last executing test programs: 12.463024297s ago: executing program 2 (id=780): munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x20480, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000003a400), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x5}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 10.405207473s ago: executing program 2 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x7ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x5, 0x4}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x5, @local, 0x2}}, 0x4, 0x3, 0x3, 0x8, 0xa61}, &(0x7f0000000100)=0x98) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)={0x9, 0x6f, 0x2}, 0x9) 9.468591338s ago: executing program 2 (id=789): socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x30, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000240)={r7, 0x2, r6}) 9.230840265s ago: executing program 3 (id=790): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x4044805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x5, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f000001a440)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) 8.761017276s ago: executing program 1 (id=792): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x62) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000200)={r1, &(0x7f0000000100)='{\\}+(]+/):,#%\xed/@\'$\x00', 0x300, &(0x7f0000000140)={@_ha_fsid={[0x6, 0xffffff01]}, {0x111, 0xfffd, 0x7, 0x8}}, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) 7.899117586s ago: executing program 0 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, &(0x7f00000000c0)) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @nested={0x4, 0x7}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x201) ioctl$VIDIOC_SUBDEV_S_CROP(r9, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x4, 0x4, 0xfff, 0x7}}) 6.858745202s ago: executing program 0 (id=797): socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/80, 0x50}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa, &(0x7f0000000100)=ANY=[]) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, r6, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x20000000) 6.75648005s ago: executing program 1 (id=798): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000300)=[{0x1ff, 0xe000, 0x0, 0x0}], 0x1}) 6.404737909s ago: executing program 2 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x7ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x5, 0x4}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x5, @local, 0x2}}, 0x4, 0x3, 0x3, 0x8, 0xa61}, &(0x7f0000000100)=0x98) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)={0x9, 0x6f, 0x2}, 0x9) 6.025641066s ago: executing program 4 (id=800): syz_open_dev$video(&(0x7f0000000000), 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x4, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000c40)='.dead\x00', 0x0, &(0x7f0000000280)='[,\v]@+\x00', r4) add_key(&(0x7f0000000f80)='encrypted\x00', &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="500635addcfb160cde6ac823e3009381e0002010b205006b2ffbb60100000000620a89de3db7fcad19bb40cf54cd8c0c4ab0735b50d02537b01cc705192ae5b8db77202ef3cb7bc45a4e36d5fbd4f0390e110a019a332a276e75281022b509a29755e7c03fe09736a2edf8393dda189cb93668a83c8d2b11bf19d1e452c7010e50279f04d590aa25594b830b352407435c382cacbb126a69771cd01fa0b1650536a394a998091aab72ae6499eba75e17da21cfe61300379a831e280c9ee08e0723e644d555ac2ea277c88a21c01beb834d3660b3b602e6c58cde8cc3e4", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x6000050) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000002060108000008000000000000000000"], 0x14}}, 0x20000084) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000000b06030000000000000000000100000100010000070000000900020073797a3100000000080009400000000071ca96dd631a9dc184c11b3cc555d1cef4558e60af7106609dff39faedc3c32cf6f6f6c344f99e137a661c667a59d66f1e1e46d9f9ea8235e776801362c5b5c3cdf2d212267aca13543fe1717ace9c815141b7b143e0785335b4f16bf6f594eb826fb9361d929c3ae154f5a97960c40f6f5c00"/172], 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 5.710175435s ago: executing program 0 (id=801): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 5.388349676s ago: executing program 4 (id=802): openat$dir(0xffffffffffffff9c, 0x0, 0x400000, 0x120) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r0, 0x1, 0x70bd26, 0x4000, {0x49}}, 0x14}, 0x1, 0x0, 0x0, 0x25}, 0x24004000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f00000000c0)=0xfffffff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x141242, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) listen(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6}, 0x20) ioctl$SIOCRSACCEPT(r3, 0x89e3) 4.660601331s ago: executing program 4 (id=803): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) keyctl$clear(0x7, r4) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00']) close(r0) 4.619421605s ago: executing program 0 (id=804): socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/80, 0x50}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa, &(0x7f0000000100)=ANY=[]) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, r6, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x20000000) 4.399335464s ago: executing program 3 (id=805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002100), 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000002140)={0x0, 0x0, 0x87}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001580)={0x0, 0x8, 0x6, "401e18a4986a"}, 0xe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1, 0x4, 0xc}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r4, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.859503121s ago: executing program 3 (id=806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x18, 0xb}, {0x63b87eeac55cedc6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x80000000, 0x1, 0x406, 0x4, 0xffffffff, 0xb}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x4, 0x2, 0x8, 0x10001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x9, 0x9, 0x1, 0x75f}}]}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) 3.608196891s ago: executing program 0 (id=807): unshare(0x62040200) (async) unshare(0x62040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/139, 0x8b}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000361000/0x4000)=nil, 0x4000, 0x1000007) (async) mprotect(&(0x7f0000361000/0x4000)=nil, 0x4000, 0x1000007) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r2 = syz_open_pts(r0, 0x42) r3 = dup3(r2, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x8000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) (async) r4 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.721445645s ago: executing program 1 (id=808): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000c74b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x24}, 0x94) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r1, 0x0, 0x0, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4010) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 2.679646366s ago: executing program 3 (id=809): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000001c0)=0x9) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40884}, 0x4004890) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000280)={0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) socket$key(0xf, 0x3, 0x2) 1.863766299s ago: executing program 1 (id=810): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.725912131s ago: executing program 1 (id=811): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x5, 0x7fff0002}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x6e) sendto$inet6(r1, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x24, 0x2) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 753.360792ms ago: executing program 4 (id=812): syz_open_dev$video(&(0x7f0000000000), 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x4, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000c40)='.dead\x00', 0x0, &(0x7f0000000280)='[,\v]@+\x00', r4) add_key(&(0x7f0000000f80)='encrypted\x00', &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="500635addcfb160cde6ac823e3009381e0002010b205006b2ffbb60100000000620a89de3db7fcad19bb40cf54cd8c0c4ab0735b50d02537b01cc705192ae5b8db77202ef3cb7bc45a4e36d5fbd4f0390e110a019a332a276e75281022b509a29755e7c03fe09736a2edf8393dda189cb93668a83c8d2b11bf19d1e452c7010e50279f04d590aa25594b830b352407435c382cacbb126a69771cd01fa0b1650536a394a998091aab72ae6499eba75e17da21cfe61300379a831e280c9ee08e0723e644d555ac2ea277c88a21c01beb834d3660b3b602e6c58cde8cc3e4", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x6000050) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000002060108000008000000000000000000"], 0x14}}, 0x20000084) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000000b06030000000000000000000100000100010000070000000900020073797a3100000000080009400000000071ca96dd631a9dc184c11b3cc555d1cef4558e60af7106609dff39faedc3c32cf6f6f6c344f99e137a661c667a59d66f1e1e46d9f9ea8235e776801362c5b5c3cdf2d212267aca13543fe1717ace9c815141b7b143e0785335b4f16bf6f594eb826fb9361d929c3ae154f5a97960c40f6f5c00"/172], 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 615.057745ms ago: executing program 1 (id=813): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}, 0x400c040) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xe31, 0xa9, 0x0, 0x9}]}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000000c0)=0x2, 0x4) 614.013378ms ago: executing program 2 (id=814): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xf86]}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000000000000000000b0000008500000087000000850000005000000095"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x2400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x200000) tkill(r2, 0x12) ptrace(0x4208, r2) r3 = getpgid(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/netlink\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="141f93480002090102000000000000000002000003"], 0x14}, 0x1, 0x0, 0x0, 0x2004c080}, 0x408c0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000300)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x65, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x100, 0x4, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x4, 0x0, 0x10001, 0xe, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x6, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@my=0x0, 0x9}, @hyper, 0xa, 0x362, 0x75d, 0x5, 0x0, 0xb6f, 0x8}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'veth0_macvtap\x00', {0x2, 0x0, @remote}}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xb) close_range(r5, 0xffffffffffffffff, 0x0) ptrace(0x4207, r2) 149.756571ms ago: executing program 3 (id=815): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001080), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x14) (async) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x4c) 100.612044ms ago: executing program 4 (id=816): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="a82dc2f552b33ae92c389abb7debf9940deed4510c9bb515483734da82", 0x1d) 989.205µs ago: executing program 0 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) sched_setaffinity(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, &(0x7f00000000c0)) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @nested={0x4, 0x7}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x201) ioctl$VIDIOC_SUBDEV_S_CROP(r9, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x4, 0x4, 0xfff, 0x7}}) 679.508µs ago: executing program 4 (id=818): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, 0x0) 403.701µs ago: executing program 3 (id=819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x214241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x324) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="54cb6d9f91777d3f65801b69866a540ec2d0fbf2ec9058566e66ee866f7f75d19631bfc063af2db735639e94df3877ddd57ece6ffdfc50f3e30cd8906c90af45435ee9e0cf126a4f7c79b467e433f7cc916eec9539c44517de3303af6c89684df7d91a8aac40a992145c25424b5f35b544ea08d78e36819e0bea27729a4a96103ffbc65748eb76af66d273a788c4a3f97243b0fdeba0a9eed4917df65d85ffde7914e330f731900e2ec0b60d70cc3b3c6a15f0c5aa52cfa5260b4274e23fe6989e", @ANYRES64, @ANYRES16=r3, @ANYRESHEX, @ANYRES32=r1, @ANYRESOCT], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x7ffb, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="200029bd5400ffdbdf250500000008f60b00010000be"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40) r5 = dup3(r4, r3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, r5}, 0xb9) r6 = syz_io_uring_setup(0x44ed, &(0x7f00000004c0)={0x0, 0x4a64, 0x0, 0x80, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0xc012, r9, 0x2000) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000180)={{0x6, @rose, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default]}, 0x48) sendto$netrom(r10, 0x0, 0x0, 0x4004, &(0x7f00000005c0)={{0x6, @rose, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 0s ago: executing program 2 (id=820): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x4044805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) socket$inet(0x2, 0x1, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x5, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f000001a440)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) kernel console output (not intermixed with test programs): adm_t tclass=binder permissive=1 [ 167.079785][ T30] audit: type=1400 audit(1771132766.982:417): avc: denied { map } for pid=7241 comm="syz.0.355" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.107920][ T30] audit: type=1400 audit(1771132766.982:418): avc: denied { call } for pid=7241 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 167.153498][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 167.287199][ T24] usb 5-1: USB disconnect, device number 18 [ 167.689451][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 167.753406][ T9] usb 4-1: USB disconnect, device number 20 [ 167.763005][ T9] usblp0: removed [ 167.791964][ T7255] overlayfs: upper fs does not support tmpfile. [ 167.850220][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 167.978546][ T30] audit: type=1400 audit(1771132767.882:419): avc: denied { write } for pid=7258 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.983592][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 168.028361][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.049205][ T24] usb 5-1: Product: syz [ 168.066641][ T24] usb 5-1: Manufacturer: syz [ 168.076032][ T24] usb 5-1: SerialNumber: syz [ 168.110460][ T24] usb 5-1: config 0 descriptor?? [ 168.122550][ T24] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 168.289295][ T5871] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 168.487891][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 168.577506][ T7263] overlayfs: upper fs does not support tmpfile. [ 168.587040][ T5871] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 168.607398][ T5871] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 168.658899][ T5871] usb 1-1: config 3 has no interface number 0 [ 168.668434][ T5871] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.700151][ T5871] usb 1-1: config 3 interface 45 has no altsetting 0 [ 168.733338][ T5871] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 168.743032][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.949970][ T5871] usb 1-1: Product: syz [ 168.976459][ T5871] usb 1-1: Manufacturer: syz [ 169.002152][ T5871] usb 1-1: SerialNumber: syz [ 169.354214][ T7276] pim6reg: entered allmulticast mode [ 169.369628][ T24] gspca_vc032x: reg_w err -71 [ 169.374379][ T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 169.378866][ T5871] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.443769][ T5871] usb 1-1: USB disconnect, device number 18 [ 169.641482][ T24] usb 5-1: USB disconnect, device number 19 [ 169.652775][ T7278] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 169.660331][ T7278] ALSA: mixer_oss: invalid index 1374389 [ 169.871109][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 169.934425][ T7264] udevd[7264]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.988599][ T7271] pim6reg: left allmulticast mode [ 170.111958][ T5820] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 170.629840][ T30] audit: type=1400 audit(1771132770.564:420): avc: denied { mount } for pid=7298 comm="syz.1.370" name="/" dev="configfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 170.738599][ T30] audit: type=1400 audit(1771132770.564:421): avc: denied { search } for pid=7298 comm="syz.1.370" name="/" dev="configfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.761177][ T30] audit: type=1400 audit(1771132770.564:422): avc: denied { search } for pid=7298 comm="syz.1.370" name="/" dev="configfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.287759][ T30] audit: type=1400 audit(1771132770.564:423): avc: denied { read open } for pid=7298 comm="syz.1.370" path="/77/file0" dev="configfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.488320][ T30] audit: type=1400 audit(1771132771.424:424): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 171.641718][ T7310] ======================================================= [ 171.641718][ T7310] WARNING: The mand mount option has been deprecated and [ 171.641718][ T7310] and is ignored by this kernel. Remove the mand [ 171.641718][ T7310] option from the mount to silence this warning. [ 171.641718][ T7310] ======================================================= [ 171.814171][ T7310] binder: Unknown parameter 'stat' [ 171.826380][ T7306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.894972][ T7308] Invalid logical block size (536870912) [ 172.191793][ T5820] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 172.601696][ T7326] process 'syz.0.376' launched './file0' with NULL argv: empty string added [ 172.707812][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 172.707826][ T30] audit: type=1400 audit(1771132772.635:427): avc: denied { execute_no_trans } for pid=7325 comm="syz.0.376" path="/80/file0" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.855422][ T30] audit: type=1400 audit(1771132772.675:428): avc: denied { remount } for pid=7325 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.910274][ T7334] fuse: Bad value for 'group_id' [ 172.916446][ T7334] fuse: Bad value for 'group_id' [ 172.936770][ T5884] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 173.141310][ T7338] new mount options do not match the existing superblock, will be ignored [ 173.223518][ T30] audit: type=1800 audit(1771132773.085:429): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.379" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 173.346911][ T5871] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 173.423453][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 173.446755][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 173.460136][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 173.472561][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 173.487449][ T5884] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 173.498419][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.506954][ T5884] usb 5-1: Product: syz [ 173.511612][ T5884] usb 5-1: Manufacturer: syz [ 173.516439][ T5884] usb 5-1: SerialNumber: syz [ 173.529586][ T5884] usb 5-1: config 0 descriptor?? [ 173.553537][ T5884] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 173.562892][ T5884] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 173.570191][ T5871] usb 2-1: device descriptor read/64, error -71 [ 173.586383][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 173.609490][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 173.627143][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.644443][ T24] usb 1-1: Product: syz [ 173.651156][ T24] usb 1-1: Manufacturer: syz [ 173.660574][ T24] usb 1-1: SerialNumber: syz [ 173.677313][ T24] usb 1-1: config 0 descriptor?? [ 173.686507][ T24] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 173.848924][ T7342] capability: warning: `syz.2.382' uses 32-bit capabilities (legacy support in use) [ 173.861585][ T7342] program syz.2.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.870995][ T5871] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 173.927686][ T5813] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 174.006220][ T5871] usb 2-1: device descriptor read/64, error -71 [ 174.108104][ T5813] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 174.116672][ T5813] usb 4-1: config 0 has no interface number 1 [ 174.119727][ T5871] usb usb2-port1: attempt power cycle [ 174.123693][ T5813] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 174.138743][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.151601][ T5884] em28xx 5-1:0.0: unknown em28xx chip ID (153) [ 174.159184][ T5813] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 174.168757][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.177010][ T5813] usb 4-1: SerialNumber: syz [ 174.184680][ T5813] usb 4-1: config 0 descriptor?? [ 174.197173][ T5813] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 174.205149][ T5813] uvcvideo 4-1:0.199: No valid video chain found. [ 174.353326][ T5884] em28xx 5-1:0.0: Config register raw data: 0x21 [ 174.359754][ T5884] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 174.366500][ T5884] em28xx 5-1:0.0: No AC97 audio processor [ 174.475964][ T5871] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 174.496374][ T5871] usb 2-1: device descriptor read/8, error -71 [ 174.565030][ T1222] usb 4-1: USB disconnect, device number 21 [ 174.571017][ T5884] usb 5-1: USB disconnect, device number 20 [ 174.737776][ T5871] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 174.763599][ T5871] usb 2-1: device descriptor read/8, error -71 [ 174.780508][ T7347] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.793153][ T7347] netlink: 'syz.2.383': attribute type 12 has an invalid length. [ 174.801221][ T7347] netlink: 'syz.2.383': attribute type 29 has an invalid length. [ 174.809294][ T7347] netlink: 148 bytes leftover after parsing attributes in process `syz.2.383'. [ 174.863138][ T7349] nbd: must specify at least one socket [ 174.876783][ T5871] usb usb2-port1: unable to enumerate USB device [ 174.889782][ T24] gspca_vc032x: reg_w err -71 [ 174.894561][ T24] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 174.927535][ T24] usb 1-1: USB disconnect, device number 19 [ 175.315551][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 175.475101][ T30] audit: type=1400 audit(1771132775.396:430): avc: denied { setopt } for pid=7357 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.570963][ T24] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 175.628937][ T7362] CUSE: info not properly terminated [ 175.648127][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 175.661764][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 175.675342][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 175.691053][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 175.758388][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 175.821389][ T24] usb 3-1: Product: syz [ 175.845296][ T24] usb 3-1: Manufacturer: syz [ 175.850038][ T24] usb 3-1: SerialNumber: syz [ 175.873956][ T24] usb 3-1: config 0 descriptor?? [ 175.879975][ T7356] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.893531][ T24] usb 3-1: selecting invalid altsetting 0 [ 176.024183][ T1222] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 176.121209][ T30] audit: type=1400 audit(1771132776.046:431): avc: denied { setopt } for pid=7354 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.185113][ T1222] usb 4-1: Using ep0 maxpacket: 16 [ 176.196390][ T1222] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 176.235453][ T1222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 176.257320][ T1222] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 176.295064][ T1222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.318059][ T5871] usb 3-1: USB disconnect, device number 11 [ 176.371470][ T1222] usb 4-1: Product: syz [ 176.419815][ T1222] usb 4-1: Manufacturer: syz [ 176.613789][ T1222] usb 4-1: SerialNumber: syz [ 176.722731][ T1222] usb 4-1: config 0 descriptor?? [ 176.855159][ T1222] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 176.921452][ T1222] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 177.967824][ T1222] em28xx 4-1:0.0: chip ID is em2870 [ 178.058624][ T7391] nbd: must specify at least one socket [ 178.225059][ T30] audit: type=1400 audit(1771132778.147:432): avc: denied { read } for pid=7359 comm="syz.3.389" path="socket:[15830]" dev="sockfs" ino=15830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 178.325057][ T5813] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 178.483876][ T7402] netlink: 'syz.1.400': attribute type 23 has an invalid length. [ 178.828155][ T5813] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 178.838897][ T5813] usb 3-1: config 0 has no interface number 1 [ 178.849260][ T5813] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 178.871880][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.888111][ T5813] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 178.899289][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.907794][ T5813] usb 3-1: SerialNumber: syz [ 179.195296][ T30] audit: type=1400 audit(1771132778.927:433): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.64 dest=36118 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 179.307951][ T1222] usb 4-1: USB disconnect, device number 22 [ 179.314440][ T1222] em28xx 4-1:0.0: Disconnecting em28xx [ 179.322093][ T1222] em28xx 4-1:0.0: Freeing device [ 179.350255][ T5813] usb 3-1: config 0 descriptor?? [ 179.377070][ T5813] uvcvideo 3-1:0.199: Found UVC 0.00 device (0002:0000) [ 179.403032][ T5813] uvcvideo 3-1:0.199: No valid video chain found. [ 179.705154][ T29] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 179.783666][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 179.868181][ T29] usb 2-1: device descriptor read/64, error -71 [ 179.926965][ T5813] usb 3-1: USB disconnect, device number 12 [ 180.131372][ T29] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 180.420365][ T29] usb 2-1: device descriptor read/64, error -71 [ 180.850466][ T29] usb usb2-port1: attempt power cycle [ 180.858796][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 180.864859][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 180.870924][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 180.877011][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 180.956822][ T5819] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 181.063613][ T5143] block nbd3: Possible stuck request ffff888028250000: control (read@0,1024B). Runtime 90 seconds [ 181.083720][ T5143] block nbd3: Possible stuck request ffff888028250200: control (read@1024,1024B). Runtime 90 seconds [ 181.095654][ T5143] block nbd3: Possible stuck request ffff888028250400: control (read@2048,1024B). Runtime 90 seconds [ 181.107222][ T7426] cgroup: Unknown subsys name 'cpuset' [ 181.122949][ T5143] block nbd3: Possible stuck request ffff888028250600: control (read@3072,1024B). Runtime 90 seconds [ 181.195051][ T29] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 181.226034][ T29] usb 2-1: device descriptor read/8, error -71 [ 181.516265][ T7434] syzkaller0: entered promiscuous mode [ 181.555107][ T29] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 181.595776][ T29] usb 2-1: device descriptor read/8, error -71 [ 181.599693][ T7434] syzkaller0: entered allmulticast mode [ 182.642638][ T29] usb usb2-port1: unable to enumerate USB device [ 183.636600][ T30] audit: type=1400 audit(1771132783.497:434): avc: denied { egress } for pid=0 comm="swapper/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 183.729784][ T30] audit: type=1400 audit(1771132783.497:435): avc: denied { sendto } for pid=0 comm="swapper/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 184.793544][ T5129] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 184.793744][ T30] audit: type=1400 audit(1771132784.717:436): avc: denied { connect } for pid=7455 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.979813][ T30] audit: type=1400 audit(1771132784.907:437): avc: denied { mount } for pid=7446 comm="syz.0.409" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 185.025139][ T5884] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 185.047686][ T7458] NFSD: Failed to start, no listeners configured. [ 185.278976][ T5884] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 185.791766][ T30] audit: type=1400 audit(1771132785.217:438): avc: denied { ioctl } for pid=7446 comm="syz.0.409" path="socket:[16784]" dev="sockfs" ino=16784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.872184][ T30] audit: type=1400 audit(1771132785.217:439): avc: denied { bind } for pid=7446 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.903234][ T5884] usb 2-1: config 0 has no interface number 1 [ 185.931319][ T5884] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 185.960977][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.046324][ T5884] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 186.065070][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.073079][ T5884] usb 2-1: SerialNumber: syz [ 186.118385][ T7478] netlink: 204 bytes leftover after parsing attributes in process `syz.2.418'. [ 186.128149][ T5884] usb 2-1: config 0 descriptor?? [ 186.144043][ T5884] uvcvideo 2-1:0.199: Found UVC 0.00 device (0002:0000) [ 186.162649][ T5884] uvcvideo 2-1:0.199: No valid video chain found. [ 186.315107][ T7482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.391728][ T30] audit: type=1400 audit(1771132786.317:440): avc: denied { read } for pid=7481 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.546596][ T5871] usb 2-1: USB disconnect, device number 19 [ 187.051591][ T30] audit: type=1400 audit(1771132786.967:441): avc: denied { shutdown } for pid=7481 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.078987][ T7495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.421'. [ 187.307792][ T7495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.421'. [ 187.385676][ T7482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.549929][ T7482] bond0: entered promiscuous mode [ 188.601628][ T7497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.827724][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.845125][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.945848][ T7482] bond_slave_0: entered promiscuous mode [ 188.991456][ T30] audit: type=1400 audit(1771132788.907:442): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 189.067514][ T7482] bond_slave_1: entered promiscuous mode [ 189.211861][ T7510] nbd: nbd0 already in use [ 189.237494][ T7510] block nbd0: NBD_DISCONNECT [ 189.303265][ T7510] block nbd0: Send disconnect failed -32 [ 189.333436][ T7510] block nbd0: shutting down sockets [ 189.379592][ T7512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.465127][ C0] blk_print_req_error: 138 callbacks suppressed [ 189.465147][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.480919][ C0] buffer_io_error: 138 callbacks suppressed [ 189.480932][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 189.499549][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.509062][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 189.516814][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.526288][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 189.534025][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.543505][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 189.551680][ T6105] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.561165][ T6105] Buffer I/O error on dev nbd0, logical block 0, async page read [ 189.615251][ T6105] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.624745][ T6105] Buffer I/O error on dev nbd0, logical block 1, async page read [ 189.675076][ T6105] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.731349][ T6105] Buffer I/O error on dev nbd0, logical block 2, async page read [ 189.761558][ T6105] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.781447][ T30] audit: type=1400 audit(1771132789.707:443): avc: denied { create } for pid=7515 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 189.812383][ T6105] Buffer I/O error on dev nbd0, logical block 3, async page read [ 189.838918][ T6105] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.982670][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 190.015722][ T30] audit: type=1400 audit(1771132789.847:444): avc: denied { create } for pid=7516 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 190.016066][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 190.054306][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 190.067234][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 190.079095][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 190.177237][ T6105] Buffer I/O error on dev nbd0, logical block 0, async page read [ 190.216251][ T6105] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 190.352105][ T30] audit: type=1400 audit(1771132789.977:445): avc: denied { write } for pid=7515 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 190.395144][ T30] audit: type=1400 audit(1771132789.997:446): avc: denied { getopt } for pid=7515 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.449136][ T6105] Buffer I/O error on dev nbd0, logical block 1, async page read [ 190.647057][ T6105] ldm_validate_partition_table(): Disk read failed. [ 190.684832][ T6105] Dev nbd0: unable to read RDB block 0 [ 190.722211][ T6105] nbd0: unable to read partition table [ 190.883810][ T6105] ldm_validate_partition_table(): Disk read failed. [ 190.895313][ T6105] Dev nbd0: unable to read RDB block 0 [ 190.911482][ T6105] nbd0: unable to read partition table [ 190.974414][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 191.038817][ T30] audit: type=1400 audit(1771132790.947:447): avc: denied { getopt } for pid=7530 comm="syz.2.425" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.148400][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 191.158499][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 191.168630][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 191.285121][ T5884] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 192.600775][ T30] audit: type=1400 audit(1771132790.987:448): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 192.648847][ T5884] usb 3-1: config 2 has an invalid descriptor of length 38, skipping remainder of the config [ 192.689916][ T5884] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.759882][ T30] audit: type=1804 audit(1771132792.687:449): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.437" name="/newroot/79/file1" dev="fuse" ino=1 res=1 errno=0 [ 192.791449][ T5884] usb 3-1: config 2 interface 0 has no altsetting 0 [ 192.836437][ T5884] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 192.862925][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.890957][ T5884] usb 3-1: Product: syz [ 192.915058][ T5884] usb 3-1: Manufacturer: syz [ 192.919963][ T5884] usb 3-1: SerialNumber: syz [ 193.279879][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 193.300405][ T7553] loop5: detected capacity change from 0 to 7 [ 193.561129][ T7564] openvswitch: netlink: IP tunnel dst address not specified [ 193.645974][ T6105] Dev loop5: unable to read RDB block 7 [ 193.702205][ T5884] usb 3-1: USB disconnect, device number 13 [ 193.709003][ T6105] loop5: AHDI p1 p2 p3 [ 193.731936][ T6105] loop5: partition table partially beyond EOD, truncated [ 193.800304][ T6105] loop5: p1 start 1601398130 is beyond EOD, truncated [ 193.832610][ T6105] loop5: p2 start 1702059890 is beyond EOD, truncated [ 193.851434][ T7553] Dev loop5: unable to read RDB block 7 [ 193.858549][ T7553] loop5: AHDI p1 p2 p3 [ 193.868969][ T7553] loop5: partition table partially beyond EOD, truncated [ 193.877883][ T7553] loop5: p1 start 1601398130 is beyond EOD, truncated [ 193.884785][ T7553] loop5: p2 start 1702059890 is beyond EOD, truncated [ 194.590022][ T30] audit: type=1400 audit(1771132794.517:450): avc: denied { setopt } for pid=7576 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 194.662248][ T5129] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 194.906019][ T7595] nbd0: detected capacity change from 0 to 63 [ 194.944357][ T7598] block nbd0: NBD_DISCONNECT [ 194.994230][ T7598] block nbd0: Disconnected due to user request. [ 195.021845][ T7598] block nbd0: shutting down sockets [ 195.077344][ C1] blk_print_req_error: 138 callbacks suppressed [ 195.077364][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.093152][ C1] buffer_io_error: 138 callbacks suppressed [ 195.093164][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 195.106788][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.116236][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 195.123952][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.133397][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 195.141134][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.150580][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 195.196381][ T6290] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.241123][ T6290] Buffer I/O error on dev nbd0, logical block 0, async page read [ 195.285076][ T6290] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.294561][ T6290] Buffer I/O error on dev nbd0, logical block 1, async page read [ 195.313252][ T6290] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.343974][ T6290] Buffer I/O error on dev nbd0, logical block 2, async page read [ 195.355038][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 195.372855][ T6290] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.393176][ T6290] Buffer I/O error on dev nbd0, logical block 3, async page read [ 195.413446][ T6290] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.438089][ T6290] Buffer I/O error on dev nbd0, logical block 0, async page read [ 195.455380][ T6290] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.466902][ T6290] Buffer I/O error on dev nbd0, logical block 1, async page read [ 195.485328][ T6290] ldm_validate_partition_table(): Disk read failed. [ 195.492181][ T6290] Dev nbd0: unable to read RDB block 0 [ 195.525155][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 195.537135][ T24] usb 3-1: config 162 has an invalid interface number: 159 but max is 1 [ 195.551402][ T6290] nbd0: unable to read partition table [ 195.551433][ T24] usb 3-1: config 162 has an invalid interface number: 210 but max is 1 [ 195.565502][ T5857] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 195.594067][ T6290] ldm_validate_partition_table(): Disk read failed. [ 195.608799][ T24] usb 3-1: config 162 has no interface number 0 [ 195.630413][ T6290] Dev nbd0: unable to read RDB block 0 [ 195.636102][ T24] usb 3-1: config 162 has no interface number 1 [ 195.642862][ T6290] nbd0: unable to read partition table [ 195.650401][ T24] usb 3-1: config 162 interface 159 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.685625][ T24] usb 3-1: config 162 interface 210 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 195.713724][ T24] usb 3-1: config 162 interface 210 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 195.746386][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.760907][ T5857] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 195.771463][ T24] usb 3-1: config 162 interface 210 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 195.786650][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.794823][ T24] usb 3-1: config 162 interface 210 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 195.819777][ T5857] usb 1-1: config 0 descriptor?? [ 195.831622][ T24] usb 3-1: config 162 interface 210 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.845266][ T24] usb 3-1: config 162 interface 159 has no altsetting 0 [ 195.872348][ T24] usb 3-1: config 162 interface 210 has no altsetting 0 [ 195.882565][ T24] usb 3-1: New USB device found, idVendor=11f5, idProduct=0005, bcdDevice=35.9c [ 195.891991][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.900462][ T24] usb 3-1: Product: syz [ 195.905510][ T24] usb 3-1: Manufacturer: syz [ 195.910171][ T24] usb 3-1: SerialNumber: syz [ 195.975037][ T5871] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 196.136490][ T5871] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.161968][ T5871] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.192023][ T5871] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.209199][ T5871] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 196.230685][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.252792][ T5871] usb 2-1: config 0 descriptor?? [ 196.377967][ T5857] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 196.401551][ T5857] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input19 [ 196.490899][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.500515][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.900235][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.917485][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.988728][ T5857] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 197.360382][ T5871] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 197.377412][ T5871] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 197.393883][ T9] usb 1-1: USB disconnect, device number 20 [ 197.405804][ T5871] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 197.431723][ T5871] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 197.455540][ T5871] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 197.491126][ T5871] lenovo 0003:17EF:60EE.000B: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 197.599885][ T7618] tipc: Started in network mode [ 197.616513][ T7618] tipc: Node identity ac14140f, cluster identity 4711 [ 197.637428][ T5871] lenovo 0003:17EF:60EE.000B: Failed to switch middle button: -71 [ 197.638758][ T7618] tipc: New replicast peer: 255.255.255.255 [ 197.647841][ T5871] lenovo 0003:17EF:60EE.000B: Fn-lock setting failed: -71 [ 197.670039][ T5871] lenovo 0003:17EF:60EE.000B: Sensitivity setting failed: -71 [ 197.680094][ T7618] tipc: Enabled bearer , priority 10 [ 197.686759][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.449'. [ 197.699802][ T7619] tipc: Disabling bearer [ 197.722983][ T5871] usb 2-1: USB disconnect, device number 20 [ 197.916636][ T7621] block nbd4: NBD_DISCONNECT [ 198.096435][ T24] pl2303 3-1:162.159: required endpoints missing [ 198.133277][ T5129] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 198.257267][ T24] pl2303 3-1:162.210: required interrupt-in endpoint missing [ 198.302465][ T24] usb 3-1: USB disconnect, device number 14 [ 198.489320][ T7636] openvswitch: netlink: IP tunnel dst address not specified [ 198.924749][ T7642] netlink: 344 bytes leftover after parsing attributes in process `syz.2.456'. [ 199.325445][ T5922] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 199.545166][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 200.057804][ T5922] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 200.195292][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.217031][ T5922] usb 5-1: Product: syz [ 200.221209][ T5922] usb 5-1: Manufacturer: syz [ 200.255199][ T5922] usb 5-1: SerialNumber: syz [ 200.277429][ T5922] usb 5-1: config 0 descriptor?? [ 200.317299][ T5922] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 201.456650][ T7659] input: syz0 as /devices/virtual/input/input20 [ 201.499735][ T7659] dummy0: entered allmulticast mode [ 201.665381][ T5922] gspca_vc032x: reg_w err -71 [ 201.670200][ T5922] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 201.689556][ T5922] usb 5-1: USB disconnect, device number 21 [ 201.797607][ T30] audit: type=1400 audit(1771132801.727:451): avc: denied { write } for pid=7660 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.115568][ T7675] random: crng reseeded on system resumption [ 202.223980][ T30] audit: type=1400 audit(1771132802.147:452): avc: denied { bind } for pid=7678 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 202.252261][ T7658] dummy0: left allmulticast mode [ 202.475804][ T7683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.495268][ T30] audit: type=1400 audit(1771132802.177:453): avc: denied { write } for pid=7678 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.586817][ T1222] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 202.760846][ T1222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.770996][ T1222] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.791014][ T1222] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.815049][ T5871] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 202.832390][ T1222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 202.842135][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.852908][ T1222] usb 2-1: Product: syz [ 202.860630][ T1222] usb 2-1: Manufacturer: syz [ 202.872294][ T1222] usb 2-1: SerialNumber: syz [ 202.889892][ T1222] hub 2-1:1.0: bad descriptor, ignoring hub [ 202.902277][ T1222] hub 2-1:1.0: probe with driver hub failed with error -5 [ 203.048177][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.061827][ T5871] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.074847][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.092005][ T1222] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 203.104580][ T5871] usb 4-1: config 0 descriptor?? [ 203.309563][ T30] audit: type=1400 audit(1771132803.217:454): avc: denied { read write } for pid=7678 comm="syz.1.467" name="lp0" dev="devtmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 203.385120][ T30] audit: type=1400 audit(1771132803.217:455): avc: denied { open } for pid=7678 comm="syz.1.467" path="/dev/usb/lp0" dev="devtmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 203.433863][ T7679] comedi comedi1: Minor 3 could not be opened [ 203.453780][ T30] audit: type=1400 audit(1771132803.347:456): avc: denied { read write } for pid=7678 comm="syz.1.467" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.493137][ T5857] usb 2-1: USB disconnect, device number 21 [ 203.512079][ T30] audit: type=1400 audit(1771132803.357:457): avc: denied { open } for pid=7678 comm="syz.1.467" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.559667][ T5857] usblp0: removed [ 203.591799][ T30] audit: type=1400 audit(1771132803.357:458): avc: denied { read write } for pid=7678 comm="syz.1.467" dev="sockfs" ino=16372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.616258][ T5871] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 203.644935][ T5871] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input21 [ 203.876491][ T5871] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 204.199497][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.246408][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.529190][ T7700] nbd2: detected capacity change from 0 to 63 [ 204.571894][ T5129] block nbd2: Receive control failed (result -32) [ 204.574376][ T6290] block nbd2: Send control failed (result -32) [ 204.659041][ T6290] block nbd2: Request send failed, requeueing [ 204.703851][ T5143] block nbd2: Dead connection, failed to find a fallback [ 204.711914][ T5871] usb 4-1: USB disconnect, device number 23 [ 204.712133][ T5143] block nbd2: shutting down sockets [ 204.731387][ T5143] blk_print_req_error: 138 callbacks suppressed [ 204.731402][ T5143] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.750037][ T5143] buffer_io_error: 138 callbacks suppressed [ 204.750049][ T5143] Buffer I/O error on dev nbd2, logical block 0, async page read [ 204.763762][ T6290] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.778292][ T6290] Buffer I/O error on dev nbd2, logical block 1, async page read [ 204.787224][ T6290] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.798629][ T6290] Buffer I/O error on dev nbd2, logical block 2, async page read [ 204.807389][ T6290] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.822236][ T6290] Buffer I/O error on dev nbd2, logical block 3, async page read [ 204.830151][ T6290] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.839714][ T6290] Buffer I/O error on dev nbd2, logical block 0, async page read [ 204.847759][ T6290] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.857776][ T6290] Buffer I/O error on dev nbd2, logical block 1, async page read [ 204.871190][ T6290] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.880735][ T6290] Buffer I/O error on dev nbd2, logical block 2, async page read [ 204.891422][ T6290] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.900992][ T6290] Buffer I/O error on dev nbd2, logical block 3, async page read [ 204.909009][ T6290] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.915040][ T5922] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 204.924197][ T6290] Buffer I/O error on dev nbd2, logical block 0, async page read [ 204.945127][ T7713] overlayfs: workdir and upperdir must be separate subtrees [ 204.952636][ T6290] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.965052][ T6290] Buffer I/O error on dev nbd2, logical block 1, async page read [ 204.991725][ T6290] ldm_validate_partition_table(): Disk read failed. [ 205.005759][ T6290] Dev nbd2: unable to read RDB block 0 [ 205.020980][ T6290] nbd2: unable to read partition table [ 205.039933][ T6290] ldm_validate_partition_table(): Disk read failed. [ 205.161471][ T5922] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.177205][ T5922] usb 3-1: config 0 has no interface number 0 [ 205.180627][ T6290] Dev nbd2: unable to read RDB block 0 [ 205.379424][ T5922] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 205.395060][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.395148][ T6290] nbd2: unable to read partition table [ 205.433471][ T5922] usb 3-1: Product: syz [ 205.450366][ T5922] usb 3-1: Manufacturer: syz [ 205.491000][ T5922] usb 3-1: SerialNumber: syz [ 205.512493][ T5922] usb 3-1: config 0 descriptor?? [ 205.535129][ T1222] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 205.736935][ T5922] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 205.746234][ T1222] usb 1-1: Using ep0 maxpacket: 8 [ 205.756101][ T1222] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 205.766394][ T1222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.774388][ T1222] usb 1-1: Product: syz [ 205.795260][ T5922] usb 3-1: USB disconnect, device number 15 [ 205.941421][ T1222] usb 1-1: Manufacturer: syz [ 205.946735][ T1222] usb 1-1: SerialNumber: syz [ 205.956607][ T1222] usb 1-1: config 0 descriptor?? [ 205.991437][ T1222] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 206.686819][ T1222] gspca_vc032x: reg_r err -32 [ 206.691545][ T1222] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 206.735118][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 207.228476][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 207.247620][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 207.259461][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.302478][ T9] usb 2-1: config 0 descriptor?? [ 207.320006][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 207.327623][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 207.492298][ T7749] nbd: nbd3 already in use [ 207.579383][ T7755] xt_hashlimit: size too large, truncated to 1048576 [ 207.603170][ T7733] vlan3: entered promiscuous mode [ 207.609085][ T7733] bridge0: entered promiscuous mode [ 207.622678][ T7733] bridge0: port 3(hsr0) entered blocking state [ 207.625203][ T5857] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 207.629027][ T7733] bridge0: port 3(hsr0) entered disabled state [ 207.643059][ T7733] hsr0: entered allmulticast mode [ 207.652415][ T7733] hsr_slave_0: entered allmulticast mode [ 207.662490][ T7757] (syz.3.489,7757,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 207.672365][ T7733] hsr_slave_1: entered allmulticast mode [ 207.679593][ T7733] hsr0: entered promiscuous mode [ 207.684856][ T7757] (syz.3.489,7757,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 207.693046][ T7733] bridge0: port 3(hsr0) entered blocking state [ 207.699310][ T7733] bridge0: port 3(hsr0) entered forwarding state [ 207.725789][ T24] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 207.769702][ T7759] netlink: 'syz.3.490': attribute type 39 has an invalid length. [ 207.806971][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.819224][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.829950][ T5857] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 207.839409][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.857731][ T5857] usb 5-1: config 0 descriptor?? [ 207.887340][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 207.899064][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.911453][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 207.921233][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.929394][ T24] usb 3-1: Product: syz [ 207.934845][ T24] usb 3-1: Manufacturer: syz [ 207.939969][ T24] usb 3-1: SerialNumber: syz [ 207.956552][ T24] usb 3-1: config 0 descriptor?? [ 207.965722][ T7751] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 207.974274][ T24] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 208.334157][ T5857] isku 0003:1E7D:319C.000D: item fetching failed at offset 6/7 [ 208.345653][ T5857] isku 0003:1E7D:319C.000D: parse failed [ 208.351830][ T5857] isku 0003:1E7D:319C.000D: probe with driver isku failed with error -22 [ 209.142560][ T7763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.487'. [ 209.171410][ T9] usb 1-1: USB disconnect, device number 21 [ 209.184443][ T24] usb 5-1: USB disconnect, device number 22 [ 209.253165][ T5857] usb 2-1: USB disconnect, device number 22 [ 209.530810][ T30] audit: type=1400 audit(1771132809.457:459): avc: denied { getopt } for pid=7769 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.626530][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 209.786400][ T9] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 209.795776][ T9] usb 1-1: config 0 has no interface number 1 [ 209.802995][ T9] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 209.817295][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.833473][ T9] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 209.842902][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.852183][ T9] usb 1-1: SerialNumber: syz [ 209.878412][ T9] usb 1-1: config 0 descriptor?? [ 209.894000][ T9] uvcvideo 1-1:0.199: Found UVC 0.00 device (0002:0000) [ 209.906501][ T9] uvcvideo 1-1:0.199: No valid video chain found. [ 210.150738][ T7784] netlink: 'syz.4.495': attribute type 23 has an invalid length. [ 210.543772][ T29] usb 3-1: USB disconnect, device number 16 [ 210.722617][ T7792] nbd: nbd2 already in use [ 210.787231][ T9] usb 1-1: USB disconnect, device number 22 [ 211.524206][ T5143] block nbd3: Possible stuck request ffff888028250000: control (read@0,1024B). Runtime 120 seconds [ 211.535233][ T5143] block nbd3: Possible stuck request ffff888028250200: control (read@1024,1024B). Runtime 120 seconds [ 211.546656][ T5143] block nbd3: Possible stuck request ffff888028250400: control (read@2048,1024B). Runtime 120 seconds [ 211.557798][ T5143] block nbd3: Possible stuck request ffff888028250600: control (read@3072,1024B). Runtime 120 seconds [ 211.569652][ T7794] nbd4: detected capacity change from 0 to 63 [ 211.591599][ T6290] block nbd4: Send control failed (result -32) [ 211.594359][ T5129] block nbd4: Receive control failed (result -32) [ 211.598089][ T6290] block nbd4: Request send failed, requeueing [ 211.610803][ T6290] block nbd4: Dead connection, failed to find a fallback [ 211.627025][ T5143] blk_print_req_error: 138 callbacks suppressed [ 211.627042][ T5143] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.642890][ T5143] buffer_io_error: 138 callbacks suppressed [ 211.642908][ T5143] Buffer I/O error on dev nbd4, logical block 0, async page read [ 211.659351][ T6290] block nbd4: shutting down sockets [ 211.664562][ T6290] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.758460][ T6290] Buffer I/O error on dev nbd4, logical block 1, async page read [ 211.852211][ T6290] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.548614][ T6290] Buffer I/O error on dev nbd4, logical block 2, async page read [ 212.575104][ T6290] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.586633][ T6290] Buffer I/O error on dev nbd4, logical block 3, async page read [ 212.594432][ T6290] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.609232][ T6290] Buffer I/O error on dev nbd4, logical block 0, async page read [ 212.617082][ T6290] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.626629][ T6290] Buffer I/O error on dev nbd4, logical block 1, async page read [ 212.635550][ T6290] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.695136][ T6290] Buffer I/O error on dev nbd4, logical block 2, async page read [ 212.702974][ T6290] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.712819][ T6290] Buffer I/O error on dev nbd4, logical block 3, async page read [ 212.721534][ T6290] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 213.325536][ T6290] Buffer I/O error on dev nbd4, logical block 0, async page read [ 213.333344][ T6290] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 213.448631][ T6290] Buffer I/O error on dev nbd4, logical block 1, async page read [ 213.465556][ T6290] ldm_validate_partition_table(): Disk read failed. [ 213.472526][ T6290] Dev nbd4: unable to read RDB block 0 [ 213.554400][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 213.581693][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 213.593005][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 213.603481][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 213.862872][ T6290] nbd4: unable to read partition table [ 213.897648][ T6290] ldm_validate_partition_table(): Disk read failed. [ 213.904445][ T6290] Dev nbd4: unable to read RDB block 0 [ 213.945438][ T6290] nbd4: unable to read partition table [ 215.614896][ T7832] overlayfs: upper fs does not support tmpfile. [ 216.175143][ T7843] nbd0: detected capacity change from 0 to 63 [ 216.186396][ T5129] block nbd0: Receive control failed (result -32) [ 216.187129][ T6290] block nbd0: Send control failed (result -32) [ 216.235342][ T6290] block nbd0: Request send failed, requeueing [ 216.252853][ T2620] block nbd0: Dead connection, failed to find a fallback [ 216.259977][ T2620] block nbd0: shutting down sockets [ 216.265875][ T6290] ldm_validate_partition_table(): Disk read failed. [ 216.272670][ T6290] Dev nbd0: unable to read RDB block 0 [ 216.291606][ T6290] nbd0: unable to read partition table [ 216.312541][ T6290] ldm_validate_partition_table(): Disk read failed. [ 216.320442][ T6290] Dev nbd0: unable to read RDB block 0 [ 216.327136][ T6290] nbd0: unable to read partition table [ 216.375725][ T5857] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 216.637964][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.649440][ T5857] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.666060][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.687865][ T5857] usb 2-1: config 0 descriptor?? [ 216.887124][ T7858] input: syz0 as /devices/virtual/input/input24 [ 217.157522][ T7858] dummy0: entered allmulticast mode [ 217.196988][ T5857] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 217.211615][ T5857] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input25 [ 217.427398][ T7846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.449768][ T5857] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 217.455421][ T7846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.622345][ T30] audit: type=1400 audit(1771132817.527:460): avc: denied { connect } for pid=7863 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 217.714518][ T7857] dummy0: left allmulticast mode [ 218.075180][ T5857] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 218.138815][ T29] usb 2-1: USB disconnect, device number 23 [ 218.226576][ T5884] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 218.277336][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 218.292790][ T5857] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 218.302874][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.315065][ T1222] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 218.322821][ T5857] usb 5-1: config 0 descriptor?? [ 218.331309][ T5857] smsusb:smsusb_probe: board id=8, interface number 0 [ 218.338733][ T5857] smsusb:smsusb_probe: Device initialized with return code -19 [ 218.476441][ T5884] usb 1-1: config index 0 descriptor too short (expected 36, got 22) [ 218.484636][ T5884] usb 1-1: config 2 has an invalid descriptor of length 9, skipping remainder of the config [ 218.485336][ T1222] usb 4-1: Using ep0 maxpacket: 8 [ 218.495991][ T5884] usb 1-1: config 2 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.504023][ T1222] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 218.522641][ T1222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.531079][ T1222] usb 4-1: Product: syz [ 218.536601][ T1222] usb 4-1: Manufacturer: syz [ 218.541221][ T1222] usb 4-1: SerialNumber: syz [ 218.553551][ T7884] netlink: 'syz.2.521': attribute type 23 has an invalid length. [ 218.706633][ T1222] usb 4-1: config 0 descriptor?? [ 218.815669][ T1222] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 218.891030][ T5884] usb 1-1: config 2 interface 0 has no altsetting 0 [ 218.897737][ T5884] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 218.906803][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.366864][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.385572][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.437331][ T30] audit: type=1400 audit(1771132819.367:461): avc: denied { setopt } for pid=7872 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.490641][ T7890] nbd: nbd2 already in use [ 219.507756][ T5884] usb 1-1: string descriptor 0 read error: -71 [ 219.542884][ T5884] usbhid 1-1:2.0: couldn't find an input interrupt endpoint [ 219.560007][ T1222] gspca_vc032x: reg_r err -32 [ 219.576452][ T1222] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 219.580699][ T5884] usb 1-1: USB disconnect, device number 23 [ 219.774862][ T5129] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 220.193624][ T7904] FAULT_INJECTION: forcing a failure. [ 220.193624][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 220.215039][ T7904] CPU: 0 UID: 0 PID: 7904 Comm: syz.2.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.215068][ T7904] Tainted: [L]=SOFTLOCKUP [ 220.215074][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.215084][ T7904] Call Trace: [ 220.215090][ T7904] [ 220.215098][ T7904] dump_stack_lvl+0x100/0x190 [ 220.215131][ T7904] should_fail_ex.cold+0x5/0xa [ 220.215157][ T7904] should_failslab+0xc2/0x120 [ 220.215183][ T7904] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 220.215203][ T7904] ? skb_clone+0x190/0x400 [ 220.215228][ T7904] skb_clone+0x190/0x400 [ 220.215249][ T7904] netlink_deliver_tap+0xaed/0xcc0 [ 220.215275][ T7904] netlink_unicast+0x650/0x870 [ 220.215301][ T7904] ? __pfx_netlink_unicast+0x10/0x10 [ 220.215339][ T7904] netlink_sendmsg+0x8b0/0xda0 [ 220.215366][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.215387][ T7904] ? __might_fault+0x20/0x140 [ 220.215416][ T7904] ____sys_sendmsg+0xa54/0xc30 [ 220.215443][ T7904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.215479][ T7904] ___sys_sendmsg+0x190/0x1e0 [ 220.215506][ T7904] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.215566][ T7904] __sys_sendmsg+0x170/0x220 [ 220.215587][ T7904] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.215622][ T7904] do_syscall_64+0x106/0xf80 [ 220.215642][ T7904] ? clear_bhb_loop+0x40/0x90 [ 220.215665][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.215682][ T7904] RIP: 0033:0x7fd6ac59bf79 [ 220.215698][ T7904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.215714][ T7904] RSP: 002b:00007fd6ad492028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.215731][ T7904] RAX: ffffffffffffffda RBX: 00007fd6ac815fa0 RCX: 00007fd6ac59bf79 [ 220.215742][ T7904] RDX: 0000000020000096 RSI: 00002000000012c0 RDI: 0000000000000003 [ 220.215752][ T7904] RBP: 00007fd6ad492090 R08: 0000000000000000 R09: 0000000000000000 [ 220.215761][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.215771][ T7904] R13: 00007fd6ac816038 R14: 00007fd6ac815fa0 R15: 00007ffd5bbbb1a8 [ 220.215795][ T7904] [ 220.602616][ T5871] usb 5-1: USB disconnect, device number 23 [ 220.790792][ T7918] CUSE: info not properly terminated [ 220.795047][ T1222] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 220.917419][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 220.966806][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 220.979619][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 220.996353][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 221.008618][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 221.144592][ T1222] usb 3-1: config 4 has an invalid interface number: 28 but max is 0 [ 221.154217][ T1222] usb 3-1: config 4 has no interface number 0 [ 221.214584][ T7923] netlink: 'syz.0.534': attribute type 23 has an invalid length. [ 221.564651][ T1222] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 221.575268][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.649104][ T1222] usb 3-1: Product: syz [ 221.656624][ T10] usb 4-1: USB disconnect, device number 24 [ 221.676458][ T1222] usb 3-1: Manufacturer: syz [ 221.691603][ T1222] usb 3-1: SerialNumber: syz [ 221.731027][ T1222] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.28/input/input26 [ 221.769345][ T7927] ip6_tunnel: non-ECT from fe80:0000:0080:0000:0000:00c1:ffff:ffba with DS=0x19 [ 222.278302][ T1222] bcm5974 3-1:4.28: could not read from device [ 222.312053][ T1222] input: failed to attach handler mousedev to device input26, error: -5 [ 222.336465][ T1222] usb 3-1: USB disconnect, device number 17 [ 222.345322][ T7936] overlayfs: failed to resolve './file2': -2 [ 222.535045][ T5871] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 222.637034][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 222.652539][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 222.671304][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 222.685231][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 222.698674][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 222.916417][ T5871] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.963186][ T5871] usb 4-1: config 0 has no interface number 0 [ 223.036419][ T5871] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 223.111070][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.151226][ T5871] usb 4-1: Product: syz [ 223.162045][ T5871] usb 4-1: Manufacturer: syz [ 223.172994][ T5871] usb 4-1: SerialNumber: syz [ 223.201225][ T5871] usb 4-1: config 0 descriptor?? [ 223.442281][ T5871] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 223.457780][ T5871] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 223.467048][ T5871] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 224.599443][ T7976] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 225.166467][ T7982] FAULT_INJECTION: forcing a failure. [ 225.166467][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 225.179202][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.3.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.179227][ T7982] Tainted: [L]=SOFTLOCKUP [ 225.179231][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.179237][ T7982] Call Trace: [ 225.179242][ T7982] [ 225.179250][ T7982] dump_stack_lvl+0x100/0x190 [ 225.179271][ T7982] should_fail_ex.cold+0x5/0xa [ 225.179285][ T7982] should_failslab+0xc2/0x120 [ 225.179302][ T7982] __kmalloc_node_noprof+0xe6/0x850 [ 225.179316][ T7982] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 225.179330][ T7982] __vmalloc_node_range_noprof+0x3dc/0x1530 [ 225.179345][ T7982] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 225.179364][ T7982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.179375][ T7982] ? find_held_lock+0x2b/0x80 [ 225.179389][ T7982] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 225.179401][ T7982] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 225.179415][ T7982] ? avc_has_perm_noaudit+0x145/0x3b0 [ 225.179427][ T7982] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 225.179441][ T7982] __vmalloc_node_noprof+0xad/0xf0 [ 225.179451][ T7982] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 225.179466][ T7982] __vmalloc_noprof+0xa3/0x120 [ 225.179477][ T7982] ? __pfx___vmalloc_noprof+0x10/0x10 [ 225.179488][ T7982] ? rcu_is_watching+0x12/0xc0 [ 225.179501][ T7982] ? cap_capable+0x107/0x460 [ 225.179516][ T7982] bpf_prog_alloc_no_stats+0x59/0x630 [ 225.179529][ T7982] ? security_capable+0x80/0x260 [ 225.179543][ T7982] bpf_prog_alloc+0x3b/0x200 [ 225.179556][ T7982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.179571][ T7982] bpf_prog_load+0xb28/0x2c20 [ 225.179590][ T7982] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 225.179602][ T7982] ? __pfx_bpf_prog_load+0x10/0x10 [ 225.179620][ T7982] ? avc_has_perm_noaudit+0x145/0x3b0 [ 225.179633][ T7982] ? avc_has_perm+0x135/0x1e0 [ 225.179651][ T7982] ? selinux_bpf+0xfb/0x150 [ 225.179666][ T7982] __sys_bpf+0x223a/0x4b90 [ 225.179677][ T7982] ? __pfx___sys_bpf+0x10/0x10 [ 225.179694][ T7982] ? proc_fail_nth_write+0x9f/0x220 [ 225.179707][ T7982] ? find_held_lock+0x2b/0x80 [ 225.179722][ T7982] ? find_held_lock+0x2b/0x80 [ 225.179735][ T7982] ? ksys_write+0x190/0x250 [ 225.179753][ T7982] ? __mutex_unlock_slowpath+0x15c/0x790 [ 225.179768][ T7982] ? __fget_files+0x215/0x3d0 [ 225.179791][ T7982] ? fput+0x79/0x100 [ 225.179802][ T7982] ? ksys_write+0x1ac/0x250 [ 225.179816][ T7982] ? __pfx_ksys_write+0x10/0x10 [ 225.179833][ T7982] __x64_sys_bpf+0x7b/0xc0 [ 225.179844][ T7982] ? lockdep_hardirqs_on+0x78/0x100 [ 225.179857][ T7982] do_syscall_64+0x106/0xf80 [ 225.179870][ T7982] ? clear_bhb_loop+0x40/0x90 [ 225.179884][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.179895][ T7982] RIP: 0033:0x7f132e99bf79 [ 225.179905][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.179916][ T7982] RSP: 002b:00007f132f870028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.179927][ T7982] RAX: ffffffffffffffda RBX: 00007f132ec16090 RCX: 00007f132e99bf79 [ 225.179934][ T7982] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 225.179940][ T7982] RBP: 00007f132f870090 R08: 0000000000000000 R09: 0000000000000000 [ 225.179946][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.179953][ T7982] R13: 00007f132ec16128 R14: 00007f132ec16090 R15: 00007ffd1e1c9718 [ 225.179966][ T7982] [ 225.179986][ T7982] syz.3.555: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 225.532934][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.3.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.532964][ T7982] Tainted: [L]=SOFTLOCKUP [ 225.532968][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.532975][ T7982] Call Trace: [ 225.532980][ T7982] [ 225.532986][ T7982] dump_stack_lvl+0x100/0x190 [ 225.533008][ T7982] warn_alloc.cold+0x95/0x1c1 [ 225.533028][ T7982] ? __pfx_warn_alloc+0x10/0x10 [ 225.533042][ T7982] ? dump_stack_lvl+0x17c/0x190 [ 225.533060][ T7982] ? trace_kmalloc+0x101/0x130 [ 225.533076][ T7982] ? __kasan_kmalloc+0x8a/0xb0 [ 225.533091][ T7982] ? __kmalloc_node_noprof+0x324/0x850 [ 225.533104][ T7982] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 225.533118][ T7982] __vmalloc_node_range_noprof+0x1275/0x1530 [ 225.533133][ T7982] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 225.533152][ T7982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.533163][ T7982] ? find_held_lock+0x2b/0x80 [ 225.533176][ T7982] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 225.533189][ T7982] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 225.533204][ T7982] ? avc_has_perm_noaudit+0x145/0x3b0 [ 225.533216][ T7982] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 225.533230][ T7982] __vmalloc_node_noprof+0xad/0xf0 [ 225.533241][ T7982] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 225.533256][ T7982] __vmalloc_noprof+0xa3/0x120 [ 225.533266][ T7982] ? __pfx___vmalloc_noprof+0x10/0x10 [ 225.533278][ T7982] ? rcu_is_watching+0x12/0xc0 [ 225.533291][ T7982] ? cap_capable+0x107/0x460 [ 225.533305][ T7982] bpf_prog_alloc_no_stats+0x59/0x630 [ 225.533319][ T7982] ? security_capable+0x80/0x260 [ 225.533333][ T7982] bpf_prog_alloc+0x3b/0x200 [ 225.533345][ T7982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.533361][ T7982] bpf_prog_load+0xb28/0x2c20 [ 225.533381][ T7982] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 225.533392][ T7982] ? __pfx_bpf_prog_load+0x10/0x10 [ 225.533411][ T7982] ? avc_has_perm_noaudit+0x145/0x3b0 [ 225.533424][ T7982] ? avc_has_perm+0x135/0x1e0 [ 225.533442][ T7982] ? selinux_bpf+0xfb/0x150 [ 225.533456][ T7982] __sys_bpf+0x223a/0x4b90 [ 225.533468][ T7982] ? __pfx___sys_bpf+0x10/0x10 [ 225.533485][ T7982] ? proc_fail_nth_write+0x9f/0x220 [ 225.533496][ T7982] ? find_held_lock+0x2b/0x80 [ 225.533512][ T7982] ? find_held_lock+0x2b/0x80 [ 225.533525][ T7982] ? ksys_write+0x190/0x250 [ 225.533543][ T7982] ? __mutex_unlock_slowpath+0x15c/0x790 [ 225.533558][ T7982] ? __fget_files+0x215/0x3d0 [ 225.533582][ T7982] ? fput+0x79/0x100 [ 225.533592][ T7982] ? ksys_write+0x1ac/0x250 [ 225.533607][ T7982] ? __pfx_ksys_write+0x10/0x10 [ 225.533624][ T7982] __x64_sys_bpf+0x7b/0xc0 [ 225.533634][ T7982] ? lockdep_hardirqs_on+0x78/0x100 [ 225.533648][ T7982] do_syscall_64+0x106/0xf80 [ 225.533661][ T7982] ? clear_bhb_loop+0x40/0x90 [ 225.533675][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.533686][ T7982] RIP: 0033:0x7f132e99bf79 [ 225.533697][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.533708][ T7982] RSP: 002b:00007f132f870028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.533718][ T7982] RAX: ffffffffffffffda RBX: 00007f132ec16090 RCX: 00007f132e99bf79 [ 225.533725][ T7982] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 225.533731][ T7982] RBP: 00007f132f870090 R08: 0000000000000000 R09: 0000000000000000 [ 225.533737][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.533743][ T7982] R13: 00007f132ec16128 R14: 00007f132ec16090 R15: 00007ffd1e1c9718 [ 225.533757][ T7982] [ 225.533775][ T7982] Mem-Info: [ 225.887908][ T7982] active_anon:29089 inactive_anon:0 isolated_anon:0 [ 225.887908][ T7982] active_file:23381 inactive_file:40737 isolated_file:0 [ 225.887908][ T7982] unevictable:768 dirty:500 writeback:0 [ 225.887908][ T7982] slab_reclaimable:12148 slab_unreclaimable:99024 [ 225.887908][ T7982] mapped:45356 shmem:19222 pagetables:1394 [ 225.887908][ T7982] sec_pagetables:3 bounce:0 [ 225.887908][ T7982] kernel_misc_reclaimable:0 [ 225.887908][ T7982] free:1273513 free_pcp:11942 free_cma:0 [ 225.933532][ T7982] Node 0 active_anon:116356kB inactive_anon:0kB active_file:93524kB inactive_file:162744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:181424kB dirty:1996kB writeback:0kB shmem:75352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12268kB pagetables:5408kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 225.965776][ T7982] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 225.995698][ T7982] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.025786][ T7982] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 226.031687][ T7982] Node 0 DMA32 free:1148328kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116356kB inactive_anon:0kB active_file:93524kB inactive_file:162744kB unevictable:1536kB writepending:1996kB zspages:0kB present:3129332kB managed:2537364kB mlocked:0kB bounce:0kB free_pcp:35328kB local_pcp:24080kB free_cma:0kB [ 226.065575][ T7982] lowmem_reserve[]: 0 0 1 1 1 [ 226.072738][ T7982] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:28kB free_cma:0kB [ 226.102647][ T7982] lowmem_reserve[]: 0 0 0 0 0 [ 226.107567][ T7982] Node 1 Normal free:3930416kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12028kB local_pcp:384kB free_cma:0kB [ 226.139787][ T7982] lowmem_reserve[]: 0 0 0 0 0 [ 226.144635][ T7982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 226.157709][ T7982] Node 0 DMA32: 21*4kB (UME) 1476*8kB (UE) 675*16kB (UME) 136*32kB (UE) 128*64kB (UE) 350*128kB (UM) 349*256kB (UME) 136*512kB (UM) 74*1024kB (UM) 33*2048kB (UME) 187*4096kB (UM) = 1148324kB [ 226.177134][ T7982] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 226.188892][ T7982] Node 1 Normal: 6*4kB (UM) 5*8kB (UM) 7*16kB (UME) 6*32kB (ME) 7*64kB (UME) 6*128kB (UM) 7*256kB (UM) 6*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 955*4096kB (M) = 3930416kB [ 226.206725][ T7982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.216357][ T7982] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.225739][ T7982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.235359][ T7982] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.244680][ T7982] 83348 total pagecache pages [ 226.249436][ T7982] 0 pages in swap cache [ 226.253643][ T7982] Free swap = 124996kB [ 226.257862][ T7982] Total swap = 124996kB [ 226.262039][ T7982] 2097051 pages RAM [ 226.265959][ T7982] 0 pages HighMem/MovableOnly [ 226.270678][ T7982] 430831 pages reserved [ 226.274854][ T7982] 0 pages cma reserved [ 226.805556][ T7985] __nla_validate_parse: 2 callbacks suppressed [ 226.805592][ T7985] netlink: 64 bytes leftover after parsing attributes in process `syz.4.554'. [ 227.417323][ T7994] openvswitch: netlink: IP tunnel dst address not specified [ 227.494477][ T7998] netlink: 80 bytes leftover after parsing attributes in process `syz.1.560'. [ 228.513123][ T8006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.562'. [ 228.618648][ T30] audit: type=1400 audit(1771132828.547:462): avc: denied { map } for pid=8004 comm="syz.1.562" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 228.667795][ T8005] fuse: Unknown parameter '000000000000000000220x0000000000000007 [ 228.667795][ T8005] ' [ 228.830517][ T5129] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 228.927569][ T1222] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 229.330273][ T8029] FAULT_INJECTION: forcing a failure. [ 229.330273][ T8029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.343888][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.3.568 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.343915][ T8029] Tainted: [L]=SOFTLOCKUP [ 229.343920][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.343931][ T8029] Call Trace: [ 229.343950][ T8029] [ 229.343957][ T8029] dump_stack_lvl+0x100/0x190 [ 229.343989][ T8029] should_fail_ex.cold+0x5/0xa [ 229.344010][ T8029] _copy_from_user+0x2e/0xd0 [ 229.344028][ T8029] __sys_bpf+0x243/0x4b90 [ 229.344047][ T8029] ? __pfx___sys_bpf+0x10/0x10 [ 229.344071][ T8029] ? proc_fail_nth_write+0x9f/0x220 [ 229.344088][ T8029] ? find_held_lock+0x2b/0x80 [ 229.344112][ T8029] ? find_held_lock+0x2b/0x80 [ 229.344129][ T8029] ? ksys_write+0x190/0x250 [ 229.344157][ T8029] ? __mutex_unlock_slowpath+0x15c/0x790 [ 229.344180][ T8029] ? __fget_files+0x215/0x3d0 [ 229.344213][ T8029] ? fput+0x79/0x100 [ 229.344229][ T8029] ? ksys_write+0x1ac/0x250 [ 229.344249][ T8029] ? __pfx_ksys_write+0x10/0x10 [ 229.344274][ T8029] __x64_sys_bpf+0x7b/0xc0 [ 229.344286][ T8029] ? lockdep_hardirqs_on+0x78/0x100 [ 229.344300][ T8029] do_syscall_64+0x106/0xf80 [ 229.344313][ T8029] ? clear_bhb_loop+0x40/0x90 [ 229.344327][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.344339][ T8029] RIP: 0033:0x7f132e99bf79 [ 229.344349][ T8029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.344359][ T8029] RSP: 002b:00007f132f891028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.344371][ T8029] RAX: ffffffffffffffda RBX: 00007f132ec15fa0 RCX: 00007f132e99bf79 [ 229.344377][ T8029] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0600000000000000 [ 229.344384][ T8029] RBP: 00007f132f891090 R08: 0000000000000000 R09: 0000000000000000 [ 229.344390][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.344396][ T8029] R13: 00007f132ec16038 R14: 00007f132ec15fa0 R15: 00007ffd1e1c9718 [ 229.344410][ T8029] [ 229.399442][ T1222] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.614227][ T1222] usb 5-1: config 0 has no interface number 0 [ 229.621456][ T5129] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 229.641060][ T30] audit: type=1400 audit(1771132829.557:463): avc: denied { write } for pid=8032 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 229.694774][ T1222] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 229.721941][ T30] audit: type=1400 audit(1771132829.557:464): avc: denied { create } for pid=8032 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 229.722078][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.752926][ T8041] netlink: 80 bytes leftover after parsing attributes in process `syz.2.572'. [ 229.786068][ T1222] usb 5-1: Product: syz [ 229.790333][ T1222] usb 5-1: Manufacturer: syz [ 229.848392][ T1222] usb 5-1: SerialNumber: syz [ 229.860061][ T1222] usb 5-1: config 0 descriptor?? [ 229.875433][ T8047] tc_dump_action: action bad kind [ 230.208310][ T1222] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 230.284730][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 230.309715][ T8060] netlink: 'syz.0.577': attribute type 23 has an invalid length. [ 230.517936][ T8062] netlink: 'syz.2.579': attribute type 1 has an invalid length. [ 231.025131][ T30] audit: type=1400 audit(1771132830.957:465): avc: denied { ioctl } for pid=8063 comm="syz.1.580" path="socket:[18369]" dev="sockfs" ino=18369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.135222][ T29] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 231.139749][ T8076] netlink: 80 bytes leftover after parsing attributes in process `syz.4.584'. [ 231.289895][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 231.396501][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.404606][ T29] usb 3-1: Product: syz [ 231.442896][ T29] usb 3-1: Manufacturer: syz [ 231.455302][ T29] usb 3-1: SerialNumber: syz [ 231.498259][ T5129] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 231.745639][ T8091] netlink: 52 bytes leftover after parsing attributes in process `syz.4.585'. [ 231.927391][ T30] audit: type=1400 audit(1771132831.847:466): avc: denied { connect } for pid=8066 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.172628][ T8097] netlink: 'syz.3.589': attribute type 23 has an invalid length. [ 232.713382][ T8100] FAULT_INJECTION: forcing a failure. [ 232.713382][ T8100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.732797][ T8100] CPU: 0 UID: 0 PID: 8100 Comm: syz.1.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.732826][ T8100] Tainted: [L]=SOFTLOCKUP [ 232.732832][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.732838][ T8100] Call Trace: [ 232.732842][ T8100] [ 232.732847][ T8100] dump_stack_lvl+0x100/0x190 [ 232.732882][ T8100] should_fail_ex.cold+0x5/0xa [ 232.732903][ T8100] _copy_from_user+0x2e/0xd0 [ 232.732922][ T8100] iommufd_fops_ioctl+0x300/0x520 [ 232.732945][ T8100] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 232.732961][ T8100] ? __fget_files+0x215/0x3d0 [ 232.732978][ T8100] ? hook_file_ioctl_common+0x146/0x410 [ 232.732993][ T8100] ? selinux_file_ioctl+0x139/0x290 [ 232.733012][ T8100] ? selinux_file_ioctl+0xb4/0x290 [ 232.733040][ T8100] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 232.733061][ T8100] __x64_sys_ioctl+0x18e/0x210 [ 232.733083][ T8100] do_syscall_64+0x106/0xf80 [ 232.733099][ T8100] ? clear_bhb_loop+0x40/0x90 [ 232.733114][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.733126][ T8100] RIP: 0033:0x7fdd5979bf79 [ 232.733136][ T8100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.733147][ T8100] RSP: 002b:00007fdd5a723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.733161][ T8100] RAX: ffffffffffffffda RBX: 00007fdd59a15fa0 RCX: 00007fdd5979bf79 [ 232.733172][ T8100] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 232.733182][ T8100] RBP: 00007fdd5a723090 R08: 0000000000000000 R09: 0000000000000000 [ 232.733192][ T8100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.733201][ T8100] R13: 00007fdd59a16038 R14: 00007fdd59a15fa0 R15: 00007ffe718c8a58 [ 232.733223][ T8100] [ 233.005147][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 233.073716][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 233.349140][ T8113] netlink: 80 bytes leftover after parsing attributes in process `syz.3.595'. [ 233.476940][ T8115] netlink: 'syz.0.594': attribute type 1 has an invalid length. [ 233.612352][ T30] audit: type=1400 audit(1771132833.397:467): avc: denied { append } for pid=8106 comm="syz.0.594" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.030005][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 235.834258][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 235.850215][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 235.865469][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 235.880552][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 235.910195][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 235.941641][ T29] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 235.960398][ T29] usb 3-1: USB disconnect, device number 18 [ 236.105744][ T8145] TCP: TCP_TX_DELAY enabled [ 236.335104][ T5857] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 236.405046][ T5922] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 236.595040][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 236.605641][ T5857] usb 1-1: too many configurations: 231, using maximum allowed: 8 [ 236.627443][ T5857] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 236.627611][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 236.640895][ T5857] usb 1-1: can't read configurations, error -61 [ 236.730453][ T5922] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 236.757791][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.790801][ T5922] pvrusb2: Hardware description: Terratec Grabster AV400 [ 236.818544][ T5922] pvrusb2: ********** [ 236.822540][ T5922] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 236.852993][ T5922] pvrusb2: Important functionality might not be entirely working. [ 236.865391][ T5922] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 236.904214][ T5922] pvrusb2: ********** [ 236.915897][ T5857] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 236.991996][ T8153] hub 8-0:1.0: USB hub found [ 237.005462][ T8153] hub 8-0:1.0: 1 port detected [ 237.010555][ T2341] pvrusb2: Invalid write control endpoint [ 237.102737][ T2341] pvrusb2: Invalid write control endpoint [ 237.111928][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 237.127984][ T5857] usb 1-1: too many configurations: 231, using maximum allowed: 8 [ 237.136348][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 237.158093][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 237.174996][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 237.185163][ T5857] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 237.197272][ T5857] usb 1-1: can't read configurations, error -61 [ 237.205193][ T2341] pvrusb2: Device being rendered inoperable [ 237.215232][ T5857] usb usb1-port1: attempt power cycle [ 237.225110][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 237.232731][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 237.264433][ T2341] pvrusb2: Attached sub-driver cx25840 [ 237.270253][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 237.280757][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 237.575082][ T5857] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 237.595462][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 237.601100][ T5857] usb 1-1: too many configurations: 231, using maximum allowed: 8 [ 237.610139][ T5857] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 237.618044][ T5857] usb 1-1: can't read configurations, error -61 [ 237.745067][ T5857] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 237.776171][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 237.781760][ T5857] usb 1-1: too many configurations: 231, using maximum allowed: 8 [ 237.791070][ T5857] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 237.798794][ T5857] usb 1-1: can't read configurations, error -61 [ 237.805484][ T5857] usb usb1-port1: unable to enumerate USB device [ 238.388103][ T30] audit: type=1400 audit(1771132838.317:468): avc: denied { ioctl } for pid=8162 comm="syz.3.609" path="socket:[20588]" dev="sockfs" ino=20588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 238.415565][ T30] audit: type=1400 audit(1771132838.347:469): avc: denied { setopt } for pid=8162 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 238.917399][ T8176] tipc: Started in network mode [ 238.922284][ T8176] tipc: Node identity 4, cluster identity 4711 [ 238.929063][ T8176] tipc: Node number set to 4 [ 239.488706][ T9] usb 3-1: USB disconnect, device number 19 [ 239.682185][ T8182] netlink: 80 bytes leftover after parsing attributes in process `syz.1.614'. [ 239.895614][ T30] audit: type=1400 audit(1771132839.817:470): avc: denied { connect } for pid=8185 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 240.282543][ T8197] netlink: 52 bytes leftover after parsing attributes in process `syz.2.616'. [ 240.294693][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.302810][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.403768][ T8201] nbd: nbd2 already in use [ 241.075039][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 241.135723][ T30] audit: type=1400 audit(1771132841.067:471): avc: denied { shutdown } for pid=8209 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.242552][ T9] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 241.251315][ T9] usb 3-1: config 0 has no interface number 0 [ 241.261022][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=97.fe [ 241.285045][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.308818][ T9] usb 3-1: config 0 descriptor?? [ 241.321909][ T9] gspca_main: conex-2.14.0 probing 0572:0041 [ 241.686872][ T8229] overlayfs: upper fs does not support tmpfile. [ 241.722435][ T9] usb 3-1: USB disconnect, device number 20 [ 241.735700][ T5925] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 241.814156][ T5143] block nbd3: Possible stuck request ffff888028250000: control (read@0,1024B). Runtime 150 seconds [ 241.825721][ T5143] block nbd3: Possible stuck request ffff888028250200: control (read@1024,1024B). Runtime 150 seconds [ 241.836747][ T5143] block nbd3: Possible stuck request ffff888028250400: control (read@2048,1024B). Runtime 150 seconds [ 241.847856][ T5143] block nbd3: Possible stuck request ffff888028250600: control (read@3072,1024B). Runtime 150 seconds [ 241.916108][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 241.924297][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 241.937448][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.950467][ T5925] usb 2-1: Product: syz [ 241.957613][ T5925] usb 2-1: Manufacturer: syz [ 241.964777][ T5925] usb 2-1: SerialNumber: syz [ 241.980164][ T5925] usb 2-1: config 0 descriptor?? [ 241.993918][ T5925] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 242.231895][ T5925] gspca_vc032x: reg_r err -32 [ 242.237060][ T5925] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 242.873716][ T30] audit: type=1400 audit(1771132842.777:472): avc: denied { create } for pid=8253 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 242.924500][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.635'. [ 243.033379][ T30] audit: type=1400 audit(1771132842.957:473): avc: denied { setattr } for pid=8255 comm="syz.3.635" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 243.646468][ T30] audit: type=1400 audit(1771132843.577:474): avc: denied { read } for pid=8261 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 244.002143][ T8271] overlayfs: upper fs does not support tmpfile. [ 244.989347][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.642'. [ 244.995311][ T29] usb 2-1: USB disconnect, device number 24 [ 245.132965][ T8287] kernel read not supported for file /cpuacct.usage_percpu (pid: 8287 comm: syz.3.642) [ 245.202230][ T30] audit: type=1800 audit(1771132845.117:475): pid=8287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.642" name="cpuacct.usage_percpu" dev="mqueue" ino=20779 res=0 errno=0 [ 245.459676][ T8300] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25710 sclass=netlink_xfrm_socket pid=8300 comm=syz.2.645 [ 245.555353][ T29] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 245.556834][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.646'. [ 246.148368][ T29] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.241174][ T29] usb 2-1: config 0 has no interface number 0 [ 246.279950][ T29] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 246.296600][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.320328][ T29] usb 2-1: Product: syz [ 246.324544][ T29] usb 2-1: Manufacturer: syz [ 246.345005][ T29] usb 2-1: SerialNumber: syz [ 246.417269][ T29] usb 2-1: config 0 descriptor?? [ 246.629525][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 246.642717][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 246.653384][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 246.663671][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 247.051001][ T29] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 247.755002][ T8337] FAULT_INJECTION: forcing a failure. [ 247.755002][ T8337] name failslab, interval 1, probability 0, space 0, times 0 [ 247.767794][ T8337] CPU: 0 UID: 0 PID: 8337 Comm: syz.3.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.767823][ T8337] Tainted: [L]=SOFTLOCKUP [ 247.767829][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.767840][ T8337] Call Trace: [ 247.767846][ T8337] [ 247.767852][ T8337] dump_stack_lvl+0x100/0x190 [ 247.767886][ T8337] should_fail_ex.cold+0x5/0xa [ 247.767916][ T8337] ? tomoyo_encode2+0xfb/0x3c0 [ 247.767941][ T8337] should_failslab+0xc2/0x120 [ 247.767968][ T8337] __kmalloc_noprof+0xe0/0x850 [ 247.767995][ T8337] tomoyo_encode2+0xfb/0x3c0 [ 247.768025][ T8337] tomoyo_encode+0x29/0x50 [ 247.768050][ T8337] tomoyo_mount_acl+0x14c/0x8b0 [ 247.768074][ T8337] ? is_bpf_text_address+0x8a/0x1a0 [ 247.768104][ T8337] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 247.768157][ T8337] ? tomoyo_mount_permission+0x42d/0x460 [ 247.768185][ T8337] tomoyo_mount_permission+0x214/0x460 [ 247.768209][ T8337] ? tomoyo_mount_permission+0x1f6/0x460 [ 247.768236][ T8337] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 247.768276][ T8337] security_sb_mount+0xdd/0x270 [ 247.768302][ T8337] path_mount+0x158/0x23d0 [ 247.768325][ T8337] ? __pfx_path_mount+0x10/0x10 [ 247.768342][ T8337] ? irqentry_exit+0x180/0x670 [ 247.768379][ T8337] ? __x64_sys_mount+0x293/0x310 [ 247.768397][ T8337] __x64_sys_mount+0x293/0x310 [ 247.768417][ T8337] ? __pfx___x64_sys_mount+0x10/0x10 [ 247.768443][ T8337] do_syscall_64+0x106/0xf80 [ 247.768464][ T8337] ? clear_bhb_loop+0x40/0x90 [ 247.768487][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.768505][ T8337] RIP: 0033:0x7f132e99bf79 [ 247.768520][ T8337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.768536][ T8337] RSP: 002b:00007f132f84f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 247.768555][ T8337] RAX: ffffffffffffffda RBX: 00007f132ec16180 RCX: 00007f132e99bf79 [ 247.768566][ T8337] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 247.768577][ T8337] RBP: 00007f132f84f090 R08: 0000000000000000 R09: 0000000000000000 [ 247.768587][ T8337] R10: 0000000000010005 R11: 0000000000000246 R12: 0000000000000001 [ 247.768598][ T8337] R13: 00007f132ec16218 R14: 00007f132ec16180 R15: 00007ffd1e1c9718 [ 247.768623][ T8337] [ 248.605357][ T5925] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 248.646868][ T8351] input: syz0 as /devices/virtual/input/input27 [ 249.149327][ T8351] dummy0: entered allmulticast mode [ 249.715795][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 249.725123][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 249.733982][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.659'. [ 250.260034][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.275088][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.276726][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 250.323785][ T5925] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 250.348551][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.372027][ T5925] usb 1-1: config 0 descriptor?? [ 250.400570][ T8350] dummy0: left allmulticast mode [ 250.454136][ T5925] usb 1-1: can't set config #0, error -71 [ 250.517813][ T5925] usb 1-1: USB disconnect, device number 28 [ 250.882225][ T8368] comedi comedi2: dt2814: I/O port conflict (0xcf7,2) [ 250.889268][ T5925] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 251.155115][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 251.162557][ T5925] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 251.177736][ T5925] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 251.195096][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 251.213775][ T5925] usb 1-1: Product: syz [ 251.222666][ T5925] usb 1-1: Manufacturer: syz [ 251.233203][ T5925] usb 1-1: SerialNumber: syz [ 251.244366][ T5925] usb 1-1: config 0 descriptor?? [ 251.254799][ T8365] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.496357][ T8378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.665032][ T5857] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 251.816804][ T5857] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.825184][ T5857] usb 3-1: config 0 has no interface number 0 [ 251.863497][ T5857] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 251.878173][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.887951][ T5857] usb 3-1: Product: syz [ 251.895529][ T5857] usb 3-1: Manufacturer: syz [ 251.902026][ T5857] usb 3-1: SerialNumber: syz [ 252.026614][ T5857] usb 3-1: config 0 descriptor?? [ 252.255555][ T5857] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 252.901921][ T8385] netlink: 80 bytes leftover after parsing attributes in process `syz.3.667'. [ 253.080709][ T30] audit: type=1400 audit(1771132853.007:476): avc: denied { listen } for pid=8389 comm="syz.3.669" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 253.157378][ T8391] netlink: 'syz.4.668': attribute type 23 has an invalid length. [ 253.676136][ T24] usb 1-1: USB disconnect, device number 29 [ 254.631081][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 254.658757][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 254.672727][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 254.685565][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 255.139957][ T8413] netlink: 'syz.0.672': attribute type 23 has an invalid length. [ 255.821424][ T5807] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 255.874121][ T30] audit: type=1400 audit(1771132855.797:477): avc: denied { lock } for pid=8418 comm="syz.3.676" path="socket:[20033]" dev="sockfs" ino=20033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.938347][ T8423] loop5: detected capacity change from 0 to 7 [ 255.956358][ T8423] Dev loop5: unable to read RDB block 7 [ 255.961964][ T8423] loop5: unable to read partition table [ 255.975424][ T8423] loop5: partition table beyond EOD, truncated [ 255.988056][ T30] audit: type=1400 audit(1771132855.867:478): avc: denied { write } for pid=8422 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 255.996732][ T8423] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 256.295503][ T30] audit: type=1400 audit(1771132855.867:479): avc: denied { append } for pid=8422 comm="syz.0.678" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 256.359737][ T30] audit: type=1400 audit(1771132855.937:480): avc: denied { open } for pid=8422 comm="syz.0.678" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 256.413230][ T30] audit: type=1400 audit(1771132855.937:481): avc: denied { mounton } for pid=8422 comm="syz.0.678" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 257.085024][ T5813] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 257.257580][ T5813] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.275802][ T5813] usb 1-1: config 0 has no interface number 0 [ 257.288753][ T5813] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 257.300226][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.315021][ T5813] usb 1-1: Product: syz [ 257.320502][ T5813] usb 1-1: Manufacturer: syz [ 257.328791][ T5813] usb 1-1: SerialNumber: syz [ 257.349266][ T5813] usb 1-1: config 0 descriptor?? [ 257.444167][ T30] audit: type=1400 audit(1771132857.367:482): avc: denied { map } for pid=8438 comm="syz.4.682" path="socket:[20996]" dev="sockfs" ino=20996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.471556][ T30] audit: type=1400 audit(1771132857.407:483): avc: denied { read } for pid=8438 comm="syz.4.682" path="socket:[20996]" dev="sockfs" ino=20996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.590103][ T5813] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 258.397403][ T30] audit: type=1400 audit(1771132858.327:484): avc: denied { append } for pid=8461 comm="syz.2.685" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 258.732204][ T8472] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 258.739895][ T8472] /dev/nullb0: Can't open blockdev [ 259.363559][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 259.372873][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 260.292314][ T8485] overlayfs: upper fs does not support tmpfile. [ 260.359112][ T30] audit: type=1400 audit(1771132860.277:485): avc: denied { accept } for pid=8490 comm="syz.1.692" lport=55128 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 260.444519][ T30] audit: type=1400 audit(1771132860.277:486): avc: denied { write } for pid=8490 comm="syz.1.692" lport=55128 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 260.996141][ T8498] random: crng reseeded on system resumption [ 261.286446][ T30] audit: type=1400 audit(1771132860.287:487): avc: denied { setopt } for pid=8490 comm="syz.1.692" lport=55128 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.365165][ T30] audit: type=1400 audit(1771132860.287:488): avc: denied { getopt } for pid=8490 comm="syz.1.692" lport=55128 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.482078][ T30] audit: type=1400 audit(1771132860.927:489): avc: denied { write } for pid=8494 comm="syz.1.693" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 261.833653][ T30] audit: type=1400 audit(1771132861.177:490): avc: denied { read } for pid=8494 comm="syz.1.693" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 262.881472][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 263.141729][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'. [ 265.151224][ T30] audit: type=1400 audit(1771132865.077:491): avc: denied { override_creds } for pid=8575 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 266.967053][ T30] audit: type=1400 audit(1771132866.897:492): avc: denied { accept } for pid=8594 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 267.254904][ T30] audit: type=1400 audit(1771132867.177:493): avc: denied { load_policy } for pid=8600 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 267.706438][ T8601] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 267.735661][ T8601] SELinux: failed to load policy [ 267.918576][ T8606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.711'. [ 268.836236][ T8621] input: syz0 as /devices/virtual/input/input28 [ 268.903857][ T8621] dummy0: entered allmulticast mode [ 269.225504][ T8631] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 269.683837][ T8640] netlink: 64 bytes leftover after parsing attributes in process `syz.3.720'. [ 269.877375][ T8620] dummy0: left allmulticast mode [ 269.898784][ T5807] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 270.119847][ T8647] No control pipe specified [ 270.178040][ T8647] FAULT_INJECTION: forcing a failure. [ 270.178040][ T8647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.191393][ T30] audit: type=1400 audit(1771132870.107:494): avc: denied { read } for pid=8646 comm="syz.2.724" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.225147][ T8647] CPU: 0 UID: 0 PID: 8647 Comm: syz.2.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.225175][ T8647] Tainted: [L]=SOFTLOCKUP [ 270.225180][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.225189][ T8647] Call Trace: [ 270.225195][ T8647] [ 270.225202][ T8647] dump_stack_lvl+0x100/0x190 [ 270.225233][ T8647] should_fail_ex.cold+0x5/0xa [ 270.225255][ T8647] _copy_from_iter+0x1f4/0x1690 [ 270.225276][ T8647] ? __asan_memset+0x23/0x50 [ 270.225295][ T8647] ? __pfx__copy_from_iter+0x10/0x10 [ 270.225311][ T8647] ? __pfx___alloc_skb+0x10/0x10 [ 270.225338][ T8647] netlink_sendmsg+0x808/0xda0 [ 270.225365][ T8647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.225383][ T8647] ? __might_fault+0x20/0x140 [ 270.225415][ T8647] ____sys_sendmsg+0xa54/0xc30 [ 270.225440][ T8647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.225471][ T8647] ___sys_sendmsg+0x190/0x1e0 [ 270.225495][ T8647] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.225547][ T8647] __sys_sendmsg+0x170/0x220 [ 270.225568][ T8647] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.225601][ T8647] do_syscall_64+0x106/0xf80 [ 270.225622][ T8647] ? clear_bhb_loop+0x40/0x90 [ 270.225643][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.225660][ T8647] RIP: 0033:0x7fd6ac59bf79 [ 270.225674][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.225689][ T8647] RSP: 002b:00007fd6ad492028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.225705][ T8647] RAX: ffffffffffffffda RBX: 00007fd6ac815fa0 RCX: 00007fd6ac59bf79 [ 270.225716][ T8647] RDX: 0000000020000000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 270.225725][ T8647] RBP: 00007fd6ad492090 R08: 0000000000000000 R09: 0000000000000000 [ 270.225734][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.225744][ T8647] R13: 00007fd6ac816038 R14: 00007fd6ac815fa0 R15: 00007ffd5bbbb1a8 [ 270.225766][ T8647] [ 270.286036][ T30] audit: type=1400 audit(1771132870.107:495): avc: denied { open } for pid=8646 comm="syz.2.724" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.613181][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.723'. [ 271.063621][ T30] audit: type=1400 audit(1771132870.157:496): avc: denied { ioctl } for pid=8646 comm="syz.2.724" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 271.067651][ T8655] xt_recent: Unsupported userspace flags (000000b1) [ 271.895574][ T5995] block nbd3: Possible stuck request ffff888028250000: control (read@0,1024B). Runtime 180 seconds [ 271.939900][ T5995] block nbd3: Possible stuck request ffff888028250200: control (read@1024,1024B). Runtime 180 seconds [ 271.983154][ T5995] block nbd3: Possible stuck request ffff888028250400: control (read@2048,1024B). Runtime 180 seconds [ 272.032051][ T5995] block nbd3: Possible stuck request ffff888028250600: control (read@3072,1024B). Runtime 180 seconds [ 273.795966][ T8679] netlink: 'syz.2.732': attribute type 4 has an invalid length. [ 273.803685][ T8679] netlink: 152 bytes leftover after parsing attributes in process `syz.2.732'. [ 273.815839][ T8679] .`: renamed from bond0 (while UP) [ 273.825341][ T8681] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8681 comm=syz.3.733 [ 274.631245][ T30] audit: type=1400 audit(1771132874.557:497): avc: denied { write } for pid=8688 comm="syz.3.736" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 276.416777][ T30] audit: type=1400 audit(1771132876.337:498): avc: denied { connect } for pid=8707 comm="syz.1.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 277.454373][ T5178] udevd[5178]: worker [5794] /devices/virtual/block/nbd3 timeout; kill it [ 277.474589][ T5178] udevd[5178]: seq 11149 '/devices/virtual/block/nbd3' killed [ 278.541248][ T5807] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 279.195639][ T8750] FAULT_INJECTION: forcing a failure. [ 279.195639][ T8750] name failslab, interval 1, probability 0, space 0, times 0 [ 279.232113][ T8750] CPU: 0 UID: 0 PID: 8750 Comm: syz.2.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.232141][ T8750] Tainted: [L]=SOFTLOCKUP [ 279.232147][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.232156][ T8750] Call Trace: [ 279.232162][ T8750] [ 279.232167][ T8750] dump_stack_lvl+0x100/0x190 [ 279.232198][ T8750] should_fail_ex.cold+0x5/0xa [ 279.232214][ T8750] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 279.232233][ T8750] should_failslab+0xc2/0x120 [ 279.232250][ T8750] __kmalloc_noprof+0xe0/0x850 [ 279.232267][ T8750] genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 279.232285][ T8750] ? cred_has_capability.isra.0+0x186/0x300 [ 279.232311][ T8750] genl_family_rcv_msg_doit+0xc7/0x300 [ 279.232330][ T8750] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 279.232351][ T8750] ? bpf_lsm_capable+0x9/0x10 [ 279.232368][ T8750] ? security_capable+0x80/0x260 [ 279.232381][ T8750] ? ns_capable+0xd2/0xf0 [ 279.232395][ T8750] genl_rcv_msg+0x560/0x800 [ 279.232415][ T8750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.232432][ T8750] ? __pfx_ovs_dp_cmd_del+0x10/0x10 [ 279.232450][ T8750] netlink_rcv_skb+0x159/0x420 [ 279.232465][ T8750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.232482][ T8750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.232503][ T8750] ? netlink_deliver_tap+0x1ae/0xcc0 [ 279.232519][ T8750] genl_rcv+0x28/0x40 [ 279.232533][ T8750] netlink_unicast+0x5aa/0x870 [ 279.232550][ T8750] ? __pfx_netlink_unicast+0x10/0x10 [ 279.232571][ T8750] netlink_sendmsg+0x8b0/0xda0 [ 279.232588][ T8750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.232602][ T8750] ? __might_fault+0x20/0x140 [ 279.232620][ T8750] ____sys_sendmsg+0xa54/0xc30 [ 279.232639][ T8750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.232661][ T8750] ___sys_sendmsg+0x190/0x1e0 [ 279.232679][ T8750] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.232708][ T8750] ? __pfx_vfs_write+0x10/0x10 [ 279.232723][ T8750] ? do_sys_openat2+0x157/0x1e0 [ 279.232737][ T8750] __sys_sendmsg+0x170/0x220 [ 279.232750][ T8750] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.232772][ T8750] do_syscall_64+0x106/0xf80 [ 279.232785][ T8750] ? clear_bhb_loop+0x40/0x90 [ 279.232799][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.232810][ T8750] RIP: 0033:0x7fd6ac59bf79 [ 279.232821][ T8750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.232831][ T8750] RSP: 002b:00007fd6ad471028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.232842][ T8750] RAX: ffffffffffffffda RBX: 00007fd6ac816090 RCX: 00007fd6ac59bf79 [ 279.232849][ T8750] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 000000000000000e [ 279.232855][ T8750] RBP: 00007fd6ad471090 R08: 0000000000000000 R09: 0000000000000000 [ 279.232861][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.232867][ T8750] R13: 00007fd6ac816128 R14: 00007fd6ac816090 R15: 00007ffd5bbbb1a8 [ 279.232882][ T8750] [ 280.723493][ T8762] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 280.735500][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 280.745968][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 283.093782][ T30] audit: type=1400 audit(1771132883.017:499): avc: denied { bind } for pid=8792 comm="syz.0.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.120115][ T30] audit: type=1400 audit(1771132883.047:500): avc: denied { listen } for pid=8792 comm="syz.0.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.875478][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 283.884372][ T8802] openvswitch: netlink: Flow actions attr not present in new flow. [ 283.899856][ T30] audit: type=1400 audit(1771132883.827:501): avc: denied { create } for pid=8801 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.921391][ T30] audit: type=1400 audit(1771132883.857:502): avc: denied { ioctl } for pid=8801 comm="syz.1.768" path="socket:[22544]" dev="sockfs" ino=22544 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.042236][ T8837] openvswitch: netlink: IP tunnel dst address not specified [ 286.432071][ T5871] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 286.433212][ T29] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 286.448173][ T1222] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 286.481317][ T5857] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 286.497205][ T5813] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 286.523427][ T5857] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 286.541767][ T5813] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 286.575462][ T8839] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 286.587974][ T5871] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 286.612378][ T29] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 286.622066][ T5857] usb 3-1: USB disconnect, device number 21 [ 286.634537][ T5813] usb 1-1: USB disconnect, device number 30 [ 286.635435][ T5871] usb 4-1: USB disconnect, device number 25 [ 286.694286][ T1222] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 286.726531][ T29] usb 2-1: USB disconnect, device number 25 [ 286.857878][ T1222] usb 5-1: USB disconnect, device number 24 [ 287.795289][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 288.162681][ T8850] netlink: 'syz.2.780': attribute type 33 has an invalid length. [ 288.197695][ T8850] netlink: 152 bytes leftover after parsing attributes in process `syz.2.780'. [ 288.352342][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 288.375091][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 288.384594][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 288.397307][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 288.455129][ T1222] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 288.765333][ T1222] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.773365][ T1222] usb 5-1: config 0 has no interface number 0 [ 288.834146][ T1222] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 288.845440][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.853444][ T1222] usb 5-1: Product: syz [ 288.883608][ T1222] usb 5-1: Manufacturer: syz [ 288.890258][ T1222] usb 5-1: SerialNumber: syz [ 288.901700][ T1222] usb 5-1: config 0 descriptor?? [ 288.946644][ T8858] syzkaller0: entered promiscuous mode [ 288.952149][ T8858] syzkaller0: entered allmulticast mode [ 289.076522][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 289.128843][ T1222] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 289.139131][ T1222] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 289.150461][ T1222] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 289.175005][ T1222] usb 5-1: media controller created [ 289.303243][ T1222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.962733][ T1222] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 290.183502][ T8871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.787'. [ 290.192416][ T8871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.787'. [ 290.201306][ T8871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.787'. [ 290.293664][ T1222] usb 5-1: USB disconnect, device number 25 [ 290.895692][ T30] audit: type=1400 audit(1771132890.717:503): avc: denied { getopt } for pid=8881 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 290.938777][ T8883] loop0: detected capacity change from 0 to 16384 [ 291.134315][ T8883] loop0: detected capacity change from 16384 to 0 [ 291.263422][ T8886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.285056][ T30] audit: type=1400 audit(1771132891.197:504): avc: denied { read } for pid=8885 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.446604][ T30] audit: type=1400 audit(1771132891.247:505): avc: denied { write } for pid=8885 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.784458][ T8897] openvswitch: netlink: IP tunnel dst address not specified [ 291.855892][ T30] audit: type=1326 audit(1771132891.687:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ac59bf79 code=0x7fc00000 [ 291.943830][ T30] audit: type=1326 audit(1771132891.817:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6ac59bf79 code=0x7fc00000 [ 292.361630][ T30] audit: type=1326 audit(1771132891.817:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ac59bf79 code=0x7fc00000 [ 292.406647][ T30] audit: type=1326 audit(1771132891.817:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ac59bf79 code=0x7fc00000 [ 292.473015][ T30] audit: type=1326 audit(1771132891.817:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ac59bf79 code=0x7fc00000 [ 292.596217][ T30] audit: type=1326 audit(1771132891.817:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ac59bf79 code=0x7fc00000 [ 292.655021][ T30] audit: type=1326 audit(1771132891.817:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ac59bf79 code=0x7fc00000 [ 292.913308][ T8908] netlink: 'syz.0.797': attribute type 23 has an invalid length. [ 293.510193][ T8916] __nla_validate_parse: 1 callbacks suppressed [ 293.510229][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 293.587926][ T29] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 293.959072][ T29] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.061495][ T29] usb 2-1: config 0 has no interface number 0 [ 294.072596][ T29] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 294.081942][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.089980][ T29] usb 2-1: Product: syz [ 294.094183][ T29] usb 2-1: Manufacturer: syz [ 294.140742][ T29] usb 2-1: SerialNumber: syz [ 294.796563][ T29] usb 2-1: config 0 descriptor?? [ 295.034845][ T29] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 295.113958][ T8927] netlink: 'syz.0.804': attribute type 23 has an invalid length. [ 295.489129][ T29] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 295.522658][ T29] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 295.531579][ T29] usb 2-1: media controller created [ 295.611603][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.695424][ T29] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 296.816367][ T8937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8937 comm=syz.1.808 [ 296.831229][ T29] usb 2-1: USB disconnect, device number 26 [ 297.270362][ T8945] 9pnet_virtio: no channels available for device qY3aK [ 297.345130][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 297.345198][ T30] audit: type=1400 audit(1771132897.197:574): avc: denied { mounton } for pid=8941 comm="syz.4.803" path=2F3134352FE91F7189591E9233614B dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 298.941751][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.812'. [ 299.214501][ T30] audit: type=1400 audit(1771132899.137:575): avc: denied { write } for pid=8960 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 299.406445][ T31] INFO: task poweroff:6871 blocked for more than 143 seconds. [ 299.413937][ T31] Tainted: G L syzkaller #0 [ 299.441361][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.495019][ T31] task:poweroff state:D stack:25656 pid:6871 tgid:6871 ppid:5163 task_flags:0x400000 flags:0x00080000 [ 299.531548][ T31] Call Trace: [ 299.537810][ T31] [ 299.545808][ T31] __schedule+0xfee/0x60e0 [ 299.550259][ T31] ? __lock_acquire+0x4a5/0x2630 [ 299.718784][ T8981] openvswitch: netlink: IP tunnel dst address not specified [ 300.159057][ T31] ? __pfx___schedule+0x10/0x10 [ 300.164118][ T31] ? find_held_lock+0x2b/0x80 [ 300.169170][ T31] ? schedule+0x2bf/0x390 [ 300.173594][ T31] schedule+0xdd/0x390 [ 300.177995][ T31] schedule_preempt_disabled+0x13/0x30 [ 300.183893][ T31] __mutex_lock+0xc9a/0x1b90 [ 300.185024][ T976] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 300.188849][ T31] ? sync_bdevs+0x153/0x480 [ 300.201339][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 300.206595][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 300.212369][ T31] ? iput.part.0+0x1a0/0xf50 [ 300.217180][ T31] ? sync_bdevs+0x153/0x480 [ 300.223810][ T31] sync_bdevs+0x153/0x480 [ 300.228276][ T31] ksys_sync+0xb0/0xf0 [ 300.232395][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 300.237368][ T31] ? do_syscall_64+0x95/0xf80 [ 300.242642][ T31] __do_sys_sync+0xe/0x20 [ 300.247061][ T31] do_syscall_64+0x106/0xf80 [ 300.251759][ T31] ? clear_bhb_loop+0x40/0x90 [ 300.256585][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.262597][ T31] RIP: 0033:0x7fa990ff7f37 [ 300.267164][ T31] RSP: 002b:00007fffe8c905d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 300.275723][ T31] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fa990ff7f37 [ 300.284151][ T31] RDX: ffffffffffffff88 RSI: 00007fa991190e51 RDI: 00000000ffffff9c [ 300.293636][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.301675][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.309827][ T31] R13: 00007fffe8c90738 R14: 00007fa9911da000 R15: 000055b5b3991d98 [ 300.335650][ T31] [ 300.341889][ T31] [ 300.341889][ T31] Showing all locks held in the system: [ 300.376551][ T976] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.397410][ T31] 1 lock held by khungtaskd/31: [ 300.402286][ T31] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 300.418629][ T31] 3 locks held by kworker/0:2/976: [ 300.423828][ T31] 3 locks held by kworker/0:3/1222: [ 300.429352][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 300.445963][ T976] usb 5-1: config 0 has no interface number 0 [ 300.454959][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 300.474824][ T976] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 300.486687][ T31] #2: ffff8880b8443098 (&ACCESS_PRIVATE(sdp, lock)){....}-{3:3}, at: srcu_invoke_callbacks+0x326/0x4a0 [ 300.493105][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.506626][ T976] usb 5-1: Product: syz [ 300.511145][ T976] usb 5-1: Manufacturer: syz [ 300.516037][ T31] 1 lock held by udevd/5178: [ 300.516191][ T976] usb 5-1: SerialNumber: syz [ 300.526751][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 300.528736][ T976] usb 5-1: config 0 descriptor?? [ 300.554975][ T31] 2 locks held by getty/5563: [ 300.559665][ T31] #0: ffff888033ca80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 300.575033][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 300.585583][ T31] 1 lock held by udevd/5794: [ 300.590260][ T31] #0: ffff8880281a1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 300.601716][ T31] 1 lock held by poweroff/6871: [ 300.607357][ T31] #0: ffff8880281a1358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 300.617029][ T31] 4 locks held by udevd/8456: [ 300.621704][ T31] #0: ffff888022346540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 300.630645][ T31] #1: ffff8880779da888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 300.640153][ T31] #2: ffff88804503b878 (kn->active#14){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 300.649745][ T31] #3: ffff888056e78198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 300.659097][ T31] 2 locks held by syz.3.819/8975: [ 300.664113][ T31] #0: ffff888056b53b88 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 300.665275][ T30] audit: type=1400 audit(1771132900.597:576): avc: denied { setopt } for pid=8985 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.694153][ T31] #1: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 300.704854][ T31] [ 300.707284][ T31] ============================================= [ 300.707284][ T31] [ 300.715794][ T31] NMI backtrace for cpu 0 [ 300.715812][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 300.715836][ T31] Tainted: [L]=SOFTLOCKUP [ 300.715841][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.715851][ T31] Call Trace: [ 300.715857][ T31] [ 300.715864][ T31] dump_stack_lvl+0x100/0x190 [ 300.715899][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 300.715918][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 300.715945][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 300.715973][ T31] sys_info+0x141/0x190 [ 300.715995][ T31] watchdog+0xd25/0x1050 [ 300.716025][ T31] ? __pfx_watchdog+0x10/0x10 [ 300.716044][ T31] ? __kthread_parkme+0x18c/0x230 [ 300.716065][ T31] ? kthread+0x13a/0x450 [ 300.716076][ T31] ? __pfx_watchdog+0x10/0x10 [ 300.716093][ T31] kthread+0x370/0x450 [ 300.716105][ T31] ? __pfx_kthread+0x10/0x10 [ 300.716128][ T31] ret_from_fork+0x754/0xd80 [ 300.716143][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 300.716159][ T31] ? __switch_to+0x7b4/0x1120 [ 300.716178][ T31] ? __pfx_kthread+0x10/0x10 [ 300.716204][ T31] ret_from_fork_asm+0x1a/0x30 [ 300.716236][ T31] [ 300.716274][ T31] Sending NMI from CPU 0 to CPUs 1: [ 300.843025][ C1] NMI backtrace for cpu 1 [ 300.843042][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.843061][ C1] Tainted: [L]=SOFTLOCKUP [ 300.843066][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.843074][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 300.843095][ C1] Code: a8 83 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3c 1d 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 300.843107][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 300.843119][ C1] RAX: 00000000013bb20b RBX: ffff88801e6aa480 RCX: ffffffff8b8e4c75 [ 300.843128][ C1] RDX: 0000000000000000 RSI: ffffffff8de6ce9d RDI: ffffffff8c1adfa0 [ 300.843137][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 300.843145][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd5490 [ 300.843154][ C1] R13: 0000000000000001 R14: ffffffff90d92f10 R15: 0000000000000000 [ 300.843162][ C1] FS: 0000000000000000(0000) GS:ffff888124452000(0000) knlGS:0000000000000000 [ 300.843177][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.843185][ C1] CR2: 0000001b2fa23ffc CR3: 0000000078513000 CR4: 00000000003526f0 [ 300.843194][ C1] Call Trace: [ 300.843199][ C1] [ 300.843204][ C1] default_idle+0x9/0x10 [ 300.843224][ C1] default_idle_call+0x6c/0xb0 [ 300.843240][ C1] do_idle+0x35b/0x4b0 [ 300.843257][ C1] ? __pfx_do_idle+0x10/0x10 [ 300.843273][ C1] ? do_idle+0x8/0x4b0 [ 300.843288][ C1] cpu_startup_entry+0x4f/0x60 [ 300.843303][ C1] start_secondary+0x21d/0x2d0 [ 300.843322][ C1] ? __pfx_start_secondary+0x10/0x10 [ 300.843341][ C1] common_startup_64+0x13e/0x148 [ 300.843362][ C1] [ 301.018902][ T976] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 301.029614][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 301.036478][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 301.047160][ T31] Tainted: [L]=SOFTLOCKUP [ 301.051473][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.061524][ T31] Call Trace: [ 301.064810][ T31] [ 301.067744][ T31] dump_stack_lvl+0x100/0x190 [ 301.072435][ T31] vpanic+0x552/0x970 [ 301.076420][ T31] ? __pfx_vpanic+0x10/0x10 [ 301.080925][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 301.087092][ T31] panic+0xd1/0xe0 [ 301.090812][ T31] ? __pfx_panic+0x10/0x10 [ 301.095231][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 301.101366][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 301.107500][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 301.113627][ T31] ? watchdog.cold+0x198/0x1ca [ 301.118362][ T31] ? watchdog+0xd35/0x1050 [ 301.122757][ T31] watchdog.cold+0x1a9/0x1ca [ 301.127322][ T31] ? __pfx_watchdog+0x10/0x10 [ 301.131972][ T31] ? __kthread_parkme+0x18c/0x230 [ 301.136971][ T31] ? kthread+0x13a/0x450 [ 301.141182][ T31] ? __pfx_watchdog+0x10/0x10 [ 301.145835][ T31] kthread+0x370/0x450 [ 301.149890][ T31] ? __pfx_kthread+0x10/0x10 [ 301.154471][ T31] ret_from_fork+0x754/0xd80 [ 301.159035][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 301.164117][ T31] ? __switch_to+0x7b4/0x1120 [ 301.168777][ T31] ? __pfx_kthread+0x10/0x10 [ 301.173348][ T31] ret_from_fork_asm+0x1a/0x30 [ 301.178096][ T31] [ 301.181485][ T31] Kernel Offset: disabled [ 301.185783][ T31] Rebooting in 86400 seconds..