last executing test programs: 2m50.066000077s ago: executing program 2 (id=2439): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x300) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@0\''], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000000031efec0845"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket(0xa, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r8, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000000c0)="01", 0x24}]) 2m45.333542119s ago: executing program 2 (id=2457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='.\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000850) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000140), 0x0) bind$can_raw(r6, &(0x7f00000000c0), 0x10) 2m44.160315878s ago: executing program 2 (id=2458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='.\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000850) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000140), 0x0) bind$can_raw(r6, &(0x7f00000000c0), 0x10) 2m41.379326396s ago: executing program 2 (id=2461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x40}, 0x28) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r8 = dup(r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fallocate(r8, 0x10, 0x0, 0x1062200) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x9, 0x40, 0x2, 0x7, 0x3, 0x3, 0x7, 0x0, 0x4, 0xc, 0x81, 0xb8, 0x0, 0x7, 0x20, 0x6}}) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) 2m36.992069695s ago: executing program 2 (id=2475): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4004050) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) io_setup(0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x5411, &(0x7f0000000000)={0x807f, 0x0, 0x5, 0x9, 0x2, 0x81}) 2m35.845925275s ago: executing program 2 (id=2477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync() mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x90232000) r1 = syz_open_dev$vbi(&(0x7f0000001140), 0x0, 0x2) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, 0x0) 2m18.86824352s ago: executing program 32 (id=2477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync() mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x90232000) r1 = syz_open_dev$vbi(&(0x7f0000001140), 0x0, 0x2) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, 0x0) 14.18674364s ago: executing program 4 (id=2806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0), &(0x7f0000000200)=0x8) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22e601e68346e81016bd"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) (async) listen(r0, 0x3) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0), &(0x7f0000000200)=0x8) (async) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x8a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22e601e68346e81016bd"], 0x0) (async) 12.122016209s ago: executing program 4 (id=2813): socket$nl_route(0x10, 0x3, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) 10.882742907s ago: executing program 3 (id=2815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r5, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff}}}}, [@NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, {0x20, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x9}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x7f}]}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x4000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x4, 0x2, r2}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x6, 0x2, r2}) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$IOC_PR_RESERVE(r9, 0x401070c9, &(0x7f0000000040)={0x7f, 0x1000, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x1, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x7f, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x1002, 0x80000ef, 0x200, 0x7fffffffffffb, 0x8d, 0x2, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbdf], 0x2000, 0x67a64fa265d09613}) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r15 = socket(0x22, 0x2, 0x3) getsockopt$nfc_llcp(r15, 0x6a, 0x0, 0x0, 0x1000000000000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r12, 0x50009418, &(0x7f0000000e00)={{r10}, r13, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r14}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002080)={{r2}, r13, 0x8, @unused=[0xffffffff, 0x80000000, 0x3, 0xfaf], @name="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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.50343971s ago: executing program 3 (id=2819): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x43d5, &(0x7f0000000100)={0x0, 0x5c8, 0x40, 0x0, 0x1e3}, 0x0, 0x0) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='unc=oaep hash=blake2s-224-generic\x00'/78], 0x0, 0x0) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file2\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x24002800) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) epoll_create1(0x80000) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) 9.277936898s ago: executing program 3 (id=2820): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x9, 0x34524742, 0x3, @stepwise={0xfff, 0x200, 0x8, 0x51, 0x2, 0x40}}) 8.168830935s ago: executing program 3 (id=2821): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x183) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x11b829) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r2, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000000640)=""/246, 0xf6}], 0x3) personality(0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x9, 0x80dc2) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000340)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r5 = dup3(0xffffffffffffffff, r3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000200)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)="2a155b603375e3d6c03abd2529cb88558c12d72601cd4ceaf96d0cb756419c04acba53d92f86e99cdc1e727d99b04d981e537e0e39d52766ea1a85699dc3840ae7670e58c4181d8d5cb57e1bb7833aa2be4a600ad0dbb7f432add9091496d60a753297ee42661924bd9ff608e22214639d667b68bae64249ab1dd362dac090d0d08f59ac499820e3", 0x88}], 0x1, &(0x7f0000000340)=[{0xa0, 0x1, 0xfee, "8b55f0b660655f6e704a1e4bd39feb311207020c67d7a3c871a6edce79891f18b4b0985c9d712f309a98039ce010ccd720b823ba176e4d4394c489edf3d0a541010446f5f763acc68b578c1ed0b901f364704bec3d5248b46b1ecea8bcc3dfaf14a10e7059ff6a319372855fac32202236df1f953f77a01e5eb636dc48972b3ac3d03d195a87ebdde3e672594327"}, {0x10, 0x10f, 0xffffffff}], 0xb0}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0xcac) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r9, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 7.677805647s ago: executing program 4 (id=2824): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x45, 0x30, 0x57}, {0x7, 0x9, 0xf0, 0xfffff010}, {0x4, 0x26, 0x0, 0x5}]}, 0x10) sendto$unix(r0, &(0x7f00000001c0)='QW', 0x2, 0x4000000, 0x0, 0x0) io_setup(0x1, &(0x7f0000000300)) mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x3000007) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20004000) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffffff, 0x0, 0x10c) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) 7.278269042s ago: executing program 1 (id=2826): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bond_slave_1\x00', 0x0}) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = gettid() r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000700)={0x0, "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"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = getpid() rt_tgsigqueueinfo(r2, r0, 0x5, &(0x7f0000000840)={0x2, 0xffffffff, 0x3ff}) rt_tgsigqueueinfo(r2, r0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) 7.207869216s ago: executing program 1 (id=2827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x1, 0x20, 0x0, 0x12}]}}, 0x0, 0x26}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0xa, 0x5, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r5 = getpid() r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$isdn(0x22, 0x2, 0x10) r10 = socket$isdn(0x22, 0x2, 0x2) r11 = dup3(r10, r9, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r8, &(0x7f0000000280)={r11, r7, 0x7}) 6.509253994s ago: executing program 5 (id=2828): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0x57}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x10, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 6.401931697s ago: executing program 1 (id=2829): openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x28ad00, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00002b2000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f866c4f80cb8c85f54802ec7442400fe2700000044240200fd0000c7442406000000000f01142466bafc0cc4c2adac170f320f2e2d00000080b9800000c00f32350080000067f20f1afe", 0x63}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000b80)={0xe0003, 0x0, {[0x3, 0x1f8, 0x8e, 0x57a, 0x2, 0x80000000, 0x9, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x3aa5, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37", 0x1c) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0xb, {{0xa, 0x4e22, 0x0, @mcast2}}, {{0xa, 0xfffe, 0xa4ffffff, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x100}}, {{0xa, 0xfffe, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x43}, 0x3}}}, 0x108) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r5, 0x0, 0x4008041) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) 6.241439998s ago: executing program 4 (id=2830): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x5, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000010, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8b4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x880, 0x2, [@TCA_U32_POLICE={0x858, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x3, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0x8b, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0x1002, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 4.894667495s ago: executing program 4 (id=2831): gettid() socket$can_bcm(0x1d, 0x2, 0x2) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f00000010c0)=""/4111) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r3, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044811}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4079, 0xfef}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000000)=""/27, 0x1b}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x400100c2, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0xffffffffffffffcc, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) io_submit(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x6, 0x8) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) 4.655958627s ago: executing program 3 (id=2832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='.\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000850) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140), 0x0) bind$can_raw(r5, &(0x7f00000000c0), 0x10) 4.541494343s ago: executing program 1 (id=2833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50ffc3001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3.530470531s ago: executing program 3 (id=2834): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x9, 0x80, 0x0, 0x40000, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = dup(0xffffffffffffffff) io_uring_setup(0x5755, &(0x7f0000000a80)={0x0, 0x84d1, 0x40, 0x3, 0x21b, 0x0, r1}) read(r0, &(0x7f0000000380)=""/144, 0x90) pwrite64(r0, 0x0, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x54}}, 0x1020) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) close_range(r3, 0xffffffffffffffff, 0x0) 3.486140452s ago: executing program 0 (id=2835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972", 0x2d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) r6 = accept(r0, 0x0, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000002e00)={0x0, 0x3, 0x7, 0x400}) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r6, 0x1) recvmmsg(r2, &(0x7f0000008680)=[{{&(0x7f0000000080)=@ax25={{0x3, @null}, [@netrom, @default, @null, @rose, @bcast, @remote, @default, @netrom]}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/94, 0x5e}, {&(0x7f00000002c0)=""/69, 0x45}], 0x2, &(0x7f0000000340)=""/10, 0xa}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/60, 0x3c}, {&(0x7f00000013c0)=""/142, 0x8e}, {&(0x7f0000001480)=""/97, 0x61}, {&(0x7f0000001500)=""/157, 0x9d}, {&(0x7f00000015c0)=""/239, 0xef}, {&(0x7f00000016c0)=""/7, 0x7}, {&(0x7f0000001700)=""/51, 0x33}, {&(0x7f0000001740)=""/201, 0xc9}, {&(0x7f0000001840)=""/210, 0xd2}], 0xa, &(0x7f0000001a00)=""/71, 0x47}, 0x400}, {{&(0x7f0000001a80)=@nl=@proc, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001b00)=""/181, 0xb5}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/36, 0x24}, {&(0x7f0000002c00)=""/112, 0x70}, {&(0x7f0000002c80)=""/50, 0x32}], 0x5, &(0x7f0000002d40)=""/53, 0x35}, 0xb0f}, {{&(0x7f0000002d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000008940)=""/16, 0x10}, {&(0x7f0000002e40)=""/210, 0xd2}], 0x2, &(0x7f0000002f80)=""/250, 0xfa}, 0x2}, {{&(0x7f0000003080)=@sco={0x1f, @none}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003100)=""/87, 0x57}], 0x1, &(0x7f00000031c0)=""/90, 0x5a}, 0x9}, {{&(0x7f0000003240)=@phonet, 0x80, &(0x7f00000045c0)=[{&(0x7f00000032c0)=""/164, 0xa4}, {&(0x7f0000003380)=""/100, 0x64}, {&(0x7f0000003400)=""/69, 0x45}, {&(0x7f0000003480)=""/122, 0x7a}, {&(0x7f0000003500)=""/135, 0x87}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x6, &(0x7f0000004640)=""/145, 0x91}, 0x7}, {{&(0x7f0000004700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005b00)=[{&(0x7f0000004780)=""/134, 0x86}, {&(0x7f0000005d00)=""/204, 0xcc}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/107, 0x6b}, {&(0x7f00000059c0)=""/177, 0xb1}, {&(0x7f0000005a80)=""/68, 0x44}], 0x6}, 0x4}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000005b80)=""/104, 0x68}, {&(0x7f0000005c00)=""/230, 0xe6}, {&(0x7f0000008a40)=""/208, 0xd0}, {&(0x7f0000005e00)=""/4096, 0x1000}], 0x4, &(0x7f0000006e40)=""/154, 0x9a}, 0x1}, {{&(0x7f0000006f00)=@nfc_llcp, 0x80, &(0x7f0000007080)=[{&(0x7f0000006f80)=""/230, 0xe6}], 0x1, &(0x7f00000070c0)=""/73, 0x49}, 0x8001}, {{&(0x7f0000007140)=@alg, 0x80, &(0x7f0000008580)=[{&(0x7f0000008980)=""/143, 0x8f}, {&(0x7f0000007280)=""/191, 0xbf}, {&(0x7f0000007340)=""/169, 0xa9}, {&(0x7f0000007400)=""/29, 0x1d}, {&(0x7f0000007440)=""/9, 0x9}, {&(0x7f0000007480)=""/4096, 0x1000}, {&(0x7f0000008480)=""/216, 0xd8}], 0x7, &(0x7f0000008600)=""/86, 0x56}, 0x7f}], 0xa, 0x2240, &(0x7f0000008900)={0x0, 0x989680}) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 3.289612612s ago: executing program 1 (id=2836): openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) preadv2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/45, 0x2d}], 0x1, 0x5, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12121, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000100)='./bus\x00', 0x142b42, 0x81) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r5 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='+pids'], 0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000140)="24000000010006", 0x7) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a2000000c9296d0fb62d7b5cdb2c42de69867b437839d1d1d2f74786a1733ef93d1d7181f9535c6b12634ef1d050af33b0d8690a12522f77687d218f0fbe7550f8fbae77e89d2fa8576602e8f0e199", @ANYRES16=r6, @ANYRESDEC=r6], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000000000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e}, 0x20) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) 3.288112063s ago: executing program 0 (id=2837): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000400)={r2, r2, 0x6, 0x0, 0x0, 0x9, 0x1, 0xc49, 0x6, 0xc3, 0x1, 0x7, 'syz0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0xd0ffbf, 0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}, {&(0x7f0000000000)="8e6f0c20609014593a643e2208ff9dfe", 0x10, 0x1, 0x2}], 0x2a0000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, 0xffffffffffffffff, 0x6e855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0xa, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0x0, 0x8000000000000000}) unshare(0x28040680) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r6, &(0x7f0000000ac0), 0x0, 0x1}, 0x20) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) socket$packet(0x11, 0x3, 0x300) prctl$PR_CAP_AMBIENT(0x2f, 0x5, 0x15) 3.058881285s ago: executing program 5 (id=2838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2d000000, 0xe, 0x0, &(0x7f0000000100)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.78942843s ago: executing program 5 (id=2839): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r7, @ANYBLOB="000000d29400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r9, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 1.710196135s ago: executing program 4 (id=2840): syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bd3e66208205ce7438ba01020301"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) 1.515500972s ago: executing program 5 (id=2841): gettid() socket$can_bcm(0x1d, 0x2, 0x2) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f00000010c0)=""/4111) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r3, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044811}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4079, 0xfef}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000000)=""/27, 0x1b}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x400100c2, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0xffffffffffffffcc, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) io_submit(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x6, 0x8) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) 1.429691804s ago: executing program 0 (id=2842): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) modify_ldt$write(0x1, &(0x7f0000000480)={0x1, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10) bind$l2tp(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)=' ', 0x1}], 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r5, &(0x7f0000000900)="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", &(0x7f00000004c0)=""/179}, 0x20) ptrace$setopts(0x4206, r1, 0xb, 0x8) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x2) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{0xe3, 0x6, 0x3, 0xb}, {0xffff, 0x1f, 0x4, 0x3}, {0x7, 0xff, 0x86, 0x10001}, {0x1, 0x5, 0x7, 0x1}]}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='L \x00\x00', @ANYRES16=r7, @ANYBLOB="010000000800010000000100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5421400020077673000"/70], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) 1.188357129s ago: executing program 0 (id=2843): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5902, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x0, 0xfffffffffffffffc}, &(0x7f0000000100)=0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000240)) socket$unix(0x1, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newtclass={0x88, 0x28, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xd, 0xfff3}, {0x3, 0xfff3}, {0xb, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xd, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x7ff, 0x7bc, 0xffffff01}}]}}, @TCA_RATE={0x6, 0x5, {0xf7, 0xb0}}]}, 0x88}}, 0x0) 305.264104ms ago: executing program 1 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000014) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[@ANYRES16], 0x31) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x2c}}, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r7, 0x8994, 0x0) sendmsg$kcm(r6, 0x0, 0xfc40) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000000500050002000000050001000600000045c76be9a596322785944a458142b373a6dd993ffd42480a4a1ae6356d583020dbbd068efa44110ffe8e7f430fda2ed89c0d86a8e389e52566f9d07b41783abba851089b9b870880fc64976697b4ab19d19a434aa0f958ff2cd05e71fc661f1debc387aecccbd2318265bad8080e7fca"], 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) 244.282678ms ago: executing program 5 (id=2845): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 109.416206ms ago: executing program 0 (id=2846): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4300, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x9, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, 0x0) r4 = syz_io_uring_setup(0x26f0, &(0x7f0000000140)={0x0, 0x676a, 0x178c, 0x1, 0x52}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000240)={r1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{0x1, 0x1, 0x8, 0xb}, {0x7, 0x6, 0x6, 0x1000}, {0x101, 0xe, 0x8, 0x491}, {0x698c, 0x8, 0x3, 0x401}, {0x3ff, 0x73, 0x6, 0x7fff}, {0x100, 0x7, 0x1, 0x100}, {0x101, 0x4, 0x4, 0x2}, {0xe, 0xfb, 0xdb, 0x6}]}) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x212100) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x111000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000380)={{0x5, 0x7f}, 'port1\x00', 0x3, 0x111025, 0x5, 0x4, 0x7, 0x8, 0x2f5b, 0x0, 0x2, 0x4}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000480)) fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0xa0000000, &(0x7f0000000500)="690815542d0db827c06f0b22ebe351ead0ac508b3734990c59cb69fe8122535ec92c1f4a6f47dd91b478a751f40426c13e87cb14ca230269ef4160221ba20066b05a78ddd90ab0c83b3812e39900f07fac6703874e3c96907695ec5b72d17beaca78727808125dfe5a24a95206a7e93b2cc03174328671d1ee94e6be8b5a0ba2692c65c1110608d8ab80fb31bf5d88e9f8367da9e4a8803cc1bae4227063b1cbf0af0d9666974245b9df955f9062e3e4d980543ecedd4f1ba9ee68b54a65fc516f75b33357402f3cb9d25f99c597d3", 0xcf, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="dec0f6fab773124971e9d32e6ea1f2ab2d36debc0f0d17041ced8b55753b974daa274f6849ab60dd4a24e2b5683908583a03361926f468efd5c29f62a2e30d8d5c09d90472c197fe67d14be31ce69942deae5091fd8f0c20e393d9ae5ee1f119e719fef10a84298e6d5fd247") ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ptrace(0x11, r3) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000b00)) ioctl$SOUND_MIXER_READ_CAPS(r7, 0x80044dfc, &(0x7f0000000b40)) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r5, {0x1, 0x3}}, './file0\x00'}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000c80)={'\x00', 0x0, 0x200, 0x9, 0x4, 0x4, r3}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r10, &(0x7f0000000d00), 0x4003) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000f00)={{0xffffffffffffffff, &(0x7f0000000d40)='/dev/dri/renderD128\x00', 0x80481, &(0x7f0000000d80)={@align=0x2, {0x0, 0xfb92, 0x8, 0x2}}, 0x5, &(0x7f0000000dc0), &(0x7f0000000e00)=0x7}, {[0x0, 0x10001, 0x6]}, 0x400, 0xae, &(0x7f0000000e40)=""/174}) 108.849803ms ago: executing program 5 (id=2847): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x20, 0x11, 0x55, {0x55, 0x5, "e9eb247b62194857b6f5e2d2a4515de2082bc923bf46cd58b5e8e398736567adde5d01b297f55967284bb1266751e100f87d3de421568c4cf6fd683ab416c0627d1d0f84e126ce98d34fe5cede6a6cc2056932"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}}, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x0, 0x11, 0x37, "532f94d0776029719f95f6dd5bd869d8ad281bec50a90cc5eb59d69ede253d6ae806dc194eed7bf243f20479d6a791aed31b7788507753"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x30}, &(0x7f0000000380)={0x20, 0x0, 0xca, {0xc8, "b27a70cf34c74e904037ae4c334eaa6ffadbe61d2ba6da359e98cc038d5364bb4cc6354925cf2a612a19566eff6080e46900eb523875d8264bea2b6a40a35165c527ee4472014ef58adeccd01e3d40d752d22be9a437c1f95b46f3225ee26f669252c617bc5e8eef7f70bf3fa7a832e0aa27f017fcb769c0306fe8cce13ced8ada234912d0092097dba5ffb0d704cae7551fd5caccc033cf89d612c36798a14b490b528151830eeba38df8dae47b031eed91479ab5f7c6a345e4ef65082fc5b9da3455ce127de771"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x69}}) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, 0x0, 0x0, 0x0}, &(0x7f00000007c0)={0x84, &(0x7f0000000280)={0x20, 0x18, 0x28, "bcce2847ed49859f18aded9e9908d612e9fb24aca886f1b1e773f070ce471d938a98ac0ce9d9f9db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x24, 0x6a, 0x605, 0x70fd2c, 0x25dfdbfc, {}, [@NHA_OIF={0x4}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000340)=""/102400, 0x19000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000000600)={0x0, @frame_sync}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) read(r1, &(0x7f0000000680)=""/218, 0xda) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000019340), 0xfffffffffffffff9, 0x2) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$cec(&(0x7f0000001240), 0x0, 0x400) ioctl$CEC_DQEVENT(r7, 0xc0506107, &(0x7f0000001280)) 0s ago: executing program 0 (id=2848): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x22) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_CMAP(r5, 0x4b70, 0x0) socket$kcm(0xa, 0x3, 0x3a) fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) kernel console output (not intermixed with test programs): 1.195558][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 881.237341][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 881.245767][T16435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 881.252465][ T24] usb 5-1: can't read configurations, error -61 [ 881.275509][ T1463] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 016 [ 881.277955][T16435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 881.303274][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.375550][T16435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 881.436150][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 881.470648][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 881.511401][ T24] usb 5-1: can't read configurations, error -61 [ 881.545152][ T24] usb usb5-port1: unable to enumerate USB device [ 881.552123][T16464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.560984][T16464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.608827][T16435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.646994][T16435] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.668064][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.675307][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.722700][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.729856][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.788293][ T1463] usb 1-1: USB disconnect, device number 16 [ 881.886013][T16435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.192603][T16435] veth0_vlan: entered promiscuous mode [ 882.240920][T16435] veth1_vlan: entered promiscuous mode [ 882.294895][ T5817] Bluetooth: hci4: command tx timeout [ 882.312844][T16435] veth0_macvtap: entered promiscuous mode [ 882.329553][T16435] veth1_macvtap: entered promiscuous mode [ 882.393016][T16469] ldm_validate_partition_table(): Disk read failed. [ 882.400047][T16435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.433528][T16435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.698907][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.729253][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.781658][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.809292][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.878959][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 882.878974][ T29] audit: type=1400 audit(2000001873.128:2098): avc: denied { bind } for pid=16476 comm="syz.3.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 882.924268][T16500] netlink: 'syz.0.2535': attribute type 10 has an invalid length. [ 882.932828][ T29] audit: type=1400 audit(2000001873.147:2099): avc: denied { accept } for pid=16476 comm="syz.3.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 883.173554][ T7131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.320751][ T7131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.413036][ T1463] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 883.477660][T16500] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.541742][T16500] bond0: (slave team0): Enslaving as an active interface with an up link [ 883.584411][ T1463] usb 1-1: Using ep0 maxpacket: 32 [ 883.650557][ T1463] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 883.669812][ T1463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.728645][ T1463] usb 1-1: config 0 descriptor?? [ 883.770004][ T7125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.803009][ T7125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.886313][T16469] Dev loop6: unable to read RDB block 0 [ 884.179238][ T29] audit: type=1400 audit(2000001874.335:2100): avc: denied { create } for pid=16502 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 884.260658][ T29] audit: type=1400 audit(2000001874.410:2101): avc: denied { ioctl } for pid=16502 comm="syz.4.2536" path="socket:[54734]" dev="sockfs" ino=54734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 884.291213][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 884.373496][ T29] audit: type=1400 audit(2000001874.447:2102): avc: denied { create } for pid=16502 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 884.441855][ T29] audit: type=1400 audit(2000001874.447:2103): avc: denied { getopt } for pid=16502 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 884.466380][ T29] audit: type=1400 audit(2000001874.447:2104): avc: denied { write } for pid=16502 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 884.491639][T16505] lo speed is unknown, defaulting to 1000 [ 884.510947][T16469] loop6: unable to read partition table [ 884.513714][ T5817] Bluetooth: hci4: command tx timeout [ 884.520655][ T29] audit: type=1400 audit(2000001874.447:2105): avc: denied { write } for pid=16502 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 884.623262][ T29] audit: type=1400 audit(2000001874.513:2106): avc: denied { read write } for pid=16504 comm="syz.5.2525" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 884.647790][ T5858] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 884.837417][T16512] FAULT_INJECTION: forcing a failure. [ 884.837417][T16512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.850644][T16512] CPU: 1 UID: 0 PID: 16512 Comm: syz.4.2538 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.850673][T16512] Tainted: [L]=SOFTLOCKUP [ 884.850680][T16512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 884.850691][T16512] Call Trace: [ 884.850698][T16512] [ 884.850706][T16512] dump_stack_lvl+0x100/0x190 [ 884.850738][T16512] should_fail_ex.cold+0x5/0xa [ 884.850762][T16512] _copy_to_user+0x32/0xd0 [ 884.850791][T16512] simple_read_from_buffer+0xcb/0x170 [ 884.850822][T16512] proc_fail_nth_read+0x1af/0x230 [ 884.850849][T16512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 884.850874][T16512] ? rw_verify_area+0xce/0x6d0 [ 884.850896][T16512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 884.850920][T16512] vfs_read+0x1e4/0xb30 [ 884.850947][T16512] ? irqentry_exit+0x180/0x670 [ 884.850968][T16512] ? __pfx_vfs_read+0x10/0x10 [ 884.850992][T16512] ? irqentry_exit+0x180/0x670 [ 884.851024][T16512] ksys_read+0x12a/0x250 [ 884.851049][T16512] ? __pfx_ksys_read+0x10/0x10 [ 884.851083][T16512] do_syscall_64+0x106/0xf80 [ 884.851102][T16512] ? clear_bhb_loop+0x40/0x90 [ 884.851125][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.851149][T16512] RIP: 0033:0x7fcf9d55cfce [ 884.851165][T16512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 884.851181][T16512] RSP: 002b:00007fcf9e3e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 884.851198][T16512] RAX: ffffffffffffffda RBX: 00007fcf9e3e96c0 RCX: 00007fcf9d55cfce [ 884.851210][T16512] RDX: 000000000000000f RSI: 00007fcf9e3e90a0 RDI: 0000000000000005 [ 884.851220][T16512] RBP: 00007fcf9e3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 884.851230][T16512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.851241][T16512] R13: 00007fcf9d816128 R14: 00007fcf9d816090 R15: 00007ffdeb6a2fb8 [ 884.851266][T16512] [ 885.652986][ T29] audit: type=1400 audit(2000001874.513:2107): avc: denied { open } for pid=16504 comm="syz.5.2525" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 885.838622][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 885.931993][ T5858] usb 6-1: config 0 has no interfaces? [ 885.942504][ T5858] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 886.832131][ T5817] Bluetooth: hci4: command tx timeout [ 886.949669][ T5858] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 886.957706][ T5858] usb 6-1: Manufacturer: syz [ 887.304549][ T2727] block nbd0: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 150 seconds [ 887.319020][ T2727] block nbd0: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 150 seconds [ 887.334222][ T2727] block nbd0: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 150 seconds [ 887.356066][ T2727] block nbd0: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 150 seconds [ 887.385179][ T5858] usb 6-1: config 0 descriptor?? [ 887.453709][ T5858] usb 6-1: can't set config #0, error -71 [ 887.476750][ T5858] usb 6-1: USB disconnect, device number 2 [ 887.635077][ T1463] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 887.659148][ T1463] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 887.721506][ T1463] dib0700: firmware download failed at 7 with -22 [ 887.745544][ T1463] usb 1-1: USB disconnect, device number 17 [ 887.928801][T16469] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 888.103360][ T5178] buffer_io_error: 27 callbacks suppressed [ 888.103371][ T5178] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.118626][ T5178] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.126743][ T5178] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.134592][ T5178] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.144529][ T5178] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.152827][ T5178] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.545403][T16536] xt_TPROXY: Can be used only with -p tcp or -p udp [ 888.552713][ T5889] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 888.561163][ T5178] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.569651][ T5178] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.577655][ T5178] ldm_validate_partition_table(): Disk read failed. [ 888.585332][ T5178] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.599845][ T5178] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.610995][ T5178] Dev loop6: unable to read RDB block 0 [ 888.626285][ T5178] loop6: unable to read partition table [ 888.636474][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 888.636491][ T29] audit: type=1400 audit(2000001878.509:2139): avc: denied { read } for pid=16539 comm="syz.3.2546" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 888.669278][ T29] audit: type=1400 audit(2000001878.509:2140): avc: denied { open } for pid=16539 comm="syz.3.2546" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 888.713146][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 888.721971][ T5889] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 888.735919][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.749077][ T29] audit: type=1400 audit(2000001878.622:2141): avc: denied { create } for pid=16541 comm="syz.0.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 888.770831][ T5889] usb 5-1: Product: syz [ 888.775139][ T5889] usb 5-1: Manufacturer: syz [ 888.780038][ T5889] usb 5-1: SerialNumber: syz [ 889.024801][T16543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2547'. [ 889.791626][ T5889] usb 5-1: config 0 descriptor?? [ 889.845367][ T29] audit: type=1400 audit(2000001878.977:2142): avc: denied { create } for pid=16541 comm="syz.0.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 889.962290][ T29] audit: type=1400 audit(2000001879.755:2143): avc: denied { read } for pid=16539 comm="syz.3.2546" dev="nsfs" ino=4026532877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 889.988177][ T29] audit: type=1400 audit(2000001879.755:2144): avc: denied { open } for pid=16539 comm="syz.3.2546" path="net:[4026532877]" dev="nsfs" ino=4026532877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 890.018480][ T29] audit: type=1400 audit(2000001879.755:2145): avc: denied { create } for pid=16539 comm="syz.3.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 890.039402][T16555] openvswitch: netlink: IP tunnel dst address not specified [ 890.047935][ T29] audit: type=1400 audit(2000001879.755:2146): avc: denied { getopt } for pid=16539 comm="syz.3.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 890.098884][T16534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.120626][T16534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.166990][T16556] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 890.226016][ T29] audit: type=1400 audit(2000001879.998:2147): avc: denied { prog_run } for pid=16533 comm="syz.4.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 890.448591][ T5889] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 094 [ 890.485577][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 890.526103][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 890.536594][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 890.565434][ T29] audit: type=1400 audit(2000001880.307:2148): avc: denied { bind } for pid=16539 comm="syz.3.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 890.753254][ T47] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 890.765086][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 890.879169][T16534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.888480][T16534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.914294][ T47] usb 6-1: device descriptor read/64, error -32 [ 891.111340][ T24] usb 5-1: USB disconnect, device number 94 [ 891.183937][ T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 891.393349][ T47] usb 6-1: device descriptor read/64, error -71 [ 891.478984][ T5889] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 891.510876][ T47] usb usb6-port1: attempt power cycle [ 891.651930][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 891.705411][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.739036][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 891.771711][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 891.787351][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 891.931359][ T5889] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 891.942202][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.954867][ T5889] usb 1-1: Product: syz [ 892.033603][T16580] program syz.4.2557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 892.065752][T16580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=137 sclass=netlink_route_socket pid=16580 comm=syz.4.2557 [ 892.355913][ T47] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 892.371667][ T5889] usb 1-1: Manufacturer: syz [ 892.378389][ T5889] usb 1-1: SerialNumber: syz [ 892.413733][ T5889] usb 1-1: config 0 descriptor?? [ 892.422211][ T5889] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 892.513898][T16582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16582 comm=syz.1.2558 [ 893.041497][T16585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2559'. [ 894.002165][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 894.051326][ T47] usb 6-1: device descriptor read/8, error -71 [ 894.185603][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 894.185619][ T29] audit: type=1400 audit(2000001883.706:2173): avc: denied { read write } for pid=16587 comm="syz.1.2561" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 894.259971][ T29] audit: type=1400 audit(2000001883.706:2174): avc: denied { open } for pid=16587 comm="syz.1.2561" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 895.278989][ T29] audit: type=1400 audit(2000001883.743:2175): avc: denied { getopt } for pid=16561 comm="syz.0.2551" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 895.314707][ T5889] usb 1-1: USB disconnect, device number 18 [ 895.325876][ T29] audit: type=1400 audit(2000001884.193:2176): avc: denied { bind } for pid=16587 comm="syz.1.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 895.346751][ T29] audit: type=1400 audit(2000001884.230:2177): avc: denied { setopt } for pid=16587 comm="syz.1.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 895.377826][ T29] audit: type=1400 audit(2000001884.277:2178): avc: denied { write } for pid=16587 comm="syz.1.2561" path="socket:[54887]" dev="sockfs" ino=54887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 899.609753][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 899.753329][ T29] audit: type=1400 audit(2000001888.921:2179): avc: denied { map } for pid=16603 comm="syz.0.2565" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 900.070352][T16615] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2568'. [ 901.150164][T16622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2566'. [ 901.686801][T16620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2567'. [ 902.094518][ T29] audit: type=1400 audit(2000001888.921:2180): avc: denied { read write } for pid=16603 comm="syz.0.2565" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 902.729581][T16627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2570'. [ 903.330672][ T29] audit: type=1400 audit(2000001889.333:2181): avc: denied { setopt } for pid=16612 comm="syz.5.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 903.536855][ T29] audit: type=1400 audit(2000001889.867:2182): avc: denied { map_read map_write } for pid=16611 comm="syz.3.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 903.707626][ T29] audit: type=1400 audit(2000001890.213:2183): avc: denied { read append } for pid=16611 comm="syz.3.2566" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 903.996586][ T29] audit: type=1400 audit(2000001890.213:2184): avc: denied { open } for pid=16611 comm="syz.3.2566" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 904.270071][T16636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2574'. [ 904.752454][ T29] audit: type=1400 audit(2000001890.307:2185): avc: denied { ioctl } for pid=16611 comm="syz.3.2566" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 905.014376][ T29] audit: type=1400 audit(2000001892.498:2186): avc: denied { append } for pid=16629 comm="syz.1.2572" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 905.060630][T16640] netlink: 'syz.4.2560': attribute type 3 has an invalid length. [ 905.196247][ T29] audit: type=1400 audit(2000001892.498:2187): avc: denied { write } for pid=16629 comm="syz.1.2572" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 905.277772][ T5889] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 905.443568][ T29] audit: type=1400 audit(2000001894.024:2188): avc: denied { lock } for pid=16639 comm="syz.4.2560" path="socket:[54954]" dev="sockfs" ino=54954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 905.533329][T16646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2576'. [ 905.578453][ T5889] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 905.933034][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.008313][ T5889] usb 2-1: Product: syz [ 906.043342][ T5889] usb 2-1: Manufacturer: syz [ 906.093028][ T5889] usb 2-1: SerialNumber: syz [ 906.169542][ T5889] usb 2-1: config 0 descriptor?? [ 906.638557][T16656] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2579'. [ 907.541932][ T5889] usb 2-1: Firmware: major: 0, minor: 101, hardware type: ATUSB (0) [ 907.594701][ T29] audit: type=1400 audit(2000001895.101:2189): avc: denied { read append } for pid=16654 comm="syz.0.2578" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 907.782434][ T5889] usb 2-1: failed to fetch extended address, random address set [ 907.811454][ T29] audit: type=1400 audit(2000001896.327:2190): avc: denied { create } for pid=16650 comm="syz.5.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 907.906605][ T29] audit: type=1400 audit(2000001896.336:2191): avc: denied { ioctl } for pid=16650 comm="syz.5.2569" path="socket:[55604]" dev="sockfs" ino=55604 ioctlcmd=0x8994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 907.983707][ T5889] usb 2-1: USB disconnect, device number 108 [ 908.011885][ T24] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 908.199348][ T29] audit: type=1400 audit(2000001896.711:2192): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 908.231854][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 908.333349][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 908.395533][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 908.515584][ T24] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 908.549509][T16665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2578'. [ 908.558559][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.558608][ T24] usb 4-1: Product: syz [ 908.558623][ T24] usb 4-1: Manufacturer: syz [ 908.558671][ T24] usb 4-1: SerialNumber: syz [ 908.996341][T16670] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2581'. [ 909.681672][ T2727] block nbd1: Possible stuck request ffff888027328000: control (read@0,1024B). Runtime 90 seconds [ 909.692915][ T2727] block nbd1: Possible stuck request ffff888027328200: control (read@1024,1024B). Runtime 90 seconds [ 909.704764][ T2727] block nbd1: Possible stuck request ffff888027328400: control (read@2048,1024B). Runtime 90 seconds [ 909.716281][ T2727] block nbd1: Possible stuck request ffff888027328600: control (read@3072,1024B). Runtime 90 seconds [ 909.769159][ T24] usb 4-1: config 0 descriptor?? [ 909.809873][ T24] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 910.039090][ T5865] usb 4-1: USB disconnect, device number 94 [ 910.539220][ T29] audit: type=1400 audit(2000001898.996:2193): avc: denied { mounton } for pid=16672 comm="syz.5.2583" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 910.555004][T16674] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 910.900126][T16676] 9p: Bad value for 'rfdno' [ 910.993567][ T29] audit: type=1400 audit(2000001898.996:2194): avc: denied { mount } for pid=16672 comm="syz.5.2583" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 910.993984][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2584'. [ 911.176661][ T29] audit: type=1400 audit(2000001899.024:2195): avc: denied { mounton } for pid=16672 comm="syz.5.2583" path="/8/file0" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 911.356884][ T29] audit: type=1400 audit(2000001899.070:2196): avc: denied { mount } for pid=16672 comm="syz.5.2583" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 911.541363][ T29] audit: type=1400 audit(2000001899.670:2197): avc: denied { ioctl } for pid=16677 comm="syz.4.2580" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 911.867630][ T24] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 911.960191][ T29] audit: type=1400 audit(2000002155.778:2198): avc: denied { write } for pid=16677 comm="syz.4.2580" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 912.104321][ T29] audit: type=1400 audit(2000002155.871:2199): avc: denied { unmount } for pid=16435 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 912.227236][T16696] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2588'. [ 912.253643][ T29] audit: type=1400 audit(2000002156.068:2200): avc: denied { write } for pid=16689 comm="syz.0.2586" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 912.329015][T16699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 912.415502][ T24] usb 4-1: device descriptor read/all, error -71 [ 912.507441][ T29] audit: type=1400 audit(2000002156.864:2201): avc: denied { unmount } for pid=16435 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 912.687108][T16685] loop6: detected capacity change from 0 to 2640 [ 912.701993][ T29] audit: type=1400 audit(2000002157.032:2202): avc: denied { append } for pid=16677 comm="syz.4.2580" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 912.772877][T16685] buffer_io_error: 6 callbacks suppressed [ 912.772895][T16685] Buffer I/O error on dev loop6, logical block 0, async page read [ 912.787658][T16685] Buffer I/O error on dev loop6, logical block 0, async page read [ 912.802128][T16685] Buffer I/O error on dev loop6, logical block 0, async page read [ 912.830909][T16710] netlink: 'syz.5.2587': attribute type 10 has an invalid length. [ 912.850263][T16685] Buffer I/O error on dev loop6, logical block 0, async page read [ 912.860443][T16685] Buffer I/O error on dev loop6, logical block 0, async page read [ 912.861016][ T29] audit: type=1400 audit(2000002157.173:2203): avc: denied { bind } for pid=16702 comm="syz.5.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 912.922548][T16685] Buffer I/O error on dev loop6, logical block 0, async page read [ 912.930702][T16685] Buffer I/O error on dev loop6, logical block 0, async page read [ 912.945774][T16685] Buffer I/O error on dev loop6, logical block 0, async page read [ 912.954216][T16685] ldm_validate_partition_table(): Disk read failed. [ 912.963403][T16685] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.077194][ T5865] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 913.112330][T16685] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.158894][T16685] Dev loop6: unable to read RDB block 0 [ 913.180581][T16685] loop6: unable to read partition table [ 913.211060][T16685] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 913.234743][ T7809] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 913.253889][ T5178] ldm_validate_partition_table(): Disk read failed. [ 913.271324][ T5865] usb 1-1: config 4 has an invalid interface number: 187 but max is 0 [ 913.296312][ T5865] usb 1-1: config 4 has no interface number 0 [ 913.302529][ T5178] Dev loop6: unable to read RDB block 0 [ 913.303280][ T5178] loop6: unable to read partition table [ 913.341088][ T5865] usb 1-1: config 4 interface 187 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 913.405027][ T5865] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=f6.ef [ 913.406309][ T7809] usb 6-1: Using ep0 maxpacket: 32 [ 913.446604][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.484135][ T5865] usb 1-1: Product: syz [ 913.497993][ T7809] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 913.511450][ T5865] usb 1-1: Manufacturer: syz [ 913.532985][ T5865] usb 1-1: SerialNumber: syz [ 913.564333][ T7809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.576502][T16710] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.588658][T16705] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 913.620384][T16710] bond0: (slave team0): Enslaving as an active interface with an up link [ 913.641043][ T7809] usb 6-1: config 0 descriptor?? [ 914.115773][ T1463] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 914.305402][ T5865] vmk80xx 1-1:4.187: driver 'vmk80xx' failed to auto-configure device. [ 914.313805][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 914.348367][ T5865] usb 1-1: USB disconnect, device number 19 [ 914.357674][ T1463] usb 2-1: Using ep0 maxpacket: 32 [ 914.373948][ T1463] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 914.414654][T13355] udevd[13355]: setting mode of /dev/bus/usb/001/019 to 020664 failed: No such file or directory [ 914.436290][ T1463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.453098][T13355] udevd[13355]: setting owner of /dev/bus/usb/001/019 to uid=0, gid=0 failed: No such file or directory [ 914.469025][ T1463] usb 2-1: Product: syz [ 914.479001][ T1463] usb 2-1: Manufacturer: syz [ 914.494057][ T1463] usb 2-1: SerialNumber: syz [ 914.499597][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 914.507390][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.529668][ T1463] usb 2-1: config 0 descriptor?? [ 914.549614][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 914.587113][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.600545][ T9] usb 4-1: Product: syz [ 914.623780][ T9] usb 4-1: Manufacturer: syz [ 914.628539][ T9] usb 4-1: SerialNumber: syz [ 914.635974][ T5858] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 914.679169][ T9] usb 4-1: config 0 descriptor?? [ 914.695041][ T9] usb 4-1: no audio or video endpoints found [ 914.830225][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.840600][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 914.849336][T16717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.856460][ T5858] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 914.871171][ T5865] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 914.880690][T16717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.883111][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.908770][ T5858] usb 5-1: config 0 descriptor?? [ 914.918858][T16719] binder: 16718:16719 ioctl c0306201 2000000003c0 returned -14 [ 915.168265][ T5865] usb 1-1: unable to get BOS descriptor or descriptor too short [ 915.247356][ T5858] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 915.254993][ T5865] usb 1-1: not running at top speed; connect to a high speed hub [ 915.264919][ T1463] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 109 [ 915.281723][ T5865] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 6397, setting to 1023 [ 915.307614][ T5865] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 915.317284][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.325342][ T5865] usb 1-1: Product: syz [ 915.330115][ T5865] usb 1-1: Manufacturer: syz [ 915.331898][ T24] usb 4-1: USB disconnect, device number 97 [ 915.337610][ T5865] usb 1-1: SerialNumber: syz [ 915.703783][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 915.829612][T16726] 9p: Bad value for 'rfdno' [ 915.834095][T16717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.842957][T16717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.869660][ T5865] usb 1-1: 1:1 : bogus bTerminalLink 255 [ 915.878126][ T5865] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 915.886498][ T5865] usb 1-1: unit 6 not found! [ 915.891115][ T5865] usb 1-1: unit 1 not found! [ 915.950551][ T5865] usb 1-1: USB disconnect, device number 20 [ 916.030910][ T7809] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 916.041310][ T7809] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 916.051399][ T7809] dib0700: firmware download failed at 7 with -22 [ 916.064606][ T7809] usb 6-1: USB disconnect, device number 7 [ 916.076960][ T1463] usb 2-1: USB disconnect, device number 109 [ 916.378575][T16741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2598'. [ 916.391612][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 916.391628][ T29] audit: type=1400 audit(2000002160.506:2213): avc: denied { sys_module } for pid=16735 comm="syz.3.2598" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 916.427423][T16738] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2597'. [ 917.338600][T16752] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2602'. [ 917.434530][ T29] audit: type=1400 audit(2000002161.480:2214): avc: denied { create } for pid=16746 comm="syz.1.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 917.485365][ T5858] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 917.532123][ T47] usb 5-1: USB disconnect, device number 95 [ 917.612183][ T29] audit: type=1400 audit(2000002161.639:2215): avc: denied { ioctl } for pid=16758 comm="syz.4.2603" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x5628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 917.685174][ T5858] usb 4-1: too many configurations: 72, using maximum allowed: 8 [ 917.752028][ T5858] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 917.780240][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.815588][ T5858] usb 4-1: config 0 descriptor?? [ 917.848475][ T5865] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 918.070206][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 918.076495][T16766] netlink: 'syz.4.2605': attribute type 10 has an invalid length. [ 918.105912][ T5865] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 918.108542][ T29] audit: type=1400 audit(2000002162.098:2216): avc: denied { read } for pid=16767 comm="syz.5.2606" path="socket:[55969]" dev="sockfs" ino=55969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 918.250207][ T5865] usb 2-1: config 0 has no interface number 0 [ 918.256967][T16768] kvm: user requested TSC rate below hardware speed [ 918.288815][ T5865] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 920.435337][ T2727] block nbd0: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 180 seconds [ 920.446664][ T2727] block nbd0: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 180 seconds [ 920.458182][ T2727] block nbd0: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 180 seconds [ 920.469697][ T2727] block nbd0: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 180 seconds [ 920.481414][ T5865] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 920.678856][ T4733] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 920.718722][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.776646][ T5865] usb 2-1: Product: syz [ 920.808087][ T5865] usb 2-1: Manufacturer: syz [ 920.838276][ T5865] usb 2-1: SerialNumber: syz [ 920.880658][ T5865] usb 2-1: config 0 descriptor?? [ 920.911429][ T5865] usb 2-1: can't set config #0, error -71 [ 920.917589][ T29] audit: type=1400 audit(2000002164.738:2217): avc: denied { setopt } for pid=16776 comm="syz.5.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 920.936658][ T5865] usb 2-1: USB disconnect, device number 110 [ 921.029112][T16783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 921.077808][T16783] netlink: 'syz.1.2608': attribute type 10 has an invalid length. [ 921.459426][ T5858] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 921.544066][ T5865] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 921.640243][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 921.659388][ T5858] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 921.700802][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.736089][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 921.764565][ T5858] pvrusb2: Hardware description: Terratec Grabster AV400 [ 921.780363][ T24] usb 4-1: USB disconnect, device number 98 [ 921.824913][ T5865] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 921.839389][ T5858] pvrusb2: ********** [ 921.844127][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.852154][ T5858] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 921.864816][ T5858] pvrusb2: Important functionality might not be entirely working. [ 921.873294][ T5865] usb 2-1: config 0 descriptor?? [ 921.887092][ T5858] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 921.908041][ T5858] pvrusb2: ********** [ 922.019226][ T2340] pvrusb2: Invalid write control endpoint [ 922.033093][ T5858] usb 6-1: USB disconnect, device number 8 [ 922.386915][ T2340] pvrusb2: Invalid write control endpoint [ 922.405293][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 922.428357][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 922.446804][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 922.474133][ T2340] pvrusb2: Device being rendered inoperable [ 922.514466][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 922.546764][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 922.574735][ T2340] pvrusb2: Attached sub-driver cx25840 [ 922.594484][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 922.617776][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 923.442334][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2613'. [ 924.139157][ T47] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 924.217142][T16809] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2616'. [ 924.331383][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 924.343969][ T47] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 924.355883][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.365163][ T47] usb 4-1: Product: syz [ 924.369476][ T47] usb 4-1: Manufacturer: syz [ 924.374661][ T47] usb 4-1: SerialNumber: syz [ 924.421448][ T47] usb 4-1: config 0 descriptor?? [ 924.649992][T16804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.676888][ T5865] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 924.688470][T16804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.720827][ T5865] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 925.025615][ T5865] dib0700: firmware download failed at 7 with -22 [ 925.069533][ T47] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 099 [ 925.132568][ T5865] usb 2-1: USB disconnect, device number 111 [ 925.151505][T16804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.160117][T16804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.191421][T16817] FAULT_INJECTION: forcing a failure. [ 925.191421][T16817] name failslab, interval 1, probability 0, space 0, times 0 [ 925.232639][T16817] CPU: 1 UID: 0 PID: 16817 Comm: syz.1.2618 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.232667][T16817] Tainted: [L]=SOFTLOCKUP [ 925.232672][T16817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 925.232682][T16817] Call Trace: [ 925.232688][T16817] [ 925.232695][T16817] dump_stack_lvl+0x100/0x190 [ 925.232727][T16817] should_fail_ex.cold+0x5/0xa [ 925.232753][T16817] ? tomoyo_encode2+0xfb/0x3c0 [ 925.232773][T16817] should_failslab+0xc2/0x120 [ 925.232802][T16817] __kmalloc_noprof+0xe0/0x850 [ 925.232824][T16817] ? d_absolute_path+0x136/0x1b0 [ 925.232852][T16817] tomoyo_encode2+0xfb/0x3c0 [ 925.232877][T16817] tomoyo_encode+0x29/0x50 [ 925.232896][T16817] tomoyo_realpath_from_path+0x18c/0x690 [ 925.232924][T16817] tomoyo_path_number_perm+0x23c/0x580 [ 925.232941][T16817] ? tomoyo_path_number_perm+0x22e/0x580 [ 925.232960][T16817] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 925.233004][T16817] ? find_held_lock+0x2b/0x80 [ 925.233025][T16817] ? __fget_files+0x215/0x3d0 [ 925.233040][T16817] ? hook_file_ioctl_common+0x146/0x410 [ 925.233064][T16817] ? __fget_files+0x21f/0x3d0 [ 925.233081][T16817] security_file_ioctl+0xd3/0x230 [ 925.233100][T16817] __x64_sys_ioctl+0xb7/0x210 [ 925.233122][T16817] do_syscall_64+0x106/0xf80 [ 925.233136][T16817] ? clear_bhb_loop+0x40/0x90 [ 925.233154][T16817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.233168][T16817] RIP: 0033:0x7f832619c799 [ 925.233186][T16817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.233200][T16817] RSP: 002b:00007f8327058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.233215][T16817] RAX: ffffffffffffffda RBX: 00007f8326415fa0 RCX: 00007f832619c799 [ 925.233224][T16817] RDX: 0000200000000340 RSI: 00000000c00464be RDI: 0000000000000003 [ 925.233233][T16817] RBP: 00007f8327058090 R08: 0000000000000000 R09: 0000000000000000 [ 925.233242][T16817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.233250][T16817] R13: 00007f8326416038 R14: 00007f8326415fa0 R15: 00007ffd9ec62878 [ 925.233271][T16817] [ 925.233337][T16817] ERROR: Out of memory at tomoyo_realpath_from_path. [ 925.466966][ T5865] usb 4-1: USB disconnect, device number 99 [ 925.473024][ T5858] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 925.573127][ T29] audit: type=1400 audit(2000002169.092:2218): avc: denied { append } for pid=16819 comm="syz.0.2620" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 925.766164][T16824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2619'. [ 925.867762][ T29] audit: type=1400 audit(2000002169.195:2219): avc: denied { read write } for pid=16819 comm="syz.0.2620" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 925.892998][ T29] audit: type=1400 audit(2000002169.195:2220): avc: denied { open } for pid=16819 comm="syz.0.2620" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 925.917136][ T29] audit: type=1400 audit(2000002169.195:2221): avc: denied { ioctl } for pid=16819 comm="syz.0.2620" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 926.031119][ T5858] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 926.039862][ T5858] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 926.060631][ T5858] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 926.079656][ T5858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 926.112494][ T5858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 926.252663][ T5858] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 926.280540][ T29] audit: type=1400 audit(2000002169.747:2222): avc: denied { wake_alarm } for pid=16828 comm="syz.0.2622" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 926.303982][T16831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2623'. [ 926.333203][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 926.365550][ T5858] usb 6-1: Product: syz [ 926.369747][ T5858] usb 6-1: Manufacturer: syz [ 926.687390][T16838] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2624'. [ 927.386077][ T29] audit: type=1400 audit(2000002169.775:2223): avc: denied { create } for pid=16830 comm="syz.4.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 927.387689][ T5858] cdc_wdm 6-1:1.0: skipping garbage [ 927.433688][ T29] audit: type=1400 audit(2000002169.775:2224): avc: denied { write } for pid=16830 comm="syz.4.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 927.551088][ T5858] cdc_wdm 6-1:1.0: skipping garbage [ 927.557022][ T29] audit: type=1400 audit(2000002169.785:2225): avc: denied { read } for pid=16830 comm="syz.4.2623" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 927.582679][T16829] Cannot find set identified by id 0 to match [ 927.634098][ T29] audit: type=1400 audit(2000002169.785:2226): avc: denied { open } for pid=16830 comm="syz.4.2623" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 927.657253][ T5858] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 927.706408][ T29] audit: type=1400 audit(2000002169.813:2227): avc: denied { ioctl } for pid=16830 comm="syz.4.2623" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 927.791946][ T5858] cdc_wdm 6-1:1.0: Unknown control protocol [ 927.872726][ T5858] usb 6-1: USB disconnect, device number 9 [ 927.938176][T16845] bond0: (slave team0): Releasing backup interface [ 927.966984][T16845] bridge_slave_0: left allmulticast mode [ 927.999434][T16845] bridge_slave_0: left promiscuous mode [ 928.014988][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.053827][T16845] bridge_slave_1: left allmulticast mode [ 928.067611][T16845] bridge_slave_1: left promiscuous mode [ 928.082133][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.138787][T16845] bond0: (slave bond_slave_0): Releasing backup interface [ 928.151005][T16845] bond0: (slave bond_slave_1): Releasing backup interface [ 928.164769][T16845] team0: Port device team_slave_0 removed [ 928.173794][T16845] team0: Port device team_slave_1 removed [ 928.181390][T16845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.198334][T16845] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 928.306553][T16853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.346105][T16853] netlink: 'syz.0.2629': attribute type 10 has an invalid length. [ 928.368702][ T47] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 929.218150][T16861] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2631'. [ 929.589415][ T5865] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 929.598976][ T47] usb 2-1: config 8 has an invalid interface number: 193 but max is 0 [ 929.622166][ T47] usb 2-1: config 8 has no interface number 0 [ 929.643653][ T47] usb 2-1: config 8 interface 193 has no altsetting 0 [ 929.662807][ T47] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 929.684820][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.746369][ T47] usb 2-1: Product: syz [ 929.766166][ T47] usb 2-1: Manufacturer: syz [ 929.780139][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 929.785373][ T47] usb 2-1: SerialNumber: syz [ 929.795155][ T5865] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 929.831173][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.865200][ T5865] usb 1-1: config 0 descriptor?? [ 929.960022][ T7809] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 930.151377][ T47] usb 2-1: USB disconnect, device number 112 [ 930.167263][ T7809] usb 5-1: Using ep0 maxpacket: 32 [ 930.203649][ T7809] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 930.256186][ T7809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.323788][ T7809] usb 5-1: Product: syz [ 930.344161][ T7809] usb 5-1: Manufacturer: syz [ 930.373546][ T7809] usb 5-1: SerialNumber: syz [ 930.392352][ T7809] usb 5-1: config 0 descriptor?? [ 930.723466][T16864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.923750][T16864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.013081][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2633'. [ 931.242257][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 931.242293][ T29] audit: type=1400 audit(2000002174.410:2240): avc: denied { write } for pid=16872 comm="syz.1.2635" path="socket:[56497]" dev="sockfs" ino=56497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 931.771481][T16879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.306229][ T7809] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 097 [ 932.682201][T16890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2639'. [ 933.773478][ T7809] usb 5-1: USB disconnect, device number 97 [ 934.045323][ T29] audit: type=1400 audit(2000002177.032:2241): avc: denied { create } for pid=16891 comm="syz.4.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 934.167666][ T5865] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 934.200061][ T29] audit: type=1400 audit(2000002177.172:2242): avc: denied { bind } for pid=16891 comm="syz.4.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 934.232745][ T5865] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 934.331888][ T5865] dib0700: firmware download failed at 7 with -22 [ 934.357202][ T29] audit: type=1400 audit(2000002177.172:2243): avc: denied { setopt } for pid=16891 comm="syz.4.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 934.390783][ T5865] usb 1-1: USB disconnect, device number 21 [ 934.501065][ T29] audit: type=1400 audit(2000002177.219:2244): avc: denied { read append } for pid=16903 comm="syz.0.2644" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 934.645529][ T29] audit: type=1400 audit(2000002177.219:2245): avc: denied { open } for pid=16903 comm="syz.0.2644" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 934.829466][ T29] audit: type=1400 audit(2000002177.228:2246): avc: denied { map } for pid=16903 comm="syz.0.2644" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 934.899185][T16920] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 934.989968][ T29] audit: type=1400 audit(2000002177.228:2247): avc: denied { write execute } for pid=16903 comm="syz.0.2644" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 935.075363][ T29] audit: type=1400 audit(2000002177.322:2248): avc: denied { accept } for pid=16892 comm="syz.3.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 935.116677][T16925] block nbd5: NBD_DISCONNECT [ 935.751847][T16919] block nbd5: Disconnected due to user request. [ 935.768523][T16926] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2648'. [ 936.078443][T16919] block nbd5: shutting down sockets [ 936.078490][ T29] audit: type=1400 audit(2000002177.491:2249): avc: denied { write } for pid=16892 comm="syz.3.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 936.399532][T16932] overlayfs: failed to clone lowerpath [ 936.853108][T16945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2652'. [ 937.636882][ T4733] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 937.644850][ T5858] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 937.789154][ T5858] usb 5-1: device descriptor read/64, error -71 [ 937.820637][ T4733] usb 2-1: Using ep0 maxpacket: 32 [ 937.831537][ T4733] usb 2-1: unable to get BOS descriptor or descriptor too short [ 937.854890][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 937.854902][ T29] audit: type=1400 audit(2000002180.599:2259): avc: denied { read } for pid=16949 comm="syz.5.2654" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 937.906345][ T4733] usb 2-1: config 2 has an invalid interface number: 170 but max is 0 [ 937.920232][ T4733] usb 2-1: config 2 has no interface number 0 [ 937.926339][ T4733] usb 2-1: config 2 interface 170 has no altsetting 0 [ 937.938685][ T29] audit: type=1400 audit(2000002180.627:2260): avc: denied { open } for pid=16949 comm="syz.5.2654" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 938.004561][ T4733] usb 2-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=60.0e [ 938.020281][ T4733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.039982][T16950] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 938.046127][T16950] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 938.052531][T16950] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 938.069593][ T4733] usb 2-1: Product: ࡃ [ 938.073803][ T4733] usb 2-1: Manufacturer: Ð [ 938.079366][T16950] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 938.093230][ T4733] usb 2-1: SerialNumber: syz [ 938.098420][ T5858] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 938.118546][T16950] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 938.259605][ T5858] usb 5-1: device descriptor read/64, error -71 [ 938.397370][ T5865] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 938.419351][ T5858] usb usb5-port1: attempt power cycle [ 938.513591][ T4733] usb 2-1: USB disconnect, device number 113 [ 938.569964][ T5865] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.589336][ T5865] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 938.611483][ T5865] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 938.620741][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 938.629616][ T5865] usb 6-1: SerialNumber: syz [ 938.723971][ T29] audit: type=1400 audit(2000002181.414:2261): avc: denied { write } for pid=16958 comm="syz.3.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 938.745103][T16959] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2653'. [ 938.755776][ T29] audit: type=1400 audit(2000002181.432:2262): avc: denied { nlmsg_write } for pid=16958 comm="syz.3.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 938.757373][T16959] overlayfs: failed to resolve './file1/file0': -2 [ 938.789210][T16959] overlayfs: failed to clone upperpath [ 938.794592][ T5858] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 938.836156][ T5858] usb 5-1: device descriptor read/8, error -71 [ 938.862965][ T5865] usb 6-1: 0:2 : does not exist [ 938.872805][ T5865] usb 6-1: unit 5: unexpected type 0x0a [ 938.895649][ T5865] usb 6-1: USB disconnect, device number 10 [ 938.919302][T15539] udevd[15539]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.102529][ T5858] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 939.103514][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 939.124403][ T5858] usb 5-1: device descriptor read/8, error -71 [ 939.141122][ T29] audit: type=1400 audit(2000002181.797:2263): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 939.235150][ T29] audit: type=1326 audit(2000002181.891:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="syz.1.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832619c799 code=0x7ffc0000 [ 939.259071][ T5858] usb usb5-port1: unable to enumerate USB device [ 939.266801][ T29] audit: type=1326 audit(2000002181.919:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="syz.1.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832619c799 code=0x7ffc0000 [ 939.291436][ T29] audit: type=1326 audit(2000002181.919:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="syz.1.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f832619c799 code=0x7ffc0000 [ 939.323658][ T29] audit: type=1326 audit(2000002181.919:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="syz.1.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832619c799 code=0x7ffc0000 [ 939.351765][ T29] audit: type=1326 audit(2000002181.919:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="syz.1.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832619c799 code=0x7ffc0000 [ 939.353987][ T24] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 939.404996][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 939.416162][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 939.428602][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 939.441251][ T24] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 939.452211][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.483203][ T24] usb 4-1: Product: syz [ 939.489859][ T24] usb 4-1: Manufacturer: 駙蹴쭉ⴧ爤鹎훳甆ʽí°â’›å­“ [ 939.499831][T16967] Cannot find set identified by id 0 to match [ 939.500474][ T24] usb 4-1: SerialNumber: syz [ 939.538531][T16961] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 939.947025][ T24] usb 4-1: USB disconnect, device number 100 [ 940.138499][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 940.224270][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 940.230343][ T5817] Bluetooth: hci5: command 0x0c1a tx timeout [ 940.259601][T16980] netlink: 'syz.5.2662': attribute type 21 has an invalid length. [ 940.610882][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 940.643100][T16981] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2662'. [ 940.819747][T16981] openvswitch: netlink: Flow key attr not present in new flow. [ 941.228811][T16993] netlink: 'syz.5.2662': attribute type 1 has an invalid length. [ 941.255261][T16980] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2662'. [ 941.264543][T16993] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2662'. [ 941.877098][T16980] netlink: 'syz.5.2662': attribute type 4 has an invalid length. [ 941.885212][T16980] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2662'. [ 942.043785][T17002] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 942.210502][T17000] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 942.243517][T17000] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 942.254983][T17015] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 942.258990][T17015] overlayfs: failed to clone upperpath [ 942.393110][ T2727] block nbd1: Possible stuck request ffff888027328000: control (read@0,1024B). Runtime 120 seconds [ 942.404432][ T2727] block nbd1: Possible stuck request ffff888027328200: control (read@1024,1024B). Runtime 120 seconds [ 942.415509][ T2727] block nbd1: Possible stuck request ffff888027328400: control (read@2048,1024B). Runtime 120 seconds [ 942.426562][ T2727] block nbd1: Possible stuck request ffff888027328600: control (read@3072,1024B). Runtime 120 seconds [ 942.438715][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2665'. [ 942.456199][T16983] Bluetooth: hci4: command 0x0c1a tx timeout [ 943.243774][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 943.243788][ T29] audit: type=1400 audit(2000002185.636:2301): avc: denied { ioctl } for pid=17025 comm="syz.3.2673" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 943.421067][ T5858] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 943.435147][T17039] netlink: 'syz.5.2676': attribute type 1 has an invalid length. [ 943.564720][ T29] audit: type=1400 audit(2000002185.936:2302): avc: denied { mounton } for pid=17033 comm="syz.5.2676" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 943.677701][T17047] fuse: Unknown parameter '0xffffffffffffffff' [ 944.015267][ T29] audit: type=1400 audit(2000002186.030:2303): avc: denied { create } for pid=17043 comm="syz.3.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 944.034936][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 944.049005][ T5858] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 944.064877][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.074618][ T29] audit: type=1400 audit(2000002186.030:2304): avc: denied { write } for pid=17043 comm="syz.3.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 944.095117][ T5858] usb 1-1: Product: syz [ 944.101691][ T5858] usb 1-1: Manufacturer: syz [ 944.107041][ T5858] usb 1-1: SerialNumber: syz [ 944.113314][ T29] audit: type=1400 audit(2000002186.413:2305): avc: denied { append } for pid=17048 comm="syz.4.2679" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 944.153233][ T5858] usb 1-1: config 0 descriptor?? [ 944.421343][ T7809] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 944.432696][T17030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.472984][T17030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.593844][ T7809] usb 5-1: unable to get BOS descriptor or descriptor too short [ 944.605069][ T7809] usb 5-1: config 1 interface 0 has no altsetting 0 [ 944.615095][ T7809] usb 5-1: string descriptor 0 read error: -22 [ 944.624207][ T7809] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.40 [ 944.638400][ T7809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.654701][ T5858] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 022 [ 944.666859][T16983] Bluetooth: hci4: command 0x0c1a tx timeout [ 944.750877][T17060] loop6: detected capacity change from 0 to 2640 [ 944.778393][ T29] audit: type=1400 audit(2000002443.081:2306): avc: denied { setopt } for pid=17031 comm="syz.1.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 944.822849][ T29] audit: type=1400 audit(2000002443.081:2307): avc: denied { getopt } for pid=17031 comm="syz.1.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 944.873906][T17060] buffer_io_error: 27 callbacks suppressed [ 944.873926][T17060] Buffer I/O error on dev loop6, logical block 0, async page read [ 944.912578][T17060] Buffer I/O error on dev loop6, logical block 0, async page read [ 944.915933][T17056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.931694][T17060] Buffer I/O error on dev loop6, logical block 0, async page read [ 944.945343][T17060] Buffer I/O error on dev loop6, logical block 0, async page read [ 944.947039][T17056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.962921][T17060] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.047307][T17060] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.127542][T17060] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.137909][T17060] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.145956][T17060] ldm_validate_partition_table(): Disk read failed. [ 945.154295][T17060] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.157049][T17051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.164700][T17060] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.190613][T17060] Dev loop6: unable to read RDB block 0 [ 945.232906][T17060] loop6: unable to read partition table [ 945.363939][T17060] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 945.490309][ T5178] ldm_validate_partition_table(): Disk read failed. [ 945.517756][ T5178] Dev loop6: unable to read RDB block 0 [ 945.533510][ T5178] loop6: unable to read partition table [ 945.664453][T17051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.724189][ T1463] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 945.743026][T17051] loop5: detected capacity change from 0 to 4096 [ 945.884275][ T1463] usb 6-1: Using ep0 maxpacket: 32 [ 945.891431][ T1463] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 945.900164][ T1463] usb 6-1: config 0 has no interface number 0 [ 945.924177][ T1463] usb 6-1: config 0 interface 184 has no altsetting 0 [ 945.987742][ T1463] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 945.998089][ T1463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.050164][ T1463] usb 6-1: Product: syz [ 946.086702][ T1463] usb 6-1: Manufacturer: syz [ 946.103172][ T1463] usb 6-1: SerialNumber: syz [ 946.140452][ T792] usb 1-1: USB disconnect, device number 22 [ 946.160910][ T1463] usb 6-1: config 0 descriptor?? [ 946.191159][ T1463] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 946.226426][ T1463] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 946.527843][ T29] audit: type=1400 audit(2000002700.719:2308): avc: denied { create } for pid=17077 comm="syz.3.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 946.550224][ T792] usb 6-1: USB disconnect, device number 11 [ 947.251425][T17085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2689'. [ 948.131645][ T7809] usbhid 5-1:1.0: can't add hid device: -71 [ 948.155364][ T7809] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 948.202651][ T7809] usb 5-1: USB disconnect, device number 102 [ 948.443753][T17092] fuse: Unknown parameter '0xffffffffffffffff' [ 949.219189][T17104] overlay: filesystem on ./file0 not supported as upperdir [ 949.451770][ T29] audit: type=1400 audit(2000002703.126:2309): avc: denied { unlink } for pid=17093 comm="syz.5.2692" name="#7" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 949.918848][T17114] /dev/nullb0: Can't open blockdev [ 950.259598][ T7125] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 950.271360][ T29] audit: type=1400 audit(2000002959.889:2310): avc: denied { mounton } for pid=17108 comm="syz.1.2696" path="/syzcgroup/unified/syz1" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 950.337619][ T29] audit: type=1400 audit(2000002960.254:2311): avc: denied { create } for pid=17106 comm="syz.4.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 950.406025][ T29] audit: type=1400 audit(2000002960.310:2312): avc: denied { checkpoint_restore } for pid=17113 comm="syz.5.2697" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 950.456005][T17102] loop6: detected capacity change from 0 to 2640 [ 950.464359][T17102] buffer_io_error: 32 callbacks suppressed [ 950.464375][T17102] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.483526][T17102] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.860834][T17124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2700'. [ 951.587680][T17102] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.628179][T17102] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.640378][ T29] audit: type=1400 audit(2000002960.329:2313): avc: denied { mounton } for pid=17117 comm="syz.4.2698" path="/495/file0" dev="tmpfs" ino=2645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 951.695104][T17102] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.709400][ T29] audit: type=1400 audit(2000002961.565:2314): avc: denied { create } for pid=17123 comm="syz.0.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 951.731463][T17102] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.748338][T17102] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.759195][T17102] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.769635][T17102] ldm_validate_partition_table(): Disk read failed. [ 951.798923][T17102] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.808091][T17102] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.830056][T17102] Dev loop6: unable to read RDB block 0 [ 951.940265][ T5858] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 951.984506][T17129] FAULT_INJECTION: forcing a failure. [ 951.984506][T17129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.022270][T17129] CPU: 1 UID: 0 PID: 17129 Comm: syz.0.2690 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.022302][T17129] Tainted: [L]=SOFTLOCKUP [ 952.022309][T17129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 952.022320][T17129] Call Trace: [ 952.022327][T17129] [ 952.022335][T17129] dump_stack_lvl+0x100/0x190 [ 952.022369][T17129] should_fail_ex.cold+0x5/0xa [ 952.022393][T17129] _copy_from_user+0x2e/0xd0 [ 952.022420][T17129] copy_msghdr_from_user+0x9f/0x4f0 [ 952.022445][T17129] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 952.022481][T17129] ___sys_sendmsg+0x106/0x1e0 [ 952.022505][T17129] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.022563][T17129] __sys_sendmsg+0x170/0x220 [ 952.022583][T17129] ? __pfx___sys_sendmsg+0x10/0x10 [ 952.022617][T17129] do_syscall_64+0x106/0xf80 [ 952.022636][T17129] ? clear_bhb_loop+0x40/0x90 [ 952.022658][T17129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.022676][T17129] RIP: 0033:0x7f1997b9c799 [ 952.022691][T17129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.022708][T17129] RSP: 002b:00007f1998aee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.022725][T17129] RAX: ffffffffffffffda RBX: 00007f1997e15fa0 RCX: 00007f1997b9c799 [ 952.022736][T17129] RDX: 000000000000c010 RSI: 00002000000003c0 RDI: 000000000000000a [ 952.022747][T17129] RBP: 00007f1998aee090 R08: 0000000000000000 R09: 0000000000000000 [ 952.022757][T17129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.022768][T17129] R13: 00007f1997e16038 R14: 00007f1997e15fa0 R15: 00007ffe0bf99188 [ 952.022792][T17129] [ 952.296055][ T5858] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 952.305492][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.346894][ T5858] usb 6-1: config 0 descriptor?? [ 952.410127][T17102] loop6: unable to read partition table [ 952.465862][ T29] audit: type=1400 audit(2000002962.276:2315): avc: denied { write } for pid=17136 comm="syz.4.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 952.637691][T17102] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 952.646576][ T2727] block nbd0: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 210 seconds [ 952.657662][ T2727] block nbd0: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 210 seconds [ 952.668703][ T2727] block nbd0: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 210 seconds [ 952.767609][T17139] can0: slcan on ttyS3. [ 952.802719][ T29] audit: type=1400 audit(2000002962.538:2316): avc: denied { create } for pid=17136 comm="syz.4.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 953.042771][ T29] audit: type=1400 audit(2000002962.819:2317): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.094423][ T5858] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 953.094575][ T2727] block nbd0: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 210 seconds [ 953.191246][ T29] audit: type=1400 audit(2000002962.838:2318): avc: denied { search } for pid=5473 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.341847][ T5858] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 953.357943][T17127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.392631][ T5858] [drm] Initialized udl on minor 2 [ 953.400062][T17127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.451039][ T5858] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 953.468036][T17136] can0 (unregistered): slcan off ttyS3. [ 953.496406][ T5858] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 953.533868][ T1463] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 953.543514][ T1463] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 953.554237][ T5858] usb 6-1: USB disconnect, device number 12 [ 953.835044][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 954.879654][T17141] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2703'. [ 955.136085][T17166] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2705'. [ 955.182695][T17162] xt_hashlimit: invalid interval [ 955.417511][T17170] fuse: Unknown parameter '0xffffffffffffffff' [ 955.955032][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 955.955048][ T29] audit: type=1400 audit(2000002965.544:2326): avc: denied { bind } for pid=17174 comm="syz.0.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 956.562288][T17189] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2712'. [ 957.481917][ T29] audit: type=1400 audit(2000002965.591:2327): avc: denied { setopt } for pid=17175 comm="syz.5.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 957.896973][T17196] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2711'. [ 958.632137][ T29] audit: type=1400 audit(2000002965.591:2328): avc: denied { bind } for pid=17175 comm="syz.5.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 958.734386][ T29] audit: type=1400 audit(2000002965.591:2329): avc: denied { name_bind } for pid=17175 comm="syz.5.2708" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 958.860438][ T29] audit: type=1400 audit(2000002965.591:2330): avc: denied { node_bind } for pid=17175 comm="syz.5.2708" saddr=10.1.1.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 959.065422][ T29] audit: type=1400 audit(2000002965.853:2331): avc: denied { accept } for pid=17175 comm="syz.5.2708" lport=46160 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 959.181370][T17208] siw: device registration error -23 [ 959.573987][ T29] audit: type=1400 audit(2000002965.853:2332): avc: denied { getopt } for pid=17175 comm="syz.5.2708" lport=46160 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 959.612533][ T29] audit: type=1400 audit(2000002966.948:2333): avc: denied { mounton } for pid=17175 comm="syz.5.2708" path="/38/file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 959.662120][ T792] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 959.679501][ T29] audit: type=1400 audit(2000002968.091:2334): avc: denied { add_name } for pid=17145 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.734256][ T29] audit: type=1400 audit(2000002968.091:2335): avc: denied { create } for pid=17145 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 959.845936][ T792] usb 6-1: Using ep0 maxpacket: 16 [ 959.862602][ T792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.916391][ T792] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 959.984920][ T792] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 960.031507][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.071349][ T792] usb 6-1: config 0 descriptor?? [ 960.104012][ T792] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 960.185660][ T4733] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 960.369377][ T4733] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 960.408618][ T4733] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 960.459411][ T4733] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 960.518133][ T4733] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 960.577795][ T4733] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 960.623292][ T4733] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 960.648173][ T4733] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 960.686323][ T4733] usb 5-1: Product: syz [ 960.705823][ T4733] usb 5-1: Manufacturer: syz [ 960.745577][ T4733] cdc_wdm 5-1:1.0: skipping garbage [ 960.766702][ T4733] cdc_wdm 5-1:1.0: skipping garbage [ 960.788860][ T4733] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 960.822109][ T4733] cdc_wdm 5-1:1.0: Unknown control protocol [ 961.249675][ T1463] usb 5-1: USB disconnect, device number 103 [ 961.435143][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 961.781300][T17242] nbd: socks must be embedded in a SOCK_ITEM attr [ 962.553603][ T24] usb 6-1: USB disconnect, device number 13 [ 964.054917][T17254] fuse: Unknown parameter '0xffffffffffffffff' [ 964.437468][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 964.437511][ T29] audit: type=1400 audit(2000002973.484:2344): avc: denied { create } for pid=17252 comm="syz.4.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 964.879120][T13355] udevd[13355]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 964.925327][ T29] audit: type=1400 audit(2000002973.605:2345): avc: denied { listen } for pid=17252 comm="syz.4.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 964.990820][T15539] udevd[15539]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 965.299248][ T4733] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 965.495327][ T4733] usb 4-1: unable to get BOS descriptor or descriptor too short [ 965.520061][ T4733] usb 4-1: not running at top speed; connect to a high speed hub [ 965.535158][ T29] audit: type=1400 audit(2000002974.514:2346): avc: denied { read } for pid=17252 comm="syz.4.2722" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 965.537871][ T4733] usb 4-1: config 9 has an invalid interface number: 48 but max is 0 [ 965.653619][ T4733] usb 4-1: config 9 has no interface number 0 [ 965.878621][ T29] audit: type=1400 audit(2000002974.514:2347): avc: denied { open } for pid=17252 comm="syz.4.2722" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 965.908023][ T4733] usb 4-1: config 9 interface 48 altsetting 9 endpoint 0x2 has invalid wMaxPacketSize 0 [ 965.924239][ T4733] usb 4-1: config 9 interface 48 has no altsetting 0 [ 965.984867][ T792] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 965.986360][ T4733] usb 4-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice=46.82 [ 966.014918][ T4733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.027703][ T4733] usb 4-1: Product: syz [ 966.031890][ T4733] usb 4-1: Manufacturer: syz [ 966.042143][ T4733] usb 4-1: SerialNumber: syz [ 966.198656][ T792] usb 5-1: Using ep0 maxpacket: 8 [ 966.205512][ T792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.372388][T17287] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2730'. [ 966.527500][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.657535][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.667318][ T792] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 967.090118][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.117495][ T792] usb 5-1: config 0 descriptor?? [ 967.218531][ T792] usb 5-1: can't set config #0, error -71 [ 967.366841][ T792] usb 5-1: USB disconnect, device number 104 [ 967.539806][T17296] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.558771][T17296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 968.026510][T17301] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2732'. [ 968.905345][ T4733] io_ti 4-1:9.48: required endpoints missing [ 968.973050][ T4733] usb 4-1: USB disconnect, device number 101 [ 969.613040][T17311] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2733'. [ 970.727939][T17314] fuse: Unknown parameter '0xffffffffffffffff' [ 971.815453][ T29] audit: type=1400 audit(2000002980.394:2348): avc: denied { bind } for pid=17323 comm="syz.1.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 971.837227][ T29] audit: type=1400 audit(2000002980.412:2349): avc: denied { read write } for pid=17323 comm="syz.1.2739" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 971.897401][T17327] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 971.909004][ T29] audit: type=1400 audit(2000002980.412:2350): avc: denied { open } for pid=17323 comm="syz.1.2739" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 971.941229][ T29] audit: type=1400 audit(2000002980.412:2351): avc: denied { ioctl } for pid=17323 comm="syz.1.2739" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 971.969679][ T29] audit: type=1400 audit(2000002980.468:2352): avc: denied { map } for pid=17326 comm="syz.4.2734" path="socket:[57993]" dev="sockfs" ino=57993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 972.133770][ T29] audit: type=1400 audit(2000002980.693:2353): avc: denied { ioctl } for pid=17330 comm="syz.5.2737" path="socket:[58001]" dev="sockfs" ino=58001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 972.418108][T17340] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2744'. [ 973.362383][ T29] audit: type=1400 audit(2000002981.835:2354): avc: denied { setopt } for pid=17335 comm="syz.3.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 973.421114][T17342] xt_hashlimit: size too large, truncated to 1048576 [ 973.785595][T17347] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2747'. [ 974.486963][ T2727] block nbd1: Possible stuck request ffff888027328000: control (read@0,1024B). Runtime 150 seconds [ 974.498170][ T2727] block nbd1: Possible stuck request ffff888027328200: control (read@1024,1024B). Runtime 150 seconds [ 974.509470][ T2727] block nbd1: Possible stuck request ffff888027328400: control (read@2048,1024B). Runtime 150 seconds [ 974.520585][ T2727] block nbd1: Possible stuck request ffff888027328600: control (read@3072,1024B). Runtime 150 seconds [ 974.797342][T17353] fuse: Unknown parameter '0xffffffffffffffff' [ 975.685902][T17364] syzkaller0: entered promiscuous mode [ 975.691458][T17364] syzkaller0: entered allmulticast mode [ 975.853831][ T7809] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 975.947979][T17370] FAULT_INJECTION: forcing a failure. [ 975.947979][T17370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.961195][T17370] CPU: 0 UID: 0 PID: 17370 Comm: syz.4.2745 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.961221][T17370] Tainted: [L]=SOFTLOCKUP [ 975.961232][T17370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 975.961243][T17370] Call Trace: [ 975.961252][T17370] [ 975.961259][T17370] dump_stack_lvl+0x100/0x190 [ 975.961293][T17370] should_fail_ex.cold+0x5/0xa [ 975.961311][T17370] _copy_from_user+0x2e/0xd0 [ 975.961329][T17370] generic_map_update_batch+0x452/0x800 [ 975.961345][T17370] ? __pfx_generic_map_update_batch+0x10/0x10 [ 975.961359][T17370] ? __pfx_generic_map_update_batch+0x10/0x10 [ 975.961376][T17370] bpf_map_do_batch+0x66f/0x6d0 [ 975.961403][T17370] __sys_bpf+0x302/0x4b90 [ 975.961423][T17370] ? __pfx___sys_bpf+0x10/0x10 [ 975.961438][T17370] ? proc_fail_nth_write+0x9f/0x220 [ 975.961456][T17370] ? find_held_lock+0x2b/0x80 [ 975.961473][T17370] ? find_held_lock+0x2b/0x80 [ 975.961486][T17370] ? ksys_write+0x190/0x250 [ 975.961507][T17370] ? __mutex_unlock_slowpath+0x15c/0x790 [ 975.961541][T17370] ? fput+0x79/0x100 [ 975.961559][T17370] ? ksys_write+0x1ac/0x250 [ 975.961582][T17370] ? __pfx_ksys_write+0x10/0x10 [ 975.961603][T17370] __x64_sys_bpf+0x7b/0xc0 [ 975.961615][T17370] ? lockdep_hardirqs_on+0x78/0x100 [ 975.961627][T17370] do_syscall_64+0x106/0xf80 [ 975.961638][T17370] ? clear_bhb_loop+0x40/0x90 [ 975.961654][T17370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.961672][T17370] RIP: 0033:0x7fcf9d59c799 [ 975.961687][T17370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.961701][T17370] RSP: 002b:00007fcf9e3c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 975.961717][T17370] RAX: ffffffffffffffda RBX: 00007fcf9d816180 RCX: 00007fcf9d59c799 [ 975.961728][T17370] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 000000000000001a [ 975.961737][T17370] RBP: 00007fcf9e3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 975.961743][T17370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 975.961749][T17370] R13: 00007fcf9d816218 R14: 00007fcf9d816180 R15: 00007ffdeb6a2fb8 [ 975.961764][T17370] [ 976.875123][T17375] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 976.902922][ T7809] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 976.912369][ T7809] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 976.922696][ T7809] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 976.933722][ T7809] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 977.025734][ T7809] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 977.333309][T17381] cgroup: Unknown subsys name 'uid>00000000000000000000' [ 977.498204][ T29] audit: type=1400 audit(2000002985.581:2355): avc: denied { remount } for pid=17374 comm="syz.3.2754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 977.613150][ T29] audit: type=1326 audit(2000002985.740:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.3.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4ef9c799 code=0x7ffc0000 [ 977.642757][ T29] audit: type=1326 audit(2000002985.740:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.3.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4ef9c799 code=0x7ffc0000 [ 977.695078][ T29] audit: type=1400 audit(2000002985.880:2358): avc: denied { ioctl } for pid=17371 comm="syz.5.2749" path="mnt:[4026534290]" dev="nsfs" ino=4026534290 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 978.238958][T17384] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2755'. [ 979.778772][T17390] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2756'. [ 980.613243][ T7809] usb 2-1: string descriptor 0 read error: -71 [ 980.620056][ T7809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.629979][ T7809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 980.676455][ T7809] usb 2-1: can't set config #1, error -71 [ 980.698347][ T7809] usb 2-1: USB disconnect, device number 114 [ 980.712842][ T4733] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 980.747208][ T29] audit: type=1400 audit(2000002988.755:2359): avc: denied { bind } for pid=17398 comm="syz.1.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 980.788970][ T29] audit: type=1400 audit(2000002988.792:2360): avc: denied { write } for pid=17398 comm="syz.1.2758" path="socket:[58093]" dev="sockfs" ino=58093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 980.825770][ T29] audit: type=1400 audit(2000002988.802:2361): avc: denied { write } for pid=17398 comm="syz.1.2758" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 980.926688][ T29] audit: type=1400 audit(2000002988.802:2362): avc: denied { ioctl } for pid=17398 comm="syz.1.2758" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 980.988131][ T4733] usb 6-1: Using ep0 maxpacket: 16 [ 981.044311][ T4733] usb 6-1: unable to get BOS descriptor or descriptor too short [ 981.114453][ T4733] usb 6-1: config 1 has an invalid descriptor of length 92, skipping remainder of the config [ 981.159150][ T4733] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 981.214453][ T4733] usb 6-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 981.256505][ T4733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.284025][ T4733] usb 6-1: Product: syz [ 981.288684][T17403] loop6: detected capacity change from 0 to 2640 [ 981.300252][ T4733] usb 6-1: Manufacturer: syz [ 981.304857][ T4733] usb 6-1: SerialNumber: syz [ 981.333972][T17405] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 981.375009][T17405] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 981.612333][T13355] buffer_io_error: 11 callbacks suppressed [ 981.612355][T13355] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.655483][T13355] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.789468][T13355] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.801097][T13355] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.818836][T13355] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.835757][T13355] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.893029][T13355] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.924686][T13355] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.952624][T13355] ldm_validate_partition_table(): Disk read failed. [ 981.982277][T13355] Buffer I/O error on dev loop6, logical block 0, async page read [ 982.015152][T13355] Buffer I/O error on dev loop6, logical block 0, async page read [ 982.042393][T13355] Dev loop6: unable to read RDB block 0 [ 982.070348][T13355] loop6: unable to read partition table [ 982.128478][T17403] ldm_validate_partition_table(): Disk read failed. [ 982.136782][T17403] Dev loop6: unable to read RDB block 0 [ 982.181187][T17403] loop6: unable to read partition table [ 982.205161][T17403] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 982.216115][ T5178] ldm_validate_partition_table(): Disk read failed. [ 982.223438][ T5178] Dev loop6: unable to read RDB block 0 [ 982.229183][ T5178] loop6: unable to read partition table [ 982.912665][T17411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2760'. [ 984.243522][T17396] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 984.263539][T17396] team0: Port device batadv1 added [ 984.366992][T17395] syz.5.2757 (17395) used obsolete PPPIOCDETACH ioctl [ 984.675163][T17418] fuse: Unknown parameter '0xffffffffffffffff' [ 985.063302][ T2727] block nbd0: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 240 seconds [ 985.074222][ T2727] block nbd0: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 240 seconds [ 985.086900][ T2727] block nbd0: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 240 seconds [ 985.150029][ T4733] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 985.161403][ T4733] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 985.188435][ T2727] block nbd0: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 240 seconds [ 985.224920][ T4733] usb 6-1: USB disconnect, device number 14 [ 985.434395][ T63] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 985.457216][T17424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2766'. [ 986.854089][T17441] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2771'. [ 987.582657][ T29] audit: type=1400 audit(2000003251.148:2363): avc: denied { open } for pid=17444 comm="syz.4.2772" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 987.740571][ T29] audit: type=1400 audit(2000003251.213:2364): avc: denied { ioctl } for pid=17444 comm="syz.4.2772" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x542b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 987.836679][ T29] audit: type=1400 audit(2000003251.260:2365): avc: denied { write } for pid=17444 comm="syz.4.2772" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 988.234191][ T1463] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 988.415749][ T1463] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.432022][ T1463] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 988.443127][ T1463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.455689][ T1463] usb 4-1: config 0 descriptor?? [ 988.455724][ T29] audit: type=1400 audit(2000003251.972:2366): avc: denied { sqpoll } for pid=17462 comm="syz.5.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 988.470660][ T1463] pwc: Askey VC010 type 2 USB webcam detected. [ 988.622779][T17466] tipc: Failed to obtain node identity [ 988.637097][T17466] tipc: Enabling of bearer rejected, failed to enable media [ 988.655546][ T29] audit: type=1400 audit(2000003252.159:2367): avc: denied { ioctl } for pid=17462 comm="syz.5.2775" path="socket:[58196]" dev="sockfs" ino=58196 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 988.918744][ T1463] pwc: recv_control_msg error -32 req 02 val 2b00 [ 988.934307][ T1463] pwc: recv_control_msg error -32 req 02 val 2700 [ 988.982522][ T1463] pwc: recv_control_msg error -32 req 02 val 2c00 [ 988.999277][ T1463] pwc: recv_control_msg error -32 req 04 val 1000 [ 989.033413][ T1463] pwc: recv_control_msg error -32 req 04 val 1300 [ 989.047117][ T1463] pwc: recv_control_msg error -32 req 04 val 1400 [ 989.071629][ T1463] pwc: recv_control_msg error -32 req 02 val 2000 [ 989.082426][ T1463] pwc: recv_control_msg error -32 req 02 val 2100 [ 990.357448][ T29] audit: type=1400 audit(2000003253.751:2368): avc: denied { mount } for pid=17482 comm="syz.5.2779" name="/" dev="ramfs" ino=58238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 991.368197][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2780'. [ 991.997736][ T1463] pwc: recv_control_msg error -71 req 02 val 2500 [ 992.020565][ T1463] pwc: recv_control_msg error -71 req 02 val 2400 [ 992.033341][ T1463] pwc: recv_control_msg error -71 req 02 val 2600 [ 992.040486][ T1463] pwc: recv_control_msg error -71 req 02 val 2900 [ 992.058329][ T1463] pwc: recv_control_msg error -71 req 02 val 2800 [ 992.066231][ T1463] pwc: recv_control_msg error -71 req 04 val 1100 [ 992.073584][ T1463] pwc: recv_control_msg error -71 req 04 val 1200 [ 992.099409][ T1463] pwc: Registered as video103. [ 992.130235][ T1463] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 992.149820][ T29] audit: type=1400 audit(2000003255.427:2369): avc: denied { ioctl } for pid=17494 comm="syz.3.2782" path="socket:[58263]" dev="sockfs" ino=58263 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 992.164442][ T1463] usb 4-1: USB disconnect, device number 102 [ 992.250887][ T29] audit: type=1400 audit(2000003255.427:2370): avc: denied { read } for pid=5163 comm="acpid" name="event4" dev="devtmpfs" ino=4122 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 992.332520][ T29] audit: type=1400 audit(2000003255.427:2371): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4122 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 992.358770][ T29] audit: type=1400 audit(2000003255.427:2372): avc: denied { ioctl } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4122 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 992.602666][T17505] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2785'. [ 993.363743][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2783'. [ 993.372995][T17515] bridge_slave_1: left allmulticast mode [ 993.378681][T17515] bridge_slave_1: left promiscuous mode [ 993.384965][T17515] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.609102][T17515] bridge_slave_0: left allmulticast mode [ 993.615689][T17515] bridge_slave_0: left promiscuous mode [ 993.621351][T17515] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.856106][T17516] lo speed is unknown, defaulting to 1000 [ 994.106882][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 994.106899][ T29] audit: type=1400 audit(2000003257.271:2374): avc: denied { write } for pid=17518 comm="syz.5.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 995.273580][ T1463] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 995.458556][ T1463] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 995.474852][ T1463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.494566][ T1463] usb 2-1: Product: syz [ 995.499479][ T1463] usb 2-1: Manufacturer: syz [ 995.504354][ T1463] usb 2-1: SerialNumber: syz [ 995.513677][ T1463] usb 2-1: config 0 descriptor?? [ 995.868271][ T792] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 996.028448][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 996.036862][ T792] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 996.046567][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.055213][ T792] usb 4-1: Product: syz [ 996.059873][ T792] usb 4-1: Manufacturer: syz [ 996.064512][ T792] usb 4-1: SerialNumber: syz [ 996.071428][ T792] usb 4-1: config 0 descriptor?? [ 996.081911][ T47] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 996.244593][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 996.257896][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 996.285971][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 996.299459][T17536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.306197][ T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 996.318645][T17536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.331782][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 996.349902][ T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 996.365564][ T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 996.383112][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.692494][ T792] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 103 [ 996.708027][ T47] usb 5-1: config 0 descriptor?? [ 996.720063][T17539] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 996.848375][T17536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.857030][T17536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.945151][T17551] openvswitch: netlink: IP tunnel dst address not specified [ 996.971428][T17551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2793'. [ 996.982638][T17551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2793'. [ 996.992416][T17551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2793'. [ 997.082326][ T5858] usb 4-1: USB disconnect, device number 103 [ 997.183970][ T792] usb 5-1: USB disconnect, device number 105 [ 997.186002][T16983] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 997.468471][ T792] usb 2-1: USB disconnect, device number 115 [ 997.726477][ T29] audit: type=1400 audit(2000003260.651:2375): avc: denied { getattr } for pid=17561 comm="syz.1.2797" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 997.822476][T17565] netlink: 'syz.1.2797': attribute type 6 has an invalid length. [ 999.243290][ T1463] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 999.251010][ T5858] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 999.318008][ T5865] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 999.442932][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 999.451200][ T1463] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 999.460112][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.495710][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 999.508077][ T1463] usb 2-1: can't read configurations, error -61 [ 999.514595][T17578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2796'. [ 999.523667][ T5858] usb 4-1: config 0 has no interfaces? [ 999.535579][ T5865] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 999.544943][ T5858] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 999.559699][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.567893][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.584246][ T5865] usb 5-1: config 0 descriptor?? [ 999.596247][ T5858] usb 4-1: config 0 descriptor?? [ 999.607329][T17571] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 999.670558][ T1463] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 999.897188][ T1463] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 999.907526][ T1463] usb 2-1: can't read configurations, error -61 [ 999.951014][ T1463] usb usb2-port1: attempt power cycle [ 1000.103651][ T5865] asus 0003:0B05:1ABE.0020: unknown main item tag 0x0 [ 1000.145015][ T5865] asus 0003:0B05:1ABE.0020: unknown main item tag 0x0 [ 1000.154828][ T5865] asus 0003:0B05:1ABE.0020: unknown main item tag 0x0 [ 1000.172534][ T5865] asus 0003:0B05:1ABE.0020: unknown main item tag 0x0 [ 1000.194212][ T5865] asus 0003:0B05:1ABE.0020: unknown main item tag 0x0 [ 1000.210024][ T5865] asus 0003:0B05:1ABE.0020: unknown main item tag 0x0 [ 1000.242286][ T5865] asus 0003:0B05:1ABE.0020: unknown main item tag 0x0 [ 1000.266017][ T5865] asus 0003:0B05:1ABE.0020: unknown main item tag 0x0 [ 1000.285259][ T5865] asus 0003:0B05:1ABE.0020: unknown main item tag 0x0 [ 1000.321299][ T5865] asus 0003:0B05:1ABE.0020: unknown main item tag 0x0 [ 1000.343296][ T5865] asus 0003:0B05:1ABE.0020: reserved main item tag 0xe [ 1000.354838][ T1463] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1000.388328][ T1463] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1000.401814][ T1463] usb 2-1: can't read configurations, error -61 [ 1000.408369][ T5865] asus 0003:0B05:1ABE.0020: reserved main item tag 0xd [ 1000.424440][ T5865] asus 0003:0B05:1ABE.0020: unexpected long global item [ 1000.440275][ T5865] asus 0003:0B05:1ABE.0020: Asus hid parse failed: -22 [ 1000.447235][ T5865] asus 0003:0B05:1ABE.0020: probe with driver asus failed with error -22 [ 1000.482224][ T5865] usb 5-1: USB disconnect, device number 106 [ 1000.555449][ T29] audit: type=1400 audit(2000003263.301:2376): avc: denied { mount } for pid=17583 comm="syz.0.2802" name="/" dev="hugetlbfs" ino=59029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1000.593265][ T1463] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1000.623729][ T1463] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1000.634706][ T1463] usb 2-1: can't read configurations, error -61 [ 1000.642359][ T47] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1000.656070][ T1463] usb usb2-port1: unable to enumerate USB device [ 1000.825798][ T47] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1000.845262][ T47] usb 6-1: config 0 has no interface number 0 [ 1000.867931][ T47] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1000.889201][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.906761][ T47] usb 6-1: Product: syz [ 1000.917773][ T47] usb 6-1: Manufacturer: syz [ 1000.944938][ T47] usb 6-1: SerialNumber: syz [ 1000.987596][ T47] usb 6-1: config 0 descriptor?? [ 1001.122005][ T29] audit: type=1400 audit(2000003263.807:2377): avc: denied { read } for pid=17589 comm="syz.1.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1001.414513][ T24] usb 4-1: USB disconnect, device number 104 [ 1001.471473][ T29] audit: type=1400 audit(2000003264.162:2378): avc: denied { bind } for pid=17589 comm="syz.1.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1001.629699][ T47] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1001.672838][ T29] audit: type=1400 audit(2000003264.162:2379): avc: denied { setopt } for pid=17589 comm="syz.1.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1001.700586][ T47] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 1001.740160][ T47] asix 6-1:0.251: probe with driver asix failed with error -5 [ 1001.759767][ T29] audit: type=1400 audit(2000003264.425:2380): avc: denied { ioctl } for pid=17596 comm="syz.3.2805" path="/dev/sg0" dev="devtmpfs" ino=777 ioctlcmd=0x5386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1001.893304][ T792] usb 6-1: USB disconnect, device number 15 [ 1002.148360][ T24] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1002.523634][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1002.535044][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.543493][ T24] usb 4-1: Product: syz [ 1002.547842][ T24] usb 4-1: Manufacturer: syz [ 1002.552704][ T24] usb 4-1: SerialNumber: syz [ 1002.558396][ T29] audit: type=1400 audit(2000003265.183:2381): avc: denied { read } for pid=17606 comm="syz.1.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1002.581391][ T24] usb 4-1: config 0 descriptor?? [ 1002.679645][ T29] audit: type=1400 audit(2000003265.286:2382): avc: denied { create } for pid=17609 comm="syz.0.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1002.987855][T17612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2809'. [ 1003.929485][ T24] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 1003.974724][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1004.721633][T17620] bond0: entered promiscuous mode [ 1004.726882][T17620] bond_slave_0: entered promiscuous mode [ 1004.733033][T17620] bond_slave_1: entered promiscuous mode [ 1004.740000][T17620] team0: entered promiscuous mode [ 1004.745120][T17620] team_slave_0: entered promiscuous mode [ 1004.751952][T17620] team_slave_1: entered promiscuous mode [ 1004.758610][T17620] batadv1: entered promiscuous mode [ 1004.781754][T17620] batadv0: entered promiscuous mode [ 1004.795494][T17620] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1005.096344][ T29] audit: type=1400 audit(2000003267.159:2383): avc: denied { ioctl } for pid=17616 comm="syz.5.2812" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1005.138881][T17620] bond0: left promiscuous mode [ 1005.143699][T17620] bond_slave_0: left promiscuous mode [ 1005.149167][T17620] bond_slave_1: left promiscuous mode [ 1005.154976][T17620] team0: left promiscuous mode [ 1005.159757][T17620] team_slave_0: left promiscuous mode [ 1005.165271][T17620] team_slave_1: left promiscuous mode [ 1005.170790][T17620] batadv1: left promiscuous mode [ 1005.190912][T17620] batadv0: left promiscuous mode [ 1005.196426][ T47] usb 4-1: USB disconnect, device number 105 [ 1005.270797][T17624] pim6reg: entered allmulticast mode [ 1005.445752][T17628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2817'. [ 1005.655225][ T29] audit: type=1400 audit(2000003268.067:2384): avc: denied { ioctl } for pid=17625 comm="syz.3.2815" path="socket:[59088]" dev="sockfs" ino=59088 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1005.658211][T17629] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1005.906833][ T29] audit: type=1400 audit(2000003268.076:2385): avc: denied { create } for pid=17625 comm="syz.3.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1005.954436][ T29] audit: type=1400 audit(2000003268.076:2386): avc: denied { getopt } for pid=17625 comm="syz.3.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1006.613006][ T2727] block nbd1: Possible stuck request ffff888027328000: control (read@0,1024B). Runtime 180 seconds [ 1006.624209][ T2727] block nbd1: Possible stuck request ffff888027328200: control (read@1024,1024B). Runtime 180 seconds [ 1006.635556][ T2727] block nbd1: Possible stuck request ffff888027328400: control (read@2048,1024B). Runtime 180 seconds [ 1006.646854][ T2727] block nbd1: Possible stuck request ffff888027328600: control (read@3072,1024B). Runtime 180 seconds [ 1008.274660][ T29] audit: type=1400 audit(2000003270.529:2387): avc: denied { read write } for pid=17653 comm="syz.3.2821" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1008.361940][ T29] audit: type=1400 audit(2000003270.557:2388): avc: denied { ioctl open } for pid=17653 comm="syz.3.2821" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1008.573806][ T29] audit: type=1400 audit(2000003270.810:2389): avc: denied { map } for pid=17653 comm="syz.3.2821" path="socket:[59816]" dev="sockfs" ino=59816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1008.882330][T17671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.901831][T17671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.122785][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1009.127590][T17677] SET target dimension over the limit! [ 1009.183491][T17671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.257050][T17671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.390223][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1009.460987][T17676] delete_channel: no stack [ 1009.718618][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 1009.764216][ T24] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.817029][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1009.848902][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1009.873617][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1009.918219][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.967375][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.117052][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1011.165750][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.470933][ T24] usb 1-1: usb_control_msg returned -71 [ 1011.496335][ T24] usbtmc 1-1:16.0: can't read capabilities [ 1011.543468][ T24] usbtmc 1-1:16.0: Failed to submit iin_urb [ 1011.570098][ T24] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -90 [ 1011.605903][ T24] usb 1-1: USB disconnect, device number 23 [ 1012.751175][T17701] bond4: entered promiscuous mode [ 1013.184931][ T29] audit: type=1400 audit(2000003275.127:2390): avc: denied { connect } for pid=17708 comm="syz.0.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1013.275004][ T29] audit: type=1400 audit(2000003275.201:2391): avc: denied { ioctl } for pid=17708 comm="syz.0.2837" path="socket:[59891]" dev="sockfs" ino=59891 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1013.952187][T17726] 9pnet_virtio: no channels available for device syz [ 1013.964773][ T47] usb 4-1: new low-speed USB device number 106 using dummy_hcd [ 1014.591429][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1014.618927][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1014.661545][ T47] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1014.715950][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1014.742447][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1014.755174][T15922] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1014.773679][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1014.782749][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1014.806884][ T47] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1014.819014][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1014.830504][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1014.846781][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1014.854654][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1014.865708][ T47] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1014.982342][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1015.004129][T15922] usb 5-1: Using ep0 maxpacket: 32 [ 1015.009441][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1015.022943][T15922] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1015.030769][T15922] usb 5-1: can't read configurations, error -61 [ 1015.039471][ T47] usb 4-1: string descriptor 0 read error: -22 [ 1015.071940][ T47] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1015.084153][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.201783][ T47] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1015.228801][T15922] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1015.789429][ T1463] usb 4-1: USB disconnect, device number 106 [ 1015.799914][T15922] usb 5-1: Using ep0 maxpacket: 32 [ 1015.817287][T15922] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1015.826308][T15922] usb 5-1: can't read configurations, error -61 [ 1015.845880][T15922] usb usb5-port1: attempt power cycle [ 1016.200180][T15922] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1016.249972][T15922] usb 5-1: Using ep0 maxpacket: 32 [ 1016.260416][T15922] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1016.912805][T17759] binder: 17756:17759 ioctl c0306201 0 returned -14 [ 1017.246484][ T30] INFO: task syz.2.2477:16265 blocked for more than 144 seconds. [ 1017.248023][ T47] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1017.269830][ T30] Tainted: G L syzkaller #0 [ 1017.285107][ T2727] block nbd0: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 270 seconds [ 1017.304787][ T2727] block nbd0: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 270 seconds [ 1017.306624][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1017.316904][ T2727] block nbd0: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 270 seconds [ 1017.343492][ T2727] block nbd0: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 270 seconds [ 1017.362288][T15922] usb 5-1: can't read configurations, error -61 [ 1017.419060][ T30] task:syz.2.2477 state:D stack:28136 pid:16265 tgid:16263 ppid:5804 task_flags:0x400040 flags:0x00080002 [ 1017.480511][ T30] Call Trace: [ 1017.483876][ T30] [ 1017.506303][ T30] __schedule+0xfee/0x6120 [ 1017.523840][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1017.529676][ T30] ? __pfx___schedule+0x10/0x10 [ 1017.534596][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 1017.542063][ T47] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1017.552247][ T47] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1017.564616][ T47] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1017.573434][ T30] ? find_held_lock+0x2b/0x80 [ 1017.575842][ T47] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1017.578172][ T30] ? schedule+0x2bf/0x390 [ 1017.590100][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.606823][ T47] usb 6-1: Product: syz [ 1017.611349][ T47] usb 6-1: Manufacturer: syz [ 1017.616034][ T47] usb 6-1: SerialNumber: syz [ 1017.626119][ T47] usb 6-1: config 0 descriptor?? [ 1017.638303][ T30] schedule+0xdd/0x390 [ 1017.643078][ T30] schedule_preempt_disabled+0x13/0x30 [ 1017.650607][ T30] __mutex_lock+0xc9a/0x1b90 [ 1017.655336][ T30] ? sync_bdevs+0x153/0x480 [ 1017.665285][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1017.670718][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1017.680164][ T30] ? iput.part.0+0x1a0/0xf50 [ 1017.684871][ T30] ? sync_bdevs+0x153/0x480 [ 1017.690919][ T30] sync_bdevs+0x153/0x480 [ 1017.696874][ T30] ksys_sync+0xb0/0xf0 [ 1017.702171][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1017.707993][ T30] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1017.714930][ T30] ? do_syscall_64+0x95/0xf80 [ 1017.719693][ T30] __do_sys_sync+0xe/0x20 [ 1017.752796][ T30] do_syscall_64+0x106/0xf80 [ 1017.762345][ T30] ? clear_bhb_loop+0x40/0x90 [ 1017.776979][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.793450][ T30] RIP: 0033:0x7f981379c799 [ 1017.809375][ T30] RSP: 002b:00007f98145db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1017.830817][ T30] RAX: ffffffffffffffda RBX: 00007f9813a15fa0 RCX: 00007f981379c799 [ 1017.849862][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.871090][ T30] RBP: 00007f9813a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.892241][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.912505][ T30] R13: 00007f9813a16038 R14: 00007f9813a15fa0 R15: 00007fff7f63f168 [ 1017.940269][ T30] [ 1017.947753][ T30] [ 1017.947753][ T30] Showing all locks held in the system: [ 1017.964927][ T30] 1 lock held by khungtaskd/30: [ 1017.980982][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1018.004492][ T30] 5 locks held by kworker/1:1/47: [ 1018.021438][ T30] #0: ffff888022ac9948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1018.040905][ T47] gs_usb 6-1:0.0: Configuring for 209 interfaces [ 1018.051079][ T30] #1: ffffc90000b77d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1018.076529][ T30] #2: ffff88802a5d3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1018.102014][ T30] #3: ffff888072b4f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1018.126814][ T30] #4: ffff88823be96160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1018.152648][ T30] 2 locks held by getty/5568: [ 1018.157377][ T30] #0: ffff88803898a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1018.181015][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1018.194805][ T30] 1 lock held by udevd/12764: [ 1018.204956][ T30] #0: ffff888027176358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1018.225300][ T30] 1 lock held by udevd/13186: [ 1018.233893][ T47] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1018.236044][ T30] #0: [ 1018.245435][ T47] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 1018.250006][ T30] ffff888027172358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1018.281594][ T30] 1 lock held by syz-executor/15767: [ 1018.293383][ T30] 1 lock held by syz.2.2477/16265: [ 1018.304143][ T30] #0: ffff888027176358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1018.326134][ T30] 3 locks held by syz.0.2846/17755: [ 1018.336778][ T30] [ 1018.341345][ T30] ============================================= [ 1018.341345][ T30] [ 1018.369394][ T30] NMI backtrace for cpu 0 [ 1018.369414][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.369439][ T30] Tainted: [L]=SOFTLOCKUP [ 1018.369446][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1018.369456][ T30] Call Trace: [ 1018.369463][ T30] [ 1018.369470][ T30] dump_stack_lvl+0x100/0x190 [ 1018.369503][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1018.369523][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1018.369552][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1018.369580][ T30] sys_info+0x141/0x190 [ 1018.369601][ T30] watchdog+0xd25/0x1050 [ 1018.369632][ T30] ? __pfx_watchdog+0x10/0x10 [ 1018.369656][ T30] ? __kthread_parkme+0x18c/0x230 [ 1018.369685][ T30] ? kthread+0x13a/0x450 [ 1018.369700][ T30] ? __pfx_watchdog+0x10/0x10 [ 1018.369722][ T30] kthread+0x370/0x450 [ 1018.369737][ T30] ? __pfx_kthread+0x10/0x10 [ 1018.369755][ T30] ret_from_fork+0x754/0xd80 [ 1018.369774][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1018.369794][ T30] ? __switch_to+0x7b4/0x1120 [ 1018.369817][ T30] ? __pfx_kthread+0x10/0x10 [ 1018.369835][ T30] ret_from_fork_asm+0x1a/0x30 [ 1018.369873][ T30] [ 1018.369895][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1018.497394][ C1] NMI backtrace for cpu 1 [ 1018.497413][ C1] CPU: 1 UID: 0 PID: 15767 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.497438][ C1] Tainted: [L]=SOFTLOCKUP [ 1018.497443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1018.497451][ C1] RIP: 0010:debug_check_no_obj_freed+0x2dd/0x630 [ 1018.497473][ C1] Code: 00 00 ad de 49 89 56 08 48 89 c7 48 89 30 48 83 c6 22 48 89 70 08 e8 e2 c1 ff ff 4c 89 f0 48 89 c2 48 c1 ea 03 42 80 3c 22 00 <0f> 84 23 ff ff ff 48 89 c7 48 89 44 24 10 e8 10 fa 76 fd 48 8b 44 [ 1018.497487][ C1] RSP: 0018:ffffc900031574d0 EFLAGS: 00000046 [ 1018.497499][ C1] RAX: ffff888084914e38 RBX: 0000000000000001 RCX: ffffffff81e53018 [ 1018.497508][ C1] RDX: 1ffff110109229c7 RSI: 0000000000000000 RDI: ffff888078c9ee50 [ 1018.497517][ C1] RBP: ffffc90003157600 R08: 0000000000000001 R09: fffff5200062ae88 [ 1018.497526][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000 [ 1018.497534][ C1] R13: ffff8880882e7000 R14: ffff888084914e38 R15: ffff8880882e8000 [ 1018.497544][ C1] FS: 000055555c1d3500(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 1018.497558][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1018.497567][ C1] CR2: 000000110c3b3afd CR3: 000000002be66000 CR4: 00000000003526f0 [ 1018.497576][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1018.497584][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1018.497593][ C1] Call Trace: [ 1018.497599][ C1] [ 1018.497608][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1018.497624][ C1] ? __page_table_check_zero+0x333/0x410 [ 1018.497643][ C1] ? __page_table_check_zero+0x333/0x410 [ 1018.497664][ C1] ? __page_table_check_zero+0x338/0x410 [ 1018.497684][ C1] free_unref_folios+0x43c/0x1790 [ 1018.497703][ C1] ? mark_held_locks+0x40/0x70 [ 1018.497722][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1018.497744][ C1] folios_put_refs+0x53c/0x840 [ 1018.497763][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1018.497782][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1018.497804][ C1] shmem_undo_range+0x5e5/0x1570 [ 1018.497826][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1018.497851][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1018.497867][ C1] ? arch_stack_walk+0xa6/0xf0 [ 1018.497890][ C1] ? kasan_save_stack+0x3f/0x50 [ 1018.497907][ C1] ? kasan_save_stack+0x30/0x50 [ 1018.497924][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1018.497939][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1018.497959][ C1] ? dentry_free+0xc2/0x170 [ 1018.497972][ C1] ? __dentry_kill+0x49a/0x600 [ 1018.497987][ C1] ? dput.part.0+0x456/0x570 [ 1018.498005][ C1] shmem_evict_inode+0x39e/0xbd0 [ 1018.498023][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 1018.498042][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1018.498060][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1018.498079][ C1] ? find_held_lock+0x2b/0x80 [ 1018.498094][ C1] ? evict+0x37e/0xad0 [ 1018.498108][ C1] ? evict+0x37e/0xad0 [ 1018.498124][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1018.498141][ C1] evict+0x3c2/0xad0 [ 1018.498157][ C1] ? __pfx_evict+0x10/0x10 [ 1018.498174][ C1] ? iput.part.0+0x5fd/0xf50 [ 1018.498191][ C1] iput.part.0+0x605/0xf50 [ 1018.498207][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 1018.498227][ C1] iput+0x35/0x40 [ 1018.498243][ C1] filename_unlinkat+0x466/0x730 [ 1018.498259][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 1018.498277][ C1] ? do_getname+0x191/0x390 [ 1018.498295][ C1] __x64_sys_unlink+0x46/0x70 [ 1018.498309][ C1] do_syscall_64+0x106/0xf80 [ 1018.498322][ C1] ? clear_bhb_loop+0x40/0x90 [ 1018.498338][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.498351][ C1] RIP: 0033:0x7f1997b9b887 [ 1018.498362][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1018.498374][ C1] RSP: 002b:00007ffe0bf983f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1018.498387][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1997b9b887 [ 1018.498396][ C1] RDX: 00007ffe0bf98420 RSI: 00007ffe0bf984b0 RDI: 00007ffe0bf984b0 [ 1018.498405][ C1] RBP: 00007ffe0bf984b0 R08: 00007ffe0bf994b0 R09: 00000000ffffffff [ 1018.498414][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe0bf99540 [ 1018.498428][ C1] R13: 00007f1997c31f90 R14: 00000000000ef8ce R15: 00007ffe0bf99580 [ 1018.498442][ C1] [ 1018.940187][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1018.947064][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.957754][ T30] Tainted: [L]=SOFTLOCKUP [ 1018.962071][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1018.972108][ T30] Call Trace: [ 1018.975367][ T30] [ 1018.978282][ T30] dump_stack_lvl+0x100/0x190 [ 1018.982951][ T30] vpanic+0x552/0x970 [ 1018.986913][ T30] ? __pfx_vpanic+0x10/0x10 [ 1018.991397][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1018.997538][ T30] panic+0xd1/0xe0 [ 1019.001237][ T30] ? __pfx_panic+0x10/0x10 [ 1019.005637][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1019.011775][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1019.017912][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1019.024046][ T30] ? watchdog.cold+0x198/0x1ca [ 1019.028792][ T30] ? watchdog+0xd35/0x1050 [ 1019.033192][ T30] watchdog.cold+0x1a9/0x1ca [ 1019.037768][ T30] ? __pfx_watchdog+0x10/0x10 [ 1019.042428][ T30] ? __kthread_parkme+0x18c/0x230 [ 1019.047439][ T30] ? kthread+0x13a/0x450 [ 1019.051659][ T30] ? __pfx_watchdog+0x10/0x10 [ 1019.056317][ T30] kthread+0x370/0x450 [ 1019.060364][ T30] ? __pfx_kthread+0x10/0x10 [ 1019.064937][ T30] ret_from_fork+0x754/0xd80 [ 1019.069509][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1019.074599][ T30] ? __switch_to+0x7b4/0x1120 [ 1019.079257][ T30] ? __pfx_kthread+0x10/0x10 [ 1019.083829][ T30] ret_from_fork_asm+0x1a/0x30 [ 1019.088584][ T30] [ 1019.091782][ T30] Kernel Offset: disabled [ 1019.096084][ T30] Rebooting in 86400 seconds..