last executing test programs: 2m49.946610538s ago: executing program 4 (id=1065): syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0xa}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x78, 0xd, 0x66, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000, 0x80}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200}}, 0x10) 2m46.622881833s ago: executing program 4 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) 2m44.8864918s ago: executing program 4 (id=1074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, 0xfffffffffffffffc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x110) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x1f) 2m41.899383456s ago: executing program 4 (id=1081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r4, &(0x7f0000000140)='\x00', 0x1, 0x4c090, &(0x7f0000000400)={0x11, 0x86dd, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x182c42) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r10, 0x2000, {0x0, 0x10000000, 0x0, 0x1, 0x14a201, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398170000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e002000000f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "2443051e77a68e174f000000000000000010e20000008000", [0x2c, 0x80000001]}}) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000180)) write$dsp(r9, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 2m38.707970038s ago: executing program 4 (id=1088): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x7, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000380)={&(0x7f00000007c0)=[0x9, 0x10000, 0x4, 0x8, 0xf, 0xffff, 0x56f, 0x1, 0x1000, 0x1, 0x6a53, 0x6, 0x101, 0x100, 0x80, 0x2, 0x6, 0x5, 0x4, 0x800, 0x80000000, 0x200, 0x7, 0x8ae1, 0x8, 0x7, 0x7, 0x8, 0x9, 0xad0, 0x7, 0x6, 0x401, 0x6, 0xfffff217, 0x8, 0x81, 0x6, 0x30, 0x6, 0x1, 0x5, 0x3, 0x1ff, 0x9, 0x3, 0x80, 0x8, 0x100, 0x800, 0x4, 0x7, 0x6, 0x0, 0x4, 0x2, 0xffff8001, 0x8, 0xfffffffd, 0x3, 0x9, 0x7, 0x386, 0x1, 0x7, 0xa, 0x8, 0xe63, 0x0, 0x7fff, 0x4, 0x4, 0xd, 0x4, 0x0, 0x9, 0x401, 0x9, 0x400, 0x0, 0x4, 0xfffff1f5, 0x5176, 0x4, 0x6, 0x200, 0x8001, 0xd, 0x0, 0x5060, 0x355, 0x7fff, 0x0, 0x5, 0x866, 0x7, 0x2, 0x3, 0x8, 0xfffffd4c, 0x80000001, 0x10000, 0x1, 0x5, 0x63, 0xe, 0xffffffff, 0x4, 0xd, 0x1000, 0xd746, 0x7, 0x7, 0x6c3, 0xc0f, 0x7, 0x283, 0x8, 0xaa16, 0xff, 0x6, 0x3, 0xfb6d, 0x101, 0x33, 0x7, 0x0, 0xfff, 0xb512, 0xffffffff, 0x2, 0x1, 0xfffffffa, 0x0, 0x4, 0x3, 0x5, 0x401, 0x4, 0x0, 0x7fffffff, 0x3, 0x2, 0x3, 0xb1, 0x3, 0x10001, 0x1, 0x5, 0x88e3, 0x1, 0x7, 0x2, 0x5, 0x6, 0x59a, 0x6, 0x1, 0x5, 0x1e61, 0x7, 0x67, 0x3, 0x1, 0x8, 0xd3d1, 0x3, 0xb, 0x1, 0x2, 0x2, 0x1, 0x7, 0x9, 0x7, 0x7, 0x1c, 0x9, 0x3ff, 0x6e8, 0x5, 0x3c, 0x5, 0xa00, 0xff, 0x1, 0x200, 0x1c3, 0x28eb, 0x0, 0x0, 0x4, 0x5, 0xd, 0x4, 0x2a61, 0x200, 0x960, 0x3, 0xe835, 0x28, 0x2, 0xed6, 0x8, 0x401, 0xffff, 0x6, 0xec4, 0x101, 0x8, 0x6, 0x1, 0x2, 0x0, 0x2, 0x5, 0xfffffffd, 0x100, 0x9, 0x3, 0x7ff, 0xc0, 0x81, 0x5, 0x5f9d6f6a, 0x8, 0xcc22, 0x40, 0x2000, 0x7f, 0x1, 0x8000, 0xff, 0x6, 0x2, 0x4, 0x0, 0x1, 0x2, 0xaa, 0x7, 0x1, 0x6, 0x3, 0x10, 0x100, 0x4, 0x9, 0x6, 0x4, 0xf5, 0xd7c, 0x6a8a, 0x511, 0x3ff, 0x3, 0x6, 0x9, 0xa68a, 0x5, 0x2, 0x9, 0x7, 0xffd7, 0x6, 0x4, 0x2, 0x7, 0x9, 0x2, 0x6, 0x183b, 0x5, 0x3, 0x6, 0x2, 0x80000001, 0x0, 0x6, 0x400, 0x4, 0x7, 0x8, 0x101, 0x5, 0x5, 0x6, 0x7, 0xfb5f, 0x1, 0xc5a8, 0xffff, 0x4, 0x2, 0x0, 0xb10, 0x1, 0x9, 0x28, 0x6, 0x5541, 0x6, 0x9, 0x5, 0x8, 0xa2a5, 0x2, 0xcc2, 0x3, 0xfc6, 0x7, 0x1, 0x615, 0x0, 0x4, 0x3, 0x0, 0x7, 0x36, 0xfffffe6f, 0x10001, 0x3, 0x3, 0x3, 0x7, 0x260, 0x401, 0x5, 0x3, 0xc, 0x4ef0, 0x4, 0x43bb, 0xb, 0xa4, 0x3, 0x1, 0x80, 0xb, 0x7, 0x4, 0x800, 0x3ff, 0x200, 0x1, 0x5, 0x0, 0x8, 0x3, 0x80, 0x0, 0x18e, 0x3, 0x9, 0x3, 0x1ff, 0xe4, 0x80, 0x800, 0x7, 0xfffff117, 0x7fff, 0x37, 0x401, 0x8000, 0x4, 0x0, 0x2, 0x8fc, 0x8, 0x7f, 0xf, 0x8001, 0x4, 0x4, 0x2, 0xfffff120, 0x8001, 0x6, 0x6, 0x3, 0x3ff, 0x8, 0x0, 0x2, 0xaedc, 0x7, 0xfffffff8, 0x1, 0x3de7b291, 0x40, 0x6, 0x0, 0x9, 0x0, 0xb, 0x0, 0x1000, 0x3ff, 0x4, 0x47d7, 0x3, 0xd63, 0x2, 0xe, 0x4, 0x5, 0x8, 0xd, 0x9, 0x7, 0x8, 0xabe, 0xfffffffc, 0x8000000, 0x2, 0x2, 0x100, 0x7, 0x2, 0x4000000, 0x4, 0x4, 0x80000000, 0x80, 0x2fba, 0x5e, 0x1000, 0x7, 0x7, 0x6, 0x80000001, 0x2, 0x8, 0x1d, 0x400, 0x0, 0x12f9, 0xfbd, 0x0, 0x0, 0x2, 0x2a9, 0x6, 0x3, 0xc0, 0x8, 0xb, 0x5, 0xffff, 0x10001, 0x70000, 0x4, 0x4, 0x30c, 0x8, 0x6, 0x7, 0xb, 0x1d1, 0x9, 0x2, 0x4f, 0xffffffff, 0x647e7bff, 0x7, 0x80000001, 0xffff, 0x0, 0x9, 0x7, 0x0, 0x6, 0x61d, 0x80000000, 0x4, 0x7, 0x5, 0x8001, 0x3, 0x7, 0x1, 0xf0, 0x5, 0x990, 0x8, 0x1, 0xa42, 0x0, 0x28, 0x101, 0xe063, 0x7, 0x9, 0xd2, 0xf, 0x5, 0x7fffffff, 0x7, 0xd, 0x544, 0x339, 0x9, 0x3, 0x1, 0xfff, 0xffff, 0x7f, 0x7f, 0x3, 0x118f, 0x97, 0x7, 0x1, 0x3, 0x3, 0x2, 0x7ff, 0x0, 0x2, 0xfff, 0x7, 0x3a, 0x6, 0x80000001, 0x3, 0x1, 0x9, 0x5c530d21, 0x1, 0x6fe, 0x1, 0xc84, 0x100, 0x5, 0xa, 0x7f, 0x0, 0x1000, 0x2, 0x8000, 0x0, 0x3, 0x5, 0x10000, 0x101, 0x4, 0xffff, 0xdfef, 0x2, 0x3, 0x3, 0x3, 0x9, 0xa1, 0x80000000, 0x10, 0x10000, 0x88, 0x400, 0x10, 0x7fffffff, 0x1af, 0x6, 0x1, 0xffffffff, 0x80000001, 0x85e2, 0x1000, 0x0, 0x0, 0x80000001, 0x1, 0x1, 0x6, 0xff, 0x8, 0x3ff, 0x8, 0x1, 0x80000001, 0x3, 0x2b81, 0x7, 0xfffffc00, 0x89f, 0x200, 0x0, 0x170c, 0x3, 0x9, 0x4, 0x7, 0x1, 0x4, 0x2, 0x5, 0x736, 0xe660, 0x8, 0x7, 0xb443, 0x10001, 0x0, 0xa, 0x9, 0x2, 0x8, 0x1000, 0x81, 0x2, 0x1, 0x6, 0x8000, 0x9, 0x5, 0x60, 0x7d, 0xffff, 0x7f, 0x7, 0x7, 0x4, 0xbb38, 0x2, 0x0, 0x5, 0x800, 0x3d7, 0x9, 0x33f, 0x9, 0x400, 0x101, 0x4, 0x36d, 0x5, 0x1, 0x5ac, 0x77, 0x3, 0x4, 0xfffffff8, 0x5c42, 0x3, 0x1, 0x1, 0x0, 0x1, 0x7, 0x6, 0xe9f, 0x4, 0x81, 0x5, 0x0, 0x5, 0xffffffff, 0x10000, 0x8, 0x9, 0x9, 0x2, 0x80, 0x10001, 0x3, 0x13, 0x80000000, 0x6, 0x9, 0xfffffff9, 0x9, 0xc2, 0x400, 0x4, 0xfff, 0x6, 0x8, 0x5, 0x100, 0x7, 0x6c, 0x1, 0x145f, 0x9, 0x8, 0x7, 0x6, 0xb4, 0xffffffff, 0x4, 0x4, 0x5, 0xd, 0x3ff, 0x8, 0x4, 0x200, 0x5, 0x8, 0x8, 0x9, 0x7, 0x0, 0x9ef, 0x7, 0xe87, 0x2, 0x0, 0x4, 0x23d, 0x5, 0x8, 0x0, 0x1, 0x7, 0x3, 0x9, 0x8d, 0x8, 0x9, 0xe23, 0x7, 0x0, 0x5, 0xae, 0x3, 0xaeb8, 0x3, 0x24c, 0x8, 0xa, 0x10, 0x8, 0x10, 0x0, 0x52, 0x2, 0x3, 0x502b, 0x401, 0xffffffff, 0x5, 0x8, 0x2, 0x80, 0x26, 0x9, 0x1da, 0x4, 0x2, 0x7b3, 0xd, 0xb, 0x1, 0x60, 0x9cac, 0xffffff81, 0x1d3, 0x6, 0xff, 0x5, 0x80, 0x4, 0x4, 0x8001, 0x5, 0x9, 0x3, 0x7fe0000, 0x8, 0x6, 0xe, 0x5, 0x8, 0x76d, 0x8000000, 0x3, 0xa, 0x1, 0x401, 0x8, 0x7, 0xffffffff, 0x40, 0x9, 0x1, 0x7ff, 0x3, 0x3, 0xff, 0x7, 0xb7f, 0x9, 0x8001, 0x9, 0x5, 0x3, 0x8, 0x2, 0x4, 0x0, 0x9, 0x3, 0x2, 0x5, 0x9, 0x8, 0x7, 0x10001, 0x4, 0x2, 0x9, 0x5, 0x8, 0x0, 0x7, 0x6, 0x0, 0x1, 0xfffffff9, 0xff, 0x1, 0x40, 0x1, 0x7, 0xb, 0x8000000, 0x7fffffff, 0x4, 0x0, 0xfffffc01, 0x6, 0x3, 0xffffffff, 0x0, 0x8, 0xfff, 0x4, 0x10000, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x7, 0x6, 0x800, 0x1, 0x2, 0x0, 0x7, 0x2, 0x2, 0x64d4, 0x8, 0x3, 0x7, 0x7fffffff, 0x1, 0x7, 0x6, 0x7, 0x3, 0x7, 0xf94, 0x7fff, 0xff, 0x5, 0xfff, 0xfffffffb, 0x1, 0x7a, 0x80000001, 0x0, 0x4, 0x8, 0x400, 0x0, 0xe, 0x0, 0x8001, 0xd, 0x1, 0x2, 0x10, 0xffffffff, 0xfffffff9, 0x45c5, 0x2, 0xf54, 0x607, 0xfffffff7, 0x9, 0xfd4, 0x5, 0x6, 0x7, 0x2, 0x401, 0x1, 0x0, 0x4, 0x4, 0x5, 0x2, 0x3, 0x4, 0x0, 0x4, 0x4, 0xc74, 0x58, 0x8, 0x9, 0x80000001, 0x285, 0x1, 0x101, 0x1, 0x0, 0x40, 0x1, 0x7d0, 0x8, 0x7c78bda5, 0x4, 0x954, 0x10, 0x4, 0x14000000, 0x7, 0x4, 0x4, 0x5, 0x8, 0x2, 0x9, 0x1, 0xffffffff, 0x8, 0x0, 0x7, 0x7, 0x4, 0x7, 0xf77f, 0x9, 0x3, 0x0, 0xf172, 0xe, 0x9, 0xff, 0x40, 0xb, 0x10000, 0x7, 0x3, 0x4, 0xc, 0x4, 0xe9e, 0x1000, 0x9, 0x4, 0x42, 0x3, 0x1, 0x7, 0x7, 0x7, 0x3, 0x4, 0x401, 0x2, 0xff, 0x7, 0x5, 0x5, 0xffffffff, 0x9, 0x9, 0x8, 0x9, 0x1000, 0x5, 0xd4d, 0x9, 0x1c0, 0x100, 0x0, 0x1, 0xffffffff, 0x9, 0x200, 0x401, 0x80000000, 0x0, 0x8000, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3d, 0x7fff, 0xfffffffd, 0x8, 0x6, 0x7, 0x1, 0xc, 0xfffffffb, 0x9, 0x8, 0x4, 0x5, 0x80000000, 0xc874, 0x8, 0x800], 0x6, 0x400, 0x5}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 2m36.887670307s ago: executing program 4 (id=1090): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x0, 0xf}, {0x14, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008014}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="80ff430500"/14], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff810000000000"], 0x30}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socket$inet(0x2, 0x1, 0x100) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x80, 0x0, 0x3, 0x1}, 0x8) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m21.837151019s ago: executing program 32 (id=1090): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x0, 0xf}, {0x14, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008014}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="80ff430500"/14], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff810000000000"], 0x30}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socket$inet(0x2, 0x1, 0x100) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x80, 0x0, 0x3, 0x1}, 0x8) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m56.253356083s ago: executing program 2 (id=1187): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r4, 0x0, 0x5}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r7}) r8 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000300)={0xa, {0xa, 0x4, 0x2}}, 0xa) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r12, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad019645804", 0x29, 0xebec93e830f96115}) io_uring_enter(r8, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r11, 0x1) signalfd4(r0, 0x0, 0x0, 0x0) r13 = socket$inet(0x2, 0x3, 0x80) getsockopt$IP_VS_SO_GET_DESTS(r13, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) unshare(0x22020600) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1m55.013109749s ago: executing program 2 (id=1189): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mce_record\x00', r4, 0x0, 0x3}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r4, 0x0, 0x5}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r7}) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000300)={0xa, {0xa, 0x4, 0x2}}, 0xa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad019645804", 0x29, 0xebec93e830f96115}) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) signalfd4(r0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x80) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) unshare(0x22020600) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1m52.309756234s ago: executing program 2 (id=1192): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140064b8f56ae52e2988fff5000000000a00000a20000000000a01080000000000000000010000090900010073797a310000000054000000030a030000000000000000000100000a0900010073797a31000000000900030073797a300000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x2c}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x27, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x218c, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x40000409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x8401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000001240)=[{0x0}, {&(0x7f00000012c0)=""/41, 0x29}], 0x2) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) 1m50.413116805s ago: executing program 2 (id=1196): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m49.79509232s ago: executing program 2 (id=1199): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mce_record\x00', r4, 0x0, 0x3}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r4, 0x0, 0x5}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r7}) r8 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000300)={0xa, {0xa, 0x4, 0x2}}, 0xa) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r12, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad019645804", 0x29, 0xebec93e830f96115}) io_uring_enter(r8, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r11, 0x1) signalfd4(r0, 0x0, 0x0, 0x0) r13 = socket$inet(0x2, 0x3, 0x80) getsockopt$IP_VS_SO_GET_DESTS(r13, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) unshare(0x22020600) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1m45.537215321s ago: executing program 2 (id=1206): syz_io_uring_setup(0x2107, &(0x7f0000000000)={0x0, 0xf901, 0x80, 0x3, 0x272}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x4000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MSG_RING={0x28, 0x48, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0xff1c21ae44af9c7b, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x38, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044415}, 0x20004010) 1m30.212156758s ago: executing program 33 (id=1206): syz_io_uring_setup(0x2107, &(0x7f0000000000)={0x0, 0xf901, 0x80, 0x3, 0x272}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x4000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MSG_RING={0x28, 0x48, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0xff1c21ae44af9c7b, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x38, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044415}, 0x20004010) 38.952067308s ago: executing program 1 (id=1370): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20) 38.659117544s ago: executing program 1 (id=1371): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r4 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x7687, 0x10100, 0x3, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=':'], 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r4, 0x22d3e, 0x0, 0x20, 0x0, 0x58) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="0a0034050000000000000000"], 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) syz_80211_inject_frame(0x0, 0x0, 0x20) 36.982815414s ago: executing program 1 (id=1373): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xa6a6193, {0x0, 0xd9}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf4}}}], 0x38) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000240), 0x0, 0x26, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, &(0x7f0000001c40)=r8}, 0x20) pwritev(r4, 0x0, 0x0, 0xffffffff, 0x6) setreuid(0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000000700)="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", 0x2000, &(0x7f0000002dc0)={0x0, 0x0, 0x0, &(0x7f0000000200)={0x18, 0x0, 0x9, {0xbc21}}, 0x0, 0x0, &(0x7f0000000340)={0x60, 0x0, 0x5, {{0x8001, 0x7f, 0x7, 0xff, 0x7, 0x4, 0x1, 0x1}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x68, {0x5, 0x0, 0x88, 0xfffffffffffff443, 0x7fff, 0x4, {0x5, 0x25bcb7f, 0x6, 0x4, 0x8, 0x1, 0x7, 0x6, 0xb2, 0x2000, 0x80000001, 0x0, 0x0, 0x7, 0x100}}}, &(0x7f0000002a80)=ANY=[@ANYBLOB="7000000000000000020000000000000004000000000000002b4e0001000000000100000005000000000000000000000006000000000000000b0000000000000001000000060000000000000000000000050000000000000006000000000000000100000003000000000000000000000088543376061d73eac8e466659c584a2853be17ccac984598c64dbe2a6653af22008cf8ef949549e622ce24967d4b2ab7feb7bd9c59e1f6a9d2b62efd422a3ab618078ba5412eb2002aa5dd"], &(0x7f0000002800)={0x10, 0x0, 0x9}, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) read$snapshot(r1, 0x0, 0xffffffbf) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)) 36.022646835s ago: executing program 1 (id=1375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@any, 0x6, 0x0, 0x3, "a03acd", 0x2}, {@any, 0x9, 0xfa, 0x7, "d92ef9", 0x5}]}}}, 0x20) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34.587101626s ago: executing program 1 (id=1379): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20) 34.557180179s ago: executing program 1 (id=1380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.841000579s ago: executing program 34 (id=1380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.153785787s ago: executing program 3 (id=1437): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) open(&(0x7f0000000140)='./file0\x00', 0x900, 0x8c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = dup(r3) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x2}}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000400)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) 5.289645092s ago: executing program 3 (id=1439): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0xa8, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xa8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000840)) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r8, 0x40084149, &(0x7f0000000340)=0x6) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="150004000400000003030000918a76e1efa10a000500000008000900", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x10, 0x0) 4.762383317s ago: executing program 0 (id=1440): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x3ff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105080, 0x0) syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x800, 0x8, 0x206}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x8, 0xc001000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12, 0x1}) getrlimit(0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x7, r1}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000000c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x25, 0x3, @void}, 0x10) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, '\x00', 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4}) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) 3.834797448s ago: executing program 0 (id=1441): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x3ff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105080, 0x0) syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x800, 0x8, 0x206}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x8, 0xc001000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12, 0x1}) getrlimit(0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x7, r1}) r7 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000000c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x25, 0x3, @void}, 0x10) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, '\x00', 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4}) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) 2.884171606s ago: executing program 0 (id=1442): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) 2.717321813s ago: executing program 3 (id=1443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x7fff}, 0x0) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 2.61964816s ago: executing program 3 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) personality(0x6673f8b78772dd0d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000030000000c000a00000000000000003058941b34a1a6480fe59de9c1fb2820135c65b140a9e2c236de075d6f813c5066fab87992afd377c29f5f92d20669d063e89d8800db48e99cc3883a5e4234ceb7df21decb1e5fc08019d1c83d440e7ffded4ba857eb4105e7a681c4c8c73d769d59c3db4209aa0bd29020a91c813651cb9d34fd210b27933842061c68a4ac61116c3069f84f92e25b61985abf3ca02c9329f8e6d81cf9130e9447579013c42c9eb86dae354b917a06d283561a431a13b636d01651ddaf6f8c980af8caf2b5397e5affad43c7a1"], 0x20}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000b00)={0xa, @pix_mp={0xffff, 0x8011, 0x31324d59, 0x7, 0x9, [{0x2319, 0x81}, {0xfffffffd, 0x7}, {0x4, 0xadf}, {0x5, 0x4018}, {0x1, 0x8}, {0x6}, {0x4, 0x9}, {0xaa}], 0x7f, 0x0, 0x1, 0x0, 0x1}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1.977880155s ago: executing program 0 (id=1445): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sysfs$2(0x2, 0x8, &(0x7f0000000000)=""/228) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffa}]}}}]}, 0x48}}, 0x40080c0) 1.678419862s ago: executing program 3 (id=1446): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) open(&(0x7f0000000140)='./file0\x00', 0x900, 0x8c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = dup(r3) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x2}}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000400)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) 918.500378ms ago: executing program 0 (id=1447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd=r4, 0x5749d4c5, 0x6, 0x5, 0x4, 0x0, {0x1}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x27, 0xaf0, 0x71, 0x1, 0x100000001, 0xffffffffffffff42}, &(0x7f0000000240)={0x9, 0x7f, 0x2, 0x2, 0xffff, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x2, 0x6e18, 0x1, 0x8, 0x400, 0x9, 0x1, 0x9}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r11}) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r12, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001ebc12c16b82d6bc1e18b75aaa36c0f78e84914deb0d46daa04dc0f45e85f12945de1449cfd1d0e6f5e5688f14cb5f96565a99115180c8477483724e80efc25e5bb4ff436cd92c2d894547a4dcb184edab111ac09bc297db551423d015c261091fa3f231eccb524e9705eb3f2ec6ef988ccc6e252674e7a181428e3324cf10a6654f5717ed3"], 0x114}], 0x1, 0x0, 0x0, 0x20000850}, 0x20000084) 513.275261ms ago: executing program 3 (id=1448): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) unshare(0x42000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)=@null) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) 0s ago: executing program 0 (id=1449): socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x4, 0x0, 0x109}, &(0x7f0000000340), &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5555, 0x0, &(0x7f0000000140), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@ieee802154={0x24, @long}, &(0x7f00000000c0)=0x80) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000100)=0x1, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = inotify_init1(0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000001c0)=0x3, 0x4) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000480), &(0x7f00000005c0)=0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0xe4000060) openat(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x0, 0xb8dc86e50fe32bdc) close(r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=@newsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x80000000, 0x1f6}, {}, {0x0, 0x2}, 0x0, 0x3505, 0xa, 0x4, 0x0, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a44000000060a010400000000000000000200000018000480140001800a0001006d61526368000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x22000, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): :478): avc: denied { write } for pid=10410 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 482.398566][ T30] audit: type=1400 audit(1756980724.753:479): avc: denied { connect } for pid=10410 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 482.398606][ T30] audit: type=1400 audit(1756980724.753:480): avc: denied { name_connect } for pid=10410 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 482.925204][T10414] cgroup: No subsys list or none specified [ 482.957069][T10419] IPVS: length: 24 != 792 [ 483.065542][T10427] FAULT_INJECTION: forcing a failure. [ 483.065542][T10427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.078898][T10427] CPU: 0 UID: 0 PID: 10427 Comm: syz.1.1046 Not tainted syzkaller #0 PREEMPT(full) [ 483.078927][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.078938][T10427] Call Trace: [ 483.078945][T10427] [ 483.078954][T10427] dump_stack_lvl+0x16c/0x1f0 [ 483.078982][T10427] should_fail_ex+0x512/0x640 [ 483.079007][T10427] _copy_from_user+0x2e/0xd0 [ 483.079033][T10427] copy_msghdr_from_user+0x98/0x160 [ 483.079056][T10427] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 483.079076][T10427] ? irqentry_exit+0x3b/0x90 [ 483.079103][T10427] ? __pfx__kstrtoull+0x10/0x10 [ 483.079127][T10427] ___sys_sendmsg+0xfe/0x1d0 [ 483.079150][T10427] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.079195][T10427] ? find_held_lock+0x2b/0x80 [ 483.079240][T10427] __sys_sendmmsg+0x200/0x420 [ 483.079266][T10427] ? __pfx___sys_sendmmsg+0x10/0x10 [ 483.079297][T10427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 483.079333][T10427] ? fput+0x9b/0xd0 [ 483.079359][T10427] ? ksys_write+0x1ac/0x250 [ 483.079379][T10427] ? __pfx_ksys_write+0x10/0x10 [ 483.079404][T10427] __x64_sys_sendmmsg+0x9c/0x100 [ 483.079425][T10427] ? lockdep_hardirqs_on+0x7c/0x110 [ 483.079445][T10427] do_syscall_64+0xcd/0x4c0 [ 483.079469][T10427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.079490][T10427] RIP: 0033:0x7f580558ebe9 [ 483.079506][T10427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.079526][T10427] RSP: 002b:00007f580637b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 483.079547][T10427] RAX: ffffffffffffffda RBX: 00007f58057c6090 RCX: 00007f580558ebe9 [ 483.079560][T10427] RDX: 000000000000003b RSI: 0000200000001840 RDI: 0000000000000004 [ 483.079572][T10427] RBP: 00007f580637b090 R08: 0000000000000000 R09: 0000000000000000 [ 483.079584][T10427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.079596][T10427] R13: 00007f58057c6128 R14: 00007f58057c6090 R15: 00007fff65641638 [ 483.079623][T10427] [ 483.543172][ T10] usb 2-1: Product: syz [ 483.547449][ T10] usb 2-1: Manufacturer: syz [ 483.558747][ T10] usb 2-1: SerialNumber: syz [ 483.569402][ T10] usb 2-1: config 0 descriptor?? [ 483.574827][ T10] usb 2-1: can't set config #0, error -71 [ 483.583857][ T10] usb 2-1: USB disconnect, device number 23 [ 484.402127][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 484.413511][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'. [ 484.481871][T10436] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 485.195944][T10452] IPv6: Can't replace route, no match found [ 485.233200][ T5850] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 486.167099][T10452] cgroup: No subsys list or none specified [ 486.183509][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 486.196821][ T5850] usb 4-1: config 0 interface 0 has no altsetting 0 [ 486.206449][ T5850] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 486.353248][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.436092][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 486.436130][ T30] audit: type=1400 audit(1756980729.353:507): avc: denied { mount } for pid=10455 comm="syz.0.1055" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 486.503108][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 486.766108][ T5850] usb 4-1: Product: syz [ 486.770312][ T5850] usb 4-1: Manufacturer: syz [ 486.775313][ T5850] usb 4-1: SerialNumber: syz [ 486.789350][ T5850] usb 4-1: config 0 descriptor?? [ 486.801536][ T5850] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 486.994378][ T30] audit: type=1400 audit(1756980729.923:508): avc: denied { ioctl } for pid=10460 comm="syz.1.1057" path="socket:[26397]" dev="sockfs" ino=26397 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 487.037578][ T5850] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 487.077301][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 487.155700][ T5850] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 487.298808][ T5850] usb 4-1: USB disconnect, device number 29 [ 487.325177][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 487.331822][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 487.340084][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 487.349937][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.383032][ T10] usb 5-1: Product: syz [ 487.387230][ T10] usb 5-1: Manufacturer: syz [ 487.571364][ T10] usb 5-1: SerialNumber: syz [ 487.671210][ T30] audit: type=1400 audit(1756980730.393:509): avc: denied { read write } for pid=10460 comm="syz.1.1057" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 487.695408][ T30] audit: type=1400 audit(1756980730.393:510): avc: denied { open } for pid=10460 comm="syz.1.1057" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 488.247988][ T10] usb 5-1: config 0 descriptor?? [ 488.262638][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 488.277934][ T30] audit: type=1400 audit(1756980730.393:511): avc: denied { read } for pid=10460 comm="syz.1.1057" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 488.413103][ T30] audit: type=1400 audit(1756980730.393:512): avc: denied { open } for pid=10460 comm="syz.1.1057" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 488.518757][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 488.542083][ T10] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 488.552187][ T30] audit: type=1400 audit(1756980730.753:513): avc: denied { mount } for pid=10468 comm="syz.2.1059" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 488.645170][ T30] audit: type=1400 audit(1756980731.443:514): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 488.784960][ T5995] usb 5-1: USB disconnect, device number 34 [ 488.913096][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 488.954709][T10481] netlink: 'syz.3.1062': attribute type 10 has an invalid length. [ 488.962643][ T30] audit: type=1400 audit(1756980731.883:515): avc: denied { map_create } for pid=10479 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 489.001917][ T30] audit: type=1400 audit(1756980731.883:516): avc: denied { create } for pid=10479 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 489.083043][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 489.089706][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.110294][ T43] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 489.156083][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 489.157053][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.209016][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1063'. [ 489.219539][ T43] usb 3-1: config 0 descriptor?? [ 489.427647][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.436808][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.564592][T10497] ptrace attach of "./syz-executor exec"[6086] was attempted by "./syz-executor exec"[10497] [ 491.078705][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.208880][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.365103][ T43] hid-multitouch 0003:0EEF:72C4.001A: unknown main item tag 0x0 [ 491.732865][ T43] hid-multitouch 0003:0EEF:72C4.001A: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 491.806407][ T49] TC_ACT_REPEAT abuse ? [ 491.813672][ T5995] TC_ACT_REPEAT abuse ? [ 491.819731][ T5994] TC_ACT_REPEAT abuse ? [ 491.847059][T10500] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.857314][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 491.857329][ T30] audit: type=1400 audit(1756980734.783:555): avc: denied { read } for pid=10513 comm="syz.2.1069" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 491.909738][ T43] usb 3-1: USB disconnect, device number 32 [ 491.967363][ T30] audit: type=1400 audit(1756980734.783:556): avc: denied { open } for pid=10513 comm="syz.2.1069" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 491.991019][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.088158][ T30] audit: type=1400 audit(1756980734.793:557): avc: denied { ioctl } for pid=10513 comm="syz.2.1069" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 492.113667][ T30] audit: type=1400 audit(1756980735.003:558): avc: denied { connect } for pid=10505 comm="syz.0.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 492.167018][T10515] fido_id[10515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 492.281275][ T30] audit: type=1400 audit(1756980735.203:559): avc: denied { ioctl } for pid=10505 comm="syz.0.1068" path="socket:[26492]" dev="sockfs" ino=26492 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 492.306443][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.400368][ T30] audit: type=1400 audit(1756980735.203:560): avc: denied { ioctl } for pid=10505 comm="syz.0.1068" path="/218/file0" dev="tmpfs" ino=1180 ioctlcmd=0x1283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 492.424645][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.625794][ T30] audit: type=1400 audit(1756980735.523:561): avc: denied { unlink } for pid=5846 comm="syz-executor" name="file0" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 493.211353][ T30] audit: type=1400 audit(1756980735.703:562): avc: denied { ioctl } for pid=10517 comm="syz.2.1070" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 493.260809][ T30] audit: type=1400 audit(1756980736.173:563): avc: denied { create } for pid=10524 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 493.283035][ T30] audit: type=1400 audit(1756980736.173:564): avc: denied { create } for pid=10524 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 493.470084][T10527] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 493.625412][T10530] lo speed is unknown, defaulting to 1000 [ 494.362495][T10259] Bluetooth: hci3: command 0x0405 tx timeout [ 495.313184][ T5995] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 496.323331][ T5995] usb 4-1: Using ep0 maxpacket: 8 [ 496.331493][ T5995] usb 4-1: config 0 interface 0 has no altsetting 0 [ 496.343656][ T5995] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 496.373019][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.381050][ T5995] usb 4-1: Product: syz [ 496.393226][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 497.273118][ T5995] usb 4-1: Manufacturer: syz [ 497.277751][ T5995] usb 4-1: SerialNumber: syz [ 497.323418][ T5995] usb 4-1: config 0 descriptor?? [ 497.359325][ T5995] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 497.372468][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 497.372484][ T30] audit: type=1400 audit(1756980740.303:575): avc: denied { read } for pid=10562 comm="syz.2.1080" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 497.411257][T10555] lo speed is unknown, defaulting to 1000 [ 497.454842][ T30] audit: type=1400 audit(1756980740.353:576): avc: denied { open } for pid=10562 comm="syz.2.1080" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 497.509906][ T30] audit: type=1400 audit(1756980740.433:577): avc: denied { create } for pid=10565 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 497.591341][ T30] audit: type=1400 audit(1756980740.433:578): avc: denied { ioctl } for pid=10565 comm="syz.4.1081" path="socket:[27711]" dev="sockfs" ino=27711 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 497.651309][ T5995] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 497.728235][T10566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10566 comm=syz.4.1081 [ 498.250125][ T5995] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 498.284926][T10566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1081'. [ 498.294010][ T30] audit: type=1400 audit(1756980740.593:579): avc: denied { create } for pid=10562 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 498.378533][ T5995] usb 4-1: USB disconnect, device number 30 [ 498.397498][T10566] loop6: detected capacity change from 0 to 2641 [ 498.721642][ T5866] Buffer I/O error on dev loop6, logical block 256, lost async page write [ 498.731329][ T5866] Buffer I/O error on dev loop6, logical block 257, lost async page write [ 498.741925][T10568] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 498.781792][ T30] audit: type=1400 audit(1756980740.653:580): avc: denied { create } for pid=10565 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 498.794917][ T5866] Buffer I/O error on dev loop6, logical block 258, lost async page write [ 498.852613][ T30] audit: type=1400 audit(1756980741.243:581): avc: denied { write } for pid=10565 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 498.877777][ T30] audit: type=1400 audit(1756980741.293:582): avc: denied { read write } for pid=10565 comm="syz.4.1081" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 498.911902][T10568] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 498.954495][ T5866] Buffer I/O error on dev loop6, logical block 259, lost async page write [ 498.980232][ T5866] Buffer I/O error on dev loop6, logical block 260, lost async page write [ 498.993155][T10568] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 499.001805][T10568] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 499.007119][ T30] audit: type=1400 audit(1756980741.293:583): avc: denied { open } for pid=10565 comm="syz.4.1081" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 499.032361][ T5866] Buffer I/O error on dev loop6, logical block 261, lost async page write [ 499.048905][ T30] audit: type=1400 audit(1756980741.293:584): avc: denied { append } for pid=10565 comm="syz.4.1081" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.365727][ T5866] ldm_validate_partition_table(): Disk read failed. [ 499.373066][ T5866] Dev loop6: unable to read RDB block 0 [ 499.379142][ T5866] loop6: unable to read partition table [ 499.458471][T10566] ldm_validate_partition_table(): Disk read failed. [ 499.532248][T10585] input: syz1 as /devices/virtual/input/input36 [ 499.557488][T10566] Dev loop6: unable to read RDB block 0 [ 499.686913][T10566] loop6: unable to read partition table [ 499.701300][T10566] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 500.101976][T10590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 500.896195][T10600] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 500.930537][T10600] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 501.286457][ T6633] TC_ACT_REPEAT abuse ? [ 501.336078][ T10] TC_ACT_REPEAT abuse ? [ 501.341212][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.347658][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.360043][ T10] TC_ACT_REPEAT abuse ? [ 502.339088][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 503.249386][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 503.249398][ T30] audit: type=1400 audit(1756980746.173:601): avc: denied { unmount } for pid=6088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 503.389986][ T30] audit: type=1400 audit(1756980746.313:602): avc: denied { sqpoll } for pid=10608 comm="syz.2.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 503.394343][T10612] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 504.040170][ T30] audit: type=1400 audit(1756980746.553:603): avc: denied { write } for pid=10611 comm="syz.1.1092" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 504.150775][ T30] audit: type=1400 audit(1756980747.013:604): avc: denied { create } for pid=10609 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 504.171904][ T30] audit: type=1400 audit(1756980747.023:605): avc: denied { mount } for pid=10608 comm="syz.2.1091" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 504.394894][ T30] audit: type=1400 audit(1756980747.303:606): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 504.601616][T10626] lo speed is unknown, defaulting to 1000 [ 505.361983][ T30] audit: type=1400 audit(1756980747.343:607): avc: denied { connect } for pid=10609 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 506.349418][T10645] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 506.393482][T10612] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 506.399599][T10612] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 506.456585][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 507.290884][T10652] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 507.594215][T10653] input: syz1 as /devices/virtual/input/input37 [ 507.611994][ T30] audit: type=1400 audit(1756980750.533:608): avc: denied { setopt } for pid=10654 comm="syz.0.1100" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 509.212672][ T30] audit: type=1400 audit(1756980752.093:609): avc: denied { create } for pid=10661 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 509.249613][T10680] hfsplus: unable to find HFS+ superblock [ 509.252319][T10674] TC_ACT_REPEAT abuse ? [ 509.261027][ C1] TC_ACT_REPEAT abuse ? [ 509.272522][ T30] audit: type=1400 audit(1756980752.133:610): avc: denied { mounton } for pid=10675 comm="syz.0.1105" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 509.296365][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.556078][ T30] audit: type=1400 audit(1756980752.183:611): avc: denied { connect } for pid=10661 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 509.606686][ T30] audit: type=1400 audit(1756980752.193:612): avc: denied { connect } for pid=10661 comm="syz.3.1102" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 509.627598][ T30] audit: type=1400 audit(1756980752.193:613): avc: denied { write } for pid=10661 comm="syz.3.1102" path="socket:[27902]" dev="sockfs" ino=27902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 509.848008][T10689] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 510.081870][ T30] audit: type=1400 audit(1756980752.973:614): avc: denied { ioctl } for pid=10690 comm="syz.2.1110" path="socket:[27383]" dev="sockfs" ino=27383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.123640][ T30] audit: type=1400 audit(1756980752.993:615): avc: denied { read write } for pid=10690 comm="syz.2.1110" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 510.151825][ T30] audit: type=1400 audit(1756980752.993:616): avc: denied { open } for pid=10690 comm="syz.2.1110" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 510.179883][ T30] audit: type=1400 audit(1756980753.043:617): avc: denied { mount } for pid=10690 comm="syz.2.1110" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 510.236867][T10700] lo speed is unknown, defaulting to 1000 [ 510.877721][ T6631] TC_ACT_REPEAT abuse ? [ 510.991367][ T5995] TC_ACT_REPEAT abuse ? [ 511.001062][ T10] TC_ACT_REPEAT abuse ? [ 511.761309][ T30] audit: type=1400 audit(1756980754.673:618): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 512.243040][T10718] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 512.272240][T10718] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 513.001720][T10726] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 513.035183][T10726] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 513.715152][T10730] overlayfs: failed to resolve './file0': -2 [ 514.608227][T10750] FAULT_INJECTION: forcing a failure. [ 514.608227][T10750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.621774][T10750] CPU: 1 UID: 0 PID: 10750 Comm: syz.0.1121 Not tainted syzkaller #0 PREEMPT(full) [ 514.621802][T10750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.621815][T10750] Call Trace: [ 514.621824][T10750] [ 514.621833][T10750] dump_stack_lvl+0x16c/0x1f0 [ 514.621862][T10750] should_fail_ex+0x512/0x640 [ 514.621891][T10750] _copy_to_user+0x32/0xd0 [ 514.621929][T10750] simple_read_from_buffer+0xcb/0x170 [ 514.621955][T10750] proc_fail_nth_read+0x197/0x240 [ 514.621981][T10750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.622007][T10750] ? rw_verify_area+0xcf/0x6c0 [ 514.622037][T10750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.622060][T10750] vfs_read+0x1e1/0xcf0 [ 514.622085][T10750] ? __pfx___mutex_lock+0x10/0x10 [ 514.622109][T10750] ? __pfx_vfs_read+0x10/0x10 [ 514.622138][T10750] ? __fget_files+0x20e/0x3c0 [ 514.622170][T10750] ksys_read+0x12a/0x250 [ 514.622190][T10750] ? __pfx_ksys_read+0x10/0x10 [ 514.622211][T10750] ? fdget+0x187/0x210 [ 514.622237][T10750] do_syscall_64+0xcd/0x4c0 [ 514.622263][T10750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.622285][T10750] RIP: 0033:0x7f8fcc58d5fc [ 514.622302][T10750] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 514.622322][T10750] RSP: 002b:00007f8fcd482030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.622343][T10750] RAX: ffffffffffffffda RBX: 00007f8fcc7c6090 RCX: 00007f8fcc58d5fc [ 514.622357][T10750] RDX: 000000000000000f RSI: 00007f8fcd4820a0 RDI: 0000000000000004 [ 514.622370][T10750] RBP: 00007f8fcd482090 R08: 0000000000000000 R09: 0000000000000000 [ 514.622382][T10750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.622394][T10750] R13: 00007f8fcc7c6128 R14: 00007f8fcc7c6090 R15: 00007ffcc9880d88 [ 514.622425][T10750] [ 515.067853][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 515.067868][ T30] audit: type=1400 audit(1756980757.993:620): avc: denied { bind } for pid=10747 comm="syz.2.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 515.286567][ T30] audit: type=1400 audit(1756980757.993:621): avc: denied { setopt } for pid=10747 comm="syz.2.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 515.320458][ T30] audit: type=1400 audit(1756980757.993:622): avc: denied { accept } for pid=10747 comm="syz.2.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 515.615181][T10760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 515.870945][ T30] audit: type=1400 audit(1756980758.063:623): avc: denied { write } for pid=10747 comm="syz.2.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 516.142883][ T30] audit: type=1400 audit(1756980758.993:624): avc: denied { map } for pid=10758 comm="syz.3.1125" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 516.333050][ T30] audit: type=1400 audit(1756980759.243:625): avc: denied { execute } for pid=10747 comm="syz.2.1122" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 516.423034][T10761] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1123'. [ 516.432126][ T30] audit: type=1400 audit(1756980759.343:626): avc: denied { name_bind } for pid=10749 comm="syz.1.1123" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 516.518211][ T30] audit: type=1400 audit(1756980759.343:627): avc: denied { node_bind } for pid=10749 comm="syz.1.1123" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 517.283094][ T5995] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 517.455296][ T5995] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.489444][ T5995] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.516820][ T5995] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 517.542044][ T5995] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 517.640138][ T5995] usb 2-1: config 1 interface 1 has no altsetting 0 [ 517.678633][ T5995] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.701308][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.731604][ T5995] usb 2-1: Product: syz [ 517.742125][ T5995] usb 2-1: Manufacturer: syz [ 517.750386][ T5995] usb 2-1: SerialNumber: syz [ 517.769446][ T5995] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 517.877835][T10782] overlayfs: missing 'lowerdir' [ 517.930745][ T30] audit: type=1400 audit(1756980760.853:628): avc: denied { ioctl } for pid=10778 comm="syz.2.1128" path="socket:[28069]" dev="sockfs" ino=28069 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 518.143153][ T5995] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 518.204745][ T30] audit: type=1400 audit(1756980761.133:629): avc: denied { read } for pid=10786 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 518.302982][ T5995] usb 4-1: Using ep0 maxpacket: 8 [ 518.511510][ T5995] usb 4-1: config 0 interface 0 has no altsetting 0 [ 518.521224][ T5995] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 518.531521][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.539784][ T5995] usb 4-1: Product: syz [ 518.544630][ T5995] usb 4-1: Manufacturer: syz [ 518.549303][ T5995] usb 4-1: SerialNumber: syz [ 518.567348][ T5995] usb 4-1: config 0 descriptor?? [ 518.578500][ T5995] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 519.096432][ T5995] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 519.107918][ T5995] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 519.172202][ T5995] usb 2-1: USB disconnect, device number 24 [ 519.321622][ T5912] usb 4-1: USB disconnect, device number 31 [ 519.409810][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 519.434902][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 520.484514][ T6633] TC_ACT_REPEAT abuse ? [ 520.489373][ T5850] TC_ACT_REPEAT abuse ? [ 520.494072][ T5850] TC_ACT_REPEAT abuse ? [ 520.655866][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 520.655878][ T30] audit: type=1400 audit(1756980763.583:632): avc: denied { read append } for pid=10806 comm="syz.0.1137" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 520.848310][ T30] audit: type=1400 audit(1756980763.623:633): avc: denied { open } for pid=10806 comm="syz.0.1137" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 520.938034][ T30] audit: type=1400 audit(1756980763.623:634): avc: denied { map } for pid=10806 comm="syz.0.1137" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 520.994961][ T30] audit: type=1400 audit(1756980763.623:635): avc: denied { write execute } for pid=10806 comm="syz.0.1137" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 521.977160][T10822] trusted_key: syz.2.1140 sent an empty control message without MSG_MORE. [ 522.073060][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 522.260687][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.498642][ T30] audit: type=1400 audit(1756980765.423:636): avc: denied { sys_module } for pid=10821 comm="syz.2.1140" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 522.533774][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 522.561434][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.595667][ T24] usb 4-1: config 0 descriptor?? [ 522.618877][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 523.152021][T10835] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 523.483630][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 523.490962][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 523.699985][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 523.709829][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 523.728753][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 523.743612][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 523.755979][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 523.765619][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 523.932816][ T5995] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 523.942263][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 523.949811][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 523.956742][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 523.963639][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 523.970462][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 523.977584][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 523.984519][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 524.010640][ T24] pwc: Registered as video103. [ 524.055759][T10841] FAULT_INJECTION: forcing a failure. [ 524.055759][T10841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.068949][T10841] CPU: 1 UID: 0 PID: 10841 Comm: syz.0.1144 Not tainted syzkaller #0 PREEMPT(full) [ 524.068976][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.068988][T10841] Call Trace: [ 524.068996][T10841] [ 524.069006][T10841] dump_stack_lvl+0x16c/0x1f0 [ 524.069034][T10841] should_fail_ex+0x512/0x640 [ 524.069061][T10841] _copy_to_user+0x32/0xd0 [ 524.069089][T10841] simple_read_from_buffer+0xcb/0x170 [ 524.069114][T10841] proc_fail_nth_read+0x197/0x240 [ 524.069139][T10841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.069165][T10841] ? rw_verify_area+0xcf/0x6c0 [ 524.069193][T10841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.069217][T10841] vfs_read+0x1e1/0xcf0 [ 524.069242][T10841] ? __pfx___mutex_lock+0x10/0x10 [ 524.069265][T10841] ? __pfx_vfs_read+0x10/0x10 [ 524.069294][T10841] ? __fget_files+0x20e/0x3c0 [ 524.069326][T10841] ksys_read+0x12a/0x250 [ 524.069345][T10841] ? __pfx_ksys_read+0x10/0x10 [ 524.069367][T10841] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 524.069397][T10841] do_syscall_64+0xcd/0x4c0 [ 524.069423][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.069444][T10841] RIP: 0033:0x7f8fcc58d5fc [ 524.069460][T10841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 524.069479][T10841] RSP: 002b:00007f8fcd461030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.069500][T10841] RAX: ffffffffffffffda RBX: 00007f8fcc7c6180 RCX: 00007f8fcc58d5fc [ 524.069513][T10841] RDX: 000000000000000f RSI: 00007f8fcd4610a0 RDI: 0000000000000008 [ 524.069525][T10841] RBP: 00007f8fcd461090 R08: 0000000000000000 R09: 0000000000000000 [ 524.069537][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.069548][T10841] R13: 00007f8fcc7c6218 R14: 00007f8fcc7c6180 R15: 00007ffcc9880d88 [ 524.069578][T10841] [ 524.257961][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38 [ 524.272020][ T24] usb 4-1: USB disconnect, device number 32 [ 524.566019][ T5995] usb 2-1: Using ep0 maxpacket: 16 [ 524.572791][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.585996][ T5995] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 524.595098][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.606324][ T5995] usb 2-1: config 0 descriptor?? [ 524.667313][T10846] siw: device registration error -23 [ 524.737717][ T30] audit: type=1400 audit(1756980767.593:637): avc: denied { setopt } for pid=10843 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 525.174595][ T5995] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 525.293063][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 525.443181][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 525.463934][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 525.481287][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 525.551818][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.591703][ T10] usb 4-1: Product: syz [ 525.619688][ T10] usb 4-1: Manufacturer: syz [ 525.622317][ T30] audit: type=1400 audit(1756980768.543:638): avc: denied { create } for pid=10836 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 525.790250][ T10] usb 4-1: SerialNumber: syz [ 525.905888][ T30] audit: type=1400 audit(1756980768.573:639): avc: denied { write } for pid=10836 comm="syz.1.1143" path="socket:[28257]" dev="sockfs" ino=28257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 526.107341][ T43] usb 2-1: USB disconnect, device number 25 [ 526.140451][ T10] usb 4-1: config 0 descriptor?? [ 526.157661][ T10] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 526.175294][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 526.239984][ T1097] TC_ACT_REPEAT abuse ? [ 526.244873][ T5995] TC_ACT_REPEAT abuse ? [ 526.250993][ T5933] TC_ACT_REPEAT abuse ? [ 526.368029][ T10] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 526.378976][ T10] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 526.472994][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 526.479274][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 526.488147][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 526.497259][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.505259][ T24] usb 3-1: Product: syz [ 526.509389][ T24] usb 3-1: Manufacturer: syz [ 526.956743][ T24] usb 3-1: SerialNumber: syz [ 526.964699][ T24] usb 3-1: config 0 descriptor?? [ 526.968590][ T5850] usb 4-1: USB disconnect, device number 33 [ 526.973770][ T24] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 527.293733][ T24] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 527.310179][ T24] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 527.483034][ T30] audit: type=1400 audit(1756980770.403:640): avc: denied { mount } for pid=10859 comm="syz.1.1150" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 528.118072][ T5850] usb 3-1: USB disconnect, device number 33 [ 529.185885][T10873] lo speed is unknown, defaulting to 1000 [ 529.643554][T10878] trusted_key: encrypted_key: keylen parameter is missing [ 529.668843][T10878] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 530.574302][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 531.067759][T10895] syz.1.1155 (10895): drop_caches: 2 [ 532.003713][ T6631] TC_ACT_REPEAT abuse ? [ 532.467087][ T10] TC_ACT_REPEAT abuse ? [ 532.557042][ T5850] TC_ACT_REPEAT abuse ? [ 532.557790][ T30] audit: type=1400 audit(1756980775.403:641): avc: denied { write } for pid=10906 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 532.623955][ T30] audit: type=1400 audit(1756980775.403:642): avc: denied { connect } for pid=10906 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 532.644119][ T30] audit: type=1400 audit(1756980775.413:643): avc: denied { name_connect } for pid=10906 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 532.954136][ T30] audit: type=1400 audit(1756980775.613:644): avc: denied { setopt } for pid=10906 comm="syz.2.1162" lport=40597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 532.983033][ T30] audit: type=1400 audit(1756980775.623:645): avc: denied { shutdown } for pid=10906 comm="syz.2.1162" lport=40597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 533.004210][ T30] audit: type=1400 audit(1756980775.653:646): avc: denied { read } for pid=10906 comm="syz.2.1162" lport=40597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 534.180153][T10928] FAULT_INJECTION: forcing a failure. [ 534.180153][T10928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.857129][T10933] trusted_key: encrypted_key: insufficient parameters specified [ 534.868664][T10933] trusted_key: encrypted_key: keylen parameter is missing [ 534.897793][T10933] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 534.947444][T10925] trusted_key: encrypted_key: keylen parameter is missing [ 534.968929][T10925] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 535.061414][T10928] CPU: 0 UID: 0 PID: 10928 Comm: syz.0.1167 Not tainted syzkaller #0 PREEMPT(full) [ 535.061446][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.061458][T10928] Call Trace: [ 535.061465][T10928] [ 535.061475][T10928] dump_stack_lvl+0x16c/0x1f0 [ 535.061502][T10928] should_fail_ex+0x512/0x640 [ 535.061533][T10928] _copy_from_user+0x2e/0xd0 [ 535.061560][T10928] copy_msghdr_from_user+0x98/0x160 [ 535.061582][T10928] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 535.061602][T10928] ? __pfx_bpf_trace_run4+0x10/0x10 [ 535.061630][T10928] ? __lock_acquire+0xb97/0x1ce0 [ 535.061666][T10928] ___sys_sendmsg+0xfe/0x1d0 [ 535.061687][T10928] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.061748][T10928] __sys_sendmsg+0x16d/0x220 [ 535.061770][T10928] ? __pfx___sys_sendmsg+0x10/0x10 [ 535.061789][T10928] ? __pfx___schedule+0x10/0x10 [ 535.061828][T10928] do_syscall_64+0xcd/0x4c0 [ 535.061853][T10928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.061874][T10928] RIP: 0033:0x7f8fcc58ebe9 [ 535.061890][T10928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.061909][T10928] RSP: 002b:00007f8fcd4a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.061930][T10928] RAX: ffffffffffffffda RBX: 00007f8fcc7c5fa0 RCX: 00007f8fcc58ebe9 [ 535.061943][T10928] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 535.061956][T10928] RBP: 00007f8fcd4a3090 R08: 0000000000000000 R09: 0000000000000000 [ 535.061968][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.061979][T10928] R13: 00007f8fcc7c6038 R14: 00007f8fcc7c5fa0 R15: 00007ffcc9880d88 [ 535.062008][T10928] [ 535.743199][ T5995] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 535.942223][ T30] audit: type=1400 audit(1756980778.843:647): avc: denied { getopt } for pid=10939 comm="syz.2.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 535.971407][ T30] audit: type=1400 audit(1756980778.843:648): avc: denied { create } for pid=10939 comm="syz.2.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 536.003494][ T5995] usb 4-1: Using ep0 maxpacket: 16 [ 536.012332][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.023897][ T5995] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 536.069934][ T5995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.069971][ T30] audit: type=1400 audit(1756980778.843:649): avc: denied { ioctl } for pid=10939 comm="syz.2.1169" path="socket:[28881]" dev="sockfs" ino=28881 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 536.132804][ T30] audit: type=1400 audit(1756980778.863:650): avc: denied { getopt } for pid=10939 comm="syz.2.1169" lport=128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 536.134086][ T5995] usb 4-1: config 0 descriptor?? [ 537.632711][ T5995] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 537.842544][T10965] IPVS: length: 24 != 792 [ 538.579580][ T5912] usb 4-1: USB disconnect, device number 34 [ 539.076093][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 539.181187][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 539.432671][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 539.432686][ T30] audit: type=1400 audit(1756980782.353:652): avc: denied { write } for pid=10976 comm="syz.3.1179" name="001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 539.438550][T10981] FAULT_INJECTION: forcing a failure. [ 539.438550][T10981] name failslab, interval 1, probability 0, space 0, times 0 [ 539.633366][T10981] CPU: 0 UID: 0 PID: 10981 Comm: syz.3.1179 Not tainted syzkaller #0 PREEMPT(full) [ 539.633397][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.633409][T10981] Call Trace: [ 539.633416][T10981] [ 539.633424][T10981] dump_stack_lvl+0x16c/0x1f0 [ 539.633454][T10981] should_fail_ex+0x512/0x640 [ 539.633475][T10981] ? fs_reclaim_acquire+0xae/0x150 [ 539.633504][T10981] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 539.633532][T10981] should_failslab+0xc2/0x120 [ 539.633555][T10981] __kmalloc_noprof+0xd2/0x510 [ 539.633583][T10981] tomoyo_realpath_from_path+0xc2/0x6e0 [ 539.633614][T10981] ? tomoyo_profile+0x47/0x60 [ 539.633637][T10981] tomoyo_path_number_perm+0x245/0x580 [ 539.633660][T10981] ? tomoyo_path_number_perm+0x237/0x580 [ 539.633687][T10981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 539.633713][T10981] ? find_held_lock+0x2b/0x80 [ 539.633765][T10981] ? find_held_lock+0x2b/0x80 [ 539.633788][T10981] ? hook_file_ioctl_common+0x145/0x410 [ 539.633816][T10981] ? __fget_files+0x20e/0x3c0 [ 539.633844][T10981] security_file_ioctl+0x9b/0x240 [ 539.633874][T10981] __x64_sys_ioctl+0xb7/0x210 [ 539.633904][T10981] do_syscall_64+0xcd/0x4c0 [ 539.633935][T10981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.633956][T10981] RIP: 0033:0x7f6c8718ebe9 [ 539.633972][T10981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.633991][T10981] RSP: 002b:00007f6c87fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.634011][T10981] RAX: ffffffffffffffda RBX: 00007f6c873c6180 RCX: 00007f6c8718ebe9 [ 539.634024][T10981] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000007 [ 539.634037][T10981] RBP: 00007f6c87fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 539.634048][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.634060][T10981] R13: 00007f6c873c6218 R14: 00007f6c873c6180 R15: 00007ffed24fd6a8 [ 539.634090][T10981] [ 539.634098][T10981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 539.876549][ T30] audit: type=1400 audit(1756980782.803:653): avc: denied { bind } for pid=10969 comm="syz.2.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 539.896122][ T5933] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 539.913125][T10975] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 540.119224][T10988] trusted_key: encrypted_key: keylen parameter is missing [ 540.163738][T10988] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 540.392014][ T30] audit: type=1400 audit(1756980782.833:654): avc: denied { write } for pid=10969 comm="syz.2.1176" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 540.443112][T10975] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1176'. [ 540.463740][ T30] audit: type=1400 audit(1756980782.833:655): avc: denied { open } for pid=10969 comm="syz.2.1176" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 540.493659][ T5933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.505939][ T5933] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 540.515216][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.539101][ T5933] usb 2-1: config 0 descriptor?? [ 540.615892][ T5933] pwc: Askey VC010 type 2 USB webcam detected. [ 541.037966][ T5933] pwc: recv_control_msg error -32 req 02 val 2b00 [ 541.077342][ T5933] pwc: recv_control_msg error -32 req 02 val 2700 [ 541.326065][ T5933] pwc: recv_control_msg error -32 req 04 val 1000 [ 541.371596][ T5933] pwc: recv_control_msg error -32 req 04 val 1300 [ 541.399603][ T5933] pwc: recv_control_msg error -71 req 04 val 1400 [ 541.408261][ T5933] pwc: recv_control_msg error -71 req 02 val 2000 [ 541.421385][ T5933] pwc: recv_control_msg error -71 req 02 val 2100 [ 541.435669][ T5933] pwc: recv_control_msg error -71 req 04 val 1500 [ 541.442582][ T5933] pwc: recv_control_msg error -71 req 02 val 2500 [ 541.450129][ T5933] pwc: recv_control_msg error -71 req 02 val 2400 [ 541.460141][ T5933] pwc: recv_control_msg error -71 req 02 val 2600 [ 541.479550][ T5933] pwc: recv_control_msg error -71 req 02 val 2900 [ 541.499632][ T5933] pwc: recv_control_msg error -71 req 02 val 2800 [ 541.517906][ T5933] pwc: recv_control_msg error -71 req 04 val 1100 [ 541.527829][ T5933] pwc: recv_control_msg error -71 req 04 val 1200 [ 541.539077][ T5933] pwc: Registered as video103. [ 541.613320][ T10] TC_ACT_REPEAT abuse ? [ 541.645139][ T5933] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 542.794504][ T5933] usb 2-1: USB disconnect, device number 26 [ 543.702127][T11015] IPVS: length: 24 != 792 [ 544.854427][T11031] lo speed is unknown, defaulting to 1000 [ 547.032753][ T30] audit: type=1400 audit(1756980789.953:656): avc: denied { read write } for pid=11039 comm="syz.3.1193" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 547.090843][T11041] input: syz1 as /devices/virtual/input/input40 [ 547.376193][ T30] audit: type=1400 audit(1756980789.953:657): avc: denied { open } for pid=11039 comm="syz.3.1193" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 547.412884][ T30] audit: type=1400 audit(1756980790.203:658): avc: denied { write } for pid=11039 comm="syz.3.1193" name="if_inet6" dev="proc" ino=4026533086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 550.030375][T11068] IPVS: length: 24 != 792 [ 550.722504][T11075] IPVS: length: 24 != 792 [ 551.194608][ T5932] TC_ACT_REPEAT abuse ? [ 551.648083][ T30] audit: type=1400 audit(1756980794.193:659): avc: denied { read } for pid=11079 comm="syz.3.1202" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 551.725682][ T30] audit: type=1400 audit(1756980794.203:660): avc: denied { open } for pid=11079 comm="syz.3.1202" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 552.685149][T11090] lo speed is unknown, defaulting to 1000 [ 553.919170][T11099] input: syz1 as /devices/virtual/input/input41 [ 553.976650][T11102] FAULT_INJECTION: forcing a failure. [ 553.976650][T11102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.992270][T11102] CPU: 0 UID: 0 PID: 11102 Comm: syz.1.1207 Not tainted syzkaller #0 PREEMPT(full) [ 553.992298][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.992310][T11102] Call Trace: [ 553.992317][T11102] [ 553.992324][T11102] dump_stack_lvl+0x16c/0x1f0 [ 553.992353][T11102] should_fail_ex+0x512/0x640 [ 553.992381][T11102] _copy_from_user+0x2e/0xd0 [ 553.992407][T11102] copy_msghdr_from_user+0x98/0x160 [ 553.992432][T11102] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 553.992469][T11102] ___sys_sendmsg+0xfe/0x1d0 [ 553.992492][T11102] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.992560][T11102] __sys_sendmsg+0x16d/0x220 [ 553.992583][T11102] ? __pfx___sys_sendmsg+0x10/0x10 [ 553.992625][T11102] do_syscall_64+0xcd/0x4c0 [ 553.992650][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.992671][T11102] RIP: 0033:0x7f580558ebe9 [ 553.992688][T11102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.992707][T11102] RSP: 002b:00007f580639c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.992727][T11102] RAX: ffffffffffffffda RBX: 00007f58057c5fa0 RCX: 00007f580558ebe9 [ 553.992741][T11102] RDX: 000000000000c094 RSI: 0000200000000040 RDI: 0000000000000003 [ 553.992753][T11102] RBP: 00007f580639c090 R08: 0000000000000000 R09: 0000000000000000 [ 553.992766][T11102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.992778][T11102] R13: 00007f58057c6038 R14: 00007f58057c5fa0 R15: 00007fff65641638 [ 553.992806][T11102] [ 554.474024][T11112] overlayfs: missing 'lowerdir' [ 554.673860][T11116] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1210'. [ 556.123704][T11127] lo speed is unknown, defaulting to 1000 [ 557.143362][T11126] IPVS: length: 24 != 792 [ 557.328260][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'. [ 557.366972][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'. [ 558.158077][ T30] audit: type=1400 audit(1756980800.993:661): avc: denied { execute_no_trans } for pid=11142 comm="syz.1.1216" path="/228/file0" dev="tmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 558.182014][ T30] audit: type=1400 audit(1756980800.993:662): avc: denied { remount } for pid=11142 comm="syz.1.1216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 559.418653][T11163] input: syz1 as /devices/virtual/input/input42 [ 559.658073][T11169] lo speed is unknown, defaulting to 1000 [ 560.797459][T11175] FAULT_INJECTION: forcing a failure. [ 560.797459][T11175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.804799][ T5933] TC_ACT_REPEAT abuse ? [ 560.816577][T11175] CPU: 1 UID: 0 PID: 11175 Comm: syz.3.1222 Not tainted syzkaller #0 PREEMPT(full) [ 560.816606][T11175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.816618][T11175] Call Trace: [ 560.816624][T11175] [ 560.816633][T11175] dump_stack_lvl+0x16c/0x1f0 [ 560.816659][T11175] should_fail_ex+0x512/0x640 [ 560.816686][T11175] _copy_from_user+0x2e/0xd0 [ 560.816713][T11175] copy_msghdr_from_user+0x98/0x160 [ 560.816736][T11175] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 560.816772][T11175] ___sys_sendmsg+0xfe/0x1d0 [ 560.816795][T11175] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.816856][T11175] __sys_sendmsg+0x16d/0x220 [ 560.816878][T11175] ? __pfx___sys_sendmsg+0x10/0x10 [ 560.816921][T11175] do_syscall_64+0xcd/0x4c0 [ 560.816946][T11175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.816966][T11175] RIP: 0033:0x7f6c8718ebe9 [ 560.816982][T11175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.817001][T11175] RSP: 002b:00007f6c87ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.817022][T11175] RAX: ffffffffffffffda RBX: 00007f6c873c5fa0 RCX: 00007f6c8718ebe9 [ 560.817035][T11175] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 560.817047][T11175] RBP: 00007f6c87ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 560.817059][T11175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.817071][T11175] R13: 00007f6c873c6038 R14: 00007f6c873c5fa0 R15: 00007ffed24fd6a8 [ 560.817099][T11175] [ 561.283727][ T5912] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 561.453079][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 561.468539][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 561.478393][ T5912] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 561.487782][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.504252][ T5912] usb 4-1: Product: syz [ 561.515856][ T5912] usb 4-1: Manufacturer: syz [ 561.525281][ T5912] usb 4-1: SerialNumber: syz [ 561.547005][ T5912] usb 4-1: config 0 descriptor?? [ 561.564495][ T5912] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 561.772083][ T5912] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 561.781659][ T5912] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 561.988147][ T5912] usb 4-1: USB disconnect, device number 35 [ 562.717553][ C1] TC_ACT_REPEAT abuse ? [ 562.802236][T11197] trusted_key: encrypted_key: insufficient parameters specified [ 562.818304][T11197] trusted_key: encrypted_key: keylen parameter is missing [ 562.849156][T11197] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 563.144617][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.150946][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.354004][T11202] input: syz1 as /devices/virtual/input/input43 [ 563.793071][T11209] trusted_key: encrypted_key: keylen parameter is missing [ 565.539742][T11227] lo speed is unknown, defaulting to 1000 [ 566.556131][ T30] audit: type=1400 audit(1756980809.383:663): avc: denied { accept } for pid=11210 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 567.843948][T11248] overlayfs: missing 'lowerdir' [ 569.581195][ T5995] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 569.903142][ T5995] usb 4-1: Using ep0 maxpacket: 8 [ 569.922705][ T5995] usb 4-1: config 0 interface 0 has no altsetting 0 [ 569.934150][ T5995] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 569.943688][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.951778][ T5995] usb 4-1: Product: syz [ 569.956149][ T5995] usb 4-1: Manufacturer: syz [ 569.964432][ T5995] usb 4-1: SerialNumber: syz [ 569.973751][ T5995] usb 4-1: config 0 descriptor?? [ 569.985537][ T5995] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 570.202495][ T5995] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 570.211784][ T5995] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 570.394262][ T6631] TC_ACT_REPEAT abuse ? [ 570.399947][ T5995] TC_ACT_REPEAT abuse ? [ 570.405712][ T5933] TC_ACT_REPEAT abuse ? [ 570.425462][ T5995] usb 4-1: USB disconnect, device number 36 [ 571.200772][T11279] FAULT_INJECTION: forcing a failure. [ 571.200772][T11279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.214681][T11279] CPU: 1 UID: 0 PID: 11279 Comm: syz.1.1247 Not tainted syzkaller #0 PREEMPT(full) [ 571.214709][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.214721][T11279] Call Trace: [ 571.214728][T11279] [ 571.214736][T11279] dump_stack_lvl+0x16c/0x1f0 [ 571.214763][T11279] should_fail_ex+0x512/0x640 [ 571.214790][T11279] _copy_from_user+0x2e/0xd0 [ 571.214817][T11279] kstrtouint_from_user+0xd6/0x1d0 [ 571.214836][T11279] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 571.214854][T11279] ? __lock_acquire+0xb97/0x1ce0 [ 571.214899][T11279] proc_fail_nth_write+0x83/0x220 [ 571.214923][T11279] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 571.214953][T11279] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 571.214974][T11279] vfs_write+0x29d/0x11d0 [ 571.215000][T11279] ? __pfx___mutex_lock+0x10/0x10 [ 571.215022][T11279] ? __pfx_vfs_write+0x10/0x10 [ 571.215062][T11279] ? __fget_files+0x20e/0x3c0 [ 571.215089][T11279] ksys_write+0x12a/0x250 [ 571.215107][T11279] ? __pfx_ksys_write+0x10/0x10 [ 571.215132][T11279] do_syscall_64+0xcd/0x4c0 [ 571.215159][T11279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.215179][T11279] RIP: 0033:0x7f580558d69f [ 571.215196][T11279] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 571.215215][T11279] RSP: 002b:00007f580639c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 571.215236][T11279] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f580558d69f [ 571.215249][T11279] RDX: 0000000000000001 RSI: 00007f580639c0a0 RDI: 0000000000000003 [ 571.215262][T11279] RBP: 00007f580639c090 R08: 0000000000000000 R09: 0000000000000000 [ 571.215274][T11279] R10: 0000000000000086 R11: 0000000000000293 R12: 0000000000000001 [ 571.215289][T11279] R13: 00007f58057c6038 R14: 00007f58057c5fa0 R15: 00007fff65641638 [ 571.215319][T11279] [ 571.449492][T11283] netlink: 'syz.3.1249': attribute type 10 has an invalid length. [ 571.640758][T11284] lo speed is unknown, defaulting to 1000 [ 572.669246][T11283] batman_adv: batadv0: Adding interface: team0 [ 572.676403][T11283] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.703051][T11283] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 572.930467][T11293] overlayfs: missing 'lowerdir' [ 573.327791][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 573.346889][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1253'. [ 573.734420][T11302] netlink: 'syz.1.1255': attribute type 10 has an invalid length. [ 573.775746][T11302] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 574.028285][T11308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.374519][T11315] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 574.741499][ T30] audit: type=1400 audit(1756980817.663:664): avc: denied { execute } for pid=11312 comm="syz.3.1259" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 574.825331][T11314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.000420][T11322] FAULT_INJECTION: forcing a failure. [ 575.000420][T11322] name failslab, interval 1, probability 0, space 0, times 0 [ 575.013757][T11322] CPU: 1 UID: 0 PID: 11322 Comm: syz.0.1261 Not tainted syzkaller #0 PREEMPT(full) [ 575.013776][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.013784][T11322] Call Trace: [ 575.013788][T11322] [ 575.013793][T11322] dump_stack_lvl+0x16c/0x1f0 [ 575.013812][T11322] should_fail_ex+0x512/0x640 [ 575.013825][T11322] ? fs_reclaim_acquire+0xae/0x150 [ 575.013841][T11322] ? tomoyo_encode2+0x100/0x3e0 [ 575.013857][T11322] should_failslab+0xc2/0x120 [ 575.013870][T11322] __kmalloc_noprof+0xd2/0x510 [ 575.013882][T11322] ? d_absolute_path+0x136/0x1a0 [ 575.013901][T11322] tomoyo_encode2+0x100/0x3e0 [ 575.013921][T11322] tomoyo_encode+0x29/0x50 [ 575.013936][T11322] tomoyo_realpath_from_path+0x18f/0x6e0 [ 575.013958][T11322] tomoyo_path_number_perm+0x245/0x580 [ 575.013971][T11322] ? tomoyo_path_number_perm+0x237/0x580 [ 575.013987][T11322] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 575.014002][T11322] ? find_held_lock+0x2b/0x80 [ 575.014031][T11322] ? find_held_lock+0x2b/0x80 [ 575.014044][T11322] ? hook_file_ioctl_common+0x145/0x410 [ 575.014059][T11322] ? __fget_files+0x20e/0x3c0 [ 575.014075][T11322] security_file_ioctl+0x9b/0x240 [ 575.014092][T11322] __x64_sys_ioctl+0xb7/0x210 [ 575.014111][T11322] do_syscall_64+0xcd/0x4c0 [ 575.014125][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.014137][T11322] RIP: 0033:0x7f8fcc58ebe9 [ 575.014147][T11322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.014165][T11322] RSP: 002b:00007f8fcd4a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.014178][T11322] RAX: ffffffffffffffda RBX: 00007f8fcc7c5fa0 RCX: 00007f8fcc58ebe9 [ 575.014185][T11322] RDX: 00007cb7562f2d67 RSI: 000000000000545c RDI: 0000000000000003 [ 575.014192][T11322] RBP: 00007f8fcd4a3090 R08: 0000000000000000 R09: 0000000000000000 [ 575.014199][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.014206][T11322] R13: 00007f8fcc7c6038 R14: 00007f8fcc7c5fa0 R15: 00007ffcc9880d88 [ 575.014222][T11322] [ 575.014233][T11322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 575.232596][T11312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.366208][T11332] ubi31: attaching mtd0 [ 575.372225][ T30] audit: type=1400 audit(1756980818.293:665): avc: denied { append } for pid=11330 comm="syz.0.1263" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 576.285926][T11337] FAULT_INJECTION: forcing a failure. [ 576.285926][T11337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.318100][T11337] CPU: 0 UID: 0 PID: 11337 Comm: syz.3.1265 Not tainted syzkaller #0 PREEMPT(full) [ 576.318128][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.318138][T11337] Call Trace: [ 576.318144][T11337] [ 576.318152][T11337] dump_stack_lvl+0x16c/0x1f0 [ 576.318177][T11337] should_fail_ex+0x512/0x640 [ 576.318200][T11337] _copy_to_user+0x32/0xd0 [ 576.318225][T11337] bpf_prog_test_run_raw_tp+0x53f/0x710 [ 576.318248][T11337] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 576.318270][T11337] ? fput+0x9b/0xd0 [ 576.318295][T11337] ? __bpf_prog_get+0x97/0x2a0 [ 576.318314][T11337] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 576.318335][T11337] __sys_bpf+0x1050/0x4de0 [ 576.318363][T11337] ? __pfx___sys_bpf+0x10/0x10 [ 576.318389][T11337] ? ksys_write+0x190/0x250 [ 576.318415][T11337] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 576.318456][T11337] ? fput+0x9b/0xd0 [ 576.318481][T11337] ? ksys_write+0x1ac/0x250 [ 576.318500][T11337] ? __pfx_ksys_write+0x10/0x10 [ 576.318526][T11337] __x64_sys_bpf+0x78/0xc0 [ 576.318552][T11337] ? lockdep_hardirqs_on+0x7c/0x110 [ 576.318572][T11337] do_syscall_64+0xcd/0x4c0 [ 576.318597][T11337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.318617][T11337] RIP: 0033:0x7f6c8718ebe9 [ 576.318634][T11337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.318654][T11337] RSP: 002b:00007f6c87ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 576.318675][T11337] RAX: ffffffffffffffda RBX: 00007f6c873c5fa0 RCX: 00007f6c8718ebe9 [ 576.318689][T11337] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 576.318702][T11337] RBP: 00007f6c87ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 576.318714][T11337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.318727][T11337] R13: 00007f6c873c6038 R14: 00007f6c873c5fa0 R15: 00007ffed24fd6a8 [ 576.318756][T11337] [ 576.338626][T11341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1267'. [ 576.636908][T11350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'. [ 577.726361][ T30] audit: type=1400 audit(1756980819.783:666): avc: denied { write } for pid=11344 comm="syz.3.1269" path="socket:[29594]" dev="sockfs" ino=29594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 577.756644][T11348] TC_ACT_REPEAT abuse ? [ 577.773577][T11348] TC_ACT_REPEAT abuse ? [ 577.780614][T11348] TC_ACT_REPEAT abuse ? [ 577.869044][ T30] audit: type=1326 audit(1756980820.793:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11364 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580558ebe9 code=0x7ffc0000 [ 577.901253][ T30] audit: type=1326 audit(1756980820.793:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11364 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580558ebe9 code=0x7ffc0000 [ 577.933287][ T30] audit: type=1326 audit(1756980820.793:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11364 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f580558ebe9 code=0x7ffc0000 [ 577.960136][ T30] audit: type=1326 audit(1756980820.793:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11364 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580558ebe9 code=0x7ffc0000 [ 577.988543][ T30] audit: type=1326 audit(1756980820.793:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11364 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580558ebe9 code=0x7ffc0000 [ 578.076316][ T5932] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 578.154119][T11367] ubi0: attaching mtd0 [ 578.171642][T11367] ubi0: scanning is finished [ 578.238858][ T5932] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 578.263285][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.296257][ T5932] usb 1-1: Product: syz [ 578.306582][ T5932] usb 1-1: Manufacturer: syz [ 578.323487][ T5932] usb 1-1: SerialNumber: syz [ 578.359202][ T5932] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 578.379320][T11367] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 578.387540][T11367] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 578.395144][T11367] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 578.402338][T11367] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 578.409857][T11367] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 578.417017][T11367] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 578.427171][T11367] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2661352680 [ 578.437539][T11367] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 578.448699][T11370] ubi0: background thread "ubi_bgt0d" started, PID 11370 [ 578.467294][T11368] ubi0: detaching mtd0 [ 578.525001][T11368] ubi0: mtd0 is detached [ 578.578199][ T30] audit: type=1400 audit(1756980821.503:672): avc: denied { firmware_load } for pid=5933 comm="kworker/0:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 578.585948][ T5933] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 578.741029][T11344] TC_ACT_REPEAT abuse ? [ 578.752852][T11344] TC_ACT_REPEAT abuse ? [ 578.845497][ T30] audit: type=1400 audit(1756980821.743:673): avc: denied { map } for pid=11372 comm="syz.1.1277" path="socket:[30580]" dev="sockfs" ino=30580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 579.082861][T11363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.092455][T11363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.117094][ T5932] usb 1-1: USB disconnect, device number 26 [ 579.183153][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 579.353251][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 579.923117][ T5933] usb 1-1: Service connection timeout for: 256 [ 579.929387][ T5933] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 579.953672][ T5933] ath9k_htc: Failed to initialize the device [ 579.980420][ T5932] usb 1-1: ath9k_htc: USB layer deinitialized [ 579.998391][ T5850] TC_ACT_REPEAT abuse ? [ 580.353050][ T5932] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 580.514392][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 580.521337][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 580.531478][ T5932] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 580.542300][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.551695][ T5932] usb 1-1: Product: syz [ 580.558929][ T5932] usb 1-1: Manufacturer: syz [ 580.565983][ T5932] usb 1-1: SerialNumber: syz [ 580.576515][ T5932] usb 1-1: config 0 descriptor?? [ 580.586489][ T5932] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 580.791126][ T5932] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 580.802981][ T5932] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 580.994496][ T5932] usb 1-1: USB disconnect, device number 27 [ 582.178514][ T24] usb 2-1: device descriptor read/all, error -71 [ 582.923192][ T5933] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 583.093270][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 583.101947][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.113115][ T5933] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 583.122172][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.149211][ T5933] usb 4-1: config 0 descriptor?? [ 583.683191][ T5933] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 584.884861][ T5912] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 585.067566][ T5933] usb 4-1: USB disconnect, device number 37 [ 585.227081][ T5912] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 585.236604][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.244789][ T5912] usb 1-1: Product: syz [ 585.249207][ T5912] usb 1-1: Manufacturer: syz [ 585.261119][ T5912] usb 1-1: SerialNumber: syz [ 585.271187][ T5912] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 585.736004][ T5995] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 586.231840][ T5933] usb 1-1: USB disconnect, device number 28 [ 587.112978][ T5995] usb 1-1: Service connection timeout for: 256 [ 587.129494][ T5995] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 587.144432][ T5995] ath9k_htc: Failed to initialize the device [ 587.154106][ T5933] usb 1-1: ath9k_htc: USB layer deinitialized [ 587.255117][T11440] IPv6: Can't replace route, no match found [ 587.282574][T11440] cgroup: No subsys list or none specified [ 588.417902][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 588.417918][ T30] audit: type=1400 audit(1756980831.343:679): avc: denied { setattr } for pid=11449 comm="syz.0.1299" path="socket:[31767]" dev="sockfs" ino=31767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 588.747742][ T30] audit: type=1400 audit(1756980831.443:680): avc: denied { ioctl } for pid=11449 comm="syz.0.1299" path="socket:[31767]" dev="sockfs" ino=31767 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 588.775735][ T30] audit: type=1400 audit(1756980831.523:681): avc: denied { ioctl } for pid=11449 comm="syz.0.1299" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 588.878020][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 588.887479][T11456] netlink: 'syz.3.1301': attribute type 30 has an invalid length. [ 588.907911][ T6633] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.933025][ T9532] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.034873][ T9532] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.045136][ T9532] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.577495][ T30] audit: type=1400 audit(1756980832.493:682): avc: denied { read } for pid=11463 comm="syz.3.1304" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 589.614402][ T5850] TC_ACT_REPEAT abuse ? [ 589.627970][ T30] audit: type=1400 audit(1756980832.513:683): avc: denied { ioctl } for pid=11463 comm="syz.3.1304" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 589.859738][ T5933] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 590.145044][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 590.152023][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.166796][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.241242][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 590.256437][ T5933] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 590.265611][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.363681][T11473] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 590.740796][ T5933] usb 4-1: config 0 descriptor?? [ 591.221135][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.403482][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.435961][ T5933] usbhid 4-1:0.0: can't add hid device: -71 [ 591.448138][ T5933] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 591.466888][ T5933] usb 4-1: USB disconnect, device number 38 [ 592.177216][T11486] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 593.332686][ T30] audit: type=1400 audit(1756980836.253:684): avc: denied { write } for pid=11496 comm="syz.1.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 593.763025][ T5912] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 594.363277][ T30] audit: type=1400 audit(1756980836.443:685): avc: denied { bind } for pid=11499 comm="syz.0.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 594.544906][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.562437][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 594.574966][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 594.583015][ T5912] usb 4-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 594.592289][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.604248][ T5912] usb 4-1: config 0 descriptor?? [ 594.609952][T11501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.789673][ T30] audit: type=1400 audit(1756980837.593:686): avc: denied { write } for pid=11507 comm="syz.0.1315" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 595.068787][T11501] lo speed is unknown, defaulting to 1000 [ 596.517282][ T5912] usb 4-1: string descriptor 0 read error: -71 [ 596.528721][ T5912] usbhid 4-1:0.0: can't add hid device: -71 [ 596.655244][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 596.670336][ T5912] usb 4-1: USB disconnect, device number 39 [ 599.193512][ T5933] TC_ACT_REPEAT abuse ? [ 599.550965][T11551] FAULT_INJECTION: forcing a failure. [ 599.550965][T11551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.567051][T11551] CPU: 0 UID: 0 PID: 11551 Comm: syz.1.1326 Not tainted syzkaller #0 PREEMPT(full) [ 599.567081][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.567093][T11551] Call Trace: [ 599.567100][T11551] [ 599.567109][T11551] dump_stack_lvl+0x16c/0x1f0 [ 599.567137][T11551] should_fail_ex+0x512/0x640 [ 599.567165][T11551] _copy_from_user+0x2e/0xd0 [ 599.567192][T11551] kstrtouint_from_user+0xd6/0x1d0 [ 599.567213][T11551] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 599.567230][T11551] ? __lock_acquire+0xb97/0x1ce0 [ 599.567284][T11551] proc_fail_nth_write+0x83/0x220 [ 599.567310][T11551] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 599.567341][T11551] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 599.567363][T11551] vfs_write+0x29d/0x11d0 [ 599.567388][T11551] ? __pfx___mutex_lock+0x10/0x10 [ 599.567412][T11551] ? __pfx_vfs_write+0x10/0x10 [ 599.567442][T11551] ? __fget_files+0x20e/0x3c0 [ 599.567474][T11551] ksys_write+0x12a/0x250 [ 599.567495][T11551] ? __pfx_ksys_write+0x10/0x10 [ 599.567526][T11551] do_syscall_64+0xcd/0x4c0 [ 599.567551][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.567572][T11551] RIP: 0033:0x7f580558d69f [ 599.567589][T11551] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 599.567608][T11551] RSP: 002b:00007f580639c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 599.567629][T11551] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f580558d69f [ 599.567642][T11551] RDX: 0000000000000001 RSI: 00007f580639c0a0 RDI: 0000000000000004 [ 599.567654][T11551] RBP: 00007f580639c090 R08: 0000000000000000 R09: 0000000000000000 [ 599.567666][T11551] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 599.567679][T11551] R13: 00007f58057c6038 R14: 00007f58057c5fa0 R15: 00007fff65641638 [ 599.567709][T11551] [ 599.966498][T11554] trusted_key: encrypted_key: keylen parameter is missing [ 599.993567][T11554] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 600.643159][ T5933] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 600.803517][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 600.824961][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.175601][ T5933] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 601.194903][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.226670][T11566] FAULT_INJECTION: forcing a failure. [ 601.226670][T11566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.239958][T11566] CPU: 0 UID: 0 PID: 11566 Comm: syz.3.1329 Not tainted syzkaller #0 PREEMPT(full) [ 601.239985][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.239995][T11566] Call Trace: [ 601.240002][T11566] [ 601.240009][T11566] dump_stack_lvl+0x16c/0x1f0 [ 601.240036][T11566] should_fail_ex+0x512/0x640 [ 601.240063][T11566] _copy_from_user+0x2e/0xd0 [ 601.240097][T11566] core_sys_select+0x35b/0xc10 [ 601.240127][T11566] ? __pfx_core_sys_select+0x10/0x10 [ 601.240147][T11566] ? __pfx___schedule+0x10/0x10 [ 601.240170][T11566] ? irqentry_exit+0x3b/0x90 [ 601.240215][T11566] ? set_user_sigmask+0x21b/0x2b0 [ 601.240239][T11566] ? __pfx_set_user_sigmask+0x10/0x10 [ 601.240269][T11566] do_pselect.constprop.0+0x19f/0x1e0 [ 601.240293][T11566] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 601.240327][T11566] __x64_sys_pselect6+0x182/0x240 [ 601.240350][T11566] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 601.240381][T11566] do_syscall_64+0xcd/0x4c0 [ 601.240407][T11566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.240427][T11566] RIP: 0033:0x7f6c8718ebe9 [ 601.240443][T11566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.240462][T11566] RSP: 002b:00007f6c87fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 601.240482][T11566] RAX: ffffffffffffffda RBX: 00007f6c873c6090 RCX: 00007f6c8718ebe9 [ 601.240496][T11566] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040 [ 601.240508][T11566] RBP: 00007f6c87fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 601.240520][T11566] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 601.240533][T11566] R13: 00007f6c873c6128 R14: 00007f6c873c6090 R15: 00007ffed24fd6a8 [ 601.240561][T11566] [ 601.527210][ T5933] usb 2-1: config 0 descriptor?? [ 602.112582][ T5933] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 602.719507][T11581] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 603.909841][ T30] audit: type=1400 audit(1756980846.833:687): avc: denied { read } for pid=11589 comm="syz.0.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 604.829146][ T5995] usb 2-1: USB disconnect, device number 29 [ 606.394996][T11599] lo speed is unknown, defaulting to 1000 [ 607.520107][T11613] overlayfs: missing 'lowerdir' [ 608.243920][ T30] audit: type=1400 audit(1756980851.163:688): avc: denied { bind } for pid=11619 comm="syz.0.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 608.268701][ T30] audit: type=1400 audit(1756980851.173:689): avc: denied { name_bind } for pid=11619 comm="syz.0.1342" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 608.291031][ T30] audit: type=1400 audit(1756980851.173:690): avc: denied { node_bind } for pid=11619 comm="syz.0.1342" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 608.314116][ T30] audit: type=1400 audit(1756980851.173:691): avc: denied { name_connect } for pid=11619 comm="syz.0.1342" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 608.473029][T11390] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 608.632984][T11390] usb 2-1: Using ep0 maxpacket: 16 [ 608.641924][T11390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.653813][T11390] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 608.662947][T11390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.675660][T11390] usb 2-1: config 0 descriptor?? [ 608.797471][ T6631] TC_ACT_REPEAT abuse ? [ 608.802775][ T5932] TC_ACT_REPEAT abuse ? [ 608.807608][ T5932] TC_ACT_REPEAT abuse ? [ 608.813246][ T9874] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 608.984835][ T9874] usb 1-1: Using ep0 maxpacket: 8 [ 608.991896][ T9874] usb 1-1: config 0 interface 0 has no altsetting 0 [ 609.001726][ T9874] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 609.017651][ T9874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.026791][ T9874] usb 1-1: Product: syz [ 609.031068][ T9874] usb 1-1: Manufacturer: syz [ 609.037439][ T9874] usb 1-1: SerialNumber: syz [ 609.048227][ T9874] usb 1-1: config 0 descriptor?? [ 609.065574][ T9874] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 609.111191][T11390] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 609.297988][ T9874] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 609.343952][ T9874] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 609.515887][ T9874] usb 1-1: USB disconnect, device number 29 [ 609.919925][T11390] usb 2-1: USB disconnect, device number 30 [ 611.159084][T11640] FAULT_INJECTION: forcing a failure. [ 611.159084][T11640] name failslab, interval 1, probability 0, space 0, times 0 [ 611.172015][T11640] CPU: 1 UID: 0 PID: 11640 Comm: syz.0.1347 Not tainted syzkaller #0 PREEMPT(full) [ 611.172043][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.172055][T11640] Call Trace: [ 611.172062][T11640] [ 611.172070][T11640] dump_stack_lvl+0x16c/0x1f0 [ 611.172097][T11640] should_fail_ex+0x512/0x640 [ 611.172119][T11640] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 611.172144][T11640] should_failslab+0xc2/0x120 [ 611.172166][T11640] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 611.172186][T11640] ? __alloc_skb+0x2b2/0x380 [ 611.172211][T11640] __alloc_skb+0x2b2/0x380 [ 611.172230][T11640] ? __pfx___alloc_skb+0x10/0x10 [ 611.172254][T11640] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 611.172283][T11640] netlink_alloc_large_skb+0x69/0x130 [ 611.172308][T11640] netlink_sendmsg+0x6a1/0xdd0 [ 611.172336][T11640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.172378][T11640] ____sys_sendmsg+0xa95/0xc70 [ 611.172406][T11640] ? copy_msghdr_from_user+0x10a/0x160 [ 611.172427][T11640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.172468][T11640] ___sys_sendmsg+0x134/0x1d0 [ 611.172491][T11640] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.172551][T11640] __sys_sendmsg+0x16d/0x220 [ 611.172573][T11640] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.172606][T11640] ? fput+0x9b/0xd0 [ 611.172638][T11640] do_syscall_64+0xcd/0x4c0 [ 611.172662][T11640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.172684][T11640] RIP: 0033:0x7f8fcc58ebe9 [ 611.172699][T11640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.172718][T11640] RSP: 002b:00007f8fcd4a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.172739][T11640] RAX: ffffffffffffffda RBX: 00007f8fcc7c5fa0 RCX: 00007f8fcc58ebe9 [ 611.172752][T11640] RDX: 0000000000008000 RSI: 0000200000000240 RDI: 0000000000000004 [ 611.172764][T11640] RBP: 00007f8fcd4a3090 R08: 0000000000000000 R09: 0000000000000000 [ 611.172776][T11640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.172788][T11640] R13: 00007f8fcc7c6038 R14: 00007f8fcc7c5fa0 R15: 00007ffcc9880d88 [ 611.172817][T11640] [ 611.442989][T11390] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 611.532272][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1348'. [ 611.579632][ T30] audit: type=1400 audit(1756980854.503:692): avc: denied { bind } for pid=11641 comm="syz.0.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 611.593041][T11390] usb 2-1: Using ep0 maxpacket: 32 [ 611.692674][T11390] usb 2-1: unable to get BOS descriptor or descriptor too short [ 611.704230][T11390] usb 2-1: config 8 has an invalid interface number: 14 but max is 0 [ 611.712787][T11390] usb 2-1: config 8 has no interface number 0 [ 611.719065][T11390] usb 2-1: config 8 interface 14 has no altsetting 0 [ 611.751417][T11390] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=b1.b0 [ 611.863278][T11390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.988974][T11390] usb 2-1: Product: syz [ 612.004139][T11390] usb 2-1: Manufacturer: syz [ 612.014065][T11390] usb 2-1: SerialNumber: syz [ 612.269999][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.281312][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.715140][T11390] ir_toy 2-1:8.14: required endpoints not found [ 612.724401][ T30] audit: type=1400 audit(1756980855.603:693): avc: denied { map } for pid=11637 comm="syz.1.1346" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 612.770834][T11390] usb 2-1: USB disconnect, device number 31 [ 613.989928][T11390] TC_ACT_REPEAT abuse ? [ 614.071876][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 614.098225][T11664] vlan2: entered allmulticast mode [ 614.820024][ T30] audit: type=1400 audit(1756980857.743:694): avc: denied { append } for pid=11669 comm="syz.0.1353" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 614.900413][ T30] audit: type=1400 audit(1756980857.823:695): avc: denied { read write } for pid=11671 comm="syz.3.1354" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 614.926291][ T30] audit: type=1400 audit(1756980857.823:696): avc: denied { open } for pid=11671 comm="syz.3.1354" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 614.938316][T11672] 9pnet_fd: Insufficient options for proto=fd [ 614.959978][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 615.044902][T11675] overlayfs: failed to resolve './bus': -2 [ 615.045901][ T30] audit: type=1400 audit(1756980857.973:697): avc: denied { mounton } for pid=11671 comm="syz.3.1354" path="/310/file0" dev="tmpfs" ino=1686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 615.398791][ T30] audit: type=1400 audit(1756980858.293:698): avc: denied { create } for pid=11677 comm="syz.1.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 615.422355][ T30] audit: type=1400 audit(1756980858.313:699): avc: denied { connect } for pid=11677 comm="syz.1.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 615.781822][ T30] audit: type=1400 audit(1756980858.313:700): avc: denied { write } for pid=11677 comm="syz.1.1356" laddr=172.20.20.10 lport=13 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 615.847563][ T30] audit: type=1400 audit(1756980858.743:701): avc: denied { create } for pid=11682 comm="syz.3.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 616.421415][T11692] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 617.106953][ T30] audit: type=1400 audit(1756980860.033:702): avc: denied { ioctl } for pid=11696 comm="syz.1.1361" path="socket:[31394]" dev="sockfs" ino=31394 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 617.292397][ T30] audit: type=1400 audit(1756980860.113:703): avc: denied { read append } for pid=11696 comm="syz.1.1361" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 617.342277][ T30] audit: type=1400 audit(1756980860.123:704): avc: denied { open } for pid=11696 comm="syz.1.1361" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 617.370443][ T30] audit: type=1400 audit(1756980860.203:705): avc: denied { write } for pid=11696 comm="syz.1.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 617.391530][ T30] audit: type=1400 audit(1756980860.213:706): avc: denied { nlmsg_write } for pid=11696 comm="syz.1.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 617.489553][T11698] Invalid source name [ 618.319778][T11716] TC_ACT_REPEAT abuse ? [ 618.324965][T11716] TC_ACT_REPEAT abuse ? [ 618.329365][T11716] TC_ACT_REPEAT abuse ? [ 618.335668][T11716] TC_ACT_REPEAT abuse ? [ 618.340515][T11716] TC_ACT_REPEAT abuse ? [ 618.346351][T11716] TC_ACT_REPEAT abuse ? [ 618.355175][T11716] TC_ACT_REPEAT abuse ? [ 618.366430][T11716] TC_ACT_REPEAT abuse ? [ 618.371723][T11716] TC_ACT_REPEAT abuse ? [ 618.554218][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 618.618850][T11719] lo speed is unknown, defaulting to 1000 [ 618.783058][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 618.963445][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 619.124136][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 619.171087][T11723] net_ratelimit: 95 callbacks suppressed [ 619.171107][T11723] TC_ACT_REPEAT abuse ? [ 619.181692][ C1] TC_ACT_REPEAT abuse ? [ 619.202820][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.243353][ T24] usb 1-1: Product: syz [ 619.258079][ T24] usb 1-1: Manufacturer: syz [ 619.278387][ T24] usb 1-1: SerialNumber: syz [ 619.285018][T11723] TC_ACT_REPEAT abuse ? [ 619.354882][T11724] TC_ACT_REPEAT abuse ? [ 619.381567][ T5995] TC_ACT_REPEAT abuse ? [ 619.400167][T11722] TC_ACT_REPEAT abuse ? [ 619.420437][ T5995] TC_ACT_REPEAT abuse ? [ 619.446250][T11722] TC_ACT_REPEAT abuse ? [ 619.485877][ T24] usb 1-1: config 0 descriptor?? [ 619.689923][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 619.740683][ T24] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 620.495975][T11733] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 620.601502][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 621.052353][ T24] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 621.084509][ T24] em28xx 1-1:0.0: board has no eeprom [ 621.244658][T11737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.357262][ T30] audit: type=1400 audit(1756980864.163:707): avc: denied { create } for pid=11734 comm="syz.1.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 621.530136][T11742] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 621.612966][T11390] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 621.622394][T11734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.774494][T11390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 621.785780][T11390] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 621.795018][T11390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.805629][T11390] usb 4-1: config 0 descriptor?? [ 622.227087][T11390] logitech 0003:046D:CA03.0020: unbalanced delimiter at end of report description [ 622.241460][T11390] logitech 0003:046D:CA03.0020: parse failed [ 622.249968][T11390] logitech 0003:046D:CA03.0020: probe with driver logitech failed with error -22 [ 622.448545][T11390] usb 4-1: USB disconnect, device number 40 [ 622.476897][T11741] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 622.533221][ T24] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 622.541159][ T24] em28xx 1-1:0.0: dvb set to bulk mode. [ 622.595271][ T5995] em28xx 1-1:0.0: Binding DVB extension [ 622.900722][ T24] usb 1-1: USB disconnect, device number 30 [ 622.936432][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 622.954288][ T5995] em28xx 1-1:0.0: Registering input extension [ 622.966522][ T24] em28xx 1-1:0.0: Closing input extension [ 623.038036][ T24] em28xx 1-1:0.0: Freeing device [ 623.731389][ T5933] TC_ACT_REPEAT abuse ? [ 623.797658][T11753] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 624.173632][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.180010][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.392949][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 624.553213][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 624.563528][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.575387][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 624.604321][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 624.629081][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.657003][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 624.674709][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.181423][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 625.187130][ T24] usbtmc 1-1:16.0: can't read capabilities [ 625.382392][T11766] FAULT_INJECTION: forcing a failure. [ 625.382392][T11766] name failslab, interval 1, probability 0, space 0, times 0 [ 625.395342][T11766] CPU: 1 UID: 0 PID: 11766 Comm: syz.0.1378 Not tainted syzkaller #0 PREEMPT(full) [ 625.395371][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.395383][T11766] Call Trace: [ 625.395390][T11766] [ 625.395398][T11766] dump_stack_lvl+0x16c/0x1f0 [ 625.395425][T11766] should_fail_ex+0x512/0x640 [ 625.395447][T11766] ? fs_reclaim_acquire+0xae/0x150 [ 625.395475][T11766] ? tomoyo_encode2+0x100/0x3e0 [ 625.395502][T11766] should_failslab+0xc2/0x120 [ 625.395524][T11766] __kmalloc_noprof+0xd2/0x510 [ 625.395544][T11766] ? d_absolute_path+0x136/0x1a0 [ 625.395578][T11766] tomoyo_encode2+0x100/0x3e0 [ 625.395609][T11766] tomoyo_encode+0x29/0x50 [ 625.395635][T11766] tomoyo_realpath_from_path+0x18f/0x6e0 [ 625.395672][T11766] tomoyo_path_number_perm+0x245/0x580 [ 625.395695][T11766] ? tomoyo_path_number_perm+0x237/0x580 [ 625.395723][T11766] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 625.395749][T11766] ? find_held_lock+0x2b/0x80 [ 625.395803][T11766] ? find_held_lock+0x2b/0x80 [ 625.395826][T11766] ? hook_file_ioctl_common+0x145/0x410 [ 625.395853][T11766] ? __fget_files+0x20e/0x3c0 [ 625.395881][T11766] security_file_ioctl+0x9b/0x240 [ 625.395909][T11766] __x64_sys_ioctl+0xb7/0x210 [ 625.395940][T11766] do_syscall_64+0xcd/0x4c0 [ 625.395966][T11766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.395986][T11766] RIP: 0033:0x7f8fcc58ebe9 [ 625.396002][T11766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.396021][T11766] RSP: 002b:00007f8fcd4a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.396042][T11766] RAX: ffffffffffffffda RBX: 00007f8fcc7c5fa0 RCX: 00007f8fcc58ebe9 [ 625.396055][T11766] RDX: 00002000000000c0 RSI: 00000000c0145b0e RDI: 0000000000000004 [ 625.396068][T11766] RBP: 00007f8fcd4a3090 R08: 0000000000000000 R09: 0000000000000000 [ 625.396080][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.396092][T11766] R13: 00007f8fcc7c6038 R14: 00007f8fcc7c5fa0 R15: 00007ffcc9880d88 [ 625.396121][T11766] [ 625.396141][T11766] ERROR: Out of memory at tomoyo_realpath_from_path. [ 625.659084][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.671219][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.682191][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.691288][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.700366][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.709441][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.727269][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.746485][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.760087][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.769173][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.778233][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.787296][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.796351][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.805410][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.814467][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.823521][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.832622][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.844787][ T24] usb 1-1: USB disconnect, device number 31 [ 626.425460][ T30] audit: type=1400 audit(1756980869.353:708): avc: denied { bind } for pid=11780 comm="syz.3.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 626.437061][T11782] TC_ACT_REPEAT abuse ? [ 626.445100][ T30] audit: type=1400 audit(1756980869.353:709): avc: denied { node_bind } for pid=11780 comm="syz.3.1382" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 626.449646][T11782] TC_ACT_REPEAT abuse ? [ 626.479886][T11782] TC_ACT_REPEAT abuse ? [ 626.484397][T11782] TC_ACT_REPEAT abuse ? [ 626.556639][T11782] TC_ACT_REPEAT abuse ? [ 626.575079][T11782] TC_ACT_REPEAT abuse ? [ 626.580272][T11782] TC_ACT_REPEAT abuse ? [ 626.589400][T11782] TC_ACT_REPEAT abuse ? [ 626.607687][T11782] TC_ACT_REPEAT abuse ? [ 626.612963][T11782] TC_ACT_REPEAT abuse ? [ 627.042084][ T30] audit: type=1400 audit(1756980869.963:710): avc: denied { create } for pid=11780 comm="syz.3.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 627.297611][ T30] audit: type=1400 audit(1756980869.963:711): avc: denied { ioctl } for pid=11780 comm="syz.3.1382" path="socket:[32373]" dev="sockfs" ino=32373 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 627.513772][T11792] FAULT_INJECTION: forcing a failure. [ 627.513772][T11792] name failslab, interval 1, probability 0, space 0, times 0 [ 627.526554][T11792] CPU: 1 UID: 0 PID: 11792 Comm: syz.3.1384 Not tainted syzkaller #0 PREEMPT(full) [ 627.526573][T11792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.526580][T11792] Call Trace: [ 627.526585][T11792] [ 627.526591][T11792] dump_stack_lvl+0x16c/0x1f0 [ 627.526609][T11792] should_fail_ex+0x512/0x640 [ 627.526623][T11792] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 627.526638][T11792] should_failslab+0xc2/0x120 [ 627.526651][T11792] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 627.526664][T11792] ? __alloc_skb+0x2b2/0x380 [ 627.526676][T11792] ? avc_has_perm+0x144/0x1f0 [ 627.526689][T11792] __alloc_skb+0x2b2/0x380 [ 627.526700][T11792] ? __pfx___alloc_skb+0x10/0x10 [ 627.526711][T11792] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 627.526726][T11792] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 627.526745][T11792] netlink_alloc_large_skb+0x69/0x130 [ 627.526760][T11792] netlink_sendmsg+0x6a1/0xdd0 [ 627.526781][T11792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.526801][T11792] ____sys_sendmsg+0xa95/0xc70 [ 627.526816][T11792] ? copy_msghdr_from_user+0x10a/0x160 [ 627.526829][T11792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.526851][T11792] ___sys_sendmsg+0x134/0x1d0 [ 627.526864][T11792] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.526896][T11792] __sys_sendmsg+0x16d/0x220 [ 627.526908][T11792] ? __pfx___sys_sendmsg+0x10/0x10 [ 627.526931][T11792] do_syscall_64+0xcd/0x4c0 [ 627.526946][T11792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.526958][T11792] RIP: 0033:0x7f6c8718ebe9 [ 627.526968][T11792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.526979][T11792] RSP: 002b:00007f6c87ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.526992][T11792] RAX: ffffffffffffffda RBX: 00007f6c873c5fa0 RCX: 00007f6c8718ebe9 [ 627.526999][T11792] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 627.527006][T11792] RBP: 00007f6c87ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 627.527013][T11792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.527019][T11792] R13: 00007f6c873c6038 R14: 00007f6c873c5fa0 R15: 00007ffed24fd6a8 [ 627.527034][T11792] [ 628.002731][T11796] netlink: 'syz.0.1386': attribute type 10 has an invalid length. [ 628.021975][T11796] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 628.095259][T11390] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 628.263179][T11390] usb 4-1: Using ep0 maxpacket: 8 [ 628.269486][T11390] usb 4-1: config 0 interface 0 has no altsetting 0 [ 628.277800][T11390] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 628.286890][T11390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.295218][T11390] usb 4-1: Product: syz [ 628.299501][T11390] usb 4-1: Manufacturer: syz [ 628.304279][T11390] usb 4-1: SerialNumber: syz [ 628.311338][T11390] usb 4-1: config 0 descriptor?? [ 628.333527][T11390] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 628.540890][T11390] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 628.551319][T11390] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 628.742360][T11390] usb 4-1: USB disconnect, device number 41 [ 629.061389][T11803] ubi0: attaching mtd0 [ 629.067616][T11803] ubi0: scanning is finished [ 629.156559][T11803] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 629.164350][T11803] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 629.171674][T11803] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 629.182560][T11803] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 629.191608][T11803] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 629.202466][T11803] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 629.210721][T11803] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2661352680 [ 629.226181][T11803] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 629.238863][T11805] ubi0: background thread "ubi_bgt0d" started, PID 11805 [ 629.249465][T11804] ubi0: detaching mtd0 [ 629.294331][T11804] ubi0: mtd0 is detached [ 629.406480][T11811] FAULT_INJECTION: forcing a failure. [ 629.406480][T11811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.424295][T11811] CPU: 0 UID: 0 PID: 11811 Comm: syz.0.1390 Not tainted syzkaller #0 PREEMPT(full) [ 629.424325][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.424337][T11811] Call Trace: [ 629.424343][T11811] [ 629.424352][T11811] dump_stack_lvl+0x16c/0x1f0 [ 629.424381][T11811] should_fail_ex+0x512/0x640 [ 629.424408][T11811] _copy_from_user+0x2e/0xd0 [ 629.424435][T11811] move_addr_to_kernel+0x65/0x170 [ 629.424464][T11811] __copy_msghdr+0x386/0x470 [ 629.424486][T11811] copy_msghdr_from_user+0xc1/0x160 [ 629.424506][T11811] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 629.424543][T11811] ___sys_sendmsg+0xfe/0x1d0 [ 629.424566][T11811] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.424622][T11811] __sys_sendmsg+0x16d/0x220 [ 629.424644][T11811] ? __pfx___sys_sendmsg+0x10/0x10 [ 629.424687][T11811] do_syscall_64+0xcd/0x4c0 [ 629.424712][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.424732][T11811] RIP: 0033:0x7f8fcc58ebe9 [ 629.424748][T11811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.424767][T11811] RSP: 002b:00007f8fcd4a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.424787][T11811] RAX: ffffffffffffffda RBX: 00007f8fcc7c5fa0 RCX: 00007f8fcc58ebe9 [ 629.424801][T11811] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 629.424812][T11811] RBP: 00007f8fcd4a3090 R08: 0000000000000000 R09: 0000000000000000 [ 629.424824][T11811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.424836][T11811] R13: 00007f8fcc7c6038 R14: 00007f8fcc7c5fa0 R15: 00007ffcc9880d88 [ 629.424864][T11811] [ 629.597804][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.036594][ T30] audit: type=1400 audit(1756980872.963:712): avc: denied { write } for pid=11813 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 630.577389][T11823] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 632.622980][T11390] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 632.787135][T11390] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.807258][T11390] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.827484][T11390] usb 4-1: config 0 interface 0 has no altsetting 0 [ 632.836304][T11390] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 632.847141][T11390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.865641][T11390] usb 4-1: config 0 descriptor?? [ 632.873292][ C1] net_ratelimit: 1016 callbacks suppressed [ 632.873306][ C1] TC_ACT_REPEAT abuse ? [ 632.884006][ C1] TC_ACT_REPEAT abuse ? [ 632.888630][ C1] TC_ACT_REPEAT abuse ? [ 632.893118][ C1] TC_ACT_REPEAT abuse ? [ 632.897551][ C1] TC_ACT_REPEAT abuse ? [ 632.901946][ C1] TC_ACT_REPEAT abuse ? [ 632.906366][ C1] TC_ACT_REPEAT abuse ? [ 632.910759][ C1] TC_ACT_REPEAT abuse ? [ 632.915178][ C1] TC_ACT_REPEAT abuse ? [ 632.919553][ C1] TC_ACT_REPEAT abuse ? [ 633.462263][T11390] uclogic 0003:5543:0005.0021: item 0 2 0 8 parsing failed [ 633.478966][T11390] uclogic 0003:5543:0005.0021: parse failed [ 633.497022][T11390] uclogic 0003:5543:0005.0021: probe with driver uclogic failed with error -22 [ 633.510762][T11390] usb 4-1: USB disconnect, device number 42 [ 633.751058][T11841] lo speed is unknown, defaulting to 1000 [ 635.071380][ T5932] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 635.195906][T11850] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 635.203796][T11850] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1399'. [ 635.595783][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 635.608753][ T5932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 635.617207][ T5932] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 635.626558][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.635662][ T5932] usb 4-1: Product: syz [ 635.639856][ T5932] usb 4-1: Manufacturer: syz [ 635.644602][ T5932] usb 4-1: SerialNumber: syz [ 635.651933][ T5932] usb 4-1: config 0 descriptor?? [ 635.660011][ T5932] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 635.868592][ T5932] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 635.878313][ T5932] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 636.015223][T11855] IPVS: length: 24 != 792 [ 636.068698][ T9874] usb 4-1: USB disconnect, device number 43 [ 636.648295][T11857] overlayfs: missing 'lowerdir' [ 636.916157][T11859] overlayfs: missing 'lowerdir' [ 638.726635][T11879] lo speed is unknown, defaulting to 1000 [ 639.372951][ T5933] net_ratelimit: 101 callbacks suppressed [ 639.372970][ T5933] TC_ACT_REPEAT abuse ? [ 639.383334][ C0] TC_ACT_REPEAT abuse ? [ 642.228725][T11899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1411'. [ 643.887715][ T30] audit: type=1400 audit(1756980886.813:713): avc: denied { name_bind } for pid=11904 comm="syz.0.1413" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 643.938874][ T30] audit: type=1400 audit(1756980886.863:714): avc: denied { setopt } for pid=11910 comm="syz.3.1415" lport=45729 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 644.083519][T11914] FAULT_INJECTION: forcing a failure. [ 644.083519][T11914] name failslab, interval 1, probability 0, space 0, times 0 [ 644.097029][T11914] CPU: 1 UID: 0 PID: 11914 Comm: syz.3.1416 Not tainted syzkaller #0 PREEMPT(full) [ 644.097058][T11914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.097071][T11914] Call Trace: [ 644.097078][T11914] [ 644.097085][T11914] dump_stack_lvl+0x16c/0x1f0 [ 644.097112][T11914] should_fail_ex+0x512/0x640 [ 644.097132][T11914] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 644.097155][T11914] should_failslab+0xc2/0x120 [ 644.097178][T11914] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 644.097199][T11914] ? __alloc_skb+0x2b2/0x380 [ 644.097219][T11914] ? avc_has_perm+0x144/0x1f0 [ 644.097242][T11914] __alloc_skb+0x2b2/0x380 [ 644.097262][T11914] ? __pfx___alloc_skb+0x10/0x10 [ 644.097280][T11914] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 644.097306][T11914] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 644.097341][T11914] netlink_alloc_large_skb+0x69/0x130 [ 644.097367][T11914] netlink_sendmsg+0x6a1/0xdd0 [ 644.097396][T11914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.097430][T11914] ____sys_sendmsg+0xa95/0xc70 [ 644.097457][T11914] ? copy_msghdr_from_user+0x10a/0x160 [ 644.097478][T11914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.097519][T11914] ___sys_sendmsg+0x134/0x1d0 [ 644.097549][T11914] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.097610][T11914] __sys_sendmsg+0x16d/0x220 [ 644.097635][T11914] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.097677][T11914] do_syscall_64+0xcd/0x4c0 [ 644.097702][T11914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.097722][T11914] RIP: 0033:0x7f6c8718ebe9 [ 644.097738][T11914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.097757][T11914] RSP: 002b:00007f6c87ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.097778][T11914] RAX: ffffffffffffffda RBX: 00007f6c873c5fa0 RCX: 00007f6c8718ebe9 [ 644.097792][T11914] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 644.097804][T11914] RBP: 00007f6c87ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 644.097816][T11914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.097827][T11914] R13: 00007f6c873c6038 R14: 00007f6c873c5fa0 R15: 00007ffed24fd6a8 [ 644.097857][T11914] [ 644.637329][ T9532] TC_ACT_REPEAT abuse ? [ 644.641769][ C1] TC_ACT_REPEAT abuse ? [ 647.682339][T11949] overlay: Bad value for 'workdir' [ 647.723002][ T5912] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 647.837781][ T30] audit: type=1400 audit(1756980890.763:715): avc: denied { mount } for pid=11950 comm="syz.0.1426" name="/" dev="rpc_pipefs" ino=33158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 647.964871][T11952] FAT-fs (nullb0): bogus number of reserved sectors [ 647.971831][T11952] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 647.983240][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 648.030726][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 648.045610][ T5912] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 648.061200][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.081804][ T5912] usb 4-1: Product: syz [ 648.087279][ T5912] usb 4-1: Manufacturer: syz [ 648.091937][ T5912] usb 4-1: SerialNumber: syz [ 648.124193][ T5912] usb 4-1: config 0 descriptor?? [ 648.183518][ T5912] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 648.214349][ T30] audit: type=1400 audit(1756980891.143:716): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 648.361743][ T5912] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 648.377089][ T5912] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 648.390654][ T30] audit: type=1400 audit(1756980891.313:717): avc: denied { bind } for pid=11954 comm="syz.0.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 648.418229][T11957] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1427'. [ 648.434594][T11957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1427'. [ 648.445891][T11957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1427'. [ 648.469639][ T30] audit: type=1400 audit(1756980891.393:718): avc: denied { read write } for pid=11954 comm="syz.0.1427" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 648.504099][T11957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 648.521388][ T30] audit: type=1400 audit(1756980891.423:719): avc: denied { open } for pid=11954 comm="syz.0.1427" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 648.562171][ T5933] usb 4-1: USB disconnect, device number 44 [ 650.033664][T11968] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 650.041478][T11968] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1430'. [ 650.416114][ T1097] TC_ACT_REPEAT abuse ? [ 650.420578][ C1] TC_ACT_REPEAT abuse ? [ 650.887471][T11972] IPv6: Can't replace route, no match found [ 650.897543][T11972] cgroup: No subsys list or none specified [ 651.692068][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 651.913946][ T30] audit: type=1400 audit(1756980894.833:720): avc: denied { setopt } for pid=11981 comm="syz.3.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 652.169189][T11986] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 653.003377][ T30] audit: type=1400 audit(1756980895.923:721): avc: denied { ioctl } for pid=11990 comm="syz.3.1436" path="socket:[33231]" dev="sockfs" ino=33231 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 654.496185][T12007] TC_ACT_REPEAT abuse ? [ 654.500753][ C0] TC_ACT_REPEAT abuse ? [ 654.515343][T12007] TC_ACT_REPEAT abuse ? [ 654.523043][ T5850] TC_ACT_REPEAT abuse ? [ 654.528528][ T5850] TC_ACT_REPEAT abuse ? [ 654.534254][ T5850] TC_ACT_REPEAT abuse ? [ 654.539201][ T5850] TC_ACT_REPEAT abuse ? [ 655.188947][T12010] block nbd3: Attempted send on invalid socket [ 655.195528][T12010] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 655.215876][T12010] hfsplus: unable to find HFS+ superblock [ 656.155037][ T6633] TC_ACT_REPEAT abuse ? [ 656.159475][ C0] TC_ACT_REPEAT abuse ? [ 656.321461][T12003] TC_ACT_REPEAT abuse ? [ 656.326114][ T5850] TC_ACT_REPEAT abuse ? [ 656.352127][T12003] TC_ACT_REPEAT abuse ? [ 656.510264][ T30] audit: type=1400 audit(1756980899.433:722): avc: denied { setopt } for pid=12021 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 656.571555][ T30] audit: type=1400 audit(1756980899.493:723): avc: denied { mount } for pid=12024 comm="syz.3.1443" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 658.778849][T12047] lo speed is unknown, defaulting to 1000 [ 659.355903][ T31] INFO: task kworker/0:8:5994 blocked for more than 143 seconds. [ 659.376221][ T31] Not tainted syzkaller #0 [ 659.425589][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 659.486407][ T31] task:kworker/0:8 state:D stack:22312 pid:5994 tgid:5994 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 659.524786][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 659.545828][ T31] Call Trace: [ 659.552010][ T31] [ 659.566306][ T31] __schedule+0x1190/0x5de0 [ 659.587917][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 659.642424][ T31] ? find_held_lock+0x2b/0x80 [ 659.651241][ T30] audit: type=1400 audit(1756980902.483:724): avc: denied { write } for pid=5833 comm="syz-executor" path="pipe:[3961]" dev="pipefs" ino=3961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 659.674411][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.188597][ T31] ? schedule+0x2d7/0x3a0 [ 660.198532][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 660.205002][ T31] schedule+0xe7/0x3a0 [ 660.210642][ T31] schedule_preempt_disabled+0x13/0x30 [ 660.216232][ T31] __mutex_lock+0x81b/0x1060 [ 660.220859][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 660.233068][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 660.238124][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 660.243200][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 660.272934][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 660.281324][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 660.287581][ T31] process_one_work+0x9cc/0x1b70 [ 660.292634][ T31] ? __pfx_process_one_work+0x10/0x10 [ 660.298059][ T31] ? assign_work+0x1a0/0x250 [ 660.302746][ T31] worker_thread+0x6c8/0xf10 [ 660.307439][ T31] ? __kthread_parkme+0x19e/0x250 [ 660.312506][ T31] ? __pfx_worker_thread+0x10/0x10 [ 660.317733][ T31] kthread+0x3c2/0x780 [ 660.321812][ T31] ? __pfx_kthread+0x10/0x10 [ 660.356021][ T31] ? rcu_is_watching+0x12/0xc0 [ 660.360839][ T31] ? __pfx_kthread+0x10/0x10 [ 660.365511][ T31] ret_from_fork+0x5d4/0x6f0 [ 660.370108][ T31] ? __pfx_kthread+0x10/0x10 [ 660.374958][ T31] ret_from_fork_asm+0x1a/0x30 [ 660.379739][ T31] [ 660.382775][ T31] INFO: task syz.4.1090:10609 blocked for more than 144 seconds. [ 660.391503][ T31] Not tainted syzkaller #0 [ 660.396494][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.405196][ T31] task:syz.4.1090 state:D stack:26264 pid:10609 tgid:10609 ppid:6088 task_flags:0x400040 flags:0x00004006 [ 660.417181][ T31] Call Trace: [ 660.420455][ T31] [ 660.423416][ T31] __schedule+0x1190/0x5de0 [ 660.427930][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 660.432915][ T31] ? __pfx___schedule+0x10/0x10 [ 660.437760][ T31] ? find_held_lock+0x2b/0x80 [ 660.442504][ T31] ? schedule+0x2d7/0x3a0 [ 660.446858][ T31] ? rfkill_unregister+0xec/0x2c0 [ 660.451885][ T31] schedule+0xe7/0x3a0 [ 660.456006][ T31] schedule_preempt_disabled+0x13/0x30 [ 660.461466][ T31] __mutex_lock+0x81b/0x1060 [ 660.466070][ T31] ? class_to_subsys+0x10f/0x160 [ 660.471009][ T31] ? rfkill_unregister+0xec/0x2c0 [ 660.476185][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 660.481316][ T31] ? device_del+0x6b6/0x9f0 [ 660.485965][ T31] ? __pfx_device_del+0x10/0x10 [ 660.490815][ T31] ? rfkill_unregister+0xec/0x2c0 [ 660.495866][ T31] rfkill_unregister+0xec/0x2c0 [ 660.500721][ T31] nfc_unregister_device+0x94/0x330 [ 660.505981][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 660.511703][ T31] virtual_ncidev_close+0x4b/0xa0 [ 660.516765][ T31] __fput+0x3ff/0xb70 [ 660.520732][ T31] task_work_run+0x150/0x240 [ 660.525332][ T31] ? __pfx_task_work_run+0x10/0x10 [ 660.530426][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 660.536166][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 660.541456][ T31] do_syscall_64+0x3f6/0x4c0 [ 660.546079][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.551949][ T31] RIP: 0033:0x7f0d0bd8ebe9 [ 660.556487][ T31] RSP: 002b:00007fff8235aa38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 660.564957][ T31] RAX: 0000000000000000 RBX: 00007f0d0bfc7da0 RCX: 00007f0d0bd8ebe9 [ 660.572970][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 660.580961][ T31] RBP: 00007f0d0bfc7da0 R08: 0000000000000204 R09: 0000001e8235ad2f [ 660.588960][ T31] R10: 00007f0d0bfc7cb0 R11: 0000000000000246 R12: 000000000007b2a5 [ 660.597088][ T31] R13: 00007f0d0bfc6090 R14: ffffffffffffffff R15: 00007fff8235ab50 [ 660.605117][ T31] [ 660.608146][ T31] INFO: task syz.4.1090:10612 blocked for more than 144 seconds. [ 660.616115][ T31] Not tainted syzkaller #0 [ 660.621095][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.642971][ T31] task:syz.4.1090 state:D stack:25376 pid:10612 tgid:10609 ppid:6088 task_flags:0x400140 flags:0x00004006 [ 660.662951][ T31] Call Trace: [ 660.666270][ T31] [ 660.669200][ T31] __schedule+0x1190/0x5de0 [ 660.681948][ T31] ? __pfx___schedule+0x10/0x10 [ 660.687004][ T31] ? find_held_lock+0x2b/0x80 [ 660.691704][ T31] ? schedule+0x2d7/0x3a0 [ 660.698902][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 660.703722][ T31] schedule+0xe7/0x3a0 [ 660.707806][ T31] schedule_preempt_disabled+0x13/0x30 [ 660.723131][ T31] __mutex_lock+0x81b/0x1060 [ 660.729029][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 660.733695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 660.738744][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 660.745723][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 660.750339][ T31] ? mark_held_locks+0x49/0x80 [ 660.755184][ T31] nfc_dev_down+0x2d/0x2e0 [ 660.759621][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 660.764693][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 660.770445][ T31] rfkill_set_block+0x1fb/0x550 [ 660.775357][ T31] rfkill_fop_write+0x2c0/0x580 [ 660.780233][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 660.785682][ T31] ? bpf_lsm_inode_getlsmprop+0x10/0x10 [ 660.791256][ T31] ? security_file_permission+0x71/0x210 [ 660.796949][ T31] ? rw_verify_area+0xcf/0x6c0 [ 660.801732][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 660.807230][ T31] vfs_write+0x29d/0x11d0 [ 660.811579][ T31] ? __pfx_vfs_write+0x10/0x10 [ 660.821217][ T31] ? find_held_lock+0x2b/0x80 [ 660.826067][ T31] ? __fget_files+0x204/0x3c0 [ 660.830762][ T31] ? __fget_files+0x20e/0x3c0 [ 660.841548][ T31] ksys_write+0x1f8/0x250 [ 660.847190][ T31] ? __pfx_ksys_write+0x10/0x10 [ 660.852060][ T31] ? anon_inode_getfd+0x81/0xb0 [ 660.859988][ T31] do_syscall_64+0xcd/0x4c0 [ 660.864558][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.870445][ T31] RIP: 0033:0x7f0d0bd8ebe9 [ 660.875032][ T31] RSP: 002b:00007f0d0cbec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 660.883515][ T31] RAX: ffffffffffffffda RBX: 00007f0d0bfc5fa0 RCX: 00007f0d0bd8ebe9 [ 660.891492][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000f [ 660.901253][ T31] RBP: 00007f0d0be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 660.909309][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.917302][ T31] R13: 00007f0d0bfc6038 R14: 00007f0d0bfc5fa0 R15: 00007fff8235a8d8 [ 660.925534][ T31] [ 660.952212][ T31] [ 660.952212][ T31] Showing all locks held in the system: [ 660.975654][ T31] 1 lock held by khungtaskd/31: [ 660.981281][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 660.993648][ T31] 4 locks held by kworker/u8:3/49: [ 660.998765][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 661.009221][ T31] #1: ffffc90000b97d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 661.020024][ T31] #2: ffffffff9036dd90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 661.029399][ T31] #3: ffffffff8e5cc6c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 661.039483][ T31] 2 locks held by getty/5610: [ 661.044170][ T31] #0: ffff88803604d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 661.054076][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 661.064294][ T31] 1 lock held by syz-executor/5844: [ 661.069483][ T31] #0: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 661.079647][ T31] 3 locks held by kworker/0:8/5994: [ 661.084845][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 661.095391][ T31] #1: ffffc9000424fd10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 661.108352][ T31] #2: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 661.119821][ T31] 1 lock held by syz.1.402/7798: [ 661.126502][ T31] #0: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 661.136708][ T31] 2 locks held by syz.4.1090/10609: [ 661.141921][ T31] #0: ffff8880309ad100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 661.151702][ T31] #1: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 661.161830][ T31] 2 locks held by syz.4.1090/10612: [ 661.167034][ T31] #0: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 [ 661.177177][ T31] #1: ffff8880309ad100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 661.186206][ T31] 2 locks held by syz-executor/10786: [ 661.191569][ T31] #0: ffff888072073918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 661.200976][ T31] #1: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 661.210944][ T31] 2 locks held by syz.2.1206/11096: [ 661.216161][ T31] #0: ffff88807a50a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 661.225946][ T31] #1: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 661.235942][ T31] 2 locks held by syz.2.1206/11098: [ 661.241153][ T31] #0: ffff88807a50a1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: __tty_hangup.part.0+0xda/0x8c0 [ 661.251360][ T31] #1: ffff88807a50a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x65/0xb0 [ 661.260830][ T31] 2 locks held by syz-executor/11265: [ 661.266228][ T31] #0: ffff888078567918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 661.275871][ T31] #1: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 661.289303][ T31] 2 locks held by syz-executor/11371: [ 661.294711][ T31] #0: ffff88805caf1118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 661.304131][ T31] #1: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 661.314199][ T31] 2 locks held by syz-executor/11807: [ 661.319561][ T31] #0: ffff88805c75d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 661.328985][ T31] #1: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 661.338937][ T31] 2 locks held by syz-executor/11883: [ 661.344353][ T31] #0: ffff88803533e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 661.358239][ T31] #1: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 661.368248][ T31] 2 locks held by syz-executor/11893: [ 661.373639][ T31] #0: ffff888059e34918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 661.383094][ T31] #1: ffffffff90821028 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 661.393092][ T31] 1 lock held by syz.0.1449/12053: [ 661.398176][ T31] #0: ffffffff8e5cc7f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 661.408291][ T31] [ 661.416447][ T31] ============================================= [ 661.416447][ T31] [ 661.447013][ T31] NMI backtrace for cpu 1 [ 661.447033][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 661.447054][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.447065][ T31] Call Trace: [ 661.447071][ T31] [ 661.447084][ T31] dump_stack_lvl+0x116/0x1f0 [ 661.447103][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 661.447120][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 661.447140][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 661.447158][ T31] watchdog+0xf0e/0x1260 [ 661.447174][ T31] ? __pfx_watchdog+0x10/0x10 [ 661.447185][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 661.447199][ T31] ? __kthread_parkme+0x19e/0x250 [ 661.447216][ T31] ? __pfx_watchdog+0x10/0x10 [ 661.447228][ T31] kthread+0x3c2/0x780 [ 661.447239][ T31] ? __pfx_kthread+0x10/0x10 [ 661.447251][ T31] ? rcu_is_watching+0x12/0xc0 [ 661.447266][ T31] ? __pfx_kthread+0x10/0x10 [ 661.447277][ T31] ret_from_fork+0x5d4/0x6f0 [ 661.447288][ T31] ? __pfx_kthread+0x10/0x10 [ 661.447299][ T31] ret_from_fork_asm+0x1a/0x30 [ 661.447321][ T31] [ 661.447330][ T31] Sending NMI from CPU 1 to CPUs 0: [ 661.562852][ C0] NMI backtrace for cpu 0 [ 661.562869][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 661.562889][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.562900][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 661.562923][ C0] Code: 0c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 03 16 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 661.562941][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 661.562957][ C0] RAX: 000000000270741b RBX: 0000000000000000 RCX: ffffffff8b940c29 [ 661.562968][ C0] RDX: 0000000000000000 RSI: ffffffff8de513c8 RDI: ffffffff8c162b00 [ 661.562979][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 661.562990][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 661.563002][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab5c90 R15: 0000000000000000 [ 661.563013][ C0] FS: 0000000000000000(0000) GS:ffff8881246b8000(0000) knlGS:0000000000000000 [ 661.563030][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.563041][ C0] CR2: 00007f9bc034a6b0 CR3: 000000000e380000 CR4: 00000000003526f0 [ 661.563052][ C0] Call Trace: [ 661.563058][ C0] [ 661.563064][ C0] default_idle+0x13/0x20 [ 661.563084][ C0] default_idle_call+0x6d/0xb0 [ 661.563105][ C0] do_idle+0x391/0x510 [ 661.563128][ C0] ? __pfx_do_idle+0x10/0x10 [ 661.563148][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 661.563170][ C0] cpu_startup_entry+0x4f/0x60 [ 661.563191][ C0] rest_init+0x16b/0x2b0 [ 661.563211][ C0] ? acpi_subsystem_init+0x133/0x180 [ 661.563228][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 661.563248][ C0] start_kernel+0x3ee/0x4d0 [ 661.563266][ C0] x86_64_start_reservations+0x18/0x30 [ 661.563283][ C0] x86_64_start_kernel+0x130/0x190 [ 661.563301][ C0] common_startup_64+0x13e/0x148 [ 661.563333][ C0] [ 661.565936][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 661.565953][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 661.565977][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.565989][ T31] Call Trace: [ 661.565995][ T31] [ 661.566003][ T31] dump_stack_lvl+0x3d/0x1f0 [ 661.566030][ T31] vpanic+0x6e8/0x7a0 [ 661.566060][ T31] ? __pfx_vpanic+0x10/0x10 [ 661.566098][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 661.566126][ T31] panic+0xca/0xd0 [ 661.566152][ T31] ? __pfx_panic+0x10/0x10 [ 661.566180][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 661.566211][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 661.566241][ T31] ? watchdog+0xd78/0x1260 [ 661.566262][ T31] ? watchdog+0xd6b/0x1260 [ 661.566284][ T31] watchdog+0xd89/0x1260 [ 661.566310][ T31] ? __pfx_watchdog+0x10/0x10 [ 661.566329][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 661.566352][ T31] ? __kthread_parkme+0x19e/0x250 [ 661.566380][ T31] ? __pfx_watchdog+0x10/0x10 [ 661.566402][ T31] kthread+0x3c2/0x780 [ 661.566423][ T31] ? __pfx_kthread+0x10/0x10 [ 661.566444][ T31] ? rcu_is_watching+0x12/0xc0 [ 661.566468][ T31] ? __pfx_kthread+0x10/0x10 [ 661.566489][ T31] ret_from_fork+0x5d4/0x6f0 [ 661.566507][ T31] ? __pfx_kthread+0x10/0x10 [ 661.566527][ T31] ret_from_fork_asm+0x1a/0x30 [ 661.566563][ T31] [ 661.889901][ T31] Kernel Offset: disabled [ 661.894202][ T31] Rebooting in 86400 seconds..