last executing test programs: 9.540492029s ago: executing program 0 (id=921): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x48000, 0x140) socket(0x28, 0x801, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 8.58632818s ago: executing program 0 (id=925): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x1b, 0x4e21, 0xc, @private2, 0x2}, {0xa, 0x4e21, 0x7, @private2, 0x6b8d}, 0xffffffffffffffff, 0xffff3d9b}}, 0x48) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090180ff0000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 7.515899668s ago: executing program 0 (id=928): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000e80)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="000df31e7f473b930d1ec0b41e8c3abd30ae01003caede4a730a6f87666c32d422d895da8439f589db840e7de2a834e341f7690a7da42b11c0e6f28fd6eda9e7f7ffffff071a46a448fd50b88fc87fca12f0e40f57141099b1e37c6b0e52358fc833cbd31eac5d6c7c0d536813379a70a9f42a4da5881c6936037d42e907cb46ed077e445522678faae1e185fa8abbf6b88efce5a345eb83eac61693aa5ee14877a279f8bf53725e5d44ca39b9f9aa5681ed9866ccc482488808ff91b2ac69a3895b28a50c2e2e8cec506f13223c42ac9b38b6469548b0fbe682272bafb91c98373daf301662da4b6776a093c0d9befd7b4ca53039c20a628aa13b8a4937507fcb1381b58350"], 0x0, 0x0, 0x0, 0x0, 0x0}) 7.118701709s ago: executing program 1 (id=930): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x4005) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0xe7, 0xf) 5.935484452s ago: executing program 3 (id=932): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0xe7, 0xf) 5.362592725s ago: executing program 3 (id=934): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xf, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4000010) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f81fcb00303a00fe8000000000000000000000000000bbff020000000000000000009900000000010400907800000000604aa1d300000000fc0100000000000000000000000000000000000f0000000000000d5ec246d621ffff7f0000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2100, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5.187823638s ago: executing program 1 (id=936): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 5.078011619s ago: executing program 1 (id=937): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.254851553s ago: executing program 1 (id=938): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="400000002000010000000000fcdbdf252d00f2800f0018007d3a2e9c5bc85c23277d00001400e1000000000000000000000000000000000050bb2d6f67"], 0x40}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x4a) 4.248594551s ago: executing program 2 (id=939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0800230004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x4) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000180), 0x1004002, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}}) syz_fuse_handle_req(r2, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004a00)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x4, 0x1, 0x0, {0xffdfffffffffffff, 0x0, 0x8000000000000001, 0x80000001, 0x0, 0x80200000000003, 0x9e9, 0xc9, 0x3, 0x6000, 0xe, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x835e, 0x40, 0x0, {0x1}}) io_uring_enter(r3, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x80, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x8}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x10001}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20045094}, 0xd0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x15, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES32=r7], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 4.114450406s ago: executing program 3 (id=941): unshare(0x6a040000) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040094}, 0x4000850) socket$inet6(0xa, 0x800, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000000)) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x2a06, 0x2, 0x6]}, &(0x7f0000000100)=0x44) 4.015349832s ago: executing program 2 (id=942): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x178) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000027000000b7080700000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000b85000000a50000009500"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 3.850934677s ago: executing program 4 (id=943): syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, &(0x7f00000001c0)={0x8001, 0x1, 0x8001, 0x8b5f, 0x6}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) tee(r1, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, &(0x7f0000000280)={{@any, 0x9}, 0x81, 0x80000001}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001500)={0x2020}, 0x2020) 3.339665875s ago: executing program 2 (id=944): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0xe7, 0xf) 3.327881546s ago: executing program 0 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060093eae687115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x86000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18}) mmap(0x0, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(0x0, 0x200000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='Y\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000500)='madvise\x00', 0x8) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r8, 0x29, 0xcf, &(0x7f0000000040)=0xfc, 0x1) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r9) recvmsg(r7, &(0x7f0000003980)={&(0x7f0000000240)=@sco, 0x80, &(0x7f0000002900)=[{&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/135, 0x87}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/43, 0x2b}, {&(0x7f0000002880)=""/80, 0x50}], 0x7, &(0x7f0000002980)=""/4096, 0x1000}, 0x2062) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r9, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r9) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r9, 0x40106e8c, &(0x7f0000000000)) fchdir(r3) 2.739323735s ago: executing program 0 (id=946): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffe}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x72) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/trace\x00', 0x66a42, 0x16a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.681117558s ago: executing program 4 (id=947): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x40) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)="ea4790a16282836e58467a827690293b4c6b0885105501e2e640ee2ac9cb88ccc89575847072f79c1e05dbe1d561b3100b9f0d78a1db578935215ef75bd8439a6f8f", 0x42}, {&(0x7f00000003c0)="d42c2ab97e1ddebc72f8777141b7e639cb44a62aa00db80284efe411ee2e8e49cde73977a2a4db121e35062fcb586d117e49ec80316bbb097664a1944d97227ee2e5b396bd", 0x45}, {&(0x7f0000000480)="f2f72dd03dff5afa372b2c863009c0724e7b37b33f580fe76863176eb50f255f7eca522f0f3852a8ec2a29184e88b648b49362ef3425f6b6c34d5222353a196ff8359af99f8740a0de6fba6d3c9a2f33569be6b49b78c59b22f60512d3e027b2d8226d345f923169aa4e5ca82c4077f2d928012993df1c26d38853a0f4", 0x7d}], 0x4}, 0x60004005) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0xe7, 0xf) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) 1.997912542s ago: executing program 1 (id=948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000140)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a0a7df707b3d176da0ce77b48148d601a92609a851b90e79584a3fd515eec7a931d76890e950a352670d2e2cf635381ea5e50bd1778f8c4c287ebe46bdfc9ba0192bf5aa05c2248ab5ed"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000460900020073797a31000000000900010073797a31000000001c000380180000800c000180060001000000000008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000b15dbdf250600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000000000001"], 0x4c}, 0x2, 0x34005}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, r8, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcp_state_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x40090}, 0x800) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$uac2(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) 1.993348651s ago: executing program 3 (id=949): openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x48000, 0x140) open$dir(&(0x7f0000000000)='./file0\x00', 0x121920, 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) 1.907772778s ago: executing program 2 (id=950): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.7388771s ago: executing program 0 (id=951): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba", 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000680)=""/211, 0xd0}}, 0x10) r4 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x20, 0x10}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}}) 1.694651339s ago: executing program 3 (id=952): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x4, 0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x225) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r2, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff52}, 0xc0003020) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) r7 = fsopen(&(0x7f0000000100)='erofs\x00', 0x1) close(r7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019c80)=""/102384, 0x18ff0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0xf0ff, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) 1.107870606s ago: executing program 4 (id=953): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback, 0xfffffff9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000040)=0x40, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000801) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x407, 0x7ff}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x40, 0x80, 0xfff80000, 0x1, 0x3e9, 0x0, 0xfffffffd, 0x10, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket(0x10, 0x2, 0x0) getpgrp(0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) shutdown(r2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = creat(0x0, 0x104) file_getattr(r3, 0x0, 0x0, 0x0, 0x1000) fgetxattr(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000000c0), 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c9000c00feff0500190f0400f5ffcd039b18205e4e8b043003005419d65ff9cad118b19e89fbd636a82527611ddf1b7548bf004212a89c3b3783824127b9f5579cd78d977e8d8db8599817e3bbcba45905a883a1ca341a8d7832009fb6003fe00edf8970254f262f2ad72f14c1b53abc987b7dd177f4a4128128e8d9dea6d27f61f906164bcf3297ee48f3a5"], 0x11) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x3, 0x0, [{0x265, 0x0, 0x2}, {0x634, 0x0, 0x10001}, {0x211, 0x0, 0xab0}]}) 1.107247897s ago: executing program 2 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000007640)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000540)=""/86, 0x56}], 0x3, &(0x7f0000000680)=""/152, 0x98}, 0xbe}, {{&(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000005c0), 0x3}, 0x2}, {{&(0x7f0000000980), 0x80, &(0x7f00000039c0)=[{&(0x7f0000000a00)=""/5, 0x5}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000003700)=""/94, 0x5e}, {&(0x7f0000003780)=""/120, 0x78}, {&(0x7f0000003800)=""/249, 0xf9}, {&(0x7f0000003900)=""/20, 0x14}, {&(0x7f0000003940)=""/33, 0x21}, {&(0x7f0000003980)=""/23, 0x17}], 0x8, &(0x7f0000000440)=""/4, 0x4}, 0x5}, {{&(0x7f0000003a80)=@nfc_llcp, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003b80)=""/232, 0xe8}, {&(0x7f0000003f00)=""/187, 0xbb}, {&(0x7f0000003c80)=""/222, 0xde}, {&(0x7f0000003b00)=""/89, 0x59}, {&(0x7f0000003e00)=""/17, 0x11}, {&(0x7f0000003e40)=""/145, 0x91}, {&(0x7f0000003d80)=""/75, 0x4b}], 0x7, &(0x7f0000000ac0)=""/94, 0x5e}, 0x1}, {{&(0x7f00000040c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000005640)}, 0x1}, {{&(0x7f0000000a40)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0xffffffffffffff6d, &(0x7f0000000c00)=[{&(0x7f0000005400)=""/4105, 0x1009}, {&(0x7f0000000b40)=""/185}], 0x1}, 0xc}, {{&(0x7f0000006840)=@qipcrtr, 0x80, &(0x7f00000068c0), 0x0, &(0x7f0000006900)=""/193, 0xc1}, 0x101}, {{&(0x7f0000006a00)=@nfc_llcp, 0x80, &(0x7f0000007040)=[{&(0x7f0000006a80)=""/235, 0xeb}, {&(0x7f0000006b80)=""/190, 0xbe}, {&(0x7f0000006c40)=""/164, 0xa4}, {&(0x7f0000006d00)=""/14, 0xe}, {&(0x7f0000006d40)=""/87, 0x5f}, {&(0x7f0000006dc0)=""/132, 0x84}, {&(0x7f0000006e80)=""/85, 0x55}, {&(0x7f0000006f00)=""/157, 0x9d}, {&(0x7f0000006fc0)=""/108, 0x6c}], 0x9, &(0x7f0000007100)=""/183, 0xb7}, 0x6}, {{0x0, 0x0, &(0x7f00000075c0), 0x0, 0x0, 0x52}, 0x7f}], 0x9, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setaffinity(r3, 0xffffffffffffff0e, &(0x7f0000000180)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r4, 0x8, 0x30, r5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[], 0xd80}, 0x1, 0x0, 0x0, 0x41}, 0x2004c880) accept4$inet(r6, 0x0, 0x0, 0x80800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_ethernet(0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaae43f6642531e0800450000250000e000041190780000000000000000ffff4e23001190756110000072c0ed933f"], 0x0) r7 = io_uring_setup(0x3450, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80900, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000008c000000030a01020000000000000000020000030900010073797a30000000006b000300fd7c400f2ffd10ac56a901205b56f46dc2"], 0xd4}}, 0x20040040) 665.902903ms ago: executing program 1 (id=955): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x178) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000027000000b7080700000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000f85000000a50000009500"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 589.766936ms ago: executing program 4 (id=956): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0xffff, 0x4}, 0x90) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)="31f8339cd855e0b0e534", 0xa) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CONNECTINFO(r1, 0x8108551b, &(0x7f0000000140)) 323.458784ms ago: executing program 4 (id=957): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x40400) r3 = getpgrp(0x0) fcntl$lock(r2, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x5, 0xfff, r3}) (async) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x0, 0x2, 0x7, 0xa, r3}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x31, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x3a}, @exit, @jmp={0x5, 0x0, 0xa, 0xa, 0x1, 0xffffffffffffffff, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x6, 0x2, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x4, 0x1, 0xc, 0x3, 0x6, 0x2, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x1d, &(0x7f0000000600)=""/29, 0x41100, 0x0, '\x00', r1, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x2, 0x2, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r0, r0, r0], &(0x7f00000006c0)=[{0x1, 0x1, 0x2, 0x4}, {0x0, 0x1, 0xb, 0x6}, {0x1, 0x1, 0x2, 0x6}], 0x10, 0x5}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x1e, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x8b, &(0x7f0000000300)=""/139, 0x40f00, 0x2, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x3, 0xaab5}, 0x10, 0x1534b, r5, 0x4, &(0x7f00000007c0)=[r0, r0], &(0x7f0000000800)=[{0x3, 0x5, 0x6, 0x8}, {0x0, 0x3, 0x9, 0xb}, {0x1, 0x2, 0x10, 0x2}, {0x0, 0x3, 0x3, 0x5}], 0x10, 0x9}, 0x94) getsockname$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0}, &(0x7f0000000940)=0x14) connect(r0, &(0x7f0000000980)=@ll={0x11, 0x10, r7, 0x1, 0x9, 0x6, @remote}, 0x80) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a80)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a00)="8c33776dcd52f3df8092f83817614157050a91e57f8b90e0ff1b9f992641e5b04486859b5629db449cfffd0fd905fd0303df829a46df80632ea58d849c2c9a6d6838acf7f5a6de9de62fb0936a638b2d3bc9cbc8ccc61bfdd48c691e6cf26318dad318fd01c0e4770d6e6c20bc86debc0a8b27", 0x73, r6}, 0x68) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x100000000, 0x8001) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000c00)=@urb_type_bulk={0x3, {0x7}, 0x7, 0x22, &(0x7f0000000b40)="328b0acd8573282d6201a0141b59a9360a5b3343eb57", 0x16, 0x5, 0xd9, 0x6, 0xffffffff, 0x0, &(0x7f0000000b80)="9876358f709dd4621037784fca4cdd238c793fc56d53eb7e0f1692be9d6c0507212287903d3803310ae478ea463ad8618102e639cde0bc7766eff04c8b9865f1bf"}) (async, rerun: 32) connect$inet(r0, &(0x7f0000000c40)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (rerun: 32) getresuid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000f80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x19c, 0x39, 0x4, 0x70bd28, 0x25dfdbfc, {0x12}, [@typed={0x8, 0x1e, 0x0, 0x0, @uid=r9}, @generic="4b9fcbfeadbc564ae8340e099178030853b166855d591d84b5e5dc2a7319640444b6e22fa7a443c825c6aa91f0a6b62cf4ca5121096e747f00d7b3689e06c69af56ea20f69bfacacb8e903c9bcee695a78c2491ee657acd3a96a085d60a81e7ea22bd3d93fad1c3519b1b5289a482e105b925dda1ec954e5881e4091c6c002810a6ca340d738f210126fe6dda1973b1dd19c7844bc39b2d061e1a5d8d7d241c81b2697344f4863f6", @generic="c7bb231e2c99dbabed0cf4929fb29ccc6a15da293d815ca25679042eaac17b5184e5ccdf89f1200894eb13c32ba28185936ab49b84101625ad5634ab7ac4351403785a6f80e2e89b4af6ffa93222d5173b6e57368b97f4e103e7e3c199335e5086c7ebc96c9f4046aa9b93eb07de52989937cd41cfd01f78828232e687a221d740424eed7d014576c6a7b413afe9e24d884efb32de57416531426e99c3bb7d8edeb4e90eac6cf0f3b6b072cc7bc6ce4fa077cc0df34a3979b483791be02541e1fa0136a0cd63a5338b938a139be42fe3403267cea139"]}, 0x19c}, 0x1, 0x0, 0x0, 0x10}, 0x24004814) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000fc0)={'\x00', 0x9, 0x0, 0x1}) (async, rerun: 64) r10 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async, rerun: 64) r11 = syz_ublk_setup_io_uring(0x143a, &(0x7f0000001040)={0x0, 0xf34d, 0x200, 0x2, 0x33e}, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) r12 = syz_open_dev$mtd(&(0x7f0000001180), 0x1, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r11, 0x1e, &(0x7f00000011c0)={r12, 0x1, 0x8, 0xff, 0x6}, 0x1) (async, rerun: 64) r13 = socket(0x21, 0x5, 0x4) (rerun: 64) r14 = accept$phonet_pipe(r13, &(0x7f0000001340), &(0x7f0000001380)=0x10) sendmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001200)="c80fc1274da0df57f8e0dfd9c51a4d4e1c5be6a6d7106e7491594c38efa07307bdb4b0d4d8e1197ad461a5b0bed60ea0fdd0c5026b5514653be48346d5da30d65338628ec1d4e7e993c36c8baafecdf0b1e5854127c6a18ba5a2c8cc4e739fea17db07dcfeebe40790b769990ef60daa222b9b6bb0568f8fccabfc0c923ba762bcda6476b237438145be77f8c8e5f352080f6f7cb068948eb96d251efb370b526e8e87d7d8f54a410584b5d01698b9adab65f05c13bf4a942cf0ddcbfc78e3c64aa676be0a16249e6195e9f4ea29e9171aff99ec5e6196d98078f49a", 0xdc}], 0x1, &(0x7f00000013c0)=[@rights={{0x1c, 0x1, 0x1, [r14, r4, r13]}}, @rights={{0x18, 0x1, 0x1, [r10, r4]}}], 0x38, 0x41}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x123) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000001480)={0xffffffff, 0x0, {0x3, 0x1, 0x9, 0x1, 0x9}}) (rerun: 32) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000001500)={{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}, {0xa, 0x4e20, 0x0, @remote, 0x2}, 0x0, {[0x1, 0x8, 0x5, 0xffff, 0x6, 0xfffffff9, 0x9, 0x400]}}, 0x5c) (async) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000001580)=0x8, 0x4) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f00000015c0)={0x6, 0x8}) 225.187237ms ago: executing program 2 (id=958): socket$unix(0x1, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x3, 0x2, 0x0, 0x700, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'netpci0\x00', 0x800}) r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x50009405, &(0x7f00000003c0)) cachestat(r4, &(0x7f0000000000)={0x74}, &(0x7f00000000c0), 0x0) r6 = fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='iocharset', &(0x7f0000000100)='iocharset', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0xf, 0x41, 0x643f}]}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r8, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000380)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r8, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004044) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0xe0, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0xbf, 0x1, 0x0, 0x1, [@generic="5d6a61b66ea7b06e1a5c80f50f38bb5a7a3ae6fee16fcae205388398cdc0b572f075398b10f52ecf19ee6cc5dc4f610c8a7b07a1a82e4e42cb9b3b8a076085b3957429cdaa3a702a33f9ba795698ee5fb5bc35912884edddaa586aaf6a9cdc9d762852512056bd672f1b2f12cf98eff073dcb35c81b8c2cec18d07106ac8e78cc6baa236c5676ca958c59c267e69fc79ac63b119dae90e8cc85891ce3b01bfddb8615ed6d63d0ecb5b66cfe8bc8d7cb45fe8153ade311b6d25b5b9"]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x146}]}, 0xe0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$FE_READ_SIGNAL_STRENGTH(r4, 0x80026f47, &(0x7f00000004c0)) 210.89349ms ago: executing program 3 (id=959): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x4005) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0xe7, 0xf) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) 0s ago: executing program 4 (id=960): unshare(0x6a040000) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040094}, 0x4000850) socket$inet6(0xa, 0x800, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000000)) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x2a06, 0x2, 0x6]}, &(0x7f0000000100)=0x44) kernel console output (not intermixed with test programs): 312] loop5: detected capacity change from 0 to 7 [ 203.579532][ T7312] Dev loop5: unable to read RDB block 7 [ 203.608896][ T30] audit: type=1400 audit(1785385172.148:428): avc: denied { connect } for pid=7307 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.634974][ T7312] loop5: AHDI p1 p3 p4 [ 203.653219][ T7312] loop5: partition table partially beyond EOD, truncated [ 203.660347][ T7185] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.670199][ T7185] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.687313][ T30] audit: type=1400 audit(1785385172.148:429): avc: denied { connect } for pid=7307 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.688133][ T187] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 203.726533][ T7185] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.735871][ T7312] loop5: p1 size 100663296 extends beyond EOD, truncated [ 203.754372][ T7185] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.767803][ T7312] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 203.775389][ T30] audit: type=1400 audit(1785385172.148:430): avc: denied { write } for pid=7307 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.815077][ T7313] Dev loop5: unable to read RDB block 7 [ 203.822214][ T7313] loop5: AHDI p1 p3 p4 [ 203.827547][ T7313] loop5: partition table partially beyond EOD, truncated [ 203.844869][ T7313] loop5: p1 size 100663296 extends beyond EOD, truncated [ 203.856765][ T7313] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 203.982451][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 204.329549][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 204.340734][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 206.500311][ T7335] FAULT_INJECTION: forcing a failure. [ 206.500311][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 206.513120][ T7335] CPU: 1 UID: 0 PID: 7335 Comm: syz.2.411 Not tainted syzkaller #0 PREEMPT(full) [ 206.513145][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 206.513155][ T7335] Call Trace: [ 206.513161][ T7335] [ 206.513168][ T7335] dump_stack_lvl+0x100/0x190 [ 206.513194][ T7335] should_fail_ex.cold+0x5/0xa [ 206.513217][ T7335] should_failslab+0xc2/0x120 [ 206.513240][ T7335] __kmalloc_noprof+0xfc/0x820 [ 206.513261][ T7335] ? bpf_prog_array_alloc+0x46/0x60 [ 206.513291][ T7335] bpf_prog_array_alloc+0x46/0x60 [ 206.513317][ T7335] bpf_prog_test_run_sk_lookup+0x520/0x1300 [ 206.513354][ T7335] ? find_held_lock+0x2b/0x80 [ 206.513381][ T7335] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 206.513407][ T7335] ? __fget_files+0x215/0x3d0 [ 206.513435][ T7335] ? __fget_files+0x21f/0x3d0 [ 206.513458][ T7335] ? fput+0x79/0x100 [ 206.513479][ T7335] ? __bpf_prog_get+0x97/0x2a0 [ 206.513503][ T7335] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 206.513532][ T7335] __sys_bpf+0x2a12/0x4e80 [ 206.513556][ T7335] ? __pfx___sys_bpf+0x10/0x10 [ 206.513574][ T7335] ? find_held_lock+0x2b/0x80 [ 206.513600][ T7335] ? get_pid_task+0xfc/0x250 [ 206.513627][ T7335] ? get_pid_task+0xfc/0x250 [ 206.513662][ T7335] ? find_held_lock+0x2b/0x80 [ 206.513692][ T7335] ? rcu_read_lock_any_held+0x6a/0xa0 [ 206.513709][ T7335] ? find_held_lock+0x2b/0x80 [ 206.513734][ T7335] ? ksys_write+0x190/0x250 [ 206.513760][ T7335] ? ksys_write+0x190/0x250 [ 206.513804][ T7335] ? fput+0x79/0x100 [ 206.513827][ T7335] ? __x64_sys_bpf+0xce/0x140 [ 206.513844][ T7335] __x64_sys_bpf+0xce/0x140 [ 206.513863][ T7335] ? do_syscall_64+0x90/0x870 [ 206.513885][ T7335] do_syscall_64+0x115/0x870 [ 206.513903][ T7335] ? clear_bhb_loop+0x40/0x90 [ 206.513924][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.513942][ T7335] RIP: 0033:0x7fa88399de99 [ 206.513957][ T7335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.513974][ T7335] RSP: 002b:00007fa8847eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.513991][ T7335] RAX: ffffffffffffffda RBX: 00007fa883c25fa0 RCX: 00007fa88399de99 [ 206.514002][ T7335] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 206.514013][ T7335] RBP: 00007fa8847eb090 R08: 0000000000000000 R09: 0000000000000000 [ 206.514022][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.514032][ T7335] R13: 00007fa883c26038 R14: 00007fa883c25fa0 R15: 00007ffea6c6b168 [ 206.514056][ T7335] [ 207.625137][ T7341] 9p: Could not find request transport: rdma. [ 207.888894][ T7359] siw: device registration error -23 [ 208.436644][ T7362] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 208.795735][ T30] audit: type=1400 audit(1785385177.388:431): avc: denied { getattr } for pid=7366 comm="syz.2.421" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 208.928510][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 208.999096][ T30] audit: type=1400 audit(1785385177.448:432): avc: denied { setopt } for pid=7365 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.039994][ T187] usb 2-1: device descriptor read/64, error -110 [ 209.068564][ T30] audit: type=1400 audit(1785385177.468:433): avc: denied { bind } for pid=7365 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.202321][ T30] audit: type=1804 audit(1785385177.788:434): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.421" name="/newroot/75/file0" dev="tmpfs" ino=419 res=1 errno=0 [ 209.293568][ T30] audit: type=1400 audit(1785385177.888:435): avc: denied { search } for pid=7366 comm="syz.2.421" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.407212][ T30] audit: type=1400 audit(1785385177.928:436): avc: denied { search } for pid=7366 comm="syz.2.421" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.431730][ T187] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 209.521624][ T30] audit: type=1400 audit(1785385177.928:437): avc: denied { read } for pid=7366 comm="syz.2.421" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.609600][ T7384] FAULT_INJECTION: forcing a failure. [ 209.609600][ T7384] name failslab, interval 1, probability 0, space 0, times 0 [ 209.623675][ T7384] CPU: 0 UID: 0 PID: 7384 Comm: syz.2.424 Not tainted syzkaller #0 PREEMPT(full) [ 209.623698][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 209.623708][ T7384] Call Trace: [ 209.623713][ T7384] [ 209.623717][ T7384] dump_stack_lvl+0x100/0x190 [ 209.623735][ T7384] should_fail_ex.cold+0x5/0xa [ 209.623750][ T7384] should_failslab+0xc2/0x120 [ 209.623766][ T7384] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 209.623780][ T7384] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 209.623799][ T7384] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 209.623813][ T7384] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 209.623828][ T7384] alloc_inode+0x68/0x250 [ 209.623844][ T7384] new_inode+0x22/0x1c0 [ 209.623861][ T7384] hugetlbfs_get_inode+0x39a/0x700 [ 209.623878][ T7384] hugetlb_file_setup+0x15b/0x5b0 [ 209.623896][ T7384] ksys_mmap_pgoff+0x242/0x610 [ 209.623913][ T7384] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 209.623926][ T7384] ? fput+0x79/0x100 [ 209.623939][ T7384] ? ksys_write+0x1ac/0x250 [ 209.623956][ T7384] ? __pfx_ksys_write+0x10/0x10 [ 209.623975][ T7384] __x64_sys_mmap+0x125/0x190 [ 209.623993][ T7384] do_syscall_64+0x115/0x870 [ 209.624006][ T7384] ? clear_bhb_loop+0x40/0x90 [ 209.624019][ T7384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.624031][ T7384] RIP: 0033:0x7fa88399de99 [ 209.624040][ T7384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.624052][ T7384] RSP: 002b:00007fa8847ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 209.624064][ T7384] RAX: ffffffffffffffda RBX: 00007fa883c26090 RCX: 00007fa88399de99 [ 209.624071][ T7384] RDX: 0000000001000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 209.624077][ T7384] RBP: 00007fa8847ca090 R08: ffffffffffffffff R09: 0000000000000000 [ 209.624084][ T7384] R10: 00020000000ec072 R11: 0000000000000246 R12: 0000000000000001 [ 209.624090][ T7384] R13: 00007fa883c26128 R14: 00007fa883c26090 R15: 00007ffea6c6b168 [ 209.624104][ T7384] [ 210.198860][ T187] usb 2-1: device descriptor read/64, error -32 [ 210.594166][ T30] audit: type=1400 audit(1785385177.928:438): avc: denied { read open } for pid=7366 comm="syz.2.421" path="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.700826][ T187] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 211.300974][ T5619] Bluetooth: hci4: command 0x0406 tx timeout [ 211.669394][ T187] usb 2-1: device descriptor read/8, error -32 [ 211.702968][ T30] audit: type=1800 audit(1785385178.968:439): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.423" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 212.061094][ T187] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 212.082445][ T30] audit: type=1400 audit(1785385179.228:440): avc: denied { read } for pid=7390 comm="syz.3.426" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 212.120134][ T187] usb 2-1: device descriptor read/8, error -32 [ 212.230054][ T187] raw-gadget.0 gadget.1: failed to queue suspend event [ 212.266772][ T9] usb 2-1: USB disconnect, device number 13 [ 213.645543][ T7428] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 213.653280][ T7428] netlink: 84 bytes leftover after parsing attributes in process `syz.1.437'. [ 213.662223][ T7428] netlink: 'syz.1.437': attribute type 2 has an invalid length. [ 213.669879][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 214.252879][ T5751] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 214.504327][ T5751] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 214.517497][ T5751] usb 3-1: config 1 has no interface number 0 [ 214.528357][ T5751] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 214.556342][ T5751] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 214.615436][ T5751] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.685829][ T5751] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 214.696038][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.717442][ T5751] usb 3-1: Product: syz [ 214.737185][ T5751] usb 3-1: Manufacturer: syz [ 214.761060][ T5751] usb 3-1: SerialNumber: syz [ 215.101859][ T7432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 215.329403][ T7432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 216.047894][ T5751] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 216.182870][ T30] audit: type=1400 audit(1785385184.748:441): avc: denied { read } for pid=7445 comm="syz.0.442" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 216.244941][ T5751] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 216.320840][ T5751] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 216.362326][ T30] audit: type=1400 audit(1785385184.748:442): avc: denied { open } for pid=7445 comm="syz.0.442" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 216.466801][ T5751] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 216.524490][ T5751] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 216.563000][ T30] audit: type=1400 audit(1785385184.748:443): avc: denied { ioctl } for pid=7445 comm="syz.0.442" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 216.591894][ T5751] usb 3-1: USB disconnect, device number 9 [ 216.629459][ T5751] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 216.844470][ T7452] input: syz1 as /devices/virtual/input/input23 [ 217.134320][ T30] audit: type=1400 audit(1785385185.728:444): avc: denied { read } for pid=4960 comm="acpid" name="event4" dev="devtmpfs" ino=2936 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.231442][ T5751] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 217.273803][ T30] audit: type=1400 audit(1785385185.758:445): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2936 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.339096][ T7455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.366143][ T7455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.393679][ T30] audit: type=1400 audit(1785385185.758:446): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2936 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.475334][ T30] audit: type=1400 audit(1785385186.068:447): avc: denied { read write } for pid=7454 comm="syz.1.444" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 217.559127][ T7466] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 217.569962][ T30] audit: type=1400 audit(1785385186.068:448): avc: denied { open } for pid=7454 comm="syz.1.444" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 217.818423][ T7466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.852476][ T30] audit: type=1400 audit(1785385186.288:449): avc: denied { read } for pid=7465 comm="syz.3.448" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.875343][ T30] audit: type=1400 audit(1785385188.458:450): avc: denied { write } for pid=7476 comm="syz.3.451" path="socket:[15814]" dev="sockfs" ino=15814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.901522][ T7479] Bluetooth: MGMT ver 1.23 [ 220.484540][ T7488] IPv6: sit1: Disabled Multicast RS [ 220.485004][ T7488] sit1: entered allmulticast mode [ 220.598857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 220.676431][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 221.309108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 222.166975][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.209335][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.517210][ T7528] FAULT_INJECTION: forcing a failure. [ 222.517210][ T7528] name failslab, interval 1, probability 0, space 0, times 0 [ 222.530170][ T7528] CPU: 1 UID: 0 PID: 7528 Comm: syz.2.465 Not tainted syzkaller #0 PREEMPT(full) [ 222.530192][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 222.530203][ T7528] Call Trace: [ 222.530209][ T7528] [ 222.530215][ T7528] dump_stack_lvl+0x100/0x190 [ 222.530242][ T7528] should_fail_ex.cold+0x5/0xa [ 222.530261][ T7528] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 222.530290][ T7528] should_failslab+0xc2/0x120 [ 222.530313][ T7528] kmem_cache_alloc_noprof+0x91/0x6a0 [ 222.530335][ T7528] ? skb_clone+0x190/0x400 [ 222.530361][ T7528] skb_clone+0x190/0x400 [ 222.530383][ T7528] netlink_deliver_tap+0xaed/0xcc0 [ 222.530416][ T7528] netlink_unicast+0x62b/0x850 [ 222.530437][ T7528] ? __pfx_netlink_unicast+0x10/0x10 [ 222.530467][ T7528] netlink_sendmsg+0x8b0/0xda0 [ 222.530488][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.530508][ T7528] ? selinux_socket_sendmsg+0x198/0x2f0 [ 222.530539][ T7528] ____sys_sendmsg+0xa4d/0xbe0 [ 222.530563][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.530584][ T7528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.530614][ T7528] ? rcu_is_watching+0x12/0xc0 [ 222.530639][ T7528] ? trace_sched_exit_tp+0x120/0x160 [ 222.530671][ T7528] ___sys_sendmsg+0x190/0x1e0 [ 222.530700][ T7528] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.530724][ T7528] ? __lock_acquire+0x49f/0x1a40 [ 222.530746][ T7528] ? get_pid_task+0x106/0x250 [ 222.530800][ T7528] __sys_sendmsg+0x160/0x210 [ 222.530822][ T7528] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.530850][ T7528] ? trace_hardirqs_off+0x70/0x170 [ 222.530879][ T7528] do_syscall_64+0x115/0x870 [ 222.530899][ T7528] ? clear_bhb_loop+0x40/0x90 [ 222.530920][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.530938][ T7528] RIP: 0033:0x7fa88399de99 [ 222.530953][ T7528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.530969][ T7528] RSP: 002b:00007fa8847a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.530987][ T7528] RAX: ffffffffffffffda RBX: 00007fa883c26180 RCX: 00007fa88399de99 [ 222.530998][ T7528] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 222.531009][ T7528] RBP: 00007fa8847a9090 R08: 0000000000000000 R09: 0000000000000000 [ 222.531019][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.531029][ T7528] R13: 00007fa883c26218 R14: 00007fa883c26180 R15: 00007ffea6c6b168 [ 222.531054][ T7528] [ 222.537862][ T7528] input: syz1 as /devices/virtual/input/input24 [ 222.684781][ T187] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 223.019327][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 223.028238][ T187] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 223.062293][ T187] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 223.083435][ T187] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.100297][ T187] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 223.117359][ T187] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 223.128363][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.267846][ T187] usb 4-1: Product: syz [ 223.272230][ T187] usb 4-1: Manufacturer: syz [ 223.276847][ T187] usb 4-1: SerialNumber: syz [ 223.305043][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 223.305059][ T30] audit: type=1400 audit(1785385191.888:452): avc: denied { write } for pid=7531 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.342762][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 223.367258][ T187] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input25 [ 223.381920][ T30] audit: type=1400 audit(1785385191.888:453): avc: denied { nlmsg_write } for pid=7531 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.552970][ T7517] loop5: detected capacity change from 0 to 7 [ 223.561376][ T7517] Dev loop5: unable to read RDB block 7 [ 223.567067][ T7517] loop5: AHDI p1 p3 p4 [ 223.576894][ T7517] loop5: partition table partially beyond EOD, truncated [ 223.596773][ T7517] loop5: p1 size 100663296 extends beyond EOD, truncated [ 223.607026][ T7517] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 224.117712][ T7543] /dev/nullb0: Can't open blockdev [ 224.157075][ T30] audit: type=1400 audit(1785385192.708:454): avc: denied { mounton } for pid=7542 comm="syz.1.472" path="/syzcgroup/unified/syz1" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 226.306153][ T7521] Dev loop5: unable to read RDB block 7 [ 226.337449][ T7521] loop5: AHDI p1 p3 p4 [ 226.348115][ T7521] loop5: partition table partially beyond EOD, truncated [ 226.389245][ T7521] loop5: p1 size 100663296 extends beyond EOD, truncated [ 227.388060][ T7521] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 227.845013][ T187] imon:send_packet: packet tx failed (-71) [ 227.888813][ T187] imon 4-1:155.0: panel buttons/knobs setup failed [ 227.907128][ T187] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 227.937952][ T187] (id 0x00) [ 227.944331][ T7556] loop5: detected capacity change from 0 to 7 [ 227.978443][ T7556] Dev loop5: unable to read RDB block 7 [ 227.998063][ T7556] loop5: AHDI p1 p3 p4 [ 228.057873][ T7556] loop5: partition table partially beyond EOD, truncated [ 228.383892][ T7556] loop5: p1 size 100663296 extends beyond EOD, truncated [ 228.408934][ T187] rc_core: IR keymap rc-imon-pad not found [ 228.416515][ T187] Registered IR keymap rc-empty [ 228.422898][ T7556] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 228.439949][ T187] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 228.450970][ T187] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 228.463002][ T187] imon:send_packet: packet tx failed (-71) [ 228.470525][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 228.490541][ T187] imon 4-1:155.0: remote input dev register failed [ 228.499357][ T187] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 228.524218][ T7565] Dev loop5: unable to read RDB block 7 [ 228.538112][ T7565] loop5: AHDI p1 p3 p4 [ 228.545627][ T7565] loop5: partition table partially beyond EOD, truncated [ 228.559846][ T187] imon 4-1:155.0: unable to initialize intf0, err 0 [ 228.569160][ T187] imon:imon_probe: failed to initialize context! [ 228.576283][ T7565] loop5: p1 size 100663296 extends beyond EOD, truncated [ 228.588084][ T187] imon 4-1:155.0: unable to register, err -19 [ 228.602791][ T187] usb 4-1: USB disconnect, device number 7 [ 228.610266][ T7565] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 229.375565][ T7583] siw: device registration error -23 [ 230.000982][ T7578] 9pnet_virtio: no channels available for device syz [ 230.106799][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.151331][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.352066][ T30] audit: type=1400 audit(1785385198.948:455): avc: denied { ioctl } for pid=7585 comm="syz.1.485" path="socket:[16088]" dev="sockfs" ino=16088 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 230.397299][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 230.416172][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 230.499209][ T30] audit: type=1400 audit(1785385199.048:456): avc: denied { module_request } for pid=7593 comm="syz.2.487" kmod="netdev-vcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 230.562940][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 230.578960][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 230.939095][ T7609] sit0: entered promiscuous mode [ 230.952448][ T7609] netlink: 'syz.0.490': attribute type 2 has an invalid length. [ 230.960174][ T7609] netlink: 1 bytes leftover after parsing attributes in process `syz.0.490'. [ 231.008826][ T7609] input: syz1 as /devices/virtual/input/input27 [ 231.347366][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 231.968448][ T7611] 9pnet_virtio: no channels available for device syz [ 232.670069][ T30] audit: type=1400 audit(1785385201.248:457): avc: denied { write } for pid=7618 comm="syz.1.492" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 232.988036][ T30] audit: type=1400 audit(1785385201.578:458): avc: denied { write } for pid=7621 comm="syz.0.493" name="kcm" dev="proc" ino=4026533469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 233.805682][ T30] audit: type=1400 audit(1785385202.398:459): avc: denied { search } for pid=7625 comm="syz.1.496" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 234.830138][ T30] audit: type=1400 audit(1785385202.448:460): avc: denied { search } for pid=7625 comm="syz.1.496" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 234.858096][ T30] audit: type=1400 audit(1785385202.528:461): avc: denied { bind } for pid=7625 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.879729][ T30] audit: type=1400 audit(1785385202.528:462): avc: denied { name_bind } for pid=7625 comm="syz.1.496" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 234.901625][ T30] audit: type=1400 audit(1785385202.538:463): avc: denied { node_bind } for pid=7625 comm="syz.1.496" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 234.959350][ T30] audit: type=1400 audit(1785385202.538:464): avc: denied { name_connect } for pid=7625 comm="syz.1.496" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 234.968169][ T7642] loop6: detected capacity change from 0 to 2640 [ 235.394471][ T7642] buffer_io_error: 11 callbacks suppressed [ 235.394508][ T7642] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.420046][ T7642] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.464276][ T7642] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.505371][ T7639] 9pnet_virtio: no channels available for device syz [ 235.630058][ T7642] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.648961][ T7642] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.716111][ T7656] siw: device registration error -23 [ 236.157474][ T7642] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.185829][ T7642] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.197021][ T7642] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.238380][ T7642] ldm_validate_partition_table(): Disk read failed. [ 236.293533][ T7642] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.321778][ T7642] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.330331][ T7642] Dev loop6: unable to read RDB block 0 [ 236.353039][ T7642] loop6: unable to read partition table [ 236.490722][ T7642] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 237.456173][ T7663] syz.1.504 uses obsolete (PF_INET,SOCK_PACKET) [ 237.549693][ T7667] veth1_macvtap: left promiscuous mode [ 237.973210][ T7658] 9pnet_virtio: no channels available for device syz [ 237.992953][ T30] audit: type=1400 audit(1785385206.578:465): avc: denied { ioctl } for pid=7662 comm="syz.1.504" path="socket:[16440]" dev="sockfs" ino=16440 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.047777][ T7669] 9p: Could not find request transport: rdma. [ 238.052261][ T7663] netlink: 'syz.1.504': attribute type 1 has an invalid length. [ 238.375323][ T7682] input: syz1 as /devices/virtual/input/input28 [ 241.078851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 241.267552][ T7708] 9pnet_virtio: no channels available for device syz [ 241.785311][ T7723] FAULT_INJECTION: forcing a failure. [ 241.785311][ T7723] name failslab, interval 1, probability 0, space 0, times 0 [ 241.799617][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: syz.2.521 Not tainted syzkaller #0 PREEMPT(full) [ 241.799643][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 241.799654][ T7723] Call Trace: [ 241.799660][ T7723] [ 241.799667][ T7723] dump_stack_lvl+0x100/0x190 [ 241.799695][ T7723] should_fail_ex.cold+0x5/0xa [ 241.799717][ T7723] should_failslab+0xc2/0x120 [ 241.799741][ T7723] __kmalloc_cache_noprof+0x91/0x6c0 [ 241.799769][ T7723] ? genl_start+0x1e8/0x970 [ 241.799794][ T7723] genl_start+0x1e8/0x970 [ 241.799817][ T7723] __netlink_dump_start+0x60e/0x990 [ 241.799848][ T7723] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 241.799871][ T7723] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 241.799892][ T7723] ? lockdep_hardirqs_on+0x78/0x100 [ 241.799924][ T7723] ? __pfx_genl_get_cmd+0x10/0x10 [ 241.799941][ T7723] ? __pfx_genl_start+0x10/0x10 [ 241.799959][ T7723] ? __pfx_genl_dumpit+0x10/0x10 [ 241.799977][ T7723] ? __pfx_genl_done+0x10/0x10 [ 241.800001][ T7723] ? genl_rcv_msg+0x1d1/0x800 [ 241.800019][ T7723] ? genl_rcv_msg+0x1ef/0x800 [ 241.800040][ T7723] genl_rcv_msg+0x471/0x800 [ 241.800064][ T7723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.800085][ T7723] ? __pfx_netdev_nl_napi_get_dumpit+0x10/0x10 [ 241.800112][ T7723] ? irqentry_exit+0x24d/0xa00 [ 241.800138][ T7723] netlink_rcv_skb+0x159/0x420 [ 241.800155][ T7723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.800177][ T7723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.800193][ T7723] ? rcu_is_watching+0x12/0xc0 [ 241.800227][ T7723] ? __rcu_read_unlock+0x26a/0x5e0 [ 241.800250][ T7723] ? rcu_is_watching+0x12/0xc0 [ 241.800281][ T7723] genl_rcv+0x28/0x40 [ 241.800298][ T7723] netlink_unicast+0x585/0x850 [ 241.800319][ T7723] ? __pfx_netlink_unicast+0x10/0x10 [ 241.800344][ T7723] netlink_sendmsg+0x8b0/0xda0 [ 241.800366][ T7723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.800387][ T7723] ? selinux_socket_sendmsg+0x198/0x2f0 [ 241.800416][ T7723] ____sys_sendmsg+0xa4d/0xbe0 [ 241.800443][ T7723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.800462][ T7723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.800492][ T7723] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 241.800518][ T7723] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 241.800547][ T7723] ___sys_sendmsg+0x190/0x1e0 [ 241.800577][ T7723] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.800602][ T7723] ? __lock_acquire+0x49f/0x1a40 [ 241.800654][ T7723] __sys_sendmsg+0x160/0x210 [ 241.800677][ T7723] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.800705][ T7723] ? trace_hardirqs_off+0x70/0x170 [ 241.800734][ T7723] do_syscall_64+0x115/0x870 [ 241.800753][ T7723] ? clear_bhb_loop+0x40/0x90 [ 241.800775][ T7723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.800793][ T7723] RIP: 0033:0x7fa88399de99 [ 241.800808][ T7723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.800824][ T7723] RSP: 002b:00007fa8847a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.800842][ T7723] RAX: ffffffffffffffda RBX: 00007fa883c26180 RCX: 00007fa88399de99 [ 241.800853][ T7723] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 241.800863][ T7723] RBP: 00007fa8847a9090 R08: 0000000000000000 R09: 0000000000000000 [ 241.800874][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.800884][ T7723] R13: 00007fa883c26218 R14: 00007fa883c26180 R15: 00007ffea6c6b168 [ 241.800912][ T7723] [ 241.806972][ T7723] input: syz1 as /devices/virtual/input/input29 [ 242.255593][ T7724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.523'. [ 242.317110][ T7724] team0 (unregistering): Port device team_slave_0 removed [ 242.385587][ T7724] team0 (unregistering): Port device team_slave_1 removed [ 242.484555][ T7729] netlink: 2 bytes leftover after parsing attributes in process `syz.0.524'. [ 243.604167][ T7734] 9p: Could not find request transport: rdma. [ 245.127728][ T7772] NILFS (nullb0): couldn't find nilfs on the device [ 245.599300][ T7762] 9pnet_virtio: no channels available for device syz [ 246.089796][ T30] audit: type=1400 audit(1785385214.688:466): avc: denied { shutdown } for pid=7778 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.303104][ T7787] input: syz1 as /devices/virtual/input/input30 [ 246.985354][ T7793] fuse: Bad value for 'rootmode' [ 247.009850][ T30] audit: type=1400 audit(1785385215.598:467): avc: denied { remount } for pid=7792 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 247.581798][ T30] audit: type=1400 audit(1785385216.168:468): avc: denied { read } for pid=7791 comm="syz.2.544" name="trace_pipe" dev="tracefs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 247.936284][ T30] audit: type=1400 audit(1785385216.208:469): avc: denied { open } for pid=7791 comm="syz.2.544" path="/108/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 248.398994][ T5341] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 248.726434][ T7810] 9p: Could not find request transport: rdma. [ 249.000994][ T7818] NILFS (nullb0): couldn't find nilfs on the device [ 249.093773][ T5341] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.113764][ T7820] 9pnet_virtio: no channels available for device syz [ 249.141932][ T5341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.153085][ T5341] usb 5-1: Product: syz [ 249.157326][ T5341] usb 5-1: Manufacturer: syz [ 249.163494][ T5341] usb 5-1: SerialNumber: syz [ 249.220295][ T7826] FAULT_INJECTION: forcing a failure. [ 249.220295][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 249.233029][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.0.554 Not tainted syzkaller #0 PREEMPT(full) [ 249.233051][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 249.233061][ T7826] Call Trace: [ 249.233067][ T7826] [ 249.233074][ T7826] dump_stack_lvl+0x100/0x190 [ 249.233101][ T7826] should_fail_ex.cold+0x5/0xa [ 249.233124][ T7826] should_failslab+0xc2/0x120 [ 249.233149][ T7826] __kmalloc_cache_noprof+0x91/0x6c0 [ 249.233178][ T7826] ? alloc_pipe_info+0x10e/0x590 [ 249.233203][ T7826] alloc_pipe_info+0x10e/0x590 [ 249.233224][ T7826] splice_direct_to_actor+0x78f/0xa30 [ 249.233247][ T7826] ? __pfx_direct_splice_actor+0x10/0x10 [ 249.233266][ T7826] ? inode_has_perm+0x16d/0x1d0 [ 249.233289][ T7826] ? __file_has_perm+0x336/0x460 [ 249.233313][ T7826] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 249.233333][ T7826] ? __pfx___file_has_perm+0x10/0x10 [ 249.233363][ T7826] do_splice_direct+0x174/0x240 [ 249.233390][ T7826] ? __pfx_do_splice_direct+0x10/0x10 [ 249.233414][ T7826] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 249.233435][ T7826] ? bpf_lsm_file_permission+0x9/0x10 [ 249.233463][ T7826] ? security_file_permission+0x76/0x210 [ 249.233482][ T7826] ? rw_verify_area+0xce/0x6d0 [ 249.233509][ T7826] do_sendfile+0xadc/0xe20 [ 249.233540][ T7826] ? __pfx_do_sendfile+0x10/0x10 [ 249.233564][ T7826] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.233589][ T7826] ? vfs_write+0x15d/0x1050 [ 249.233615][ T7826] ? vfs_write+0x1a1/0x1050 [ 249.233644][ T7826] __x64_sys_sendfile64+0x1d8/0x220 [ 249.233664][ T7826] ? ksys_write+0x1ac/0x250 [ 249.233690][ T7826] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 249.233719][ T7826] do_syscall_64+0x115/0x870 [ 249.233738][ T7826] ? clear_bhb_loop+0x40/0x90 [ 249.233759][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.233778][ T7826] RIP: 0033:0x7f7fe379de99 [ 249.233794][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.233811][ T7826] RSP: 002b:00007f7fe46b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 249.233828][ T7826] RAX: ffffffffffffffda RBX: 00007f7fe3a26090 RCX: 00007f7fe379de99 [ 249.233840][ T7826] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 249.233850][ T7826] RBP: 00007f7fe46b3090 R08: 0000000000000000 R09: 0000000000000000 [ 249.233860][ T7826] R10: 000000008000fb00 R11: 0000000000000246 R12: 0000000000000001 [ 249.233871][ T7826] R13: 00007f7fe3a26128 R14: 00007f7fe3a26090 R15: 00007ffed6e95948 [ 249.233894][ T7826] [ 250.720388][ T30] audit: type=1400 audit(1785385219.298:470): avc: denied { firmware_load } for pid=5717 comm="kworker/1:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 250.723303][ T5717] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 251.066807][ T7834] loop5: detected capacity change from 0 to 7 [ 251.087745][ T7834] Dev loop5: unable to read RDB block 7 [ 251.101474][ T7834] loop5: AHDI p1 p3 p4 [ 251.111097][ T7834] loop5: partition table partially beyond EOD, truncated [ 251.135060][ T7834] loop5: p1 size 100663296 extends beyond EOD, truncated [ 251.159811][ T10] usb 5-1: USB disconnect, device number 15 [ 251.169440][ T7834] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 251.431324][ T7838] Dev loop5: unable to read RDB block 7 [ 251.442789][ T7838] loop5: AHDI p1 p3 p4 [ 251.671424][ T7838] loop5: partition table partially beyond EOD, truncated [ 251.711660][ T7838] loop5: p1 size 100663296 extends beyond EOD, truncated [ 251.763925][ T7838] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 251.781992][ T5717] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 251.792667][ T5717] ath9k_htc: Failed to initialize the device [ 251.810815][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 251.952180][ T7844] netlink: 'syz.4.560': attribute type 46 has an invalid length. [ 251.966772][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 251.991945][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 253.841180][ T7865] input: syz1 as /devices/virtual/input/input31 [ 253.962521][ T7868] /dev/nullb0: Can't open blockdev [ 254.269649][ T5710] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 254.504695][ T5710] usb 1-1: not running at top speed; connect to a high speed hub [ 254.525093][ T7881] input: syz1 as /devices/virtual/input/input32 [ 254.558024][ T5710] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 4 [ 254.587882][ T5710] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 254.740266][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.778351][ T5710] usb 1-1: Product: syz [ 254.789966][ T5710] usb 1-1: Manufacturer: syz [ 254.849117][ T5710] usb 1-1: SerialNumber: syz [ 255.105925][ T5710] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 255.134645][ T7884] loop6: detected capacity change from 0 to 2640 [ 255.239818][ T7884] buffer_io_error: 11 callbacks suppressed [ 255.239830][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.255351][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.344296][ T7892] siw: device registration error -23 [ 255.400044][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.415624][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.754536][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.795787][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.826139][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.834349][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.851539][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.919532][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.939378][ T7895] FAULT_INJECTION: forcing a failure. [ 255.939378][ T7895] name failslab, interval 1, probability 0, space 0, times 0 [ 255.952112][ T7895] CPU: 0 UID: 0 PID: 7895 Comm: syz.3.575 Not tainted syzkaller #0 PREEMPT(full) [ 255.952135][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 255.952146][ T7895] Call Trace: [ 255.952152][ T7895] [ 255.952158][ T7895] dump_stack_lvl+0x100/0x190 [ 255.952185][ T7895] should_fail_ex.cold+0x5/0xa [ 255.952208][ T7895] should_failslab+0xc2/0x120 [ 255.952233][ T7895] __kmalloc_noprof+0xfc/0x820 [ 255.952256][ T7895] ? alloc_pipe_info+0x1ec/0x590 [ 255.952280][ T7895] alloc_pipe_info+0x1ec/0x590 [ 255.952302][ T7895] splice_direct_to_actor+0x78f/0xa30 [ 255.952326][ T7895] ? __pfx_direct_splice_actor+0x10/0x10 [ 255.952347][ T7895] ? inode_has_perm+0x16d/0x1d0 [ 255.952371][ T7895] ? __file_has_perm+0x336/0x460 [ 255.952395][ T7895] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 255.952421][ T7895] ? __pfx___file_has_perm+0x10/0x10 [ 255.952451][ T7895] do_splice_direct+0x174/0x240 [ 255.952472][ T7895] ? __pfx_do_splice_direct+0x10/0x10 [ 255.952494][ T7895] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 255.952515][ T7895] ? bpf_lsm_file_permission+0x9/0x10 [ 255.952542][ T7895] ? security_file_permission+0x76/0x210 [ 255.952561][ T7895] ? rw_verify_area+0xce/0x6d0 [ 255.952587][ T7895] do_sendfile+0xadc/0xe20 [ 255.952618][ T7895] ? __pfx_do_sendfile+0x10/0x10 [ 255.952642][ T7895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 255.952669][ T7895] ? __pfx___schedule+0x10/0x10 [ 255.952689][ T7895] __x64_sys_sendfile64+0x1d8/0x220 [ 255.952711][ T7895] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 255.952731][ T7895] ? trace_hardirqs_off+0x70/0x170 [ 255.952762][ T7895] do_syscall_64+0x115/0x870 [ 255.952782][ T7895] ? clear_bhb_loop+0x40/0x90 [ 255.952804][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.952822][ T7895] RIP: 0033:0x7f4adf79de99 [ 255.952837][ T7895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.952855][ T7895] RSP: 002b:00007f4ae0650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 255.952873][ T7895] RAX: ffffffffffffffda RBX: 00007f4adfa26090 RCX: 00007f4adf79de99 [ 255.952885][ T7895] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 255.952895][ T7895] RBP: 00007f4ae0650090 R08: 0000000000000000 R09: 0000000000000000 [ 255.952905][ T7895] R10: 000000008000fb00 R11: 0000000000000246 R12: 0000000000000001 [ 255.952915][ T7895] R13: 00007f4adfa26128 R14: 00007f4adfa26090 R15: 00007ffdb9f301f8 [ 255.952939][ T7895] [ 256.704514][ T30] audit: type=1400 audit(1785385225.068:471): avc: denied { ioctl } for pid=7898 comm="syz.0.576" path="socket:[16879]" dev="sockfs" ino=16879 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.768670][ T7900] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 256.791642][ T7901] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 257.238680][ T7884] ldm_validate_partition_table(): Disk read failed. [ 257.289780][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.319523][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.445586][ T7884] Dev loop6: unable to read RDB block 0 [ 257.682087][ T5710] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 257.716290][ T5710] usb 1-1: USB disconnect, device number 5 [ 257.717128][ T7884] loop6: unable to read partition table [ 257.739319][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.858530][ T7884] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 257.978262][ T7909] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.577' resets device [ 258.425331][ T7911] loop4: detected capacity change from 0 to 7 [ 258.480605][ T7911] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 258.488689][ T7911] loop4: partition table partially beyond EOD, truncated [ 258.515832][ T7911] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 258.665622][ T7914] NILFS (nullb0): couldn't find nilfs on the device [ 259.588120][ T30] audit: type=1400 audit(1785385228.088:472): avc: denied { write } for pid=7920 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 259.624643][ T7924] input: syz1 as /devices/virtual/input/input33 [ 260.150033][ T30] audit: type=1400 audit(1785385228.088:473): avc: denied { setopt } for pid=7920 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 260.598672][ T7952] input: syz1 as /devices/virtual/input/input34 [ 260.962759][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 261.187775][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 261.536615][ T7977] FAULT_INJECTION: forcing a failure. [ 261.536615][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 261.549662][ T7977] CPU: 0 UID: 0 PID: 7977 Comm: syz.1.594 Not tainted syzkaller #0 PREEMPT(full) [ 261.549686][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 261.549696][ T7977] Call Trace: [ 261.549703][ T7977] [ 261.549710][ T7977] dump_stack_lvl+0x100/0x190 [ 261.549738][ T7977] should_fail_ex.cold+0x5/0xa [ 261.549762][ T7977] should_failslab+0xc2/0x120 [ 261.549786][ T7977] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 261.549807][ T7977] ? preempt_schedule_thunk+0x16/0x40 [ 261.549826][ T7977] ? __alloc_skb+0x140/0x710 [ 261.549852][ T7977] __alloc_skb+0x140/0x710 [ 261.549871][ T7977] ? __alloc_skb+0x5b7/0x710 [ 261.549890][ T7977] ? __pfx___alloc_skb+0x10/0x10 [ 261.549913][ T7977] ? __local_bh_enable_ip+0x9e/0x120 [ 261.549941][ T7977] kcm_sendmsg+0x2493/0x3120 [ 261.549964][ T7977] ? preempt_schedule_irq+0x7b/0x90 [ 261.549987][ T7977] ? irqentry_exit+0x24d/0xa00 [ 261.550006][ T7977] ? lockdep_hardirqs_on+0x78/0x100 [ 261.550025][ T7977] ? irqentry_exit+0x24d/0xa00 [ 261.550050][ T7977] ? __pfx_kcm_sendmsg+0x10/0x10 [ 261.550073][ T7977] ? __pfx_kcm_sendmsg+0x10/0x10 [ 261.550095][ T7977] sock_sendmsg+0x394/0x410 [ 261.550121][ T7977] ? __pfx_kcm_sendmsg+0x10/0x10 [ 261.550141][ T7977] ? __pfx_sock_sendmsg+0x10/0x10 [ 261.550176][ T7977] ? __schedule+0x126e/0x6730 [ 261.550199][ T7977] splice_to_socket+0xb3c/0x11a0 [ 261.550234][ T7977] ? __pfx_splice_to_socket+0x10/0x10 [ 261.550254][ T7977] ? preempt_schedule_thunk+0x16/0x40 [ 261.550279][ T7977] ? touch_atime+0x364/0x760 [ 261.550324][ T7977] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 261.550353][ T7977] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 261.550372][ T7977] ? __pfx_splice_to_socket+0x10/0x10 [ 261.550395][ T7977] direct_splice_actor+0x192/0x690 [ 261.550419][ T7977] splice_direct_to_actor+0x345/0xa30 [ 261.550442][ T7977] ? __pfx_direct_splice_actor+0x10/0x10 [ 261.550467][ T7977] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 261.550488][ T7977] ? preempt_schedule_irq+0x7b/0x90 [ 261.550509][ T7977] ? irqentry_exit+0x24d/0xa00 [ 261.550532][ T7977] do_splice_direct+0x174/0x240 [ 261.550554][ T7977] ? __pfx_do_splice_direct+0x10/0x10 [ 261.550576][ T7977] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 261.550605][ T7977] do_sendfile+0xadc/0xe20 [ 261.550636][ T7977] ? __pfx_do_sendfile+0x10/0x10 [ 261.550660][ T7977] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 261.550682][ T7977] ? __fget_files+0x21f/0x3d0 [ 261.550707][ T7977] __x64_sys_sendfile64+0x1d8/0x220 [ 261.550727][ T7977] ? ksys_write+0x1ac/0x250 [ 261.550753][ T7977] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 261.550782][ T7977] do_syscall_64+0x115/0x870 [ 261.550801][ T7977] ? clear_bhb_loop+0x40/0x90 [ 261.550823][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.550841][ T7977] RIP: 0033:0x7fd5c939de99 [ 261.550856][ T7977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.550873][ T7977] RSP: 002b:00007fd5ca214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 261.550891][ T7977] RAX: ffffffffffffffda RBX: 00007fd5c9626090 RCX: 00007fd5c939de99 [ 261.550902][ T7977] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 261.550912][ T7977] RBP: 00007fd5ca214090 R08: 0000000000000000 R09: 0000000000000000 [ 261.550923][ T7977] R10: 000000008000fb00 R11: 0000000000000246 R12: 0000000000000001 [ 261.550934][ T7977] R13: 00007fd5c9626128 R14: 00007fd5c9626090 R15: 00007ffc6899e268 [ 261.550959][ T7977] [ 261.918892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 262.188881][ T5731] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 262.485072][ T7984] loop5: detected capacity change from 0 to 7 [ 262.548813][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 262.549649][ T7984] Dev loop5: unable to read RDB block 7 [ 262.556000][ T5731] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 262.592270][ T5731] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 262.603887][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.612193][ T5731] usb 1-1: Product: syz [ 262.616503][ T5731] usb 1-1: Manufacturer: syz [ 262.621214][ T5731] usb 1-1: SerialNumber: syz [ 262.633127][ T5731] usb 1-1: config 0 descriptor?? [ 262.644856][ T7984] loop5: AHDI p1 p3 p4 [ 262.648586][ T5731] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 262.657938][ T5731] usb 1-1: setting power ON [ 262.662597][ T7984] loop5: partition table partially beyond EOD, truncated [ 262.671576][ T7984] loop5: p1 size 100663296 extends beyond EOD, truncated [ 262.686007][ T5731] dvb-usb: bulk message failed: -22 (2/0) [ 262.700471][ T7984] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 262.727238][ T5731] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.757063][ T5731] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 262.774611][ T5731] usb 1-1: media controller created [ 262.791473][ T7979] Dev loop5: unable to read RDB block 7 [ 262.798550][ T5731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.825847][ T7979] loop5: AHDI p1 p3 p4 [ 262.842462][ T7979] loop5: partition table partially beyond EOD, truncated [ 262.843216][ T5731] usb 1-1: selecting invalid altsetting 6 [ 262.863531][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.879522][ T7979] loop5: p1 size 100663296 extends beyond EOD, truncated [ 262.890970][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.902539][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.912266][ T7979] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 262.916286][ T5731] usb 1-1: digital interface selection failed (-22) [ 262.921347][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.957547][ T5731] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 262.958917][ T5710] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 262.984611][ T5731] usb 1-1: setting power OFF [ 262.989587][ T5731] dvb-usb: bulk message failed: -22 (2/0) [ 262.997518][ T5731] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 263.006899][ T5731] (NULL device *): no alternate interface [ 263.033901][ T5731] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 263.116235][ T5731] usb 1-1: USB disconnect, device number 6 [ 263.249875][ T7997] udevd[7997]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 263.264432][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 263.398109][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 263.412676][ T7997] udevd[7997]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 263.811041][ T30] audit: type=1400 audit(1785385232.388:474): avc: denied { shutdown } for pid=8007 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.204199][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.205005][ T5710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 264.207213][ T5710] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 264.207761][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.336102][ T5710] usb 5-1: config 0 descriptor?? [ 264.544392][ T5710] Bluetooth: Can't get state to change to load ram patch err [ 264.578475][ T5710] Bluetooth: Loading patch file failed [ 264.600952][ T5710] ath3k 5-1:0.0: probe with driver ath3k failed with error -121 [ 264.632174][ T5710] usb 5-1: USB disconnect, device number 16 [ 265.541216][ T5710] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 265.653672][ T30] audit: type=1400 audit(1785385234.248:475): avc: denied { relabelfrom } for pid=8042 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 265.688240][ T30] audit: type=1400 audit(1785385234.248:476): avc: denied { relabelto } for pid=8042 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 265.733359][ T8045] can: request_module (can-proto-0) failed. [ 265.741971][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 265.766308][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 265.806311][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 265.839288][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 265.884875][ T5710] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 265.911534][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 265.923967][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.955836][ T5710] usb 5-1: Product: syz [ 265.975424][ T5710] usb 5-1: Manufacturer: syz [ 265.999614][ T5710] usb 5-1: SerialNumber: syz [ 266.022346][ T5710] usb 5-1: config 0 descriptor?? [ 266.286332][ T30] audit: type=1400 audit(1785385234.858:477): avc: denied { connect } for pid=8060 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.327706][ T5710] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 266.417349][ T8067] FAULT_INJECTION: forcing a failure. [ 266.417349][ T8067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.430759][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: syz.1.618 Not tainted syzkaller #0 PREEMPT(full) [ 266.430788][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 266.430798][ T8067] Call Trace: [ 266.430804][ T8067] [ 266.430811][ T8067] dump_stack_lvl+0x100/0x190 [ 266.430837][ T8067] should_fail_ex.cold+0x5/0xa [ 266.430860][ T8067] _copy_to_user+0x32/0xd0 [ 266.430886][ T8067] simple_read_from_buffer+0xcb/0x170 [ 266.430907][ T8067] proc_fail_nth_read+0x1af/0x230 [ 266.430935][ T8067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.430962][ T8067] ? rw_verify_area+0xce/0x6d0 [ 266.430986][ T8067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.431012][ T8067] vfs_read+0x1e4/0xb40 [ 266.431041][ T8067] ? __pfx_vfs_read+0x10/0x10 [ 266.431066][ T8067] ? __fget_files+0x215/0x3d0 [ 266.431089][ T8067] ? __fget_files+0x21f/0x3d0 [ 266.431114][ T8067] ksys_read+0x12a/0x250 [ 266.431140][ T8067] ? __pfx_ksys_read+0x10/0x10 [ 266.431178][ T8067] ? trace_hardirqs_off+0x70/0x170 [ 266.431208][ T8067] do_syscall_64+0x115/0x870 [ 266.431231][ T8067] ? clear_bhb_loop+0x40/0x90 [ 266.431253][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.431271][ T8067] RIP: 0033:0x7fd5c935e6ce [ 266.431286][ T8067] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.431303][ T8067] RSP: 002b:00007fd5ca1f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.431321][ T8067] RAX: ffffffffffffffda RBX: 00007fd5ca1f36c0 RCX: 00007fd5c935e6ce [ 266.431333][ T8067] RDX: 000000000000000f RSI: 00007fd5ca1f30a0 RDI: 0000000000000009 [ 266.431343][ T8067] RBP: 00007fd5ca1f3090 R08: 0000000000000000 R09: 0000000000000000 [ 266.431354][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.431364][ T8067] R13: 00007fd5c9626218 R14: 00007fd5c9626180 R15: 00007ffc6899e268 [ 266.431388][ T8067] [ 266.867598][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 266.891591][ T30] audit: type=1400 audit(1785385235.458:478): avc: denied { create } for pid=8031 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 267.003783][ T30] audit: type=1400 audit(1785385235.458:479): avc: denied { connect } for pid=8031 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 267.248671][ T30] audit: type=1400 audit(1785385235.678:480): avc: denied { write } for pid=8031 comm="syz.4.609" laddr=fe80::400d:1bff:fe55:a192 lport=58753 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.865320][ T5710] usb 5-1: USB disconnect, device number 17 [ 270.438816][ T8107] input: syz1 as /devices/virtual/input/input37 [ 271.084960][ T8114] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 271.132609][ T8114] netlink: 'syz.2.632': attribute type 2 has an invalid length. [ 271.252342][ T30] audit: type=1400 audit(1785385239.848:481): avc: denied { write } for pid=8116 comm="syz.1.633" name="usb_gadget" dev="configfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 271.341800][ T8126] loop6: detected capacity change from 0 to 2640 [ 271.374121][ T30] audit: type=1400 audit(1785385239.948:482): avc: denied { add_name } for pid=8116 comm="syz.1.633" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.222400][ T8126] buffer_io_error: 11 callbacks suppressed [ 272.222415][ T8126] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.318884][ T30] audit: type=1400 audit(1785385239.958:483): avc: denied { create } for pid=8116 comm="syz.1.633" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 272.338968][ T8126] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.347894][ T8126] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.421595][ T8126] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.590154][ T8126] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.598804][ T8126] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.607844][ T8126] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.617276][ T30] audit: type=1400 audit(1785385241.168:484): avc: denied { write } for pid=8116 comm="syz.1.633" name="configs" dev="configfs" ino=17220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.700121][ T8126] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.711672][ T8126] ldm_validate_partition_table(): Disk read failed. [ 272.721586][ T30] audit: type=1400 audit(1785385241.178:485): avc: denied { write } for pid=8116 comm="syz.1.633" name="c.1" dev="configfs" ino=17227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.831030][ T8126] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.838901][ T30] audit: type=1400 audit(1785385241.198:486): avc: denied { create } for pid=8116 comm="syz.1.633" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 272.873970][ T8126] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.934503][ T8140] /dev/nullb0: Can't open blockdev [ 273.033699][ T8126] Dev loop6: unable to read RDB block 0 [ 273.053576][ T8126] loop6: unable to read partition table [ 273.069999][ T8126] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 273.177882][ T30] audit: type=1326 audit(1785385241.768:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5c939de99 code=0x0 [ 273.287823][ T30] audit: type=1326 audit(1785385241.878:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5c939de99 code=0x0 [ 274.017007][ T8157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.645'. [ 274.167421][ T8158] 9p: Could not find request transport: rdma. [ 274.496276][ T30] audit: type=1400 audit(1785385243.068:489): avc: denied { setopt } for pid=8145 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.559527][ T30] audit: type=1400 audit(1785385243.068:490): avc: denied { write } for pid=8145 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.626066][ T8164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8164 comm=syz.2.646 [ 276.217198][ T8187] vivid-007: ================= START STATUS ================= [ 276.224958][ T8187] vivid-007: Enable Output Cropping: true [ 276.230782][ T8187] vivid-007: Enable Output Composing: true [ 276.236677][ T8187] vivid-007: Enable Output Scaler: true [ 276.242372][ T8187] vivid-007: Tx RGB Quantization Range: Automatic [ 276.248890][ T8187] vivid-007: Transmit Mode: HDMI [ 276.253850][ T8187] vivid-007: Hotplug Present: 0x00000000 [ 276.259603][ T8187] vivid-007: RxSense Present: 0x00000000 [ 276.265329][ T8187] vivid-007: EDID Present: 0x00000000 [ 276.270818][ T8187] vivid-007: ================== END STATUS ================== [ 278.297833][ T30] audit: type=1400 audit(1785385246.498:491): avc: denied { audit_write } for pid=8193 comm="syz.0.654" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 278.387946][ T30] audit: type=1400 audit(1785385246.498:492): avc: denied { watch watch_reads } for pid=8193 comm="syz.0.654" path="/proc/469/task" dev="proc" ino=18547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 278.848937][ T5710] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 279.068361][ T30] audit: type=1400 audit(1785385247.438:493): avc: denied { read } for pid=8203 comm="syz.1.657" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 279.180057][ T8207] block device autoloading is deprecated and will be removed. [ 279.288402][ T30] audit: type=1400 audit(1785385247.438:494): avc: denied { open } for pid=8203 comm="syz.1.657" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 279.519786][ T30] audit: type=1400 audit(1785385247.458:495): avc: denied { ioctl } for pid=8203 comm="syz.1.657" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 280.288762][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 280.303167][ T5710] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 280.328875][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.337034][ T5710] usb 5-1: Product: syz [ 280.347145][ T5710] usb 5-1: Manufacturer: syz [ 280.364793][ T5710] usb 5-1: SerialNumber: syz [ 280.395245][ T5710] usb 5-1: config 0 descriptor?? [ 280.439448][ T30] audit: type=1400 audit(1785385249.038:496): avc: denied { mount } for pid=8209 comm="syz.2.660" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 280.864322][ T8219] gfs2: not a GFS2 filesystem [ 280.883497][ T8219] hpfs: Bad magic ... probably not HPFS [ 280.991111][ T5710] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 281.411713][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.438529][ T5710] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 281.472525][ T5710] usb 5-1: media controller created [ 281.515326][ T8221] 9p: Could not find request transport: rdma. [ 281.616677][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.824883][ T5710] zl10353_read_register: readreg error (reg=127, ret==0) [ 282.006069][ T5710] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 282.027743][ T5710] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 282.415416][ T8241] vivid-007: ================= START STATUS ================= [ 282.423188][ T8241] vivid-007: Enable Output Cropping: true [ 282.429073][ T8241] vivid-007: Enable Output Composing: true [ 282.434983][ T8241] vivid-007: Enable Output Scaler: true [ 282.440739][ T8241] vivid-007: Tx RGB Quantization Range: Automatic [ 282.447203][ T8241] vivid-007: Transmit Mode: HDMI [ 282.452751][ T8241] vivid-007: Hotplug Present: 0x00000000 [ 282.458468][ T8241] vivid-007: RxSense Present: 0x00000000 [ 282.464502][ T8241] vivid-007: EDID Present: 0x00000000 [ 282.469986][ T8241] vivid-007: ================== END STATUS ================== [ 282.545345][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.666'. [ 282.788933][ T5710] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 282.891630][ T8245] netlink: 'syz.2.668': attribute type 11 has an invalid length. [ 282.907337][ T5717] usb 5-1: USB disconnect, device number 18 [ 282.990293][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 283.001936][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 283.019035][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 283.067095][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 283.089930][ T5717] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 283.099490][ T5710] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 283.120457][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.142949][ T5710] usb 1-1: Product: syz [ 283.162088][ T5710] usb 1-1: Manufacturer: syz [ 283.181654][ T5710] usb 1-1: SerialNumber: syz [ 283.200825][ T5710] usb 1-1: config 0 descriptor?? [ 283.459811][ T5710] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 283.972752][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 284.171160][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.269328][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.357602][ T187] usb 1-1: USB disconnect, device number 7 [ 284.580814][ T8278] vivid-007: ================= START STATUS ================= [ 284.588532][ T8278] vivid-007: Enable Output Cropping: true [ 284.594394][ T8278] vivid-007: Enable Output Composing: true [ 284.600890][ T8278] vivid-007: Enable Output Scaler: true [ 284.606548][ T8278] vivid-007: Tx RGB Quantization Range: Automatic [ 284.613446][ T8278] vivid-007: Transmit Mode: HDMI [ 284.618453][ T8278] vivid-007: Hotplug Present: 0x00000000 [ 284.624209][ T8278] vivid-007: RxSense Present: 0x00000000 [ 284.629906][ T8278] vivid-007: EDID Present: 0x00000000 [ 284.635404][ T8278] vivid-007: ================== END STATUS ================== [ 284.975662][ T8269] veth1_macvtap: entered promiscuous mode [ 285.103498][ T8263] netlink: 'syz.2.674': attribute type 39 has an invalid length. [ 285.621938][ T8292] input: syz1 as /devices/virtual/input/input38 [ 286.238599][ T8294] NILFS (nullb0): couldn't find nilfs on the device [ 286.314973][ T8285] 9pnet_virtio: no channels available for device syz [ 286.362114][ T30] audit: type=1400 audit(1785385254.958:497): avc: denied { write } for pid=8295 comm="syz.1.683" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 286.422797][ T8302] loop5: detected capacity change from 0 to 7 [ 286.435897][ T8302] Dev loop5: unable to read RDB block 7 [ 286.442785][ T8302] loop5: AHDI p1 p3 p4 [ 286.450795][ T8302] loop5: partition table partially beyond EOD, truncated [ 286.466561][ T8302] loop5: p1 size 100663296 extends beyond EOD, truncated [ 286.487443][ T8302] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 286.558093][ T8303] Dev loop5: unable to read RDB block 7 [ 286.565475][ T8303] loop5: AHDI p1 p3 p4 [ 286.571024][ T8303] loop5: partition table partially beyond EOD, truncated [ 286.671018][ T8303] loop5: p1 size 100663296 extends beyond EOD, truncated [ 286.685098][ T8303] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 286.770245][ T8307] siw: device registration error -23 [ 287.311590][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 287.379533][ T8313] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 287.410397][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 287.428106][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 287.906851][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'. [ 289.842364][ T8349] NILFS (nullb0): couldn't find nilfs on the device [ 290.053566][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 291.285991][ T8364] loop5: detected capacity change from 0 to 7 [ 291.317027][ T8364] Dev loop5: unable to read RDB block 7 [ 291.343610][ T8364] loop5: AHDI p1 p3 p4 [ 291.359231][ T8364] loop5: partition table partially beyond EOD, truncated [ 291.406204][ T8364] loop5: p1 size 100663296 extends beyond EOD, truncated [ 291.813410][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.700'. [ 291.837127][ T8365] 9p: Could not find request transport: rdma. [ 291.851311][ T8364] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 291.954521][ T8368] Dev loop5: unable to read RDB block 7 [ 292.081455][ T8368] loop5: AHDI p1 p3 p4 [ 292.114918][ T30] audit: type=1400 audit(1785385260.688:498): avc: denied { execute_no_trans } for pid=8369 comm="syz.3.705" path="/132/file2" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.146622][ T8368] loop5: partition table partially beyond EOD, truncated [ 292.179665][ T8368] loop5: p1 size 100663296 extends beyond EOD, truncated [ 292.295696][ T8370] overlayfs: failed to resolve './file2/file0': -20 [ 292.372662][ T8378] siw: device registration error -23 [ 292.872849][ T8372] f2fs: Unknown parameter 'discardp' [ 292.891440][ T8368] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 293.093339][ T30] audit: type=1400 audit(1785385260.888:499): avc: denied { mounton } for pid=8369 comm="syz.3.705" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 293.175668][ T7997] udevd[7997]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 293.245264][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 293.548663][ T8390] NILFS (nullb0): couldn't find nilfs on the device [ 293.562271][ T8393] input: syz1 as /devices/virtual/input/input39 [ 293.942582][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'. [ 294.397017][ T8410] vivid-007: ================= START STATUS ================= [ 294.404734][ T8410] vivid-007: Enable Output Cropping: true [ 294.410558][ T8410] vivid-007: Enable Output Composing: true [ 294.416453][ T8410] vivid-007: Enable Output Scaler: true [ 294.422124][ T8410] vivid-007: Tx RGB Quantization Range: Automatic [ 294.428581][ T8410] vivid-007: Transmit Mode: HDMI [ 294.434118][ T8410] vivid-007: Hotplug Present: 0x00000000 [ 294.440196][ T8410] vivid-007: RxSense Present: 0x00000000 [ 294.445923][ T8410] vivid-007: EDID Present: 0x00000000 [ 294.451351][ T8410] vivid-007: ================== END STATUS ================== [ 295.584476][ T8420] 9p: Could not find request transport: rdma. [ 295.929022][ T5717] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 296.139891][ T8435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.724'. [ 296.230970][ T5717] usb 3-1: Using ep0 maxpacket: 8 [ 296.331170][ T5717] usb 3-1: unable to get BOS descriptor or descriptor too short [ 296.347202][ T5717] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 296.358041][ T5717] usb 3-1: config 0 has no interface number 0 [ 296.905709][ T5717] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 296.917593][ T5717] usb 3-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 296.983061][ T5717] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 297.006706][ T8432] loop6: detected capacity change from 0 to 2640 [ 297.030461][ T5717] usb 3-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 297.044791][ T8432] buffer_io_error: 11 callbacks suppressed [ 297.044801][ T8432] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.066834][ T8449] loop5: detected capacity change from 0 to 7 [ 297.068988][ T5717] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid maxpacket 32757, setting to 1024 [ 297.085170][ T8432] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.097265][ T5717] usb 3-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 1024 [ 297.120554][ T5717] usb 3-1: config 0 interface 122 has no altsetting 0 [ 297.147638][ T8449] Dev loop5: unable to read RDB block 7 [ 297.154176][ T8449] loop5: AHDI p1 p3 p4 [ 297.202449][ T8432] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.220158][ T8449] loop5: partition table partially beyond EOD, truncated [ 297.230120][ T5717] usb 3-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 297.242324][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.251173][ T8432] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.260916][ T8454] /dev/nullb0: Can't open blockdev [ 297.267111][ T8432] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.267813][ T8449] loop5: p1 size 100663296 extends beyond EOD, [ 297.276560][ T8432] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.278400][ T5717] usb 3-1: Product: syz [ 297.295761][ T8432] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.299784][ T8449] truncated [ 297.306850][ T8432] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.314721][ T8432] ldm_validate_partition_table(): Disk read failed. [ 297.321492][ T8432] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.324122][ T5717] usb 3-1: Manufacturer: syz [ 297.339704][ T8449] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 297.352640][ T5717] usb 3-1: SerialNumber: syz [ 297.359841][ T8432] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.369301][ T8432] Dev loop6: unable to read RDB block 0 [ 297.382131][ T5717] usb 3-1: config 0 descriptor?? [ 297.387597][ T8453] Dev loop5: unable to read RDB block 7 [ 297.393582][ T8432] loop6: unable to read partition table [ 297.395839][ T8427] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 297.408990][ T8427] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 297.416185][ T8453] loop5: AHDI p1 p3 p4 [ 297.421333][ T8453] loop5: partition table partially beyond EOD, truncated [ 297.428846][ T8432] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 297.433704][ T8427] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 297.445181][ T8453] loop5: p1 size 100663296 extends beyond EOD, truncated [ 297.453899][ T8453] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 297.486671][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 297.496915][ T7997] udevd[7997]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 297.613084][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 297.624263][ T7997] udevd[7997]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 297.643143][ T30] audit: type=1400 audit(1785385266.238:500): avc: denied { write } for pid=8457 comm="syz.1.729" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 297.664046][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.679375][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.727998][ T5717] pl2303 3-1:0.122: pl2303 converter detected [ 297.768618][ T5717] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 297.778624][ T5717] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 297.798337][ T5717] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 297.821391][ T5717] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 297.842011][ T5717] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 297.851933][ T5717] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 297.861061][ T5717] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 297.869966][ T5717] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 297.879160][ T5717] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 297.888307][ T5717] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 297.897171][ T5717] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 298.170788][ T5717] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 298.201847][ T5717] usb 3-1: USB disconnect, device number 10 [ 298.239386][ T5717] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 298.255649][ T5717] pl2303 3-1:0.122: device disconnected [ 298.482455][ T8473] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8473 comm=syz.1.735 [ 298.498009][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ebacc00: rx timeout, send abort [ 298.509829][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ebad000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 298.529547][ T30] audit: type=1400 audit(1785385267.098:501): avc: denied { read } for pid=4957 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 298.596954][ T30] audit: type=1400 audit(1785385267.098:502): avc: denied { search } for pid=4957 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.642924][ T30] audit: type=1400 audit(1785385267.098:503): avc: denied { write search } for pid=4957 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.713958][ T30] audit: type=1400 audit(1785385267.098:504): avc: denied { add_name } for pid=4957 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.792619][ T30] audit: type=1400 audit(1785385267.098:505): avc: denied { create } for pid=4957 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 298.846179][ T30] audit: type=1400 audit(1785385267.098:506): avc: denied { append open } for pid=4957 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 298.900734][ T30] audit: type=1400 audit(1785385267.098:507): avc: denied { getattr } for pid=4957 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 298.923784][ T30] audit: type=1400 audit(1785385267.218:508): avc: denied { map } for pid=8472 comm="syz.1.735" path="socket:[19087]" dev="sockfs" ino=19087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 298.948087][ T30] audit: type=1400 audit(1785385267.218:509): avc: denied { read } for pid=8472 comm="syz.1.735" path="socket:[19087]" dev="sockfs" ino=19087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.008526][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ebacc00: abort rx timeout. Force session deactivation [ 299.208856][ T5717] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 299.361222][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 299.395435][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.445902][ T5717] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 299.478336][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.544861][ T5717] usb 4-1: config 0 descriptor?? [ 299.936023][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.950276][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.087490][ T5717] hid-u2fzero 0003:20A0:4287.0005: unknown main item tag 0x0 [ 300.098637][ T5717] hid-u2fzero 0003:20A0:4287.0005: unknown main item tag 0x0 [ 300.121534][ T5717] hid-u2fzero 0003:20A0:4287.0005: unknown main item tag 0x0 [ 300.129966][ T5717] hid-u2fzero 0003:20A0:4287.0005: unknown main item tag 0x0 [ 300.137605][ T5717] hid-u2fzero 0003:20A0:4287.0005: unknown main item tag 0x0 [ 300.188248][ T5717] hid-u2fzero 0003:20A0:4287.0005: unknown main item tag 0x0 [ 300.217718][ T5717] hid-u2fzero 0003:20A0:4287.0005: unknown main item tag 0x0 [ 300.245946][ T5717] hid-u2fzero 0003:20A0:4287.0005: unknown main item tag 0x0 [ 300.287647][ T5717] hid-u2fzero 0003:20A0:4287.0005: unknown main item tag 0x0 [ 300.323226][ T5717] hid-u2fzero 0003:20A0:4287.0005: unknown main item tag 0x0 [ 300.544911][ T5717] hid-u2fzero 0003:20A0:4287.0005: hidraw0: USB HID v0.06 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0 [ 301.402604][ T5746] usb 4-1: USB disconnect, device number 8 [ 302.017199][ T8528] warning: `syz.0.753' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 302.036292][ T8528] input: syz1 as /devices/virtual/input/input40 [ 302.500337][ T5717] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 302.718913][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 302.811756][ T5717] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 302.874942][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.898288][ T5717] usb 3-1: Product: syz [ 302.928911][ T5717] usb 3-1: Manufacturer: syz [ 302.942688][ T5717] usb 3-1: SerialNumber: syz [ 302.961513][ T5717] usb 3-1: config 0 descriptor?? [ 303.344982][ T8543] vivid-007: ================= START STATUS ================= [ 303.352765][ T8543] vivid-007: Enable Output Cropping: true [ 303.358625][ T8543] vivid-007: Enable Output Composing: true [ 303.364595][ T8543] vivid-007: Enable Output Scaler: true [ 303.370263][ T8543] vivid-007: Tx RGB Quantization Range: Automatic [ 303.376805][ T8543] vivid-007: Transmit Mode: HDMI [ 303.381899][ T8543] vivid-007: Hotplug Present: 0x00000000 [ 303.387659][ T8543] vivid-007: RxSense Present: 0x00000000 [ 303.393504][ T8543] vivid-007: EDID Present: 0x00000000 [ 303.399022][ T8543] vivid-007: ================== END STATUS ================== [ 303.658484][ T5717] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 303.675296][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 303.705596][ T5717] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 303.718503][ T5717] usb 3-1: media controller created [ 303.732694][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.767622][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 303.767778][ T30] audit: type=1400 audit(1785385272.358:511): avc: denied { write } for pid=8544 comm="syz.1.760" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 303.886715][ T5717] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 303.895465][ T5717] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 304.341079][ T5724] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 304.638977][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 304.671822][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.725684][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.844890][ T5724] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 304.925275][ T5751] usb 3-1: USB disconnect, device number 11 [ 304.957798][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.125257][ T5724] usb 5-1: config 0 descriptor?? [ 305.248132][ T8561] syzkaller0: entered promiscuous mode [ 305.253881][ T8561] syzkaller0: entered allmulticast mode [ 305.318568][ T5751] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 305.902273][ T5724] usbhid 5-1:0.0: can't add hid device: -32 [ 305.967411][ T5724] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 306.059911][ T8565] 9pnet_virtio: no channels available for device syz [ 306.256474][ T8570] loop6: detected capacity change from 0 to 2640 [ 306.270241][ T30] audit: type=1400 audit(1785385274.858:512): avc: denied { bind } for pid=8547 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 306.299030][ T8570] buffer_io_error: 11 callbacks suppressed [ 306.299041][ T8570] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.324816][ T8570] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.343742][ T30] audit: type=1400 audit(1785385274.858:513): avc: denied { read } for pid=8547 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 306.405205][ T8570] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.432924][ T8570] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.599883][ T8570] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.679042][ T5717] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 306.733787][ T8570] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.756986][ T8570] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.770464][ T8570] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.790926][ T8570] ldm_validate_partition_table(): Disk read failed. [ 306.805721][ T8570] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.826161][ T8570] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.850769][ T8570] Dev loop6: unable to read RDB block 0 [ 306.864308][ T8570] loop6: unable to read partition table [ 306.878923][ T5717] usb 4-1: device descriptor read/64, error -71 [ 306.887966][ T8570] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 307.154528][ T5717] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 307.745085][ T5717] usb 4-1: device descriptor read/64, error -71 [ 308.046174][ T8596] 9p: Could not find request transport: rdma. [ 308.077244][ T5717] usb usb4-port1: attempt power cycle [ 308.145916][ T5746] usb 5-1: USB disconnect, device number 19 [ 308.427175][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 308.560813][ T5717] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 308.812678][ T8603] bridge_slave_1: left allmulticast mode [ 308.818464][ T8603] bridge_slave_1: left promiscuous mode [ 308.831352][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.853986][ T8610] loop5: detected capacity change from 0 to 7 [ 308.960319][ T8603] bridge_slave_0: left allmulticast mode [ 308.966145][ T8603] bridge_slave_0: left promiscuous mode [ 308.973694][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.115540][ T8610] Dev loop5: unable to read RDB block 7 [ 309.196866][ T8610] loop5: AHDI p1 p3 p4 [ 309.262616][ T8610] loop5: partition table partially beyond EOD, truncated [ 309.368922][ T8610] loop5: p1 size 100663296 extends beyond EOD, truncated [ 309.380358][ T5717] usb 4-1: device descriptor read/8, error -71 [ 309.419970][ T8610] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 309.455196][ T8615] loop7: detected capacity change from 0 to 16384 [ 309.511122][ T8611] Dev loop5: unable to read RDB block 7 [ 309.581726][ T8611] loop5: AHDI p1 p3 p4 [ 309.604773][ T8611] loop5: partition table partially beyond EOD, truncated [ 309.638279][ T8611] loop5: p1 size 100663296 extends beyond EOD, truncated [ 309.701910][ T8611] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 309.847813][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 309.861933][ T7997] udevd[7997]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 309.957595][ T8617] 9pnet_virtio: no channels available for device syz [ 309.980563][ T7997] udevd[7997]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 309.992172][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 310.012799][ T8615] loop7: detected capacity change from 16384 to 0 [ 310.090528][ T8613] lo speed is unknown, defaulting to 1000 [ 310.297264][ T30] audit: type=1400 audit(1785385278.888:514): avc: denied { bind } for pid=8623 comm="syz.1.785" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.295556][ T8637] 9pnet_virtio: no channels available for device syz [ 311.929727][ T30] audit: type=1326 audit(1785385280.448:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.4.791" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50ac19de99 code=0x0 [ 312.401580][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.791'. [ 312.414670][ T30] audit: type=1326 audit(1785385281.008:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.4.791" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac19de99 code=0x7ffc0000 [ 312.483711][ T30] audit: type=1326 audit(1785385281.038:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.4.791" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac19de99 code=0x7ffc0000 [ 312.543566][ T30] audit: type=1326 audit(1785385281.048:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.4.791" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac19de99 code=0x7ffc0000 [ 312.631057][ T30] audit: type=1326 audit(1785385281.048:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.4.791" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac19de99 code=0x7ffc0000 [ 312.683949][ T30] audit: type=1326 audit(1785385281.048:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.4.791" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f50ac19de99 code=0x7ffc0000 [ 312.784834][ T30] audit: type=1326 audit(1785385281.048:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.4.791" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac19de99 code=0x7ffc0000 [ 312.847983][ T30] audit: type=1326 audit(1785385281.048:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.4.791" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac19de99 code=0x7ffc0000 [ 312.928118][ T30] audit: type=1326 audit(1785385281.048:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.4.791" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac19de99 code=0x7ffc0000 [ 314.076165][ T8679] 9pnet_virtio: no channels available for device syz [ 315.328614][ T8695] NILFS (nullb0): couldn't find nilfs on the device [ 316.719545][ T8707] 9pnet_virtio: no channels available for device syz [ 316.741412][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.846474][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.218901][ T187] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 319.368821][ T187] usb 5-1: Using ep0 maxpacket: 8 [ 319.375598][ T187] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 319.386042][ T187] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.397497][ T187] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.408013][ T187] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.419117][ T187] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.432311][ T187] usb 5-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 319.441448][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.266897][ T8728] loop5: detected capacity change from 0 to 7 [ 320.377042][ T8730] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 320.452726][ T8728] Dev loop5: unable to read RDB block 7 [ 320.509240][ T8735] 9pnet_virtio: no channels available for device syz [ 320.615969][ T8728] loop5: AHDI p1 p3 p4 [ 320.655769][ T8728] loop5: partition table partially beyond EOD, truncated [ 320.703737][ T8728] loop5: p1 size 100663296 extends beyond EOD, truncated [ 320.824492][ T8728] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 321.080827][ T5731] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 321.442962][ T8732] Dev loop5: unable to read RDB block 7 [ 321.448635][ T8732] loop5: AHDI p1 p3 p4 [ 321.453161][ T8732] loop5: partition table partially beyond EOD, truncated [ 321.461901][ T8732] loop5: p1 size 100663296 extends beyond EOD, truncated [ 321.470054][ T5731] usb 3-1: Using ep0 maxpacket: 32 [ 321.481520][ T5731] usb 3-1: config 0 interface 0 has no altsetting 0 [ 321.490184][ T5731] usb 3-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 321.502760][ T8732] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 321.530912][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.558203][ T5731] usb 3-1: Product: syz [ 321.566888][ T7997] udevd[7997]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 321.578604][ T187] usb 5-1: USB disconnect, device number 20 [ 321.624131][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 321.637191][ T5731] usb 3-1: Manufacturer: syz [ 322.163831][ T5731] usb 3-1: SerialNumber: syz [ 322.175790][ T5731] usb 3-1: config 0 descriptor?? [ 322.217388][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 322.238287][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 322.284167][ T8743] 9p: Could not find request transport: rdma. [ 322.382759][ T8742] syzkaller0: entered promiscuous mode [ 322.389196][ T8742] syzkaller0: entered allmulticast mode [ 322.406057][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.445333][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.462923][ T5731] snd_usb_podhd 3-1:0.0: Line 6 POD HD500X found [ 322.469845][ T5731] snd_usb_podhd 3-1:0.0: set_interface failed [ 322.476446][ T5731] snd_usb_podhd 3-1:0.0: Line 6 POD HD500X now disconnected [ 322.493309][ T5731] snd_usb_podhd 3-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 322.507596][ T5731] usb 3-1: USB disconnect, device number 12 [ 322.974714][ T8757] NILFS (nullb0): couldn't find nilfs on the device [ 323.019052][ T5731] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 323.179770][ T5731] usb 3-1: config 0 interface 0 has no altsetting 0 [ 323.206960][ T5731] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da [ 323.217087][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.241611][ T5731] usb 3-1: Product: syz [ 323.245887][ T5731] usb 3-1: Manufacturer: syz [ 323.257052][ T5731] usb 3-1: SerialNumber: syz [ 323.275373][ T5731] usb 3-1: config 0 descriptor?? [ 323.352636][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 323.352652][ T30] audit: type=1400 audit(1785385291.948:625): avc: denied { getopt } for pid=8758 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.557005][ T8733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.680446][ T8774] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 323.682226][ T5731] flexcop_usb: set interface failed. [ 323.706165][ T5731] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -71 [ 323.740423][ T5731] usb 3-1: USB disconnect, device number 13 [ 323.837140][ T8778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8778 comm=syz.1.824 [ 324.239239][ T187] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 324.321259][ T30] audit: type=1400 audit(1785385292.918:626): avc: denied { create } for pid=8782 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 324.474654][ T30] audit: type=1400 audit(1785385292.968:627): avc: denied { create } for pid=8782 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 324.502863][ T187] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.850309][ T187] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.852298][ T30] audit: type=1400 audit(1785385292.968:628): avc: denied { bind } for pid=8782 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 324.860798][ T187] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.889245][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.920096][ T8781] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 324.942201][ T187] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.034070][ T8786] 9pnet_virtio: no channels available for device syz [ 325.415151][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 325.470955][ T8781] netlink: 160 bytes leftover after parsing attributes in process `syz.4.826'. [ 325.480862][ T8774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.505807][ T8781] netlink: 160 bytes leftover after parsing attributes in process `syz.4.826'. [ 325.518528][ T8778] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 325.637928][ T5751] IPVS: starting estimator thread 0... [ 325.673524][ T8796] 9pnet_virtio: no channels available for device syz [ 325.697927][ T5751] usb 5-1: USB disconnect, device number 21 [ 325.740352][ T8802] IPVS: using max 45 ests per chain, 108000 per kthread [ 326.723989][ T8833] NILFS (nullb0): couldn't find nilfs on the device [ 328.321106][ T8852] 9pnet_virtio: no channels available for device syz [ 328.857177][ T8863] 9pnet_virtio: no channels available for device syz [ 329.098319][ T8862] siw: device registration error -23 [ 329.403688][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 329.415002][ T8870] netlink: 'syz.1.846': attribute type 10 has an invalid length. [ 329.423047][ T8870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.846'. [ 329.489806][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.846'. [ 329.712862][ T8870] geneve2: entered promiscuous mode [ 329.748554][ T8870] geneve2: entered allmulticast mode [ 329.881100][ T8878] netlink: 14902 bytes leftover after parsing attributes in process `syz.4.848'. [ 330.244339][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.253048][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.321449][ T8886] fuse: Bad value for 'user_id' [ 330.326332][ T8886] fuse: Bad value for 'user_id' [ 330.481190][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.851'. [ 330.619266][ T8895] netlink: 'syz.0.853': attribute type 4 has an invalid length. [ 330.893717][ T8897] loop6: detected capacity change from 0 to 2640 [ 330.926800][ T8904] gtp0: entered promiscuous mode [ 330.932217][ T8897] buffer_io_error: 11 callbacks suppressed [ 330.932227][ T8897] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.006825][ T8897] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.040860][ T8904] gtp0: entered allmulticast mode [ 331.058121][ T8897] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.084479][ T8897] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.205286][ T8897] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.244691][ T8897] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.279636][ T8897] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.288228][ T8897] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.341286][ T8897] ldm_validate_partition_table(): Disk read failed. [ 331.389726][ T8897] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.399199][ T8897] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.409138][ T8897] Dev loop6: unable to read RDB block 0 [ 331.416043][ T8897] loop6: unable to read partition table [ 331.424099][ T8897] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 331.636538][ T8919] /dev/nullb0: Can't open blockdev [ 331.675300][ T4975] ldm_validate_partition_table(): Disk read failed. [ 331.684204][ T4975] Dev loop6: unable to read RDB block 0 [ 331.716174][ T4975] loop6: unable to read partition table [ 331.778012][ T8907] 9pnet_fd: p9_fd_create_tcp (8907): problem connecting socket to 127.0.0.1 [ 331.986242][ T8924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.859'. [ 332.069161][ T8924] netlink: 'syz.0.859': attribute type 3 has an invalid length. [ 332.186790][ T8930] vlan2: entered promiscuous mode [ 332.191941][ T8930] batadv0: entered promiscuous mode [ 332.322707][ T8926] 9pnet_virtio: no channels available for device syz [ 332.896470][ T8937] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 332.923079][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.930675][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.948365][ T8937] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.955600][ T8937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.963112][ T8937] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.970282][ T8937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.986351][ T8937] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 333.105668][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.173200][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.043242][ T8953] syzkaller0: entered promiscuous mode [ 334.081317][ T8953] syzkaller0: entered allmulticast mode [ 334.191699][ T8958] overlayfs: invalid origin (0000) [ 337.107979][ T8978] 9pnet_virtio: no channels available for device syz [ 337.845594][ T8997] 9p: Could not find request transport: rdma. [ 338.976580][ T9020] loop6: detected capacity change from 0 to 2640 [ 339.002349][ T9020] buffer_io_error: 27 callbacks suppressed [ 339.002362][ T9020] Buffer I/O error on dev loop6, logical block 0, async page read [ 339.108483][ T187] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 339.136693][ T9020] Buffer I/O error on dev loop6, logical block 0, async page read [ 339.153379][ T9020] Buffer I/O error on dev loop6, logical block 0, async page read [ 339.164896][ T9020] Buffer I/O error on dev loop6, logical block 0, async page read [ 339.176097][ T9020] Buffer I/O error on dev loop6, logical block 0, async page read [ 339.188087][ T9020] Buffer I/O error on dev loop6, logical block 0, async page read [ 339.198268][ T9020] Buffer I/O error on dev loop6, logical block 0, async page read [ 339.200500][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.889'. [ 339.219053][ T9020] Buffer I/O error on dev loop6, logical block 0, async page read [ 339.230248][ T9020] ldm_validate_partition_table(): Disk read failed. [ 339.241034][ T9020] Buffer I/O error on dev loop6, logical block 0, async page read [ 339.555984][ T187] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.567889][ T187] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.581042][ T9020] Buffer I/O error on dev loop6, logical block 0, async page read [ 339.583192][ T187] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 339.608145][ T9020] Dev loop6: unable to read RDB block 0 [ 339.634978][ T9020] loop6: unable to read partition table [ 339.640799][ T187] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 339.684929][ T187] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 339.707127][ T9020] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 339.731947][ T187] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 339.760458][ T187] usb 1-1: config 1 interface 1 has no altsetting 0 [ 339.803486][ T187] usb 1-1: string descriptor 0 read error: -22 [ 339.810736][ T187] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 339.887346][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.302608][ T9050] vivid-007: ================= START STATUS ================= [ 340.310927][ T9050] vivid-007: Enable Output Cropping: true [ 340.317062][ T9050] vivid-007: Enable Output Composing: true [ 340.323000][ T9050] vivid-007: Enable Output Scaler: true [ 340.328598][ T9050] vivid-007: Tx RGB Quantization Range: Automatic [ 340.335090][ T9050] vivid-007: Transmit Mode: HDMI [ 340.340224][ T9050] vivid-007: Hotplug Present: 0x00000000 [ 340.345916][ T9050] vivid-007: RxSense Present: 0x00000000 [ 340.351718][ T9050] vivid-007: EDID Present: 0x00000000 [ 340.357433][ T9050] vivid-007: ================== END STATUS ================== [ 340.901741][ T9052] 9p: Could not find request transport: rdma. [ 341.147302][ T9011] syzkaller0: entered promiscuous mode [ 341.201735][ T9011] syzkaller0: entered allmulticast mode [ 341.238026][ T9011] tipc: Started in network mode [ 341.264660][ T9011] tipc: Node identity 22526eea072, cluster identity 4711 [ 341.298848][ T9055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.322588][ T9011] tipc: Enabled bearer , priority 0 [ 341.463514][ T9055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.954807][ T9007] tipc: Resetting bearer [ 342.102184][ T9007] tipc: Disabling bearer [ 342.222583][ T187] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 342.400591][ T187] usb 1-1: USB disconnect, device number 8 [ 342.667715][ T9076] kvm: pic: non byte write [ 342.943681][ T9088] loop5: detected capacity change from 0 to 7 [ 342.951348][ T9088] Dev loop5: unable to read RDB block 7 [ 342.951913][ T9084] loop6: detected capacity change from 0 to 2640 [ 342.984676][ T9084] ldm_validate_partition_table(): Disk read failed. [ 342.987057][ T9088] loop5: AHDI p1 p3 p4 [ 342.996409][ T9084] Dev loop6: unable to read RDB block 0 [ 342.999132][ T9088] loop5: partition table partially beyond EOD, truncated [ 343.013969][ T9088] loop5: p1 size 100663296 extends beyond EOD, truncated [ 343.029876][ T9084] loop6: unable to read partition table [ 343.057232][ T9084] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 343.079986][ T9088] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 343.092377][ T4975] ldm_validate_partition_table(): Disk read failed. [ 343.102180][ T4975] Dev loop6: unable to read RDB block 0 [ 343.111813][ T9096] Dev loop5: unable to read RDB block 7 [ 343.119386][ T4975] loop6: unable to read partition table [ 343.126257][ T9096] loop5: AHDI p1 p3 p4 [ 343.158259][ T9096] loop5: partition table partially beyond EOD, truncated [ 343.211151][ T9096] loop5: p1 size 100663296 extends beyond EOD, truncated [ 343.243796][ T9096] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 343.336963][ T7997] udevd[7997]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 343.348575][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 344.002144][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.014187][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.107563][ T9104] 9p: Could not find request transport: rdma. [ 346.506901][ T9141] loop6: detected capacity change from 0 to 2640 [ 346.566540][ T9141] buffer_io_error: 48 callbacks suppressed [ 346.566553][ T9141] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.641207][ T9141] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.666490][ T9141] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.685009][ T9141] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.710587][ T9141] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.729870][ T9141] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.747069][ T9141] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.805808][ T9141] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.826175][ T9141] ldm_validate_partition_table(): Disk read failed. [ 346.849126][ T9141] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.879686][ T9141] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.908845][ T9141] Dev loop6: unable to read RDB block 0 [ 346.927083][ T9141] loop6: unable to read partition table [ 346.943235][ T9141] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 346.991743][ T4975] ldm_validate_partition_table(): Disk read failed. [ 347.003870][ T4975] Dev loop6: unable to read RDB block 0 [ 347.094963][ T4975] loop6: unable to read partition table [ 347.233955][ T9162] vivid-007: ================= START STATUS ================= [ 347.241698][ T9162] vivid-007: Enable Output Cropping: true [ 347.247465][ T9162] vivid-007: Enable Output Composing: true [ 347.253334][ T9162] vivid-007: Enable Output Scaler: true [ 347.259023][ T9162] vivid-007: Tx RGB Quantization Range: Automatic [ 347.265520][ T9162] vivid-007: Transmit Mode: HDMI [ 347.271125][ T9162] vivid-007: Hotplug Present: 0x00000000 [ 347.276834][ T9162] vivid-007: RxSense Present: 0x00000000 [ 347.282972][ T9162] vivid-007: EDID Present: 0x00000000 [ 347.288451][ T9162] vivid-007: ================== END STATUS ================== [ 347.821821][ T30] audit: type=1400 audit(1785385316.418:629): avc: denied { search } for pid=9169 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.932410][ T30] audit: type=1400 audit(1785385316.488:630): avc: denied { search } for pid=9169 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.145937][ T30] audit: type=1400 audit(1785385316.488:631): avc: denied { search } for pid=9169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.392244][ T30] audit: type=1400 audit(1785385316.488:632): avc: denied { search } for pid=9169 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.617448][ T30] audit: type=1400 audit(1785385316.518:633): avc: denied { read } for pid=9173 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.790620][ T30] audit: type=1400 audit(1785385316.518:634): avc: denied { read open } for pid=9173 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.917684][ T30] audit: type=1400 audit(1785385316.518:635): avc: denied { getattr } for pid=9173 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.996697][ T30] audit: type=1400 audit(1785385316.518:636): avc: denied { getattr } for pid=9173 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.026375][ T30] audit: type=1400 audit(1785385316.618:637): avc: denied { read append } for pid=9174 comm="syz.4.926" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 349.050536][ T30] audit: type=1400 audit(1785385316.628:638): avc: denied { open } for pid=9174 comm="syz.4.926" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 349.422932][ T9175] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 349.484337][ T9175] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 349.849513][ T9175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.891235][ T9175] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 349.982268][ T9175] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.009929][ T9175] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 350.163949][ T9175] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 350.212149][ T9175] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 350.558883][ T5341] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 350.569154][ T5710] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 350.728801][ T5341] usb 1-1: Using ep0 maxpacket: 32 [ 350.751734][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.758124][ T5341] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 350.808981][ T5341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.811435][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.880694][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.892018][ T5341] usb 1-1: config 0 descriptor?? [ 350.893571][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.966230][ T5341] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 350.978914][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 351.016906][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 351.077499][ T5710] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 351.083397][ T9249] xt_NFQUEUE: number of total queues is 0 [ 351.125685][ T5710] usb 3-1: can't read configurations, error -71 [ 351.308718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 351.898461][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 352.038918][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 352.179027][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 352.378449][ T9276] lo speed is unknown, defaulting to 1000 [ 352.970392][ T5710] usb 1-1: USB disconnect, device number 9 [ 353.058861][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 353.076568][ T9296] netlink: 'syz.0.945': attribute type 11 has an invalid length. [ 353.448555][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 353.448567][ T30] audit: type=1400 audit(1785385322.038:663): avc: denied { ioctl } for pid=9295 comm="syz.0.945" path="socket:[22586]" dev="sockfs" ino=22586 ioctlcmd=0x6e8c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.722701][ T30] audit: type=1400 audit(1785385322.318:664): avc: denied { write } for pid=9308 comm="syz.0.946" name="trace" dev="tracefs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 353.988786][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 354.108762][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 354.267873][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 354.596455][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.620222][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.098780][ T5731] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 355.268748][ T5731] usb 1-1: Using ep0 maxpacket: 16 [ 355.299477][ T5622] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 355.314445][ T30] audit: type=1400 audit(1785385323.888:665): avc: denied { shutdown } for pid=9331 comm="syz.4.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 355.317794][ T5731] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 355.348048][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.358052][ T5731] usb 1-1: Product: syz [ 355.367340][ T5731] usb 1-1: Manufacturer: syz [ 355.372620][ T5731] usb 1-1: SerialNumber: syz [ 355.404403][ T5731] usb 1-1: config 0 descriptor?? [ 355.866974][ T30] audit: type=1400 audit(1785385324.458:666): avc: denied { mount } for pid=9339 comm="syz.4.956" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 355.936525][ T30] audit: type=1400 audit(1785385324.528:667): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 355.994245][ T5731] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 356.054651][ T5731] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.127325][ T5731] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 356.127809][ T30] audit: type=1400 audit(1785385324.718:668): avc: denied { lock } for pid=9341 comm="syz.4.957" path="/dev/usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 356.170568][ T5731] usb 1-1: media controller created [ 356.203709][ T9323] netlink: 'syz.0.951': attribute type 29 has an invalid length. [ 356.236152][ T9323] netlink: 'syz.0.951': attribute type 29 has an invalid length. [ 356.248131][ T5731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.669475][ T30] audit: type=1400 audit(1785385326.258:669): avc: denied { read } for pid=9348 comm="syz.2.958" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 357.762374][ T30] audit: type=1400 audit(1785385326.258:670): avc: denied { open } for pid=9348 comm="syz.2.958" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 357.787544][ T30] audit: type=1400 audit(1785385326.258:671): avc: denied { ioctl } for pid=9348 comm="syz.2.958" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 357.816009][ T5731] zl10353_read_register: readreg error (reg=127, ret==0) [ 357.828550][ T5731] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 357.843161][ T30] audit: type=1400 audit(1785385326.408:672): avc: denied { setopt } for pid=9348 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 357.865771][ T5731] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 357.910365][ T5731] usb 1-1: USB disconnect, device number 10 [ 357.931473][ T9358] netlink: 'syz.2.958': attribute type 1 has an invalid length. [ 357.984811][ T9358] netlink: 'syz.2.958': attribute type 2 has an invalid length. [ 358.076370][ T5731] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 358.317430][ T9353] lo speed is unknown, defaulting to 1000 [ 358.700047][ T9369] 9pnet_virtio: no channels available for device syz [ 359.195939][ T9376] siw: device registration error -23 [ 359.886481][ T9395] vivid-007: ================= START STATUS ================= [ 359.894218][ T9395] vivid-007: Enable Output Cropping: true [ 359.900070][ T9395] vivid-007: Enable Output Composing: true [ 359.905966][ T9395] vivid-007: Enable Output Scaler: true [ 359.911590][ T9395] vivid-007: Tx RGB Quantization Range: Automatic [ 359.918028][ T9395] vivid-007: Transmit Mode: HDMI [ 359.923234][ T9395] vivid-007: Hotplug Present: 0x00000000 [ 359.928967][ T9395] vivid-007: RxSense Present: 0x00000000 [ 359.934685][ T9395] vivid-007: EDID Present: 0x00000000 [ 359.940340][ T9395] vivid-007: ================== END STATUS ================== [ 364.337205][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 364.337220][ T30] audit: type=1400 audit(1785385332.928:674): avc: denied { write } for pid=9406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.393537][ T30] audit: type=1400 audit(1785385332.988:675): avc: denied { write } for pid=9417 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.059549][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 373.067107][ T31] Not tainted syzkaller #0 [ 373.079275][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.088010][ T31] task:kworker/0:0 state:D stack:22840 pid:9 tgid:9 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 373.100065][ T31] Workqueue: usb_hub_wq hub_event [ 373.105107][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 373.108372][ T31] [ 373.111360][ T31] __schedule+0x125c/0x6730 [ 373.115939][ T31] ? __pfx___schedule+0x10/0x10 [ 373.121326][ T31] ? find_held_lock+0x2b/0x80 [ 373.126064][ T31] ? schedule+0x225/0x2c0 [ 373.130503][ T31] schedule+0xdd/0x2c0 [ 373.134584][ T31] schedule_timeout+0x1b2/0x280 [ 373.140118][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 373.190308][ T31] ? mark_held_locks+0x40/0x70 [ 373.210686][ T31] __wait_for_common+0x2e7/0x4c0 [ 373.230304][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 373.247844][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 373.265389][ T31] ? __pfx_device_del+0x10/0x10 [ 373.279800][ T31] ? kobject_put+0xb9/0x640 [ 373.287827][ T31] i2c_del_adapter+0x1d4/0x2d0 [ 373.305511][ T31] ? __pfx_ft260_remove+0x10/0x10 [ 373.311019][ T31] ft260_remove+0x58/0x80 [ 373.315385][ T31] hid_device_remove+0xd1/0x270 [ 373.320661][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 373.326173][ T31] device_remove+0xcb/0x180 [ 373.331731][ T31] device_release_driver_internal+0x44e/0x620 [ 373.337836][ T31] bus_remove_device+0x2bc/0x560 [ 373.343110][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 373.348595][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 373.355740][ T31] device_del+0x376/0x9b0 [ 373.360338][ T31] ? __pfx_device_del+0x10/0x10 [ 373.365217][ T31] ? do_raw_spin_lock+0x128/0x260 [ 373.370627][ T31] hid_destroy_device+0x19c/0x240 [ 373.375673][ T31] usbhid_disconnect+0xa0/0xe0 [ 373.383690][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 373.389262][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 373.395008][ T31] device_remove+0x12a/0x180 [ 373.400609][ T31] device_release_driver_internal+0x44e/0x620 [ 373.406720][ T31] bus_remove_device+0x2bc/0x560 [ 373.412012][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 373.417491][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 373.423610][ T31] device_del+0x376/0x9b0 [ 373.427969][ T31] ? __pfx_device_del+0x10/0x10 [ 373.436102][ T31] ? kobject_put+0xb9/0x640 [ 373.448820][ T31] usb_disable_device+0x367/0x810 [ 373.455379][ T31] usb_disconnect+0x2e2/0x9a0 [ 373.468883][ T31] hub_event+0x1c4f/0x4a60 [ 373.474793][ T31] ? __lock_acquire+0x49f/0x1a40 [ 373.488832][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 373.498761][ T31] ? __pfx_hub_event+0x10/0x10 [ 373.508804][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 373.518773][ T31] ? rcu_is_watching+0x12/0xc0 [ 373.528919][ T31] process_one_work+0xa23/0x1940 [ 373.538777][ T31] ? __pfx_process_one_work+0x10/0x10 [ 373.548771][ T31] ? __pfx_hub_event+0x10/0x10 [ 373.558756][ T31] worker_thread+0x5ef/0xe50 [ 373.567195][ T31] ? kthread+0x13a/0x450 [ 373.571517][ T31] ? __pfx_worker_thread+0x10/0x10 [ 373.576639][ T31] kthread+0x370/0x450 [ 373.580772][ T31] ? __pfx_kthread+0x10/0x10 [ 373.586115][ T31] ret_from_fork+0x72b/0xd50 [ 373.590793][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.595916][ T31] ? __switch_to+0x800/0x10f0 [ 373.600597][ T31] ? __pfx_kthread+0x10/0x10 [ 373.605177][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.610022][ T31] [ 373.616817][ T31] [ 373.616817][ T31] Showing all locks held in the system: [ 373.657278][ T31] 6 locks held by kworker/0:0/9: [ 373.680473][ T31] #0: ffff888023aaa140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 373.708713][ T31] #1: ffffc900000e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 373.728739][ T31] #2: ffff88802b13a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60 [ 373.748891][ T31] #3: ffff88807a8fb1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 373.768720][ T31] #4: ffff88802a87b1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 373.789674][ T31] #5: ffff88807ac31a58 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 373.810252][ T31] 1 lock held by khungtaskd/31: [ 373.821091][ T31] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 373.848819][ T31] 2 locks held by getty/5367: [ 373.853570][ T31] #0: ffff888033e2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 373.870443][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 373.898969][ T31] 1 lock held by syz-executor/5607: [ 373.904447][ T31] #0: ffff88802abf0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 373.918726][ T31] 1 lock held by syz-executor/5609: [ 373.930481][ T31] 2 locks held by syz-executor/5616: [ 373.941690][ T31] #0: ffff88807a4d4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 373.952240][ T31] #1: ffffffff8ebf3c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 373.962383][ T31] 3 locks held by kworker/0:7/5751: [ 373.967563][ T31] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 373.978029][ T31] #1: ffffc9000445fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 373.987803][ T31] #2: ffffffff8ebf3c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 373.998442][ T31] 3 locks held by kworker/u8:38/7185: [ 374.003882][ T31] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 374.013832][ T31] #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 374.022535][ T31] #2: ffff8880691607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 374.032595][ T31] 1 lock held by syz.1.390/7305: [ 374.037518][ T31] #0: ffff8880778b0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 374.047153][ T31] [ 374.049562][ T31] ============================================= [ 374.049562][ T31] [ 374.094273][ T31] NMI backtrace for cpu 1 [ 374.094289][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 374.094307][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 374.094316][ T31] Call Trace: [ 374.094321][ T31] [ 374.094326][ T31] dump_stack_lvl+0x100/0x190 [ 374.094350][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 374.094370][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 374.094392][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 374.094417][ T31] sys_info+0x141/0x190 [ 374.094436][ T31] watchdog+0xcb1/0x1030 [ 374.094457][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 374.094471][ T31] ? __pfx_watchdog+0x10/0x10 [ 374.094489][ T31] ? __kthread_parkme+0x18c/0x230 [ 374.094512][ T31] ? kthread+0x13a/0x450 [ 374.094524][ T31] ? __pfx_watchdog+0x10/0x10 [ 374.094539][ T31] kthread+0x370/0x450 [ 374.094552][ T31] ? __pfx_kthread+0x10/0x10 [ 374.094566][ T31] ret_from_fork+0x72b/0xd50 [ 374.094586][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 374.094607][ T31] ? __switch_to+0x800/0x10f0 [ 374.094621][ T31] ? __pfx_kthread+0x10/0x10 [ 374.094636][ T31] ret_from_fork_asm+0x1a/0x30 [ 374.094668][ T31] [ 374.094674][ T31] Sending NMI from CPU 1 to CPUs 0: [ 374.222243][ C0] NMI backtrace for cpu 0 [ 374.222256][ C0] CPU: 0 UID: 0 PID: 9422 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 374.222272][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 374.222280][ C0] RIP: 0010:stack_depot_save_flags+0x4/0x9d0 [ 374.222304][ C0] Code: 5d 41 5c c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <83> f9 03 0f 87 e0 02 00 00 41 57 41 56 41 55 41 54 49 89 fc 55 89 [ 374.222316][ C0] RSP: 0018:ffffc9000331f250 EFLAGS: 00000287 [ 374.222329][ C0] RAX: 0000000000000015 RBX: ffff888035926830 RCX: 0000000000000000 [ 374.222337][ C0] RDX: 0000000000000000 RSI: 0000000000000015 RDI: ffffc9000331f258 [ 374.222345][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 374.222353][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 374.222361][ C0] R13: 0000000000000000 R14: ffff88801caef868 R15: 0000000080000001 [ 374.222369][ C0] FS: 00007f6ff4f45880(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 374.222383][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.222392][ C0] CR2: 000055cb7116a290 CR3: 0000000036150000 CR4: 00000000003526f0 [ 374.222401][ C0] Call Trace: [ 374.222405][ C0] [ 374.222410][ C0] kasan_save_stack+0x3f/0x50 [ 374.222426][ C0] ? kasan_save_stack+0x30/0x50 [ 374.222440][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 374.222458][ C0] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 374.222476][ C0] ? kernfs_put.part.0+0x3a6/0xaa0 [ 374.222490][ C0] ? kernfs_put+0x53/0x60 [ 374.222502][ C0] ? evict+0x3c2/0xad0 [ 374.222518][ C0] ? iput.part.0+0x989/0x1050 [ 374.222533][ C0] ? iput+0x35/0x40 [ 374.222547][ C0] ? dentry_unlink_inode+0x284/0x470 [ 374.222562][ C0] ? dentry_kill+0x25d/0xc20 [ 374.222577][ C0] ? shrink_dentry_list+0x1e8/0x310 [ 374.222594][ C0] ? shrink_dcache_tree+0x201/0x400 [ 374.222610][ C0] ? d_invalidate+0x13a/0x290 [ 374.222626][ C0] ? lookup_fast+0x3f4/0x600 [ 374.222643][ C0] ? link_path_walk+0x7d4/0x1cc0 [ 374.222659][ C0] ? path_openat+0x1c9/0x4280 [ 374.222672][ C0] ? do_file_open+0x20e/0x430 [ 374.222684][ C0] ? do_sys_openat2+0x10f/0x1e0 [ 374.222699][ C0] ? __x64_sys_openat+0x12d/0x210 [ 374.222714][ C0] ? do_syscall_64+0x115/0x870 [ 374.222729][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.222752][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 374.222771][ C0] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 374.222784][ C0] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 374.222802][ C0] kernfs_put.part.0+0x3a6/0xaa0 [ 374.222815][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 374.222829][ C0] ? __pfx_kernfs_evict_inode+0x10/0x10 [ 374.222842][ C0] kernfs_put+0x53/0x60 [ 374.222854][ C0] evict+0x3c2/0xad0 [ 374.222871][ C0] ? __pfx_evict+0x10/0x10 [ 374.222888][ C0] ? iput.part.0+0x981/0x1050 [ 374.222906][ C0] iput.part.0+0x989/0x1050 [ 374.222924][ C0] iput+0x35/0x40 [ 374.222939][ C0] dentry_unlink_inode+0x284/0x470 [ 374.222954][ C0] dentry_kill+0x25d/0xc20 [ 374.222972][ C0] shrink_dentry_list+0x1e8/0x310 [ 374.222991][ C0] ? __pfx_select_collect+0x10/0x10 [ 374.223005][ C0] shrink_dcache_tree+0x201/0x400 [ 374.223023][ C0] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 374.223041][ C0] ? __lock_acquire+0x49f/0x1a40 [ 374.223060][ C0] ? d_invalidate+0xfd/0x290 [ 374.223078][ C0] d_invalidate+0x13a/0x290 [ 374.223095][ C0] ? __pfx_d_invalidate+0x10/0x10 [ 374.223115][ C0] lookup_fast+0x3f4/0x600 [ 374.223132][ C0] ? inode_permission+0x374/0x620 [ 374.223149][ C0] link_path_walk+0x7d4/0x1cc0 [ 374.223171][ C0] path_openat+0x1c9/0x4280 [ 374.223183][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 374.223197][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 374.223212][ C0] ? do_getname+0x35/0x390 [ 374.223227][ C0] ? __x64_sys_openat+0x12d/0x210 [ 374.223250][ C0] ? __pfx_path_openat+0x10/0x10 [ 374.223266][ C0] do_file_open+0x20e/0x430 [ 374.223280][ C0] ? __pfx_do_file_open+0x10/0x10 [ 374.223300][ C0] ? alloc_fd+0x471/0x7a0 [ 374.223314][ C0] ? do_getname+0x191/0x390 [ 374.223330][ C0] do_sys_openat2+0x10f/0x1e0 [ 374.223345][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.223364][ C0] __x64_sys_openat+0x12d/0x210 [ 374.223380][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 374.223399][ C0] do_syscall_64+0x115/0x870 [ 374.223413][ C0] ? clear_bhb_loop+0x40/0x90 [ 374.223428][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.223440][ C0] RIP: 0033:0x7f6ff48a7407 [ 374.223451][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 374.223462][ C0] RSP: 002b:00007fffa01a8de0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 374.223475][ C0] RAX: ffffffffffffffda RBX: 00007f6ff4f45880 RCX: 00007f6ff48a7407 [ 374.223483][ C0] RDX: 0000000000080000 RSI: 00007fffa01a8f60 RDI: ffffffffffffff9c [ 374.223492][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 374.223499][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055cb6af1b7f5 [ 374.223507][ C0] R13: 000055cb6af1b7f5 R14: 0000000000000001 R15: 0000000000000004 [ 374.223519][ C0] [ 374.741232][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 374.748098][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 374.757207][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 374.767246][ T31] Call Trace: [ 374.770508][ T31] [ 374.773420][ T31] dump_stack_lvl+0x100/0x190 [ 374.778101][ T31] vpanic+0x552/0x970 [ 374.782066][ T31] ? __pfx_vpanic+0x10/0x10 [ 374.786632][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 374.792778][ T31] panic+0xd1/0xe0 [ 374.796492][ T31] ? __pfx_panic+0x10/0x10 [ 374.800890][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 374.807031][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 374.813174][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 374.819322][ T31] ? watchdog.cold+0x1ec/0x234 [ 374.824069][ T31] ? watchdog+0xcc1/0x1030 [ 374.828469][ T31] watchdog.cold+0x1fd/0x234 [ 374.833045][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 374.838843][ T31] ? __pfx_watchdog+0x10/0x10 [ 374.843538][ T31] ? __kthread_parkme+0x18c/0x230 [ 374.848571][ T31] ? kthread+0x13a/0x450 [ 374.852798][ T31] ? __pfx_watchdog+0x10/0x10 [ 374.857459][ T31] kthread+0x370/0x450 [ 374.861510][ T31] ? __pfx_kthread+0x10/0x10 [ 374.866083][ T31] ret_from_fork+0x72b/0xd50 [ 374.870667][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 374.875767][ T31] ? __switch_to+0x800/0x10f0 [ 374.880428][ T31] ? __pfx_kthread+0x10/0x10 [ 374.885000][ T31] ret_from_fork_asm+0x1a/0x30 [ 374.889768][ T31] [ 374.892971][ T31] Kernel Offset: disabled [ 374.897284][ T31] Rebooting in 86400 seconds..