last executing test programs: 15.758316957s ago: executing program 1 (id=416): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0xfffe, 0x1, 0x0, 0x2, {0xa, 0x4e23, 0xfffffef8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}, 0x32) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) (async) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x1220c0c, 0xffffffffffffffba) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) 15.596932506s ago: executing program 1 (id=418): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6f1022e4, 0x101) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000004000)=""/4099, 0x1003) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) recvmsg$inet_nvme(r4, &(0x7f0000001c80)={&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/81, 0x51}, {&(0x7f0000001980)=""/26, 0x1a}, {&(0x7f00000019c0)=""/169, 0xa9}, {&(0x7f0000001a80)=""/242, 0xf2}], 0x5, &(0x7f0000001c00)=""/109, 0x6d}, 0x2001) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 9.550425206s ago: executing program 4 (id=437): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000002000), 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 9.086687094s ago: executing program 3 (id=438): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) close(r1) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x10021) 8.319007657s ago: executing program 3 (id=440): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd0, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x9}}}}}]}}]}}, &(0x7f0000002480)={0xa, &(0x7f0000002300)={0xa, 0x6, 0x200, 0x0, 0x1, 0x10, 0x20, 0x80}, 0x32, &(0x7f0000002340)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x2, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x4, 0x2, 0x2bb, 0x10}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x7, 0xff00, 0x9, [0xff003f, 0xc000, 0x7e00]}]}, 0x2, [{0xb8, &(0x7f0000002380)=@string={0xb8, 0x3, "37ce8c8e72512e65446eeac7869d601609fbd97be8c117fa8effdf056d1a35c6e86d8053e96e45fe91231dbd72c6ba59fef4ddad15575c4810ea03f1fb886de7f2582387b86a8fa768939c488c70af9b831db88a3d4090357736bd5c71ce54d6d8ef3e29db030008d5511f2d0c0e094f7de63787678b4a22236c6b4b9bdd244e82233067839a8b8d2f16b9352ea85d04afeec12d6752670066a809c5386b79729265218aec1086d192cdb59a5faa2c3a1e4e4430cc93"}}, {0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x42f}}]}) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) r1 = dup2(r0, r0) syz_fuse_handle_req(r1, &(0x7f0000000300)="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", 0x2000, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18300000ff0f000000000000030000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) listen(r4, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x60d000, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r6, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) 8.311575803s ago: executing program 4 (id=441): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f00002c4000/0x14000)=nil, 0x14000, 0x3000002, 0x28011, r1, 0x2f83a000) socket(0x1f, 0x6, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000025000100000000eeffffff0025ae5b5f0070805e03db0028c55744c134c90400000046ba95c9d9825c11ef202d4496d589b8c4000000000000733fa5b17fc1471f3f40a9681e2d02297ec46b1bc2f19ead4f54b841bd63500ce85f3f6c296d4485e1569df7aa7f9ce3f4352b9dc593d5ba5b7de34000"/131], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x805) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000000)={'batadv_slave_0\x00', @ifru_hwaddr=@random="9cbc9c1e80c4"}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001", @ANYRESOCT=r3, @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a00bfeb5ec8020073797a31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) read(r6, &(0x7f0000000800)=""/4096, 0x1000) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x56e) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e7, 0x0) r8 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r8, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f0000001800)}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400}) write(r8, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) 6.6238216s ago: executing program 1 (id=445): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0xefb, 0x80000, 0xffffffffffffffff}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) (async) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102385, 0x18ff1) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 64) syz_pidfd_open(r5, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0x3) (async) syz_clone3(&(0x7f00000003c0)={0x1800100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, &(0x7f0000000340)=""/4, 0x0}, 0x58) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)=0xfffffffb) syz_usb_control_io(r0, 0x0, 0x0) (async) r7 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r7) (async) syz_usb_connect(0x5, 0x48, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0xdd, 0xcc, 0x19, 0x40, 0x93a, 0x10e, 0x91f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x6, 0x4, 0x40, 0x1}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x200, 0x5, 0x6a, 0x4, 0x40, 0x36}, 0x1b, &(0x7f0000000ec0)={0x5, 0xf, 0x1b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x463f5590ef383142, 0x8, 0x6, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x0, 0xf000, 0x2}, @ptm_cap={0x3}]}}) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 5.389663691s ago: executing program 3 (id=450): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) close(r1) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x10021) 5.316440935s ago: executing program 4 (id=451): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\x92\x06\xd1\xb4p=\xd1\x14\x8d\xa4\xf1\x93\xd18\xd2,n!\xe4\x05\xffT\xd4\x1d.\b\xc4L\x11qU\xc1Ayw\xb4z\xedY9\x96\xa9\x9a\xfd\xd9\t\xe4{$||^\xc7\xbd\xa2\xd2Ot\x95\xd0Us\xb0o\xa4c\x1d\xb0\x14\x80\x87\xc1~\xfb\xcb\x0e\xf5.3\xb0\xb9A\xdc\x1cs\xb5j\x952\xce\xa3iUOW\xda', &(0x7f0000000200)='%\xff\xfbi\x03\x1cp\n\xd3\x1f\x84f\x97\x06\xc8\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xca\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92\x06nr\xa7%\xa9\xd2[\x13\xaf:C1Ch\xc5\x03\xcb\xe6\xf4\xa05\xa0\xf9\x96\xa64\x0e\xb7|\xf3\x9cc\x96\xdaS-\x18\x9d\xb8\x9a\x8a\xc7/{dQ\xceeY\x9a\x9f\xe0B\x1b[*\xd3\xa7\x8d*\x98\xc9\xa4\x16\xcc\xf8/%\x911[\x10\xcb\x84\xd7\x96\x8c\xea\x99g4\n\xa5x\x1c\x9dExzK\xdbh\xfd\xe5\xfa\xca\'\x1b+\xd9G\x9cO\xa6\x82\xca\x11w#Pa\xad\x83\x94\x95t\xd5&\xb2\xa3\xc6E\x1c4<\xea\x12\x12u\b\xe5\xcb\xc7\xa8\xd1\x8e>\x95B\x1b \xf8\vsg\xa9\x91r\x0f\xa1\x8c\xf2x\xc2p\\\x86c\xf3\x1f\x98e\x04\xcdhT\xc5\x83o:\x902F\xdc\x82\xb9&\xaa\\\x82\xb3M\xe5\xf1\x03_\x00>\xbc\xf9b\xf2\xdc1\xea\x19\xb1\x9b\v\t\xea\x1ez\xdd\xf1\xf0\x86j\xb1K\xb8&\xf9\xee3\xe7\xe3\xe3CRy`\x8b\x8cG\xf6\x0em^\xb0\xcb\xa2\xb3\b\xbd\x9cW<\x81\xd0\x8fT\x19L*}\xf3\xbb\xd6X\xec\xa7c\xf5\\\xf6\x82\xcaZ*j\x9dNF\xcc\x86\a=`\x86\x8bd\xc6\xc1\xd2\xcb\xda<\x85\x92Z\x8f\xe1O\xfe\x8b\xeb\xec^\xfb\f\xab\xbe\xd0\xec4\xf1^B?\x92\x85j\x91\xdaM\xdd\x81{}\xe5\xdb\xc0\x03\x919j\x13^(\x11J\xa2aYU:\xfc\"\x90)\x90B', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r1, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write(r2, &(0x7f0000001300)="0600000000000000020000000300"/104, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, &(0x7f0000001540)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x6}, 0x1c) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000100)={0x2, 0xffff8000, {0x57, 0x40, 0x6, {0x0, 0x9}, {0x8000, 0x5}, @rumble={0x6, 0x6}}, {0x51, 0x1, 0x0, {0xf, 0x9}, {0x6}, @cond=[{0x0, 0x6, 0xe, 0x80, 0xffff}, {0x1c00, 0x6, 0x7ff, 0x0, 0x3, 0x1ff}]}}) 5.261989188s ago: executing program 0 (id=452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000023000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) clock_gettime(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000600)="02", 0x1, 0x4) 5.162467699s ago: executing program 0 (id=453): r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ioctl$MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_usb_connect(0x5, 0x1e0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e235e3209a060100c551010203010902ce01014c0000000904"], 0x0) 5.072152373s ago: executing program 3 (id=454): timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000280)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000002c0)={0xe, 0x80000}) 4.39077493s ago: executing program 2 (id=456): fallocate(0xffffffffffffffff, 0x0, 0x1, 0x8ffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x4000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x2b, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.313127842s ago: executing program 1 (id=457): fallocate(0xffffffffffffffff, 0x0, 0x1, 0x8ffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x4000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x2b, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.297376636s ago: executing program 3 (id=458): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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", 0xd00}], 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000019c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000001a00)={0x28, 0x6, 0x0, r2, 0xfffffffffffffffe, 0x1, 0x8}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000040002, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001980)={[{@index_on}, {@metacopy_off, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x18, 0x0, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 4.240504326s ago: executing program 4 (id=459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)="300e", 0xffffff84) 4.014623317s ago: executing program 4 (id=460): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd0, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x9}}}}}]}}]}}, &(0x7f0000002480)={0xa, &(0x7f0000002300)={0xa, 0x6, 0x200, 0x0, 0x1, 0x10, 0x20, 0x80}, 0x32, &(0x7f0000002340)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x2, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x4, 0x2, 0x2bb, 0x10}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x7, 0xff00, 0x9, [0xff003f, 0xc000, 0x7e00]}]}, 0x2, [{0xb8, &(0x7f0000002380)=@string={0xb8, 0x3, "37ce8c8e72512e65446eeac7869d601609fbd97be8c117fa8effdf056d1a35c6e86d8053e96e45fe91231dbd72c6ba59fef4ddad15575c4810ea03f1fb886de7f2582387b86a8fa768939c488c70af9b831db88a3d4090357736bd5c71ce54d6d8ef3e29db030008d5511f2d0c0e094f7de63787678b4a22236c6b4b9bdd244e82233067839a8b8d2f16b9352ea85d04afeec12d6752670066a809c5386b79729265218aec1086d192cdb59a5faa2c3a1e4e4430cc93"}}, {0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x42f}}]}) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) r1 = dup2(r0, r0) syz_fuse_handle_req(r1, &(0x7f0000000300)="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", 0x2000, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18300000ff0f000000000000030000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) listen(r4, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x60d000, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r6, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) 4.0141339s ago: executing program 2 (id=461): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r1 = socket(0x24, 0x6, 0x80) bind$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local, 0x2}, 0x10) (async) connect$inet(r1, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fb00) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @val=@iter={0x0}}, 0x20) syz_open_procfs(0x0, 0x0) (async) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x1}, 0x28) (async) write$9p(0xffffffffffffffff, &(0x7f0000000680), 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) 3.86610427s ago: executing program 2 (id=462): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x68420, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3.703091606s ago: executing program 1 (id=463): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 3.100001709s ago: executing program 0 (id=464): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) close(r1) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x10021) 2.766674633s ago: executing program 2 (id=465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000023000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) clock_gettime(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000600)="02", 0x1, 0x4) 1.851887292s ago: executing program 0 (id=466): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 1.522923059s ago: executing program 2 (id=467): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ptrace(0x10, r0) exit(0x100000000000035) tkill(r0, 0x12) wait4(r0, 0x0, 0xa, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r3, &(0x7f0000000540)="566f31e789", 0x5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10012, r3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.417322163s ago: executing program 1 (id=468): timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000280)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000002c0)={0xe, 0x80000}) 528.233435ms ago: executing program 3 (id=469): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newneigh={0x2c, 0x1c, 0x10, 0x70bd2f, 0x25dfdbfc, {0x1c, 0x0, 0x0, r2, 0x10, 0x30, 0xc}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_SRC_VNI={0x8, 0xb, 0xa}]}, 0x2c}}, 0x40) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) 494.809791ms ago: executing program 0 (id=470): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)="300e", 0xffffff84) 246.491105ms ago: executing program 0 (id=471): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x3, 0x0, {0x0, 0x0, 0x4, 0x0, 0x308}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x23, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x5, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x400000d0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) listen(r0, 0x28) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x22) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 60.629755ms ago: executing program 4 (id=472): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c040) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x7, 0x7) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x3fae613b, 0x54c3) syz_emit_ethernet(0x182, &(0x7f0000001900)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080047b801740065000003069078ac141413ac1414bb890f2dac1414bbac14143be0000001830bfeac1414aaac1414bb01008307d70a010102830bf00a01010100000000070bdd64010101ac1414bb94040000940988ee18e1bf4d2c00004e244e23", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="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"], 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0x8c) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e20, 0x1, @private1, 0x26d8468e}}}, &(0x7f0000000480)=0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea1454f9b67991"}) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) syz_open_dev$amidi(&(0x7f0000000380), 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) openat$cgroup_type(r7, &(0x7f0000000080), 0x2, 0x0) 0s ago: executing program 2 (id=473): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}, r0}}, 0x38) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x224182, 0x48, 0x12}, 0x18) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000240)={0xc, {0xd1, "ed7ea695b359f3d56446d50c0c6b026e760537b0328d5ad20fcd96d9ab8fbb337607f513a14a8ddffd98d43851cde0d93ab07e8113a7dd366fb2a69d843a7603f99e314d607dd041b4bb087df03bebe6d653933c0e998876ed9310e44930ac963d5d9b6aa78ad63d01fea2ed72bba4c68553aae73db998f5c80004572d93f80eff4c0c42da2b12f53152cd706d88f20b94c36652b1a9698aa4b4c571826821bbf963f765c77c5c8bfac9eb2a1f7ae78e2396cb30b37c1b587d45ebf35fba7f71fbbbd9ee6772cbaecd062cfc9d4463acfc"}}, 0xd7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x7b, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x401, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x4, 0xe48, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12a}}}, &(0x7f0000000400)) ioctl$UBLK_U_CMD_GET_PARAMS(r4, 0x80207509, &(0x7f00000004c0)={0x0, 0xffff, 0x70, &(0x7f0000000440)={0x70}}) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r5, 0x400, 0x70bd2a, 0x401, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044044}, 0x4004) r7 = socket$inet6(0xa, 0xa, 0x4) pwrite64(r7, &(0x7f00000006c0)="ea5110c024e419c1243f2e55e3cebaaaf2b204d6a00dbfc207ee12aaa666c52587922c17c9ff9080acddc52f5cb774f687763cba1876719812b9f4a427b614167b8cd87a30aa", 0x46, 0x4) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x94, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crypt_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r9, 0x805, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a80)={0x248, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xb8, 0x2a, [@mesh_id={0x72, 0x6}, @tim={0x5, 0x93, {0x26, 0x85, 0x14, "74352fd0dd9268378c1e87da46da54c7f205d9647f28a6b26110eb93eb78de06233b8586a78f98ce0af583e3313130fd69e3323d4383cc69e82c70ce07910db003d94c37b1a8daaa6da092dd1271f09bd0b5bca6491936531db508fa7d5ebf4cd5af4fd1a0ab98820ca2ae3b2586ab0ad449f2852fb76470beb0e7da7e885d76ccf5267d2f315bcada86cd1b32896d44"}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x5, 0x6, @broadcast, 0x5, 0x2, 0x8}}]}, @NL80211_ATTR_IE={0x173, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x3, 0x0, {0x8, 0xff, 0x0, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0x31}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x0, 0x0, {0x8, 0x8, 0x0, 0xe6, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x5, 0x1f}}, @fast_bss_trans={0x37, 0xce, {0x9d, 0x4, "4dd516529a131f154114d8698c7da0ff", "88b68a1847f4f9b3c6bb9a68e04a0a27e74b9a8d8f0f18ae285b19f6ad5e1364", "21061209ac406f30af3b0e7b256ac15bfb82dd0dd4bd95181581da64936c1340", [{0x3, 0x25, "c773a912aaa9b7879f4a366c2deec0b5f7891b363803cc335fa260547acc6ea3fa0fcdf53c"}, {0x4, 0x28, "e976d92b0b2a4285cc1c818ae4ee7fe02530640c26d67ae6e69440ad4b08f2081cd8665b4f22bc47"}, {0x1, 0x9, "46951a9ab0dc74b632"}, {0x3, 0x1e, "000a1e1a4ff85719a384e3310b7133b6c46cb690f88e1be0065883ef4b81"}]}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x7, 0x0, {0x8, 0x3, 0x0, 0x80, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x0, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6, @broadcast}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x0, 0x0, {0x7fffffff, 0x122d, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd, 0x5}}, @ssid={0x0, 0x17, @random="51621606d0132bb44822836c44c232e9ae3fc7977eb6b7"}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20004110}, 0x24008804) socket$key(0xf, 0x3, 0x2) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000dc0), r2) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, r11, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICLIST(r10, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000001080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r10, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x50, r12, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x8010) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4) kernel console output (not intermixed with test programs): m_t tclass=netlink_xfrm_socket permissive=1 [ 122.443716][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 122.449851][ T29] audit: type=1400 audit(1785933793.966:1061): avc: denied { nlmsg_write } for pid=6496 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.538440][ T29] audit: type=1400 audit(1785933794.056:1062): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 123.769971][ T29] audit: type=1400 audit(1785933795.296:1063): avc: denied { read } for pid=6509 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.806324][ T29] audit: type=1400 audit(1785933795.296:1064): avc: denied { ioctl } for pid=6509 comm="syz.3.192" path="socket:[12898]" dev="sockfs" ino=12898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.840427][ T5715] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 123.912050][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.193'. [ 124.005826][ T5715] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 124.026922][ T5715] usb 3-1: config 0 has no interface number 0 [ 124.038543][ T5715] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 124.055250][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 124.055547][ T805] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.089614][ T5715] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 124.111687][ T5715] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 124.121905][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 124.130348][ T5715] usb 3-1: Manufacturer: syz [ 124.136913][ T5715] usb 3-1: SerialNumber: syz [ 124.146159][ T5715] usb 3-1: config 0 descriptor?? [ 124.157237][ T29] audit: type=1400 audit(1785933795.686:1065): avc: denied { read write } for pid=6519 comm="syz.1.195" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.222274][ T29] audit: type=1400 audit(1785933795.686:1066): avc: denied { open } for pid=6519 comm="syz.1.195" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.259420][ T805] usb 4-1: Using ep0 maxpacket: 32 [ 124.280554][ T805] usb 4-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 124.312776][ T805] usb 4-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 124.673611][ T29] audit: type=1400 audit(1785933795.716:1067): avc: denied { setopt } for pid=6519 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.694134][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.702216][ T805] usb 4-1: Product: syz [ 124.711017][ T805] usb 4-1: Manufacturer: syz [ 124.717248][ T29] audit: type=1400 audit(1785933795.716:1068): avc: denied { read } for pid=6519 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.737521][ T805] usb 4-1: SerialNumber: syz [ 124.778717][ T805] pwc: Askey VC010 type 1 USB webcam detected. [ 124.792541][ T29] audit: type=1400 audit(1785933795.786:1069): avc: denied { write } for pid=6519 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.792825][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 124.820962][ T6524] macvlan0: entered promiscuous mode [ 124.828063][ T6524] netlink: 44 bytes leftover after parsing attributes in process `syz.4.196'. [ 125.023764][ T805] pwc: send_video_command error -71 [ 125.040749][ T805] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 125.056087][ T805] Philips webcam 4-1:76.0: probe with driver Philips webcam failed with error -71 [ 125.079105][ T805] usb 4-1: USB disconnect, device number 8 [ 125.473973][ T5715] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 125.489028][ T5715] usb 3-1: USB disconnect, device number 7 [ 126.303743][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.353767][ T5715] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.465427][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.482293][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.498191][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.508471][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 126.516793][ T5715] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 126.525791][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.534151][ T5715] usb 2-1: config 0 has no interface number 0 [ 126.545107][ T5715] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 126.562168][ T6535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 126.569898][ T5715] usb 2-1: config 0 interface 184 has no altsetting 0 [ 126.581868][ T5715] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 126.596428][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.604182][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.624500][ T5715] usb 2-1: Product: syz [ 126.642262][ T5715] usb 2-1: Manufacturer: syz [ 126.676214][ T5715] usb 2-1: SerialNumber: syz [ 126.716255][ T5715] usb 2-1: config 0 descriptor?? [ 126.728137][ T6537] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 126.803164][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.829603][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.899011][ T6535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.952342][ T6537] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 127.005431][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 127.153751][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.257857][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.285454][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.311429][ T5343] usb 5-1: USB disconnect, device number 6 [ 127.686874][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 127.686909][ T29] audit: type=1400 audit(1785933799.216:1112): avc: denied { connect } for pid=6536 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.754988][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 127.763281][ T29] audit: type=1400 audit(1785933799.286:1113): avc: denied { create } for pid=6536 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.813765][ T29] audit: type=1400 audit(1785933799.326:1114): avc: denied { write } for pid=6536 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.836646][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 127.880779][ T5715] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 127.902808][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.933311][ T5715] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 127.942698][ T10] usb 3-1: Product: syz [ 127.950888][ T10] usb 3-1: Manufacturer: syz [ 127.959222][ T10] usb 3-1: SerialNumber: syz [ 127.968770][ T5715] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 127.984437][ T10] usb 3-1: config 0 descriptor?? [ 127.990798][ T5715] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 128.003041][ T10] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 128.017663][ T5715] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 128.038690][ T5715] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 128.060064][ T5715] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 128.077195][ T6553] bond1: entered allmulticast mode [ 128.093130][ T5715] usb 2-1: USB disconnect, device number 6 [ 128.192159][ T6553] macvlan2: entered promiscuous mode [ 128.205334][ T6553] macvlan2: entered allmulticast mode [ 128.232517][ T6553] bond1: (slave macvlan2): Opening slave failed [ 128.329010][ T29] audit: type=1400 audit(1785933799.856:1115): avc: denied { create } for pid=6556 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.375483][ T29] audit: type=1400 audit(1785933799.886:1116): avc: denied { write } for pid=6556 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.407185][ T29] audit: type=1400 audit(1785933799.886:1117): avc: denied { read } for pid=6556 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.435814][ T29] audit: type=1400 audit(1785933799.966:1118): avc: denied { open } for pid=6541 comm="syz.2.202" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 128.440637][ T6542] Zero length message leads to an empty skb [ 128.461457][ T29] audit: type=1400 audit(1785933799.966:1119): avc: denied { getopt } for pid=6541 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.492849][ T29] audit: type=1400 audit(1785933799.966:1120): avc: denied { create } for pid=6541 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.520903][ T29] audit: type=1400 audit(1785933799.966:1121): avc: denied { connect } for pid=6541 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.576164][ T6555] macvlan2: entered promiscuous mode [ 128.581532][ T6555] macvlan2: entered allmulticast mode [ 128.670090][ T6555] bond1: (slave macvlan2): Opening slave failed [ 130.022669][ T10] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 130.316352][ T10] visor 3-1:0.0: probe with driver visor failed with error -71 [ 130.944103][ T10] usb 3-1: USB disconnect, device number 8 [ 131.164853][ T6575] syz.2.208: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 131.180791][ T6575] CPU: 0 UID: 0 PID: 6575 Comm: syz.2.208 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.180825][ T6575] Tainted: [L]=SOFTLOCKUP [ 131.180832][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.180843][ T6575] Call Trace: [ 131.180851][ T6575] [ 131.180859][ T6575] dump_stack_lvl+0x100/0x190 [ 131.180894][ T6575] warn_alloc.cold+0x94/0xa8 [ 131.180916][ T6575] ? __pfx_warn_alloc+0x10/0x10 [ 131.180940][ T6575] ? kasan_save_stack+0x3f/0x50 [ 131.180965][ T6575] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 131.180995][ T6575] ? xskq_create+0x52/0x1d0 [ 131.181013][ T6575] ? xsk_setsockopt+0x743/0xab0 [ 131.181031][ T6575] ? do_sock_setsockopt+0xf3/0x1d0 [ 131.181059][ T6575] ? __sys_setsockopt+0x195/0x220 [ 131.181081][ T6575] ? __x64_sys_setsockopt+0xbd/0x160 [ 131.181103][ T6575] ? do_syscall_64+0x115/0x870 [ 131.181123][ T6575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.181148][ T6575] ? xskq_create+0xfb/0x1d0 [ 131.181170][ T6575] __vmalloc_node_range_noprof+0x136c/0x1630 [ 131.181208][ T6575] ? xskq_create+0xfb/0x1d0 [ 131.181234][ T6575] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.181310][ T6575] ? kasan_save_track+0x14/0x30 [ 131.181333][ T6575] ? __kasan_kmalloc+0xaa/0xb0 [ 131.181360][ T6575] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 131.181391][ T6575] ? xskq_create+0xfb/0x1d0 [ 131.181412][ T6575] vmalloc_user_noprof+0x9e/0xe0 [ 131.181442][ T6575] ? xskq_create+0xfb/0x1d0 [ 131.181463][ T6575] xskq_create+0xfb/0x1d0 [ 131.181484][ T6575] xsk_setsockopt+0x743/0xab0 [ 131.181506][ T6575] ? __pfx_xsk_setsockopt+0x10/0x10 [ 131.181525][ T6575] ? find_held_lock+0x2b/0x80 [ 131.181540][ T6575] ? __fget_files+0x215/0x3d0 [ 131.181563][ T6575] ? selinux_socket_setsockopt+0x6a/0x80 [ 131.181594][ T6575] ? __pfx_xsk_setsockopt+0x10/0x10 [ 131.181614][ T6575] do_sock_setsockopt+0xf3/0x1d0 [ 131.181646][ T6575] __sys_setsockopt+0x195/0x220 [ 131.181673][ T6575] __x64_sys_setsockopt+0xbd/0x160 [ 131.181693][ T6575] ? do_syscall_64+0x90/0x870 [ 131.181716][ T6575] ? lockdep_hardirqs_on+0x78/0x100 [ 131.181738][ T6575] do_syscall_64+0x115/0x870 [ 131.181757][ T6575] ? clear_bhb_loop+0x40/0x90 [ 131.181781][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.181800][ T6575] RIP: 0033:0x7fab4779e0d9 [ 131.181817][ T6575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.181833][ T6575] RSP: 002b:00007fab48588028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.181851][ T6575] RAX: ffffffffffffffda RBX: 00007fab47a26180 RCX: 00007fab4779e0d9 [ 131.181863][ T6575] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 131.181873][ T6575] RBP: 00007fab47835024 R08: 0000000000000029 R09: 0000000000000000 [ 131.181884][ T6575] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.181896][ T6575] R13: 00007fab47a26218 R14: 00007fab47a26180 R15: 00007ffe4a06b4f8 [ 131.181922][ T6575] [ 131.182043][ T6575] Mem-Info: [ 131.528521][ T6575] active_anon:35360 inactive_anon:0 isolated_anon:0 [ 131.528521][ T6575] active_file:0 inactive_file:58863 isolated_file:0 [ 131.528521][ T6575] unevictable:768 dirty:346 writeback:0 [ 131.528521][ T6575] slab_reclaimable:11501 slab_unreclaimable:98495 [ 131.528521][ T6575] mapped:39237 shmem:25998 pagetables:1350 [ 131.528521][ T6575] sec_pagetables:0 bounce:0 [ 131.528521][ T6575] kernel_misc_reclaimable:0 [ 131.528521][ T6575] free:1268278 free_pcp:10525 free_cma:0 [ 131.576035][ T6575] Node 0 active_anon:141440kB inactive_anon:0kB active_file:0kB inactive_file:235256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151248kB dirty:1380kB writeback:0kB shmem:102456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12180kB pagetables:5248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 131.617023][ T6555] macvlan2: entered promiscuous mode [ 131.625605][ T6555] macvlan2: entered allmulticast mode [ 131.632503][ T6555] bond1: (slave macvlan2): Opening slave failed [ 131.640268][ T6575] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 131.678232][ T6575] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.719261][ T6575] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 131.729206][ T6575] Node 0 DMA32 free:1114892kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:141440kB inactive_anon:0kB active_file:0kB inactive_file:235256kB unevictable:1536kB writepending:1380kB zspages:0kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:46492kB local_pcp:38700kB free_cma:0kB [ 131.772740][ T6575] lowmem_reserve[]: 0 0 0 0 0 [ 131.779496][ T6575] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.812970][ T6564] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.814533][ T6575] lowmem_reserve[]: 0 0 0 0 0 [ 131.825548][ T6575] Node 1 Normal free:3942860kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 131.840835][ T6564] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.930440][ T6575] lowmem_reserve[]: 0 0 0 0 0 [ 131.930507][ T6575] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.930645][ T6575] Node 0 DMA32: 1*4kB (U) 1*8kB (M) 26*16kB (U) 131*32kB (UME) 42*64kB (UME) 23*128kB (UME) 7*256kB (UM) 4*512kB (UE) 3*1024kB (U) 2*2048kB (UM) 267*4096kB (M) = 1114892kB [ 131.930824][ T6575] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 131.932286][ T6575] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3942860kB [ 131.933362][ T6575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.933398][ T6575] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.933413][ T6575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.933428][ T6575] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.933442][ T6575] 82907 total pagecache pages [ 131.933450][ T6575] 0 pages in swap cache [ 131.933457][ T6575] Free swap = 124996kB [ 131.933464][ T6575] Total swap = 124996kB [ 131.933472][ T6575] 2097051 pages RAM [ 131.933479][ T6575] 0 pages HighMem/MovableOnly [ 131.933485][ T6575] 432306 pages reserved [ 131.933492][ T6575] 0 pages cma reserved [ 131.942153][ T6564] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.950908][ T6564] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.969369][ T6577] netlink: 60 bytes leftover after parsing attributes in process `syz.4.209'. [ 132.128139][ T6564] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.164089][ T6578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1053 sclass=netlink_route_socket pid=6578 comm=syz.4.209 [ 132.616524][ T6577] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 133.067541][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 133.067831][ T29] audit: type=1400 audit(1785933804.596:1183): avc: denied { map_read map_write } for pid=6582 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.176275][ T6577] netlink: 68 bytes leftover after parsing attributes in process `syz.4.209'. [ 133.234352][ T29] audit: type=1400 audit(1785933804.596:1184): avc: denied { prog_run } for pid=6582 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.777167][ T29] audit: type=1400 audit(1785933805.306:1185): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.813740][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.828679][ T29] audit: type=1400 audit(1785933805.356:1186): avc: denied { setopt } for pid=6592 comm="syz.2.214" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.836049][ T6593] xt_hashlimit: size too large, truncated to 1048576 [ 133.895146][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.917161][ T29] audit: type=1400 audit(1785933805.446:1187): avc: denied { connect } for pid=6592 comm="syz.2.214" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.920089][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 133.977240][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.983378][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.123008][ T29] audit: type=1400 audit(1785933805.646:1188): avc: denied { read append } for pid=6599 comm="syz.0.216" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.214276][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 134.271002][ T29] audit: type=1400 audit(1785933805.646:1189): avc: denied { ioctl open } for pid=6599 comm="syz.0.216" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.856533][ T29] audit: type=1400 audit(1785933806.376:1190): avc: denied { create } for pid=6599 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.921794][ T29] audit: type=1400 audit(1785933806.416:1191): avc: denied { read } for pid=6602 comm="syz.3.217" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.001485][ T29] audit: type=1400 audit(1785933806.416:1192): avc: denied { open } for pid=6602 comm="syz.3.217" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.756130][ T5715] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.948972][ T5715] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 136.796619][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.808507][ T5715] usb 2-1: Product: syz [ 136.813714][ T5715] usb 2-1: Manufacturer: syz [ 136.818444][ T5715] usb 2-1: SerialNumber: syz [ 136.834560][ T5715] usb 2-1: config 0 descriptor?? [ 136.845875][ T5715] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 136.925380][ T6640] FAULT_INJECTION: forcing a failure. [ 136.925380][ T6640] name failslab, interval 1, probability 0, space 0, times 0 [ 136.995973][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.2.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.996004][ T6640] Tainted: [L]=SOFTLOCKUP [ 136.996009][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.996019][ T6640] Call Trace: [ 136.996025][ T6640] [ 136.996031][ T6640] dump_stack_lvl+0x100/0x190 [ 136.996057][ T6640] should_fail_ex.cold+0x5/0xa [ 136.996077][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 136.996107][ T6640] should_failslab+0xc2/0x120 [ 136.996129][ T6640] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.996148][ T6640] ? skb_clone+0x190/0x400 [ 136.996174][ T6640] skb_clone+0x190/0x400 [ 136.996195][ T6640] netlink_deliver_tap+0xaed/0xcc0 [ 136.996218][ T6640] netlink_unicast+0x62b/0x850 [ 136.996238][ T6640] ? __pfx_netlink_unicast+0x10/0x10 [ 136.996262][ T6640] netlink_sendmsg+0x8b0/0xda0 [ 136.996283][ T6640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.996305][ T6640] ? selinux_socket_sendmsg+0x198/0x2f0 [ 136.996335][ T6640] ____sys_sendmsg+0xa4d/0xbe0 [ 136.996361][ T6640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.996380][ T6640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.996416][ T6640] ___sys_sendmsg+0x190/0x1e0 [ 136.996435][ T6640] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.996453][ T6640] ? lockdep_hardirqs_on+0x78/0x100 [ 136.996500][ T6640] __sys_sendmsg+0x160/0x210 [ 136.996522][ T6640] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.996555][ T6640] do_syscall_64+0x115/0x870 [ 136.996575][ T6640] ? clear_bhb_loop+0x40/0x90 [ 136.996596][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.996612][ T6640] RIP: 0033:0x7fab4779e0d9 [ 136.996626][ T6640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.996642][ T6640] RSP: 002b:00007fab485ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.996660][ T6640] RAX: ffffffffffffffda RBX: 00007fab47a25fa0 RCX: 00007fab4779e0d9 [ 136.996671][ T6640] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000004 [ 136.996682][ T6640] RBP: 00007fab485ca090 R08: 0000000000000000 R09: 0000000000000000 [ 136.996692][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.996702][ T6640] R13: 00007fab47a26038 R14: 00007fab47a25fa0 R15: 00007ffe4a06b4f8 [ 136.996724][ T6640] [ 137.002925][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 137.011221][ T6640] macvlan2: entered promiscuous mode [ 137.384852][ T5612] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 137.388221][ T5715] gspca_sunplus: reg_r err -71 [ 137.459270][ T5715] usb 2-1: USB disconnect, device number 7 [ 137.500240][ T6650] xt_hashlimit: size too large, truncated to 1048576 [ 137.743727][ T5612] usb 5-1: Using ep0 maxpacket: 32 [ 137.760626][ T5612] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 137.774334][ T5612] usb 5-1: config 0 has no interface number 0 [ 137.781044][ T5612] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 137.794991][ T5612] usb 5-1: config 0 interface 184 has no altsetting 0 [ 137.808875][ T5612] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.820647][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.833525][ T5612] usb 5-1: Product: syz [ 137.838773][ T5612] usb 5-1: Manufacturer: syz [ 137.843550][ T5612] usb 5-1: SerialNumber: syz [ 137.852330][ T5612] usb 5-1: config 0 descriptor?? [ 137.858747][ T6642] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 138.109070][ T6642] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 138.259857][ T6668] o2cb: This node has not been configured. [ 138.266509][ T6668] o2cb: Cluster check failed. Fix errors before retrying. [ 138.273975][ T6668] (syz.0.231,6668,0):user_dlm_register:674 ERROR: status = -22 [ 138.281606][ T6668] (syz.0.231,6668,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file2" [ 138.299568][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 138.299601][ T29] audit: type=1400 audit(1785933809.776:1261): avc: denied { mount } for pid=6658 comm="syz.0.231" name="/" dev="ocfs2_dlmfs" ino=13450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 138.762719][ T29] audit: type=1400 audit(1785933809.786:1262): avc: denied { write } for pid=6658 comm="syz.0.231" name="/" dev="ocfs2_dlmfs" ino=13450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.821581][ T29] audit: type=1400 audit(1785933809.786:1263): avc: denied { add_name } for pid=6658 comm="syz.0.231" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.926507][ T6670] sctp: [Deprecated]: syz.2.232 (pid 6670) Use of int in maxseg socket option. [ 138.926507][ T6670] Use struct sctp_assoc_value instead [ 138.978947][ T29] audit: type=1400 audit(1785933809.786:1264): avc: denied { create } for pid=6658 comm="syz.0.231" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.070729][ T29] audit: type=1400 audit(1785933809.786:1265): avc: denied { associate } for pid=6658 comm="syz.0.231" name="file2" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 139.130624][ T5612] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 139.181910][ T6662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.232'. [ 139.194570][ T29] audit: type=1400 audit(1785933810.226:1266): avc: denied { create } for pid=6664 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.225454][ T29] audit: type=1400 audit(1785933810.246:1267): avc: denied { setopt } for pid=6664 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.257684][ T5612] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 139.277230][ T5612] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 139.297268][ T5612] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 139.311962][ T5612] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 139.312314][ T29] audit: type=1400 audit(1785933810.246:1268): avc: denied { bind } for pid=6664 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.373822][ T5612] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 139.396937][ T5612] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 139.427318][ T5612] usb 5-1: USB disconnect, device number 7 [ 139.445133][ T29] audit: type=1400 audit(1785933810.246:1269): avc: denied { name_bind } for pid=6664 comm="syz.1.233" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 139.503776][ T29] audit: type=1400 audit(1785933810.246:1270): avc: denied { node_bind } for pid=6664 comm="syz.1.233" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 140.785915][ T6691] ima: rule for LSM 'unco' is undefined [ 140.813978][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.855424][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.973693][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.242'. [ 141.072191][ T6690] ima: policy update failed [ 141.118436][ T5734] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 141.226918][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.243'. [ 141.236245][ T6701] openvswitch: netlink: Flow actions attr not present in new flow. [ 141.288522][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.413232][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 143.418433][ T5734] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 143.428775][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.436863][ T5734] usb 2-1: Product: syz [ 143.441158][ T5734] usb 2-1: Manufacturer: syz [ 143.445828][ T5734] usb 2-1: SerialNumber: syz [ 143.452904][ T5734] usb 2-1: config 0 descriptor?? [ 143.460754][ T5734] CoreChips 2-1:0.0: probe with driver CoreChips failed with error -22 [ 143.597814][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 143.597830][ T29] audit: type=1400 audit(1785933815.126:1358): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.629824][ T29] audit: type=1400 audit(1785933815.126:1359): avc: denied { open } for pid=5615 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.677304][ T10] usb 2-1: USB disconnect, device number 8 [ 143.703545][ T29] audit: type=1400 audit(1785933815.126:1360): avc: denied { ioctl } for pid=5615 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.730318][ T29] audit: type=1400 audit(1785933815.146:1361): avc: denied { read write } for pid=6714 comm="syz.4.248" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.800293][ T6710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.838460][ T29] audit: type=1400 audit(1785933815.146:1362): avc: denied { open } for pid=6714 comm="syz.4.248" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.904595][ T5716] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.913610][ T29] audit: type=1400 audit(1785933815.146:1363): avc: denied { ioctl } for pid=6714 comm="syz.4.248" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.974973][ T29] audit: type=1400 audit(1785933815.216:1364): avc: denied { map_create } for pid=6709 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 144.030094][ T29] audit: type=1400 audit(1785933815.216:1365): avc: denied { map_read map_write } for pid=6709 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 144.073944][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 144.081592][ T5716] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 144.098059][ T5716] usb 5-1: config 0 has no interface number 0 [ 144.101649][ T29] audit: type=1400 audit(1785933815.216:1366): avc: denied { execute } for pid=6709 comm="syz.0.246" path="/53/file1" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.129153][ T5716] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 144.139930][ T5716] usb 5-1: config 0 interface 184 has no altsetting 0 [ 144.150681][ T5716] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 144.161093][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.170604][ T5716] usb 5-1: Product: syz [ 144.176097][ T5716] usb 5-1: Manufacturer: syz [ 144.178748][ T29] audit: type=1400 audit(1785933815.286:1367): avc: denied { create } for pid=6721 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.180824][ T5716] usb 5-1: SerialNumber: syz [ 144.211151][ T5716] usb 5-1: config 0 descriptor?? [ 144.235840][ T6716] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.468688][ T6728] syz.0.252 uses obsolete (PF_INET,SOCK_PACKET) [ 144.476535][ T6716] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.683979][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 145.101688][ T6728] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 145.129657][ T6728] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 145.223750][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 145.230810][ T10] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 145.244447][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 145.256739][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.267037][ T10] usb 2-1: Product: syz [ 145.271477][ T10] usb 2-1: Manufacturer: syz [ 145.280669][ T10] usb 2-1: SerialNumber: syz [ 145.294506][ T10] usb 2-1: config 0 descriptor?? [ 145.315831][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 145.331509][ T10] usb 2-1: setting power ON [ 145.346531][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 145.373865][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.394132][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 145.417478][ T10] usb 2-1: media controller created [ 145.441081][ T5716] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 145.454268][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.488538][ T5716] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 145.507909][ T10] usb 2-1: selecting invalid altsetting 6 [ 145.511049][ T5716] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 145.523745][ T10] usb 2-1: digital interface selection failed (-22) [ 145.551166][ T5716] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 145.551926][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 145.571009][ T5716] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 145.599461][ T5716] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 145.620320][ T10] usb 2-1: setting power OFF [ 145.624934][ T5716] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 145.648618][ T5716] usb 5-1: USB disconnect, device number 8 [ 145.675292][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 145.712448][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 145.743238][ T10] (NULL device *): no alternate interface [ 145.784612][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 145.829578][ T10] usb 2-1: USB disconnect, device number 9 [ 147.287435][ T6764] xt_hashlimit: size too large, truncated to 1048576 [ 147.327528][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.265'. [ 147.688188][ T6781] IPVS: ip_vs_add_dest(): server weight less than zero [ 147.711974][ T5343] IPVS: starting estimator thread 0... [ 148.369042][ T6782] IPVS: using max 37 ests per chain, 88800 per kthread [ 148.611925][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 148.611971][ T29] audit: type=1400 audit(1785933820.116:1441): avc: denied { write } for pid=6785 comm="syz.2.269" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.912992][ T29] audit: type=1400 audit(1785933820.186:1442): avc: denied { read write } for pid=6787 comm="syz.4.270" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.019041][ T6788] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 149.107769][ T6789] syz.4.270: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.165988][ T29] audit: type=1400 audit(1785933820.186:1443): avc: denied { open } for pid=6787 comm="syz.4.270" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.211390][ T6789] CPU: 0 UID: 0 PID: 6789 Comm: syz.4.270 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.211422][ T6789] Tainted: [L]=SOFTLOCKUP [ 149.211428][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 149.211439][ T6789] Call Trace: [ 149.211446][ T6789] [ 149.211453][ T6789] dump_stack_lvl+0x100/0x190 [ 149.211480][ T6789] warn_alloc.cold+0x94/0xa8 [ 149.211495][ T6789] ? __pfx_warn_alloc+0x10/0x10 [ 149.211507][ T6789] ? register_lock_class+0x40/0x560 [ 149.211525][ T6789] ? kasan_save_stack+0x3f/0x50 [ 149.211538][ T6789] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 149.211563][ T6789] ? xskq_create+0x52/0x1d0 [ 149.211581][ T6789] ? xsk_setsockopt+0x743/0xab0 [ 149.211598][ T6789] ? do_sock_setsockopt+0xf3/0x1d0 [ 149.211623][ T6789] ? __sys_setsockopt+0x195/0x220 [ 149.211637][ T6789] ? __x64_sys_setsockopt+0xbd/0x160 [ 149.211650][ T6789] ? do_syscall_64+0x115/0x870 [ 149.211663][ T6789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.211677][ T6789] ? xskq_create+0xfb/0x1d0 [ 149.211689][ T6789] __vmalloc_node_range_noprof+0x136c/0x1630 [ 149.211726][ T6789] ? xskq_create+0xfb/0x1d0 [ 149.211751][ T6789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.211777][ T6789] ? kasan_save_track+0x14/0x30 [ 149.211789][ T6789] ? __kasan_kmalloc+0xaa/0xb0 [ 149.211803][ T6789] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 149.211820][ T6789] ? xskq_create+0xfb/0x1d0 [ 149.211832][ T6789] vmalloc_user_noprof+0x9e/0xe0 [ 149.211856][ T6789] ? xskq_create+0xfb/0x1d0 [ 149.211875][ T6789] xskq_create+0xfb/0x1d0 [ 149.211902][ T6789] xsk_setsockopt+0x743/0xab0 [ 149.211920][ T6789] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.211933][ T6789] ? find_held_lock+0x2b/0x80 [ 149.211943][ T6789] ? __fget_files+0x215/0x3d0 [ 149.211959][ T6789] ? selinux_socket_setsockopt+0x6a/0x80 [ 149.211977][ T6789] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.211995][ T6789] do_sock_setsockopt+0xf3/0x1d0 [ 149.212025][ T6789] __sys_setsockopt+0x195/0x220 [ 149.212051][ T6789] __x64_sys_setsockopt+0xbd/0x160 [ 149.212069][ T6789] ? do_syscall_64+0x90/0x870 [ 149.212083][ T6789] ? lockdep_hardirqs_on+0x78/0x100 [ 149.212098][ T6789] do_syscall_64+0x115/0x870 [ 149.212112][ T6789] ? clear_bhb_loop+0x40/0x90 [ 149.212125][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.212142][ T6789] RIP: 0033:0x7fc785b9e0d9 [ 149.212159][ T6789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.212176][ T6789] RSP: 002b:00007fc7869e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.212194][ T6789] RAX: ffffffffffffffda RBX: 00007fc785e25fa0 RCX: 00007fc785b9e0d9 [ 149.212206][ T6789] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 149.212215][ T6789] RBP: 00007fc785c35024 R08: 0000000000000029 R09: 0000000000000000 [ 149.212221][ T6789] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.212227][ T6789] R13: 00007fc785e26038 R14: 00007fc785e25fa0 R15: 00007ffd102e77e8 [ 149.212241][ T6789] [ 149.212253][ T6789] Mem-Info: [ 149.343680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.579704][ T29] audit: type=1400 audit(1785933820.226:1444): avc: denied { ioctl } for pid=6787 comm="syz.4.270" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.626577][ T29] audit: type=1400 audit(1785933820.386:1445): avc: denied { read write } for pid=6785 comm="syz.2.269" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.675173][ T6789] active_anon:10673 inactive_anon:0 isolated_anon:0 [ 149.675173][ T6789] active_file:65 inactive_file:57189 isolated_file:0 [ 149.675173][ T6789] unevictable:768 dirty:414 writeback:0 [ 149.675173][ T6789] slab_reclaimable:11570 slab_unreclaimable:98309 [ 149.675173][ T6789] mapped:33393 shmem:1293 pagetables:1208 [ 149.675173][ T6789] sec_pagetables:0 bounce:0 [ 149.675173][ T6789] kernel_misc_reclaimable:0 [ 149.675173][ T6789] free:1296339 free_pcp:9628 free_cma:0 [ 149.684557][ T29] audit: type=1400 audit(1785933820.406:1446): avc: denied { open } for pid=6785 comm="syz.2.269" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.897033][ T6789] Node 0 active_anon:42692kB inactive_anon:0kB active_file:260kB inactive_file:228960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125372kB dirty:1652kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12208kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 150.165081][ T29] audit: type=1400 audit(1785933820.546:1447): avc: denied { ioctl } for pid=6785 comm="syz.2.269" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.312173][ T6789] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 150.378544][ T29] audit: type=1400 audit(1785933820.616:1448): avc: denied { create } for pid=6787 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.515401][ T6789] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.527226][ T29] audit: type=1400 audit(1785933820.636:1449): avc: denied { setopt } for pid=6787 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.621495][ T29] audit: type=1400 audit(1785933820.656:1450): avc: denied { map } for pid=6785 comm="syz.2.269" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.660305][ T6789] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 150.718568][ T6789] Node 0 DMA32 free:1225964kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42572kB inactive_anon:0kB active_file:260kB inactive_file:229016kB unevictable:1696kB writepending:1684kB zspages:0kB present:3129332kB managed:2532144kB mlocked:160kB bounce:0kB free_pcp:38340kB local_pcp:17592kB free_cma:0kB [ 150.846553][ T6789] lowmem_reserve[]: 0 0 0 0 0 [ 150.851987][ T6789] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.931650][ T6819] kAFS: unable to lookup cell '(,c¾Ì' [ 150.939256][ T6789] lowmem_reserve[]: 0 0 0 0 0 [ 150.947754][ T6789] Node 1 Normal free:3943360kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.980853][ T6819] dlm: Unknown command passed to DLM device : 3 [ 150.980853][ T6819] [ 151.143793][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.254467][ T6789] lowmem_reserve[]: 0 0 0 0 0 [ 151.262119][ T6789] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.318517][ T6789] Node 0 DMA32: 510*4kB (M) 1159*8kB (UM) 302*16kB (UM) 390*32kB (UME) 247*64kB (UME) 204*128kB (UME) 75*256kB (UME) 25*512kB (UME) 16*1024kB (UM) 5*2048kB (UM) 268*4096kB (UM) = 1226896kB [ 151.419856][ T6789] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 151.439990][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 151.443739][ T6789] Node 1 Normal: 0*4kB 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 2*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943360kB [ 151.459273][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 151.481663][ T10] usb 3-1: config 0 has no interface number 0 [ 151.493126][ T10] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 151.525425][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 151.535938][ T6789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.544895][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 151.556182][ T6828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.283'. [ 151.565430][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.579662][ T10] usb 3-1: Product: syz [ 151.601406][ T10] usb 3-1: Manufacturer: syz [ 151.613061][ T10] usb 3-1: SerialNumber: syz [ 151.626277][ T6827] misc userio: No port type given on /dev/userio [ 151.637614][ T10] usb 3-1: config 0 descriptor?? [ 151.744236][ T6789] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.762253][ T6789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.772072][ T6789] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.780932][ T6817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.815530][ T6789] 64355 total pagecache pages [ 152.016813][ T6833] IPVS: ip_vs_add_dest(): server weight less than zero [ 152.411394][ T6789] 0 pages in swap cache [ 152.538376][ T6789] Free swap = 124996kB [ 152.554980][ T6789] Total swap = 124996kB [ 152.566815][ T6789] 2097051 pages RAM [ 152.575925][ T6789] 0 pages HighMem/MovableOnly [ 152.586804][ T6789] 432306 pages reserved [ 152.596640][ T6789] 0 pages cma reserved [ 152.608614][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 152.626912][ T6817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.653308][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 152.963095][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 152.994465][ T6839] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.080383][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.288'. [ 153.131217][ T6842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.718212][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 153.762885][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 153.804072][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 153.826571][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 153.849408][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 153.877209][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 153.895963][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 153.895980][ T29] audit: type=1400 audit(1785933825.426:1471): avc: denied { mounton } for pid=6862 comm="syz.1.291" path="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.897548][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 153.984839][ T10] usb 3-1: USB disconnect, device number 9 [ 154.063673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.409692][ T6873] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.579647][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 156.130136][ T6880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.295'. [ 156.152265][ T29] audit: type=1400 audit(1785933827.596:1472): avc: denied { bind } for pid=6877 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.330054][ T29] audit: type=1400 audit(1785933827.836:1473): avc: denied { read write } for pid=6878 comm="syz.3.296" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 156.368138][ T29] audit: type=1400 audit(1785933827.836:1474): avc: denied { open } for pid=6878 comm="syz.3.296" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 156.404705][ T6888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.298'. [ 156.433997][ T29] audit: type=1400 audit(1785933827.846:1475): avc: denied { mounton } for pid=6878 comm="syz.3.296" path="/67/file0" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.456903][ T29] audit: type=1400 audit(1785933827.886:1476): avc: denied { mount } for pid=6878 comm="syz.3.296" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 156.479103][ T29] audit: type=1400 audit(1785933827.926:1477): avc: denied { map } for pid=6892 comm="syz.2.299" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.505005][ T29] audit: type=1400 audit(1785933827.936:1478): avc: denied { create } for pid=6892 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.505072][ T29] audit: type=1400 audit(1785933827.936:1479): avc: denied { append } for pid=6892 comm="syz.2.299" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.505108][ T29] audit: type=1400 audit(1785933827.946:1480): avc: denied { mount } for pid=6892 comm="syz.2.299" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 156.537017][ T6895] xt_hashlimit: size too large, truncated to 1048576 [ 156.664704][ T5798] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.828037][ T5798] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 156.837736][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.851187][ T5798] usb 3-1: Product: syz [ 156.868332][ T5798] usb 3-1: Manufacturer: syz [ 156.876551][ T5798] usb 3-1: SerialNumber: syz [ 156.898119][ T5798] usb 3-1: config 0 descriptor?? [ 156.918725][ T5798] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 156.983124][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 157.177783][ T5798] gspca_sunplus: reg_r err -71 [ 157.187329][ T5798] usb 3-1: USB disconnect, device number 10 [ 157.415871][ T50] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 157.599722][ T6897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.821496][ T6924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=6924 comm=syz.0.305 [ 157.834777][ T6924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6924 comm=syz.0.305 [ 157.867113][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 157.876122][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 157.923361][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 157.932482][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 158.054519][ T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.133871][ T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.185665][ T138] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.296855][ T3355] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.859805][ T6933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.344457][ T6937] syz.4.309: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 160.416348][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 160.416364][ T29] audit: type=1400 audit(1785933831.946:1487): avc: denied { ioctl } for pid=6938 comm="syz.2.311" path="socket:[15063]" dev="sockfs" ino=15063 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.417907][ T6937] CPU: 1 UID: 0 PID: 6937 Comm: syz.4.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.417936][ T6937] Tainted: [L]=SOFTLOCKUP [ 160.417943][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.417953][ T6937] Call Trace: [ 160.417959][ T6937] [ 160.417966][ T6937] dump_stack_lvl+0x100/0x190 [ 160.417991][ T6937] warn_alloc.cold+0x94/0xa8 [ 160.418012][ T6937] ? __pfx_warn_alloc+0x10/0x10 [ 160.418032][ T6937] ? register_lock_class+0x40/0x560 [ 160.418056][ T6937] ? kasan_save_stack+0x3f/0x50 [ 160.418076][ T6937] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 160.418100][ T6937] ? xskq_create+0x52/0x1d0 [ 160.418118][ T6937] ? xsk_setsockopt+0x743/0xab0 [ 160.418135][ T6937] ? do_sock_setsockopt+0xf3/0x1d0 [ 160.418158][ T6937] ? __sys_setsockopt+0x195/0x220 [ 160.418176][ T6937] ? __x64_sys_setsockopt+0xbd/0x160 [ 160.418195][ T6937] ? do_syscall_64+0x115/0x870 [ 160.418214][ T6937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.418235][ T6937] ? xskq_create+0xfb/0x1d0 [ 160.418252][ T6937] __vmalloc_node_range_noprof+0x136c/0x1630 [ 160.418283][ T6937] ? xskq_create+0xfb/0x1d0 [ 160.418313][ T6937] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.418339][ T6937] ? kasan_save_track+0x14/0x30 [ 160.418357][ T6937] ? __kasan_kmalloc+0xaa/0xb0 [ 160.418376][ T6937] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 160.418401][ T6937] ? xskq_create+0xfb/0x1d0 [ 160.418419][ T6937] vmalloc_user_noprof+0x9e/0xe0 [ 160.418443][ T6937] ? xskq_create+0xfb/0x1d0 [ 160.418460][ T6937] xskq_create+0xfb/0x1d0 [ 160.418479][ T6937] xsk_setsockopt+0x743/0xab0 [ 160.418498][ T6937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.418515][ T6937] ? find_held_lock+0x2b/0x80 [ 160.418529][ T6937] ? __fget_files+0x215/0x3d0 [ 160.418549][ T6937] ? selinux_socket_setsockopt+0x6a/0x80 [ 160.418573][ T6937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.418591][ T6937] do_sock_setsockopt+0xf3/0x1d0 [ 160.418617][ T6937] __sys_setsockopt+0x195/0x220 [ 160.418641][ T6937] __x64_sys_setsockopt+0xbd/0x160 [ 160.418661][ T6937] ? do_syscall_64+0x90/0x870 [ 160.418679][ T6937] ? lockdep_hardirqs_on+0x78/0x100 [ 160.418699][ T6937] do_syscall_64+0x115/0x870 [ 160.418717][ T6937] ? clear_bhb_loop+0x40/0x90 [ 160.418736][ T6937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.418752][ T6937] RIP: 0033:0x7fc785b9e0d9 [ 160.418767][ T6937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.418782][ T6937] RSP: 002b:00007fc7869e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.418799][ T6937] RAX: ffffffffffffffda RBX: 00007fc785e25fa0 RCX: 00007fc785b9e0d9 [ 160.418812][ T6937] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 160.418822][ T6937] RBP: 00007fc785c35024 R08: 0000000000000029 R09: 0000000000000000 [ 160.418833][ T6937] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.418844][ T6937] R13: 00007fc785e26038 R14: 00007fc785e25fa0 R15: 00007ffd102e77e8 [ 160.418868][ T6937] [ 160.418896][ T6937] Mem-Info: [ 160.759322][ T6937] active_anon:10594 inactive_anon:0 isolated_anon:0 [ 160.759322][ T6937] active_file:65 inactive_file:57374 isolated_file:0 [ 160.759322][ T6937] unevictable:768 dirty:363 writeback:0 [ 160.759322][ T6937] slab_reclaimable:11588 slab_unreclaimable:98365 [ 160.759322][ T6937] mapped:32385 shmem:1292 pagetables:1253 [ 160.759322][ T6937] sec_pagetables:0 bounce:0 [ 160.759322][ T6937] kernel_misc_reclaimable:0 [ 160.759322][ T6937] free:1295261 free_pcp:9862 free_cma:0 [ 160.807592][ T6937] Node 0 active_anon:42376kB inactive_anon:0kB active_file:260kB inactive_file:229300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129540kB dirty:1448kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12388kB pagetables:4860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 160.842109][ T6937] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 160.881098][ T6937] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.250780][ T6937] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 161.258168][ T6937] Node 0 DMA32 free:1221772kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42460kB inactive_anon:0kB active_file:260kB inactive_file:229300kB unevictable:1536kB writepending:1436kB zspages:0kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:39572kB local_pcp:23920kB free_cma:0kB [ 161.294104][ T6937] lowmem_reserve[]: 0 0 0 0 0 [ 161.298971][ T6937] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.339238][ T6937] lowmem_reserve[]: 0 0 0 0 0 [ 161.345118][ T6937] Node 1 Normal free:3943360kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.377221][ T6937] lowmem_reserve[]: 0 0 0 0 0 [ 161.381978][ T6937] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.395534][ T6937] Node 0 DMA32: 504*4kB (UM) 528*8kB (UM) 320*16kB (UM) 423*32kB (UME) 261*64kB (UME) 216*128kB (UME) 80*256kB (UME) 27*512kB (UME) 18*1024kB (UM) 3*2048kB (U) 267*4096kB (UM) = 1221760kB [ 161.415016][ T6937] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 161.426987][ T6937] Node 1 Normal: 0*4kB 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 2*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943360kB [ 161.443720][ T6937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.453743][ T6937] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.473250][ T6937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.482936][ T5715] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 161.490692][ T5734] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.500054][ T6937] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.509639][ T6937] 58726 total pagecache pages [ 161.515997][ T6937] 0 pages in swap cache [ 161.520646][ T6937] Free swap = 124996kB [ 161.525193][ T6937] Total swap = 124996kB [ 161.529394][ T6937] 2097051 pages RAM [ 161.533206][ T6937] 0 pages HighMem/MovableOnly [ 161.538373][ T6937] 432306 pages reserved [ 161.542652][ T6937] 0 pages cma reserved [ 161.610022][ T6951] netlink: 32 bytes leftover after parsing attributes in process `syz.4.314'. [ 161.644271][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 161.649801][ T5734] usb 2-1: Using ep0 maxpacket: 32 [ 161.657173][ T5715] usb 3-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 161.676958][ T5734] usb 2-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 161.681768][ T6953] fuse: Unknown parameter 'use00000000000000000000' [ 161.700245][ T5715] usb 3-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 161.710050][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.719057][ T5715] usb 3-1: Product: syz [ 161.723863][ T5734] usb 2-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 161.735512][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.751469][ T5715] usb 3-1: Manufacturer: syz [ 161.756187][ T5715] usb 3-1: SerialNumber: syz [ 161.765550][ T5734] usb 2-1: Product: syz [ 161.770893][ T5734] usb 2-1: Manufacturer: syz [ 161.772330][ T5715] pwc: Askey VC010 type 1 USB webcam detected. [ 161.783717][ T5734] usb 2-1: SerialNumber: syz [ 161.805006][ T29] audit: type=1400 audit(1785933833.336:1488): avc: denied { setopt } for pid=6956 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.889938][ T5734] pwc: Askey VC010 type 1 USB webcam detected. [ 162.018846][ T29] audit: type=1400 audit(1785933833.526:1489): avc: denied { create } for pid=6958 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.079532][ T5715] pwc: send_video_command error -71 [ 162.141942][ T5715] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 162.154022][ T5734] pwc: send_video_command error -71 [ 162.198788][ T5734] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 162.225029][ T5715] Philips webcam 3-1:76.0: probe with driver Philips webcam failed with error -71 [ 162.244515][ T29] audit: type=1400 audit(1785933833.526:1490): avc: denied { create } for pid=6958 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.285672][ T5734] Philips webcam 2-1:76.0: probe with driver Philips webcam failed with error -71 [ 162.361229][ T5715] usb 3-1: USB disconnect, device number 11 [ 162.424083][ T29] audit: type=1400 audit(1785933833.596:1491): avc: denied { create } for pid=6958 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 162.494945][ T5734] usb 2-1: USB disconnect, device number 10 [ 162.681538][ T29] audit: type=1400 audit(1785933833.626:1492): avc: denied { bind } for pid=6958 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.904347][ T29] audit: type=1400 audit(1785933833.946:1493): avc: denied { mount } for pid=6962 comm="syz.3.319" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.023069][ T29] audit: type=1400 audit(1785933833.976:1494): avc: denied { unmount } for pid=6962 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.056501][ T29] audit: type=1400 audit(1785933834.176:1495): avc: denied { read write } for pid=6963 comm="syz.0.320" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.083659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 163.092167][ T29] audit: type=1400 audit(1785933834.176:1496): avc: denied { open } for pid=6963 comm="syz.0.320" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.157839][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 164.521548][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.325'. [ 165.569504][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 165.569521][ T29] audit: type=1400 audit(1785933837.046:1567): avc: denied { write } for pid=7001 comm="syz.0.330" name="ipv6_route" dev="proc" ino=4026533118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 165.752754][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.766005][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.822758][ T29] audit: type=1400 audit(1785933837.246:1568): avc: denied { read } for pid=7001 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.943461][ T29] audit: type=1400 audit(1785933837.276:1569): avc: denied { write } for pid=7001 comm="syz.0.330" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.419634][ T29] audit: type=1400 audit(1785933837.946:1570): avc: denied { read } for pid=6999 comm="syz.4.329" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 166.691401][ T29] audit: type=1400 audit(1785933837.946:1571): avc: denied { open } for pid=6999 comm="syz.4.329" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 167.087223][ T29] audit: type=1400 audit(1785933838.146:1572): avc: denied { ioctl } for pid=7010 comm="syz.3.331" path="socket:[14257]" dev="sockfs" ino=14257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.168517][ T7018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.332'. [ 167.184173][ T5715] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.201643][ T29] audit: type=1400 audit(1785933838.726:1573): avc: denied { create } for pid=7017 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.230609][ T29] audit: type=1400 audit(1785933838.756:1574): avc: denied { bind } for pid=7017 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.278883][ T29] audit: type=1400 audit(1785933838.756:1575): avc: denied { mounton } for pid=7017 comm="syz.2.332" path="/57/sys" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 167.309593][ T29] audit: type=1400 audit(1785933838.756:1576): avc: denied { mount } for pid=7017 comm="syz.2.332" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 167.354301][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 167.361550][ T5715] usb 4-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 167.365711][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.334'. [ 167.389392][ T5715] usb 4-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 167.405334][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.421649][ T5715] usb 4-1: Product: syz [ 167.447146][ T5715] usb 4-1: Manufacturer: syz [ 167.464008][ T5715] usb 4-1: SerialNumber: syz [ 167.484468][ T5734] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 167.589943][ T5715] pwc: Askey VC010 type 1 USB webcam detected. [ 167.664927][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 167.678162][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.691925][ T5734] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.756924][ T5734] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 167.827899][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.856341][ T5715] pwc: send_video_command error -71 [ 167.888082][ T5715] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 168.001594][ T5715] Philips webcam 4-1:76.0: probe with driver Philips webcam failed with error -71 [ 168.031976][ T5734] usb 2-1: config 0 descriptor?? [ 168.202742][ T5734] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 168.244187][ T5715] usb 4-1: USB disconnect, device number 9 [ 168.277085][ T5734] dvb-usb: bulk message failed: -22 (3/0) [ 168.557846][ T5734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.573931][ T5734] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 168.581013][ T5734] usb 2-1: media controller created [ 168.595710][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.671913][ T7033] fuse: Unknown parameter '' [ 169.135566][ T5734] dvb-usb: bulk message failed: -22 (6/0) [ 169.176696][ T5734] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 169.231280][ T5734] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 169.238980][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 169.259256][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 169.285637][ T5734] dvb-usb: schedule remote query interval to 150 msecs. [ 169.293030][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 169.315113][ T5734] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 169.389928][ T7042] ima: rule for LSM 'unco' is undefined [ 169.475755][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 169.529087][ T5734] dvb-usb: error while querying for an remote control event. [ 170.182091][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 170.200723][ T7041] ima: policy update failed [ 170.220495][ T5734] dvb-usb: error while querying for an remote control event. [ 170.276773][ T5798] usb 2-1: USB disconnect, device number 11 [ 170.582750][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 170.582768][ T29] audit: type=1400 audit(1785933842.106:1620): avc: denied { read } for pid=7058 comm="syz.1.342" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 170.595184][ T5798] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 170.697188][ T29] audit: type=1400 audit(1785933842.106:1621): avc: denied { open } for pid=7058 comm="syz.1.342" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 170.776101][ T29] audit: type=1400 audit(1785933842.156:1622): avc: denied { ioctl } for pid=7058 comm="syz.1.342" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 170.823860][ T7064] netlink: 60 bytes leftover after parsing attributes in process `syz.3.344'. [ 170.833138][ T29] audit: type=1400 audit(1785933842.156:1623): avc: denied { create } for pid=7058 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.862316][ T29] audit: type=1400 audit(1785933842.166:1624): avc: denied { open } for pid=7058 comm="syz.1.342" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 170.888496][ T29] audit: type=1400 audit(1785933842.176:1625): avc: denied { ioctl } for pid=7058 comm="syz.1.342" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 170.957694][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.343'. [ 170.988917][ T29] audit: type=1400 audit(1785933842.176:1626): avc: denied { write } for pid=7058 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.016998][ T29] audit: type=1400 audit(1785933842.336:1627): avc: denied { map } for pid=7061 comm="syz.0.343" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.040923][ T29] audit: type=1400 audit(1785933842.356:1628): avc: denied { create } for pid=7061 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.048363][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.062459][ T29] audit: type=1400 audit(1785933842.386:1629): avc: denied { append } for pid=7061 comm="syz.0.343" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.095230][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.142396][ T7073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'. [ 171.963754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 173.199112][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 173.216721][ T7107] netlink: 60 bytes leftover after parsing attributes in process `syz.3.356'. [ 173.289274][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 173.298827][ T7109] macvlan0: entered promiscuous mode [ 173.305915][ T7109] netlink: 44 bytes leftover after parsing attributes in process `syz.2.357'. [ 173.783321][ T7117] IPVS: ip_vs_add_dest(): server weight less than zero [ 175.288572][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 175.297973][ T7126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.361'. [ 175.480326][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 175.489488][ T7130] netlink: 44 bytes leftover after parsing attributes in process `syz.4.362'. [ 176.275080][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 176.275098][ T29] audit: type=1400 audit(1785933847.796:1712): avc: denied { create } for pid=7120 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.723396][ T29] audit: type=1400 audit(1785933848.246:1713): avc: denied { read write } for pid=7138 comm="syz.4.365" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 176.786217][ T29] audit: type=1400 audit(1785933848.306:1714): avc: denied { read } for pid=7135 comm="syz.2.364" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 176.824149][ T7139] fuse: Unknown parameter 'user_id00000000000000000000' [ 176.873207][ T29] audit: type=1400 audit(1785933848.306:1715): avc: denied { open } for pid=7135 comm="syz.2.364" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 176.918931][ T7144] vlan2: entered promiscuous mode [ 176.922760][ T29] audit: type=1400 audit(1785933848.316:1716): avc: denied { open } for pid=7138 comm="syz.4.365" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 176.974720][ T7144] batadv0: entered promiscuous mode [ 177.004683][ T29] audit: type=1400 audit(1785933848.356:1717): avc: denied { mounton } for pid=7138 comm="syz.4.365" path="/67/file0" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.053060][ T29] audit: type=1400 audit(1785933848.376:1718): avc: denied { execute } for pid=7141 comm="syz.1.366" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.075866][ T29] audit: type=1400 audit(1785933848.376:1719): avc: denied { execute_no_trans } for pid=7141 comm="syz.1.366" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.105903][ T29] audit: type=1400 audit(1785933848.386:1720): avc: denied { create } for pid=7141 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.126207][ T29] audit: type=1400 audit(1785933848.386:1721): avc: denied { write } for pid=7141 comm="syz.1.366" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.369042][ T7167] overlay: ./file0 is not a directory [ 179.590597][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 179.617496][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'. [ 179.639835][ T7165] openvswitch: netlink: Flow key attr not present in new flow. [ 179.946022][ T7177] IPVS: ip_vs_add_dest(): server weight less than zero [ 180.461767][ T5715] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 180.517966][ T5734] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 180.640883][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 180.661474][ T5715] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 180.663683][ T7181] ima: rule for LSM 'unco' is undefined [ 180.686147][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'. [ 180.688314][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 180.708588][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 180.719757][ T5734] usb 3-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 180.743801][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 65492, setting to 64 [ 180.747211][ T7180] ima: policy update failed [ 180.760981][ T5734] usb 3-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 180.778109][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.786252][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.810309][ T5734] usb 3-1: Product: syz [ 180.828086][ T5734] usb 3-1: Manufacturer: syz [ 180.836536][ T5715] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 180.846053][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.855629][ T5734] usb 3-1: SerialNumber: syz [ 180.864577][ T5715] usb 4-1: Product: syz [ 180.877698][ T5715] usb 4-1: Manufacturer: syz [ 180.890930][ T5734] pwc: Askey VC010 type 1 USB webcam detected. [ 180.899266][ T5715] usb 4-1: SerialNumber: syz [ 180.925030][ T5715] usb 4-1: config 0 descriptor?? [ 180.936739][ T7165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.957243][ T7184] FAULT_INJECTION: forcing a failure. [ 180.957243][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 180.979309][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.4.378 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.979340][ T7184] Tainted: [L]=SOFTLOCKUP [ 180.979346][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 180.979356][ T7184] Call Trace: [ 180.979362][ T7184] [ 180.979369][ T7184] dump_stack_lvl+0x100/0x190 [ 180.979401][ T7184] should_fail_ex.cold+0x5/0xa [ 180.979424][ T7184] should_failslab+0xc2/0x120 [ 180.979445][ T7184] __kmalloc_noprof+0xfc/0x820 [ 180.979467][ T7184] ? tomoyo_encode2+0xfb/0x3c0 [ 180.979495][ T7184] tomoyo_encode2+0xfb/0x3c0 [ 180.979516][ T7184] tomoyo_encode+0x29/0x50 [ 180.979532][ T7184] tomoyo_realpath_from_path+0x18c/0x690 [ 180.979556][ T7184] tomoyo_path_number_perm+0x23c/0x580 [ 180.979578][ T7184] ? tomoyo_path_number_perm+0x22e/0x580 [ 180.979602][ T7184] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 180.979651][ T7184] ? find_held_lock+0x2b/0x80 [ 180.979668][ T7184] ? __fget_files+0x215/0x3d0 [ 180.979686][ T7184] ? hook_file_ioctl_common+0x140/0x440 [ 180.979706][ T7184] ? __fget_files+0x215/0x3d0 [ 180.979727][ T7184] ? __fget_files+0x21f/0x3d0 [ 180.979749][ T7184] security_file_ioctl+0xd3/0x230 [ 180.979777][ T7184] __x64_sys_ioctl+0xb7/0x210 [ 180.979804][ T7184] do_syscall_64+0x115/0x870 [ 180.979826][ T7184] ? clear_bhb_loop+0x40/0x90 [ 180.979848][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.979867][ T7184] RIP: 0033:0x7fc785b9e0d9 [ 180.979882][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.979899][ T7184] RSP: 002b:00007fc7869e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.979916][ T7184] RAX: ffffffffffffffda RBX: 00007fc785e25fa0 RCX: 00007fc785b9e0d9 [ 180.979927][ T7184] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 180.979938][ T7184] RBP: 00007fc7869e2090 R08: 0000000000000000 R09: 0000000000000000 [ 180.979948][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.979958][ T7184] R13: 00007fc785e26038 R14: 00007fc785e25fa0 R15: 00007ffd102e77e8 [ 180.979981][ T7184] [ 180.980016][ T7184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.213309][ T5734] pwc: send_video_command error -71 [ 181.223712][ T5715] rc_core: IR keymap rc-xbox-dvd not found [ 181.229566][ T5734] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 181.237111][ T5715] Registered IR keymap rc-empty [ 181.247541][ T5715] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 181.263738][ T5734] Philips webcam 3-1:76.0: probe with driver Philips webcam failed with error -71 [ 181.277326][ T5715] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 181.289386][ T5734] usb 3-1: USB disconnect, device number 12 [ 181.307015][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 181.307029][ T29] audit: type=1400 audit(1785933852.836:1756): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=2996 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.319266][ T5715] usb 4-1: USB disconnect, device number 10 [ 181.335768][ C0] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 181.428811][ T29] audit: type=1400 audit(1785933852.836:1757): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2996 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.499344][ T29] audit: type=1400 audit(1785933852.836:1758): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2996 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.556304][ T29] audit: type=1400 audit(1785933853.016:1759): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 181.643645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.740439][ T29] audit: type=1400 audit(1785933853.016:1760): avc: denied { read } for pid=7185 comm="syz.4.379" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 181.770075][ T29] audit: type=1400 audit(1785933853.016:1761): avc: denied { open } for pid=7185 comm="syz.4.379" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 181.812853][ T29] audit: type=1400 audit(1785933853.066:1762): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.173152][ T29] audit: type=1400 audit(1785933853.066:1763): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.220119][ T5716] IPVS: starting estimator thread 0... [ 182.233379][ T7198] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 182.242352][ T29] audit: type=1400 audit(1785933853.066:1764): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.271519][ T29] audit: type=1400 audit(1785933853.086:1765): avc: denied { read write } for pid=7185 comm="syz.4.379" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.323738][ T7201] IPVS: using max 77 ests per chain, 184800 per kthread [ 182.325999][ T7198] vlan2: entered promiscuous mode [ 182.369867][ T7198] bridge0: entered promiscuous mode [ 183.667581][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 183.699709][ T7216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.387'. [ 184.136861][ T7226] IPVS: ip_vs_add_dest(): server weight less than zero [ 185.302981][ T7234] kAFS: unable to lookup cell 'ÿ' [ 187.082005][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 187.082126][ T29] audit: type=1400 audit(1785933858.606:1815): avc: denied { create } for pid=7267 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 187.343389][ T29] audit: type=1400 audit(1785933858.656:1816): avc: denied { write } for pid=7267 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 187.375760][ T29] audit: type=1400 audit(1785933858.796:1817): avc: denied { mounton } for pid=7267 comm="syz.0.398" path="/78/sys" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 187.469353][ T29] audit: type=1400 audit(1785933858.816:1818): avc: denied { mount } for pid=7267 comm="syz.0.398" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 187.522020][ T29] audit: type=1400 audit(1785933858.976:1819): avc: denied { create } for pid=7269 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.587966][ T29] audit: type=1400 audit(1785933858.976:1820): avc: denied { mmap_zero } for pid=7269 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 187.650745][ T29] audit: type=1400 audit(1785933858.976:1821): avc: denied { allowed } for pid=7269 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.695876][ T29] audit: type=1400 audit(1785933859.036:1822): avc: denied { map } for pid=7269 comm="syz.2.399" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.730573][ T29] audit: type=1400 audit(1785933859.036:1823): avc: denied { read write } for pid=7269 comm="syz.2.399" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.766127][ T29] audit: type=1400 audit(1785933859.096:1824): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 187.798036][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 188.701588][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.708279][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.763454][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.404'. [ 189.113709][ T7308] IPVS: ip_vs_add_dest(): server weight less than zero [ 189.130812][ T805] IPVS: starting estimator thread 0... [ 189.546799][ T7309] IPVS: using max 45 ests per chain, 108000 per kthread [ 191.512494][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 191.636084][ T7336] FAULT_INJECTION: forcing a failure. [ 191.636084][ T7336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.649633][ T7336] CPU: 0 UID: 0 PID: 7336 Comm: syz.4.413 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.649662][ T7336] Tainted: [L]=SOFTLOCKUP [ 191.649667][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 191.649677][ T7336] Call Trace: [ 191.649683][ T7336] [ 191.649690][ T7336] dump_stack_lvl+0x100/0x190 [ 191.649719][ T7336] should_fail_ex.cold+0x5/0xa [ 191.649742][ T7336] _copy_from_iter+0x1f4/0x1690 [ 191.649770][ T7336] ? __asan_memset+0x23/0x50 [ 191.649789][ T7336] ? __pfx__copy_from_iter+0x10/0x10 [ 191.649813][ T7336] ? __pfx___alloc_skb+0x10/0x10 [ 191.649834][ T7336] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 191.649862][ T7336] ? sock_has_perm+0x25a/0x2f0 [ 191.649885][ T7336] ? __pfx_sock_has_perm+0x10/0x10 [ 191.649914][ T7336] netlink_sendmsg+0x808/0xda0 [ 191.649938][ T7336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.649959][ T7336] ? selinux_socket_sendmsg+0x198/0x2f0 [ 191.649989][ T7336] ____sys_sendmsg+0xa4d/0xbe0 [ 191.650016][ T7336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.650037][ T7336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.650076][ T7336] ___sys_sendmsg+0x190/0x1e0 [ 191.650095][ T7336] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.650111][ T7336] ? __lock_acquire+0x49f/0x1a40 [ 191.650130][ T7336] ? get_pid_task+0x106/0x250 [ 191.650168][ T7336] __sys_sendmsg+0x160/0x210 [ 191.650191][ T7336] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.650226][ T7336] do_syscall_64+0x115/0x870 [ 191.650249][ T7336] ? clear_bhb_loop+0x40/0x90 [ 191.650276][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.650292][ T7336] RIP: 0033:0x7fc785b9e0d9 [ 191.650308][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.650324][ T7336] RSP: 002b:00007fc7869e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.650343][ T7336] RAX: ffffffffffffffda RBX: 00007fc785e25fa0 RCX: 00007fc785b9e0d9 [ 191.650355][ T7336] RDX: 0000000020000000 RSI: 00002000000018c0 RDI: 0000000000000008 [ 191.650365][ T7336] RBP: 00007fc7869e2090 R08: 0000000000000000 R09: 0000000000000000 [ 191.650375][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.650384][ T7336] R13: 00007fc785e26038 R14: 00007fc785e25fa0 R15: 00007ffd102e77e8 [ 191.650406][ T7336] [ 192.163480][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 192.163513][ T29] audit: type=1400 audit(1785933863.686:1880): avc: denied { create } for pid=7349 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.174660][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 192.232089][ T29] audit: type=1400 audit(1785933863.726:1881): avc: denied { ioctl } for pid=7349 comm="syz.1.416" path="socket:[16306]" dev="sockfs" ino=16306 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.303927][ T29] audit: type=1400 audit(1785933863.726:1882): avc: denied { create } for pid=7349 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.324006][ T29] audit: type=1400 audit(1785933863.726:1883): avc: denied { connect } for pid=7349 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.345466][ T29] audit: type=1400 audit(1785933863.726:1884): avc: denied { create } for pid=7349 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.368380][ T29] audit: type=1400 audit(1785933863.726:1885): avc: denied { bind } for pid=7349 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.390768][ T29] audit: type=1400 audit(1785933863.726:1886): avc: denied { accept } for pid=7349 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.411569][ T29] audit: type=1400 audit(1785933863.726:1887): avc: denied { setopt } for pid=7349 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.431830][ T29] audit: type=1400 audit(1785933863.726:1888): avc: denied { write } for pid=7349 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.454072][ T29] audit: type=1400 audit(1785933863.726:1889): avc: denied { read } for pid=7349 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.573055][ T5715] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 193.067913][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 193.079143][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 193.115187][ T5715] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 193.133994][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.167907][ T5715] usb 2-1: Product: syz [ 193.186592][ T5715] usb 2-1: Manufacturer: syz [ 193.200690][ T5715] usb 2-1: SerialNumber: syz [ 193.221044][ T5715] usb 2-1: config 0 descriptor?? [ 193.226937][ T7367] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 193.236304][ T5715] hub 2-1:0.0: bad descriptor, ignoring hub [ 193.242429][ T5715] hub 2-1:0.0: probe with driver hub failed with error -5 [ 193.343778][ T188] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 193.361939][ T5715] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 193.915227][ T188] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.952617][ T188] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.973424][ T188] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.984875][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.164135][ T7363] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.235520][ T188] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.244208][ T7374] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 194.266320][ T7374] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 194.276488][ T7374] overlayfs: failed to look up (tracing) for ino (-66) [ 194.360246][ T7373] warn_alloc: 1 callbacks suppressed [ 194.360263][ T7373] syz.4.423: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 194.409748][ T7373] CPU: 1 UID: 0 PID: 7373 Comm: syz.4.423 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.409783][ T7373] Tainted: [L]=SOFTLOCKUP [ 194.409793][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 194.409806][ T7373] Call Trace: [ 194.409813][ T7373] [ 194.409822][ T7373] dump_stack_lvl+0x100/0x190 [ 194.409852][ T7373] warn_alloc.cold+0x94/0xa8 [ 194.409874][ T7373] ? __pfx_warn_alloc+0x10/0x10 [ 194.409894][ T7373] ? register_lock_class+0x40/0x560 [ 194.409919][ T7373] ? kasan_save_stack+0x3f/0x50 [ 194.409939][ T7373] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 194.409964][ T7373] ? xskq_create+0x52/0x1d0 [ 194.409980][ T7373] ? xsk_setsockopt+0x743/0xab0 [ 194.409996][ T7373] ? do_sock_setsockopt+0xf3/0x1d0 [ 194.410021][ T7373] ? __sys_setsockopt+0x195/0x220 [ 194.410044][ T7373] ? __x64_sys_setsockopt+0xbd/0x160 [ 194.410067][ T7373] ? do_syscall_64+0x115/0x870 [ 194.410090][ T7373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.410115][ T7373] ? xskq_create+0xfb/0x1d0 [ 194.410136][ T7373] __vmalloc_node_range_noprof+0x136c/0x1630 [ 194.410175][ T7373] ? xskq_create+0xfb/0x1d0 [ 194.410203][ T7373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.410235][ T7373] ? kasan_save_track+0x14/0x30 [ 194.410257][ T7373] ? __kasan_kmalloc+0xaa/0xb0 [ 194.410278][ T7373] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 194.410309][ T7373] ? xskq_create+0xfb/0x1d0 [ 194.410330][ T7373] vmalloc_user_noprof+0x9e/0xe0 [ 194.410357][ T7373] ? xskq_create+0xfb/0x1d0 [ 194.410385][ T7373] xskq_create+0xfb/0x1d0 [ 194.410407][ T7373] xsk_setsockopt+0x743/0xab0 [ 194.410428][ T7373] ? __pfx_xsk_setsockopt+0x10/0x10 [ 194.410449][ T7373] ? find_held_lock+0x2b/0x80 [ 194.410468][ T7373] ? __fget_files+0x215/0x3d0 [ 194.410493][ T7373] ? selinux_socket_setsockopt+0x6a/0x80 [ 194.410523][ T7373] ? __pfx_xsk_setsockopt+0x10/0x10 [ 194.410544][ T7373] do_sock_setsockopt+0xf3/0x1d0 [ 194.410575][ T7373] __sys_setsockopt+0x195/0x220 [ 194.410605][ T7373] __x64_sys_setsockopt+0xbd/0x160 [ 194.410628][ T7373] ? do_syscall_64+0x90/0x870 [ 194.410651][ T7373] ? lockdep_hardirqs_on+0x78/0x100 [ 194.410675][ T7373] do_syscall_64+0x115/0x870 [ 194.410697][ T7373] ? clear_bhb_loop+0x40/0x90 [ 194.410721][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.410740][ T7373] RIP: 0033:0x7fc785b9e0d9 [ 194.410757][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.410776][ T7373] RSP: 002b:00007fc7869e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 194.410796][ T7373] RAX: ffffffffffffffda RBX: 00007fc785e25fa0 RCX: 00007fc785b9e0d9 [ 194.410808][ T7373] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 194.410821][ T7373] RBP: 00007fc785c35024 R08: 0000000000000029 R09: 0000000000000000 [ 194.410832][ T7373] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.410843][ T7373] R13: 00007fc785e26038 R14: 00007fc785e25fa0 R15: 00007ffd102e77e8 [ 194.410868][ T7373] [ 194.410968][ T7373] Mem-Info: [ 194.806623][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.833209][ T7373] active_anon:15674 inactive_anon:0 isolated_anon:0 [ 194.833209][ T7373] active_file:65 inactive_file:57386 isolated_file:0 [ 194.833209][ T7373] unevictable:768 dirty:620 writeback:0 [ 194.833209][ T7373] slab_reclaimable:11614 slab_unreclaimable:98196 [ 194.833209][ T7373] mapped:36519 shmem:6371 pagetables:1245 [ 194.833209][ T7373] sec_pagetables:0 bounce:0 [ 194.833209][ T7373] kernel_misc_reclaimable:0 [ 194.833209][ T7373] free:1298130 free_pcp:4622 free_cma:0 [ 194.882610][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.923388][ T7363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.970970][ T7373] Node 0 active_anon:65296kB inactive_anon:0kB active_file:260kB inactive_file:229348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148576kB dirty:2480kB writeback:0kB shmem:26448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12424kB pagetables:4828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 195.034172][ T7373] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 195.163656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.771293][ T7373] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.983661][ T188] usb 3-1: USB disconnect, device number 13 [ 196.149197][ T7373] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 196.172411][ T7383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.425'. [ 196.198900][ T7373] Node 0 DMA32 free:1233176kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53856kB inactive_anon:0kB active_file:260kB inactive_file:229352kB unevictable:1536kB writepending:996kB zspages:0kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:27204kB local_pcp:14904kB free_cma:0kB [ 196.286841][ T7373] lowmem_reserve[]: 0 0 0 0 0 [ 196.291906][ T7373] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.302310][ T7385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.426'. [ 196.323565][ T7373] lowmem_reserve[]: 0 0 0 0 0 [ 196.338721][ T7373] Node 1 Normal free:3943360kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.377774][ T7373] lowmem_reserve[]: 0 0 0 0 0 [ 196.386407][ T7373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 196.407231][ T7373] Node 0 DMA32: 1428*4kB (UME) 741*8kB (U) 378*16kB (UME) 142*32kB (UE) 179*64kB (UM) 201*128kB (UME) 85*256kB (UME) 30*512kB (UME) 18*1024kB (UM) 6*2048kB (UM) 270*4096kB (UM) = 1233176kB [ 196.451729][ T7373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 196.485507][ T7373] Node 1 Normal: 0*4kB 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 2*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943360kB [ 196.518908][ T7373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.535620][ T7373] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.549374][ T7373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.563454][ T7373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.587590][ T7373] 61616 total pagecache pages [ 196.602665][ T7373] 0 pages in swap cache [ 196.621395][ T7373] Free swap = 124996kB [ 196.629206][ T7373] Total swap = 124996kB [ 196.662000][ T7373] 2097051 pages RAM [ 196.698073][ T7373] 0 pages HighMem/MovableOnly [ 196.738942][ T7373] 432306 pages reserved [ 196.757259][ T7373] 0 pages cma reserved [ 197.214902][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 197.431725][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 197.431742][ T29] audit: type=1400 audit(1785933868.956:1924): avc: denied { create } for pid=7409 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.487573][ T29] audit: type=1400 audit(1785933868.956:1925): avc: denied { write } for pid=7409 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.235758][ T29] audit: type=1400 audit(1785933869.766:1926): avc: denied { read } for pid=7415 comm="syz.2.434" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 198.286941][ T29] audit: type=1400 audit(1785933869.806:1927): avc: denied { open } for pid=7415 comm="syz.2.434" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 198.338088][ T29] audit: type=1400 audit(1785933869.816:1928): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.363363][ T29] audit: type=1400 audit(1785933869.816:1929): avc: denied { open } for pid=5608 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.326775][ T29] audit: type=1400 audit(1785933869.816:1930): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.353125][ T29] audit: type=1400 audit(1785933869.816:1931): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.380249][ T29] audit: type=1400 audit(1785933869.926:1932): avc: denied { read write } for pid=7415 comm="syz.2.434" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.471970][ T29] audit: type=1400 audit(1785933869.926:1933): avc: denied { open } for pid=7415 comm="syz.2.434" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.633173][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.441'. [ 199.853719][ T5716] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 199.904152][ T5715] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 200.026285][ T5716] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.063111][ T5716] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.096573][ T5716] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.126748][ T5715] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 200.127535][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.165361][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.174840][ T5715] usb 5-1: Product: syz [ 200.179486][ T5715] usb 5-1: Manufacturer: syz [ 200.196417][ T7434] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 200.208004][ T5715] usb 5-1: SerialNumber: syz [ 200.231840][ T5716] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.232984][ T5715] usb 5-1: config 0 descriptor?? [ 200.252079][ T5715] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 200.425721][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.574192][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.824621][ T5715] gspca_sunplus: reg_r err -110 [ 200.901229][ T7434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.022352][ T5716] usb 5-1: USB disconnect, device number 9 [ 201.119675][ T805] usb 4-1: USB disconnect, device number 11 [ 201.183889][ T5715] usb 2-1: USB disconnect, device number 12 [ 201.380734][ T7442] syz.0.444 (7442) used greatest stack depth: 18376 bytes left [ 201.487196][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 201.563821][ T5716] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 202.454207][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 202.513788][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 202.513836][ T29] audit: type=1400 audit(1785933874.026:2011): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 202.546324][ T5716] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 202.555247][ T5716] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.567686][ T5716] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.578612][ T5716] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.599846][ T5716] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.662808][ T5716] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.713741][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.723464][ T7467] kAFS: unable to lookup cell '(,c¾Ì' [ 202.733843][ T29] audit: type=1400 audit(1785933874.266:2012): avc: denied { create } for pid=7466 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.770342][ T7467] dlm: Unknown command passed to DLM device : 3 [ 202.770342][ T7467] [ 202.885211][ T29] audit: type=1400 audit(1785933874.406:2013): avc: denied { ioctl } for pid=7466 comm="syz.4.451" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 203.029190][ T5716] usb 2-1: usb_control_msg returned -32 [ 203.037752][ T5716] usbtmc 2-1:16.0: can't read capabilities [ 203.431453][ T5716] usb 2-1: USB disconnect, device number 13 [ 203.492666][ T29] audit: type=1400 audit(1785933875.016:2014): avc: denied { ioctl } for pid=7470 comm="syz.0.453" path="socket:[17627]" dev="sockfs" ino=17627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.598973][ T29] audit: type=1400 audit(1785933875.126:2015): avc: denied { map_write } for pid=7479 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 203.648628][ T7473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.657308][ T7473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.709995][ T29] audit: type=1400 audit(1785933875.236:2016): avc: denied { read } for pid=7485 comm="syz.3.458" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 203.868272][ T29] audit: type=1400 audit(1785933875.236:2017): avc: denied { create } for pid=7489 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.949065][ T29] audit: type=1400 audit(1785933875.236:2018): avc: denied { mounton } for pid=7489 comm="syz.4.459" path="/87/config" dev="tmpfs" ino=497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 204.038608][ T29] audit: type=1400 audit(1785933875.236:2019): avc: denied { mount } for pid=7489 comm="syz.4.459" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 204.214125][ T5715] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 204.884324][ T5715] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.006329][ T5715] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.093755][ T29] audit: type=1400 audit(1785933875.236:2020): avc: denied { search } for pid=7489 comm="syz.4.459" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 206.257065][ T5715] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.267561][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.382701][ T7504] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 206.423585][ T5715] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.628665][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.641572][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.693544][ T7504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.790342][ T7525] warn_alloc: 2 callbacks suppressed [ 206.790357][ T7525] syz.1.468: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.863351][ T7525] CPU: 1 UID: 0 PID: 7525 Comm: syz.1.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.863383][ T7525] Tainted: [L]=SOFTLOCKUP [ 206.863390][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 206.863402][ T7525] Call Trace: [ 206.863407][ T7525] [ 206.863413][ T7525] dump_stack_lvl+0x100/0x190 [ 206.863444][ T7525] warn_alloc.cold+0x94/0xa8 [ 206.863464][ T7525] ? __pfx_warn_alloc+0x10/0x10 [ 206.863482][ T7525] ? register_lock_class+0x40/0x560 [ 206.863508][ T7525] ? kasan_save_stack+0x3f/0x50 [ 206.863530][ T7525] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 206.863557][ T7525] ? xskq_create+0x52/0x1d0 [ 206.863575][ T7525] ? xsk_setsockopt+0x743/0xab0 [ 206.863591][ T7525] ? do_sock_setsockopt+0xf3/0x1d0 [ 206.863614][ T7525] ? __sys_setsockopt+0x195/0x220 [ 206.863632][ T7525] ? __x64_sys_setsockopt+0xbd/0x160 [ 206.863651][ T7525] ? do_syscall_64+0x115/0x870 [ 206.863670][ T7525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.863691][ T7525] ? xskq_create+0xfb/0x1d0 [ 206.863711][ T7525] __vmalloc_node_range_noprof+0x136c/0x1630 [ 206.863744][ T7525] ? xskq_create+0xfb/0x1d0 [ 206.863767][ T7525] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.863795][ T7525] ? kasan_save_track+0x14/0x30 [ 206.863815][ T7525] ? __kasan_kmalloc+0xaa/0xb0 [ 206.863836][ T7525] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 206.863864][ T7525] ? xskq_create+0xfb/0x1d0 [ 206.863882][ T7525] vmalloc_user_noprof+0x9e/0xe0 [ 206.863908][ T7525] ? xskq_create+0xfb/0x1d0 [ 206.863926][ T7525] xskq_create+0xfb/0x1d0 [ 206.863947][ T7525] xsk_setsockopt+0x743/0xab0 [ 206.863967][ T7525] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.863985][ T7525] ? find_held_lock+0x2b/0x80 [ 206.864001][ T7525] ? __fget_files+0x215/0x3d0 [ 206.864022][ T7525] ? selinux_socket_setsockopt+0x6a/0x80 [ 206.864049][ T7525] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.864068][ T7525] do_sock_setsockopt+0xf3/0x1d0 [ 206.864097][ T7525] __sys_setsockopt+0x195/0x220 [ 206.864123][ T7525] __x64_sys_setsockopt+0xbd/0x160 [ 206.864144][ T7525] ? do_syscall_64+0x90/0x870 [ 206.864166][ T7525] ? lockdep_hardirqs_on+0x78/0x100 [ 206.864199][ T7525] do_syscall_64+0x115/0x870 [ 206.864220][ T7525] ? clear_bhb_loop+0x40/0x90 [ 206.864244][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.864262][ T7525] RIP: 0033:0x7f009d99e0d9 [ 206.864279][ T7525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.864296][ T7525] RSP: 002b:00007f009e88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.864315][ T7525] RAX: ffffffffffffffda RBX: 00007f009dc25fa0 RCX: 00007f009d99e0d9 [ 206.864326][ T7525] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 206.864337][ T7525] RBP: 00007f009da35024 R08: 0000000000000029 R09: 0000000000000000 [ 206.864346][ T7525] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.864355][ T7525] R13: 00007f009dc26038 R14: 00007f009dc25fa0 R15: 00007fff40e28fc8 [ 206.864377][ T7525] [ 207.241268][ T5612] usb 5-1: USB disconnect, device number 10 [ 207.255162][ T7525] Mem-Info: [ 207.364744][ T7525] active_anon:10562 inactive_anon:0 isolated_anon:0 [ 207.364744][ T7525] active_file:65 inactive_file:57396 isolated_file:0 [ 207.364744][ T7525] unevictable:768 dirty:468 writeback:0 [ 207.364744][ T7525] slab_reclaimable:11583 slab_unreclaimable:98123 [ 207.364744][ T7525] mapped:31421 shmem:1293 pagetables:1277 [ 207.364744][ T7525] sec_pagetables:0 bounce:0 [ 207.364744][ T7525] kernel_misc_reclaimable:0 [ 207.364744][ T7525] free:1297173 free_pcp:10544 free_cma:0 [ 207.468986][ T7525] Node 0 active_anon:42300kB inactive_anon:4kB active_file:260kB inactive_file:229388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125728kB dirty:1920kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12356kB pagetables:4940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 207.505602][ T7525] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 207.539097][ T7525] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.578232][ T7525] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 207.586334][ T7525] Node 0 DMA32 free:1231624kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42300kB inactive_anon:4kB active_file:260kB inactive_file:229388kB unevictable:1536kB writepending:2020kB zspages:0kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:41812kB local_pcp:20924kB free_cma:0kB [ 207.621670][ T7525] lowmem_reserve[]: 0 0 0 0 0 [ 207.628456][ T7525] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.660020][ T7525] lowmem_reserve[]: 0 0 0 0 0 [ 207.665023][ T7525] Node 1 Normal free:3943360kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.686582][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 207.686612][ T29] audit: type=1400 audit(1785933879.216:2071): avc: denied { bind } for pid=7534 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.718280][ T7525] lowmem_reserve[]: 0 0 0 0 0 [ 207.729031][ T29] audit: type=1400 audit(1785933879.256:2072): avc: denied { create } for pid=7534 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.749455][ T7525] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 207.749604][ T7525] Node 0 DMA32: 1767*4kB (UME) 918*8kB (UM) 410*16kB (UME) 82*32kB (UME) 196*64kB (UM) 201*128kB (UME) 85*256kB (UME) 30*512kB (UME) 18*1024kB (UM) 4*2048kB (UM) 270*4096kB (UM) = 1231532kB [ 207.782678][ T29] audit: type=1400 audit(1785933879.296:2073): avc: denied { write } for pid=7534 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.805909][ T7525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 207.818443][ T7525] Node 1 Normal: 0*4kB 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 2*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943360kB [ 207.835560][ T7525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.872789][ T29] audit: type=1400 audit(1785933879.396:2074): avc: denied { name_bind } for pid=7537 comm="syz.4.472" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 207.906815][ T7525] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.922003][ T7525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.935282][ T29] audit: type=1400 audit(1785933879.396:2075): avc: denied { node_bind } for pid=7537 comm="syz.4.472" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 207.968713][ T7525] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.986245][ T7543] [ 207.988598][ T7543] ============================================ [ 207.994739][ T7543] WARNING: possible recursive locking detected [ 208.000879][ T7543] syzkaller #0 Tainted: G L [ 208.006945][ T7543] -------------------------------------------- [ 208.013088][ T7543] syz.4.472/7543 is trying to acquire lock: [ 208.018959][ T7543] ffff8880321ac160 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_kernel_open+0xa4/0x190 [ 208.029053][ T7543] [ 208.029053][ T7543] but task is already holding lock: [ 208.036403][ T7543] ffff888055540d60 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_open+0x296/0xba0 [ 208.046075][ T7543] [ 208.046075][ T7543] other info that might help us debug this: [ 208.054209][ T7543] Possible unsafe locking scenario: [ 208.054209][ T7543] [ 208.061650][ T7543] CPU0 [ 208.064911][ T7543] ---- [ 208.068174][ T7543] lock(&rmidi->open_mutex); [ 208.072834][ T7543] lock(&rmidi->open_mutex); [ 208.077577][ T7543] [ 208.077577][ T7543] *** DEADLOCK *** [ 208.077577][ T7543] [ 208.085784][ T7543] May be due to missing lock nesting notation [ 208.085784][ T7543] [ 208.094364][ T7543] 2 locks held by syz.4.472/7543: [ 208.099380][ T7543] #0: ffff888055540d60 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_open+0x296/0xba0 [ 208.109389][ T7543] #1: ffff8880321ac460 (&ump->open_mutex){+.+.}-{4:4}, at: snd_ump_legacy_open+0x120/0x4e0 [ 208.119466][ T7543] [ 208.119466][ T7543] stack backtrace: [ 208.125337][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.4.472 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.125359][ T7543] Tainted: [L]=SOFTLOCKUP [ 208.125364][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.125373][ T7543] Call Trace: [ 208.125377][ T7543] [ 208.125383][ T7543] dump_stack_lvl+0x100/0x190 [ 208.125402][ T7543] print_deadlock_bug.cold+0xbd/0xca [ 208.125425][ T7543] __lock_acquire+0x1256/0x1a40 [ 208.125446][ T7543] lock_acquire+0x1b9/0x370 [ 208.125463][ T7543] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 208.125480][ T7543] ? __pfx___might_resched+0x10/0x10 [ 208.125498][ T7543] __mutex_lock+0x1a4/0x1bd0 [ 208.125518][ T7543] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 208.125534][ T7543] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 208.125549][ T7543] ? __mutex_lock+0x26d/0x1bd0 [ 208.125566][ T7543] ? snd_ump_legacy_open+0x120/0x4e0 [ 208.125636][ T7543] ? __pfx___mutex_lock+0x10/0x10 [ 208.125657][ T7543] ? __pfx___mutex_lock+0x10/0x10 [ 208.125679][ T7543] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 208.125695][ T7543] snd_rawmidi_kernel_open+0xa4/0x190 [ 208.125713][ T7543] snd_ump_legacy_open+0x367/0x4e0 [ 208.125733][ T7543] open_substream+0x480/0x970 [ 208.125748][ T7543] rawmidi_open_priv+0x595/0x6f0 [ 208.125765][ T7543] snd_rawmidi_open+0x4c9/0xba0 [ 208.125781][ T7543] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 208.125867][ T7543] ? __pfx_default_wake_function+0x10/0x10 [ 208.125904][ T7543] ? soundcore_open+0x231/0x5a0 [ 208.125925][ T7543] ? soundcore_open+0x231/0x5a0 [ 208.125944][ T7543] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 208.125961][ T7543] soundcore_open+0x2e3/0x5a0 [ 208.125982][ T7543] ? __pfx_soundcore_open+0x10/0x10 [ 208.126001][ T7543] chrdev_open+0x234/0x6a0 [ 208.126018][ T7543] ? __pfx_chrdev_open+0x10/0x10 [ 208.126037][ T7543] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 208.126058][ T7543] do_dentry_open+0x6ab/0x14d0 [ 208.126071][ T7543] ? __pfx_chrdev_open+0x10/0x10 [ 208.126087][ T7543] vfs_open+0x82/0x3f0 [ 208.126104][ T7543] path_openat+0x2873/0x4280 [ 208.126124][ T7543] ? __pfx_path_openat+0x10/0x10 [ 208.126138][ T7543] ? mark_held_locks+0x40/0x70 [ 208.126155][ T7543] ? irqentry_exit+0x24d/0xa00 [ 208.126172][ T7543] ? lockdep_hardirqs_on+0x78/0x100 [ 208.126190][ T7543] do_file_open+0x20e/0x430 [ 208.126204][ T7543] ? __pfx_do_file_open+0x10/0x10 [ 208.126224][ T7543] ? alloc_fd+0x471/0x7a0 [ 208.126239][ T7543] ? do_getname+0x191/0x390 [ 208.126257][ T7543] do_sys_openat2+0x10f/0x1e0 [ 208.126275][ T7543] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.126294][ T7543] __x64_sys_openat+0x12d/0x210 [ 208.126312][ T7543] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.126333][ T7543] do_syscall_64+0x115/0x870 [ 208.126350][ T7543] ? clear_bhb_loop+0x40/0x90 [ 208.126366][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.126381][ T7543] RIP: 0033:0x7fc785b5e90e [ 208.126393][ T7543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.126406][ T7543] RSP: 002b:00007fc7869c0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.126449][ T7543] RAX: ffffffffffffffda RBX: 00007fc7869c16c0 RCX: 00007fc785b5e90e [ 208.126458][ T7543] RDX: 0000000000000002 RSI: 00007fc7869c0c00 RDI: ffffffffffffff9c [ 208.126467][ T7543] RBP: 00007fc7869c0c00 R08: 0000000000000000 R09: 0000000000000000 [ 208.126475][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 208.126484][ T7543] R13: 00007fc785e26128 R14: 00007fc785e26090 R15: 00007ffd102e77e8 [ 208.126497][ T7543] [ 208.134246][ T7525] 58753 total pagecache pages [ 208.138559][ T29] audit: type=1400 audit(1785933879.446:2076): avc: denied { read write } for pid=7539 comm="syz.2.473" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 208.152849][ T7525] 0 pages in swap cache [ 208.156288][ T29] audit: type=1400 audit(1785933879.446:2077): avc: denied { open } for pid=7539 comm="syz.2.473" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 208.163773][ T7525] Free swap = 124996kB [ 208.163783][ T7525] Total swap = 124996kB [ 208.163793][ T7525] 2097051 pages RAM [ 208.173765][ T29] audit: type=1400 audit(1785933879.446:2078): avc: denied { getopt } for pid=7537 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 208.193329][ T7525] 0 pages HighMem/MovableOnly [ 208.198116][ T29] audit: type=1400 audit(1785933879.446:2079): avc: denied { create } for pid=7539 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.213547][ T7525] 432306 pages reserved [ 208.240984][ T29] audit: type=1400 audit(1785933879.476:2080): avc: denied { read } for pid=7534 comm="syz.0.471" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 208.273309][ T7525] 0 pages cma reserved