last executing test programs: 14m35.906377377s ago: executing program 0 (id=1582): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) setitimer(0x1, &(0x7f0000000080)={{0xfffffffffffffff5, 0x8876}, {0x80000, 0x8}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x4100, &(0x7f0000000240)={@_ha_fsid={[0xfffffffd, 0x4]}, {0x2, 0xac1, 0x0, 0xc}}, 0x7fffffff, &(0x7f0000000280), &(0x7f00000002c0)=0xe}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) lseek(r1, 0x80000, 0x4) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000940)='memory.events\x00', 0x26e1, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f00000080c0)=[{&(0x7f0000006f40)="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", 0xf9a}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000906010400000000000000000a0000090800094000010001100008800c0007800800024033f5e2f5"], 0x2c}, 0x1, 0x0, 0x0, 0x44014}, 0x4040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x2}}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) utimes(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {r4, r5/1000+60000}}) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f00000001c0)={0x1, 0x1}) close(r2) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000380)={0x3d}, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 14m32.909028293s ago: executing program 0 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a0008615000008009f000d000000080026000816"], 0x40}}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r5 = fsmount(0xffffffffffffffff, 0x1, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf25140000000c0007800800020000ea"], 0x20}}, 0x80) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1ced3d1fdcd4a2ca91715ffb152dca3e83cf9a2aa927e2248e1c7ea89adea628fe91935fc7142623f45d755ed4c4ac57998dc4ceb10c3769d", @ANYRES16=r7, @ANYBLOB="04002bbd7000fcdbdf25120000006c00058008000100756470001c0002800800010000000000080001000c00000008000300020000003c000280080004007619b8450800040006000000080001000a000000080004000700000008000100140000000800010004000000080003000500000008000100657468001400098008000200ca0000000800020005000000100004800c00078008000400be21de02"], 0xa4}, 0x1, 0x0, 0x0, 0x4800}, 0x850) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 14m32.143260424s ago: executing program 0 (id=1595): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0xa, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0xe2165a6116e4aaf6, {0x42, 0x4, 0x4}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7003f00) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="100000001a00", @ANYRES32, @ANYBLOB="d39490795bc0a9016fdfdb53b4a10985801215786db72103c32a05e2e7dba2f682fb90ae8f59f17d497d9fedb3c3c2499f3a431e75407cfa790d3b37824e8a90ddc3046015cb4e4c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 14m30.53052256s ago: executing program 0 (id=1600): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) unshare(0x22020400) (async, rerun: 64) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 64) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) 14m26.681828414s ago: executing program 0 (id=1612): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="26004c060a0002"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x15cb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x200, 0xb64, 0x4, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x1, 0x7e, 0x1, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r3, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x840) 14m25.925196403s ago: executing program 0 (id=1617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, 0x0, 0x8004) 14m25.309887891s ago: executing program 32 (id=1617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, 0x0, 0x8004) 2m57.107261851s ago: executing program 1 (id=3250): syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "31e796", 0x20, 0x21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, {[@fragment={0x87, 0x0, 0x25, 0x1, 0x0, 0x10, 0x65}, @routing={0x3a, 0x2, 0x2, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x40}]}]}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0) 2m56.894128299s ago: executing program 1 (id=3252): openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x5, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d77e17208680630b"], 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendto$inet6(r0, &(0x7f0000000380)="05c1b60696cf2e3086782fe4b7e01366f027eb9e89598b05d4bf1f54c9e180f9f925b40c3f2d556b50d6217d2b7f6a014afbc498d6ce9c121fcd7e22cd8d3311a57727a44d45d5e3df3f27c74950", 0x4e, 0x200088d0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x42, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0xc0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@private=0xa010100, @remote, 0x0, 0xffffffff, 'veth1_macvtap\x00', 'macvlan1\x00', {}, {0xff}, 0x2, 0x2}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4}}}, {{@ip={@empty, @multicast1, 0x0, 0xffffff00, 'ip6gre0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x129c27a59b16111e, 0x1, 0x8}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES16=r5, @ANYRES64, @ANYBLOB=',group_id', @ANYRESHEX=r4]) signalfd4(0xffffffffffffffff, &(0x7f0000000480)={[0x8]}, 0x8, 0x0) open(&(0x7f0000002280)='.\x00', 0x28900, 0x0) 2m51.67862924s ago: executing program 1 (id=3263): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d530494c) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$netlink(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = gettid() ptrace$getregset(0x4204, r4, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94}) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) write$binfmt_script(r0, &(0x7f0000019380)={'#! ', './file0'}, 0xb) 2m49.93258992s ago: executing program 1 (id=3269): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) 2m49.888564477s ago: executing program 1 (id=3270): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000380)={0x6, @raw_data="a5ca3354ab28de31bd93c26bd64d7bf250bcece4a58b1106d332fa7e1bb0444726d117b633124532524331259eaa03f9940b0a32d107a477724ff80b36b42487579f363b8e5610a08d8a0a12d1ada6944600a37331d008f81a320c3a85daf423dff45be2f01ebd9aae667ed95076ff9e27abf9327382593d33543d09e008931ce64fcb93f9092f36a7d01153df0323d10b5131f0e012d6f6bb7da8a72daaccc16ef2580ee1b9205a4291527255a77c32da0de9cb1e870be47419492ade788ccd03de171beda98f00"}) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) socket$netlink(0x10, 0x3, 0x14) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m48.548522107s ago: executing program 1 (id=3274): socket$key(0xf, 0x3, 0x2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket(0x1d, 0x2, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x4003}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2m33.317665575s ago: executing program 33 (id=3274): socket$key(0xf, 0x3, 0x2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket(0x1d, 0x2, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x4003}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 17.796520795s ago: executing program 6 (id=3643): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) accept$packet(r0, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000040)="a0c4", 0xfffffec3}], 0x2) 16.743070685s ago: executing program 6 (id=3647): creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d530494c) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = gettid() ptrace$getregset(0x4204, r2, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94}) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x80, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x39f, 0x6, 0x10, 0x4, {0xa, 0x25, 0x25, 0x0, 0x7, 0x9f59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x1, {0xa, 0x25, 0x25, 0x66fc, 0x6, 0x6}}}}}}}}]}}, 0x0) 15.718773081s ago: executing program 3 (id=3650): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf8, 0x67, 0x0, 0x5, 0x84, 0x0, @private=0xa010101, @remote}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2beefd9d9c26a0d2"}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000081e0420304000010203010902800003018160030904000000010100000a240109002a000201020924030205040106080b24060604020100011e090c240204"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r1}, 0x38) 9.861734234s ago: executing program 4 (id=3654): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = accept$packet(r0, 0x0, &(0x7f0000000200)) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000280)=0x10000, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000100)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 9.448975143s ago: executing program 6 (id=3655): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x44880}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r1 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect(0x7, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0xbc, 0xc, 0xda, 0x40, 0x403, 0xff3e, 0xfcf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x10, 0x9, "", [{{0x9, 0x4, 0xd6, 0x8, 0x0, 0x1f, 0x43, 0xa4, 0x2}}]}}]}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x40000000015, 0x5, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, 0x0, 0x0) epoll_create1(0x0) socket$inet6(0xa, 0x80003, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) accept4$phonet_pipe(r3, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9.373556305s ago: executing program 5 (id=3656): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0x7, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r3, 0x0) 8.652768695s ago: executing program 3 (id=3658): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x5000000000) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@allocspi={0xfc, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x4, 0x1b}]}, 0xfc}}, 0x4808) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r4, r5, 0x0, 0x20000023896) 8.170681322s ago: executing program 4 (id=3660): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) accept$packet(r0, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000040)="a0c4", 0xfffffec3}], 0x2) 6.42862639s ago: executing program 5 (id=3661): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d530494c) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$netlink(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = gettid() ptrace$getregset(0x4204, r4, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94}) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) write$binfmt_script(r0, &(0x7f0000019380)={'#! ', './file0'}, 0xb) 6.130066417s ago: executing program 2 (id=3663): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6.074234132s ago: executing program 4 (id=3664): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.671736491s ago: executing program 2 (id=3665): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$unix(0x1, 0x1, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrandom(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000380)={0x6, @raw_data="a5ca3354ab28de31bd93c26bd64d7bf250bcece4a58b1106d332fa7e1bb0444726d117b633124532524331259eaa03f9940b0a32d107a477724ff80b36b42487579f363b8e5610a08d8a0a12d1ada6944600a37331d008f81a320c3a85daf423dff45be2f01ebd9aae667ed95076ff9e27abf9327382593d33543d09e008931ce64fcb93f9092f36a7d01153df0323d10b5131f0e012d6f6bb7da8a72daaccc16ef2580ee1b9205a4291527255a77c32da0de9cb1e870be47419492ade788ccd03de171beda98f00"}) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) socket$netlink(0x10, 0x3, 0x14) r3 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5.24896558s ago: executing program 6 (id=3666): openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x5, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d77e17208680630b"], 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendto$inet6(r0, &(0x7f0000000380)="05c1b60696cf2e3086782fe4b7e01366f027eb9e89598b05d4bf1f54c9e180f9f925b40c3f2d556b50d6217d2b7f6a014afbc498d6ce9c121fcd7e22cd8d3311a57727a44d45d5e3df3f27c74950d740618bdc60fe1f5a1af4", 0x59, 0x200088d0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x42, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0xc0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@private=0xa010100, @remote, 0x0, 0xffffffff, 'veth1_macvtap\x00', 'macvlan1\x00', {}, {0xff}, 0x2, 0x2}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4}}}, {{@ip={@empty, @multicast1, 0x0, 0xffffff00, 'ip6gre0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x129c27a59b16111e, 0x1, 0x8}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES16=r5, @ANYRES64, @ANYBLOB=',group_id', @ANYRESHEX=r4]) signalfd4(0xffffffffffffffff, &(0x7f0000000480)={[0x8]}, 0x8, 0x0) open(&(0x7f0000002280)='.\x00', 0x28900, 0x0) 5.014302114s ago: executing program 4 (id=3667): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000004140)={0x0, 0x21, &(0x7f00000001c0)={0x0}}, 0x401080c) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2, 0x9612, 0x4, 0x400, 0x0, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000340)=r5) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000200)=0x188, 0x4) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) sendto$inet(r4, &(0x7f0000000000)="f461c5bb", 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000021c0)=@newtaction={0x14, 0x76, 0x1, 0x0, 0x8000003}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESDEC=0x0], 0xe) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="00006004020304000500e60c8100ffffffffffffaaaaaaaaaaaa88a8bfe381ff360008060001080006040003ffffffffffffe0000001ac57d0bc0706e0000002"], 0x40) shutdown(r2, 0x1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)={'bond_slave_0\x00', 0x5}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000002200)={{r0}, 0x0, 0x8, @inherit={0x60, &(0x7f0000000180)=ANY=[]}, @name="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"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.951140359s ago: executing program 5 (id=3668): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x2}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="99", 0x1}, {&(0x7f00000000c0)="11", 0x1}], 0x2) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1000) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24040014) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3010000}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x80}], 0x1, 0x101) 4.25830136s ago: executing program 2 (id=3669): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) accept$packet(r0, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000040)="a0c4", 0xfffffec3}], 0x2) 3.685224709s ago: executing program 4 (id=3670): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$unix(0x1, 0x1, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrandom(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000380)={0x6, @raw_data="a5ca3354ab28de31bd93c26bd64d7bf250bcece4a58b1106d332fa7e1bb0444726d117b633124532524331259eaa03f9940b0a32d107a477724ff80b36b42487579f363b8e5610a08d8a0a12d1ada6944600a37331d008f81a320c3a85daf423dff45be2f01ebd9aae667ed95076ff9e27abf9327382593d33543d09e008931ce64fcb93f9092f36a7d01153df0323d10b5131f0e012d6f6bb7da8a72daaccc16ef2580ee1b9205a4291527255a77c32da0de9cb1e870be47419492ade788ccd03de171beda98f00"}) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) socket$netlink(0x10, 0x3, 0x14) r3 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.33037613s ago: executing program 2 (id=3671): bind$inet6(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x80801) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x20000c01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7570646174652064656661fb1c54157f756c7420757365723a7add764bee10897bf0db696de132a7c4cc84079dd08fc1b9640d3cb09930e8f38987f1cc3a50b69f99354b50294e5753f0abc9b52944f904ab496d0b796f5df27b1a67c39488a33572232ee779f0353136ed56e0a88f3e2d515a74d388238682b4aaacfe87a5dc0d7f37556a1c7a46a6590a80e466ba5dc09db91c78b300000000000000c033e4d75323f671a0576115de68169968d7bef1c8e021e2cddeee8aa6b075ed95f7820be8930acb0619cee6adb210db8778"], 0x896976d60400d384, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x80042, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/104, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd9d7, 0x8) 2.914723195s ago: executing program 3 (id=3672): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0x7, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r3, 0x0) 2.28808654s ago: executing program 4 (id=3673): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x2}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="99", 0x1}, {&(0x7f00000000c0)="11", 0x1}], 0x2) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1000) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24040014) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3010000}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x80}], 0x1, 0x101) 2.008148169s ago: executing program 3 (id=3674): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d530494c) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$netlink(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = gettid() ptrace$getregset(0x4204, r4, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94}) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) write$binfmt_script(r0, &(0x7f0000019380)={'#! ', './file0'}, 0xb) 1.632466319s ago: executing program 5 (id=3675): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.406508484s ago: executing program 5 (id=3676): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x68c03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCSETS(r0, 0x404c4701, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a300000000034000000000a01010000000000000000050000000900010073797a300000000009000300730900000000000008000a40000000042c000000050a05000000000000000000050000060c00024000000000000000010900010073797a30"], 0xa8}}, 0x40) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000000)={0x9, 0x17a0, 0x7fff, 0x7}) write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001480)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) r8 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r8, &(0x7f0000000100)=""/134, 0x86) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x10, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x840) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd7000feffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0100feef"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 1.380932792s ago: executing program 6 (id=3677): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 990.526682ms ago: executing program 2 (id=3678): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000002060102000000000060000000000000050005000000002b615b95a638785fc2959197558c2d7e00090002"], 0x54}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @empty=0xac141436}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000700)=0xe) sendfile(0xffffffffffffffff, r2, 0x0, 0x10ffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0xff, 0xd, 0x4101, 0x2}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a3000000000a8000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000004c0008800c00024000000000000054d30c00"], 0xf0}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000140)={"c14a7b741dbde86bb2dbb521a2b07e9566639c2cf78df8255ff0815d223546e2", r6}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000a40)=0xfff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x6, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x4, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x3, 0x47, 0x8020, 0x1, 0x4, 0xffff, 0x2, 0x4, 0x2, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0x4, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x8000, 0x1fe, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000002c0)=0x3) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "3e82554de85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fbe178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x31}, 0xfffffffffffffce5, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x38, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) unshare(0x8000100) unshare(0x20200) 726.394256ms ago: executing program 3 (id=3679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="560762d67e", 0x5}], 0x1}}], 0x2, 0x48000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x141091, 0x0) 567.898101ms ago: executing program 5 (id=3680): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x5000000000) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@allocspi={0xfc, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x4, 0x1b}]}, 0xfc}}, 0x4808) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r3, r4, 0x0, 0x20000023896) 430.733156ms ago: executing program 2 (id=3681): syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b0000000000011907800000000ffffffff4e224e20009c907801000000fcffffff7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af0000584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d0000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649add936aa7bf89cf012a30dc3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5"], 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 384.763886ms ago: executing program 3 (id=3682): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x2}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="99", 0x1}, {&(0x7f00000000c0)="11", 0x1}], 0x2) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1000) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24040014) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3010000}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x80}], 0x1, 0x101) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 6 (id=3683): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x5000000000) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@allocspi={0xfc, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x4, 0x1b}]}, 0xfc}}, 0x4808) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r3, r4, 0x0, 0x20000023896) kernel console output (not intermixed with test programs): class=bluetooth_socket permissive=1 [ 1322.901903][ T29] audit: type=1400 audit(1779457542.744:7203): avc: denied { bind } for pid=20905 comm="syz.1.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1323.260748][ T29] audit: type=1400 audit(1779457542.754:7204): avc: denied { write } for pid=20905 comm="syz.1.3216" path="socket:[62831]" dev="sockfs" ino=62831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1323.293430][ T29] audit: type=1400 audit(1779457542.774:7205): avc: denied { create } for pid=20908 comm="syz.2.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1323.313657][ T29] audit: type=1400 audit(1779457542.784:7206): avc: denied { read write } for pid=20911 comm="syz.4.3218" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1323.350386][ T29] audit: type=1400 audit(1779457542.784:7207): avc: denied { open } for pid=20911 comm="syz.4.3218" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1323.465539][ T29] audit: type=1400 audit(1779457542.784:7208): avc: denied { create } for pid=20908 comm="syz.2.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1323.491344][ T29] audit: type=1400 audit(1779457542.784:7209): avc: denied { create } for pid=20908 comm="syz.2.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1323.551432][ T29] audit: type=1400 audit(1779457542.794:7210): avc: denied { name_bind } for pid=20908 comm="syz.2.3217" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1323.608001][ T29] audit: type=1400 audit(1779457542.794:7211): avc: denied { node_bind } for pid=20908 comm="syz.2.3217" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1323.635334][T20928] netlink: 'syz.2.3222': attribute type 2 has an invalid length. [ 1325.234962][T20950] FAULT_INJECTION: forcing a failure. [ 1325.234962][T20950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.305171][T20950] CPU: 0 UID: 0 PID: 20950 Comm: syz.5.3225 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.305204][T20950] Tainted: [L]=SOFTLOCKUP [ 1325.305211][T20950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1325.305222][T20950] Call Trace: [ 1325.305228][T20950] [ 1325.305236][T20950] dump_stack_lvl+0x100/0x190 [ 1325.305264][T20950] should_fail_ex.cold+0x5/0xa [ 1325.305296][T20950] _copy_from_user+0x2e/0xd0 [ 1325.305325][T20950] copy_msghdr_from_user+0x9f/0x4f0 [ 1325.305353][T20950] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1325.305377][T20950] ? rcu_is_watching+0x12/0xc0 [ 1325.305408][T20950] ? hrtimer_start_range_ns+0x860/0x1a50 [ 1325.305437][T20950] ? find_held_lock+0x2b/0x80 [ 1325.305459][T20950] ___sys_sendmsg+0x106/0x1e0 [ 1325.305485][T20950] ? __pfx____sys_sendmsg+0x10/0x10 [ 1325.305537][T20950] __sys_sendmsg+0x170/0x220 [ 1325.305558][T20950] ? __pfx___sys_sendmsg+0x10/0x10 [ 1325.305576][T20950] ? irqentry_exit+0x24d/0x7e0 [ 1325.305602][T20950] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 1325.305640][T20950] do_syscall_64+0x10b/0xf80 [ 1325.305665][T20950] ? clear_bhb_loop+0x40/0x90 [ 1325.305687][T20950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.305706][T20950] RIP: 0033:0x7f8512d9ce59 [ 1325.305722][T20950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.305739][T20950] RSP: 002b:00007f8513d1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.305757][T20950] RAX: ffffffffffffffda RBX: 00007f8513015fa0 RCX: 00007f8512d9ce59 [ 1325.305769][T20950] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1325.305780][T20950] RBP: 00007f8513d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.305790][T20950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.305800][T20950] R13: 00007f8513016038 R14: 00007f8513015fa0 R15: 00007fff7ca5a468 [ 1325.305824][T20950] [ 1325.562337][T20956] random: crng reseeded on system resumption [ 1327.841468][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 1327.841479][ T29] audit: type=1400 audit(1779457547.784:7314): avc: denied { read write } for pid=20996 comm="syz.2.3232" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1329.098950][ T29] audit: type=1400 audit(1779457547.814:7315): avc: denied { open } for pid=20996 comm="syz.2.3232" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1329.123711][ T29] audit: type=1400 audit(1779457547.824:7316): avc: denied { ioctl } for pid=20996 comm="syz.2.3232" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1329.149756][ T29] audit: type=1400 audit(1779457547.884:7317): avc: denied { create } for pid=21005 comm="syz.5.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1329.170841][ T29] audit: type=1400 audit(1779457547.884:7318): avc: denied { write } for pid=21005 comm="syz.5.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1329.325332][ T29] audit: type=1400 audit(1779457548.144:7319): avc: denied { mounton } for pid=21005 comm="syz.5.3233" path="/324/bus" dev="tmpfs" ino=1765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1329.348348][ T29] audit: type=1400 audit(1779457548.174:7320): avc: denied { unlink } for pid=21005 comm="syz.5.3233" name="#90" dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1329.371626][ T29] audit: type=1400 audit(1779457548.254:7321): avc: denied { mount } for pid=21005 comm="syz.5.3233" name="/" dev="overlay" ino=1764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1329.472603][ T29] audit: type=1400 audit(1779457549.394:7322): avc: denied { read } for pid=21018 comm="syz.2.3236" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1329.555116][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'. [ 1330.117961][ T29] audit: type=1400 audit(1779457549.394:7323): avc: denied { open } for pid=21018 comm="syz.2.3236" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1332.651818][T20420] Bluetooth: hci3: command 0x0406 tx timeout [ 1333.235026][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 1333.235038][ T29] audit: type=1400 audit(1779457553.174:7389): avc: denied { read write } for pid=21079 comm="syz.2.3246" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1333.454530][ T29] audit: type=1400 audit(1779457553.174:7390): avc: denied { open } for pid=21079 comm="syz.2.3246" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1333.644091][T21092] random: crng reseeded on system resumption [ 1334.932892][ T29] audit: type=1400 audit(1779457553.224:7391): avc: denied { ioctl } for pid=21079 comm="syz.2.3246" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1335.813496][ T29] audit: type=1400 audit(1779457553.364:7392): avc: denied { allowed } for pid=21085 comm="syz.1.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1335.834463][ T29] audit: type=1400 audit(1779457553.364:7393): avc: denied { create } for pid=21085 comm="syz.1.3247" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1335.865304][ T29] audit: type=1400 audit(1779457553.364:7394): avc: denied { map } for pid=21085 comm="syz.1.3247" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1335.927793][T21116] ALSA: mixer_oss: invalid OSS volume '' [ 1335.981418][ T29] audit: type=1400 audit(1779457553.364:7395): avc: denied { read write } for pid=21085 comm="syz.1.3247" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1336.137280][ T29] audit: type=1400 audit(1779457553.394:7396): avc: denied { read } for pid=21085 comm="syz.1.3247" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1336.184294][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3249'. [ 1336.264885][ T29] audit: type=1400 audit(1779457553.394:7397): avc: denied { open } for pid=21085 comm="syz.1.3247" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1336.644879][ T5622] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1336.684127][T21134] netlink: 4592 bytes leftover after parsing attributes in process `syz.3.3251'. [ 1336.693458][T21134] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1336.821416][ T29] audit: type=1400 audit(1779457553.514:7398): avc: denied { create } for pid=21085 comm="syz.1.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1336.991306][ T5622] usb 2-1: Using ep0 maxpacket: 32 [ 1337.003725][ T5622] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1337.021541][ T5622] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.069614][T21139] trusted_key: encrypted_key: insufficient parameters specified [ 1337.146120][ T5622] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 1337.192950][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.296156][ T5622] usb 2-1: Product: syz [ 1337.391493][T21147] FAULT_INJECTION: forcing a failure. [ 1337.391493][T21147] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.404181][T21147] CPU: 1 UID: 0 PID: 21147 Comm: syz.2.3255 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.404208][T21147] Tainted: [L]=SOFTLOCKUP [ 1337.404215][T21147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1337.404226][T21147] Call Trace: [ 1337.404232][T21147] [ 1337.404240][T21147] dump_stack_lvl+0x100/0x190 [ 1337.404268][T21147] should_fail_ex.cold+0x5/0xa [ 1337.404293][T21147] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1337.404319][T21147] should_failslab+0xc2/0x120 [ 1337.404340][T21147] __kmalloc_noprof+0xe0/0x850 [ 1337.404366][T21147] ? kfree+0x1dd/0x6c0 [ 1337.404393][T21147] tomoyo_realpath_from_path+0xb6/0x690 [ 1337.404425][T21147] tomoyo_path_number_perm+0x23c/0x580 [ 1337.404446][T21147] ? tomoyo_path_number_perm+0x22e/0x580 [ 1337.404470][T21147] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1337.404520][T21147] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 1337.404551][T21147] ? security_file_ioctl+0xa6/0x230 [ 1337.404579][T21147] security_file_ioctl+0xd3/0x230 [ 1337.404604][T21147] __x64_sys_ioctl+0xb7/0x210 [ 1337.404626][T21147] do_syscall_64+0x10b/0xf80 [ 1337.404651][T21147] ? clear_bhb_loop+0x40/0x90 [ 1337.404673][T21147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.404691][T21147] RIP: 0033:0x7f4a49b9ce59 [ 1337.404706][T21147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.404722][T21147] RSP: 002b:00007f4a4aa1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1337.404740][T21147] RAX: ffffffffffffffda RBX: 00007f4a49e16180 RCX: 00007f4a49b9ce59 [ 1337.404752][T21147] RDX: 0000200000001e40 RSI: 00000000403c6f2b RDI: 000000000000000a [ 1337.404763][T21147] RBP: 00007f4a4aa1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.404773][T21147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.404784][T21147] R13: 00007f4a49e16218 R14: 00007f4a49e16180 R15: 00007ffff8f17758 [ 1337.404809][T21147] [ 1337.404831][T21147] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1337.631489][ T5622] usb 2-1: Manufacturer: syz [ 1337.636149][ T5622] usb 2-1: SerialNumber: syz [ 1337.693200][T14096] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1337.888505][ T5622] ljca 2-1:1.0: probe with driver ljca failed with error -110 [ 1337.934454][T14096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1338.093082][T14096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1338.352546][T14096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1338.738769][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1338.738790][ T29] audit: type=1400 audit(1779457558.354:7427): avc: denied { mount } for pid=21152 comm="syz.5.3256" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1340.259735][ T29] audit: type=1400 audit(1779457558.474:7428): avc: denied { prog_run } for pid=21152 comm="syz.5.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1340.375786][T14096] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1340.398659][T14096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.410949][T14096] usb 5-1: Product: syz [ 1340.417459][T14096] usb 5-1: Manufacturer: syz [ 1340.425760][T14096] usb 5-1: SerialNumber: syz [ 1340.480402][ T29] audit: type=1400 audit(1779457560.414:7429): avc: denied { mount } for pid=21151 comm="syz.3.3258" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1340.521107][T14096] usb 5-1: config 0 descriptor?? [ 1340.546497][ T29] audit: type=1400 audit(1779457560.484:7430): avc: denied { unmount } for pid=19507 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1340.601557][ T5622] usb 2-1: USB disconnect, device number 49 [ 1340.627199][ T29] audit: type=1400 audit(1779457560.564:7431): avc: denied { getopt } for pid=21163 comm="syz.5.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1340.981662][T14096] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1341.275179][T21174] tipc: Started in network mode [ 1341.299257][T14096] usb 5-1: USB disconnect, device number 57 [ 1341.317960][T21174] tipc: Node identity 72912de79a05, cluster identity 4711 [ 1341.350669][T21174] tipc: Enabled bearer , priority 0 [ 1341.432851][ T29] audit: type=1400 audit(1779457561.374:7432): avc: denied { create } for pid=21177 comm="syz.3.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1341.512743][T10800] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1341.612128][T21187] random: crng reseeded on system resumption [ 1341.692390][ T29] audit: type=1400 audit(1779457561.374:7433): avc: denied { ioctl } for pid=21177 comm="syz.3.3262" path="socket:[63832]" dev="sockfs" ino=63832 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1341.895449][T21194] netlink: 'syz.5.3264': attribute type 2 has an invalid length. [ 1342.407538][T10800] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1342.435890][T10800] usb 3-1: config 0 has no interface number 0 [ 1342.442279][ T29] audit: type=1400 audit(1779457561.374:7434): avc: denied { read } for pid=21177 comm="syz.3.3262" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1342.466201][T10800] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1342.478848][ T29] audit: type=1400 audit(1779457561.374:7435): avc: denied { open } for pid=21177 comm="syz.3.3262" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1342.503494][ T29] audit: type=1400 audit(1779457561.384:7436): avc: denied { write } for pid=21177 comm="syz.3.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1342.529035][T10800] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1342.547385][T10800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.557124][T10800] usb 3-1: Product: syz [ 1342.561461][T10800] usb 3-1: Manufacturer: syz [ 1342.566093][T10800] usb 3-1: SerialNumber: syz [ 1342.577609][T19692] tipc: Node number set to 3902025191 [ 1342.585211][T10800] usb 3-1: config 0 descriptor?? [ 1342.972523][T21201] netlink: 'syz.3.3266': attribute type 2 has an invalid length. [ 1343.521693][T10800] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1343.961345][T10800] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1343.992323][T10800] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1344.003046][T10800] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1344.003736][T21165] tipc: Disabling bearer [ 1344.016177][T10800] usb 3-1: USB disconnect, device number 55 [ 1344.031350][ T6008] block nbd1: Possible stuck request ffff8880281c0000: control (read@0,1024B). Runtime 90 seconds [ 1344.042731][ T6008] block nbd1: Possible stuck request ffff8880281c01c0: control (read@1024,1024B). Runtime 90 seconds [ 1344.054302][ T6008] block nbd1: Possible stuck request ffff8880281c0380: control (read@2048,1024B). Runtime 90 seconds [ 1344.067157][ T6008] block nbd1: Possible stuck request ffff8880281c0540: control (read@3072,1024B). Runtime 90 seconds [ 1344.889370][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1344.889387][ T29] audit: type=1400 audit(1779457564.824:7445): avc: denied { create } for pid=21251 comm="syz.1.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1344.934917][ T29] audit: type=1400 audit(1779457564.864:7446): avc: denied { read write } for pid=21251 comm="syz.1.3274" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1344.962248][ T29] audit: type=1400 audit(1779457564.864:7447): avc: denied { open } for pid=21251 comm="syz.1.3274" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1345.099871][ T29] audit: type=1400 audit(1779457565.014:7448): avc: denied { ioctl } for pid=21258 comm="syz.2.3278" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1345.607906][ T29] audit: type=1400 audit(1779457565.524:7449): avc: denied { setattr } for pid=21258 comm="syz.2.3278" name="NETLINK" dev="sockfs" ino=63347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1345.687802][ T29] audit: type=1400 audit(1779457565.624:7450): avc: denied { create } for pid=21258 comm="syz.2.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1347.517317][T21307] random: crng reseeded on system resumption [ 1347.921358][ T5809] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1348.130411][ T5809] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1348.174714][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.206200][ T5809] usb 6-1: Product: syz [ 1348.236746][ T5809] usb 6-1: Manufacturer: syz [ 1348.340823][ T5809] usb 6-1: SerialNumber: syz [ 1350.134152][ T5809] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1350.188509][ T5809] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1350.330408][ T5809] usb 6-1: USB disconnect, device number 33 [ 1350.557692][ T29] audit: type=1400 audit(1779457570.494:7451): avc: denied { read } for pid=21341 comm="syz.3.3287" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1350.636934][ T29] audit: type=1400 audit(1779457570.524:7452): avc: denied { open } for pid=21341 comm="syz.3.3287" path="/dev/input/event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1350.672497][ T29] audit: type=1400 audit(1779457570.524:7453): avc: denied { create } for pid=21341 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1350.692895][ T29] audit: type=1400 audit(1779457570.524:7454): avc: denied { create } for pid=21341 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1350.714158][ T29] audit: type=1400 audit(1779457570.534:7455): avc: denied { connect } for pid=21341 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1350.736859][ T29] audit: type=1400 audit(1779457570.534:7456): avc: denied { bind } for pid=21341 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1350.817755][ T29] audit: type=1400 audit(1779457570.604:7457): avc: denied { write } for pid=21341 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1350.901165][ T29] audit: type=1400 audit(1779457570.604:7458): avc: denied { accept } for pid=21341 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1352.394394][T21365] random: crng reseeded on system resumption [ 1352.849366][ T5809] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1353.379211][ T5809] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1353.388632][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.404412][ T5809] usb 4-1: Product: syz [ 1353.424536][ T5809] usb 4-1: Manufacturer: syz [ 1353.450938][ T5809] usb 4-1: SerialNumber: syz [ 1355.215290][ T29] audit: type=1400 audit(1779457575.154:7459): avc: denied { setopt } for pid=21384 comm="syz.5.3296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1355.797025][ T5809] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1355.805797][ T5809] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1355.987865][ T5809] usb 4-1: USB disconnect, device number 58 [ 1356.030418][T14865] udevd[14865]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1356.173294][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.180236][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.254314][T21416] trusted_key: encrypted_key: insufficient parameters specified [ 1356.392484][T21419] random: crng reseeded on system resumption [ 1356.651351][ T5809] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1356.837472][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1356.995204][T19692] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1357.004462][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1357.102649][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1357.272790][ T5809] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1357.334026][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.388785][ T5809] usb 3-1: Product: syz [ 1357.424025][ T5809] usb 3-1: Manufacturer: syz [ 1357.455454][T19692] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1357.483171][ T5809] usb 3-1: SerialNumber: syz [ 1357.547958][T19692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.583333][ T5809] usb 3-1: config 0 descriptor?? [ 1357.599397][T19692] usb 4-1: Product: syz [ 1357.618942][T19692] usb 4-1: Manufacturer: syz [ 1357.643759][T19692] usb 4-1: SerialNumber: syz [ 1358.232359][ T5809] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1358.533102][ T5809] usb 3-1: USB disconnect, device number 56 [ 1359.193449][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1359.223143][ T29] audit: type=1400 audit(1779457579.154:7460): avc: denied { write } for pid=21436 comm="syz.2.3301" name="ipv6_route" dev="proc" ino=4026532990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1359.494965][ T5797] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1359.661299][ T5797] usb 3-1: Using ep0 maxpacket: 8 [ 1359.680222][ T5797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.708092][ T5797] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1359.724086][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.759184][ T5797] usb 3-1: Product: syz [ 1359.776401][ T5797] usb 3-1: Manufacturer: syz [ 1359.792649][ T5797] usb 3-1: SerialNumber: syz [ 1359.818852][ T5797] usb 3-1: config 0 descriptor?? [ 1359.945433][ T5797] cdc_ether 3-1:0.0: skipping garbage [ 1359.957363][ T5797] cdc_ether 3-1:0.0: bad CDC descriptors [ 1359.970097][ T5797] usb 3-1: unsupported MDLM descriptors [ 1359.987899][ T5797] cdc_acm 3-1:0.0: skipping garbage [ 1361.172775][ T29] audit: type=1400 audit(1779457581.114:7461): avc: denied { unmount } for pid=12982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1361.246121][T19692] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1361.267252][T19692] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1361.310887][T21437] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1361.325937][T20420] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1361.328925][T21465] xt_hashlimit: size too large, truncated to 1048576 [ 1361.355969][T20420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1361.365345][T20420] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1361.387247][T20420] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1361.395459][T20420] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1361.427414][T19692] usb 4-1: USB disconnect, device number 59 [ 1361.435446][ T29] audit: type=1400 audit(1779457581.344:7462): avc: denied { mounton } for pid=21462 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1361.487684][T14883] udevd[14883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1361.890522][ T29] audit: type=1400 audit(1779457581.394:7463): avc: denied { mounton } for pid=21436 comm="syz.2.3301" path="/proc/305" dev="proc" ino=64103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1362.992776][ T5809] usb 3-1: USB disconnect, device number 57 [ 1362.999053][ T29] audit: type=1400 audit(1779457581.444:7464): avc: denied { mount } for pid=21436 comm="syz.2.3301" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1363.184224][ T29] audit: type=1400 audit(1779457583.124:7465): avc: denied { create } for pid=21480 comm="syz.2.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.236859][ T29] audit: type=1400 audit(1779457583.124:7466): avc: denied { setopt } for pid=21480 comm="syz.2.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.259126][ T29] audit: type=1400 audit(1779457583.124:7467): avc: denied { read } for pid=21480 comm="syz.2.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.471842][T20420] Bluetooth: hci1: command tx timeout [ 1364.541368][ T29] audit: type=1400 audit(1779457583.174:7468): avc: denied { write } for pid=21480 comm="syz.2.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1365.514875][T21462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.531542][T20420] Bluetooth: hci1: command tx timeout [ 1365.556732][T21462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.588073][T21462] bridge_slave_0: entered allmulticast mode [ 1365.624732][T21462] bridge_slave_0: entered promiscuous mode [ 1365.657202][T21462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.688597][T21462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.724082][T21462] bridge_slave_1: entered allmulticast mode [ 1365.754104][T21462] bridge_slave_1: entered promiscuous mode [ 1365.858293][T21462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.901485][T21462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.007095][T21462] team0: Port device team_slave_0 added [ 1366.032555][T21462] team0: Port device team_slave_1 added [ 1366.224183][T21462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.202011][T21462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.247917][T21462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.343380][T21462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.388565][ T29] audit: type=1400 audit(1779457587.324:7469): avc: denied { watch } for pid=21525 comm="syz.5.3317" path="/345/file0" dev="tmpfs" ino=1885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1367.463607][T21462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.651520][T21462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.662394][T20420] Bluetooth: hci1: command tx timeout [ 1367.695071][ T29] audit: type=1400 audit(1779457587.324:7470): avc: denied { watch_sb watch_reads } for pid=21525 comm="syz.5.3317" path="/345/file0" dev="tmpfs" ino=1885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1367.731286][ T29] audit: type=1400 audit(1779457587.524:7471): avc: denied { setopt } for pid=21525 comm="syz.5.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1367.852452][T21462] hsr_slave_0: entered promiscuous mode [ 1367.885468][T21462] hsr_slave_1: entered promiscuous mode [ 1367.929474][T21462] debugfs: 'hsr0' already exists in 'hsr' [ 1367.955815][T21462] Cannot create hsr debugfs directory [ 1369.691465][T20420] Bluetooth: hci1: command tx timeout [ 1370.330910][T21462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1370.340363][T21462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1370.349307][T21462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1371.494616][T21462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1371.768917][T21462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1372.020430][T21462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1372.046284][T21462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1372.064008][T21462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1372.259418][T21462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.319037][T21462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.356488][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.363612][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.453283][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.460379][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1374.091946][ T6008] block nbd1: Possible stuck request ffff8880281c0000: control (read@0,1024B). Runtime 120 seconds [ 1374.103121][ T6008] block nbd1: Possible stuck request ffff8880281c01c0: control (read@1024,1024B). Runtime 120 seconds [ 1374.118234][ T6008] block nbd1: Possible stuck request ffff8880281c0380: control (read@2048,1024B). Runtime 120 seconds [ 1374.130194][ T6008] block nbd1: Possible stuck request ffff8880281c0540: control (read@3072,1024B). Runtime 120 seconds [ 1374.202244][T21596] random: crng reseeded on system resumption [ 1374.912346][T10800] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1377.663004][T10800] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1377.673358][T10800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.682631][T10800] usb 3-1: Product: syz [ 1377.691829][T10800] usb 3-1: can't set config #1, error -71 [ 1377.700625][T10800] usb 3-1: USB disconnect, device number 58 [ 1377.797952][T21462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.131485][T21462] veth0_vlan: entered promiscuous mode [ 1380.427061][T21652] netlink: 'syz.5.3342': attribute type 2 has an invalid length. [ 1381.529301][T21462] veth1_vlan: entered promiscuous mode [ 1383.293801][T21675] random: crng reseeded on system resumption [ 1383.419859][T21462] veth0_macvtap: entered promiscuous mode [ 1384.955233][T21462] veth1_macvtap: entered promiscuous mode [ 1385.467188][T21462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.479573][T21462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.717765][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.727571][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.776847][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.152375][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.368235][ T29] audit: type=1400 audit(1779457606.294:7472): avc: denied { read } for pid=21719 comm="syz.3.3356" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1386.400190][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.431606][ T29] audit: type=1400 audit(1779457606.294:7473): avc: denied { open } for pid=21719 comm="syz.3.3356" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1386.456863][ T29] audit: type=1400 audit(1779457606.304:7474): avc: denied { ioctl } for pid=21719 comm="syz.3.3356" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1386.484429][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.512601][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.522880][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.540180][ T29] audit: type=1400 audit(1779457606.474:7475): avc: denied { mounton } for pid=21462 comm="syz-executor" path="/root/syzkaller.karN6i/syz-tmp" dev="sda1" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1386.638072][ T29] audit: type=1400 audit(1779457606.474:7476): avc: denied { mount } for pid=21462 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1386.693309][ T29] audit: type=1400 audit(1779457606.504:7477): avc: denied { mounton } for pid=21462 comm="syz-executor" path="/root/syzkaller.karN6i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1386.858494][T21730] random: crng reseeded on system resumption [ 1387.553993][ T5622] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1388.306861][ T5622] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1388.735949][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.747527][ T5622] usb 3-1: Product: syz [ 1388.751852][ T5622] usb 3-1: Manufacturer: syz [ 1388.756564][ T5622] usb 3-1: SerialNumber: syz [ 1388.989982][ T29] audit: type=1400 audit(1779457606.504:7478): avc: denied { mounton } for pid=21462 comm="syz-executor" path="/root/syzkaller.karN6i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=65188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1389.038416][ T29] audit: type=1400 audit(1779457606.504:7479): avc: denied { unmount } for pid=21462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1389.058856][ T29] audit: type=1400 audit(1779457606.524:7480): avc: denied { mounton } for pid=21462 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1389.083041][ T29] audit: type=1400 audit(1779457606.524:7481): avc: denied { mount } for pid=21462 comm="syz-executor" name="/" dev="gadgetfs" ino=6801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1391.063014][ T5622] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1391.282990][ T5622] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1391.405434][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1391.405449][ T29] audit: type=1400 audit(1779457611.344:7500): avc: denied { read write } for pid=21773 comm="syz.2.3365" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1391.463200][ T29] audit: type=1400 audit(1779457611.374:7501): avc: denied { open } for pid=21773 comm="syz.2.3365" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1392.156171][ T5622] usb 3-1: USB disconnect, device number 59 [ 1394.759435][ T29] audit: type=1400 audit(1779457611.374:7502): avc: denied { ioctl } for pid=21773 comm="syz.2.3365" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1394.805604][ T29] audit: type=1400 audit(1779457611.384:7503): avc: denied { prog_load } for pid=21773 comm="syz.2.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1394.831101][ T29] audit: type=1400 audit(1779457611.384:7504): avc: denied { bpf } for pid=21773 comm="syz.2.3365" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1395.139178][ T29] audit: type=1400 audit(1779457611.394:7505): avc: denied { perfmon } for pid=21773 comm="syz.2.3365" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1395.192333][T14883] udevd[14883]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1395.264698][ T29] audit: type=1400 audit(1779457611.394:7506): avc: denied { prog_run } for pid=21773 comm="syz.2.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1395.359347][ T29] audit: type=1400 audit(1779457611.394:7507): avc: denied { read } for pid=21769 comm="syz.5.3364" dev="nsfs" ino=4026532796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1395.493864][ T29] audit: type=1400 audit(1779457611.394:7508): avc: denied { open } for pid=21769 comm="syz.5.3364" path="net:[4026532796]" dev="nsfs" ino=4026532796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1395.736647][ T29] audit: type=1400 audit(1779457611.394:7509): avc: denied { create } for pid=21769 comm="syz.5.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1396.616408][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1396.616429][ T29] audit: type=1400 audit(1779457616.484:7539): avc: denied { read write } for pid=21804 comm="syz.2.3371" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1396.998892][ T29] audit: type=1400 audit(1779457616.484:7540): avc: denied { open } for pid=21804 comm="syz.2.3371" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.189754][ T29] audit: type=1400 audit(1779457616.484:7541): avc: denied { ioctl } for pid=21804 comm="syz.2.3371" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.215467][ T29] audit: type=1400 audit(1779457616.534:7542): avc: denied { create } for pid=21804 comm="syz.2.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1397.240452][ T29] audit: type=1400 audit(1779457616.534:7543): avc: denied { create } for pid=21804 comm="syz.2.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1397.314368][T21820] random: crng reseeded on system resumption [ 1397.339571][ T29] audit: type=1400 audit(1779457616.544:7544): avc: denied { connect } for pid=21804 comm="syz.2.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1398.491476][ T29] audit: type=1400 audit(1779457616.544:7545): avc: denied { bind } for pid=21804 comm="syz.2.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1398.680301][ T29] audit: type=1400 audit(1779457616.544:7546): avc: denied { create } for pid=21804 comm="syz.2.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1398.800374][ T29] audit: type=1400 audit(1779457616.544:7547): avc: denied { write } for pid=21804 comm="syz.2.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1398.810125][T21846] xt_hashlimit: size too large, truncated to 1048576 [ 1398.833219][ T29] audit: type=1400 audit(1779457616.554:7548): avc: denied { accept } for pid=21804 comm="syz.2.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1398.958122][T21855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3381'. [ 1398.992499][T21855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.034311][T21855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.104843][T21855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.161415][T21855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.381284][ T5717] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1399.534649][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 1399.553167][ T5717] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1399.570001][ T5717] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1399.598797][ T5717] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 1399.610768][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.633752][ T5717] usb 3-1: Product: syz [ 1399.642103][ T5717] usb 3-1: Manufacturer: syz [ 1399.651654][ T5717] usb 3-1: SerialNumber: syz [ 1400.061649][ T5717] ljca 3-1:1.0: probe with driver ljca failed with error -110 [ 1401.121882][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1401.573065][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1401.582536][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.597824][ T10] usb 4-1: Product: syz [ 1401.602524][ T10] usb 4-1: Manufacturer: syz [ 1401.607213][ T10] usb 4-1: SerialNumber: syz [ 1401.616179][ T10] usb 4-1: config 0 descriptor?? [ 1402.337746][T21879] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1402.651386][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1402.651405][ T29] audit: type=1400 audit(1779457622.034:7576): avc: denied { append } for pid=21868 comm="syz.3.3385" name="cec3" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1402.746178][ T29] audit: type=1400 audit(1779457622.214:7577): avc: denied { bind } for pid=21868 comm="syz.3.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1402.767907][ T29] audit: type=1400 audit(1779457622.624:7578): avc: denied { ioctl } for pid=21868 comm="syz.3.3385" path="socket:[66081]" dev="sockfs" ino=66081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1402.837673][T21882] xt_hashlimit: size too large, truncated to 1048576 [ 1402.844825][ T29] audit: type=1400 audit(1779457622.624:7579): avc: denied { connect } for pid=21868 comm="syz.3.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1402.896460][ T10] usb 3-1: USB disconnect, device number 60 [ 1402.902522][ T29] audit: type=1400 audit(1779457622.624:7580): avc: denied { create } for pid=21876 comm="syz.4.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1403.806829][ T5797] usb 4-1: USB disconnect, device number 60 [ 1403.908746][ T29] audit: type=1400 audit(1779457623.844:7581): avc: denied { name_bind } for pid=21894 comm="syz.3.3391" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1404.046993][ T29] audit: type=1400 audit(1779457623.844:7582): avc: denied { node_bind } for pid=21894 comm="syz.3.3391" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1404.173523][ T6008] block nbd1: Possible stuck request ffff8880281c0000: control (read@0,1024B). Runtime 150 seconds [ 1404.184482][ T6008] block nbd1: Possible stuck request ffff8880281c01c0: control (read@1024,1024B). Runtime 150 seconds [ 1404.197835][ T6008] block nbd1: Possible stuck request ffff8880281c0380: control (read@2048,1024B). Runtime 150 seconds [ 1404.210545][ T6008] block nbd1: Possible stuck request ffff8880281c0540: control (read@3072,1024B). Runtime 150 seconds [ 1405.107385][T21910] random: crng reseeded on system resumption [ 1406.273925][T21934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3398'. [ 1406.349824][T21936] xt_hashlimit: size too large, truncated to 1048576 [ 1406.357586][ T29] audit: type=1400 audit(1779457626.294:7583): avc: denied { write } for pid=21932 comm="syz.6.3398" name="ipv6_route" dev="proc" ino=4026533199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1406.801501][ T5717] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1406.963305][ T5717] usb 7-1: Using ep0 maxpacket: 8 [ 1406.975637][ T5717] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.005400][ T5717] usb 7-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1407.021699][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.032705][ T5717] usb 7-1: Product: syz [ 1407.260493][ T5717] usb 7-1: Manufacturer: syz [ 1407.321359][ T5717] usb 7-1: SerialNumber: syz [ 1407.329705][ T29] audit: type=1400 audit(1779457627.264:7584): avc: denied { kexec_image_load } for pid=21946 comm="syz.4.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1407.352082][ T5717] usb 7-1: config 0 descriptor?? [ 1407.369080][ T5717] cdc_ether 7-1:0.0: skipping garbage [ 1407.397600][ T5717] cdc_ether 7-1:0.0: bad CDC descriptors [ 1407.408215][ T5717] usb 7-1: unsupported MDLM descriptors [ 1407.421653][ T5717] cdc_acm 7-1:0.0: skipping garbage [ 1407.772096][ T5717] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1407.991345][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 1408.237290][ T5717] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1408.270169][T21934] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3398'. [ 1408.303352][ T5717] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1408.410841][ T5717] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 1408.441683][ T5622] usb 7-1: USB disconnect, device number 2 [ 1408.452400][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.477562][ T5717] usb 3-1: Product: syz [ 1408.494675][ T5717] usb 3-1: Manufacturer: syz [ 1408.507152][ T5717] usb 3-1: SerialNumber: syz [ 1409.053361][ T5717] ljca 3-1:1.0: probe with driver ljca failed with error -110 [ 1409.523465][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3410'. [ 1409.801347][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1409.821372][ T5809] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1410.361268][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1410.367237][ T5809] usb 7-1: Using ep0 maxpacket: 32 [ 1410.373136][ T29] audit: type=1400 audit(1779457630.314:7585): avc: denied { sys_module } for pid=21980 comm="syz.5.3412" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1410.380426][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.416271][ T5809] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1410.427144][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.441638][ T5809] usb 7-1: Product: syz [ 1410.452986][ T9] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1410.462706][ T5809] usb 7-1: Manufacturer: syz [ 1410.468416][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.478013][ T5809] usb 7-1: SerialNumber: syz [ 1410.486396][ T9] usb 5-1: Product: syz [ 1410.495590][ T9] usb 5-1: Manufacturer: syz [ 1410.500843][ T5809] usb 7-1: config 0 descriptor?? [ 1410.513564][ T9] usb 5-1: SerialNumber: syz [ 1410.540704][ T9] usb 5-1: config 0 descriptor?? [ 1410.558470][ T9] cdc_ether 5-1:0.0: skipping garbage [ 1410.565798][ T9] cdc_ether 5-1:0.0: bad CDC descriptors [ 1410.585127][ T9] usb 5-1: unsupported MDLM descriptors [ 1410.596631][ T9] cdc_acm 5-1:0.0: skipping garbage [ 1410.611706][ T29] audit: type=1400 audit(1779457630.554:7586): avc: denied { create } for pid=21988 comm="syz.3.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1410.650970][ T29] audit: type=1400 audit(1779457630.574:7587): avc: denied { setopt } for pid=21988 comm="syz.3.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1411.045076][ T5809] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1411.108272][ T5809] peak_usb 7-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1411.337897][T21995] random: crng reseeded on system resumption [ 1411.817638][ T29] audit: type=1400 audit(1779457630.574:7588): avc: denied { setopt } for pid=21988 comm="syz.3.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1411.846696][ T29] audit: type=1400 audit(1779457630.584:7589): avc: denied { read } for pid=21988 comm="syz.3.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1411.870265][ T29] audit: type=1400 audit(1779457630.584:7590): avc: denied { write } for pid=21988 comm="syz.3.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1411.893827][ T29] audit: type=1400 audit(1779457630.994:7591): avc: denied { setopt } for pid=21977 comm="syz.6.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1411.915644][ T29] audit: type=1400 audit(1779457631.014:7592): avc: denied { create } for pid=21977 comm="syz.6.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1412.025555][ T29] audit: type=1400 audit(1779457631.014:7593): avc: denied { ioctl } for pid=21977 comm="syz.6.3411" path="socket:[66656]" dev="sockfs" ino=66656 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1412.056128][ T5797] usb 3-1: USB disconnect, device number 61 [ 1412.075395][ T5809] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -32 [ 1412.143892][ T29] audit: type=1400 audit(1779457631.934:7594): avc: denied { create } for pid=21974 comm="syz.4.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1412.146103][T22004] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3410'. [ 1414.086748][T22039] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3419'. [ 1414.187930][T22039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1414.233927][ T5622] usb 5-1: USB disconnect, device number 58 [ 1414.360591][ T5809] usb 7-1: USB disconnect, device number 3 [ 1414.536715][T22051] random: crng reseeded on system resumption [ 1414.571426][T20420] Bluetooth: hci4: command 0x0406 tx timeout [ 1416.039041][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1416.039058][ T29] audit: type=1400 audit(1779457635.974:7655): avc: denied { read } for pid=22054 comm="syz.6.3423" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1416.094128][ T5738] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1416.128159][ T29] audit: type=1400 audit(1779457635.974:7656): avc: denied { open } for pid=22054 comm="syz.6.3423" path="/dev/input/event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1416.200215][ T29] audit: type=1400 audit(1779457636.024:7657): avc: denied { create } for pid=22054 comm="syz.6.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1416.254905][ T29] audit: type=1400 audit(1779457636.024:7658): avc: denied { connect } for pid=22054 comm="syz.6.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1416.292945][ T29] audit: type=1400 audit(1779457636.024:7659): avc: denied { bind } for pid=22054 comm="syz.6.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1416.314644][ T29] audit: type=1400 audit(1779457636.024:7660): avc: denied { create } for pid=22054 comm="syz.6.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1416.338516][ T5738] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1416.347945][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.359482][ T5738] usb 5-1: Product: syz [ 1416.365845][ T5738] usb 5-1: Manufacturer: syz [ 1416.370542][ T29] audit: type=1400 audit(1779457636.094:7661): avc: denied { write } for pid=22054 comm="syz.6.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1416.392022][ T5738] usb 5-1: SerialNumber: syz [ 1416.398504][ T29] audit: type=1400 audit(1779457636.094:7662): avc: denied { accept } for pid=22054 comm="syz.6.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1416.420070][ T29] audit: type=1400 audit(1779457636.094:7663): avc: denied { sys_module } for pid=22060 comm="syz.3.3424" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1416.421435][ T5809] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1416.558976][T22075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3425'. [ 1416.636536][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1416.670152][ T29] audit: type=1400 audit(1779457636.564:7664): avc: denied { write } for pid=22074 comm="syz.6.3425" name="ipv6_route" dev="proc" ino=4026533199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1416.762241][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1416.867761][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1416.977998][ T5809] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1416.997306][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.014460][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1417.331377][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1417.512524][ T5809] usb 4-1: Product: syz [ 1417.564230][ T5809] usb 4-1: Manufacturer: syz [ 1417.582985][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.596549][ T5809] usb 4-1: SerialNumber: syz [ 1417.661343][ T9] usb 7-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1417.673034][ T5809] usb 4-1: config 0 descriptor?? [ 1417.678321][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.685517][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.709429][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.729178][ T9] usb 7-1: Product: syz [ 1417.749203][ T9] usb 7-1: Manufacturer: syz [ 1417.755169][ T9] usb 7-1: SerialNumber: syz [ 1417.772521][ T9] usb 7-1: config 0 descriptor?? [ 1417.793276][ T9] cdc_ether 7-1:0.0: skipping garbage [ 1417.819024][ T9] cdc_ether 7-1:0.0: bad CDC descriptors [ 1417.826157][ T9] usb 7-1: unsupported MDLM descriptors [ 1417.856821][ T9] cdc_acm 7-1:0.0: skipping garbage [ 1417.909914][ T5809] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1418.008172][ T5738] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1418.036566][T22075] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3425'. [ 1418.096309][ T5738] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1418.148026][ T5809] usb 7-1: USB disconnect, device number 4 [ 1418.519014][ T5622] IPVS: starting estimator thread 0... [ 1418.556937][ T5738] usb 5-1: USB disconnect, device number 59 [ 1418.714405][T14883] udevd[14883]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1418.761469][T22102] IPVS: using max 47 ests per chain, 112800 per kthread [ 1419.848444][ T9] usb 4-1: USB disconnect, device number 61 [ 1421.366432][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1421.366448][ T29] audit: type=1400 audit(1779457641.294:7672): avc: denied { ioctl } for pid=22117 comm="syz.3.3434" path="socket:[66324]" dev="sockfs" ino=66324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1421.404932][ T29] audit: type=1400 audit(1779457641.344:7673): avc: denied { ioctl } for pid=22117 comm="syz.3.3434" path="socket:[66320]" dev="sockfs" ino=66320 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1421.448689][ T29] audit: type=1400 audit(1779457641.384:7674): avc: denied { map_read map_write } for pid=22120 comm="syz.2.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1421.477093][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3434'. [ 1421.811279][ T5809] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1421.822966][ T29] audit: type=1400 audit(1779457641.414:7675): avc: denied { create } for pid=22120 comm="syz.2.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1421.971847][ T29] audit: type=1400 audit(1779457641.434:7676): avc: denied { bind } for pid=22120 comm="syz.2.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1422.046085][T22130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1422.375455][ T5809] usb 6-1: Using ep0 maxpacket: 8 [ 1422.384137][ T5809] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1422.392475][ T5809] usb 6-1: config 0 has no interface number 0 [ 1422.398655][ T5809] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1422.409596][ T5809] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1422.421383][ T29] audit: type=1400 audit(1779457641.764:7677): avc: denied { watch watch_reads } for pid=22127 comm="syz.4.3436" path="/112" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1422.480505][ T5809] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1422.520578][ T5809] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1422.537293][ T5809] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1422.554284][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.641633][ T5809] usb 6-1: config 0 descriptor?? [ 1422.717540][ T5809] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1423.361589][ T29] audit: type=1400 audit(1779457643.304:7678): avc: denied { create } for pid=22115 comm="syz.5.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1423.424684][T22142] netlink: 'syz.6.3440': attribute type 2 has an invalid length. [ 1423.435063][ T29] audit: type=1400 audit(1779457643.364:7679): avc: denied { ioctl } for pid=22139 comm="syz.6.3440" path="socket:[66382]" dev="sockfs" ino=66382 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1423.500358][ T29] audit: type=1400 audit(1779457643.364:7680): avc: denied { write } for pid=22139 comm="syz.6.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1423.571060][ T29] audit: type=1400 audit(1779457643.504:7681): avc: denied { relabelfrom } for pid=22131 comm="syz.3.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1423.637774][T22147] xt_hashlimit: size too large, truncated to 1048576 [ 1424.563991][ T5738] usb 6-1: USB disconnect, device number 34 [ 1424.600272][ T5738] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1425.337308][T22176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'. [ 1426.910503][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3450'. [ 1427.171401][ T5809] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1427.331292][ T5809] usb 4-1: Using ep0 maxpacket: 8 [ 1427.343910][ T5809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.368951][ T5809] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1427.385520][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.400388][ T5809] usb 4-1: Product: syz [ 1427.409184][ T5809] usb 4-1: Manufacturer: syz [ 1427.418414][ T5809] usb 4-1: SerialNumber: syz [ 1427.448676][ T5809] usb 4-1: config 0 descriptor?? [ 1427.483616][ T5809] cdc_ether 4-1:0.0: skipping garbage [ 1427.503411][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1427.503422][ T29] audit: type=1400 audit(1779457647.444:7692): avc: denied { read write } for pid=22187 comm="syz.4.3451" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1427.537395][ T5809] cdc_ether 4-1:0.0: bad CDC descriptors [ 1427.538245][ T29] audit: type=1400 audit(1779457647.474:7693): avc: denied { open } for pid=22187 comm="syz.4.3451" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1427.570982][ T29] audit: type=1400 audit(1779457647.474:7694): avc: denied { ioctl } for pid=22187 comm="syz.4.3451" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1427.610789][ T5809] usb 4-1: unsupported MDLM descriptors [ 1427.632696][ T5809] cdc_acm 4-1:0.0: skipping garbage [ 1427.675240][T22183] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3450'. [ 1427.871276][ T5809] usb 4-1: USB disconnect, device number 62 [ 1427.906028][T22195] netlink: 'syz.4.3452': attribute type 2 has an invalid length. [ 1428.818865][ T29] audit: type=1400 audit(1779457648.754:7695): avc: denied { setopt } for pid=22203 comm="syz.6.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1428.890615][T22211] xt_hashlimit: size too large, truncated to 1048576 [ 1429.285133][ T29] audit: type=1400 audit(1779457649.224:7696): avc: denied { write } for pid=22217 comm="syz.2.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1429.502289][T22224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3461'. [ 1429.546601][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3462'. [ 1429.851673][ T5738] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1430.021574][ T5738] usb 3-1: Using ep0 maxpacket: 8 [ 1430.034428][ T5738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.055251][ T5738] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1430.065143][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.082149][ T5738] usb 3-1: Product: syz [ 1430.090069][ T5738] usb 3-1: Manufacturer: syz [ 1430.103790][ T5738] usb 3-1: SerialNumber: syz [ 1430.128920][ T5738] usb 3-1: config 0 descriptor?? [ 1430.147529][ T5738] cdc_ether 3-1:0.0: skipping garbage [ 1430.166477][ T5738] cdc_ether 3-1:0.0: bad CDC descriptors [ 1430.181128][ T5738] usb 3-1: unsupported MDLM descriptors [ 1430.193560][ T5738] cdc_acm 3-1:0.0: skipping garbage [ 1430.890298][T22227] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3461'. [ 1432.474862][ T29] audit: type=1400 audit(1779457652.414:7697): avc: denied { create } for pid=22274 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1432.530493][ T29] audit: type=1400 audit(1779457652.444:7698): avc: denied { map } for pid=22274 comm="syz.5.3469" path="socket:[67651]" dev="sockfs" ino=67651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1432.595273][ T29] audit: type=1400 audit(1779457652.444:7699): avc: denied { execmem } for pid=22274 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1432.623000][ T29] audit: type=1400 audit(1779457652.444:7700): avc: denied { read accept } for pid=22274 comm="syz.5.3469" path="socket:[67651]" dev="sockfs" ino=67651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1432.681818][ T5622] usb 3-1: USB disconnect, device number 62 [ 1432.823576][ T29] audit: type=1400 audit(1779457652.554:7701): avc: denied { create } for pid=22274 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1432.881746][ T29] audit: type=1400 audit(1779457652.554:7702): avc: denied { write } for pid=22274 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1432.916889][ T29] audit: type=1400 audit(1779457652.564:7703): avc: denied { read } for pid=22274 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1432.958034][ T29] audit: type=1400 audit(1779457652.594:7704): avc: denied { module_request } for pid=22233 comm="syz.6.3464" kmod="crypto-lzs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1433.591321][ T29] audit: type=1400 audit(1779457652.594:7705): avc: denied { prog_load } for pid=22274 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1433.701389][ T29] audit: type=1400 audit(1779457652.594:7706): avc: denied { bpf } for pid=22274 comm="syz.5.3469" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1433.978262][ T29] audit: type=1400 audit(1779457652.604:7707): avc: denied { create } for pid=22274 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1434.322597][ T6008] block nbd1: Possible stuck request ffff8880281c0000: control (read@0,1024B). Runtime 180 seconds [ 1434.342763][ T6008] block nbd1: Possible stuck request ffff8880281c01c0: control (read@1024,1024B). Runtime 180 seconds [ 1434.361832][ T6008] block nbd1: Possible stuck request ffff8880281c0380: control (read@2048,1024B). Runtime 180 seconds [ 1434.385315][ T6008] block nbd1: Possible stuck request ffff8880281c0540: control (read@3072,1024B). Runtime 180 seconds [ 1434.998197][T22308] random: crng reseeded on system resumption [ 1435.902188][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1436.501313][ T5622] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1436.671304][ T5622] usb 3-1: Using ep0 maxpacket: 8 [ 1436.704770][ T5622] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.758702][ T5622] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1436.784912][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.810353][ T5622] usb 3-1: Product: syz [ 1436.833162][ T5622] usb 3-1: Manufacturer: syz [ 1436.845066][ T5622] usb 3-1: SerialNumber: syz [ 1436.873397][ T5622] usb 3-1: config 0 descriptor?? [ 1436.899113][ T5622] cdc_ether 3-1:0.0: skipping garbage [ 1436.909923][ T5622] cdc_ether 3-1:0.0: bad CDC descriptors [ 1436.926687][ T5622] usb 3-1: unsupported MDLM descriptors [ 1436.942709][ T5622] cdc_acm 3-1:0.0: skipping garbage [ 1437.150048][T22318] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1437.186859][ T9] usb 3-1: USB disconnect, device number 63 [ 1437.261944][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1437.431340][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1437.441390][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1437.460407][ T10] usb 7-1: config 0 has no interface number 0 [ 1437.473090][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1437.493973][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1437.522789][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1437.538249][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1437.538265][ T29] audit: type=1400 audit(1779457657.474:7766): avc: denied { setopt } for pid=22345 comm="syz.3.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1437.576730][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1437.606683][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1437.622672][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.636232][ T10] usb 7-1: config 0 descriptor?? [ 1437.659054][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1437.859432][ T29] audit: type=1400 audit(1779457657.794:7767): avc: denied { create } for pid=22342 comm="syz.6.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1438.545386][ T29] audit: type=1400 audit(1779457658.484:7768): avc: denied { read write } for pid=22358 comm="syz.4.3486" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1438.637607][ T29] audit: type=1400 audit(1779457658.484:7769): avc: denied { open } for pid=22358 comm="syz.4.3486" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1439.163396][ T29] audit: type=1400 audit(1779457658.514:7770): avc: denied { ioctl } for pid=22358 comm="syz.4.3486" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1439.483099][T22366] fuse: Bad value for 'fd' [ 1439.506830][ T29] audit: type=1400 audit(1779457659.424:7771): avc: denied { mounton } for pid=22365 comm="syz.4.3489" path="/126/file0" dev="tmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1440.023025][ T9] usb 7-1: USB disconnect, device number 5 [ 1440.046491][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1440.294707][ T29] audit: type=1400 audit(1779457660.234:7772): avc: denied { create } for pid=22378 comm="syz.6.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1440.897657][ T29] audit: type=1400 audit(1779457660.834:7773): avc: denied { write } for pid=22382 comm="syz.5.3493" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1440.955049][ T29] audit: type=1400 audit(1779457660.864:7774): avc: denied { shutdown } for pid=22382 comm="syz.5.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1443.483232][ T29] audit: type=1400 audit(1779457663.424:7775): avc: denied { write } for pid=22398 comm="syz.6.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1443.550316][ T29] audit: type=1400 audit(1779457663.464:7776): avc: denied { ioctl } for pid=22398 comm="syz.6.3498" path="socket:[67242]" dev="sockfs" ino=67242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1443.582562][T22410] trusted_key: encrypted_key: insufficient parameters specified [ 1443.747174][ T29] audit: type=1400 audit(1779457663.684:7777): avc: denied { sys_module } for pid=22404 comm="syz.4.3500" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1443.770159][ T29] audit: type=1400 audit(1779457663.684:7778): avc: denied { ioctl } for pid=22398 comm="syz.6.3498" path="socket:[67824]" dev="sockfs" ino=67824 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1444.131569][ T5622] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1444.307661][ T29] audit: type=1400 audit(1779457664.244:7779): avc: denied { map_create } for pid=22421 comm="syz.5.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1444.322851][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1444.347169][ T29] audit: type=1400 audit(1779457664.244:7780): avc: denied { map_read map_write } for pid=22421 comm="syz.5.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1444.378306][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1444.407575][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1444.432278][ T5622] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1444.446222][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.459270][ T5622] usb 5-1: Product: syz [ 1444.470689][ T5622] usb 5-1: Manufacturer: syz [ 1444.692946][T22431] random: crng reseeded on system resumption [ 1445.265625][ T5809] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1446.012489][ T5809] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1446.419672][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.776433][ T5809] usb 6-1: Product: syz [ 1446.783531][ T5809] usb 6-1: Manufacturer: syz [ 1446.788310][ T5809] usb 6-1: SerialNumber: syz [ 1447.141862][ T5622] usb 5-1: SerialNumber: syz [ 1447.152681][ T5622] usb 5-1: config 0 descriptor?? [ 1447.388018][ T5622] usb 5-1: can't set config #0, error -71 [ 1447.503756][ T5622] usb 5-1: USB disconnect, device number 60 [ 1448.278389][ T29] audit: type=1400 audit(1779457668.114:7781): avc: denied { create } for pid=22451 comm="syz.4.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1448.392138][T22453] xt_hashlimit: size too large, truncated to 1048576 [ 1448.468080][ T29] audit: type=1400 audit(1779457668.164:7782): avc: denied { read write } for pid=22451 comm="syz.4.3511" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1448.670654][ T29] audit: type=1400 audit(1779457668.164:7783): avc: denied { open } for pid=22451 comm="syz.4.3511" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1448.815638][ T29] audit: type=1400 audit(1779457668.524:7784): avc: denied { name_bind } for pid=22451 comm="syz.4.3511" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1449.534494][ T5809] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1449.554579][ T5809] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1449.648283][ T29] audit: type=1400 audit(1779457669.584:7785): avc: denied { kexec_image_load } for pid=22474 comm="syz.2.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1449.728873][ T5809] usb 6-1: USB disconnect, device number 35 [ 1450.051548][T14883] udevd[14883]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 1450.062340][T22479] random: crng reseeded on system resumption [ 1450.210634][T14883] udevd[14883]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1451.599077][T22524] random: crng reseeded on system resumption [ 1451.705546][T22527] trusted_key: encrypted_key: insufficient parameters specified [ 1452.641278][T17835] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1452.730803][T22545] random: crng reseeded on system resumption [ 1452.793961][T17835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1453.503643][T17835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1453.533360][T17835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1453.549441][T17835] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1453.561015][T17835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.569476][T17835] usb 7-1: Product: syz [ 1453.575152][T17835] usb 7-1: Manufacturer: syz [ 1453.580954][T17835] usb 7-1: SerialNumber: syz [ 1453.598022][T17835] usb 7-1: config 0 descriptor?? [ 1453.851632][ T5738] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1453.975900][T22559] xt_hashlimit: size too large, truncated to 1048576 [ 1454.005944][T17835] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1454.043620][ T5738] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 1454.065100][ T5738] usb 6-1: config 0 has no interface number 1 [ 1454.078974][ T5738] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1454.109515][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.138975][ T5738] usb 6-1: Product: syz [ 1454.148265][ T5738] usb 6-1: Manufacturer: syz [ 1454.155125][ T5738] usb 6-1: SerialNumber: syz [ 1454.167886][ T5738] usb 6-1: config 0 descriptor?? [ 1454.808378][ T29] audit: type=1400 audit(1779457674.324:7786): avc: denied { read write } for pid=22554 comm="syz.5.3525" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1455.150501][T22575] FAULT_INJECTION: forcing a failure. [ 1455.150501][T22575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.163875][ T29] audit: type=1400 audit(1779457674.324:7787): avc: denied { open } for pid=22554 comm="syz.5.3525" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1455.261861][T17835] usb 6-1: USB disconnect, device number 36 [ 1455.313972][T22575] CPU: 1 UID: 0 PID: 22575 Comm: syz.2.3523 Tainted: G L syzkaller #0 PREEMPT(full) [ 1455.314002][T22575] Tainted: [L]=SOFTLOCKUP [ 1455.314009][T22575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1455.314019][T22575] Call Trace: [ 1455.314025][T22575] [ 1455.314032][T22575] dump_stack_lvl+0x100/0x190 [ 1455.314058][T22575] should_fail_ex.cold+0x5/0xa [ 1455.314081][T22575] _copy_from_user+0x2e/0xd0 [ 1455.314112][T22575] copy_msghdr_from_user+0x9f/0x4f0 [ 1455.314137][T22575] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1455.314172][T22575] ___sys_sendmsg+0x106/0x1e0 [ 1455.314202][T22575] ? __pfx____sys_sendmsg+0x10/0x10 [ 1455.314252][T22575] __sys_sendmsg+0x170/0x220 [ 1455.314272][T22575] ? __pfx___sys_sendmsg+0x10/0x10 [ 1455.314301][T22575] ? rcu_is_watching+0x12/0xc0 [ 1455.314332][T22575] do_syscall_64+0x10b/0xf80 [ 1455.314357][T22575] ? clear_bhb_loop+0x40/0x90 [ 1455.314380][T22575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.314399][T22575] RIP: 0033:0x7f4a49b9ce59 [ 1455.314414][T22575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.314432][T22575] RSP: 002b:00007f4a4aa1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.314450][T22575] RAX: ffffffffffffffda RBX: 00007f4a49e16180 RCX: 00007f4a49b9ce59 [ 1455.314462][T22575] RDX: 0000000004000894 RSI: 0000200000000000 RDI: 0000000000000003 [ 1455.314472][T22575] RBP: 00007f4a4aa1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.314483][T22575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.314494][T22575] R13: 00007f4a49e16218 R14: 00007f4a49e16180 R15: 00007ffff8f17758 [ 1455.314519][T22575] [ 1456.089265][T22583] xt_hashlimit: size too large, truncated to 1048576 [ 1456.099960][ T5809] usb 7-1: USB disconnect, device number 6 [ 1456.393514][ T29] audit: type=1400 audit(1779457676.334:7788): avc: denied { create } for pid=22596 comm="syz.3.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1456.414977][ T5738] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1456.602802][ T29] audit: type=1400 audit(1779457676.544:7789): avc: denied { create } for pid=22596 comm="syz.3.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1456.626736][ T5738] usb 6-1: Using ep0 maxpacket: 8 [ 1457.031858][T22597] random: crng reseeded on system resumption [ 1457.049605][ T5738] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1457.147406][ T5738] usb 6-1: config 0 has no interface number 0 [ 1457.157367][ T29] audit: type=1400 audit(1779457676.564:7790): avc: denied { setopt } for pid=22596 comm="syz.3.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1457.177969][ T5738] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1457.189853][ T5738] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1457.202780][ T5738] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1457.359623][ T5738] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1457.375076][ T5738] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1457.385115][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.418610][ T5738] usb 6-1: config 0 descriptor?? [ 1457.687693][ T5738] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1457.961304][ T5717] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1458.595204][ T5717] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1458.641670][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.681882][ T5717] usb 5-1: Product: syz [ 1458.695880][ T5717] usb 5-1: Manufacturer: syz [ 1458.721078][ T5717] usb 5-1: SerialNumber: syz [ 1459.117127][ T29] audit: type=1400 audit(1779457679.054:7791): avc: denied { read } for pid=22629 comm="syz.6.3540" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1459.169112][ T29] audit: type=1400 audit(1779457679.054:7792): avc: denied { open } for pid=22629 comm="syz.6.3540" path="/dev/input/event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1459.278537][ T29] audit: type=1400 audit(1779457679.214:7793): avc: denied { create } for pid=22629 comm="syz.6.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1459.404696][ T29] audit: type=1400 audit(1779457679.214:7794): avc: denied { connect } for pid=22629 comm="syz.6.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1459.509431][ T5738] usb 6-1: USB disconnect, device number 37 [ 1459.753805][ T29] audit: type=1400 audit(1779457679.214:7795): avc: denied { bind } for pid=22629 comm="syz.6.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1460.529033][ T5738] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1461.004079][ T29] audit: type=1400 audit(1779457679.234:7796): avc: denied { write } for pid=22629 comm="syz.6.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1461.201697][ T5717] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1461.558010][ T5717] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1461.601479][ T29] audit: type=1400 audit(1779457679.234:7797): avc: denied { accept } for pid=22629 comm="syz.6.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1461.681801][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3542'. [ 1461.818225][ T29] audit: type=1400 audit(1779457681.754:7798): avc: denied { name_bind } for pid=22652 comm="syz.5.3545" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1461.840587][ T29] audit: type=1400 audit(1779457681.784:7799): avc: denied { node_bind } for pid=22652 comm="syz.5.3545" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1461.846881][ T5717] usb 5-1: USB disconnect, device number 61 [ 1461.964941][T10800] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1462.267511][T14883] udevd[14883]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1462.323319][T10800] usb 4-1: Using ep0 maxpacket: 8 [ 1462.335254][T10800] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.375220][T10800] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1462.398308][T10800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.429581][T10800] usb 4-1: Product: syz [ 1462.436104][T10800] usb 4-1: Manufacturer: syz [ 1462.441131][T10800] usb 4-1: SerialNumber: syz [ 1462.467272][T10800] usb 4-1: config 0 descriptor?? [ 1462.489052][T10800] cdc_ether 4-1:0.0: skipping garbage [ 1462.510398][T10800] cdc_ether 4-1:0.0: bad CDC descriptors [ 1462.529995][T10800] usb 4-1: unsupported MDLM descriptors [ 1462.550821][T10800] cdc_acm 4-1:0.0: skipping garbage [ 1462.733895][ T29] audit: type=1400 audit(1779457682.654:7800): avc: denied { read append } for pid=22666 comm="syz.6.3547" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1462.914889][T22647] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3542'. [ 1462.979292][ T29] audit: type=1400 audit(1779457682.654:7801): avc: denied { open } for pid=22666 comm="syz.6.3547" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1463.206169][ T29] audit: type=1400 audit(1779457682.664:7802): avc: denied { write } for pid=22666 comm="syz.6.3547" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1463.710102][ T29] audit: type=1400 audit(1779457683.644:7803): avc: denied { read write } for pid=22681 comm="syz.2.3551" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1463.734513][ T5619] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1463.735841][ T9] usb 4-1: USB disconnect, device number 63 [ 1463.800204][ T29] audit: type=1400 audit(1779457683.644:7804): avc: denied { open } for pid=22681 comm="syz.2.3551" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1463.871020][ T29] audit: type=1400 audit(1779457683.644:7805): avc: denied { ioctl } for pid=22681 comm="syz.2.3551" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1463.911792][T22683] FAULT_INJECTION: forcing a failure. [ 1463.911792][T22683] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.030831][T22683] CPU: 0 UID: 0 PID: 22683 Comm: syz.2.3551 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.030863][T22683] Tainted: [L]=SOFTLOCKUP [ 1464.030870][T22683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1464.030881][T22683] Call Trace: [ 1464.030888][T22683] [ 1464.030895][T22683] dump_stack_lvl+0x100/0x190 [ 1464.030923][T22683] should_fail_ex.cold+0x5/0xa [ 1464.030948][T22683] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1464.030975][T22683] should_failslab+0xc2/0x120 [ 1464.030996][T22683] __kmalloc_noprof+0xe0/0x850 [ 1464.031019][T22683] ? kfree+0x1dd/0x6c0 [ 1464.031044][T22683] tomoyo_realpath_from_path+0xb6/0x690 [ 1464.031072][T22683] tomoyo_path_number_perm+0x23c/0x580 [ 1464.031093][T22683] ? tomoyo_path_number_perm+0x22e/0x580 [ 1464.031120][T22683] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1464.031164][T22683] ? find_held_lock+0x2b/0x80 [ 1464.031180][T22683] ? __fget_files+0x215/0x3d0 [ 1464.031223][T22683] ? hook_file_ioctl_common+0x149/0x410 [ 1464.031239][T22683] ? __fget_files+0x215/0x3d0 [ 1464.031264][T22683] ? __fget_files+0x21f/0x3d0 [ 1464.031291][T22683] security_file_ioctl+0xd3/0x230 [ 1464.031317][T22683] __x64_sys_ioctl+0xb7/0x210 [ 1464.031339][T22683] do_syscall_64+0x10b/0xf80 [ 1464.031364][T22683] ? clear_bhb_loop+0x40/0x90 [ 1464.031387][T22683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.031406][T22683] RIP: 0033:0x7f4a49b9ce59 [ 1464.031422][T22683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.031437][T22683] RSP: 002b:00007f4a4aa3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1464.031455][T22683] RAX: ffffffffffffffda RBX: 00007f4a49e16090 RCX: 00007f4a49b9ce59 [ 1464.031466][T22683] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1464.031476][T22683] RBP: 00007f4a4aa3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.031487][T22683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.031498][T22683] R13: 00007f4a49e16128 R14: 00007f4a49e16090 R15: 00007ffff8f17758 [ 1464.031523][T22683] [ 1464.565144][T22691] random: crng reseeded on system resumption [ 1465.425051][T22683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1465.644549][ T6008] block nbd1: Possible stuck request ffff8880281c0000: control (read@0,1024B). Runtime 210 seconds [ 1465.655490][ T6008] block nbd1: Possible stuck request ffff8880281c01c0: control (read@1024,1024B). Runtime 210 seconds [ 1465.667783][ T6008] block nbd1: Possible stuck request ffff8880281c0380: control (read@2048,1024B). Runtime 210 seconds [ 1465.678835][ T6008] block nbd1: Possible stuck request ffff8880281c0540: control (read@3072,1024B). Runtime 210 seconds [ 1466.796731][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1466.796749][ T29] audit: type=1400 audit(1779457686.734:7812): avc: denied { setopt } for pid=22720 comm="syz.6.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1467.679237][ T29] audit: type=1400 audit(1779457686.734:7813): avc: denied { setopt } for pid=22720 comm="syz.6.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1467.699964][ T29] audit: type=1400 audit(1779457686.764:7814): avc: denied { read } for pid=22720 comm="syz.6.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1470.364716][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3565'. [ 1470.851261][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1471.021421][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1471.036436][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.060686][ T9] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1471.080143][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.095753][ T9] usb 6-1: Product: syz [ 1471.111538][ T9] usb 6-1: Manufacturer: syz [ 1471.134316][ T9] usb 6-1: SerialNumber: syz [ 1471.151523][ T9] usb 6-1: config 0 descriptor?? [ 1471.167010][ T9] cdc_ether 6-1:0.0: skipping garbage [ 1471.183037][ T9] cdc_ether 6-1:0.0: bad CDC descriptors [ 1471.203441][ T9] usb 6-1: unsupported MDLM descriptors [ 1471.229113][ T9] cdc_acm 6-1:0.0: skipping garbage [ 1471.372878][T22775] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3565'. [ 1471.429927][ T5622] usb 6-1: USB disconnect, device number 38 [ 1474.582996][ T29] audit: type=1400 audit(1779457694.514:7815): avc: denied { unmount } for pid=18311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1475.961847][ T29] audit: type=1400 audit(1779457695.554:7816): avc: denied { bind } for pid=22833 comm="syz.6.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1476.691000][T22856] random: crng reseeded on system resumption [ 1477.046390][ T5622] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1477.231819][ T5622] usb 6-1: Using ep0 maxpacket: 8 [ 1477.249678][ T5622] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1477.268470][ T5622] usb 6-1: config 0 has no interface number 0 [ 1477.275155][ T5738] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1477.294675][ T5622] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1477.321647][T22872] netlink: 'syz.4.3584': attribute type 2 has an invalid length. [ 1477.329492][ T5622] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1477.365277][ T5622] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1477.395979][ T5622] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1477.409748][ T5622] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1477.419779][ T5622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.430310][ T5622] usb 6-1: config 0 descriptor?? [ 1477.448338][ T5622] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1477.465651][ T5738] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1477.479277][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.488071][ T5738] usb 4-1: Product: syz [ 1477.492582][ T5738] usb 4-1: Manufacturer: syz [ 1477.497216][ T5738] usb 4-1: SerialNumber: syz [ 1478.534148][ T5738] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1478.569654][ T5738] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1478.634441][ T5738] usb 4-1: USB disconnect, device number 64 [ 1478.682060][T14883] udevd[14883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1479.317246][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.323768][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.336277][ T29] audit: type=1400 audit(1779457699.234:7817): avc: denied { firmware_load } for pid=22897 comm="syz.2.3588" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1479.612288][T22899] syz.2.3588 (22899) used greatest stack depth: 19720 bytes left [ 1479.839534][ T5738] usb 6-1: USB disconnect, device number 39 [ 1479.854746][ T5738] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1480.010792][T22903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3590'. [ 1480.311455][T10800] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1480.591310][T10800] usb 6-1: Using ep0 maxpacket: 8 [ 1480.616775][T10800] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.650548][T10800] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1480.682453][T10800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.702183][T10800] usb 6-1: Product: syz [ 1480.716956][T10800] usb 6-1: Manufacturer: syz [ 1480.721007][T22912] netlink: 'syz.4.3592': attribute type 2 has an invalid length. [ 1480.733884][T10800] usb 6-1: SerialNumber: syz [ 1480.750174][ T29] audit: type=1400 audit(1779457700.684:7818): avc: denied { ioctl } for pid=22913 comm="syz.3.3594" path="socket:[68561]" dev="sockfs" ino=68561 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1480.786498][T10800] usb 6-1: config 0 descriptor?? [ 1480.807899][T10800] cdc_ether 6-1:0.0: skipping garbage [ 1480.828555][T22917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 1480.833877][T10800] cdc_ether 6-1:0.0: bad CDC descriptors [ 1480.864536][T10800] usb 6-1: unsupported MDLM descriptors [ 1480.900833][T10800] cdc_acm 6-1:0.0: skipping garbage [ 1481.223697][T22903] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3590'. [ 1481.359446][ T5622] usb 6-1: USB disconnect, device number 40 [ 1481.550461][T22930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3597'. [ 1481.562945][T22930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3597'. [ 1481.572456][T22930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3597'. [ 1481.641296][T10800] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1482.613982][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3599'. [ 1482.690114][T22941] xt_hashlimit: size too large, truncated to 1048576 [ 1482.721968][T10800] usb 3-1: Using ep0 maxpacket: 32 [ 1482.736270][T10800] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1482.746044][T10800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.754158][T10800] usb 3-1: Product: syz [ 1482.758693][T10800] usb 3-1: Manufacturer: syz [ 1482.771222][T10800] usb 3-1: SerialNumber: syz [ 1482.790807][T10800] usb 3-1: config 0 descriptor?? [ 1483.229503][T10800] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1483.229946][ T29] audit: type=1400 audit(1779457703.154:7819): avc: denied { setopt } for pid=22924 comm="syz.2.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1483.360907][T22949] random: crng reseeded on system resumption [ 1483.524440][ T29] audit: type=1400 audit(1779457703.154:7820): avc: denied { ioctl } for pid=22924 comm="syz.2.3589" path="socket:[68603]" dev="sockfs" ino=68603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1483.563356][T10800] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1483.577830][T22952] vivid-000: ================= START STATUS ================= [ 1483.730138][T22952] vivid-000: Radio HW Seek Mode: Bounded [ 1483.777527][T22952] vivid-000: Radio Programmable HW Seek: false [ 1483.796218][T22952] vivid-000: RDS Rx I/O Mode: Block I/O [ 1483.828574][T22952] vivid-000: Generate RBDS Instead of RDS: false [ 1483.849113][T22952] vivid-000: RDS Reception: true [ 1483.864896][T22952] vivid-000: RDS Program Type: 0 inactive [ 1483.879550][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3604'. [ 1483.895768][T22952] vivid-000: RDS PS Name: inactive [ 1483.930892][T22952] vivid-000: RDS Radio Text: inactive [ 1483.983164][T22952] vivid-000: RDS Traffic Announcement: false inactive [ 1484.016755][T22952] vivid-000: RDS Traffic Program: false inactive [ 1484.059213][T22952] vivid-000: RDS Music: false inactive [ 1484.067384][T10800] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -32 [ 1484.089388][T22952] vivid-000: ================== END STATUS ================== [ 1484.271485][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1484.356599][ T29] audit: type=1400 audit(1779457704.294:7821): avc: denied { read } for pid=5275 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1484.621276][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1484.718939][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.194260][ T29] audit: type=1400 audit(1779457704.754:7822): avc: denied { mounton } for pid=22970 comm="syz.5.3606" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1485.221750][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1485.271008][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.309176][ T9] usb 4-1: Product: syz [ 1485.325446][ T9] usb 4-1: Manufacturer: syz [ 1485.345772][ T9] usb 4-1: SerialNumber: syz [ 1485.363593][ T9] usb 4-1: config 0 descriptor?? [ 1485.390128][ T9] cdc_ether 4-1:0.0: skipping garbage [ 1485.402389][ T9] cdc_ether 4-1:0.0: bad CDC descriptors [ 1485.440029][ T9] usb 4-1: unsupported MDLM descriptors [ 1485.446533][ T9] cdc_acm 4-1:0.0: skipping garbage [ 1485.868558][T22955] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3604'. [ 1485.900470][ T5809] usb 4-1: USB disconnect, device number 65 [ 1486.070137][ T5619] Bluetooth: hci5: unexpected event for opcode 0x007f [ 1486.070812][T17835] usb 3-1: USB disconnect, device number 64 [ 1486.078483][ T29] audit: type=1400 audit(1779457706.004:7823): avc: denied { append } for pid=22990 comm="syz.4.3609" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1486.097967][T22993] exFAT-fs (loop6): unable to read boot sector [ 1486.163529][T22993] exFAT-fs (loop6): failed to read boot sector [ 1486.186551][T22993] exFAT-fs (loop6): failed to recognize exfat type [ 1486.229268][T22998] FAULT_INJECTION: forcing a failure. [ 1486.229268][T22998] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.243002][T22998] CPU: 0 UID: 0 PID: 22998 Comm: syz.4.3609 Tainted: G L syzkaller #0 PREEMPT(full) [ 1486.243031][T22998] Tainted: [L]=SOFTLOCKUP [ 1486.243038][T22998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1486.243047][T22998] Call Trace: [ 1486.243053][T22998] [ 1486.243060][T22998] dump_stack_lvl+0x100/0x190 [ 1486.243087][T22998] should_fail_ex.cold+0x5/0xa [ 1486.243111][T22998] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1486.243137][T22998] should_failslab+0xc2/0x120 [ 1486.243155][T22998] __kmalloc_noprof+0xe0/0x850 [ 1486.243178][T22998] ? kfree+0x1dd/0x6c0 [ 1486.243206][T22998] tomoyo_realpath_from_path+0xb6/0x690 [ 1486.243236][T22998] tomoyo_path_number_perm+0x23c/0x580 [ 1486.243257][T22998] ? tomoyo_path_number_perm+0x22e/0x580 [ 1486.243280][T22998] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1486.243327][T22998] ? find_held_lock+0x2b/0x80 [ 1486.243345][T22998] ? __fget_files+0x215/0x3d0 [ 1486.243367][T22998] ? hook_file_ioctl_common+0x149/0x410 [ 1486.243382][T22998] ? __fget_files+0x215/0x3d0 [ 1486.243408][T22998] ? __fget_files+0x21f/0x3d0 [ 1486.243434][T22998] security_file_ioctl+0xd3/0x230 [ 1486.243459][T22998] __x64_sys_ioctl+0xb7/0x210 [ 1486.243486][T22998] do_syscall_64+0x10b/0xf80 [ 1486.243511][T22998] ? clear_bhb_loop+0x40/0x90 [ 1486.243533][T22998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.243551][T22998] RIP: 0033:0x7f7cabb9ce59 [ 1486.243567][T22998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.243583][T22998] RSP: 002b:00007f7cacb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1486.243601][T22998] RAX: ffffffffffffffda RBX: 00007f7cabe16090 RCX: 00007f7cabb9ce59 [ 1486.243613][T22998] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 1486.243623][T22998] RBP: 00007f7cacb16090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.243634][T22998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.243644][T22998] R13: 00007f7cabe16128 R14: 00007f7cabe16090 R15: 00007ffdd0ffc538 [ 1486.243669][T22998] [ 1486.243676][T22998] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1486.301280][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 1486.581013][ T29] audit: type=1400 audit(1779457706.514:7824): avc: denied { read write } for pid=23002 comm="syz.3.3612" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1486.673921][ T29] audit: type=1400 audit(1779457706.514:7825): avc: denied { open } for pid=23002 comm="syz.3.3612" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1486.784831][T23014] vivid-002: ================= START STATUS ================= [ 1486.839841][T23014] vivid-002: Radio HW Seek Mode: Bounded [ 1486.866038][T23014] vivid-002: Radio Programmable HW Seek: false [ 1486.881874][T23014] vivid-002: RDS Rx I/O Mode: Block I/O [ 1486.903718][T23014] vivid-002: Generate RBDS Instead of RDS: false [ 1486.923876][T23021] xt_hashlimit: size too large, truncated to 1048576 [ 1486.930669][T23014] vivid-002: RDS Reception: true [ 1486.940485][T23014] vivid-002: RDS Program Type: 0 inactive [ 1486.968954][T23014] vivid-002: RDS PS Name: inactive [ 1486.994924][T23014] vivid-002: RDS Radio Text: inactive [ 1487.035584][T23014] vivid-002: RDS Traffic Announcement: false inactive [ 1487.060721][T23014] vivid-002: RDS Traffic Program: false inactive [ 1487.371755][T23014] vivid-002: RDS Music: false inactive [ 1487.378885][T23014] vivid-002: ================== END STATUS ================== [ 1487.735719][T23033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3623'. [ 1488.011233][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1489.371253][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1489.388971][T23040] random: crng reseeded on system resumption [ 1489.960734][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.973017][ T9] usb 7-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1489.991210][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.011216][ T9] usb 7-1: Product: syz [ 1490.015498][ T9] usb 7-1: Manufacturer: syz [ 1490.021588][ T9] usb 7-1: SerialNumber: syz [ 1490.032681][T23049] FAULT_INJECTION: forcing a failure. [ 1490.032681][T23049] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.076799][T23049] CPU: 1 UID: 0 PID: 23049 Comm: syz.4.3626 Tainted: G L syzkaller #0 PREEMPT(full) [ 1490.076818][T23049] Tainted: [L]=SOFTLOCKUP [ 1490.076822][T23049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1490.076828][T23049] Call Trace: [ 1490.076832][T23049] [ 1490.076837][T23049] dump_stack_lvl+0x100/0x190 [ 1490.076855][T23049] should_fail_ex.cold+0x5/0xa [ 1490.076870][T23049] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1490.076886][T23049] should_failslab+0xc2/0x120 [ 1490.076898][T23049] __kmalloc_noprof+0xe0/0x850 [ 1490.076915][T23049] ? kfree+0x1dd/0x6c0 [ 1490.076931][T23049] tomoyo_realpath_from_path+0xb6/0x690 [ 1490.076949][T23049] tomoyo_path_number_perm+0x23c/0x580 [ 1490.076962][T23049] ? tomoyo_path_number_perm+0x22e/0x580 [ 1490.076976][T23049] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1490.077002][T23049] ? find_held_lock+0x2b/0x80 [ 1490.077012][T23049] ? __fget_files+0x215/0x3d0 [ 1490.077026][T23049] ? hook_file_ioctl_common+0x149/0x410 [ 1490.077035][T23049] ? __fget_files+0x215/0x3d0 [ 1490.077051][T23049] ? __fget_files+0x21f/0x3d0 [ 1490.077066][T23049] security_file_ioctl+0xd3/0x230 [ 1490.077081][T23049] __x64_sys_ioctl+0xb7/0x210 [ 1490.077094][T23049] do_syscall_64+0x10b/0xf80 [ 1490.077110][T23049] ? clear_bhb_loop+0x40/0x90 [ 1490.077122][T23049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.077133][T23049] RIP: 0033:0x7f7cabb9ce59 [ 1490.077143][T23049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.077154][T23049] RSP: 002b:00007f7cacb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.077165][T23049] RAX: ffffffffffffffda RBX: 00007f7cabe15fa0 RCX: 00007f7cabb9ce59 [ 1490.077172][T23049] RDX: 0000000000000000 RSI: 0000000000001279 RDI: 0000000000000003 [ 1490.077178][T23049] RBP: 00007f7cacb37090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.077185][T23049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.077191][T23049] R13: 00007f7cabe16038 R14: 00007f7cabe15fa0 R15: 00007ffdd0ffc538 [ 1490.077209][T23049] [ 1490.077214][T23049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1490.318917][ T9] usb 7-1: config 0 descriptor?? [ 1490.365662][ T9] cdc_ether 7-1:0.0: skipping garbage [ 1490.431868][ T9] cdc_ether 7-1:0.0: bad CDC descriptors [ 1490.486202][ T9] usb 7-1: unsupported MDLM descriptors [ 1490.538191][ T9] cdc_acm 7-1:0.0: skipping garbage [ 1490.574113][T23033] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3623'. [ 1490.630689][ T5738] usb 7-1: USB disconnect, device number 7 [ 1490.821967][T23073] vivid-000: ================= START STATUS ================= [ 1490.885799][T23073] vivid-000: Radio HW Seek Mode: Bounded [ 1490.919889][T23073] vivid-000: Radio Programmable HW Seek: false [ 1490.969938][T23073] vivid-000: RDS Rx I/O Mode: Block I/O [ 1491.016145][T23073] vivid-000: Generate RBDS Instead of RDS: false [ 1491.079304][T23073] vivid-000: RDS Reception: true [ 1491.134842][T23073] vivid-000: RDS Program Type: 0 inactive [ 1491.194197][T23073] vivid-000: RDS PS Name: inactive [ 1491.308006][T23073] vivid-000: RDS Radio Text: inactive [ 1491.392945][T23073] vivid-000: RDS Traffic Announcement: false inactive [ 1491.461418][T23073] vivid-000: RDS Traffic Program: false inactive [ 1491.498035][T23073] vivid-000: RDS Music: false inactive [ 1491.518682][T23073] vivid-000: ================== END STATUS ================== [ 1493.180362][T23099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3638'. [ 1495.691942][ T6008] block nbd1: Possible stuck request ffff8880281c0000: control (read@0,1024B). Runtime 240 seconds [ 1495.702981][ T6008] block nbd1: Possible stuck request ffff8880281c01c0: control (read@1024,1024B). Runtime 240 seconds [ 1495.715376][ T6008] block nbd1: Possible stuck request ffff8880281c0380: control (read@2048,1024B). Runtime 240 seconds [ 1495.727120][ T6008] block nbd1: Possible stuck request ffff8880281c0540: control (read@3072,1024B). Runtime 240 seconds [ 1496.145834][T23115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'. [ 1496.491393][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1496.641197][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1496.890044][T23125] random: crng reseeded on system resumption [ 1497.243655][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.262428][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1497.271832][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.279875][ T9] usb 3-1: Product: syz [ 1497.284494][ T9] usb 3-1: Manufacturer: syz [ 1497.289132][ T9] usb 3-1: SerialNumber: syz [ 1497.311342][ T9] usb 3-1: config 0 descriptor?? [ 1497.326256][ T9] cdc_ether 3-1:0.0: skipping garbage [ 1497.333264][ T9] cdc_ether 3-1:0.0: bad CDC descriptors [ 1497.347322][ T9] usb 3-1: unsupported MDLM descriptors [ 1497.368785][ T9] cdc_acm 3-1:0.0: skipping garbage [ 1497.501226][ T5738] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1497.809983][T23136] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3644'. [ 1498.241377][T23140] netlink: 'syz.5.3649': attribute type 2 has an invalid length. [ 1498.405313][ T5809] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1498.566830][ T5738] usb 7-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1498.572999][ T5809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1498.576163][ T5738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.591964][ T5738] usb 7-1: Product: syz [ 1498.596199][ T5738] usb 7-1: Manufacturer: syz [ 1498.602317][ T5738] usb 7-1: SerialNumber: syz [ 1498.637730][ T29] audit: type=1400 audit(1779457718.574:7826): avc: denied { read append } for pid=23149 comm="syz.5.3652" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1498.750783][ T29] audit: type=1400 audit(1779457718.604:7827): avc: denied { open } for pid=23149 comm="syz.5.3652" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1498.971724][ T5622] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1499.227322][ T5809] usb 4-1: not running at top speed; connect to a high speed hub [ 1499.276701][ T5622] usb 6-1: Using ep0 maxpacket: 32 [ 1499.328661][ T5622] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1499.347600][ T5622] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1499.478671][ T5622] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 1499.529341][ T5622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.598428][ T5622] usb 6-1: Product: syz [ 1499.619831][ T5622] usb 6-1: Manufacturer: syz [ 1499.636220][ T5622] usb 6-1: SerialNumber: syz [ 1499.718193][ T5809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.728706][ T5809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.753308][ T5809] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1499.764490][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.772587][ T5809] usb 4-1: Product: syz [ 1499.776791][ T5809] usb 4-1: Manufacturer: syz [ 1499.781834][ T5809] usb 4-1: SerialNumber: syz [ 1499.877499][ T29] audit: type=1400 audit(1779457719.814:7828): avc: denied { write } for pid=23156 comm="syz.4.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1499.912671][ T5622] ljca 6-1:1.0: probe with driver ljca failed with error -110 [ 1502.974087][ T4980] udevd[4980]: worker [14866] /devices/virtual/block/nbd1 timeout; kill it [ 1503.190475][ T4980] udevd[4980]: seq 22865 '/devices/virtual/block/nbd1' killed [ 1503.461490][ T5809] usb 4-1: 0:1 : does not exist [ 1503.534594][ T5809] usb 4-1: 0:2 : does not exist [ 1503.588008][ T5717] usb 6-1: USB disconnect, device number 41 [ 1503.630067][ T5809] usb 4-1: 6:0: failed to get current value for ch 1 (-22) [ 1503.664023][T14096] usb 3-1: USB disconnect, device number 65 [ 1503.730370][ T5809] usb 4-1: 6:0: failed to get current value for ch 0 (-22) [ 1506.088715][ T5809] usb 4-1: 6:0: failed to get current value for ch 1 (-22) [ 1506.666132][ T5809] usb 4-1: USB disconnect, device number 66 [ 1506.890737][ T5738] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1506.907206][ T5738] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1506.984071][T23207] random: crng reseeded on system resumption [ 1507.028865][T14903] udevd[14903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1507.061273][ T5738] usb 7-1: USB disconnect, device number 8 [ 1507.138784][T15040] udevd[15040]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1507.147105][T23213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3664'. [ 1508.104848][ T5809] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1508.441999][ T5809] usb 7-1: Using ep0 maxpacket: 32 [ 1508.451239][ T5738] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1508.824710][ T5738] usb 6-1: Using ep0 maxpacket: 8 [ 1508.858625][ T5738] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1508.924948][ T5738] usb 6-1: config 0 has no interface number 0 [ 1508.972332][ T5738] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1509.051920][ T5738] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1509.143198][ T5738] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1509.206195][ T5738] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1509.235837][ T5809] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 1509.238726][ T5738] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1509.244273][ T5809] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1509.253807][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.267973][ T5809] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 1509.314426][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.325563][ T5809] usb 7-1: Product: syz [ 1509.340366][ T5809] usb 7-1: Manufacturer: syz [ 1509.346717][ T5809] usb 7-1: SerialNumber: syz [ 1509.670546][ T5738] usb 6-1: config 0 descriptor?? [ 1509.722742][ T5738] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1509.815853][ T5809] ljca 7-1:1.0: probe with driver ljca failed with error -110 [ 1510.130945][T23250] trusted_key: encrypted_key: insufficient parameters specified [ 1510.401270][ T5809] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1510.552703][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1510.563565][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1510.573437][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1510.586389][ T5809] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1510.596041][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.604289][ T5809] usb 3-1: Product: syz [ 1510.608482][ T5809] usb 3-1: Manufacturer: syz [ 1510.613904][ T5809] usb 3-1: SerialNumber: syz [ 1510.620598][ T5809] usb 3-1: config 0 descriptor?? [ 1510.833404][ T5809] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 1511.021233][T19692] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1511.261179][T19692] usb 5-1: Using ep0 maxpacket: 8 [ 1511.274354][T19692] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1511.280081][ T5622] usb 6-1: USB disconnect, device number 42 [ 1511.282660][T19692] usb 5-1: config 0 has no interface number 0 [ 1511.297594][T19692] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1511.310902][T19692] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1511.318965][ T5622] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1511.331446][ T5738] usb 3-1: USB disconnect, device number 66 [ 1511.372810][T19692] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1511.398083][T19692] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1511.399592][T14096] usb 7-1: USB disconnect, device number 9 [ 1511.412204][T19692] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1511.440987][T23259] random: crng reseeded on system resumption [ 1511.457206][T19692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.503700][T19692] usb 5-1: config 0 descriptor?? [ 1511.532611][T19692] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1511.793010][T23277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1511.839771][T23277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.864771][T23277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.887119][T23277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1511.950140][T23277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.208589][T23293] netlink: 'syz.2.3678': attribute type 2 has an invalid length. [ 1513.611486][ T30] INFO: task syz.1.3274:21252 blocked for more than 143 seconds. [ 1513.619394][ T30] Tainted: G L syzkaller #0 [ 1513.627977][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1513.639548][ T30] task:syz.1.3274 state:D stack:28672 pid:21252 tgid:21251 ppid:20418 task_flags:0x400140 flags:0x00080002 [ 1513.651846][ T30] Call Trace: [ 1513.655291][ T30] [ 1513.658330][ T30] __schedule+0x1295/0x67a0 [ 1513.662991][ T30] ? __pfx___schedule+0x10/0x10 [ 1513.667990][ T30] ? __pfx___schedule+0x10/0x10 [ 1513.672981][ T30] ? find_held_lock+0x2b/0x80 [ 1513.677760][ T30] ? schedule+0x2bf/0x390 [ 1513.682238][ T30] schedule+0xdd/0x390 [ 1513.687137][ T30] schedule_preempt_disabled+0x13/0x30 [ 1513.699771][ T30] __mutex_lock+0xced/0x1b10 [ 1513.704535][ T30] ? bdev_open+0x41a/0xe40 [ 1513.714597][ T30] ? find_inode_fast+0x5e3/0x910 [ 1513.720827][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1513.728256][ T30] ? find_inode_fast+0x1fa/0x910 [ 1513.735872][ T30] ? bdev_open+0x41a/0xe40 [ 1513.743252][ T30] bdev_open+0x41a/0xe40 [ 1513.752496][ T30] ? iput+0x3a/0x40 [ 1513.791332][ T9] usb 5-1: USB disconnect, device number 62 [ 1513.801964][ T30] blkdev_open+0x34e/0x4f0 [ 1513.810387][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1513.822420][ T30] do_dentry_open+0x6d8/0x1660 [ 1513.836092][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1513.851483][ T30] vfs_open+0x82/0x3f0 [ 1513.867654][ T30] path_openat+0x208c/0x31a0 [ 1513.877482][ T30] ? __pfx_path_openat+0x10/0x10 [ 1513.891816][ T30] do_file_open+0x20e/0x430 [ 1513.899486][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1513.908460][ T30] ? alloc_fd+0x476/0x790 [ 1513.919382][ T30] ? do_getname+0x191/0x390 [ 1513.924414][T14096] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1513.928110][ T30] do_sys_openat2+0x10d/0x1e0 [ 1513.948103][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1513.957559][ T30] __x64_sys_openat+0x12d/0x210 [ 1513.966726][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1513.978200][ T30] ? rcu_is_watching+0x12/0xc0 [ 1513.991839][ T30] do_syscall_64+0x10b/0xf80 [ 1514.000256][ T30] ? clear_bhb_loop+0x40/0x90 [ 1514.020903][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.032004][ T30] RIP: 0033:0x7f490575d68e [ 1514.036744][ T30] RSP: 002b:00007f49039f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1514.056234][ T30] RAX: ffffffffffffffda RBX: 00007f49039f66c0 RCX: 00007f490575d68e [ 1514.076262][ T30] RDX: 0000000000008000 RSI: 00007f49039f5c00 RDI: ffffffffffffff9c [ 1514.091619][T14096] usb 4-1: Using ep0 maxpacket: 8 [ 1514.102398][ T30] RBP: 00007f49039f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1514.116337][T14096] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1514.130055][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1514.139253][T14096] usb 4-1: config 0 has no interface number 0 [ 1514.146038][T14096] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1514.167209][T14096] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1514.186564][ T30] R13: 00007f4905a16038 R14: 00007f4905a15fa0 R15: 00007ffe53651878 [ 1514.208962][T14096] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1514.220135][ T30] [ 1514.232960][ T30] [ 1514.232960][ T30] Showing all locks held in the system: [ 1514.274524][ T30] 1 lock held by khungtaskd/30: [ 1514.284720][T14096] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1514.305487][ T30] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3} [ 1514.305531][T14096] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1514.321631][T14096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.340705][T14096] usb 4-1: config 0 descriptor?? [ 1514.347713][ T30] , at: debug_show_all_locks+0x3d/0x184 [ 1514.351889][T14096] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1514.376058][ T30] 1 lock held by udevd/4980: [ 1514.387376][ T30] 2 locks held by getty/5370: [ 1514.401040][ T30] #0: ffff8880334090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1514.434269][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1514.469972][ T30] 2 locks held by kworker/u9:5/5624: [ 1514.486293][ T30] #0: ffff8880280ba140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1514.506400][ T30] #1: ffffc900046efd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1514.518572][ T30] 2 locks held by kworker/u9:7/5626: [ 1514.524253][ T30] #0: ffff8880280ba140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1514.555513][ T30] #1: ffffc9000470fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1514.593762][ T30] 4 locks held by kworker/u8:12/5903: [ 1514.624096][ T30] #0: ffff88801c6c0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1514.669149][ T30] #1: ffffc90005877d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1514.711389][ T30] #2: ffffffff905f5448 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1514.747981][ T30] #3: ffffffff8e7f1038 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1514.775009][ T30] 1 lock held by udevd/14866: [ 1514.782802][ T30] #0: ffff8880280df350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1514.798463][ T30] 1 lock held by syz.1.3274/21252: [ 1514.807265][ T30] #0: ffff8880280df350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1514.827356][ T30] 1 lock held by syz.3.3682/23307: [ 1514.836822][ T30] #0: ffff8880569b8860 (&dev->mutex#6){+.+.}-{4:4}, at: ld_usb_release+0xb6/0x710 [ 1514.854983][ T30] 2 locks held by syz.6.3683/23309: [ 1514.865240][ T30] 1 lock held by syz.6.3683/23311: [ 1514.874165][ T30] [ 1514.898558][ T30] ============================================= [ 1514.898558][ T30] [ 1514.916783][ T30] NMI backtrace for cpu 1 [ 1514.916862][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.916886][ T30] Tainted: [L]=SOFTLOCKUP [ 1514.916894][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1514.916901][ T30] Call Trace: [ 1514.916907][ T30] [ 1514.916912][ T30] dump_stack_lvl+0x100/0x190 [ 1514.916931][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1514.916946][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1514.916960][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1514.916976][ T30] sys_info+0x141/0x190 [ 1514.916986][ T30] watchdog+0xcb1/0x1030 [ 1514.917002][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1514.917017][ T30] ? __pfx_watchdog+0x10/0x10 [ 1514.917030][ T30] ? __kthread_parkme+0x18c/0x230 [ 1514.917043][ T30] ? kthread+0x13a/0x450 [ 1514.917054][ T30] ? __pfx_watchdog+0x10/0x10 [ 1514.917066][ T30] kthread+0x370/0x450 [ 1514.917079][ T30] ? __pfx_kthread+0x10/0x10 [ 1514.917092][ T30] ret_from_fork+0x72b/0xd50 [ 1514.917107][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1514.917121][ T30] ? __switch_to+0x800/0x1100 [ 1514.917138][ T30] ? __pfx_kthread+0x10/0x10 [ 1514.917151][ T30] ret_from_fork_asm+0x1a/0x30 [ 1514.917173][ T30] [ 1514.917232][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1515.050326][ C0] NMI backtrace for cpu 0 [ 1515.050342][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.050361][ C0] Tainted: [L]=SOFTLOCKUP [ 1515.050366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1515.050375][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1515.050399][ C0] Code: 76 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 71 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1515.050412][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1515.050425][ C0] RAX: 0000000009c0f815 RBX: ffffffff8e4955c0 RCX: ffffffff8b8b2095 [ 1515.050435][ C0] RDX: 0000000000000000 RSI: ffffffff8df23d5c RDI: ffffffff8c1c4200 [ 1515.050451][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 1515.050462][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 1515.050472][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d7e050 [ 1515.050482][ C0] FS: 0000000000000000(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000 [ 1515.050497][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1515.050506][ C0] CR2: 000020000020d030 CR3: 000000002baf2000 CR4: 00000000003526f0 [ 1515.050516][ C0] Call Trace: [ 1515.050520][ C0] [ 1515.050526][ C0] default_idle+0x9/0x10 [ 1515.050539][ C0] default_idle_call+0x6c/0xb0 [ 1515.050552][ C0] do_idle+0x464/0x590 [ 1515.050566][ C0] ? __pfx_do_idle+0x10/0x10 [ 1515.050578][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 1515.050596][ C0] cpu_startup_entry+0x4f/0x60 [ 1515.050612][ C0] rest_init+0x251/0x260 [ 1515.050628][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1515.050643][ C0] start_kernel+0x484/0x490 [ 1515.050664][ C0] x86_64_start_reservations+0x24/0x30 [ 1515.050685][ C0] x86_64_start_kernel+0x12b/0x130 [ 1515.050705][ C0] common_startup_64+0x13e/0x148 [ 1515.050729][ C0] [ 1515.101205][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1515.101226][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.101249][ T30] Tainted: [L]=SOFTLOCKUP [ 1515.101256][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1515.101265][ T30] Call Trace: [ 1515.101272][ T30] [ 1515.101278][ T30] dump_stack_lvl+0x100/0x190 [ 1515.101305][ T30] vpanic+0x552/0x970 [ 1515.101321][ T30] ? __pfx_vpanic+0x10/0x10 [ 1515.101336][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1515.101356][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1515.101377][ T30] panic+0xd1/0xe0 [ 1515.101392][ T30] ? __pfx_panic+0x10/0x10 [ 1515.101409][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1515.101427][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1515.101445][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1515.101462][ T30] ? watchdog.cold+0x1ec/0x234 [ 1515.101478][ T30] ? watchdog+0xcc1/0x1030 [ 1515.101499][ T30] watchdog.cold+0x1fd/0x234 [ 1515.101520][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1515.101541][ T30] ? __pfx_watchdog+0x10/0x10 [ 1515.101560][ T30] ? __kthread_parkme+0x18c/0x230 [ 1515.101579][ T30] ? kthread+0x13a/0x450 [ 1515.101596][ T30] ? __pfx_watchdog+0x10/0x10 [ 1515.101613][ T30] kthread+0x370/0x450 [ 1515.101631][ T30] ? __pfx_kthread+0x10/0x10 [ 1515.101651][ T30] ret_from_fork+0x72b/0xd50 [ 1515.101672][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1515.101693][ T30] ? __switch_to+0x800/0x1100 [ 1515.101716][ T30] ? __pfx_kthread+0x10/0x10 [ 1515.101736][ T30] ret_from_fork_asm+0x1a/0x30 [ 1515.101767][ T30] [ 1515.404346][ T30] Kernel Offset: disabled [ 1515.408644][ T30] Rebooting in 86400 seconds..