last executing test programs: 20.043293341s ago: executing program 1 (id=10727): r0 = socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd300800100000008", @ANYRES8, @ANYRESHEX=r0, @ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) 16.556909549s ago: executing program 1 (id=10740): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r2, &(0x7f000000a7c0)=[{{0x0, 0x0, &(0x7f000000a000)=[{0x0}], 0x1}, 0x9}], 0x1, 0x40010040, &(0x7f000000a940)={0x0, 0x989680}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400196338834b80040d8c560a066f02b805b97300000000000058000b4824ca945f64009400ff0325010ebc000000000000000100f0effeffe809005300fff5dd00000010000100080c10000000007b72000000", 0x58}], 0x1) 15.697021084s ago: executing program 1 (id=10745): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000001a0000001a000000ff070000000000000000000f0100000009000000000000000f01000000e100000000"], 0x0, 0x36, 0x0, 0x1}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) write$FUSE_INIT(r5, &(0x7f0000000500)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x0, 0x7, 0x0, {0x1, 0x0, 0x10, 0x1, 0xfffffffffffffff9, 0x6b, 0x0, 0x400000, 0x0, 0xc000, 0x1, 0x0, 0xee01, 0x0, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000040)={0x50, 0x0, 0x8000, {0x7, 0x29, 0x201, 0x400012, 0x72, 0x5, 0x5, 0x8, 0x0, 0x0, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1}}, 0x10) 13.468178324s ago: executing program 3 (id=10751): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x35, 0x0, 0x0, 0x2}, 0x28) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r3, 0xb05}, 0x14}}, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xe2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffbc, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) recvfrom(r7, 0x0, 0x0, 0x42, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000d0000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r8}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12.537423105s ago: executing program 3 (id=10755): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r2, &(0x7f000000a7c0)=[{{0x0, 0x0, &(0x7f000000a000)=[{0x0}], 0x1}, 0x9}], 0x1, 0x40010040, &(0x7f000000a940)={0x0, 0x989680}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400196338834b80040d8c560a066f02b805b97300000000000058000b4824ca945f64009400ff0325010ebc000000000000000100f0effeffe809005300fff5dd00000010000100080c10000000007b72000000", 0x58}], 0x1) 11.500363064s ago: executing program 1 (id=10756): r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x7) pipe2$watch_queue(&(0x7f00000000c0), 0x80) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 10.922431193s ago: executing program 3 (id=10759): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22ffe6) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=r6], 0x40}, 0x1, 0x0, 0x8cffffff, 0x20040000}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000180)={"1b4f1a59a9be35e8c11ef87e413d94cf520833949160593561e114fb09b8a485"}) 7.835682154s ago: executing program 3 (id=10768): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22ffe6) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=r6], 0x40}, 0x1, 0x0, 0x3000000, 0x20040000}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000180)={"1b4f1a59a9be35e8c11ef87e413d94cf520833949160593561e114fb09b8a485"}) 7.590589701s ago: executing program 1 (id=10769): r0 = syz_usb_connect(0x0, 0x120, &(0x7f0000000000)=ANY=[@ANYBLOB="120101007cde0440720c130049b30000000109020e0101000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) 6.576676775s ago: executing program 0 (id=10773): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r4}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}, 0x1, 0x0, 0xfeff0000}, 0x0) 6.536237462s ago: executing program 0 (id=10774): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000014e21a0528bd51d2877e3e1d6a00000000005a82fa6dee08f66367e8334485f5f253f9368d5974659a5c7affb4b76e4be4d3dac4140b446a21115a6127f6dda2e9a44698522c5aa75d1cd547f1b17e9299a2137eabc6ab28606d3e500f3aff1538a1990a91c226c56ddf5038fde597bc32d4e8aca497f67db17b79f7dd9e9053e2103422a38f5b69ed56ca81621d842e6f00caba77d10ff7bff963c1c88ac87ad9ffad48acc4421283b401bf19c92e02b543f34879c42f7a6f329aa5ce06b3d2c73036a5234aa8c78cac2d3d663775cf6fd85695b1"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40800181}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000000206030000000000000000000a000007050004000100000005000500010000000500ee30010000000900020073797a3200000000a793ed61593ffca49141a2fed088d00ad7b0cf5524a7ea6313665e078097dbfbccbb499add88a8446d433d351a85a833fb1691a1a7e5d726475be427d575a62d9ea3d0e9dc02e948766b4e76a652c49df400e345628ec6155a41b625a5d712951d458ae191d217d8f47c2f348a1dd4ad0cc7a842c8d78cb5"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x840) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="1105fbfffffefefffff605000000", @ANYRES32=r2], 0x21}}, 0xa000000) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r5, 0x0, 0x21c) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@multicast1, @in=@multicast2}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xffffffffffffffff, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) flock(r1, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048031180"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') 6.486380578s ago: executing program 2 (id=10775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000fff000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6.372623091s ago: executing program 2 (id=10777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3, 0x0, 0x0, 0xff94}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 6.294230013s ago: executing program 0 (id=10778): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) getsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol']) 6.13591114s ago: executing program 2 (id=10779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x24020400) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r3, 0x0, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000700)={{r5}, r10, 0x10, @inherit={0x50, 0x0}, @name="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"}) syz_open_dev$video4linux(&(0x7f0000000040), 0x9, 0x20000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) 4.143423655s ago: executing program 4 (id=10780): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4.050405953s ago: executing program 2 (id=10781): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) fcntl$dupfd(r2, 0x406, r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=':m!x']) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r6], 0x64}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYRES8=r0], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3, @mcast1, 0x129}}, 0x2, 0x2, 0x614, 0x401, 0xd, 0x7, 0x4}, 0x9c) r10 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r10, 0xc058565d, &(0x7f0000000200)=@multiplanar_overlay={0x6, 0x1, 0x4, 0x40, 0x40004, {}, {0x7, 0x0, 0x3, 0x3, 0x8b, 0x7b, "03a750cf"}, 0x9, 0x3, {0x0}, 0x3c}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) write(r11, &(0x7f0000000340)="07000000010000", 0x7) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000006cde20926fbc1a9000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x110) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9fc80118000000000000000c0000000c0000000200"/38], 0x0, 0x26, 0x0, 0x1}, 0x28) 3.98593593s ago: executing program 3 (id=10782): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xb) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 3.969746382s ago: executing program 4 (id=10783): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x184c3, 0x2) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000300)=0x80) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x20004810) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = io_uring_setup(0x31d0, &(0x7f00000000c0)={0x0, 0x851e, 0x981, 0x402, 0x391}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000200)={0x6f1d, 0x5b}, 0x1) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f0000000400)) (async, rerun: 64) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) (rerun: 64) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) (async) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f00000000c0)='S', 0x1, 0x24000004, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @loopback, 0x3510}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, 0x0, 0x0) 3.176531262s ago: executing program 4 (id=10784): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400196338834b80040d8c560a066f02b805b97300000000000058000b4824ca945f64009400ff0325010ebc000000000000000100f0effeffe809005300fff5dd00000010000100080c10000000007b72000000", 0x58}], 0x1) 2.999341045s ago: executing program 1 (id=10785): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xb) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x30) getpid() 2.190048529s ago: executing program 0 (id=10786): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) socket(0xa, 0x5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8001, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r2, 0xffffffffffffffff, 0x0) 2.014594269s ago: executing program 4 (id=10787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="1c0400007d00000005db02000000000005d9000400000000000000000000000000100000000000000000fe0080fffe0000001f0004"], 0x41c) 1.161082546s ago: executing program 0 (id=10788): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.112046204s ago: executing program 2 (id=10789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1, 0x0, 0x0, 0xfdff}, 0x0) 984.734359ms ago: executing program 4 (id=10790): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000001100)={0x1, @sdr={0x50323234, 0x1000}}) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x14, 0x0, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xfffff000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000000000) 981.812763ms ago: executing program 0 (id=10791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) io_setup(0x13, &(0x7f00000003c0)) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x8b8e, 0x80, 0x803, 0x7}, &(0x7f0000000340), 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, 0x0, 0x0, 0xadc) recvmmsg(r7, &(0x7f0000002580), 0x0, 0x40, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 857.744813ms ago: executing program 2 (id=10792): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150186360dd20da0b53810b6f01"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100), 0x0) io_uring_enter(r0, 0x14, 0xb9c, 0x2b, 0x0, 0x18) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x840, 0x43) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x20a100, 0x0) close(0xffffffffffffffff) openat$vcs(0xffffff9c, 0x0, 0x6a201, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'lblcr\x00', 0x15, 0x5, 0x31}, 0x2c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e3ff0000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r3}, 0x94) write$P9_RREAD(r4, 0x0, 0x0) 266.973µs ago: executing program 3 (id=10793): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 0s ago: executing program 4 (id=10794): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0xb57, 0xc, 0x4b, 0x9}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): hange from 0 to 7 [ 2347.426933][ T6598] Dev loop9: unable to read RDB block 7 [ 2347.438760][ T6598] loop9: unable to read partition table [ 2347.539673][ T6598] loop9: partition table beyond EOD, truncated [ 2347.545876][ T6598] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2347.560533][ T6601] loop8: detected capacity change from 0 to 7 [ 2347.598232][ T6601] Dev loop8: unable to read RDB block 7 [ 2347.623912][ T6601] loop8: unable to read partition table [ 2347.637590][ T6601] loop8: partition table beyond EOD, truncated [ 2348.175024][ T6601] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2348.326951][ T30] audit: type=1400 audit(2302.412:8077): avc: denied { append } for pid=6608 comm="syz.3.9895" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2348.869613][ T6619] input: syz1 as /devices/virtual/input/input192 [ 2349.045276][ T30] audit: type=1400 audit(2303.086:8078): avc: denied { create } for pid=6625 comm="syz.2.9899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2349.062664][ T6620] openvswitch: netlink: IP tunnel dst address not specified [ 2349.091670][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9891'. [ 2349.226943][ T30] audit: type=1400 audit(2303.123:8079): avc: denied { bind } for pid=6591 comm="syz.0.9891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2349.263255][ T30] audit: type=1400 audit(2303.151:8080): avc: denied { write } for pid=6625 comm="syz.2.9899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2350.949275][ T30] audit: type=1400 audit(2304.807:8081): avc: denied { create } for pid=6625 comm="syz.2.9899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2351.128453][ T30] audit: type=1400 audit(2304.807:8082): avc: denied { create } for pid=6625 comm="syz.2.9899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2351.304154][ T30] audit: type=1400 audit(2304.826:8083): avc: denied { ioctl } for pid=6625 comm="syz.2.9899" path="socket:[156591]" dev="sockfs" ino=156591 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2351.484186][ T30] audit: type=1400 audit(2304.826:8084): avc: denied { ioctl } for pid=6625 comm="syz.2.9899" path="socket:[156591]" dev="sockfs" ino=156591 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2351.612449][ T30] audit: type=1400 audit(2304.826:8085): avc: denied { read } for pid=6625 comm="syz.2.9899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2352.682643][ T6665] sp0: Synchronizing with TNC [ 2352.689727][ T30] audit: type=1400 audit(2306.491:8086): avc: denied { open } for pid=6664 comm="syz.3.9910" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2352.980841][T25185] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 2354.166754][T25185] usb 4-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=6d.3c [ 2354.180327][T25185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.199613][T25185] usb 4-1: Product: syz [ 2354.204980][T25185] usb 4-1: Manufacturer: syz [ 2354.214227][T25185] usb 4-1: SerialNumber: syz [ 2354.687733][T25185] usb 4-1: config 0 descriptor?? [ 2354.695430][T25185] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 2355.333469][T25185] pwc: Failed to set LED on/off time (-71) [ 2355.700111][T25185] pwc: send_video_command error -71 [ 2355.705896][T25185] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2355.713549][T25185] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 2355.724375][T25185] usb 4-1: USB disconnect, device number 55 [ 2355.755188][ T30] audit: type=1400 audit(2309.362:8087): avc: denied { read write } for pid=6695 comm="syz.1.9920" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2357.241652][ T30] audit: type=1400 audit(2309.391:8088): avc: denied { open } for pid=6695 comm="syz.1.9920" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2357.287423][ T30] audit: type=1400 audit(2309.391:8089): avc: denied { ioctl } for pid=6695 comm="syz.1.9920" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2357.547849][ T30] audit: type=1400 audit(2310.794:8090): avc: denied { create } for pid=6709 comm="syz.1.9923" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2358.207752][ T30] audit: type=1400 audit(2310.794:8091): avc: denied { mounton } for pid=6709 comm="syz.1.9923" path="/150/file0" dev="tmpfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2358.379629][ T30] audit: type=1400 audit(2311.748:8092): avc: denied { unlink } for pid=4191 comm="syz-executor" name="file0" dev="tmpfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2358.989017][T25160] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2359.433127][T25160] usb 4-1: config 222 has an invalid interface number: 233 but max is 0 [ 2359.453247][T25160] usb 4-1: config 222 has no interface number 0 [ 2359.502456][T25160] usb 4-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 2359.555472][T25160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.616369][T25160] usb 4-1: Product: syz [ 2359.639263][T25160] usb 4-1: Manufacturer: syz [ 2359.666986][T25160] usb 4-1: SerialNumber: syz [ 2360.181394][T25160] ldusb 4-1:222.233: Interrupt in endpoint not found [ 2360.380955][T25160] usb 4-1: USB disconnect, device number 56 [ 2360.550868][ T6748] tipc: Started in network mode [ 2360.578024][ T6748] tipc: Node identity ac14140f, cluster identity 4711 [ 2360.623120][ T6748] tipc: New replicast peer: 255.255.255.255 [ 2360.776439][ T6748] tipc: Enabled bearer , priority 10 [ 2360.859544][ T30] audit: type=1400 audit(2314.133:8093): avc: denied { read write } for pid=6743 comm="syz.2.9933" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2360.915831][ T6751] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2360.929533][ T30] audit: type=1400 audit(2314.161:8094): avc: denied { open } for pid=6743 comm="syz.2.9933" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2361.888787][ T6760] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9936'. [ 2361.920901][ T6760] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9936'. [ 2361.934433][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9936'. [ 2361.982377][T25185] tipc: Node number set to 2886997007 [ 2362.834978][ T6776] Cannot find add_set index 65532 as target [ 2363.365556][ T30] audit: type=1400 audit(2316.481:8095): avc: denied { read } for pid=6782 comm="syz.2.9943" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2363.388707][ T30] audit: type=1400 audit(2316.481:8096): avc: denied { open } for pid=6782 comm="syz.2.9943" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2363.412309][ T30] audit: type=1400 audit(2316.481:8097): avc: denied { ioctl } for pid=6782 comm="syz.2.9943" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2363.834366][ T30] audit: type=1400 audit(2316.921:8098): avc: denied { bind } for pid=6795 comm="syz.3.9947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2363.873913][ T6796] vxcan1 speed is unknown, defaulting to 1000 [ 2363.930470][ T30] audit: type=1400 audit(2317.014:8099): avc: denied { create } for pid=6795 comm="syz.3.9947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2363.968403][ T30] audit: type=1400 audit(2317.033:8100): avc: denied { connect } for pid=6795 comm="syz.3.9947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2364.217570][T25160] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2364.237458][ T6802] netlink: 'syz.4.9949': attribute type 4 has an invalid length. [ 2364.421175][T25160] usb 4-1: config 0 has no interfaces? [ 2364.443241][T25160] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2364.519029][ T6809] overlayfs: missing 'lowerdir' [ 2364.575401][T25160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.584446][T25160] usb 4-1: Product: syz [ 2364.591027][T25160] usb 4-1: Manufacturer: syz [ 2364.598124][T25160] usb 4-1: SerialNumber: syz [ 2364.606721][T25160] usb 4-1: config 0 descriptor?? [ 2364.626161][ T6811] FAULT_INJECTION: forcing a failure. [ 2364.626161][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 2364.639410][ T6811] CPU: 0 UID: 0 PID: 6811 Comm: syz.4.9952 Tainted: G L syzkaller #0 PREEMPT(full) [ 2364.639440][ T6811] Tainted: [L]=SOFTLOCKUP [ 2364.639447][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2364.639457][ T6811] Call Trace: [ 2364.639464][ T6811] [ 2364.639471][ T6811] dump_stack_lvl+0x16c/0x1f0 [ 2364.639507][ T6811] should_fail_ex+0x512/0x640 [ 2364.639533][ T6811] ? kmem_cache_alloc_noprof+0x62/0x770 [ 2364.639554][ T6811] should_failslab+0xc2/0x120 [ 2364.639579][ T6811] kmem_cache_alloc_noprof+0x83/0x770 [ 2364.639597][ T6811] ? getname_flags.part.0+0x4c/0x550 [ 2364.639621][ T6811] ? getname_flags.part.0+0x4c/0x550 [ 2364.639639][ T6811] getname_flags.part.0+0x4c/0x550 [ 2364.639661][ T6811] getname_flags+0x93/0xf0 [ 2364.639683][ T6811] __x64_sys_renameat2+0xc7/0x130 [ 2364.639703][ T6811] do_syscall_64+0xcd/0xf80 [ 2364.639727][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2364.639745][ T6811] RIP: 0033:0x7f78ea98f749 [ 2364.639760][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2364.639777][ T6811] RSP: 002b:00007f78eb7cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 2364.639794][ T6811] RAX: ffffffffffffffda RBX: 00007f78eabe6090 RCX: 00007f78ea98f749 [ 2364.639807][ T6811] RDX: 0000000000000007 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2364.639818][ T6811] RBP: 00007f78eb7cd090 R08: 0000000000000002 R09: 0000000000000000 [ 2364.639829][ T6811] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 2364.639840][ T6811] R13: 00007f78eabe6128 R14: 00007f78eabe6090 R15: 00007ffd4d992de8 [ 2364.639865][ T6811] [ 2364.878625][ T6814] overlayfs: missing 'lowerdir' [ 2364.907889][ T30] audit: type=1400 audit(2317.921:8101): avc: denied { create } for pid=6795 comm="syz.3.9947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2364.945927][ T30] audit: type=1400 audit(2317.949:8102): avc: denied { write } for pid=6795 comm="syz.3.9947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2364.976358][ T30] audit: type=1400 audit(2317.949:8103): avc: denied { read } for pid=6795 comm="syz.3.9947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2365.038123][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9957'. [ 2365.058162][ T6822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2365.097124][ T30] audit: type=1400 audit(2318.099:8104): avc: denied { getopt } for pid=6824 comm="syz.2.9958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2366.321141][ T6850] netlink: 'syz.1.9964': attribute type 4 has an invalid length. [ 2367.020914][ T6854] kAFS: unable to lookup cell '(' [ 2367.026043][ T6855] kAFS: unable to lookup cell '(' [ 2368.406452][T25160] usb 4-1: USB disconnect, device number 57 [ 2368.486317][ T6862] overlayfs: missing 'lowerdir' [ 2368.527956][ T6862] FAULT_INJECTION: forcing a failure. [ 2368.527956][ T6862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2368.529248][ T6872] FAULT_INJECTION: forcing a failure. [ 2368.529248][ T6872] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.541299][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.0.9968 Tainted: G L syzkaller #0 PREEMPT(full) [ 2368.541324][ T6862] Tainted: [L]=SOFTLOCKUP [ 2368.541330][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2368.541340][ T6862] Call Trace: [ 2368.541346][ T6862] [ 2368.541353][ T6862] dump_stack_lvl+0x16c/0x1f0 [ 2368.541377][ T6862] should_fail_ex+0x512/0x640 [ 2368.541404][ T6862] strncpy_from_user+0x3b/0x2e0 [ 2368.541429][ T6862] getname_flags.part.0+0x8f/0x550 [ 2368.541449][ T6862] getname_flags+0x93/0xf0 [ 2368.541469][ T6862] __x64_sys_renameat2+0xc7/0x130 [ 2368.541487][ T6862] do_syscall_64+0xcd/0xf80 [ 2368.541509][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2368.541526][ T6862] RIP: 0033:0x7ff6f5b8f749 [ 2368.541539][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2368.541555][ T6862] RSP: 002b:00007ff6f6a5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 2368.541571][ T6862] RAX: ffffffffffffffda RBX: 00007ff6f5de5fa0 RCX: 00007ff6f5b8f749 [ 2368.541581][ T6862] RDX: 0000000000000007 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2368.541591][ T6862] RBP: 00007ff6f6a5b090 R08: 0000000000000002 R09: 0000000000000000 [ 2368.541601][ T6862] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 2368.541611][ T6862] R13: 00007ff6f5de6038 R14: 00007ff6f5de5fa0 R15: 00007ffcf71a0f88 [ 2368.541633][ T6862] [ 2368.774331][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2368.774347][ T30] audit: type=1400 audit(2321.504:8110): avc: denied { read write } for pid=6866 comm="syz.2.9970" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2368.838836][ T30] audit: type=1400 audit(2321.504:8111): avc: denied { open } for pid=6866 comm="syz.2.9970" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2368.891475][ T6872] CPU: 1 UID: 0 PID: 6872 Comm: syz.3.9971 Tainted: G L syzkaller #0 PREEMPT(full) [ 2368.891503][ T6872] Tainted: [L]=SOFTLOCKUP [ 2368.891509][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2368.891520][ T6872] Call Trace: [ 2368.891526][ T6872] [ 2368.891533][ T6872] dump_stack_lvl+0x16c/0x1f0 [ 2368.891558][ T6872] should_fail_ex+0x512/0x640 [ 2368.891584][ T6872] ? __kmalloc_cache_noprof+0x5f/0x800 [ 2368.891615][ T6872] should_failslab+0xc2/0x120 [ 2368.891640][ T6872] __kmalloc_cache_noprof+0x80/0x800 [ 2368.891669][ T6872] ? binder_translate_fd+0x173/0x760 [ 2368.891692][ T6872] ? binder_translate_fd+0x173/0x760 [ 2368.891716][ T6872] binder_translate_fd+0x173/0x760 [ 2368.891736][ T6872] binder_transaction+0x4ac2/0x9d50 [ 2368.891783][ T6872] ? __pfx_binder_transaction+0x10/0x10 [ 2368.891812][ T6872] ? find_held_lock+0x2b/0x80 [ 2368.891842][ T6872] ? bpf_ksym_find+0x127/0x1c0 [ 2368.891873][ T6872] ? __lock_acquire+0x436/0x2890 [ 2368.891895][ T6872] ? unwind_get_return_address+0x59/0xa0 [ 2368.891929][ T6872] ? find_held_lock+0x2b/0x80 [ 2368.891954][ T6872] ? __might_fault+0xe3/0x190 [ 2368.891971][ T6872] ? __might_fault+0xe3/0x190 [ 2368.891987][ T6872] ? __might_fault+0x13b/0x190 [ 2368.892014][ T6872] binder_thread_write+0xaae/0x4e40 [ 2368.892045][ T6872] ? __lock_acquire+0x436/0x2890 [ 2368.892065][ T6872] ? __pfx_binder_thread_write+0x10/0x10 [ 2368.892087][ T6872] ? binder_debug+0xde/0x1a0 [ 2368.892109][ T6872] ? binder_debug+0xde/0x1a0 [ 2368.892127][ T6872] ? __pfx_binder_debug+0x10/0x10 [ 2368.892146][ T6872] ? find_held_lock+0x2b/0x80 [ 2368.892185][ T6872] binder_ioctl+0x2916/0x7360 [ 2368.892221][ T6872] ? tomoyo_path_number_perm+0x18d/0x580 [ 2368.892251][ T6872] ? __pfx_binder_ioctl+0x10/0x10 [ 2368.892275][ T6872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2368.892298][ T6872] ? do_vfs_ioctl+0x128/0x14f0 [ 2368.892319][ T6872] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2368.892341][ T6872] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2368.892374][ T6872] ? hook_file_ioctl_common+0x144/0x410 [ 2368.892409][ T6872] ? selinux_file_ioctl+0x180/0x270 [ 2368.892432][ T6872] ? selinux_file_ioctl+0xb4/0x270 [ 2368.892456][ T6872] ? __pfx_binder_ioctl+0x10/0x10 [ 2368.892480][ T6872] __x64_sys_ioctl+0x18e/0x210 [ 2368.892503][ T6872] do_syscall_64+0xcd/0xf80 [ 2368.892529][ T6872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2368.892547][ T6872] RIP: 0033:0x7f96e6b8f749 [ 2368.892563][ T6872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2368.892580][ T6872] RSP: 002b:00007f96e7a78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2368.892599][ T6872] RAX: ffffffffffffffda RBX: 00007f96e6de5fa0 RCX: 00007f96e6b8f749 [ 2368.892611][ T6872] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 2368.892622][ T6872] RBP: 00007f96e7a78090 R08: 0000000000000000 R09: 0000000000000000 [ 2368.892633][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2368.892645][ T6872] R13: 00007f96e6de6038 R14: 00007f96e6de5fa0 R15: 00007fffa9cdea08 [ 2368.892671][ T6872] [ 2369.445337][ T30] audit: type=1400 audit(2321.504:8112): avc: denied { ioctl } for pid=6866 comm="syz.2.9970" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2369.481975][ T6875] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2369.587046][ T30] audit: type=1400 audit(2321.532:8113): avc: denied { map } for pid=6866 comm="syz.2.9970" path="socket:[159019]" dev="sockfs" ino=159019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2369.955210][ T30] audit: type=1400 audit(2321.532:8114): avc: denied { accept } for pid=6866 comm="syz.2.9970" path="socket:[159019]" dev="sockfs" ino=159019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2370.001282][ T6891] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2370.037015][ T30] audit: type=1400 audit(2321.541:8115): avc: denied { create } for pid=6866 comm="syz.2.9970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2371.483317][T25160] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 2371.980255][T25160] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2372.128602][T25160] usb 3-1: not running at top speed; connect to a high speed hub [ 2372.142034][T25160] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.226971][ T6916] FAULT_INJECTION: forcing a failure. [ 2372.226971][ T6916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2372.240140][ T6916] CPU: 0 UID: 0 PID: 6916 Comm: syz.1.9982 Tainted: G L syzkaller #0 PREEMPT(full) [ 2372.240170][ T6916] Tainted: [L]=SOFTLOCKUP [ 2372.240177][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2372.240188][ T6916] Call Trace: [ 2372.240195][ T6916] [ 2372.240203][ T6916] dump_stack_lvl+0x16c/0x1f0 [ 2372.240235][ T6916] should_fail_ex+0x512/0x640 [ 2372.240267][ T6916] _copy_from_iter+0x2a4/0x16c0 [ 2372.240300][ T6916] ? __pfx__copy_from_iter+0x10/0x10 [ 2372.240331][ T6916] ? skb_put+0x17/0x1b0 [ 2372.240355][ T6916] ? skb_put+0x47/0x1b0 [ 2372.240381][ T6916] netlink_sendmsg+0x820/0xdd0 [ 2372.240409][ T6916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2372.240438][ T6916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2372.240466][ T6916] ____sys_sendmsg+0xa5d/0xc30 [ 2372.240490][ T6916] ? copy_msghdr_from_user+0x10a/0x160 [ 2372.240508][ T6916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2372.240535][ T6916] ? __lock_acquire+0x436/0x2890 [ 2372.240563][ T6916] ___sys_sendmsg+0x134/0x1d0 [ 2372.240583][ T6916] ? __pfx____sys_sendmsg+0x10/0x10 [ 2372.240601][ T6916] ? find_held_lock+0x2b/0x80 [ 2372.240657][ T6916] __sys_sendmsg+0x16d/0x220 [ 2372.240675][ T6916] ? __pfx___sys_sendmsg+0x10/0x10 [ 2372.240711][ T6916] do_syscall_64+0xcd/0xf80 [ 2372.240737][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2372.240755][ T6916] RIP: 0033:0x7f5eadf8f749 [ 2372.240770][ T6916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2372.240788][ T6916] RSP: 002b:00007f5eac1b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2372.240806][ T6916] RAX: ffffffffffffffda RBX: 00007f5eae1e6180 RCX: 00007f5eadf8f749 [ 2372.240818][ T6916] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2372.240829][ T6916] RBP: 00007f5eac1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2372.240840][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2372.240851][ T6916] R13: 00007f5eae1e6218 R14: 00007f5eae1e6180 R15: 00007fff6e0d53a8 [ 2372.240877][ T6916] [ 2372.449436][ T30] audit: type=1400 audit(2324.984:8116): avc: denied { write } for pid=6905 comm="syz.3.9980" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 2372.459779][ T6911] hub 1-0:1.0: USB hub found [ 2372.478353][T25160] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 2372.488346][T25160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.496391][T25160] usb 3-1: Product: syz [ 2372.500549][T25160] usb 3-1: Manufacturer: syz [ 2372.505188][T25160] usb 3-1: SerialNumber: syz [ 2372.511459][ T6911] hub 1-0:1.0: 1 port detected [ 2373.213949][ T30] audit: type=1400 audit(2325.695:8117): avc: denied { mounton } for pid=6895 comm="syz.2.9977" path="/119/file0" dev="tmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2374.287295][ T30] audit: type=1400 audit(2325.723:8118): avc: denied { mount } for pid=6895 comm="syz.2.9977" name="/" dev="hugetlbfs" ino=159161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2374.309928][ T30] audit: type=1400 audit(2325.723:8119): avc: denied { remount } for pid=6895 comm="syz.2.9977" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2375.345833][ T4846] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2375.484608][ T4846] usb 1-1: device descriptor read/64, error -71 [ 2376.093944][ T4846] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2376.272869][T25160] usbsevseg 3-1:129.0: USB 7 Segment device now attached [ 2376.287042][ T4846] usb 1-1: device descriptor read/64, error -71 [ 2376.303914][T25160] usb 3-1: USB disconnect, device number 55 [ 2376.325835][T25160] usbsevseg 3-1:129.0: USB 7 Segment now disconnected [ 2376.370137][ T30] audit: type=1400 audit(2328.641:8120): avc: denied { map } for pid=6948 comm="syz.2.9992" path="socket:[159200]" dev="sockfs" ino=159200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2376.468218][ T4846] usb usb1-port1: attempt power cycle [ 2376.862315][ T6957] overlayfs: missing 'lowerdir' [ 2376.948668][ T30] audit: type=1400 audit(2329.184:8121): avc: denied { read } for pid=6960 comm="syz.4.9996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2376.968148][ T30] audit: type=1400 audit(2329.193:8122): avc: denied { read } for pid=6960 comm="syz.4.9996" path="socket:[159242]" dev="sockfs" ino=159242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2377.153665][ T4846] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2377.174573][ T4846] usb 1-1: device descriptor read/8, error -71 [ 2377.580167][ T4846] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2377.635851][ T4846] usb 1-1: device descriptor read/8, error -71 [ 2377.762065][ T4846] usb usb1-port1: unable to enumerate USB device [ 2377.922086][T25160] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2377.990503][ T6982] input: syz1 as /devices/virtual/input/input193 [ 2378.062675][ T30] audit: type=1400 audit(2330.231:8123): avc: denied { create } for pid=6983 comm="syz.1.10005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2378.405118][T25160] usb 3-1: config 222 has an invalid interface number: 233 but max is 0 [ 2378.413646][T25160] usb 3-1: config 222 has no interface number 0 [ 2378.426341][T25160] usb 3-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 2378.539187][T25160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.549043][T25160] usb 3-1: Product: syz [ 2378.553329][T25160] usb 3-1: Manufacturer: syz [ 2378.557922][T25160] usb 3-1: SerialNumber: syz [ 2378.818757][ T7000] Cannot find add_set index 65532 as target [ 2378.872072][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10001'. [ 2378.887512][ T30] audit: type=1400 audit(2331.008:8124): avc: denied { listen } for pid=6977 comm="syz.3.10002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2379.745568][T25160] ldusb 3-1:222.233: Interrupt in endpoint not found [ 2379.881843][T25160] usb 3-1: USB disconnect, device number 56 [ 2380.148744][ T30] audit: type=1400 audit(2332.186:8125): avc: denied { mount } for pid=7010 comm="syz.0.10011" name="/" dev="autofs" ino=158383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2380.771905][ T7028] FAULT_INJECTION: forcing a failure. [ 2380.771905][ T7028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2380.785664][ T7028] CPU: 1 UID: 0 PID: 7028 Comm: syz.2.10017 Tainted: G L syzkaller #0 PREEMPT(full) [ 2380.785694][ T7028] Tainted: [L]=SOFTLOCKUP [ 2380.785699][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2380.785710][ T7028] Call Trace: [ 2380.785716][ T7028] [ 2380.785724][ T7028] dump_stack_lvl+0x16c/0x1f0 [ 2380.785751][ T7028] should_fail_ex+0x512/0x640 [ 2380.785783][ T7028] _copy_from_user+0x2e/0xd0 [ 2380.785810][ T7028] core_sys_select+0x35b/0xc20 [ 2380.785843][ T7028] ? __pfx_core_sys_select+0x10/0x10 [ 2380.785892][ T7028] ? set_user_sigmask+0x21b/0x2b0 [ 2380.785918][ T7028] ? __pfx_set_user_sigmask+0x10/0x10 [ 2380.785948][ T7028] do_pselect.constprop.0+0x19f/0x1e0 [ 2380.785975][ T7028] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 2380.786010][ T7028] __x64_sys_pselect6+0x182/0x240 [ 2380.786034][ T7028] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 2380.786063][ T7028] do_syscall_64+0xcd/0xf80 [ 2380.786089][ T7028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2380.786107][ T7028] RIP: 0033:0x7fdbe0b8f749 [ 2380.786122][ T7028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2380.786140][ T7028] RSP: 002b:00007fdbe1ad9038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2380.786157][ T7028] RAX: ffffffffffffffda RBX: 00007fdbe0de5fa0 RCX: 00007fdbe0b8f749 [ 2380.786169][ T7028] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 2380.786180][ T7028] RBP: 00007fdbe1ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 2380.786190][ T7028] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2380.786202][ T7028] R13: 00007fdbe0de6038 R14: 00007fdbe0de5fa0 R15: 00007ffd30d4b558 [ 2380.786228][ T7028] [ 2382.144378][ T7042] FAULT_INJECTION: forcing a failure. [ 2382.144378][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 2382.157146][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.3.10020 Tainted: G L syzkaller #0 PREEMPT(full) [ 2382.157175][ T7042] Tainted: [L]=SOFTLOCKUP [ 2382.157182][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2382.157193][ T7042] Call Trace: [ 2382.157199][ T7042] [ 2382.157207][ T7042] dump_stack_lvl+0x16c/0x1f0 [ 2382.157235][ T7042] should_fail_ex+0x512/0x640 [ 2382.157261][ T7042] ? __kmalloc_cache_noprof+0x5f/0x800 [ 2382.157293][ T7042] should_failslab+0xc2/0x120 [ 2382.157318][ T7042] __kmalloc_cache_noprof+0x80/0x800 [ 2382.157348][ T7042] ? rtnl_newlink+0x11b/0x1f50 [ 2382.157368][ T7042] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 2382.157393][ T7042] ? __pfx_rtnl_newlink+0x10/0x10 [ 2382.157411][ T7042] ? rtnl_newlink+0x11b/0x1f50 [ 2382.157429][ T7042] rtnl_newlink+0x11b/0x1f50 [ 2382.157450][ T7042] ? rcu_is_watching+0x12/0xc0 [ 2382.157467][ T7042] ? trace_sched_exit_tp+0xd1/0x110 [ 2382.157485][ T7042] ? __schedule+0x10b9/0x6150 [ 2382.157505][ T7042] ? __schedule+0x114c/0x6150 [ 2382.157526][ T7042] ? __pfx_rtnl_newlink+0x10/0x10 [ 2382.157548][ T7042] ? avc_has_perm_noaudit+0x117/0x3b0 [ 2382.157589][ T7042] ? __pfx___schedule+0x10/0x10 [ 2382.157614][ T7042] ? rcu_is_watching+0x12/0xc0 [ 2382.157630][ T7042] ? irqentry_exit+0x1dd/0x8c0 [ 2382.157652][ T7042] ? lockdep_hardirqs_on+0x7c/0x110 [ 2382.157673][ T7042] ? irqentry_exit+0x1dd/0x8c0 [ 2382.157694][ T7042] ? rcu_is_watching+0x12/0xc0 [ 2382.157716][ T7042] ? __pfx_rtnl_newlink+0x10/0x10 [ 2382.157740][ T7042] ? __pfx_rtnl_newlink+0x10/0x10 [ 2382.157761][ T7042] rtnetlink_rcv_msg+0x95e/0xe90 [ 2382.157784][ T7042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2382.157809][ T7042] ? __lock_acquire+0x436/0x2890 [ 2382.157836][ T7042] netlink_rcv_skb+0x158/0x420 [ 2382.157859][ T7042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2382.157881][ T7042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2382.157913][ T7042] ? netlink_deliver_tap+0x1ae/0xd30 [ 2382.157939][ T7042] netlink_unicast+0x5aa/0x870 [ 2382.157964][ T7042] ? __pfx_netlink_unicast+0x10/0x10 [ 2382.157996][ T7042] netlink_sendmsg+0x8c8/0xdd0 [ 2382.158021][ T7042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2382.158054][ T7042] ____sys_sendmsg+0xa5d/0xc30 [ 2382.158078][ T7042] ? copy_msghdr_from_user+0x10a/0x160 [ 2382.158097][ T7042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2382.158132][ T7042] ___sys_sendmsg+0x134/0x1d0 [ 2382.158152][ T7042] ? __pfx____sys_sendmsg+0x10/0x10 [ 2382.158201][ T7042] __sys_sendmsg+0x16d/0x220 [ 2382.158221][ T7042] ? __pfx___sys_sendmsg+0x10/0x10 [ 2382.158238][ T7042] ? __pfx___schedule+0x10/0x10 [ 2382.158264][ T7042] ? rcu_is_watching+0x12/0xc0 [ 2382.158288][ T7042] do_syscall_64+0xcd/0xf80 [ 2382.158311][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2382.158330][ T7042] RIP: 0033:0x7f96e6b8f749 [ 2382.158345][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2382.158363][ T7042] RSP: 002b:00007f96e7a36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2382.158381][ T7042] RAX: ffffffffffffffda RBX: 00007f96e6de6180 RCX: 00007f96e6b8f749 [ 2382.158393][ T7042] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2382.158403][ T7042] RBP: 00007f96e7a36090 R08: 0000000000000000 R09: 0000000000000000 [ 2382.158414][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2382.158425][ T7042] R13: 00007f96e6de6218 R14: 00007f96e6de6180 R15: 00007fffa9cdea08 [ 2382.158450][ T7042] [ 2382.582359][ T7044] new mount options do not match the existing superblock, will be ignored [ 2383.075100][ T30] audit: type=1400 audit(2334.487:8126): avc: denied { ioctl } for pid=7039 comm="syz.0.10022" path="socket:[159403]" dev="sockfs" ino=159403 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2383.187566][ T30] audit: type=1400 audit(2335.020:8127): avc: denied { getopt } for pid=7052 comm="syz.3.10025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2383.646912][ T7055] Cannot find add_set index 65532 as target [ 2384.895278][ T7061] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2384.895278][ T7061] [ 2384.912723][ T30] audit: type=1400 audit(2336.620:8128): avc: denied { remount } for pid=7060 comm="syz.4.10026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2385.088785][ T30] audit: type=1400 audit(2336.639:8129): avc: denied { read write } for pid=7060 comm="syz.4.10026" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2385.249588][ T30] audit: type=1400 audit(2336.639:8130): avc: denied { open } for pid=7060 comm="syz.4.10026" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2385.330755][ T30] audit: type=1400 audit(2336.770:8131): avc: denied { unmount } for pid=3525 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2385.397015][ T30] audit: type=1400 audit(2336.947:8132): avc: denied { unmount } for pid=4746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2385.414778][ T7071] overlayfs: missing 'lowerdir' [ 2385.905327][ T7064] tmpfs: Unknown parameter '00000000000000000005' [ 2385.940013][T25160] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 2386.101886][T25160] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 2386.126731][T25160] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 2386.227302][T25160] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 2386.262533][T25160] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2386.869475][ T7078] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2386.869475][ T7078] [ 2387.300971][T25160] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2387.351198][T25160] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2387.361186][T25160] usb 1-1: Product: syz [ 2387.366239][T25160] usb 1-1: Manufacturer: syz [ 2387.371045][T25160] usb 1-1: SerialNumber: syz [ 2387.379204][T25160] usb 1-1: config 0 descriptor?? [ 2387.389911][ T7071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2387.409071][T25160] usb 1-1: selecting invalid altsetting 0 [ 2387.469500][ T30] audit: type=1400 audit(2339.033:8133): avc: denied { unmount } for pid=3399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2387.668029][T25160] usb 1-1: USB disconnect, device number 2 [ 2387.789475][ T4846] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2387.983139][ T4846] usb 3-1: config 222 has an invalid interface number: 233 but max is 0 [ 2387.994174][ T4846] usb 3-1: config 222 has no interface number 0 [ 2388.011726][ T4846] usb 3-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 2388.037052][ T4846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.053914][ T4846] usb 3-1: Product: syz [ 2388.066667][ T4846] usb 3-1: Manufacturer: syz [ 2388.081831][ T4846] usb 3-1: SerialNumber: syz [ 2388.873270][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10033'. [ 2388.901194][ T4846] ldusb 3-1:222.233: Interrupt in endpoint not found [ 2388.910163][ T4846] usb 3-1: USB disconnect, device number 57 [ 2389.938374][T25160] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2390.111174][T25160] usb 3-1: config 222 has an invalid interface number: 233 but max is 0 [ 2390.119864][T25160] usb 3-1: config 222 has no interface number 0 [ 2390.128745][T25160] usb 3-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 2390.138899][T25160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.147211][T25160] usb 3-1: Product: syz [ 2390.151568][T25160] usb 3-1: Manufacturer: syz [ 2390.156545][T25160] usb 3-1: SerialNumber: syz [ 2390.539194][T25160] ldusb 3-1:222.233: Interrupt in endpoint not found [ 2390.552578][T25160] usb 3-1: USB disconnect, device number 58 [ 2390.806049][ T7135] FAULT_INJECTION: forcing a failure. [ 2390.806049][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 2390.819203][ T7135] CPU: 0 UID: 0 PID: 7135 Comm: syz.3.10047 Tainted: G L syzkaller #0 PREEMPT(full) [ 2390.819233][ T7135] Tainted: [L]=SOFTLOCKUP [ 2390.819240][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2390.819251][ T7135] Call Trace: [ 2390.819258][ T7135] [ 2390.819267][ T7135] dump_stack_lvl+0x16c/0x1f0 [ 2390.819294][ T7135] should_fail_ex+0x512/0x640 [ 2390.819322][ T7135] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 2390.819345][ T7135] should_failslab+0xc2/0x120 [ 2390.819375][ T7135] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 2390.819396][ T7135] ? __d_alloc+0x35/0xa80 [ 2390.819418][ T7135] ? __d_alloc+0x35/0xa80 [ 2390.819433][ T7135] __d_alloc+0x35/0xa80 [ 2390.819453][ T7135] d_alloc+0x4a/0x1e0 [ 2390.819471][ T7135] lookup_one_qstr_excl+0x175/0x250 [ 2390.819494][ T7135] start_dirop+0x59/0xb0 [ 2390.819518][ T7135] simple_start_creating+0xf4/0x100 [ 2390.819543][ T7135] ? __pfx_simple_start_creating+0x10/0x10 [ 2390.819567][ T7135] ? do_raw_spin_unlock+0x172/0x230 [ 2390.819595][ T7135] ? simple_pin_fs+0xa3/0x190 [ 2390.819620][ T7135] debugfs_start_creating.part.0+0x86/0x1c0 [ 2390.819641][ T7135] __debugfs_create_file+0xb3/0x530 [ 2390.819664][ T7135] debugfs_create_file_full+0x41/0x60 [ 2390.819686][ T7135] ? __pfx_br_dev_setup+0x10/0x10 [ 2390.819712][ T7135] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 2390.819742][ T7135] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2390.819793][ T7135] ? alloc_netdev_mqs+0xd7/0x1550 [ 2390.819814][ T7135] ? lockdep_init_map_type+0x5c/0x270 [ 2390.819841][ T7135] alloc_netdev_mqs+0x314/0x1550 [ 2390.819868][ T7135] rtnl_create_link+0xc08/0xf60 [ 2390.819893][ T7135] rtnl_newlink+0xb3b/0x1f50 [ 2390.819923][ T7135] ? __pfx_rtnl_newlink+0x10/0x10 [ 2390.819952][ T7135] ? avc_has_perm_noaudit+0x149/0x3b0 [ 2390.819997][ T7135] ? rcu_is_watching+0x12/0xc0 [ 2390.820014][ T7135] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2390.820036][ T7135] ? lockdep_hardirqs_on+0x7c/0x110 [ 2390.820060][ T7135] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2390.820082][ T7135] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 2390.820114][ T7135] ? __pfx_rtnl_newlink+0x10/0x10 [ 2390.820136][ T7135] rtnetlink_rcv_msg+0x95e/0xe90 [ 2390.820160][ T7135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2390.820186][ T7135] ? __lock_acquire+0x436/0x2890 [ 2390.820213][ T7135] netlink_rcv_skb+0x158/0x420 [ 2390.820237][ T7135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2390.820260][ T7135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2390.820292][ T7135] ? netlink_deliver_tap+0x1ae/0xd30 [ 2390.820313][ T7135] ? __rcu_read_unlock+0x2b5/0x5a0 [ 2390.820341][ T7135] netlink_unicast+0x5aa/0x870 [ 2390.820373][ T7135] ? __pfx_netlink_unicast+0x10/0x10 [ 2390.820406][ T7135] netlink_sendmsg+0x8c8/0xdd0 [ 2390.820433][ T7135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2390.820466][ T7135] ____sys_sendmsg+0xa5d/0xc30 [ 2390.820492][ T7135] ? copy_msghdr_from_user+0x10a/0x160 [ 2390.820510][ T7135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2390.820538][ T7135] ? __lock_acquire+0x436/0x2890 [ 2390.820566][ T7135] ___sys_sendmsg+0x134/0x1d0 [ 2390.820586][ T7135] ? __pfx____sys_sendmsg+0x10/0x10 [ 2390.820604][ T7135] ? find_held_lock+0x2b/0x80 [ 2390.820664][ T7135] __sys_sendmsg+0x16d/0x220 [ 2390.820684][ T7135] ? __pfx___sys_sendmsg+0x10/0x10 [ 2390.820701][ T7135] ? ksys_write+0x17e/0x250 [ 2390.820743][ T7135] do_syscall_64+0xcd/0xf80 [ 2390.820768][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2390.820787][ T7135] RIP: 0033:0x7f96e6b8f749 [ 2390.820802][ T7135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2390.820820][ T7135] RSP: 002b:00007f96e7a36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2390.820838][ T7135] RAX: ffffffffffffffda RBX: 00007f96e6de6180 RCX: 00007f96e6b8f749 [ 2390.820850][ T7135] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2390.820862][ T7135] RBP: 00007f96e7a36090 R08: 0000000000000000 R09: 0000000000000000 [ 2390.820873][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2390.820884][ T7135] R13: 00007f96e6de6218 R14: 00007f96e6de6180 R15: 00007fffa9cdea08 [ 2390.820911][ T7135] [ 2391.754719][ T7145] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2392.444390][ T7143] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2392.935283][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.942129][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2393.103253][ T7171] netlink: 'syz.0.10056': attribute type 4 has an invalid length. [ 2393.269754][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10054'. [ 2395.123306][T25160] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2395.155390][ T2122] Bluetooth: hci3: command 0x0406 tx timeout [ 2395.369341][T25160] usb 4-1: Using ep0 maxpacket: 32 [ 2395.390489][ T30] audit: type=1400 audit(2346.423:8134): avc: denied { bind } for pid=7200 comm="syz.2.10064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2395.463430][ T30] audit: type=1400 audit(2346.498:8135): avc: denied { write } for pid=7200 comm="syz.2.10064" path="socket:[158682]" dev="sockfs" ino=158682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2396.605108][ T7208] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2396.605108][ T7208] [ 2396.876962][ T1184] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2396.886600][ T1184] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2397.439656][ T30] audit: type=1400 audit(2348.350:8136): avc: denied { map } for pid=7215 comm="syz.0.10067" path="socket:[159655]" dev="sockfs" ino=159655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2397.524668][ T30] audit: type=1400 audit(2348.350:8137): avc: denied { read accept } for pid=7215 comm="syz.0.10067" path="socket:[159655]" dev="sockfs" ino=159655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2397.546916][ T7224] loop8: detected capacity change from 0 to 7 [ 2397.572028][ T7224] Dev loop8: unable to read RDB block 7 [ 2397.590187][ T7224] loop8: unable to read partition table [ 2397.603545][ T7224] loop8: partition table beyond EOD, truncated [ 2397.640651][ T7224] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2398.188423][ T30] audit: type=1800 audit(2349.051:8138): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.10067" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2398.406551][T25160] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2398.525080][T25160] usb 4-1: no configurations [ 2398.529710][T25160] usb 4-1: can't read configurations, error -22 [ 2399.283729][ T7241] netlink: 'syz.0.10072': attribute type 2 has an invalid length. [ 2399.404613][ T7242] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 2399.430862][ T30] audit: type=1400 audit(2350.202:8139): avc: denied { map } for pid=7238 comm="syz.0.10072" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2399.599863][ T30] audit: type=1400 audit(2350.202:8140): avc: denied { execute } for pid=7238 comm="syz.0.10072" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2399.656096][ T30] audit: type=1400 audit(2350.202:8141): avc: denied { bind } for pid=7238 comm="syz.0.10072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2399.692767][ T30] audit: type=1400 audit(2350.202:8142): avc: denied { node_bind } for pid=7238 comm="syz.0.10072" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2400.191040][ T7255] FAULT_INJECTION: forcing a failure. [ 2400.191040][ T7255] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.203797][ T7255] CPU: 0 UID: 0 PID: 7255 Comm: syz.4.10069 Tainted: G L syzkaller #0 PREEMPT(full) [ 2400.203825][ T7255] Tainted: [L]=SOFTLOCKUP [ 2400.203832][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2400.203843][ T7255] Call Trace: [ 2400.203849][ T7255] [ 2400.203857][ T7255] dump_stack_lvl+0x16c/0x1f0 [ 2400.203886][ T7255] should_fail_ex+0x512/0x640 [ 2400.203913][ T7255] ? fs_reclaim_acquire+0xae/0x150 [ 2400.203941][ T7255] should_failslab+0xc2/0x120 [ 2400.203972][ T7255] kmem_cache_alloc_noprof+0x83/0x770 [ 2400.203990][ T7255] ? __pfx_map_id_range_down+0x10/0x10 [ 2400.204010][ T7255] ? security_inode_alloc+0x3b/0x2b0 [ 2400.204038][ T7255] ? security_inode_alloc+0x3b/0x2b0 [ 2400.204057][ T7255] security_inode_alloc+0x3b/0x2b0 [ 2400.204080][ T7255] inode_init_always_gfp+0xced/0x1040 [ 2400.204111][ T7255] alloc_inode+0x86/0x240 [ 2400.204132][ T7255] new_inode+0x22/0x1c0 [ 2400.204154][ T7255] __debugfs_create_file+0x105/0x530 [ 2400.204179][ T7255] debugfs_create_file_full+0x41/0x60 [ 2400.204200][ T7255] ? __pfx_br_dev_setup+0x10/0x10 [ 2400.204226][ T7255] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 2400.204255][ T7255] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2400.204310][ T7255] ? __raw_spin_lock_init+0xde/0x110 [ 2400.204339][ T7255] alloc_netdev_mqs+0x314/0x1550 [ 2400.204368][ T7255] rtnl_create_link+0xc08/0xf60 [ 2400.204392][ T7255] rtnl_newlink+0xb3b/0x1f50 [ 2400.204420][ T7255] ? __pfx_rtnl_newlink+0x10/0x10 [ 2400.204449][ T7255] ? __pfx___schedule+0x10/0x10 [ 2400.204476][ T7255] ? preempt_schedule_thunk+0x16/0x30 [ 2400.204499][ T7255] ? preempt_schedule_thunk+0x16/0x30 [ 2400.204522][ T7255] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 2400.204544][ T7255] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 2400.204569][ T7255] ? lock_sync+0xc1/0x110 [ 2400.204597][ T7255] ? __pfx_rtnl_newlink+0x10/0x10 [ 2400.204618][ T7255] rtnetlink_rcv_msg+0x95e/0xe90 [ 2400.204641][ T7255] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2400.204669][ T7255] ? __pfx___schedule+0x10/0x10 [ 2400.204693][ T7255] netlink_rcv_skb+0x158/0x420 [ 2400.204717][ T7255] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2400.204740][ T7255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2400.204760][ T7255] ? irqentry_exit+0x1dd/0x8c0 [ 2400.204795][ T7255] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 2400.204822][ T7255] ? netlink_unicast+0x580/0x870 [ 2400.204847][ T7255] netlink_unicast+0x5aa/0x870 [ 2400.204873][ T7255] ? __pfx_netlink_unicast+0x10/0x10 [ 2400.204906][ T7255] netlink_sendmsg+0x8c8/0xdd0 [ 2400.204932][ T7255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2400.204970][ T7255] ____sys_sendmsg+0xa5d/0xc30 [ 2400.204995][ T7255] ? copy_msghdr_from_user+0x10a/0x160 [ 2400.205015][ T7255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2400.205041][ T7255] ? __lock_acquire+0x436/0x2890 [ 2400.205069][ T7255] ___sys_sendmsg+0x134/0x1d0 [ 2400.205090][ T7255] ? __pfx____sys_sendmsg+0x10/0x10 [ 2400.205108][ T7255] ? find_held_lock+0x2b/0x80 [ 2400.205168][ T7255] __sys_sendmsg+0x16d/0x220 [ 2400.205187][ T7255] ? __pfx___sys_sendmsg+0x10/0x10 [ 2400.205205][ T7255] ? __pfx___schedule+0x10/0x10 [ 2400.205232][ T7255] ? rcu_is_watching+0x12/0xc0 [ 2400.205257][ T7255] do_syscall_64+0xcd/0xf80 [ 2400.205283][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2400.205301][ T7255] RIP: 0033:0x7f78ea98f749 [ 2400.205317][ T7255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2400.205335][ T7255] RSP: 002b:00007f78eb7ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2400.205353][ T7255] RAX: ffffffffffffffda RBX: 00007f78eabe6180 RCX: 00007f78ea98f749 [ 2400.205366][ T7255] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2400.205377][ T7255] RBP: 00007f78eb7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 2400.205389][ T7255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2400.205400][ T7255] R13: 00007f78eabe6218 R14: 00007f78eabe6180 R15: 00007ffd4d992de8 [ 2400.205427][ T7255] [ 2400.228259][ T4846] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2400.360617][ T30] audit: type=1326 audit(2351.081:8143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.10076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e6b8f749 code=0x7ffc0000 [ 2400.364149][ T7255] debugfs: out of free dentries, can not create file 'netdev@ffff88802e72c618' [ 2400.844431][ T4846] usb 3-1: config 235 has too many interfaces: 149, using maximum allowed: 32 [ 2400.875840][ T4846] usb 3-1: config 235 has an invalid descriptor of length 118, skipping remainder of the config [ 2401.008917][ T4846] usb 3-1: config 235 has 0 interfaces, different from the descriptor's value: 149 [ 2401.025435][ T4846] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 2401.034518][ T4846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2401.223683][ T7273] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2401.625614][T25183] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2401.635826][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 2401.635842][ T30] audit: type=1400 audit(2351.970:8273): avc: denied { execute } for pid=7267 comm="syz.4.10080" name="file1" dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2401.668552][ T4846] usb 3-1: string descriptor 0 read error: -71 [ 2401.711599][ T4846] usb 3-1: USB disconnect, device number 59 [ 2401.719788][ T30] audit: type=1400 audit(2351.979:8274): avc: denied { execute_no_trans } for pid=7267 comm="syz.4.10080" path="/199/file1" dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2402.095887][T25183] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2402.106132][T25183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.114138][T25183] usb 4-1: Product: syz [ 2402.119107][T25183] usb 4-1: Manufacturer: syz [ 2402.123748][T25183] usb 4-1: SerialNumber: syz [ 2402.508692][ T7292] tipc: Started in network mode [ 2402.532981][ T7292] tipc: Node identity ac14140f, cluster identity 4711 [ 2402.546167][ T7292] tipc: New replicast peer: 255.255.255.255 [ 2402.555490][ T7292] tipc: Enabled bearer , priority 10 [ 2403.068661][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10085'. [ 2403.806801][ T4846] tipc: Node number set to 2886997007 [ 2403.954908][T25183] cdc_ncm 4-1:1.0: failed to get mac address [ 2403.961651][T25183] cdc_ncm 4-1:1.0: bind() failure [ 2403.988983][T25183] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2404.018098][T25183] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2404.032141][T25183] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 2404.052899][T25183] usb 4-1: USB disconnect, device number 60 [ 2404.518204][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10092'. [ 2404.623667][ T30] audit: type=1400 audit(2355.075:8275): avc: denied { transfer } for pid=7306 comm="syz.4.10089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2404.762127][ T30] audit: type=1400 audit(2355.104:8276): avc: denied { associate } for pid=7311 comm="syz.0.10092" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2404.865969][ T7308] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2139632632 (8558530528 ns) > initial count (4400489236 ns). Using initial count to start timer. [ 2404.900333][ T30] audit: type=1400 audit(2355.225:8277): avc: denied { listen } for pid=7311 comm="syz.0.10092" lport=33362 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2405.056829][ T30] audit: type=1400 audit(2355.225:8278): avc: denied { accept } for pid=7311 comm="syz.0.10092" lport=33362 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2405.683255][ T7330] Cannot find add_set index 65532 as target [ 2409.019213][ T7362] loop8: detected capacity change from 0 to 7 [ 2409.182216][ T7362] Dev loop8: unable to read RDB block 7 [ 2409.897700][ T7362] loop8: unable to read partition table [ 2409.904640][ T7362] loop8: partition table beyond EOD, truncated [ 2409.914201][ T7362] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2410.309032][ T7371] vxcan1 speed is unknown, defaulting to 1000 [ 2410.311735][ T7374] hub 8-0:1.0: USB hub found [ 2410.321611][ T7374] hub 8-0:1.0: 1 port detected [ 2411.622657][ T7384] loop9: detected capacity change from 0 to 7 [ 2411.629855][ T7384] Dev loop9: unable to read RDB block 7 [ 2411.635541][ T7384] loop9: unable to read partition table [ 2411.641905][ T7384] loop9: partition table beyond EOD, truncated [ 2411.650156][ T7384] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2412.351560][ T7388] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2412.351560][ T7388] [ 2413.871472][T25183] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2414.109767][T25183] usb 1-1: Using ep0 maxpacket: 32 [ 2414.935859][T25183] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 2414.944161][T25183] usb 1-1: config 0 has no interface number 1 [ 2414.959632][T25183] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 2414.969203][T25183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.977453][T25183] usb 1-1: Product: syz [ 2414.981886][T25183] usb 1-1: Manufacturer: syz [ 2414.986602][T25183] usb 1-1: SerialNumber: syz [ 2415.010422][T25183] usb 1-1: config 0 descriptor?? [ 2415.148944][T25183] viperboard 1-1:0.61: version 0.00 found at bus 001 address 003 [ 2415.227480][T25183] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2415.237364][T25183] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 2415.314070][ T7399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2415.334773][T25183] viperboard 1-1:0.0: version 0.00 found at bus 001 address 003 [ 2415.347485][ T7399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2415.423817][T25183] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2415.456423][T25183] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 2415.467204][ T7414] netlink: 'syz.3.10120': attribute type 4 has an invalid length. [ 2415.514546][T25183] usb 1-1: USB disconnect, device number 3 [ 2415.919441][ T7422] tipc: Started in network mode [ 2415.925074][ T7422] tipc: Node identity ac14140f, cluster identity 4711 [ 2415.935229][ T7422] tipc: New replicast peer: 255.255.255.255 [ 2416.030992][ T7422] tipc: Enabled bearer , priority 10 [ 2416.470814][ T7429] netlink: 'syz.3.10123': attribute type 2 has an invalid length. [ 2416.478712][ T7429] netlink: 'syz.3.10123': attribute type 1 has an invalid length. [ 2416.491940][ T7429] netlink: 'syz.3.10123': attribute type 8 has an invalid length. [ 2417.319921][T25183] tipc: Node number set to 2886997007 [ 2417.674218][ T30] audit: type=1400 audit(2367.282:8279): avc: denied { ioctl } for pid=7443 comm="syz.3.10128" path="/245/file0/file0" dev="fuse" ino=64 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2418.591052][ T7450] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2418.591052][ T7450] [ 2418.634556][ T30] audit: type=1400 audit(2368.180:8280): avc: denied { mounton } for pid=7443 comm="syz.3.10128" path="/245/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2420.302584][ T7471] FAULT_INJECTION: forcing a failure. [ 2420.302584][ T7471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2420.317210][ T7471] CPU: 1 UID: 0 PID: 7471 Comm: syz.1.10134 Tainted: G L syzkaller #0 PREEMPT(full) [ 2420.317240][ T7471] Tainted: [L]=SOFTLOCKUP [ 2420.317248][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2420.317259][ T7471] Call Trace: [ 2420.317268][ T7471] [ 2420.317277][ T7471] dump_stack_lvl+0x16c/0x1f0 [ 2420.317307][ T7471] should_fail_ex+0x512/0x640 [ 2420.317340][ T7471] _copy_from_user+0x2e/0xd0 [ 2420.317369][ T7471] kstrtouint_from_user+0xd6/0x1d0 [ 2420.317390][ T7471] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2420.317409][ T7471] ? __lock_acquire+0x436/0x2890 [ 2420.317433][ T7471] ? perf_trace_local_sdata_chanctx+0xe10/0x1410 [ 2420.317458][ T7471] ? __schedule+0x114c/0x6150 [ 2420.317478][ T7471] ? lock_acquire+0x179/0x330 [ 2420.317505][ T7471] proc_fail_nth_write+0x83/0x220 [ 2420.317527][ T7471] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2420.317554][ T7471] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2420.317571][ T7471] vfs_write+0x2a0/0x11d0 [ 2420.317599][ T7471] ? irqentry_exit+0x1dd/0x8c0 [ 2420.317623][ T7471] ? __pfx_vfs_write+0x10/0x10 [ 2420.317645][ T7471] ? irqentry_exit+0x1dd/0x8c0 [ 2420.317666][ T7471] ? rcu_is_watching+0x12/0xc0 [ 2420.317695][ T7471] ? ksys_write+0xcd/0x250 [ 2420.317722][ T7471] ksys_write+0x12a/0x250 [ 2420.317744][ T7471] ? __pfx_ksys_write+0x10/0x10 [ 2420.317765][ T7471] ? rcu_is_watching+0x12/0xc0 [ 2420.317790][ T7471] do_syscall_64+0xcd/0xf80 [ 2420.317816][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2420.317836][ T7471] RIP: 0033:0x7f5eadf8e1ff [ 2420.317853][ T7471] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2420.317870][ T7471] RSP: 002b:00007f5eac1b4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2420.317889][ T7471] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5eadf8e1ff [ 2420.317901][ T7471] RDX: 0000000000000001 RSI: 00007f5eac1b40a0 RDI: 0000000000000007 [ 2420.317912][ T7471] RBP: 00007f5eac1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2420.317923][ T7471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2420.317933][ T7471] R13: 00007f5eae1e6218 R14: 00007f5eae1e6180 R15: 00007fff6e0d53a8 [ 2420.317960][ T7471] [ 2421.486739][ T7485] netlink: 'syz.3.10138': attribute type 2 has an invalid length. [ 2421.495426][ T7485] netlink: 'syz.3.10138': attribute type 1 has an invalid length. [ 2421.510908][ T7485] netlink: 'syz.3.10138': attribute type 8 has an invalid length. [ 2421.849499][ T7486] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2421.984851][ T7464] IPVS: Error connecting to the multicast addr [ 2422.674827][ T7496] overlayfs: missing 'lowerdir' [ 2422.823600][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10140'. [ 2423.132784][T25183] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2423.314354][T25183] usb 3-1: Using ep0 maxpacket: 32 [ 2423.324190][T25183] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2423.353968][T25183] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2423.386438][T25183] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2423.431955][T25183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.440767][T25183] usb 3-1: Product: syz [ 2423.455516][T25183] usb 3-1: Manufacturer: syz [ 2423.460584][T25183] usb 3-1: SerialNumber: syz [ 2424.207146][ T7520] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2424.207146][ T7520] [ 2427.252983][ T7542] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2427.252983][ T7542] [ 2428.136675][T25183] usb 3-1: cannot find UAC_HEADER [ 2428.661041][T25183] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2428.689363][T25183] usb 3-1: USB disconnect, device number 60 [ 2431.420269][ T7565] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2431.420269][ T7565] [ 2433.848068][ T7586] netlink: 'syz.3.10165': attribute type 2 has an invalid length. [ 2433.856745][ T7586] netlink: 'syz.3.10165': attribute type 1 has an invalid length. [ 2433.874643][ T7586] netlink: 'syz.3.10165': attribute type 8 has an invalid length. [ 2434.320842][ T7590] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2434.320842][ T7590] [ 2435.399050][ T7603] input: syz1 as /devices/virtual/input/input194 [ 2435.415940][ T30] audit: type=1400 audit(2383.876:8281): avc: denied { name_bind } for pid=7597 comm="syz.0.10170" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 2438.167003][ T30] audit: type=1400 audit(2386.458:8282): avc: denied { bind } for pid=7645 comm="syz.3.10182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2440.121868][ T7668] netlink: 'syz.4.10189': attribute type 1 has an invalid length. [ 2440.270970][ T7668] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 2442.554377][ T7700] netlink: 'syz.2.10196': attribute type 4 has an invalid length. [ 2442.835468][ T1184] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2443.017201][ T1184] usb 4-1: Using ep0 maxpacket: 32 [ 2443.199025][T25183] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2443.373976][T25183] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 2443.471142][T25183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.355588][ T7722] netlink: 'syz.2.10199': attribute type 4 has an invalid length. [ 2444.761968][T25183] pegasus 3-1:254.0: probe with driver pegasus failed with error -32 [ 2444.876746][ T30] audit: type=1400 audit(2392.725:8283): avc: denied { setopt } for pid=7725 comm="syz.0.10202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2444.953502][ T30] audit: type=1400 audit(2392.725:8284): avc: denied { write } for pid=7725 comm="syz.0.10202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2446.179156][ T4846] usb 3-1: USB disconnect, device number 61 [ 2446.819622][ T1184] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2446.840442][ T1184] usb 4-1: no configurations [ 2446.868548][ T7755] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2447.031735][ T1184] usb 4-1: can't read configurations, error -22 [ 2447.075062][ T7755] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2447.100880][ T30] audit: type=1400 audit(2394.802:8285): avc: denied { setopt } for pid=7747 comm="syz.1.10209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2447.853948][ T7771] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2448.966884][ T7789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10219'. [ 2448.993252][ T1184] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2449.167010][ T1184] usb 3-1: config 222 has an invalid interface number: 233 but max is 0 [ 2449.184970][ T1184] usb 3-1: config 222 has no interface number 0 [ 2449.203622][ T1184] usb 3-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 2449.214590][ T1184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.233709][ T1184] usb 3-1: Product: syz [ 2449.241830][ T1184] usb 3-1: Manufacturer: syz [ 2449.250335][ T1184] usb 3-1: SerialNumber: syz [ 2449.547002][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10217'. [ 2449.585904][ T1184] ldusb 3-1:222.233: Interrupt in endpoint not found [ 2449.599051][ T1184] usb 3-1: USB disconnect, device number 62 [ 2449.655752][ T7797] netlink: 'syz.3.10221': attribute type 2 has an invalid length. [ 2449.666191][ T7797] netlink: 'syz.3.10221': attribute type 1 has an invalid length. [ 2449.680902][ T7797] netlink: 'syz.3.10221': attribute type 8 has an invalid length. [ 2449.993339][ T7802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10223'. [ 2450.788978][ T7814] input: syz1 as /devices/virtual/input/input195 [ 2450.857001][ T7816] netlink: 'syz.2.10225': attribute type 2 has an invalid length. [ 2450.865745][ T7816] netlink: 'syz.2.10225': attribute type 1 has an invalid length. [ 2451.044677][ T7815] netlink: 'syz.2.10225': attribute type 8 has an invalid length. [ 2452.448707][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10231'. [ 2452.950834][ T7839] tipc: Enabling of bearer rejected, already enabled [ 2454.294257][ T30] audit: type=1400 audit(2401.537:8286): avc: denied { mount } for pid=7849 comm="syz.0.10236" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2454.370001][ T30] audit: type=1400 audit(2401.593:8287): avc: denied { unmount } for pid=4746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2454.419518][ T7856] overlayfs: missing 'lowerdir' [ 2454.530347][ T7859] vxcan1 speed is unknown, defaulting to 1000 [ 2454.959084][ T30] audit: type=1400 audit(2402.154:8288): avc: denied { setopt } for pid=7866 comm="syz.2.10240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2455.379436][ T4846] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2455.847478][ T7878] input: syz1 as /devices/virtual/input/input196 [ 2455.858370][ T4846] usb 1-1: config 0 has no interfaces? [ 2455.867464][ T4846] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2455.877636][ T4846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2455.890211][ T4846] usb 1-1: Product: syz [ 2455.894898][ T4846] usb 1-1: Manufacturer: syz [ 2455.900374][ T4846] usb 1-1: SerialNumber: syz [ 2455.917223][ T4846] usb 1-1: config 0 descriptor?? [ 2456.267810][ T4846] usb 1-1: USB disconnect, device number 4 [ 2456.685658][T26845] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 2457.624412][ T30] audit: type=1400 audit(2404.287:8289): avc: denied { recv } for pid=7900 comm="syz.0.10249" saddr=10.128.0.169 src=42204 daddr=10.128.0.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2457.814267][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10248'. [ 2457.967008][ T7916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10253'. [ 2458.326767][ T4846] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2458.339212][T25183] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2458.351772][ T7922] input: syz1 as /devices/virtual/input/input197 [ 2458.618932][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2458.626089][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2458.857946][ T7931] input: syz0 as /devices/virtual/input/input198 [ 2459.343670][ T4846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2459.364109][ T4846] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2459.429860][ T4846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2459.439396][T25183] usb 3-1: Using ep0 maxpacket: 8 [ 2459.457332][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2459.473953][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2459.485684][ T4846] usb 1-1: config 0 descriptor?? [ 2459.493037][ T4846] pwc: Askey VC010 type 2 USB webcam detected. [ 2459.499961][T25183] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2459.527018][T25183] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 2459.544098][T25183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2459.730834][T25183] usb 3-1: config 0 descriptor?? [ 2459.842015][ T7943] netlink: 'syz.4.10258': attribute type 2 has an invalid length. [ 2459.851261][ T7943] netlink: 'syz.4.10258': attribute type 1 has an invalid length. [ 2459.864220][ T7943] netlink: 'syz.4.10258': attribute type 8 has an invalid length. [ 2460.148324][ T4846] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2460.161783][ T4846] pwc: recv_control_msg error -32 req 02 val 2700 [ 2460.171894][ T4846] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2460.176704][ T7912] xfrm1: entered promiscuous mode [ 2460.206469][ T7947] netlink: 'syz.1.10263': attribute type 2 has an invalid length. [ 2460.243925][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2460.254210][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2460.284875][ T7949] FAULT_INJECTION: forcing a failure. [ 2460.284875][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.298868][ T7949] CPU: 0 UID: 0 PID: 7949 Comm: syz.3.10262 Tainted: G L syzkaller #0 PREEMPT(full) [ 2460.298897][ T7949] Tainted: [L]=SOFTLOCKUP [ 2460.298903][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2460.298915][ T7949] Call Trace: [ 2460.298922][ T7949] [ 2460.298929][ T7949] dump_stack_lvl+0x16c/0x1f0 [ 2460.298957][ T7949] should_fail_ex+0x512/0x640 [ 2460.298984][ T7949] ? fs_reclaim_acquire+0xae/0x150 [ 2460.299012][ T7949] should_failslab+0xc2/0x120 [ 2460.299037][ T7949] __kmalloc_noprof+0xeb/0x910 [ 2460.299064][ T7949] ? rcu_is_watching+0x12/0xc0 [ 2460.299083][ T7949] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2460.299113][ T7949] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2460.299138][ T7949] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2460.299166][ T7949] ? tomoyo_profile+0x47/0x60 [ 2460.299195][ T7949] tomoyo_path_number_perm+0x245/0x580 [ 2460.299216][ T7949] ? tomoyo_path_number_perm+0x237/0x580 [ 2460.299238][ T7949] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2460.299287][ T7949] ? find_held_lock+0x2b/0x80 [ 2460.299314][ T7949] ? hook_file_ioctl_common+0x144/0x410 [ 2460.299348][ T7949] ? __fget_files+0x20e/0x3c0 [ 2460.299377][ T7949] security_file_ioctl+0x9b/0x240 [ 2460.299408][ T7949] __x64_sys_ioctl+0xb7/0x210 [ 2460.299433][ T7949] do_syscall_64+0xcd/0xf80 [ 2460.299458][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2460.299477][ T7949] RIP: 0033:0x7f96e6b8f749 [ 2460.299492][ T7949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2460.299510][ T7949] RSP: 002b:00007f96e7a36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2460.299527][ T7949] RAX: ffffffffffffffda RBX: 00007f96e6de6180 RCX: 00007f96e6b8f749 [ 2460.299539][ T7949] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000009 [ 2460.299550][ T7949] RBP: 00007f96e7a36090 R08: 0000000000000000 R09: 0000000000000000 [ 2460.299561][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2460.299572][ T7949] R13: 00007f96e6de6218 R14: 00007f96e6de6180 R15: 00007fffa9cdea08 [ 2460.299599][ T7949] [ 2460.299624][ T7949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2460.523145][ T4846] pwc: recv_control_msg error -32 req 04 val 1000 [ 2460.603769][ T7952] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10253'. [ 2460.639069][ T30] audit: type=1400 audit(2407.477:8290): avc: denied { create } for pid=7946 comm="syz.1.10263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2460.639860][T25183] logitech 0003:046D:C293.003A: unknown main item tag 0x0 [ 2460.670662][ T4846] pwc: recv_control_msg error -32 req 04 val 1300 [ 2460.687275][ T4846] pwc: recv_control_msg error -32 req 04 val 1400 [ 2460.701250][T25183] logitech 0003:046D:C293.003A: unknown main item tag 0x0 [ 2460.712917][T25183] logitech 0003:046D:C293.003A: unknown main item tag 0x0 [ 2460.721294][T25183] logitech 0003:046D:C293.003A: unknown main item tag 0x0 [ 2460.729444][T25183] logitech 0003:046D:C293.003A: unknown main item tag 0x0 [ 2460.730418][ T7956] loop8: detected capacity change from 0 to 7 [ 2460.737644][T25183] logitech 0003:046D:C293.003A: unknown main item tag 0x0 [ 2460.751985][T25183] logitech 0003:046D:C293.003A: unknown main item tag 0x0 [ 2460.760937][ T7956] Dev loop8: unable to read RDB block 7 [ 2460.762112][T25183] logitech 0003:046D:C293.003A: unknown main item tag 0x0 [ 2460.774106][ T7956] loop8: unable to read partition table [ 2460.774992][T25183] logitech 0003:046D:C293.003A: unknown main item tag 0x0 [ 2460.790204][T25183] logitech 0003:046D:C293.003A: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.2-1/input0 [ 2460.802801][T25183] logitech 0003:046D:C293.003A: no inputs found [ 2460.807161][ T7956] loop8: partition table beyond EOD, truncated [ 2460.827463][ T7956] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2460.946791][ T4720] usb 3-1: USB disconnect, device number 63 [ 2460.957591][ T4846] pwc: recv_control_msg error -71 req 02 val 2100 [ 2460.986683][ T30] audit: type=1400 audit(2407.795:8291): avc: denied { bind } for pid=7957 comm="syz.3.10265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2461.015358][T26845] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2461.015628][T25183] hid-generic 0002:0009:0800.003B: item fetching failed at offset 3/4 [ 2461.026167][T26845] Bluetooth: hci4: Injecting HCI hardware error event [ 2461.041819][ T4846] pwc: recv_control_msg error -71 req 04 val 1500 [ 2461.044479][ T2122] Bluetooth: hci4: hardware error 0x00 [ 2461.049582][ T4846] pwc: recv_control_msg error -71 req 02 val 2500 [ 2461.095161][T25160] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2461.101932][T26845] Bluetooth: hci1: command 0x0406 tx timeout [ 2461.110533][T25160] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 2461.121745][ T30] audit: type=1400 audit(2407.795:8292): avc: denied { listen } for pid=7957 comm="syz.3.10265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2461.140354][T25183] hid-generic 0002:0009:0800.003B: probe with driver hid-generic failed with error -22 [ 2461.153874][ T30] audit: type=1400 audit(2407.869:8293): avc: denied { listen } for pid=7957 comm="syz.3.10265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2461.176681][ T4846] pwc: recv_control_msg error -71 req 02 val 2400 [ 2461.219914][ T4846] pwc: recv_control_msg error -71 req 02 val 2600 [ 2461.239224][ T30] audit: type=1400 audit(2407.869:8294): avc: denied { accept } for pid=7957 comm="syz.3.10265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2461.260975][ T4846] pwc: recv_control_msg error -71 req 02 val 2900 [ 2461.271179][ T7963] fuse: Unknown parameter 'grou00000000000000000000' [ 2461.278609][ T4846] pwc: recv_control_msg error -71 req 02 val 2800 [ 2461.302416][ T7964] netlink: 'syz.4.10266': attribute type 4 has an invalid length. [ 2461.303916][ T4846] pwc: recv_control_msg error -71 req 04 val 1100 [ 2461.324666][ T4846] pwc: recv_control_msg error -71 req 04 val 1200 [ 2461.344686][ T30] audit: type=1400 audit(2408.131:8295): avc: denied { ioctl } for pid=7965 comm="syz.1.10268" path="socket:[162086]" dev="sockfs" ino=162086 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2461.373157][ T4846] pwc: Registered as video103. [ 2461.379141][ T4846] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input199 [ 2461.394685][ T7966] TCP: TCP_TX_DELAY enabled [ 2461.405623][ T30] audit: type=1400 audit(2408.131:8296): avc: denied { watch watch_reads } for pid=7965 comm="syz.1.10268" path="/224" dev="tmpfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2461.439937][ T4846] usb 1-1: USB disconnect, device number 5 [ 2462.978975][ T4846] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2462.992525][ T7995] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2462.999695][ T7995] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2463.009226][ T7995] vhci_hcd vhci_hcd.0: Device attached [ 2463.036991][ T30] audit: type=1400 audit(2409.712:8297): avc: denied { write } for pid=7993 comm="syz.2.10275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2463.239281][ T2122] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2463.420233][ T2122] Bluetooth: hci5: command 0x0406 tx timeout [ 2463.436401][T25185] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2463.445037][T25183] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 2463.511133][ T4846] usb 4-1: Using ep0 maxpacket: 8 [ 2463.677892][ T4846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2463.736346][ T4846] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2463.810915][ T4846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2463.918504][T25160] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2464.285838][T25160] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 2464.294659][ T30] audit: type=1400 audit(2410.002:8298): avc: denied { write } for pid=7998 comm="syz.4.10276" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2464.320216][ T30] audit: type=1400 audit(2410.012:8299): avc: denied { map } for pid=7998 comm="syz.4.10276" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2464.361468][ T4846] usb 4-1: config 0 descriptor?? [ 2464.401001][ T4846] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2464.460004][ T8007] fuse: Unknown parameter 'grou00000000000000000000' [ 2464.537665][ T7996] vhci_hcd: connection reset by peer [ 2464.543797][T31098] vhci_hcd vhci_hcd.2: stop threads [ 2464.552898][T31098] vhci_hcd vhci_hcd.2: release socket [ 2464.576483][T31098] vhci_hcd vhci_hcd.2: disconnect device [ 2465.270103][ T4846] gspca_vc032x: reg_w err -110 [ 2465.276075][ T4846] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 2465.650644][ T8023] netlink: 'syz.1.10282': attribute type 4 has an invalid length. [ 2465.880050][ T8031] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2466.963022][ T2122] Bluetooth: hci3: command 0x0406 tx timeout [ 2467.261347][ T8043] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2467.261347][ T8043] [ 2467.277419][T25160] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 2467.284109][T25160] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 2467.353966][ T8047] fuse: Unknown parameter 'grou00000000000000000000' [ 2467.389531][T25185] usb 4-1: USB disconnect, device number 63 [ 2467.486429][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2467.486446][ T30] audit: type=1400 audit(2413.875:8301): avc: denied { wake_alarm } for pid=8053 comm="syz.4.10292" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2468.479827][ T8064] netlink: 'syz.4.10295': attribute type 2 has an invalid length. [ 2468.488526][ T8064] netlink: 'syz.4.10295': attribute type 1 has an invalid length. [ 2468.502972][ T8064] netlink: 'syz.4.10295': attribute type 8 has an invalid length. [ 2469.547927][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10297'. [ 2469.560997][ T8079] 9p: Bad value for 'wfdno' [ 2469.752722][T25183] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2469.975916][ T30] audit: type=1400 audit(2416.204:8302): avc: denied { ioctl } for pid=8087 comm="syz.3.10299" path="socket:[163502]" dev="sockfs" ino=163502 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2470.058630][ T8094] vivid-007: disconnect [ 2470.785686][ T8093] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2470.785686][ T8093] [ 2470.794738][ T8087] vivid-007: reconnect [ 2470.898331][ T30] audit: type=1400 audit(2416.288:8303): avc: denied { create } for pid=8087 comm="syz.3.10299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2470.982194][ T8098] fuse: Unknown parameter 'group_i00000000000000000000' [ 2471.188085][ T30] audit: type=1400 audit(2417.336:8304): avc: denied { write } for pid=8100 comm="syz.3.10304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2471.571936][ T1184] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2471.878528][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10307'. [ 2472.352689][T25183] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2472.619487][ T1184] usb 1-1: Using ep0 maxpacket: 16 [ 2472.629505][ T1184] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2472.655222][ T1184] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2472.669071][T25183] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2472.679171][T25183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.688637][T25183] usb 4-1: Product: syz [ 2472.693217][T25183] usb 4-1: Manufacturer: syz [ 2472.698368][T25183] usb 4-1: SerialNumber: syz [ 2472.704627][ T1184] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 2472.719943][T25183] usb 4-1: config 0 descriptor?? [ 2473.156015][ T1184] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2473.213923][T25183] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2473.227902][ T1184] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2473.228328][T25183] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2473.252444][T25183] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2473.261384][ T1184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.262761][T25183] usb 4-1: media controller created [ 2473.297779][ T1184] usb 1-1: config 0 descriptor?? [ 2473.480151][T25183] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2473.527326][T25183] DVB: Unable to find symbol mt352_attach() [ 2473.597502][ T1184] usbhid 1-1:0.0: can't add hid device: -71 [ 2473.618772][ T1184] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2473.662761][ T1184] usb 1-1: USB disconnect, device number 6 [ 2473.711950][T25183] DVB: Unable to find symbol nxt6000_attach() [ 2473.718649][T25183] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2473.731183][T25183] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input200 [ 2473.884885][T25183] dvb-usb: schedule remote query interval to 1000 msecs. [ 2473.915722][T25183] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2474.433137][ T8136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10311'. [ 2474.529476][ T8137] 9p: Bad value for 'wfdno' [ 2474.745036][T25183] dvb-usb: bulk message failed: -22 (7/0) [ 2474.751544][T25183] dvb-usb: bulk message failed: -22 (7/0) [ 2474.760680][T25183] usb 4-1: USB disconnect, device number 64 [ 2474.926688][T25183] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2474.930415][ T8144] fuse: Unknown parameter 'group_i00000000000000000000' [ 2476.406839][ T8149] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2476.406839][ T8149] [ 2476.834456][ T8153] loop8: detected capacity change from 0 to 7 [ 2476.864606][ T8153] Dev loop8: unable to read RDB block 7 [ 2476.877110][ T8153] loop8: unable to read partition table [ 2476.883486][ T8153] loop8: partition table beyond EOD, truncated [ 2476.890504][ T8153] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2478.191159][ T8176] tipc: Started in network mode [ 2478.196856][ T8176] tipc: Node identity ac14140f, cluster identity 4711 [ 2479.097553][ T8176] tipc: New replicast peer: 255.255.255.255 [ 2479.150714][ T8176] tipc: Enabled bearer , priority 10 [ 2480.449418][T25183] tipc: Node number set to 2886997007 [ 2481.526940][ T8194] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 2481.526940][ T8194] [ 2482.238415][ T8201] FAULT_INJECTION: forcing a failure. [ 2482.238415][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.252786][ T8201] CPU: 0 UID: 0 PID: 8201 Comm: syz.4.10327 Tainted: G L syzkaller #0 PREEMPT(full) [ 2482.252818][ T8201] Tainted: [L]=SOFTLOCKUP [ 2482.252824][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2482.252836][ T8201] Call Trace: [ 2482.252843][ T8201] [ 2482.252852][ T8201] dump_stack_lvl+0x16c/0x1f0 [ 2482.252880][ T8201] should_fail_ex+0x512/0x640 [ 2482.252908][ T8201] ? __kmalloc_cache_noprof+0x5f/0x800 [ 2482.252940][ T8201] should_failslab+0xc2/0x120 [ 2482.252966][ T8201] __kmalloc_cache_noprof+0x80/0x800 [ 2482.253000][ T8201] ? lockdep_init_map_type+0x5c/0x270 [ 2482.253024][ T8201] ? rfcomm_dev_ioctl+0xa81/0x1d70 [ 2482.253056][ T8201] ? rfcomm_dev_ioctl+0xa81/0x1d70 [ 2482.253083][ T8201] rfcomm_dev_ioctl+0xa81/0x1d70 [ 2482.253111][ T8201] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 2482.253131][ T8201] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 2482.253157][ T8201] ? __pfx___schedule+0x10/0x10 [ 2482.253186][ T8201] ? irqentry_exit+0x1dd/0x8c0 [ 2482.253213][ T8201] rfcomm_sock_ioctl+0xd6/0x100 [ 2482.253237][ T8201] sock_do_ioctl+0x118/0x280 [ 2482.253262][ T8201] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2482.253292][ T8201] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2482.253315][ T8201] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2482.253346][ T8201] sock_ioctl+0x227/0x6b0 [ 2482.253371][ T8201] ? __pfx_sock_ioctl+0x10/0x10 [ 2482.253394][ T8201] ? hook_file_ioctl_common+0x144/0x410 [ 2482.253430][ T8201] ? selinux_file_ioctl+0x180/0x270 [ 2482.253453][ T8201] ? selinux_file_ioctl+0xb4/0x270 [ 2482.253478][ T8201] ? __pfx_sock_ioctl+0x10/0x10 [ 2482.253504][ T8201] __x64_sys_ioctl+0x18e/0x210 [ 2482.253528][ T8201] do_syscall_64+0xcd/0xf80 [ 2482.253553][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2482.253572][ T8201] RIP: 0033:0x7f78ea98f749 [ 2482.253587][ T8201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2482.253604][ T8201] RSP: 002b:00007f78eb7ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2482.253622][ T8201] RAX: ffffffffffffffda RBX: 00007f78eabe6180 RCX: 00007f78ea98f749 [ 2482.253634][ T8201] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000009 [ 2482.253645][ T8201] RBP: 00007f78eb7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 2482.253656][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2482.253667][ T8201] R13: 00007f78eabe6218 R14: 00007f78eabe6180 R15: 00007ffd4d992de8 [ 2482.253694][ T8201] [ 2482.642428][ T1184] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 2482.652432][ T1184] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2483.030026][ T30] audit: type=1400 audit(2428.411:8305): avc: denied { append } for pid=8209 comm="syz.4.10331" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2483.200931][ T30] audit: type=1400 audit(2428.570:8306): avc: denied { map } for pid=8209 comm="syz.4.10331" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2483.216376][ T8216] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 2483.392872][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10332'. [ 2483.413080][ T8217] 9p: Bad value for 'wfdno' [ 2483.890863][ T30] audit: type=1400 audit(2428.570:8307): avc: denied { execute } for pid=8209 comm="syz.4.10331" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2484.614627][T25183] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2484.768434][ T8236] fuse: Unknown parameter 'group_i00000000000000000000' [ 2484.811365][ T30] audit: type=1400 audit(2430.085:8308): avc: denied { bind } for pid=8239 comm="syz.2.10338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2485.165141][T25183] usb 1-1: Using ep0 maxpacket: 32 [ 2485.173343][ T30] audit: type=1400 audit(2430.104:8309): avc: denied { create } for pid=8239 comm="syz.2.10338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2485.196428][T25183] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 2485.209996][T25183] usb 1-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 2486.210578][T25183] usb 1-1: config 0 has no interface number 0 [ 2486.250040][T25183] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2486.289413][T25183] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2486.310495][T25183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.325039][T25183] usb 1-1: Product: syz [ 2486.329634][T25183] usb 1-1: Manufacturer: syz [ 2486.417707][T25183] usb 1-1: SerialNumber: syz [ 2486.454072][T25183] usb 1-1: config 0 descriptor?? [ 2488.643939][ T8264] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 2488.864420][T25183] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 2488.875185][T25183] usb 1-1: USB disconnect, device number 7 [ 2488.935859][T25185] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2489.125215][T25185] usb 3-1: config 222 has an invalid interface number: 233 but max is 0 [ 2489.157328][T25185] usb 3-1: config 222 has no interface number 0 [ 2489.180842][T25185] usb 3-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 2489.201419][T25185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2489.210416][T25185] usb 3-1: Product: syz [ 2489.221418][T25185] usb 3-1: Manufacturer: syz [ 2489.250360][T25185] usb 3-1: SerialNumber: syz [ 2489.882719][T25185] ldusb 3-1:222.233: Interrupt in endpoint not found [ 2490.506628][T25185] usb 3-1: USB disconnect, device number 65 [ 2493.019269][ T8305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10354'. [ 2493.566376][ T8308] FAULT_INJECTION: forcing a failure. [ 2493.566376][ T8308] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.085359][ T8308] CPU: 1 UID: 0 PID: 8308 Comm: syz.2.10356 Tainted: G L syzkaller #0 PREEMPT(full) [ 2494.085391][ T8308] Tainted: [L]=SOFTLOCKUP [ 2494.085397][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2494.085408][ T8308] Call Trace: [ 2494.085415][ T8308] [ 2494.085422][ T8308] dump_stack_lvl+0x16c/0x1f0 [ 2494.085450][ T8308] should_fail_ex+0x512/0x640 [ 2494.085476][ T8308] ? __kmalloc_cache_noprof+0x5f/0x800 [ 2494.085503][ T8308] should_failslab+0xc2/0x120 [ 2494.085518][ T8308] __kmalloc_cache_noprof+0x80/0x800 [ 2494.085537][ T8308] ? __io_uring_add_tctx_node+0x132/0x500 [ 2494.085556][ T8308] ? __io_uring_add_tctx_node+0x132/0x500 [ 2494.085572][ T8308] __io_uring_add_tctx_node+0x132/0x500 [ 2494.085588][ T8308] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 2494.085606][ T8308] ? __fget_files+0x20e/0x3c0 [ 2494.085630][ T8308] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 2494.085648][ T8308] __do_sys_io_uring_enter+0x1242/0x1630 [ 2494.085663][ T8308] ? __fget_files+0x20e/0x3c0 [ 2494.085677][ T8308] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 2494.085691][ T8308] ? fput+0x70/0xf0 [ 2494.085701][ T8308] ? ksys_write+0x1ac/0x250 [ 2494.085715][ T8308] ? __pfx_ksys_write+0x10/0x10 [ 2494.085733][ T8308] do_syscall_64+0xcd/0xf80 [ 2494.085749][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2494.085761][ T8308] RIP: 0033:0x7fdbe0b8f749 [ 2494.085770][ T8308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2494.085782][ T8308] RSP: 002b:00007fdbe1ad9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2494.085795][ T8308] RAX: ffffffffffffffda RBX: 00007fdbe0de5fa0 RCX: 00007fdbe0b8f749 [ 2494.085802][ T8308] RDX: 0000000000000020 RSI: 00000000000022d0 RDI: 0000000000000007 [ 2494.085808][ T8308] RBP: 00007fdbe1ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 2494.085815][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2494.085821][ T8308] R13: 00007fdbe0de6038 R14: 00007fdbe0de5fa0 R15: 00007ffd30d4b558 [ 2494.085836][ T8308] [ 2495.043909][ T8333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10361'. [ 2495.177853][ T8335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10360'. [ 2496.619099][ T30] audit: type=1400 audit(2441.123:8310): avc: denied { mount } for pid=8340 comm="syz.2.10363" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2496.644319][ T8341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2496.654749][ T8341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2497.801768][ T30] audit: type=1400 audit(2441.151:8311): avc: denied { mounton } for pid=8340 comm="syz.2.10363" path="/181/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 2497.917774][ T30] audit: type=1400 audit(2442.348:8312): avc: denied { unmount } for pid=4372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2498.298411][T25185] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2498.931210][T25185] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 2498.983825][T25185] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 2498.995020][T25185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2499.014701][T25185] usb 4-1: Product: syz [ 2499.023789][T25185] usb 4-1: Manufacturer: syz [ 2499.033388][T25185] usb 4-1: SerialNumber: syz [ 2499.051486][T25185] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 2499.060300][T25185] dvb-usb: bulk message failed: -22 (3/0) [ 2499.099850][T25185] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2499.120751][T25185] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 2499.136467][T25185] usb 4-1: media controller created [ 2499.151689][T25185] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2499.549466][T25185] DVB: Unable to find symbol mt352_attach() [ 2499.556394][ T30] audit: type=1400 audit(2443.873:8313): avc: denied { ioctl } for pid=8365 comm="syz.3.10371" path="socket:[163995]" dev="sockfs" ino=163995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2499.618386][T25185] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 2499.648836][T25185] dvb-usb: bulk message failed: -22 (3/0) [ 2499.688105][T25185] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 2499.829621][ T8389] loop8: detected capacity change from 0 to 7 [ 2499.843357][ T8389] Dev loop8: unable to read RDB block 7 [ 2499.854396][ T8389] loop8: unable to read partition table [ 2499.865342][ T8389] loop8: partition table beyond EOD, truncated [ 2499.877156][ T8389] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2501.487460][T25160] usb 4-1: USB disconnect, device number 65 [ 2501.537019][T25160] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 2501.560069][ T8413] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2502.584565][ T8422] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10387'. [ 2502.623258][ T30] audit: type=1400 audit(2446.726:8314): avc: denied { map } for pid=8424 comm="syz.2.10390" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2503.112169][ T8436] kvm: pic: level sensitive irq not supported [ 2503.179010][ T8440] tipc: Enabling of bearer rejected, already enabled [ 2503.462541][ T8447] hub 1-0:1.0: USB hub found [ 2503.471890][ T8447] hub 1-0:1.0: 1 port detected [ 2505.048811][ T30] audit: type=1400 audit(2448.541:8315): avc: denied { ioctl } for pid=8460 comm="syz.2.10397" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2506.057809][ T8481] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 2506.161727][ T8486] netlink: 'syz.3.10405': attribute type 11 has an invalid length. [ 2506.172466][ T8486] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.10405'. [ 2506.334386][ T8492] loop8: detected capacity change from 0 to 7 [ 2506.362233][ T8492] Dev loop8: unable to read RDB block 7 [ 2506.375967][ T8492] loop8: unable to read partition table [ 2506.384285][ T8492] loop8: partition table beyond EOD, truncated [ 2506.393783][ T8492] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2506.629792][ T8505] input: syz1 as /devices/virtual/input/input201 [ 2506.649792][T25185] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2506.829501][T25185] usb 3-1: Using ep0 maxpacket: 16 [ 2506.930490][T25185] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2506.945815][T25185] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2506.962936][T25185] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2506.973700][T25185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.985905][T25185] usb 3-1: config 0 descriptor?? [ 2507.107569][T25183] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2507.713660][T25185] nzxt-smart2 0003:1E71:2009.003D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 2507.726758][T25183] usb 1-1: Using ep0 maxpacket: 16 [ 2507.745726][ T8516] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 2508.155967][T25183] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2508.693050][T25183] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 2508.706246][T25183] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 2509.740105][T25183] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 2509.752530][T25183] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2509.771909][T25160] usb 3-1: USB disconnect, device number 66 [ 2509.871536][T25183] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 2509.893423][ T30] audit: type=1800 audit(2453.536:8316): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.10421" name="bus" dev="overlay" ino=1063 res=0 errno=0 [ 2509.917097][T25183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2509.925938][T25183] usb 1-1: Product: syz [ 2509.935115][T25183] usb 1-1: config 0 descriptor?? [ 2509.941988][T25183] usb 1-1: can't set config #0, error -71 [ 2509.949791][T25183] usb 1-1: USB disconnect, device number 8 [ 2510.373366][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10420'. [ 2510.604576][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10424'. [ 2513.324121][ T30] audit: type=1400 audit(2456.753:8317): avc: denied { connect } for pid=8587 comm="syz.0.10436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2514.325834][ T8599] netlink: 'syz.1.10439': attribute type 27 has an invalid length. [ 2514.336414][ T8599] syz_tun: left promiscuous mode [ 2514.359918][ T8599] geneve2: left promiscuous mode [ 2514.373235][ T8599] geneve2: left allmulticast mode [ 2514.388310][ T8599] bridge0: left promiscuous mode [ 2514.401118][ T8599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8599 comm=syz.1.10439 [ 2514.447607][ T8600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8600 comm=syz.1.10439 [ 2515.219775][ T8616] trusted_key: syz.1.10445 sent an empty control message without MSG_MORE. [ 2515.378562][ T8621] fuse: Unknown parameter '·Üò]ßn­V)ýQ€pêMKîð7wõUMΕ0x0000000000000005' [ 2515.457486][T25160] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2515.638467][T25160] usb 4-1: Using ep0 maxpacket: 8 [ 2516.089455][T25160] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2516.104346][T25160] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2516.143005][T25160] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 2516.159919][T25160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.178381][T25160] usb 4-1: config 0 descriptor?? [ 2516.195979][ T8631] input: syz1 as /devices/virtual/input/input202 [ 2516.449231][ T30] audit: type=1400 audit(2459.672:8318): avc: denied { read } for pid=8637 comm="syz.4.10453" path="socket:[164783]" dev="sockfs" ino=164783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2516.484720][ T8636] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2516.536709][ T30] audit: type=1400 audit(2459.709:8319): avc: denied { getopt } for pid=8637 comm="syz.4.10453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2516.637784][T25160] razer 0003:1532:011B.003E: item fetching failed at offset 4/5 [ 2516.704818][T25160] razer 0003:1532:011B.003E: probe with driver razer failed with error -22 [ 2516.863264][T25183] usb 4-1: USB disconnect, device number 66 [ 2521.293790][T25183] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 2521.715099][ T30] audit: type=1400 audit(2464.601:8320): avc: denied { unmount } for pid=4191 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2521.818313][T25183] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 2521.827839][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2521.838707][T25183] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2522.010360][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2522.021775][T25183] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2522.120297][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2522.131652][T25183] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2522.644382][ T8694] tipc: Enabling of bearer rejected, already enabled [ 2522.660344][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2522.671780][T25183] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2522.689020][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2522.701345][T25183] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2522.717987][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2522.729651][T25183] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2522.744903][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2522.757091][T25183] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2522.845908][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2522.878128][T25183] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2522.897378][T25183] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2522.915750][T25183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2522.951771][T25183] usb 3-1: config 0 descriptor?? [ 2524.301394][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2524.308389][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2525.226536][T25183] usbhid 3-1:0.0: can't add hid device: -71 [ 2525.228388][ T8730] xt_policy: neither incoming nor outgoing policy selected [ 2525.240052][T25183] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2525.264014][T25183] usb 3-1: USB disconnect, device number 67 [ 2528.940446][ T8792] netlink: 'syz.1.10493': attribute type 4 has an invalid length. [ 2528.958434][ T8794] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2529.195700][ T8798] ubi: mtd0 is already attached to ubi31 [ 2532.283969][ T30] audit: type=1400 audit(2474.404:8321): avc: denied { mount } for pid=8825 comm="syz.4.10503" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2534.125396][ T8860] tipc: Enabling of bearer rejected, already enabled [ 2534.751658][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10514'. [ 2537.364379][ T30] audit: type=1400 audit(2479.240:8322): avc: denied { setopt } for pid=8885 comm="syz.0.10518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2537.489362][ T30] audit: type=1400 audit(2479.269:8323): avc: denied { ioctl } for pid=8885 comm="syz.0.10518" path="socket:[167053]" dev="sockfs" ino=167053 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2537.577491][ T30] audit: type=1400 audit(2479.278:8324): avc: denied { map } for pid=8885 comm="syz.0.10518" path="socket:[166185]" dev="sockfs" ino=166185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2539.285587][ T8922] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10528'. [ 2540.461628][ T8941] 9p: Bad value for 'rfdno' [ 2542.782645][ T8965] overlayfs: failed to resolve './file1': -2 [ 2545.043300][ T8984] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.10545'. [ 2545.291593][ T8994] input: syz1 as /devices/virtual/input/input203 [ 2546.053427][ T30] audit: type=1326 audit(2487.369:8325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.1.10550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eadf8f749 code=0x7fc00000 [ 2547.184640][ T9022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10557'. [ 2547.274918][ T9026] netlink: 'syz.2.10558': attribute type 33 has an invalid length. [ 2547.296271][ T9026] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10558'. [ 2548.244401][ T9039] 9pnet: Found fid 0 not clunked [ 2549.317397][ T9055] fuse: Bad value for 'fd' [ 2549.809159][ T9060] 9p: Bad value for 'wfdno' [ 2554.154265][ T9083] fuse: Bad value for 'fd' [ 2554.187230][ T30] audit: type=1800 audit(2494.974:8326): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.10576" name="bus" dev="overlay" ino=1886 res=0 errno=0 [ 2555.257895][T25185] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2555.633590][T25185] usb 4-1: config 222 has an invalid interface number: 233 but max is 0 [ 2555.643155][T25185] usb 4-1: config 222 has no interface number 0 [ 2555.652212][T25185] usb 4-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 2555.662923][T25185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2555.672201][T25185] usb 4-1: Product: syz [ 2555.677303][T25185] usb 4-1: Manufacturer: syz [ 2555.682459][T25185] usb 4-1: SerialNumber: syz [ 2555.979065][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10582'. [ 2556.039878][T25185] ldusb 4-1:222.233: Interrupt in endpoint not found [ 2556.060232][T25185] usb 4-1: USB disconnect, device number 67 [ 2557.156413][ T9125] loop8: detected capacity change from 0 to 7 [ 2557.164052][ T9125] Dev loop8: unable to read RDB block 7 [ 2557.170254][ T9125] loop8: unable to read partition table [ 2557.177077][ T9125] loop8: partition table beyond EOD, truncated [ 2557.184189][ T9125] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2557.280615][ T9127] loop9: detected capacity change from 0 to 7 [ 2557.288930][ T9127] Dev loop9: unable to read RDB block 7 [ 2557.296268][ T9127] loop9: unable to read partition table [ 2557.303005][ T9127] loop9: partition table beyond EOD, truncated [ 2557.309778][ T9127] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2557.467203][ T9130] fuse: Bad value for 'fd' [ 2560.662633][ T9179] 9p: Bad value for 'wfdno' [ 2561.814245][ T30] audit: type=1400 audit(2501.587:8327): avc: denied { ioctl } for pid=9173 comm="syz.1.10604" path="socket:[167942]" dev="sockfs" ino=167942 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2562.074227][ T9184] tipc: Started in network mode [ 2562.080114][ T9184] tipc: Node identity ac14140f, cluster identity 4711 [ 2562.090015][ T9184] tipc: New replicast peer: 255.255.255.255 [ 2562.227698][ T9184] tipc: Enabled bearer , priority 10 [ 2562.268943][ T9190] netlink: 'syz.2.10610': attribute type 4 has an invalid length. [ 2562.380936][ T9193] netlink: 'syz.4.10608': attribute type 10 has an invalid length. [ 2562.789361][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10612'. [ 2562.848973][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10612'. [ 2562.965529][ T9204] tipc: Enabling of bearer rejected, failed to enable media [ 2563.404145][T25185] tipc: Node number set to 2886997007 [ 2566.384280][ T9248] input: syz1 as /devices/virtual/input/input204 [ 2571.531878][ T9285] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2573.162560][ T30] audit: type=1400 audit(2512.728:8328): avc: denied { create } for pid=9312 comm="syz.2.10639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2573.212163][ T30] audit: type=1400 audit(2512.746:8329): avc: denied { sys_admin } for pid=9312 comm="syz.2.10639" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2573.711015][ T9318] 9p: Bad value for 'wfdno' [ 2575.244668][ T9343] netlink: 'syz.0.10647': attribute type 2 has an invalid length. [ 2575.253389][ T9343] netlink: 'syz.0.10647': attribute type 1 has an invalid length. [ 2575.263983][ T9343] netlink: 'syz.0.10647': attribute type 8 has an invalid length. [ 2575.687539][ T9345] overlayfs: failed to resolve './file1': -2 [ 2576.583171][ T9354] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10651'. [ 2576.643592][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10651'. [ 2576.824556][ T30] audit: type=1400 audit(2516.142:8330): avc: denied { read append } for pid=9356 comm="syz.2.10653" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2576.866140][ T30] audit: type=1400 audit(2516.142:8331): avc: denied { open } for pid=9356 comm="syz.2.10653" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2577.056941][ T9371] serio: Serial port ttyS3 [ 2577.292189][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10659'. [ 2577.400954][ T9378] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2577.419511][ T30] audit: type=1400 audit(2516.685:8332): avc: denied { bind } for pid=9376 comm="syz.3.10659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2577.444481][ T9378] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2577.923320][ T9385] overlayfs: failed to resolve './file1': -2 [ 2578.944903][ T9393] loop9: detected capacity change from 0 to 7 [ 2579.048827][ T9393] Dev loop9: unable to read RDB block 7 [ 2579.054976][ T9393] loop9: unable to read partition table [ 2579.148937][ T9396] netlink: 'syz.2.10662': attribute type 2 has an invalid length. [ 2579.157624][ T9396] netlink: 'syz.2.10662': attribute type 1 has an invalid length. [ 2579.172275][ T9396] netlink: 'syz.2.10662': attribute type 8 has an invalid length. [ 2579.507200][ T9393] loop9: partition table beyond EOD, truncated [ 2579.523151][ T9393] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2579.813546][ T9405] tipc: Enabling of bearer rejected, already enabled [ 2580.177816][T25185] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 2580.619257][T25185] usb 1-1: device descriptor read/64, error -71 [ 2580.904922][T25185] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 2581.610908][ T9421] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2581.759917][T25185] usb 1-1: device descriptor read/64, error -71 [ 2581.888642][T25185] usb usb1-port1: attempt power cycle [ 2582.116356][ T9433] loop8: detected capacity change from 0 to 7 [ 2582.145169][T25160] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2582.155571][ T9433] Dev loop8: unable to read RDB block 7 [ 2582.181812][ T9433] loop8: unable to read partition table [ 2582.200802][ T9433] loop8: partition table beyond EOD, truncated [ 2582.240246][ T9433] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2582.273072][T25185] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 2582.305213][T25160] usb 3-1: device descriptor read/64, error -71 [ 2582.324854][T25185] usb 1-1: device descriptor read/8, error -71 [ 2582.562015][T25160] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2582.625885][T25185] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 2582.687494][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10676'. [ 2582.722176][T25160] usb 3-1: device descriptor read/64, error -71 [ 2582.852915][T25160] usb usb3-port1: attempt power cycle [ 2583.095336][T25185] usb 1-1: device descriptor read/8, error -71 [ 2583.214487][T25185] usb usb1-port1: unable to enumerate USB device [ 2583.459251][ T9444] netlink: 'syz.0.10677': attribute type 2 has an invalid length. [ 2583.467958][ T9444] netlink: 'syz.0.10677': attribute type 1 has an invalid length. [ 2583.482249][ T9444] netlink: 'syz.0.10677': attribute type 8 has an invalid length. [ 2583.855491][T25160] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2583.976489][T25160] usb 3-1: device descriptor read/8, error -71 [ 2584.243641][T25160] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2584.550724][T25160] usb 3-1: device descriptor read/8, error -71 [ 2584.681254][T25160] usb usb3-port1: unable to enumerate USB device [ 2585.648933][ T9460] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 2585.773393][ T9468] netlink: 'syz.0.10685': attribute type 10 has an invalid length. [ 2585.825510][ T9468] syz_tun: entered promiscuous mode [ 2585.860388][ T9479] loop9: detected capacity change from 0 to 7 [ 2585.878700][ T9479] Dev loop9: unable to read RDB block 7 [ 2585.886732][ T9479] loop9: unable to read partition table [ 2585.903912][ T9479] loop9: partition table beyond EOD, truncated [ 2585.926003][ T9479] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2586.545259][ T9492] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 2588.326565][ T9519] loop8: detected capacity change from 0 to 7 [ 2588.391663][ T9519] Dev loop8: unable to read RDB block 7 [ 2588.398105][ T9519] loop8: unable to read partition table [ 2588.832876][ T9519] loop8: partition table beyond EOD, truncated [ 2588.866937][ T9519] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2589.582919][ T9536] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 2590.023346][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.030498][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.181741][ T9542] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 2590.754946][ T9540] tipc: Enabling of bearer rejected, already enabled [ 2590.850253][ T9551] loop9: detected capacity change from 0 to 7 [ 2590.860297][ T9551] Dev loop9: unable to read RDB block 7 [ 2590.866391][ T9551] loop9: unable to read partition table [ 2590.872905][ T9551] loop9: partition table beyond EOD, truncated [ 2590.894251][ T9551] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2592.471938][T25185] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2592.643219][T25185] usb 4-1: Using ep0 maxpacket: 32 [ 2592.805874][ T9585] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10716'. [ 2593.121076][ T9584] loop8: detected capacity change from 0 to 7 [ 2593.151530][ T9584] Dev loop8: unable to read RDB block 7 [ 2593.235395][ T9584] loop8: unable to read partition table [ 2593.287736][ T9584] loop8: partition table beyond EOD, truncated [ 2593.309258][ T9584] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2594.513360][T25160] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2594.742624][T25160] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2594.787406][T25160] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2594.813990][T25160] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b3.49 [ 2594.938153][T25160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.981222][T25160] usb 1-1: config 0 descriptor?? [ 2595.168966][ T9614] netlink: 'syz.2.10726': attribute type 10 has an invalid length. [ 2595.216690][ T9614] syz_tun: entered promiscuous mode [ 2595.688351][ T9614] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2595.772338][ T30] audit: type=1400 audit(3046.873:8333): avc: denied { bind } for pid=9619 comm="syz.2.10728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2595.800479][ T30] audit: type=1400 audit(3046.901:8334): avc: denied { accept } for pid=9619 comm="syz.2.10728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2595.860432][ T30] audit: type=1400 audit(3046.958:8335): avc: denied { view } for pid=9619 comm="syz.2.10728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2597.204736][ T4846] usb 1-1: USB disconnect, device number 13 [ 2597.226110][T25185] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2597.273888][T25185] usb 4-1: no configurations [ 2597.278970][T25185] usb 4-1: can't read configurations, error -22 [ 2597.967025][ T9642] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 2600.021611][ T9672] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2601.037992][ T9688] netlink: 'syz.2.10747': attribute type 2 has an invalid length. [ 2601.046800][ T9688] netlink: 'syz.2.10747': attribute type 1 has an invalid length. [ 2601.060890][ T9688] netlink: 'syz.2.10747': attribute type 8 has an invalid length. [ 2602.859929][ T9710] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.10752'. [ 2605.610311][ T30] audit: type=1400 audit(3056.078:8336): avc: denied { mount } for pid=9731 comm="syz.2.10761" name="/" dev="ramfs" ino=168825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2605.618360][ T9734] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2605.642781][ T9734] overlayfs: failed to set xattr on upper [ 2605.649293][ T9734] overlayfs: ...falling back to redirect_dir=nofollow. [ 2605.656997][ T9734] overlayfs: ...falling back to uuid=null. [ 2605.657085][ T30] audit: type=1400 audit(3056.087:8337): avc: denied { mounton } for pid=9731 comm="syz.2.10761" path="/bus" dev="ramfs" ino=168826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 2605.878606][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10762'. [ 2606.137067][ T30] audit: type=1400 audit(3056.573:8338): avc: denied { getopt } for pid=9743 comm="syz.0.10762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2606.813190][ T9756] netlink: 'syz.0.10764': attribute type 10 has an invalid length. [ 2608.372129][ T9775] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2609.416523][ T30] audit: type=1400 audit(3059.623:8339): avc: denied { write } for pid=9791 comm="syz.0.10774" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2609.463649][ T30] audit: type=1400 audit(3059.623:8340): avc: denied { lock } for pid=9791 comm="syz.0.10774" path="socket:[168914]" dev="sockfs" ino=168914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2611.716386][ T9807] overlayfs: failed to resolve './file1': -2 [ 2612.507513][ T30] audit: type=1400 audit(3062.532:8341): avc: denied { read } for pid=9797 comm="syz.0.10778" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2612.534015][ T9819] tmpfs: Bad value for 'mpol' [ 2612.540457][ T30] audit: type=1400 audit(3062.551:8342): avc: denied { open } for pid=9797 comm="syz.0.10778" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2612.633282][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2612.813074][ T9815] team0: Port device batadv1 added [ 2614.733335][ T9849] netlink: 'syz.2.10789': attribute type 10 has an invalid length. [ 2616.283468][ T9864] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.10794'. [ 2728.189119][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2728.196957][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9840/1:b..l [ 2728.206276][ C1] rcu: (detected by 1, t=10503 jiffies, g=196493, q=572 ncpus=2) [ 2728.214845][ C1] task:syz.1.10785 state:R running task stack:24592 pid:9840 tgid:9830 ppid:4191 task_flags:0x40044c flags:0x00080001 [ 2728.231000][ C1] Call Trace: [ 2728.234603][ C1] [ 2728.237820][ C1] ? __schedule+0x10b9/0x6150 [ 2728.242959][ C1] __schedule+0x1139/0x6150 [ 2728.247901][ C1] ? __lock_acquire+0x436/0x2890 [ 2728.253324][ C1] ? __lock_acquire+0x436/0x2890 [ 2728.258743][ C1] ? __pfx___schedule+0x10/0x10 [ 2728.264066][ C1] ? mark_held_locks+0x49/0x80 [ 2728.269291][ C1] preempt_schedule_irq+0x51/0x90 [ 2728.274802][ C1] irqentry_exit+0x1d8/0x8c0 [ 2728.279840][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2728.286408][ C1] RIP: 0010:stack_access_ok+0x12/0x200 [ 2728.292407][ C1] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 <41> 55 41 54 49 89 d4 4c 89 f2 55 48 c1 ea 03 48 89 f5 53 48 89 fb [ 2728.313961][ C1] RSP: 0018:ffffc9000bbcf480 EFLAGS: 00000246 [ 2728.320619][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff911ff806 [ 2728.329465][ C1] RDX: 0000000000000008 RSI: ffffc9000bbcf5f0 RDI: ffffc9000bbcf558 [ 2728.338216][ C1] RBP: ffffc9000bbcf5a0 R08: ffffffff911ff80a R09: 00000000d27c185d [ 2728.346964][ C1] R10: 0000000000000002 R11: 000000000000637a R12: ffffc9000bbcf5a8 [ 2728.355711][ C1] R13: ffffc9000bbcf558 R14: ffffc9000bbcf560 R15: ffffc9000bbcf58c [ 2728.364476][ C1] unwind_next_frame+0xb7d/0x20b0 [ 2728.369992][ C1] ? arch_stack_walk+0x73/0x100 [ 2728.375416][ C1] __unwind_start+0x45f/0x7f0 [ 2728.380552][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2728.387305][ C1] arch_stack_walk+0x73/0x100 [ 2728.392438][ C1] ? arch_stack_walk+0x73/0x100 [ 2728.397763][ C1] stack_trace_save+0x8e/0xc0 [ 2728.402893][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2728.408788][ C1] ? __lock_acquire+0x436/0x2890 [ 2728.414214][ C1] kasan_save_stack+0x33/0x60 [ 2728.419379][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 2728.425088][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 2728.431840][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 2728.438315][ C1] kmem_cache_free+0x171/0x770 [ 2728.443537][ C1] ? exit_mmap+0x507/0xb60 [ 2728.448387][ C1] ? exit_mmap+0x507/0xb60 [ 2728.453238][ C1] exit_mmap+0x507/0xb60 [ 2728.457893][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2728.463127][ C1] ? __lock_acquire+0x436/0x2890 [ 2728.468553][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 2728.474643][ C1] __mmput+0x12a/0x410 [ 2728.479107][ C1] mmput+0x62/0x70 [ 2728.483191][ C1] do_exit+0x7d7/0x2bd0 [ 2728.487754][ C1] ? lock_acquire+0x179/0x330 [ 2728.492885][ C1] ? __pfx_do_exit+0x10/0x10 [ 2728.497919][ C1] ? find_held_lock+0x2b/0x80 [ 2728.503069][ C1] do_group_exit+0xd3/0x2a0 [ 2728.508006][ C1] get_signal+0x2671/0x26d0 [ 2728.512952][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 2728.518370][ C1] ? __pfx_get_signal+0x10/0x10 [ 2728.523695][ C1] ? do_futex+0x122/0x350 [ 2728.528448][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 2728.534537][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2728.541299][ C1] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 2728.547007][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 2728.552810][ C1] do_syscall_64+0x4ee/0xf80 [ 2728.557849][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2728.564316][ C1] RIP: 0033:0x7f5eadf8f749 [ 2728.569149][ C1] RSP: 002b:00007f5eac1d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2728.578388][ C1] RAX: 0000000000010106 RBX: 00007f5eae1e6090 RCX: 00007f5eadf8f749 [ 2728.587138][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2728.595884][ C1] RBP: 00007f5eae013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2728.604632][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2728.613388][ C1] R13: 00007f5eae1e6128 R14: 00007f5eae1e6090 R15: 00007fff6e0d53a8 [ 2728.622150][ C1] [ 2728.625452][ C1] rcu: rcu_preempt kthread starved for 10542 jiffies! g196493 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2728.637838][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2728.648778][ C1] rcu: RCU grace-period kthread stack dump: [ 2728.655238][ C1] task:rcu_preempt state:R running task stack:27936 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2728.670092][ C1] Call Trace: [ 2728.673704][ C1] [ 2728.676932][ C1] ? __schedule+0x10b9/0x6150 [ 2728.682073][ C1] __schedule+0x1139/0x6150 [ 2728.687019][ C1] ? __lock_acquire+0x436/0x2890 [ 2728.692442][ C1] ? __mod_timer+0x8f2/0xd30 [ 2728.697486][ C1] ? __pfx___schedule+0x10/0x10 [ 2728.702805][ C1] ? find_held_lock+0x2b/0x80 [ 2728.707939][ C1] ? schedule+0x2d7/0x3a0 [ 2728.712687][ C1] schedule+0xe7/0x3a0 [ 2728.717152][ C1] schedule_timeout+0x123/0x290 [ 2728.722472][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2728.728363][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2728.734162][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2728.740562][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 2728.746556][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 2728.751784][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2728.757585][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2728.763297][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2728.768713][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 2728.774037][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2728.780411][ C1] rcu_gp_kthread+0x26d/0x380 [ 2728.785538][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2728.791245][ C1] ? rcu_is_watching+0x12/0xc0 [ 2728.796488][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2728.802194][ C1] ? __kthread_parkme+0x19e/0x250 [ 2728.807703][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2728.813409][ C1] kthread+0x3c5/0x780 [ 2728.817870][ C1] ? __pfx_kthread+0x10/0x10 [ 2728.822900][ C1] ? rcu_is_watching+0x12/0xc0 [ 2728.828143][ C1] ? __pfx_kthread+0x10/0x10 [ 2728.833177][ C1] ret_from_fork+0x983/0xb10 [ 2728.838211][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2728.843818][ C1] ? __switch_to+0x7af/0x10d0 [ 2728.848948][ C1] ? __pfx_kthread+0x10/0x10 [ 2728.853985][ C1] ret_from_fork_asm+0x1a/0x30 [ 2728.859228][ C1] [ 2728.862531][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2728.869475][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2728.881002][ C1] Tainted: [L]=SOFTLOCKUP [ 2728.885733][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2728.896773][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2728.903051][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2728.925079][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 2728.931735][ C1] RAX: 000000000a0d559b RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 2728.940484][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 2728.949236][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 2728.957984][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 2728.966733][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 2728.975484][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 2728.985292][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2728.992516][ C1] CR2: 0000001b30e20ff8 CR3: 0000000081abf000 CR4: 00000000003526f0 [ 2729.001267][ C1] Call Trace: [ 2729.004858][ C1] [ 2729.008063][ C1] default_idle+0x13/0x20 [ 2729.012815][ C1] default_idle_call+0x6c/0xb0 [ 2729.018040][ C1] do_idle+0x38d/0x510 [ 2729.022511][ C1] ? __pfx_do_idle+0x10/0x10 [ 2729.027560][ C1] cpu_startup_entry+0x4f/0x60 [ 2729.032790][ C1] start_secondary+0x21d/0x2d0 [ 2729.038017][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2729.043816][ C1] common_startup_64+0x13e/0x148 [ 2729.049241][ C1]