ 539.727190][T10456] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 539.736622][T10456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.758512][T10456] usb 6-1: config 0 descriptor?? [ 539.895138][T10456] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 540.042005][T12140] ALSA: mixer_oss: invalid OSS volume '' [ 542.186556][T12169] FAULT_INJECTION: forcing a failure. [ 542.186556][T12169] name failslab, interval 1, probability 0, space 0, times 0 [ 542.204059][T12171] 9pnet_fd: Insufficient options for proto=fd [ 542.230470][T12169] CPU: 0 UID: 0 PID: 12169 Comm: syz.3.1563 Not tainted syzkaller #0 PREEMPT(full) [ 542.230496][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.230507][T12169] Call Trace: [ 542.230512][T12169] [ 542.230519][T12169] dump_stack_lvl+0x16c/0x1f0 [ 542.230550][T12169] should_fail_ex+0x512/0x640 [ 542.230576][T12169] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 542.230595][T12169] should_failslab+0xc2/0x120 [ 542.230615][T12169] __kvmalloc_node_noprof+0x141/0x9c0 [ 542.230633][T12169] ? do_raw_spin_lock+0x12c/0x2b0 [ 542.230655][T12169] ? simple_xattr_alloc+0x46/0xa0 [ 542.230681][T12169] ? simple_xattr_alloc+0x46/0xa0 [ 542.230699][T12169] simple_xattr_alloc+0x46/0xa0 [ 542.230720][T12169] shmem_initxattrs+0x127/0x5b0 [ 542.230741][T12169] ? evm_inode_init_security+0x237/0x320 [ 542.230764][T12169] security_inode_init_security+0x26e/0x390 [ 542.230790][T12169] ? __pfx_shmem_initxattrs+0x10/0x10 [ 542.230810][T12169] ? __pfx_security_inode_init_security+0x10/0x10 [ 542.230842][T12169] shmem_mknod+0x22e/0x450 [ 542.230867][T12169] ? __pfx_shmem_create+0x10/0x10 [ 542.230887][T12169] lookup_open.isra.0+0x11d3/0x1580 [ 542.230926][T12169] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 542.230957][T12169] ? find_held_lock+0x2b/0x80 [ 542.230985][T12169] ? __pfx_down_write+0x10/0x10 [ 542.231011][T12169] path_openat+0x893/0x2cb0 [ 542.231039][T12169] ? __pfx_path_openat+0x10/0x10 [ 542.231064][T12169] do_filp_open+0x20b/0x470 [ 542.231083][T12169] ? __pfx_do_filp_open+0x10/0x10 [ 542.231119][T12169] ? alloc_fd+0x471/0x7d0 [ 542.231146][T12169] do_sys_openat2+0x11b/0x1d0 [ 542.231168][T12169] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.231193][T12169] ? __fget_files+0x20e/0x3c0 [ 542.231216][T12169] __x64_sys_openat+0x174/0x210 [ 542.231246][T12169] ? __pfx___x64_sys_openat+0x10/0x10 [ 542.231280][T12169] do_syscall_64+0xcd/0xfa0 [ 542.231308][T12169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.231326][T12169] RIP: 0033:0x7f316af8eec9 [ 542.231342][T12169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.231359][T12169] RSP: 002b:00007f316bded038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.231376][T12169] RAX: ffffffffffffffda RBX: 00007f316b1e5fa0 RCX: 00007f316af8eec9 [ 542.231387][T12169] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 542.231398][T12169] RBP: 00007f316bded090 R08: 0000000000000000 R09: 0000000000000000 [ 542.231409][T12169] R10: ce8697e3d5188492 R11: 0000000000000246 R12: 0000000000000002 [ 542.231419][T12169] R13: 00007f316b1e6038 R14: 00007f316b1e5fa0 R15: 00007fffe399fe08 [ 542.231445][T12169] [ 542.322967][T10456] gspca_sonixj: i2c_w8 err -110 [ 543.163798][T10456] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 543.897788][T10456] usb 6-1: USB disconnect, device number 12 [ 545.784374][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 545.784397][ T30] audit: type=1400 audit(1760115153.972:1203): avc: denied { name_bind } for pid=12197 comm="syz.3.1573" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 548.348461][ T30] audit: type=1400 audit(1760115156.342:1204): avc: denied { ioctl } for pid=12231 comm="syz.0.1581" path="/330/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 548.416272][ T30] audit: type=1400 audit(1760115156.592:1205): avc: denied { listen } for pid=12234 comm="syz.4.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 548.553688][ T30] audit: type=1400 audit(1760115156.732:1206): avc: denied { ioctl } for pid=12242 comm="syz.5.1583" path="socket:[35755]" dev="sockfs" ino=35755 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 548.780776][ T5863] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 548.982562][ T31] INFO: task syz.2.1078:10149 blocked for more than 143 seconds. [ 548.997975][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 549.063995][ T31] Not tainted syzkaller #0 [ 549.163312][ T5863] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 549.177959][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.199266][ T31] task:syz.2.1078 state:D stack:28840 pid:10149 tgid:10148 ppid:5817 task_flags:0x400140 flags:0x00080002 [ 549.290773][T12263] hub 9-0:1.0: USB hub found [ 549.300668][T12263] hub 9-0:1.0: 1 port detected [ 549.642532][ T31] Call Trace: [ 549.646030][ T31] [ 549.649341][ T31] __schedule+0x1190/0x5de0 [ 549.660654][ T31] ? __pfx___schedule+0x10/0x10 [ 549.670412][ T31] ? find_held_lock+0x2b/0x80 [ 549.677578][ T31] ? schedule+0x2d7/0x3a0 [ 549.701291][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.743297][T12259] rdma_rxe: rxe_newlink: failed to add bond0 [ 549.855159][ T31] ? bdev_open+0x41a/0xe40 [ 549.860075][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.130469][ T31] schedule+0xe7/0x3a0 [ 550.138953][ T31] schedule_preempt_disabled+0x13/0x30 [ 550.145048][ T31] __mutex_lock+0x818/0x1060 [ 550.150836][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.170756][ T31] ? bdev_open+0x41a/0xe40 [ 550.176273][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.194366][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 550.202104][ T31] ? bdev_open+0x41a/0xe40 [ 550.206837][ T31] bdev_open+0x41a/0xe40 [ 550.211294][ T31] ? iput+0x35/0x40 [ 550.215209][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.225498][ T31] blkdev_open+0x34e/0x4f0 [ 550.230982][ T31] do_dentry_open+0x97f/0x1530 [ 550.236020][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.246512][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 550.252800][ T31] vfs_open+0x82/0x3f0 [ 550.257164][ T31] path_openat+0x1de4/0x2cb0 [ 550.262186][ T31] ? __pfx_path_openat+0x10/0x10 [ 550.267427][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.277758][ T31] do_filp_open+0x20b/0x470 [ 550.282616][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 550.288562][ T31] ? alloc_fd+0x471/0x7d0 [ 550.293007][ T31] do_sys_openat2+0x11b/0x1d0 [ 550.297867][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.308112][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 550.313574][ T31] ? find_held_lock+0x2b/0x80 [ 550.318481][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 550.323708][ T31] __x64_sys_openat+0x174/0x210 [ 550.328746][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 550.328896][ T5863] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 550.344158][ T31] ? do_user_addr_fault+0x843/0x1370 [ 550.349529][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 550.357978][ T31] do_syscall_64+0xcd/0xfa0 [ 550.362705][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.368746][ T5863] usb 5-1: SerialNumber: syz [ 550.368997][ T31] RIP: 0033:0x7f6aa498d710 [ 550.379122][ T31] RSP: 002b:00007f6aa58f1b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 550.379584][ T5863] usb 5-1: config 0 descriptor?? [ 550.393382][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6aa498d710 [ 550.401748][ T31] RDX: 0000000000000002 RSI: 00007f6aa58f1c10 RDI: 00000000ffffff9c [ 550.412215][ T5863] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24 [ 550.425350][ T31] RBP: 00007f6aa58f1c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 550.434436][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 550.442719][ T31] R13: 00007f6aa4be6038 R14: 00007f6aa4be5fa0 R15: 00007ffe44a813c8 [ 550.451109][ T31] [ 550.454720][ T31] [ 550.454720][ T31] Showing all locks held in the system: [ 550.465759][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 550.472022][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 550.483402][ T31] 1 lock held by khungtaskd/31: [ 550.490328][ T31] #0: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 550.500947][ T31] 1 lock held by kworker/u8:5/147: [ 550.516975][ T31] 3 locks held by acpid/5167: [ 550.521976][ T31] #0: ffff8880296a0160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x23/0x140 [ 550.532793][ T31] #1: ffff888053bbd2c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x4b/0x3d0 [ 550.543644][ T31] #2: ffff888028f85948 (&dev->pm_mutex#2){+.+.}-{4:4}, at: bcm5974_open+0xa5/0x1c0 [ 550.553563][ T31] 2 locks held by getty/5574: [ 550.558339][ T31] #0: ffff88814db870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 550.568888][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 550.579623][ T31] 1 lock held by udevd/5814: [ 550.584843][ T31] #0: ffff888142ffc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 550.594700][ T31] 7 locks held by kworker/0:5/5863: [ 550.600016][ T31] #0: ffff8881442a5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.611362][ T31] #1: ffffc900049efd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.623091][ T31] #2: ffff888144fc8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 550.625768][T12245] input: syz1 as /devices/virtual/input/input25 [ 550.632506][ T31] #3: ffff888053711198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 550.649463][ T31] #4: ffff888031408160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 550.659105][ T31] #5: ffffffff8f9269a8 (input_mutex){+.+.}-{4:4}, at: input_register_device+0x992/0x1180 [ 550.669642][ T31] #6: ffff888053bbd2c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_register_handle+0xca/0x630 [ 550.680015][ T31] 4 locks held by udevd/6512: [ 550.684996][ T31] #0: ffff888079c9b9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 550.694408][ T31] #1: ffff888025c51888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 550.704345][ T31] #2: ffff88802b2b60f8 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 550.714211][ T31] #3: ffff888053711198 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 550.723463][ T31] 1 lock held by syz.2.1078/10149: [ 550.728747][ T31] #0: ffff888142ffc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 550.738618][ T31] 1 lock held by syz.4.1584/12244: [ 550.744727][ T31] 2 locks held by syz.4.1584/12245: [ 550.750081][ T31] #0: ffff888029df2870 (&newdev->mutex){+.+.}-{4:4}, at: uinput_ioctl_handler.isra.0+0xcb/0x1df0 [ 550.761589][ T31] #1: ffffffff8f9269a8 (input_mutex){+.+.}-{4:4}, at: input_register_device+0x992/0x1180 [ 550.772228][ T31] 3 locks held by syz.6.1589/12257: [ 550.777511][ T31] #0: ffffffff900fae88 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_release+0x1d/0x7c0 [ 550.787665][ T31] #1: ffffffff90100128 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x38/0xa80 [ 550.799707][ T31] #2: ffffffff8e3cfa38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 550.810174][ T31] [ 550.812975][ T31] ============================================= [ 550.812975][ T31] [ 550.822086][ T31] NMI backtrace for cpu 0 [ 550.822104][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 550.822123][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.822133][ T31] Call Trace: [ 550.822139][ T31] [ 550.822146][ T31] dump_stack_lvl+0x116/0x1f0 [ 550.822178][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 550.822200][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 550.822225][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 550.822251][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 550.822274][ T31] watchdog+0xf3f/0x1170 [ 550.822299][ T31] ? rcu_is_watching+0x12/0xc0 [ 550.822322][ T31] ? __pfx_watchdog+0x10/0x10 [ 550.822342][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 550.822368][ T31] ? __kthread_parkme+0x19e/0x250 [ 550.822394][ T31] ? __pfx_watchdog+0x10/0x10 [ 550.822415][ T31] kthread+0x3c2/0x780 [ 550.822434][ T31] ? __pfx_kthread+0x10/0x10 [ 550.822452][ T31] ? rcu_is_watching+0x12/0xc0 [ 550.822473][ T31] ? __pfx_kthread+0x10/0x10 [ 550.822499][ T31] ret_from_fork+0x672/0x7d0 [ 550.822514][ T31] ? __pfx_kthread+0x10/0x10 [ 550.822531][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.822561][ T31] [ 550.822597][ T31] Sending NMI from CPU 0 to CPUs 1: [ 550.949755][ C1] NMI backtrace for cpu 1 [ 550.949770][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 550.949786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.949794][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 550.949818][ C1] Code: d7 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 e6 24 00 fb f4 0c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 550.949832][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c2 [ 550.949844][ C1] RAX: 00000000027d68b5 RBX: 0000000000000001 RCX: ffffffff8b6532d9 [ 550.949853][ C1] RDX: 0000000000000000 RSI: ffffffff8db02c74 RDI: ffffffff8bf1d240 [ 550.949862][ C1] RBP: ffffed1003adb490 R08: 0000000000000001 R09: ffffed10170a6655 [ 550.949871][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 550.949878][ C1] R13: ffff88801d6da480 R14: ffffffff908329d0 R15: 0000000000000000 [ 550.949887][ C1] FS: 0000000000000000(0000) GS:ffff888124add000(0000) knlGS:0000000000000000 [ 550.949900][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.949909][ C1] CR2: 00007f99d913ebb1 CR3: 000000005aea5000 CR4: 00000000003526f0 [ 550.949917][ C1] Call Trace: [ 550.949923][ C1] [ 550.949928][ C1] default_idle+0x13/0x20 [ 550.949942][ C1] default_idle_call+0x6c/0xb0 [ 550.949954][ C1] do_idle+0x38d/0x500 [ 550.949972][ C1] ? __pfx_do_idle+0x10/0x10 [ 550.949988][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 550.950004][ C1] cpu_startup_entry+0x4f/0x60 [ 550.950020][ C1] start_secondary+0x21d/0x2b0 [ 550.950039][ C1] ? __pfx_start_secondary+0x10/0x10 [ 550.950064][ C1] common_startup_64+0x13e/0x148 [ 550.950084][ C1] [ 551.167402][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 551.174275][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 551.183366][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.193404][ T31] Call Trace: [ 551.196664][ T31] [ 551.199574][ T31] dump_stack_lvl+0x3d/0x1f0 [ 551.204156][ T31] vpanic+0x640/0x6f0 [ 551.208134][ T31] panic+0xca/0xd0 [ 551.211859][ T31] ? __pfx_panic+0x10/0x10 [ 551.216263][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 551.221618][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 551.227755][ T31] ? watchdog+0xe48/0x1170 [ 551.232157][ T31] ? watchdog+0xe3b/0x1170 [ 551.236558][ T31] watchdog+0xe59/0x1170 [ 551.240791][ T31] ? rcu_is_watching+0x12/0xc0 [ 551.245540][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.250200][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.255387][ T31] ? __kthread_parkme+0x19e/0x250 [ 551.260408][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.265071][ T31] kthread+0x3c2/0x780 [ 551.269122][ T31] ? __pfx_kthread+0x10/0x10 [ 551.273715][ T31] ? rcu_is_watching+0x12/0xc0 [ 551.278467][ T31] ? __pfx_kthread+0x10/0x10 [ 551.283385][ T31] ret_from_fork+0x672/0x7d0 [ 551.287955][ T31] ? __pfx_kthread+0x10/0x10 [ 551.292539][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.297295][ T31] [ 551.300397][ T31] Kernel Offset: disabled [ 551.304696][ T31] Rebooting in 86400 seconds..