last executing test programs: 1m40.354186563s ago: executing program 4 (id=464): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100), 0x1}}], 0x4000253, 0x44) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a00100000000280003f1294", 0x2e}], 0x1}, 0x80054) 1m38.53826042s ago: executing program 4 (id=469): pipe(&(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r0]) 1m38.262297808s ago: executing program 4 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0xee01, 0xee00, 0x0) r2 = getuid() setfsuid(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x49, &(0x7f00000002c0), 0x161) 1m37.124986056s ago: executing program 4 (id=478): r0 = syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x2, 0x3ff, {0x101, 0x2407, 0xdd, 0x9, 0x7, 0x1, 0x0, 0x5, 0xfffc, 0x6, 0x101, 0xf, 0x2, 0x8c4, "772da311cd42caf6738d4f69110fb3ce5fc44bdb09da4ee492e93b4748ff64c9"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101081, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x101841, 0x3, 0x8}, 0x18) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x6c00, 0x100, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000140)=@sr0, r2, &(0x7f0000000400)={0x3, 0x0, 0x1, 0x4}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000100)={0xb38, 0x10, 0x9ed3, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m36.872599202s ago: executing program 4 (id=480): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000050000001f000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2c}, 0x94) 1m36.412442153s ago: executing program 4 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x3f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m36.140355842s ago: executing program 32 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x3f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m18.528580051s ago: executing program 3 (id=585): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x102}, 0x0) getrlimit(0x3, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) 1m14.87248301s ago: executing program 2 (id=605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3}, {0x0, 0x1765, 0x4000000000}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@private=0xa010101, 0x0, 0x2b}, 0x2, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x4, 0x7f}, {{@in6=@private2, 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x2, 0x0, 0x0, 0xbffffffe}]}]}, 0x13c}}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000005000000000001"], 0xfdef) 1m14.585254011s ago: executing program 2 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file7\x00', 0x93) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80802, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4000004, &(0x7f0000000380)={0xa, 0x4e20, 0x5, @empty, 0x101}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661f56c7420757365723a73797a20303030303030303030303030303030303430393300"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xb8) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000080), 0x20, 0x109802) read$midi(r5, 0x0, 0x3b) 1m13.492248325s ago: executing program 2 (id=609): r0 = io_uring_setup(0x493b, &(0x7f0000000500)={0x0, 0x747b, 0x80, 0x1, 0x2b0}) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r2 = socket(0xa, 0x5, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b000885000000710000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) futex(0x0, 0x2, 0x202, 0x0, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000740)=0xe) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000cc0)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="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", 0xff}, {&(0x7f0000000840)="780d4b5a72ee03ee1e7adfa63425ffbf9ac9a3b5abc193450ab3947100f8e1717847e729b451e870ebf3a866a708b5f80111e15e394ac95094541099581d70676aa689b7eb24d7a00dcdc7627a537ca7572141f988c605918b4bd56e3e6c9ddf453254aeefe5e39c80db40f0276bf4c437daa93ae2be13e3df9256ffcf498a2cb5cd95a94134ecffa2be9016a5ac9cb85199484661c41886641189f599d84f29962c8cacf75196cc2b05fa629315c518e5102bf0851ea932425479ffedc62472ea41819ef7d7604afbdc295b35911c5798c9e560de7f7ec1353f4f42d5aed9f4d06e68002eacf5fe0506aed9f941d074fb380a215a55", 0xf6}, {&(0x7f0000000940)="c12f53a44aac347a1c5d39d5a7d26f17e4211173bf13241888115de12dfbeb005ba8f89d85b88a8f06db03a0a953cebd64cc9381e3cca555348f9f042d886a8a70a9269de3e64b04b3ad36300176b41b7209209ed4f480aa228cafbd5555c4a8a0e08d62d482ffaf26a9b426e7e93a1292549315a19f79d24bd7eeaabc1376c4ea8ce40fe47aa60d5e763a94a8a0fef55cad523c885335c652303553ab", 0x9d}, {&(0x7f0000000a00)="bc4fab94e8297fa4726b0b970bcfa901e4c397e0d4f11c540e088de37a35938b766cd8b57f711ca2f2093d6c4630bac8b244839f4d7c489094e54ef1bc28a31456f471da6fcf135eb290185ebbc8ef72a33b4c4186a46e5eb56d1521dec159fd6626", 0x62}], 0x4, &(0x7f0000000d00)=[@rights={{0x34, 0x1, 0x1, [r9, r2, r4, r5, 0xffffffffffffffff, r9, r0, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r2, r3, r5]}}, @cred={{0xfffffffffffffe26}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r9, r8, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, r9, r1, r9, r7, r9]}}], 0x110, 0x400}}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0x400b601, 0x20, 0x40000005, 0x38f}, &(0x7f0000000240), &(0x7f0000000400), &(0x7f0000000000)) 1m13.024806049s ago: executing program 3 (id=612): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x4, 0x8f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x8, 0x80, 0xf, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x5, 0x32}, {0x6, 0x24, 0x1a, 0xa, 0x15}, [@mbim={0xc, 0x24, 0x1b, 0xd3, 0x8, 0xd, 0x6, 0x7fff, 0x7}, @obex={0x5, 0x24, 0x15, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x101, 0x9, 0x8, 0xfb, 0x10, 0xfe}, @acm={0x4, 0x24, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x2, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x8, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x7}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x5, 0x75, 0xa, 0x20, 0x7}, 0x105, &(0x7f0000000240)={0x5, 0xf, 0x105, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x0, 0xf, 0x1, [0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "5324f74e0161af562c7cdfd83e1e36e8"}, @generic={0xc5, 0x10, 0x3, "4668aecc1f450a116b996dd7e151165714276828d44f7278efaffaa17a5857ab5d5ff0dbe6bdb9ea79f82bc3f3eadfaff7f4350049da0a96ec43472ab926a0406bf8b5f57ea916319453f4585c5054faf6dd0535ca38f495c7a486f31b51e86a2c846d828ab2484bf91aff427d6dd94f091bdbb5d5734096a850fcaa03cf8c8b44e6283e01ec4e35f8eabdead6b5a952bb576d3470128cc3d2534c8dcd300e1e25b3adb8038f5720bad5ed3df9aa1f447226b0445255f7eed1a4c8c73b47612c4b34"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x81, 0x9, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x1, 0x1}]}, 0x7, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2001}}, {0xed, &(0x7f0000000500)=@string={0xed, 0x3, "eb475e4feb813e65c2489f62b3e0fdb17542a1f9374979e5c59364509bb836d9b0195adc2f1ff5cf69f6dce7ed380ef96b5cfc5bbf7742abfe2017a3435852ef561c48e71d9dca75029eff64f3dafb420bbd049f40aa3d68f43085850faebf9169c49f030af52a17df9900d51e2e82b50a14f5d76be73bef3d4f3cc0694ce5b7f9b76f6ba533a4dcacaa194dc9bacbc1d5e2ecf400949a5200874620d74845af317e1eef6b8829cb42c7342a77aba9b219b7242c5ae02a999e87f9ddc3b489b0cdd37bb50ba02f28037520edc8f5352d4a09fa50e39c075cf7b73e2f87a6d21f5d595cd3240e31cc31dbfb"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}, {0xc, &(0x7f00000006c0)=@string={0xc, 0x3, "aacce7e49dd2e7585760"}}, {0xf6, &(0x7f0000000700)=@string={0xf6, 0x3, "8689c4e6043dbb75860712f9128b633e70e9dfcf4faf9de4a4c25a10e18c59c77f846f03f383a16dff98f3305b410e3cf16259645a327026ae05f425d70e2996d0f56e1805f2af7f6b35f5870553864657e6909a75108042aaba8a24e44abba901620766d62606d4b8d1ec74527d6e19c6da3b7b2d75dadf15fbf0dc9424d2b5e8681330ab48fbddac2fb7b845afc99120f4d4d3746afb37ba8bd76b9e16c52ea5f4e0a2712c433c8d36b3e927601ef06fc9ba4f7c6015d637863aafdea32b24b39eca764a9d0392cca88850294b37d778001f23bc548179147248fc3c31d1ff47b5a214e430f88d76ca8dcde5b0d104207d68c9"}}]}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000001c0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x9, 0x1, 0x7, 0x80, 0xc000, 0xfffd, 0x5, 0xfffffffc, 0x800, 0x35, 0x7ff, 0x29}}, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001140), 0x8000, 0x0) ioctl$PTP_PIN_SETFUNC(r3, 0x40043d0d, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200390001400100000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 1m12.206136774s ago: executing program 1 (id=619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x0) 1m11.95136373s ago: executing program 0 (id=620): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x1, {{0x2, 0x4e21, @multicast2}}}, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300016000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 1m11.160003327s ago: executing program 2 (id=621): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1m11.155186844s ago: executing program 0 (id=622): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x141091, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) inotify_init() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000001f0000000061197000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1m11.03652997s ago: executing program 1 (id=623): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x401, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x147ae14, 0x6}}}}]}, 0x78}}, 0x0) 1m11.014456171s ago: executing program 2 (id=624): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') 1m10.879735373s ago: executing program 1 (id=625): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100), 0x1}}], 0x4000253, 0x44) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000fd1294", 0x2e}], 0x1}, 0x80054) 1m10.292632981s ago: executing program 3 (id=628): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @remote}, 0x140, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x26}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prlimit64(0xffffffffffffffff, 0xa, &(0x7f00000002c0)={0x8000, 0x3a1e85ad}, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x20, 0x23, "787bfb834421c6f2f60511cd83241cbd19c43ff3856b33078b949f65d9858e77e33dd9"}}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) listen(0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24044080) 1m10.184545921s ago: executing program 5 (id=629): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) r3 = syz_io_uring_setup(0xf04, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) io_uring_enter(r3, 0x70db, 0x1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}]}, &(0x7f0000000240)=0xffffffffffffffa8) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB="00000000000000000047551e0000000080010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1m9.691805561s ago: executing program 3 (id=630): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f05ebbee7, 0x8031, r3, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x0, 0x5003) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x4, 0x4002) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x20000011}, 0x200040d0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x2, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x6, 0x800000000000000, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x2, 0x0, 0x8000000000000001, 0xa8, 0xfffffffffffffff7, 0x0, 0x91f5, 0x1f, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x10003, 0xfffffffffffffffc, 0x10006, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x7, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x2, 0x5, 0x42, 0x9, 0xf, 0x0, 0xfffffffffffffffd, 0xfeb7, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x2, 0x1000, 0xe0a5, 0x0, 0x7, 0x7, 0x10001002, 0x400000, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x10001, 0x8100000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x73fb, 0x0, 0x0, 0x0, 0x6, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffe]}) r8 = socket(0xb, 0x5, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 1m9.22108502s ago: executing program 1 (id=632): syz_init_net_socket$netrom(0x6, 0x2, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000001}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x2, 0x0) (async) epoll_create1(0x0) (async) fcntl$dupfd(r0, 0x406, r0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000001}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) 1m8.192685507s ago: executing program 3 (id=633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000200000000000000000000000000a20000000000a01000000000000000000010000000900010073797a300000000040000000030a01020003000000000000010010000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100080008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 1m8.134198258s ago: executing program 0 (id=634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc0000ffffffffffffff80000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1m8.133713009s ago: executing program 5 (id=635): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}}, 0x4044004) 1m8.060281232s ago: executing program 2 (id=636): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0xccc80, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x400, 0x34}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf25ed0000000c009900f40b000024000000eed27b65fcfd7d8289ad9a57d4dca3ebae570c5c3277c14e6d279a67b5ce4223dbfccc462eee7c2769858b0ae218d87930756a52a59d31b102fe2bbfa8005d1c7065bebce643cb3f4e3fc0c4bf674e4e370fdb232f81797cefabd01a141e12cdfcbdd8a0974252f2e340465e1d29d37f312d600af5d0e0f8904288cc69a45861b152aec4950d5b364aa4f6fdca448a17069c850190dd165e6fdf50597753ee98e4abe11624dcfd2159956b6dd2f628cc6beaa9cd72ce0470f9e7"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8801) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0xfffffffd, 0x4}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000488000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000d9a98b0d560000000000004ab40189a0cbaa3386abae00d510d4b9ed0c3b", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffffffe, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r8, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7a"], 0x0}, 0x94) unshare(0x28000600) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x3}, 0x38) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x7, 0x10, 0x6, 0xa0, 0x1}) getpriority(0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) connect$nfc_llcp(r2, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0xf, 0xbd, "4aa2940d2d313d8d264b584544b7862882233de393f57bb194a744e0bf6a373e9e4716b84800ec2b6f8ab865c3aac026c3060100", 0x29}, 0x5f) 1m7.938930093s ago: executing program 5 (id=637): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000300000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 1m7.829184607s ago: executing program 0 (id=638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000702000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1m7.828809525s ago: executing program 1 (id=639): pipe(&(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m7.696677436s ago: executing program 5 (id=640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [0xe803], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) 1m7.684581922s ago: executing program 0 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0xc00000000000000, 0x0, 0x2000c091}, 0x800) 1m7.632761977s ago: executing program 5 (id=642): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sigaltstack(0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) eventfd2(0x5, 0x81001) (async) eventfd2(0x5, 0x81001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x6) (async) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) (async) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x10f4, 0x1a, 0x12, r5, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) syz_open_dev$I2C(0x0, 0x400, 0x80480) syz_emit_ethernet(0x1398, &(0x7f0000001980)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x1362, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x0, 0x14, 0x2, 0x5, 0x0, [@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, @empty, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @remote]}, @dstopts={0x3b, 0x219, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @generic={0xff, 0x1000, "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"}, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x8001, [0x100000000, 0x0, 0x4, 0x3, 0x2f6, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x82, "b96e902912845589cf6d3bf243ad1401c80623510db48722ae8d40e7a6f5801ed07537297de71fa8058442d11dd817e6f3116058589369022c7453f1684b9e6e022a8a7a0fb9cd4471d50120fd9b22d99c1f969428d4741cefb192e3bb527656c25535218d538ddf737ba275312b2de84fdea6a10a4c27951f1efcb81d29c1b9cac2"}]}, @routing={0xc, 0x12, 0x2, 0x60, 0x0, [@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private2={0xfc, 0x2, '\x00', 0x81}, @private2]}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x3, 0x6, "1b9085", 0x9, 0x0, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@dstopts={0x0, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x2}]}, @hopopts={0x88, 0x1, '\x00', [@ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0xff}, @ra={0x5, 0x2, 0x92}, @enc_lim={0x4, 0x1, 0x7}]}], "c776574212ed55ea7740f06c97f38d768830eac37db1c8a05aafe2887dfc9e74548200fe86fdb286b9b8f3c2cdb946fb0ada4d2bad5bc2c79379ec31fa460bee2b926d575bfec8c48c1c5b11a2e8dcc8ca2ee6f140b42ba2b8ffe7d00d5b7f8c4f8d4a7de72e905a8d50d1c8c8b862cbe73b74150bf403261725e9c648bafc5731b50ef7b47a944b6b69becc77b2a5aaf11171cf95d2cb3d68ad379cdb024530b5e12a296bfb1fc753e56278db6313c765b490f2d0bb1e624e6bbe0d8707cb3abb20d47e2ad0fa141f731c07ccb636afee0911da639155ad543dd1ad9501435630cfb4a7d9392d2160f4f7fa183f44a25a71"}}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f0000000000000000000000000000feff001400200000000000000000000000ffff000000000500070000000000060002000100000008000a"], 0x5c}}, 0x0) 1m7.410033881s ago: executing program 3 (id=643): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x1, 0x101, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1m7.03655745s ago: executing program 0 (id=644): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="04000000040000000400000022bf000000080000", @ANYRES32, @ANYBLOB="0000000000000000f4ff00000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0xa, 0x0) accept$unix(r2, &(0x7f00000001c0), &(0x7f00000002c0)=0x6e) r3 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 33 (id=644): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1, priority 0 [ 81.861258][ T6114] tipc: Resetting bearer [ 81.950712][ T6114] tipc: Disabling bearer [ 81.961101][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 81.968126][ T9] usb 4-1: config 0 has no interfaces? [ 81.975323][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 81.984499][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.014595][ T6120] syzkaller0: entered promiscuous mode [ 82.020097][ T6120] syzkaller0: entered allmulticast mode [ 82.032177][ T9] usb 4-1: Product: syz [ 82.041105][ T9] usb 4-1: Manufacturer: syz [ 82.055349][ T9] usb 4-1: SerialNumber: syz [ 82.084375][ T9] usb 4-1: config 0 descriptor?? [ 82.167288][ T30] audit: type=1400 audit(1775903068.419:192): avc: denied { read } for pid=6125 comm="syz.1.69" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.270640][ T6129] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 82.491328][ T9] usb 4-1: USB disconnect, device number 3 [ 82.509129][ T30] audit: type=1400 audit(1775903068.419:193): avc: denied { open } for pid=6125 comm="syz.1.69" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.831602][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.993797][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 84.025461][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.063234][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 84.092521][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.128936][ T9] usb 3-1: config 0 descriptor?? [ 84.389009][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 84.549423][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 84.577788][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 84.577804][ T30] audit: type=1400 audit(1775903070.829:200): avc: denied { read } for pid=6135 comm="syz.2.71" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.673020][ T30] audit: type=1400 audit(1775903070.829:201): avc: denied { open } for pid=6135 comm="syz.2.71" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.751238][ T30] audit: type=1400 audit(1775903070.829:202): avc: denied { ioctl } for pid=6135 comm="syz.2.71" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.831244][ T6130] Process accounting resumed [ 84.837375][ T30] audit: type=1400 audit(1775903070.899:203): avc: denied { write } for pid=6135 comm="syz.2.71" name="iowarrior0" dev="devtmpfs" ino=2803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.863920][ T6163] 9p: Bad value for 'rfdno' [ 84.890120][ T5888] usb 3-1: USB disconnect, device number 2 [ 84.916904][ T30] audit: type=1400 audit(1775903070.999:204): avc: denied { read write } for pid=6135 comm="syz.2.71" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.947681][ T30] audit: type=1400 audit(1775903070.999:205): avc: denied { open } for pid=6135 comm="syz.2.71" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.005779][ T30] audit: type=1326 audit(1775903070.999:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.71" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8791b9c819 code=0x0 [ 85.110524][ T30] audit: type=1400 audit(1775903071.359:207): avc: denied { read } for pid=6174 comm="syz.0.84" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.139895][ T30] audit: type=1400 audit(1775903071.359:208): avc: denied { open } for pid=6174 comm="syz.0.84" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.220410][ T30] audit: type=1400 audit(1775903071.389:209): avc: denied { ioctl } for pid=6174 comm="syz.0.84" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.284776][ T6186] kernel read not supported for file /baadv_slave_1 (pid: 6186 comm: syz.0.90) [ 85.297090][ T6186] 9p: Bad value for 'wfdno' [ 85.479672][ T6188] kernel read not supported for file /baadv_slave_1 (pid: 6188 comm: syz.4.91) [ 85.966163][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 86.065672][ T24] kernel read not supported for file /baadv_slave_1 (pid: 24 comm: kworker/1:0) [ 86.575873][ T6201] binder: 6199:6201 unknown command 0 [ 86.582548][ T6201] binder: 6199:6201 ioctl c0306201 200000004a40 returned -22 [ 88.388469][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 88.401488][ T6227] 9p: Bad value for 'rfdno' [ 88.469958][ T6226] vlan2: entered allmulticast mode [ 88.491146][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 88.503312][ T6226] hsr_slave_0: entered allmulticast mode [ 88.525547][ T6231] ip6erspan0: entered promiscuous mode [ 88.538790][ T6231] ip6erspan0: entered allmulticast mode [ 88.955564][ T6245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.727205][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 89.727224][ T30] audit: type=1400 audit(1775903075.289:223): avc: denied { bind } for pid=6244 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.940662][ T5848] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.026747][ T30] audit: type=1400 audit(1775903075.289:224): avc: denied { name_bind } for pid=6244 comm="syz.4.109" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 90.052137][ T6255] netlink: 388 bytes leftover after parsing attributes in process `syz.2.111'. [ 90.181199][ T5848] usb 4-1: device descriptor read/64, error -71 [ 90.188734][ T6257] tipc: Failed to obtain node identity [ 90.212594][ T6257] tipc: Enabling of bearer rejected, failed to enable media [ 90.268448][ T30] audit: type=1400 audit(1775903075.669:225): avc: denied { ioctl } for pid=6239 comm="syz.1.108" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.299307][ T30] audit: type=1400 audit(1775903076.049:226): avc: denied { setopt } for pid=6244 comm="syz.4.109" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.456013][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 90.468841][ T6260] syzkaller0: entered promiscuous mode [ 90.492740][ T30] audit: type=1400 audit(1775903076.479:227): avc: denied { bind } for pid=6244 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.723738][ T6268] comedi comedi0: No hardware detected at I/O base 0x4f27 [ 90.871210][ T30] audit: type=1400 audit(1775903076.489:228): avc: denied { read } for pid=6244 comm="syz.4.109" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.898173][ T6260] syzkaller0: entered allmulticast mode [ 90.911175][ T30] audit: type=1400 audit(1775903076.549:229): avc: denied { shutdown } for pid=6244 comm="syz.4.109" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.961135][ T5848] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.036325][ T30] audit: type=1400 audit(1775903076.559:230): avc: denied { create } for pid=6248 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.066346][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 91.110137][ T30] audit: type=1400 audit(1775903076.559:231): avc: denied { append } for pid=6261 comm="syz.1.113" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.221160][ T5848] usb 4-1: device descriptor read/64, error -71 [ 91.299163][ T30] audit: type=1400 audit(1775903076.699:232): avc: denied { write } for pid=6248 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.383405][ T5848] usb usb4-port1: attempt power cycle [ 92.059899][ T6280] kernel read not supported for file /baadv_slave_1 (pid: 6280 comm: syz.3.118) [ 92.098852][ T6280] 9p: Bad value for 'wfdno' [ 92.878847][ T6275] lo speed is unknown, defaulting to 1000 [ 92.893627][ T6290] netlink: 196 bytes leftover after parsing attributes in process `syz.1.121'. [ 92.903837][ T6290] netlink: 196 bytes leftover after parsing attributes in process `syz.1.121'. [ 92.913798][ T6290] netlink: 19 bytes leftover after parsing attributes in process `syz.1.121'. [ 92.923607][ T6275] lo speed is unknown, defaulting to 1000 [ 92.951133][ T6275] lo speed is unknown, defaulting to 1000 [ 92.967270][ T6275] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 92.992592][ T6275] lo speed is unknown, defaulting to 1000 [ 92.999690][ T6275] lo speed is unknown, defaulting to 1000 [ 93.006813][ T6275] lo speed is unknown, defaulting to 1000 [ 93.014228][ T6275] lo speed is unknown, defaulting to 1000 [ 93.021484][ T6275] lo speed is unknown, defaulting to 1000 [ 93.274627][ T6309] netlink: 'syz.1.128': attribute type 10 has an invalid length. [ 93.306173][ T6309] team0: Device wg1 is of different type [ 93.369996][ T6314] 9p: Bad value for 'rfdno' [ 93.478199][ T6317] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.548964][ T5848] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 93.568182][ T6321] 9p: Bad value for 'rfdno' [ 93.723593][ T6329] syzkaller0: entered promiscuous mode [ 93.725756][ T5848] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 93.739395][ T6329] syzkaller0: entered allmulticast mode [ 93.748586][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.759417][ T5848] usb 4-1: Product: syz [ 93.773255][ T5848] usb 4-1: Manufacturer: syz [ 93.779241][ T5848] usb 4-1: SerialNumber: syz [ 93.786655][ T5848] usb 4-1: config 0 descriptor?? [ 95.558892][ T6351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.143'. [ 95.792267][ T6354] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.875966][ T5848] usb 4-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 95.904861][ T5848] f81604 4-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 95.942289][ T5848] f81604 4-1:0.0: probe with driver f81604 failed with error -110 [ 96.044071][ T6362] kernel read not supported for file /baadv_slave_1 (pid: 6362 comm: syz.1.148) [ 96.075839][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 96.075853][ T30] audit: type=1800 audit(1775903082.329:241): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.148" name=6261016164765F736C6176655F31 dev="mqueue" ino=10501 res=0 errno=0 [ 96.109630][ T6362] 9p: Bad value for 'rfdno' [ 96.121813][ T6364] 9p: Bad value for 'rfdno' [ 96.374773][ T9] usb 4-1: USB disconnect, device number 7 [ 96.459757][ T6378] netlink: 'syz.0.146': attribute type 4 has an invalid length. [ 96.476738][ T6370] syzkaller0: entered promiscuous mode [ 96.526807][ T6370] syzkaller0: entered allmulticast mode [ 96.532877][ T6378] netlink: 152 bytes leftover after parsing attributes in process `syz.0.146'. [ 96.642591][ T6378] .`: renamed from bond0 (while UP) [ 96.721509][ T6370] tipc: Started in network mode [ 96.731128][ T6370] tipc: Node identity eae809760191, cluster identity 4711 [ 96.753910][ T6370] tipc: Enabled bearer , priority 0 [ 96.773364][ T6388] ubi: mtd0 is already attached to ubi16 [ 96.889229][ T6369] tipc: Resetting bearer [ 96.935680][ T6369] tipc: Disabling bearer [ 97.059530][ T6394] netlink: 'syz.1.158': attribute type 16 has an invalid length. [ 97.106922][ T6394] netlink: 'syz.1.158': attribute type 17 has an invalid length. [ 97.167859][ T6400] netlink: 388 bytes leftover after parsing attributes in process `syz.4.156'. [ 97.187653][ T6394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.321257][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 97.478283][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.631104][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 97.685404][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.704468][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.738542][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.751820][ T6405] 9p: Bad value for 'rfdno' [ 97.790992][ T5870] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.800469][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.892641][ T6411] 9p: Bad value for 'rfdno' [ 98.009992][ T5870] usb 3-1: config 0 descriptor?? [ 98.857748][ T30] audit: type=1400 audit(1775903085.109:242): avc: denied { append } for pid=6397 comm="syz.2.159" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.941399][ T6399] usb usb1: usbfs: process 6399 (syz.2.159) did not claim interface 6 before use [ 98.975173][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.008158][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.011857][ T6416] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.082744][ T5870] usbhid 3-1:0.0: can't add hid device: -71 [ 99.109350][ T5870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 99.164425][ T5870] usb 3-1: USB disconnect, device number 3 [ 99.299491][ T6424] loop7: detected capacity change from 0 to 7 [ 99.389514][ C1] blk_print_req_error: 10 callbacks suppressed [ 99.389532][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.405345][ C1] buffer_io_error: 10 callbacks suppressed [ 99.405360][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.471210][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.480828][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.489231][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.498883][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.515491][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.525137][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.536866][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.546460][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.555130][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.564670][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.581074][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.590675][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.598496][ T6424] ldm_validate_partition_table(): Disk read failed. [ 99.609257][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.618864][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.671136][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.680748][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.691765][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.701391][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.725429][ T6424] Dev loop7: unable to read RDB block 0 [ 99.748416][ T5888] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.801371][ T6424] loop7: unable to read partition table [ 99.821873][ T6424] loop7: partition table beyond EOD, truncated [ 99.830714][ T6427] syzkaller0: entered promiscuous mode [ 99.846982][ T6427] syzkaller0: entered allmulticast mode [ 99.852627][ T6424] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 99.941127][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 99.950167][ T5888] usb 2-1: config 0 has no interfaces? [ 99.973431][ T5888] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 99.991566][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.999737][ T5888] usb 2-1: Product: syz [ 99.999836][ T6433] netlink: 'syz.2.171': attribute type 16 has an invalid length. [ 100.004204][ T5888] usb 2-1: Manufacturer: syz [ 100.016608][ T5888] usb 2-1: SerialNumber: syz [ 100.053145][ T5888] usb 2-1: config 0 descriptor?? [ 100.061225][ T6433] netlink: 'syz.2.171': attribute type 17 has an invalid length. [ 100.290323][ T5850] usb 2-1: USB disconnect, device number 7 [ 101.093952][ T6442] 9p: Bad value for 'rfdno' [ 101.147696][ T30] audit: type=1400 audit(1775903087.399:243): avc: denied { write } for pid=6443 comm="syz.1.174" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 101.190800][ T30] audit: type=1400 audit(1775903087.399:244): avc: denied { ioctl } for pid=6443 comm="syz.1.174" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x64cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 101.222629][ T30] audit: type=1400 audit(1775903087.399:245): avc: denied { watch watch_reads } for pid=6443 comm="syz.1.174" path="/44" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.485415][ T6433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.505495][ T24] lo speed is unknown, defaulting to 1000 [ 101.611325][ T5888] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.850465][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 101.971172][ T5888] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 101.979373][ T5888] usb 2-1: config 0 has no interface number 0 [ 102.003343][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 102.014991][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.049898][ T5888] usb 2-1: Product: syz [ 102.071114][ T5888] usb 2-1: Manufacturer: syz [ 102.075762][ T5888] usb 2-1: SerialNumber: syz [ 102.096416][ T5888] usb 2-1: config 0 descriptor?? [ 102.122370][ T6466] 9p: Bad value for 'rfdno' [ 102.149537][ T30] audit: type=1400 audit(1775903088.399:246): avc: denied { write } for pid=6470 comm="syz.0.186" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 102.308912][ T6477] netlink: 'syz.4.188': attribute type 16 has an invalid length. [ 102.319332][ T5888] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 102.328105][ T5888] uvcvideo 2-1:0.105: No valid video chain found. [ 102.332657][ T6477] netlink: 'syz.4.188': attribute type 17 has an invalid length. [ 102.348923][ T5888] usb 2-1: USB disconnect, device number 8 [ 102.670331][ T6477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.720791][ T30] audit: type=1400 audit(1775903088.969:247): avc: denied { mount } for pid=6480 comm="syz.3.190" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 102.796371][ T6484] syzkaller0: entered promiscuous mode [ 102.809970][ T6484] syzkaller0: entered allmulticast mode [ 102.830355][ T30] audit: type=1400 audit(1775903089.079:248): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 102.923478][ T30] audit: type=1400 audit(1775903089.169:249): avc: denied { create } for pid=6490 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.031006][ T30] audit: type=1400 audit(1775903089.279:250): avc: denied { write } for pid=6497 comm="syz.3.196" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 103.479396][ T6507] 9pnet_fd: Insufficient options for proto=fd [ 103.670284][ T6513] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 103.773943][ T30] audit: type=1400 audit(1775903090.019:251): avc: denied { create } for pid=6504 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 104.007537][ T30] audit: type=1400 audit(1775903090.249:252): avc: denied { write } for pid=6516 comm="syz.4.200" name="ptype" dev="proc" ino=4026532827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 104.252592][ T5848] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.423901][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 104.436573][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.449767][ T5848] usb 5-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 104.458872][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.471173][ T5848] usb 5-1: config 0 descriptor?? [ 104.797263][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 104.804678][ T6528] netlink: 'syz.0.203': attribute type 16 has an invalid length. [ 104.813937][ T6528] netlink: 'syz.0.203': attribute type 17 has an invalid length. [ 104.845333][ T6528] 8021q: adding VLAN 0 to HW filter on device .` [ 104.852491][ T6529] netlink: 60 bytes leftover after parsing attributes in process `syz.1.204'. [ 104.872726][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'. [ 104.883372][ T6529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.204'. [ 104.897588][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 104.913767][ T6528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.933013][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 104.954745][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 104.977553][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 104.994028][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 105.005395][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 105.013788][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 105.021387][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 105.028868][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 105.051097][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 105.068886][ T5848] holtek_mouse 0003:04D9:A04A.0001: unknown global tag 0xe [ 105.091297][ T5848] holtek_mouse 0003:04D9:A04A.0001: item 0 4 1 14 parsing failed [ 105.099223][ T6538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.208'. [ 105.172394][ T5848] holtek_mouse 0003:04D9:A04A.0001: hid parse failed: -22 [ 105.297603][ T5848] holtek_mouse 0003:04D9:A04A.0001: probe with driver holtek_mouse failed with error -22 [ 105.411225][ T5848] usb 5-1: USB disconnect, device number 2 [ 105.431342][ T6544] 9pnet_fd: Insufficient options for proto=fd [ 105.508461][ T6548] netlink: 9 bytes leftover after parsing attributes in process `syz.0.212'. [ 105.625159][ T6548] netlink: 9 bytes leftover after parsing attributes in process `syz.0.212'. [ 105.774928][ T6552] ip6gretap0: entered promiscuous mode [ 105.780784][ T6552] vlan3: entered promiscuous mode [ 106.108572][ T6554] syzkaller0: entered promiscuous mode [ 106.125928][ T6554] syzkaller0: entered allmulticast mode [ 106.179711][ T6557] syzkaller0: entered promiscuous mode [ 106.185448][ T6557] syzkaller0: entered allmulticast mode [ 106.783088][ T5888] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 106.990092][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.002363][ T5888] usb 5-1: not running at top speed; connect to a high speed hub [ 107.019027][ T5888] usb 5-1: config 9 has an invalid interface number: 40 but max is 0 [ 107.030385][ T5888] usb 5-1: config 9 has no interface number 0 [ 107.040732][ T5888] usb 5-1: config 9 interface 40 altsetting 33 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 107.057184][ T5888] usb 5-1: config 9 interface 40 altsetting 33 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 107.062897][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 107.062913][ T30] audit: type=1400 audit(1775903093.309:258): avc: denied { getopt } for pid=6570 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.076714][ T5888] usb 5-1: config 9 interface 40 has no altsetting 0 [ 107.123579][ T5888] usb 5-1: New USB device found, idVendor=1199, idProduct=6890, bcdDevice=10.21 [ 107.133469][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.141658][ T5888] usb 5-1: Product: syz [ 107.145951][ T5888] usb 5-1: Manufacturer: syz [ 107.150589][ T5888] usb 5-1: SerialNumber: syz [ 107.162308][ T6564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 107.174624][ T30] audit: type=1400 audit(1775903093.429:259): avc: denied { write } for pid=6561 comm="syz.1.217" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.069961][ T6562] : renamed from vlan0 [ 108.076488][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 108.263088][ T6582] 9pnet_fd: Insufficient options for proto=fd [ 108.268778][ T6583] FAULT_INJECTION: forcing a failure. [ 108.268778][ T6583] name failslab, interval 1, probability 0, space 0, times 1 [ 108.312324][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: syz.2.222 Not tainted syzkaller #0 PREEMPT(full) [ 108.312351][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.312360][ T6583] Call Trace: [ 108.312367][ T6583] [ 108.312373][ T6583] dump_stack_lvl+0x100/0x190 [ 108.312406][ T6583] should_fail_ex.cold+0x5/0xa [ 108.312430][ T6583] should_failslab+0xc2/0x120 [ 108.312449][ T6583] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 108.312475][ T6583] ? __alloc_skb+0x140/0x710 [ 108.312501][ T6583] __alloc_skb+0x140/0x710 [ 108.312523][ T6583] ? __alloc_skb+0x5b7/0x710 [ 108.312545][ T6583] ? __pfx___alloc_skb+0x10/0x10 [ 108.312567][ T6583] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 108.312600][ T6583] netlink_alloc_large_skb+0x69/0x150 [ 108.312620][ T6583] netlink_sendmsg+0x680/0xda0 [ 108.312642][ T6583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.312657][ T6583] ? __might_fault+0x50/0x140 [ 108.312691][ T6583] ____sys_sendmsg+0x9e1/0xb70 [ 108.312708][ T6583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.312726][ T6583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.312761][ T6583] ___sys_sendmsg+0x190/0x1e0 [ 108.312783][ T6583] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.312831][ T6583] __sys_sendmsg+0x170/0x220 [ 108.312857][ T6583] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.312897][ T6583] do_syscall_64+0x106/0xf80 [ 108.312914][ T6583] ? clear_bhb_loop+0x40/0x90 [ 108.312936][ T6583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.312954][ T6583] RIP: 0033:0x7f8791b9c819 [ 108.312969][ T6583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.312985][ T6583] RSP: 002b:00007f878fdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.313002][ T6583] RAX: ffffffffffffffda RBX: 00007f8791e15fa0 RCX: 00007f8791b9c819 [ 108.313013][ T6583] RDX: 0000000000000014 RSI: 0000200000001840 RDI: 0000000000000004 [ 108.313023][ T6583] RBP: 00007f878fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.313032][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.313042][ T6583] R13: 00007f8791e16038 R14: 00007f8791e15fa0 R15: 00007ffd0fbaa6d8 [ 108.313065][ T6583] [ 108.796457][ T30] audit: type=1400 audit(1775903094.919:260): avc: denied { write } for pid=6588 comm="syz.2.227" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.822764][ T5848] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 109.100304][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.457140][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 109.469427][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 109.480597][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 109.494695][ T5848] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.503813][ T5848] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 109.514650][ T5848] usb 2-1: Manufacturer: syz [ 109.515663][ T5888] sierra 5-1:9.40: Sierra USB modem converter detected [ 109.542030][ T5848] usb 2-1: config 0 descriptor?? [ 109.590043][ T5888] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 109.635144][ T5888] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 109.668191][ T30] audit: type=1400 audit(1775903095.919:261): avc: denied { ioctl } for pid=6600 comm="syz.2.230" path="ipc:[4026533136]" dev="nsfs" ino=4026533136 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.697334][ T5888] usb 5-1: USB disconnect, device number 3 [ 109.709639][ T5888] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 109.759147][ T30] audit: type=1400 audit(1775903095.949:262): avc: denied { read } for pid=6600 comm="syz.2.230" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 109.790320][ T5888] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 109.843831][ T5888] sierra 5-1:9.40: device disconnected [ 109.893781][ T30] audit: type=1400 audit(1775903095.949:263): avc: denied { open } for pid=6600 comm="syz.2.230" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 109.934916][ T30] audit: type=1400 audit(1775903095.949:264): avc: denied { ioctl } for pid=6600 comm="syz.2.230" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 109.986874][ T6612] netlink: 196 bytes leftover after parsing attributes in process `syz.3.233'. [ 109.995999][ T6612] netlink: 196 bytes leftover after parsing attributes in process `syz.3.233'. [ 110.005229][ T6612] netlink: 19 bytes leftover after parsing attributes in process `syz.3.233'. [ 110.092595][ T30] audit: type=1400 audit(1775903095.949:265): avc: denied { map } for pid=6600 comm="syz.2.230" path="mnt:[4026533135]" dev="nsfs" ino=4026533135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.116682][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.161385][ T6615] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 110.194741][ T6615] team0: Device wg1 is of different type [ 110.201101][ T5848] rc_core: IR keymap rc-hauppauge not found [ 110.204380][ T6619] 9pnet_fd: Insufficient options for proto=fd [ 110.207053][ T5848] Registered IR keymap rc-empty [ 110.231142][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 110.252934][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 110.281094][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 110.288151][ T10] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 110.289306][ T5848] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 110.301053][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.322394][ T5848] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 110.345666][ T30] audit: type=1400 audit(1775903096.599:266): avc: denied { map } for pid=6620 comm="syz.3.237" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.384135][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 110.399588][ T6623] syzkaller0: entered promiscuous mode [ 110.411248][ T6623] syzkaller0: entered allmulticast mode [ 110.417060][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 110.424492][ T10] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 110.451069][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.451397][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 110.474721][ T10] usb 3-1: Product: syz [ 110.478925][ T10] usb 3-1: Manufacturer: syz [ 110.496897][ T10] usb 3-1: SerialNumber: syz [ 110.525973][ T10] usb 3-1: config 0 descriptor?? [ 110.528599][ T30] audit: type=1400 audit(1775903096.779:267): avc: denied { map } for pid=6628 comm="syz.1.240" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.557643][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 110.564792][ T6629] No control pipe specified [ 110.615066][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 110.625844][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 110.645074][ T6629] hsr_slave_0: left promiscuous mode [ 111.088446][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.111716][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.161814][ T6629] hsr_slave_1: left promiscuous mode [ 111.170685][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.211703][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.233107][ T5848] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 111.242688][ T6639] netlink: 'syz.0.244': attribute type 16 has an invalid length. [ 111.254810][ T6639] netlink: 'syz.0.244': attribute type 17 has an invalid length. [ 111.272842][ T5848] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 111.280871][ T5848] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 111.311428][ T6639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.320598][ T5848] usb 2-1: USB disconnect, device number 9 [ 111.339385][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.246'. [ 111.349590][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.246'. [ 111.665049][ T5850] usb 3-1: USB disconnect, device number 4 [ 111.784642][ T6645] 9pnet_fd: Insufficient options for proto=fd [ 111.836229][ T6649] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.443904][ T30] audit: type=1400 audit(1775903098.699:268): avc: denied { ioctl } for pid=6654 comm="syz.1.252" path="socket:[10235]" dev="sockfs" ino=10235 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.481643][ T6656] loop5: detected capacity change from 0 to 7 [ 112.511168][ T6656] Dev loop5: unable to read RDB block 7 [ 112.517606][ T6656] loop5: unable to read partition table [ 112.630066][ T6656] loop5: partition table beyond EOD, truncated [ 112.640096][ T6656] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 113.429050][ T6668] @: renamed from bond_slave_0 (while UP) [ 114.052989][ T6686] 9pnet_fd: Insufficient options for proto=fd [ 114.152459][ T6691] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 114.208729][ T30] audit: type=1400 audit(1775903100.459:269): avc: denied { create } for pid=6689 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.211130][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 114.278872][ T30] audit: type=1400 audit(1775903100.459:270): avc: denied { bind } for pid=6689 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.382949][ T6699] netlink: 388 bytes leftover after parsing attributes in process `syz.3.265'. [ 114.418333][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 114.573198][ T5888] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 115.872367][ T5888] usb 2-1: config 0 has no interfaces? [ 115.877875][ T5888] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.914686][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.983779][ T29] wg1 speed is unknown, defaulting to 1000 [ 116.019390][ T5888] usb 2-1: config 0 descriptor?? [ 116.063234][ T6709] sp0: Synchronizing with TNC [ 116.080078][ T30] audit: type=1400 audit(1775903102.329:271): avc: denied { search } for pid=5472 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.118857][ T30] audit: type=1400 audit(1775903102.359:272): avc: denied { search } for pid=5472 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.154640][ T6710] [U] [ 116.175596][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.191321][ T30] audit: type=1400 audit(1775903102.359:273): avc: denied { search } for pid=5472 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.225083][ T30] audit: type=1400 audit(1775903102.359:274): avc: denied { read } for pid=5472 comm="dhcpcd" name="n100" dev="tmpfs" ino=2961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.247106][ T30] audit: type=1400 audit(1775903102.359:275): avc: denied { open } for pid=5472 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.290464][ T30] audit: type=1400 audit(1775903102.359:276): avc: denied { getattr } for pid=5472 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.431216][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 116.437641][ T29] usb 5-1: config 0 has no interfaces? [ 116.444996][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 116.454806][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.499228][ T6717] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.515679][ T29] usb 5-1: Product: syz [ 118.578137][ T29] usb 5-1: Manufacturer: syz [ 118.583499][ T29] usb 5-1: SerialNumber: syz [ 118.591732][ T5888] usb 2-1: USB disconnect, device number 10 [ 118.592198][ T29] usb 5-1: config 0 descriptor?? [ 118.603050][ T29] usb 5-1: can't set config #0, error -71 [ 118.611179][ T29] usb 5-1: USB disconnect, device number 4 [ 118.721223][ T5850] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.991413][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 118.999859][ T5850] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 119.017874][ T6726] 9p: Bad value for 'rfdno' [ 119.024904][ T5850] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.049966][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.082950][ T5850] usb 3-1: Product: syz [ 119.088145][ T5850] usb 3-1: Manufacturer: syz [ 119.095022][ T5850] usb 3-1: SerialNumber: syz [ 119.113269][ T5850] r8152-cfgselector 3-1: Unknown version 0x0000 [ 119.119660][ T5850] r8152-cfgselector 3-1: config 0 descriptor?? [ 119.235809][ T30] audit: type=1400 audit(1775903105.489:277): avc: denied { write } for pid=6734 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.287016][ T6737] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.310253][ T30] audit: type=1400 audit(1775903105.509:278): avc: denied { read } for pid=6734 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.368767][ T30] audit: type=1400 audit(1775903105.539:279): avc: denied { unlink } for pid=6735 comm="syz.0.277" name="#1" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.393718][ T6740] 9p: Bad value for 'wfdno' [ 119.421435][ T5850] r8152-cfgselector 3-1: Unknown version 0x0000 [ 119.428210][ T5850] r8152-cfgselector 3-1: bad CDC descriptors [ 119.466512][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 119.476580][ T30] audit: type=1400 audit(1775903105.599:280): avc: denied { mount } for pid=6735 comm="syz.0.277" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.491134][ T5850] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 119.500261][ T30] audit: type=1400 audit(1775903105.689:281): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.528299][ T6748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.282'. [ 119.571335][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.282'. [ 119.589262][ T6751] netlink: 32 bytes leftover after parsing attributes in process `syz.1.282'. [ 119.634814][ T30] audit: type=1400 audit(1775903105.719:282): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 119.764406][ T6762] sp0: Synchronizing with TNC [ 119.769918][ T6760] [U] [ 119.842869][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.012557][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 120.046651][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.064190][ T30] audit: type=1400 audit(1775903106.299:283): avc: denied { ioctl } for pid=6753 comm="syz.3.285" path="socket:[11498]" dev="sockfs" ino=11498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.114884][ T29] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 120.131167][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.139321][ T30] audit: type=1400 audit(1775903106.299:284): avc: denied { connect } for pid=6753 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.161157][ T29] usb 1-1: config 0 descriptor?? [ 120.169703][ T6754] netlink: 'syz.3.285': attribute type 10 has an invalid length. [ 120.178165][ T6750] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.197819][ T6754] team0: Device vxcan1 is of different type [ 120.319665][ T30] audit: type=1400 audit(1775903106.569:285): avc: denied { create } for pid=6782 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.352401][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.295'. [ 120.399249][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.431120][ T30] audit: type=1400 audit(1775903106.609:286): avc: denied { create } for pid=6782 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 120.492201][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.509707][ T6784] xt_l2tp: missing protocol rule (udp|l2tpip) [ 120.739840][ T29] hid_parser_main: 110 callbacks suppressed [ 120.739860][ T29] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 120.834773][ T29] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 120.875270][ T29] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 120.915480][ T29] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 120.968726][ T29] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 121.056746][ T29] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 121.104744][ T29] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 121.178092][ T29] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 121.225883][ T29] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 121.262165][ T29] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 121.294600][ T29] corsair 0003:1B1C:1B34.0002: global environment stack underflow [ 121.328375][ T29] corsair 0003:1B1C:1B34.0002: item 0 1 1 11 parsing failed [ 121.367343][ T29] corsair 0003:1B1C:1B34.0002: parse failed [ 121.389337][ T29] corsair 0003:1B1C:1B34.0002: probe with driver corsair failed with error -22 [ 121.428930][ T29] usb 1-1: USB disconnect, device number 2 [ 121.579901][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 121.618431][ T6806] syzkaller0: entered promiscuous mode [ 121.624553][ T6806] syzkaller0: entered allmulticast mode [ 121.650390][ T6764] Process accounting resumed [ 122.914051][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 122.963534][ T6826] ip6erspan0: entered allmulticast mode [ 123.396622][ T6839] FAULT_INJECTION: forcing a failure. [ 123.396622][ T6839] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.451121][ T6839] CPU: 0 UID: 0 PID: 6839 Comm: syz.0.313 Not tainted syzkaller #0 PREEMPT(full) [ 123.451147][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.451157][ T6839] Call Trace: [ 123.451163][ T6839] [ 123.451169][ T6839] dump_stack_lvl+0x100/0x190 [ 123.451201][ T6839] should_fail_ex.cold+0x5/0xa [ 123.451224][ T6839] _copy_from_iter+0x1f4/0x1690 [ 123.451247][ T6839] ? __asan_memset+0x23/0x50 [ 123.451272][ T6839] ? __pfx__copy_from_iter+0x10/0x10 [ 123.451290][ T6839] ? __pfx___alloc_skb+0x10/0x10 [ 123.451313][ T6839] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 123.451348][ T6839] netlink_sendmsg+0x808/0xda0 [ 123.451371][ T6839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.451386][ T6839] ? __might_fault+0x50/0x140 [ 123.451420][ T6839] ____sys_sendmsg+0x9e1/0xb70 [ 123.451437][ T6839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.451455][ T6839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.451485][ T6839] ___sys_sendmsg+0x190/0x1e0 [ 123.451507][ T6839] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.451552][ T6839] __sys_sendmsg+0x170/0x220 [ 123.451577][ T6839] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.451614][ T6839] do_syscall_64+0x106/0xf80 [ 123.451631][ T6839] ? clear_bhb_loop+0x40/0x90 [ 123.451649][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.451665][ T6839] RIP: 0033:0x7fd0de79c819 [ 123.451679][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.451694][ T6839] RSP: 002b:00007fd0df5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.451716][ T6839] RAX: ffffffffffffffda RBX: 00007fd0dea15fa0 RCX: 00007fd0de79c819 [ 123.451727][ T6839] RDX: 0000000000000014 RSI: 0000200000001840 RDI: 0000000000000004 [ 123.451736][ T6839] RBP: 00007fd0df5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.451745][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.451753][ T6839] R13: 00007fd0dea16038 R14: 00007fd0dea15fa0 R15: 00007ffde9cc2608 [ 123.451776][ T6839] [ 123.476139][ T6846] tipc: Enabling of bearer rejected, failed to enable media [ 124.327402][ T6861] netlink: 196 bytes leftover after parsing attributes in process `syz.3.324'. [ 124.437503][ T6861] netlink: 196 bytes leftover after parsing attributes in process `syz.3.324'. [ 124.448495][ T6861] netlink: 19 bytes leftover after parsing attributes in process `syz.3.324'. [ 124.491732][ T5848] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.610916][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 124.610931][ T30] audit: type=1400 audit(1775903110.859:303): avc: denied { listen } for pid=6871 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.611116][ T5816] Bluetooth: hci1: Invalid handle: 0x30c9 > 0x0eff [ 124.665468][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 124.748989][ T6878] nbd: socks must be embedded in a SOCK_ITEM attr [ 125.079935][ T5848] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 125.342129][ T6882] netlink: 'syz.3.329': attribute type 10 has an invalid length. [ 125.558315][ T6882] team0: Device wg1 is of different type [ 126.216439][ T30] audit: type=1326 audit(1775903112.459:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.0.330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0de79c819 code=0x0 [ 126.360658][ T5794] udevd[5794]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 126.545585][ T5848] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.556017][ T5848] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.559789][ T5794] udevd[5794]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 126.565346][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.584070][ T5848] usb 3-1: Product: syz [ 126.586622][ T5871] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 126.588278][ T5848] usb 3-1: Manufacturer: syz [ 126.600405][ T5848] usb 3-1: SerialNumber: syz [ 126.610139][ T5848] usb 3-1: config 0 descriptor?? [ 126.616833][ T6852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 126.632740][ T5848] usb 3-1: selecting invalid altsetting 0 [ 126.635028][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 126.697201][ T6891] vlan0: entered allmulticast mode [ 126.706828][ T6891] bridge1: entered allmulticast mode [ 126.753512][ T5871] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x82 is Bulk; changing to Interrupt [ 126.783605][ T5871] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x3 is Bulk; changing to Interrupt [ 126.811202][ T5871] usb 1-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.837763][ T5871] usb 1-1: config 1 interface 0 has no altsetting 0 [ 126.854964][ T5871] usb 1-1: string descriptor 0 read error: -22 [ 126.861994][ T5871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.862505][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.891830][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.894321][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.925265][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.927963][ T6886] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 126.947350][ T6886] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 126.957789][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.967079][ T5871] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 126.987242][ T5848] usb 3-1: USB disconnect, device number 6 [ 127.122634][ T6903] netlink: 'syz.3.338': attribute type 16 has an invalid length. [ 127.137077][ T6903] netlink: 'syz.3.338': attribute type 17 has an invalid length. [ 127.172451][ T6903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.224411][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.230850][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.328811][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.341'. [ 127.409764][ T6913] syzkaller0: entered promiscuous mode [ 127.416494][ T6913] syzkaller0: entered allmulticast mode [ 127.437162][ T6913] tipc: Started in network mode [ 127.445400][ T6913] tipc: Node identity 76767c4fdc92, cluster identity 4711 [ 127.453857][ T6913] tipc: Enabled bearer , priority 0 [ 127.465066][ T6911] tipc: Resetting bearer [ 127.484497][ T6918] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 127.508993][ T6911] tipc: Disabling bearer [ 127.558296][ T30] audit: type=1400 audit(1775903113.809:305): avc: denied { create } for pid=6919 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.756609][ T6922] netlink: 48 bytes leftover after parsing attributes in process `syz.1.346'. [ 129.053059][ T24] usb 1-1: USB disconnect, device number 3 [ 129.120718][ T6946] FAULT_INJECTION: forcing a failure. [ 129.120718][ T6946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.161383][ T6946] CPU: 1 UID: 0 PID: 6946 Comm: syz.0.355 Not tainted syzkaller #0 PREEMPT(full) [ 129.161408][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.161418][ T6946] Call Trace: [ 129.161424][ T6946] [ 129.161437][ T6946] dump_stack_lvl+0x100/0x190 [ 129.161470][ T6946] should_fail_ex.cold+0x5/0xa [ 129.161495][ T6946] _copy_from_user+0x2e/0xd0 [ 129.161515][ T6946] binder_thread_write+0x12cb/0x4dd0 [ 129.161537][ T6946] ? __x64_sys_ioctl+0xb7/0x210 [ 129.161568][ T6946] ? __lock_acquire+0x4a5/0x2630 [ 129.161586][ T6946] ? __pfx_binder_thread_write+0x10/0x10 [ 129.161605][ T6946] ? find_held_lock+0x2b/0x80 [ 129.161626][ T6946] ? binder_debug+0xe0/0x190 [ 129.161650][ T6946] ? __pfx_binder_debug+0x10/0x10 [ 129.161676][ T6946] ? binder_debug+0xe0/0x190 [ 129.161698][ T6946] ? __pfx_binder_debug+0x10/0x10 [ 129.161738][ T6946] binder_ioctl+0x2941/0x7610 [ 129.161764][ T6946] ? tomoyo_path_number_perm+0x188/0x580 [ 129.161796][ T6946] ? __pfx_binder_ioctl+0x10/0x10 [ 129.161817][ T6946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.161844][ T6946] ? do_vfs_ioctl+0x226/0x13e0 [ 129.161874][ T6946] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 129.161900][ T6946] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 129.161930][ T6946] ? hook_file_ioctl_common+0x146/0x410 [ 129.161954][ T6946] ? selinux_file_ioctl+0x139/0x290 [ 129.161974][ T6946] ? selinux_file_ioctl+0xb4/0x290 [ 129.161998][ T6946] ? __pfx_binder_ioctl+0x10/0x10 [ 129.162014][ T6946] __x64_sys_ioctl+0x18e/0x210 [ 129.162037][ T6946] do_syscall_64+0x106/0xf80 [ 129.162052][ T6946] ? clear_bhb_loop+0x40/0x90 [ 129.162070][ T6946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.162084][ T6946] RIP: 0033:0x7fd0de79c819 [ 129.162097][ T6946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.162111][ T6946] RSP: 002b:00007fd0df5f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.162127][ T6946] RAX: ffffffffffffffda RBX: 00007fd0dea15fa0 RCX: 00007fd0de79c819 [ 129.162137][ T6946] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 129.162147][ T6946] RBP: 00007fd0df5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.162157][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.162166][ T6946] R13: 00007fd0dea16038 R14: 00007fd0dea15fa0 R15: 00007ffde9cc2608 [ 129.162188][ T6946] [ 129.162222][ T6946] binder: 6945:6946 ioctl c0306201 2000000001c0 returned -14 [ 129.215195][ T6949] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.334850][ T6959] loop7: detected capacity change from 0 to 7 [ 129.406442][ T30] audit: type=1400 audit(1775903115.569:306): avc: denied { create } for pid=6954 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 129.483978][ C0] blk_print_req_error: 10 callbacks suppressed [ 129.483990][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.499748][ C0] buffer_io_error: 10 callbacks suppressed [ 129.499760][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.514578][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.524189][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.533692][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.542961][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.552559][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.560893][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.570520][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.592566][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.602151][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.638585][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.648225][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.656879][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.666539][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.678253][ T6959] ldm_validate_partition_table(): Disk read failed. [ 129.719359][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.728987][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.739569][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 129.756535][ T5888] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 129.769178][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.778758][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.789373][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.801336][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.811794][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.821359][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.830929][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.841078][ T6959] Dev loop7: unable to read RDB block 0 [ 129.846630][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.851160][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.867823][ T6959] loop7: unable to read partition table [ 129.873935][ T6959] loop7: partition table beyond EOD, truncated [ 129.880499][ T6959] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 129.903851][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 129.972971][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.991645][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.051879][ T6974] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 130.090261][ T30] audit: type=1400 audit(1775903116.339:307): avc: denied { firmware_load } for pid=6965 comm="syz.0.363" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 130.111128][ T6974] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 130.142663][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 130.190445][ T24] usb 4-1: config 0 has no interfaces? [ 130.203069][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 130.223393][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.235446][ T24] usb 4-1: Product: syz [ 130.249880][ T5888] usb 5-1: GET_CAPABILITIES returned 0 [ 130.251472][ T24] usb 4-1: Manufacturer: syz [ 130.260218][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 130.268551][ T24] usb 4-1: SerialNumber: syz [ 130.297894][ T24] usb 4-1: config 0 descriptor?? [ 130.445007][ T5888] usb 5-1: USB disconnect, device number 5 [ 130.461167][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 130.520559][ T24] usb 4-1: USB disconnect, device number 8 [ 130.611102][ T10] usb 2-1: device descriptor read/64, error -71 [ 130.795174][ T30] audit: type=1400 audit(1775903117.049:308): avc: denied { getopt } for pid=6996 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.881756][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 131.011399][ T10] usb 2-1: device descriptor read/64, error -71 [ 131.093557][ T5888] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.576327][ T10] usb usb2-port1: attempt power cycle [ 131.605884][ T7015] capability: warning: `syz.4.381' uses deprecated v2 capabilities in a way that may be insecure [ 131.618248][ T30] audit: type=1400 audit(1775903117.869:309): avc: denied { bind } for pid=7014 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.661180][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 131.668219][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.680326][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 131.691681][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.709449][ T5888] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 131.719067][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.727106][ T5888] usb 1-1: Product: syz [ 131.731457][ T5888] usb 1-1: Manufacturer: syz [ 131.736047][ T5888] usb 1-1: SerialNumber: syz [ 131.752632][ T5888] usb 1-1: config 0 descriptor?? [ 131.758084][ T6999] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.831040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.841053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.906904][ T7022] netlink: 'syz.3.382': attribute type 2 has an invalid length. [ 131.914703][ T7022] netlink: 'syz.3.382': attribute type 11 has an invalid length. [ 131.922472][ T7022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.382'. [ 131.947183][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.953201][ T5888] hub 1-1:0.0: bad descriptor, ignoring hub [ 131.982693][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 132.001102][ T5888] hub 1-1:0.0: probe with driver hub failed with error -5 [ 132.018055][ T5888] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 132.032116][ T10] usb 2-1: device descriptor read/8, error -71 [ 132.105259][ T24] usb 5-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 132.133401][ T24] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 132.156767][ T24] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 132.194875][ T5850] usb 1-1: USB disconnect, device number 4 [ 132.195006][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 132.237901][ T5794] udevd[5794]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 132.237976][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.291132][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 132.307619][ T5794] udevd[5794]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 132.310391][ T24] usb 5-1: Product: syz [ 132.333528][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.377757][ T10] usb 2-1: device descriptor read/8, error -71 [ 132.403102][ T24] usb 5-1: Manufacturer: syz [ 132.410769][ T24] usb 5-1: SerialNumber: syz [ 132.427822][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.454083][ T7034] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 132.492883][ T7031] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 132.503101][ T10] usb usb2-port1: unable to enumerate USB device [ 132.519714][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 132.541317][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 132.631113][ T5850] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 132.866825][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.389'. [ 132.878667][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.389'. [ 132.946013][ T30] audit: type=1400 audit(1775903119.169:310): avc: denied { read } for pid=7040 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.334386][ T7044] wg1 speed is unknown, defaulting to 1000 [ 133.341933][ T7044] lo speed is unknown, defaulting to 1000 [ 133.704635][ T30] audit: type=1400 audit(1775903119.939:311): avc: denied { create } for pid=7048 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 133.784250][ T7049] netlink: 'syz.2.393': attribute type 13 has an invalid length. [ 133.812063][ T7052] 9p: Could not find request transport: fd0x0000000000000004 [ 133.821448][ T30] audit: type=1400 audit(1775903120.039:312): avc: denied { getopt } for pid=7048 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.957053][ T7049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.315130][ T7064] 9p: Bad value for 'rfdno' [ 134.924026][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 134.942750][ T7077] FAULT_INJECTION: forcing a failure. [ 134.942750][ T7077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.996270][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.0.401 Not tainted syzkaller #0 PREEMPT(full) [ 134.996299][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.996309][ T7077] Call Trace: [ 134.996315][ T7077] [ 134.996322][ T7077] dump_stack_lvl+0x100/0x190 [ 134.996353][ T7077] should_fail_ex.cold+0x5/0xa [ 134.996377][ T7077] _copy_from_iter+0x1f4/0x1690 [ 134.996401][ T7077] ? __asan_memset+0x23/0x50 [ 134.996424][ T7077] ? __pfx__copy_from_iter+0x10/0x10 [ 134.996441][ T7077] ? __pfx___alloc_skb+0x10/0x10 [ 134.996465][ T7077] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 134.996500][ T7077] netlink_sendmsg+0x808/0xda0 [ 134.996520][ T7077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.996536][ T7077] ? __might_fault+0x50/0x140 [ 134.996568][ T7077] ____sys_sendmsg+0x9e1/0xb70 [ 134.996586][ T7077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.996605][ T7077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.996632][ T7077] ___sys_sendmsg+0x190/0x1e0 [ 134.996651][ T7077] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.996700][ T7077] __sys_sendmsg+0x170/0x220 [ 134.996725][ T7077] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.996764][ T7077] do_syscall_64+0x106/0xf80 [ 134.996782][ T7077] ? clear_bhb_loop+0x40/0x90 [ 134.996802][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.996820][ T7077] RIP: 0033:0x7fd0de79c819 [ 134.996835][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.996852][ T7077] RSP: 002b:00007fd0df5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.996870][ T7077] RAX: ffffffffffffffda RBX: 00007fd0dea15fa0 RCX: 00007fd0de79c819 [ 134.996881][ T7077] RDX: 0000000000000014 RSI: 0000200000001840 RDI: 0000000000000004 [ 134.996891][ T7077] RBP: 00007fd0df5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.996901][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.996912][ T7077] R13: 00007fd0dea16038 R14: 00007fd0dea15fa0 R15: 00007ffde9cc2608 [ 134.996936][ T7077] [ 135.339245][ T7081] netlink: 'syz.0.403': attribute type 16 has an invalid length. [ 135.376670][ T30] audit: type=1400 audit(1775903121.629:313): avc: denied { setattr } for pid=7078 comm="syz.3.402" name="SMC" dev="sockfs" ino=12134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.390855][ T7081] netlink: 'syz.0.403': attribute type 17 has an invalid length. [ 135.443066][ T7083] 9p: Could not find request transport: fd0x0000000000000004 [ 135.474813][ T7081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.589690][ T30] audit: type=1400 audit(1775903121.839:314): avc: denied { map } for pid=7087 comm="syz.2.405" path="socket:[12143]" dev="sockfs" ino=12143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.621136][ T5943] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.635972][ T30] audit: type=1400 audit(1775903121.839:315): avc: denied { read accept } for pid=7087 comm="syz.2.405" path="socket:[12143]" dev="sockfs" ino=12143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.715400][ T24] usb 5-1: USB disconnect, device number 6 [ 135.726087][ T30] audit: type=1400 audit(1775903121.979:316): avc: denied { connect } for pid=7089 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.852794][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.855498][ T7094] 9p: Bad value for 'rfdno' [ 135.927968][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.954283][ T5943] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 135.991752][ T7098] netlink: 35 bytes leftover after parsing attributes in process `syz.2.405'. [ 136.011322][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.057379][ T5943] usb 4-1: config 0 descriptor?? [ 136.064639][ T30] audit: type=1400 audit(1775903122.319:317): avc: denied { setopt } for pid=7102 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.192940][ T30] audit: type=1400 audit(1775903122.359:318): avc: denied { connect } for pid=7087 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.626572][ T7114] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 137.020368][ T7078] Process accounting resumed [ 137.048975][ T5943] usbhid 4-1:0.0: can't add hid device: -71 [ 137.061280][ T5943] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 137.112713][ T5943] usb 4-1: USB disconnect, device number 9 [ 137.792700][ T7123] 9p: Could not find request transport: fd0x0000000000000004 [ 138.446952][ T30] audit: type=1400 audit(1775903124.689:319): avc: denied { write } for pid=7124 comm="syz.1.418" laddr=fe80::16 lport=7 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.921688][ T7144] syzkaller0: entered promiscuous mode [ 138.927215][ T7144] syzkaller0: entered allmulticast mode [ 139.257661][ T30] audit: type=1400 audit(1775903125.399:320): avc: denied { ioctl } for pid=7152 comm="syz.3.428" path="socket:[13184]" dev="sockfs" ino=13184 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 139.263703][ T7157] 9pnet_fd: Insufficient options for proto=fd [ 139.288592][ T7155] Malformed UNC in devname [ 139.288592][ T7155] [ 139.295335][ T7155] CIFS: VFS: Malformed UNC in devname [ 139.326821][ T30] audit: type=1400 audit(1775903125.559:321): avc: denied { create } for pid=7152 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.363269][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 139.424276][ T30] audit: type=1400 audit(1775903125.579:322): avc: denied { connect } for pid=7153 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.511554][ T24] usb 3-1: device descriptor read/64, error -71 [ 139.522891][ T7167] netlink: 'syz.0.431': attribute type 16 has an invalid length. [ 139.530690][ T7167] netlink: 'syz.0.431': attribute type 17 has an invalid length. [ 139.542505][ T7167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.761100][ T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 139.861080][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.921102][ T24] usb 3-1: device descriptor read/64, error -71 [ 140.032786][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 140.034267][ T24] usb usb3-port1: attempt power cycle [ 140.039493][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 140.053868][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.087374][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 140.481124][ T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 140.611193][ T10] gspca_nw80x: reg_w err -110 [ 140.615968][ T10] nw80x 1-1:3.0: probe with driver nw80x failed with error -110 [ 141.176781][ T24] usb 3-1: device descriptor read/8, error -71 [ 141.451208][ T24] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 141.491569][ T24] usb 3-1: device descriptor read/8, error -71 [ 141.544192][ T7196] 9pnet_fd: Insufficient options for proto=fd [ 141.600820][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 141.612667][ T24] usb usb3-port1: unable to enumerate USB device [ 141.805912][ T7197] veth3: entered promiscuous mode [ 141.812032][ T7197] veth3: entered allmulticast mode [ 141.908821][ T7204] netlink: 52 bytes leftover after parsing attributes in process `syz.1.441'. [ 142.676426][ T7221] binder: BINDER_SET_CONTEXT_MGR already set [ 142.682691][ T7221] binder: 7218:7221 ioctl 4018620d 200000004a80 returned -16 [ 144.771279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 145.131794][ T7233] 9pnet_fd: Insufficient options for proto=fd [ 145.157848][ T5871] usb 1-1: USB disconnect, device number 6 [ 145.351184][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.483920][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 145.504841][ T7241] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 145.514610][ T7241] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 145.583256][ T5888] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 145.592969][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.613948][ T5888] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 145.625207][ T5888] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 145.644623][ T5888] usb 5-1: Manufacturer: syz [ 145.658850][ T5888] usb 5-1: config 0 descriptor?? [ 145.761278][ T5888] rc_core: IR keymap rc-hauppauge not found [ 145.768823][ T5888] Registered IR keymap rc-empty [ 145.781956][ T5888] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 145.862581][ T5888] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 146.381555][ C0] igorplugusb 5-1:0.0: receive overflow invalid: 39 [ 146.605585][ T5888] usb 5-1: USB disconnect, device number 7 [ 146.640226][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 146.640241][ T30] audit: type=1400 audit(1775903132.889:328): avc: denied { read open } for pid=7269 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.678613][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.726147][ T30] audit: type=1400 audit(1775903132.889:329): avc: denied { getattr } for pid=7269 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.780015][ T30] audit: type=1400 audit(1775903132.899:330): avc: denied { read write } for pid=7266 comm="syz.1.461" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.823921][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 146.831647][ T30] audit: type=1400 audit(1775903132.899:331): avc: denied { open } for pid=7266 comm="syz.1.461" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.891310][ T30] audit: type=1400 audit(1775903132.899:332): avc: denied { ioctl } for pid=7266 comm="syz.1.461" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.992504][ T29] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 147.085996][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.221904][ T5943] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 147.302190][ T30] audit: type=1400 audit(1775903132.949:333): avc: denied { create } for pid=7267 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 147.315313][ T29] usb 3-1: Product: syz [ 147.321954][ T30] audit: type=1400 audit(1775903132.959:334): avc: denied { sys_admin } for pid=7267 comm="syz.0.462" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 147.321998][ T30] audit: type=1400 audit(1775903132.969:335): avc: denied { sys_nice } for pid=7267 comm="syz.0.462" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 147.322034][ T30] audit: type=1400 audit(1775903133.139:336): avc: denied { ioctl } for pid=7276 comm="syz.0.463" path="socket:[14541]" dev="sockfs" ino=14541 ioctlcmd=0x6f01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 147.347485][ T29] usb 3-1: Manufacturer: syz [ 147.404628][ T29] usb 3-1: SerialNumber: syz [ 147.438430][ T29] usb 3-1: config 0 descriptor?? [ 147.481088][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 147.491578][ T5943] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.514111][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.543770][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.567712][ T5943] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 147.592491][ T5943] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.645322][ T5943] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 147.667042][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'. [ 147.676051][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'. [ 148.315129][ T5943] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 148.469141][ T5943] usb 1-1: Manufacturer: syz [ 148.483776][ T30] audit: type=1400 audit(1775903134.709:337): avc: denied { add_name } for pid=7265 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.534012][ T5943] usb 1-1: config 0 descriptor?? [ 148.741100][ T5807] Bluetooth: hci5: command 0x1003 tx timeout [ 148.741796][ T5816] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.864282][ T7302] netlink: 'syz.4.464': attribute type 10 has an invalid length. [ 149.006951][ T7302] team0: Device vxcan1 is of different type [ 149.207693][ T7317] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.262447][ T5943] rc_core: IR keymap rc-hauppauge not found [ 149.286019][ T5943] Registered IR keymap rc-empty [ 149.316026][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 149.361424][ T7321] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.361924][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 149.421340][ T7323] 9pnet_fd: Insufficient options for proto=fd [ 149.422275][ T5943] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 149.475552][ T5943] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 149.519064][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 149.541395][ T29] usb 3-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 149.549496][ T29] f81604 3-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 149.558661][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 149.566267][ T29] f81604 3-1:0.0: probe with driver f81604 failed with error -110 [ 149.601257][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 149.710508][ T29] usb 3-1: USB disconnect, device number 11 [ 149.749280][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 149.781171][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 149.891275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 150.334097][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.381220][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.400221][ T7340] ubi: mtd0 is already attached to ubi16 [ 150.413974][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.428991][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 150.461136][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.501178][ T5943] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.534790][ T5943] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 150.560555][ T5943] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 150.593560][ T5943] usb 1-1: USB disconnect, device number 7 [ 150.778213][ T7346] netlink: 35 bytes leftover after parsing attributes in process `syz.2.476'. [ 150.821103][ T29] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 151.066939][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.081919][ T29] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.124749][ T29] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 151.145279][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.155724][ T29] usb 2-1: Product: syz [ 151.165979][ T29] usb 2-1: Manufacturer: syz [ 151.185486][ T29] usb 2-1: SerialNumber: syz [ 151.227646][ T29] usb 2-1: config 0 descriptor?? [ 151.310400][ T7359] xt_hashlimit: size too large, truncated to 1048576 [ 151.342976][ T7358] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 151.424434][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.523619][ T7361] bridge_slave_0 (unregistering): left allmulticast mode [ 151.591127][ T7361] bridge_slave_0 (unregistering): left promiscuous mode [ 151.636227][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.701717][ T7339] warning: `syz.1.475' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.811945][ T7363] bridge2: port 1(veth3) entered blocking state [ 151.818543][ T7363] bridge2: port 1(veth3) entered disabled state [ 151.828669][ T7363] veth3: entered allmulticast mode [ 151.874026][ T7363] veth3: entered promiscuous mode [ 151.910880][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 151.910896][ T30] audit: type=1400 audit(1775903138.159:346): avc: denied { read write } for pid=7379 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 151.950291][ T30] audit: type=1400 audit(1775903138.159:347): avc: denied { open } for pid=7379 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 151.975617][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.984691][ T30] audit: type=1400 audit(1775903138.169:348): avc: denied { ioctl } for pid=7379 comm="syz-executor" path="socket:[14670]" dev="sockfs" ino=14670 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.010397][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.018719][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.029368][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.037088][ T7364] bridge2: port 2(veth5) entered blocking state [ 152.047875][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.054863][ T7364] bridge2: port 2(veth5) entered disabled state [ 152.057471][ T7364] veth5: entered allmulticast mode [ 152.069478][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.491'. [ 152.083365][ T7364] veth5: entered promiscuous mode [ 152.097573][ T10] usb 2-1: USB disconnect, device number 15 [ 152.150871][ T1077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.253693][ T1077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.277609][ T7379] wg1 speed is unknown, defaulting to 1000 [ 152.307549][ T7379] lo speed is unknown, defaulting to 1000 [ 152.344273][ T1077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.459252][ T1077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.483739][ T7402] netlink: 'syz.3.494': attribute type 16 has an invalid length. [ 152.491610][ T7402] netlink: 'syz.3.494': attribute type 17 has an invalid length. [ 152.509642][ T7401] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.526495][ T7402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.823329][ T7407] syzkaller0: entered promiscuous mode [ 152.828842][ T7407] syzkaller0: entered allmulticast mode [ 152.867770][ T7407] tipc: Enabled bearer , priority 0 [ 153.329671][ T7406] tipc: Resetting bearer [ 153.349948][ T7406] tipc: Disabling bearer [ 153.371329][ T7379] chnl_net:caif_netlink_parms(): no params data found [ 153.443436][ T1077] bridge_slave_1: left allmulticast mode [ 153.453581][ T1077] bridge_slave_1: left promiscuous mode [ 153.472755][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.555498][ T7427] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 153.612925][ T1077] bridge_slave_0: left allmulticast mode [ 153.633027][ T1077] bridge_slave_0: left promiscuous mode [ 153.638816][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.216059][ T5807] Bluetooth: hci1: command tx timeout [ 154.307782][ T5850] IPVS: starting estimator thread 0... [ 154.842075][ T7441] IPVS: using max 39 ests per chain, 93600 per kthread [ 155.011236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 155.115289][ T30] audit: type=1326 audit(1775903141.369:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005dd9c819 code=0x7ffc0000 [ 155.158645][ T30] audit: type=1326 audit(1775903141.369:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f005dd9c819 code=0x7ffc0000 [ 155.200931][ T30] audit: type=1326 audit(1775903141.369:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005dd9c819 code=0x7ffc0000 [ 155.248795][ T30] audit: type=1326 audit(1775903141.369:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f005dd9c819 code=0x7ffc0000 [ 155.330087][ T30] audit: type=1326 audit(1775903141.369:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005dd9c819 code=0x7ffc0000 [ 155.460998][ T30] audit: type=1326 audit(1775903141.369:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005dd9c819 code=0x7ffc0000 [ 155.556939][ T30] audit: type=1326 audit(1775903141.369:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f005dd9c819 code=0x7ffc0000 [ 155.636197][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.689807][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.718978][ T1077] bond0 (unregistering): Released all slaves [ 156.064520][ T7468] netlink: 'syz.0.507': attribute type 16 has an invalid length. [ 156.073102][ T7468] netlink: 'syz.0.507': attribute type 17 has an invalid length. [ 156.116815][ T7468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.161626][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.189109][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.199309][ T7379] bridge_slave_0: entered allmulticast mode [ 156.222751][ T7379] bridge_slave_0: entered promiscuous mode [ 156.261210][ T5807] Bluetooth: hci1: command tx timeout [ 156.284233][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.300150][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.347934][ T7379] bridge_slave_1: entered allmulticast mode [ 156.370832][ T7379] bridge_slave_1: entered promiscuous mode [ 156.379984][ T7481] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.543627][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 156.676380][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.688718][ T7507] 9pnet_fd: Insufficient options for proto=fd [ 156.725348][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.766577][ T7510] netlink: 9 bytes leftover after parsing attributes in process `syz.2.518'. [ 156.778976][ T1077] hsr_slave_0: left promiscuous mode [ 156.785820][ T1077] hsr_slave_1: left promiscuous mode [ 156.792974][ T7510] netlink: 9 bytes leftover after parsing attributes in process `syz.2.518'. [ 156.802730][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.810177][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.831127][ T5943] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 156.845757][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.855415][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.874486][ T1077] veth1_macvtap: left promiscuous mode [ 156.883866][ T1077] veth0_macvtap: left allmulticast mode [ 156.891140][ T1077] veth0_macvtap: left promiscuous mode [ 156.897767][ T1077] veth1_vlan: left promiscuous mode [ 156.906263][ T1077] veth0_vlan: left promiscuous mode [ 156.949398][ T7518] netlink: 'syz.0.520': attribute type 16 has an invalid length. [ 156.969026][ T7518] netlink: 'syz.0.520': attribute type 17 has an invalid length. [ 156.983953][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 156.997583][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.033328][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.087279][ T5943] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 157.097152][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.107860][ T5943] usb 2-1: Product: syz [ 157.114922][ T5943] usb 2-1: Manufacturer: syz [ 157.120268][ T5943] usb 2-1: SerialNumber: syz [ 157.169310][ T5943] usb 2-1: config 0 descriptor?? [ 157.198796][ T5943] appledisplay 2-1:0.0: Could not find int-in endpoint [ 157.216408][ T5943] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 157.466915][ T5943] usb 2-1: USB disconnect, device number 16 [ 157.488396][ T1077] team0 (unregistering): Port device team_slave_1 removed [ 157.511888][ T1077] team0 (unregistering): Port device team_slave_0 removed [ 157.610610][ T7518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.668304][ T7379] team0: Port device team_slave_0 added [ 157.704947][ T7379] team0: Port device team_slave_1 added [ 157.749265][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.757987][ T7524] netlink: 76 bytes leftover after parsing attributes in process `syz.0.523'. [ 157.758017][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.791875][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 157.801645][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.824549][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.832489][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.859578][ T7379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.908398][ T7527] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.004177][ T7379] hsr_slave_0: entered promiscuous mode [ 158.010630][ T7379] hsr_slave_1: entered promiscuous mode [ 158.193428][ T7538] loop7: detected capacity change from 0 to 7 [ 158.206514][ C1] blk_print_req_error: 10 callbacks suppressed [ 158.206532][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.222341][ C1] buffer_io_error: 10 callbacks suppressed [ 158.222359][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 158.236928][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.246598][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 158.249858][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 158.265027][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.274656][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 158.319524][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.329235][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 158.354249][ T5807] Bluetooth: hci1: command tx timeout [ 158.404229][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.413904][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 158.429656][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.439286][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 158.554519][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.564148][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 158.572463][ T7538] ldm_validate_partition_table(): Disk read failed. [ 158.581073][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.590681][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 158.658979][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.668611][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 158.689241][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.698854][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 158.713561][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.721242][ T7538] Dev loop7: unable to read RDB block 0 [ 158.751157][ T7538] loop7: unable to read partition table [ 158.791715][ T7538] loop7: partition table beyond EOD, truncated [ 158.801251][ T7538] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 158.901666][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 158.914745][ T10] usb 4-1: config 0 has no interfaces? [ 158.922210][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 158.932406][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.940466][ T10] usb 4-1: Product: syz [ 158.951744][ T10] usb 4-1: Manufacturer: syz [ 158.959868][ T10] usb 4-1: SerialNumber: syz [ 158.977123][ T10] usb 4-1: config 0 descriptor?? [ 159.141499][ T5943] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 159.180840][ T7569] netlink: 'syz.2.533': attribute type 16 has an invalid length. [ 159.215763][ T10] usb 4-1: USB disconnect, device number 10 [ 159.218073][ T7569] netlink: 'syz.2.533': attribute type 17 has an invalid length. [ 159.238657][ T7379] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.270253][ T7379] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.301309][ T7569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.318729][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 159.328947][ T5943] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 159.339526][ T7574] 9p: Bad value for 'rfdno' [ 159.349658][ T5943] usb 2-1: config 0 has no interface number 0 [ 159.359172][ T7379] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.366509][ T5943] usb 2-1: config 0 interface 184 has no altsetting 0 [ 159.392608][ T5943] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 159.408211][ T7379] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.418608][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.446653][ T5943] usb 2-1: Product: syz [ 159.450854][ T5943] usb 2-1: Manufacturer: syz [ 159.459226][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 159.468792][ T5943] usb 2-1: SerialNumber: syz [ 159.501267][ T5943] usb 2-1: config 0 descriptor?? [ 159.615425][ T7379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.661454][ T7379] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.702843][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.709997][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.794088][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.801259][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.873380][ T7379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.031908][ T7610] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 160.043468][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 160.043483][ T30] audit: type=1400 audit(1775903146.299:376): avc: denied { getopt } for pid=7601 comm="syz.3.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.131827][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 160.152532][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 160.238561][ T7617] netlink: 'syz.0.545': attribute type 16 has an invalid length. [ 160.251298][ T7617] netlink: 'syz.0.545': attribute type 17 has an invalid length. [ 160.277595][ T7379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.325696][ T7617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.356027][ T7623] 9p: Bad value for 'rfdno' [ 160.421393][ T5807] Bluetooth: hci1: command tx timeout [ 160.482993][ T30] audit: type=1400 audit(1775903146.729:377): avc: denied { create } for pid=7627 comm="syz.0.547" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.542917][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.547'. [ 160.609861][ T30] audit: type=1400 audit(1775903146.859:378): avc: denied { mounton } for pid=7627 comm="syz.0.547" path="/109/file0" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.843235][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 160.984195][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 161.118141][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 161.328224][ T5943] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 161.668500][ T5943] usb 2-1: USB disconnect, device number 17 [ 161.759961][ T7645] team0: entered allmulticast mode [ 161.772993][ T7645] team_slave_0: entered allmulticast mode [ 161.778811][ T7645] team_slave_1: entered allmulticast mode [ 161.788962][ T7645] team0: left allmulticast mode [ 161.801327][ T7645] team_slave_0: left allmulticast mode [ 161.809104][ T7645] team_slave_1: left allmulticast mode [ 161.824965][ T7379] veth0_vlan: entered promiscuous mode [ 161.825989][ T30] audit: type=1400 audit(1775903148.079:379): avc: denied { unlink } for pid=5802 comm="syz-executor" name="file0" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.856302][ T7379] veth1_vlan: entered promiscuous mode [ 161.942124][ T30] audit: type=1400 audit(1775903148.119:380): avc: denied { module_request } for pid=7644 comm="syz.1.551" kmod="rtnl-link-bond_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 161.979854][ T7379] veth0_macvtap: entered promiscuous mode [ 162.004146][ T7379] veth1_macvtap: entered promiscuous mode [ 162.011112][ T30] audit: type=1400 audit(1775903148.239:381): avc: denied { execute } for pid=7644 comm="syz.1.551" name="file1" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.046930][ T7379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.089714][ T7379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.109485][ T6105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.126828][ T6105] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.135703][ T30] audit: type=1400 audit(1775903148.299:382): avc: denied { create } for pid=7647 comm="syz.2.553" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.136441][ T6105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.165379][ T6105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.184909][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 162.194708][ T7658] openvswitch: netlink: Message has 2 unknown bytes. [ 162.292504][ T5871] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 162.323775][ T30] audit: type=1400 audit(1775903148.299:383): avc: denied { link } for pid=7647 comm="syz.2.553" name="#5" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.355666][ T273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.364623][ T273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.371516][ T30] audit: type=1400 audit(1775903148.299:384): avc: denied { rename } for pid=7647 comm="syz.2.553" name="#6" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.511058][ T7667] ubi: mtd0 is already attached to ubi16 [ 162.702000][ T30] audit: type=1400 audit(1775903148.299:385): avc: denied { write } for pid=7644 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.735838][ T5871] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 162.746633][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.772069][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.772202][ T5871] usb 4-1: Product: syz [ 162.822630][ T5871] usb 4-1: Manufacturer: syz [ 162.823946][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.828501][ T5871] usb 4-1: SerialNumber: syz [ 162.862470][ T5871] usb 4-1: config 0 descriptor?? [ 162.956441][ T7674] netlink: 'syz.2.557': attribute type 16 has an invalid length. [ 162.965374][ T7674] netlink: 'syz.2.557': attribute type 17 has an invalid length. [ 162.991287][ T7674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.082782][ T7678] syzkaller0: entered promiscuous mode [ 163.088317][ T7678] syzkaller0: entered allmulticast mode [ 163.193245][ T7678] tipc: Started in network mode [ 163.201111][ T7678] tipc: Node identity 52cfa333534e, cluster identity 4711 [ 163.223083][ T7678] tipc: Enabled bearer , priority 0 [ 163.288364][ T7677] tipc: Resetting bearer [ 163.873636][ T7677] tipc: Disabling bearer [ 163.932280][ T7686] netlink: 35 bytes leftover after parsing attributes in process `syz.1.561'. [ 164.527555][ T7707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.548398][ T7707] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 164.982002][ T5871] usb 4-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 164.990191][ T5871] f81604 4-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 165.094851][ T7711] loop5: detected capacity change from 0 to 7 [ 165.103123][ T7711] Dev loop5: unable to read RDB block 7 [ 165.116652][ T7711] loop5: unable to read partition table [ 165.129566][ T5871] f81604 4-1:0.0: probe with driver f81604 failed with error -110 [ 165.131294][ T7711] loop5: partition table beyond EOD, truncated [ 165.247053][ T5871] usb 4-1: USB disconnect, device number 11 [ 165.275730][ T7711] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 166.163727][ T7731] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 166.499713][ T7732] netlink: 'syz.0.570': attribute type 1 has an invalid length. [ 166.656193][ T7738] netlink: 'syz.1.571': attribute type 16 has an invalid length. [ 166.682735][ T7738] netlink: 'syz.1.571': attribute type 17 has an invalid length. [ 166.791875][ T7739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.856614][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.979301][ T7734] bond0: (slave gretap1): making interface the new active one [ 166.994754][ T7734] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 167.111205][ T5943] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 167.334119][ T7738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.359695][ T5943] usb 1-1: config 0 has an invalid interface number: 164 but max is 1 [ 167.463433][ T5943] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.662387][ T5943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.788232][ T5943] usb 1-1: config 0 has no interface number 0 [ 167.893738][ T5943] usb 1-1: config 0 interface 164 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 168.086668][ T5943] usb 1-1: config 0 interface 164 has no altsetting 0 [ 168.175457][ T5943] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 168.293550][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.718009][ T5943] usb 1-1: config 0 descriptor?? [ 168.889417][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.577'. [ 168.916978][ T7765] 8021q: VLANs not supported on nlmon0 [ 168.939561][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 168.973161][ T7765] bond1 (unregistering): Released all slaves [ 168.998072][ T5943] usb 1-1: string descriptor 0 read error: -71 [ 169.031826][ T5943] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 169.038663][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 169.057475][ T7767] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 169.065068][ T7767] macvlan2: entered allmulticast mode [ 169.071551][ T7724] Process accounting resumed [ 169.071959][ T7767] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 169.088121][ T5943] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 169.121840][ T5943] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 169.143501][ T5943] usb 1-1: media controller created [ 169.150816][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.193951][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 169.199942][ T5943] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 169.214371][ T5943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 169.288121][ T5943] dvb-usb: schedule remote query interval to 150 msecs. [ 169.296789][ T5943] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 169.336828][ T7776] binder: 7775:7776 ioctl c0306201 2000000001c0 returned -14 [ 169.365430][ T5943] usb 1-1: USB disconnect, device number 8 [ 169.490711][ T5943] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 171.863626][ T7804] netlink: 76 bytes leftover after parsing attributes in process `syz.1.592'. [ 171.951352][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 172.102394][ T7812] process 'syz.5.596' launched './file2' with NULL argv: empty string added [ 172.122617][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 172.122631][ T30] audit: type=1400 audit(1775903158.379:394): avc: denied { execute_no_trans } for pid=7810 comm="syz.5.596" path="/9/file2" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.461233][ T5943] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 172.681106][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 172.694722][ T5943] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.712976][ T5943] usb 4-1: config 0 has no interface number 0 [ 172.732105][ T5943] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 172.742486][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 172.761823][ T5943] usb 4-1: config 0 interface 1 has no altsetting 0 [ 172.793531][ T5943] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 172.812823][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.820841][ T5943] usb 4-1: Product: syz [ 172.870202][ T5943] usb 4-1: Manufacturer: syz [ 172.884174][ T5943] usb 4-1: SerialNumber: syz [ 172.895863][ T5943] usb 4-1: config 0 descriptor?? [ 173.634881][ T7859] trusted_key: encrypted_key: master key parameter 'defalt' is invalid [ 173.669107][ T7859] ======================================================= [ 173.669107][ T7859] WARNING: The mand mount option has been deprecated and [ 173.669107][ T7859] and is ignored by this kernel. Remove the mand [ 173.669107][ T7859] option from the mount to silence this warning. [ 173.669107][ T7859] ======================================================= [ 173.705535][ T7859] overlayfs: failed to resolve './file1/file0': -2 [ 174.193811][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.608'. [ 174.205488][ T7866] 8021q: VLANs not supported on xfrm0 [ 174.485544][ T5943] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 174.517535][ T5943] cx231xx 4-1:0.1: Not found matching IAD interface [ 174.550224][ T5943] usb 4-1: USB disconnect, device number 12 [ 174.724640][ T7882] netlink: 196 bytes leftover after parsing attributes in process `syz.5.611'. [ 174.757532][ T7882] netlink: 196 bytes leftover after parsing attributes in process `syz.5.611'. [ 174.776802][ T7882] netlink: 19 bytes leftover after parsing attributes in process `syz.5.611'. [ 175.091073][ T5871] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 175.123225][ T7891] ubi: mtd0 is already attached to ubi16 [ 175.300023][ T5871] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.341435][ T5871] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 175.366880][ T7901] netlink: 388 bytes leftover after parsing attributes in process `syz.5.615'. [ 175.385505][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 175.407252][ T30] audit: type=1400 audit(1775903161.639:395): avc: denied { create } for pid=7895 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.412795][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.477841][ T30] audit: type=1400 audit(1775903161.639:396): avc: denied { bind } for pid=7895 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.528218][ T30] audit: type=1400 audit(1775903161.639:397): avc: denied { write } for pid=7895 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.584380][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.599513][ T5871] usb 4-1: Product: syz [ 175.617300][ T5871] usb 4-1: Manufacturer: syz [ 175.635841][ T5871] usb 4-1: SerialNumber: syz [ 175.650752][ T5871] cdc_mbim 4-1:1.0: skipping garbage [ 175.805343][ T7909] syzkaller0: entered promiscuous mode [ 175.822328][ T7909] syzkaller0: entered allmulticast mode [ 175.851277][ T7884] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.964105][ T7909] tipc: Enabled bearer , priority 0 [ 175.997593][ T7908] tipc: Resetting bearer [ 176.029809][ T7908] tipc: Disabling bearer [ 176.840915][ T5871] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 176.857949][ T5871] cdc_mbim 4-1:1.0: bind() failure [ 176.884133][ T5871] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 176.921871][ T5871] cdc_ncm 4-1:1.1: bind() failure [ 177.001250][ T5871] usb 4-1: USB disconnect, device number 13 [ 177.667215][ T30] audit: type=1400 audit(1775903163.919:398): avc: denied { ioctl } for pid=7936 comm="syz.1.625" path="socket:[17142]" dev="sockfs" ino=17142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.757859][ T7953] netlink: 'syz.1.625': attribute type 10 has an invalid length. [ 177.996628][ T7953] team0: Device vxcan1 is of different type [ 178.011076][ T30] audit: type=1400 audit(1775903163.919:399): avc: denied { connect } for pid=7936 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.326262][ T7965] netlink: 'syz.3.630': attribute type 16 has an invalid length. [ 178.353581][ T7965] netlink: 'syz.3.630': attribute type 17 has an invalid length. [ 178.472027][ T7965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.659807][ T30] audit: type=1400 audit(1775903165.899:400): avc: denied { create } for pid=7975 comm="syz.5.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 179.744542][ T30] audit: type=1400 audit(1775903165.999:401): avc: denied { block_suspend } for pid=7977 comm="syz.1.632" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.814219][ T7990] netlink: 9 bytes leftover after parsing attributes in process `syz.3.633'. [ 180.060899][ T7990] netlink: 9 bytes leftover after parsing attributes in process `syz.3.633'. [ 180.611293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 181.021342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 181.311156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 181.368838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 181.428815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 187.656187][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 188.436940][ C1] sched: DL replenish lagged too much [ 190.485521][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.508705][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.459416][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 191.475695][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 191.491845][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 191.497909][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 267.065665][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.088939][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.963863][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.129769][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.697047][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.711817][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.726637][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 380.900940][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 380.907916][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7995/1:b..l P5808/1:b..l P5811/1:b..l [ 380.918449][ C1] rcu: (detected by 1, t=10502 jiffies, g=22341, q=2477 ncpus=2) [ 380.926248][ C1] task:syz-executor state:R running task stack:22536 pid:5811 tgid:5811 ppid:5799 task_flags:0x400140 flags:0x00080000 [ 380.940561][ C1] Call Trace: [ 380.943843][ C1] [ 380.946776][ C1] __schedule+0xfee/0x6120 [ 380.951199][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.957357][ C1] ? __pfx___schedule+0x10/0x10 [ 380.962195][ C1] ? mark_held_locks+0x40/0x70 [ 380.966958][ C1] preempt_schedule_irq+0x50/0x90 [ 380.971987][ C1] irqentry_exit+0x17b/0x670 [ 380.976577][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.982554][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 380.988630][ C1] Code: 60 00 be 03 00 00 00 5b e9 62 25 ee 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 85 88 05 12 <48> 8b 34 24 65 48 8b 15 61 88 05 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 381.008241][ C1] RSP: 0018:ffffc90003db78a8 EFLAGS: 00000246 [ 381.014311][ C1] RAX: 0000000080000000 RBX: 0000000000000008 RCX: ffffffff82824538 [ 381.022278][ C1] RDX: dffffc0000000000 RSI: ffffffff82824060 RDI: 0000000000000008 [ 381.030244][ C1] RBP: ffffea00010e5800 R08: 0000000000000001 R09: 0000000000000000 [ 381.038211][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 381.046179][ C1] R13: 000000403b30b216 R14: 0000000000000002 R15: 0000000000000002 [ 381.054154][ C1] ? page_ext_get+0x88/0x1a0 [ 381.058747][ C1] ? lookup_page_ext+0x10/0x100 [ 381.063590][ C1] __nr_to_section+0x13/0x100 [ 381.068273][ C1] lookup_page_ext+0x46/0x100 [ 381.072953][ C1] page_ext_get+0x58/0x1a0 [ 381.077371][ C1] __reset_page_owner+0x2b/0x190 [ 381.082306][ C1] __free_frozen_pages+0x7e1/0x10d0 [ 381.087512][ C1] ? tomoyo_realpath_from_path+0xb6/0x690 [ 381.093238][ C1] qlist_free_all+0x47/0xe0 [ 381.097745][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 381.103205][ C1] __kasan_slab_alloc+0x69/0x90 [ 381.108063][ C1] __kmalloc_noprof+0x2b9/0x850 [ 381.112902][ C1] tomoyo_realpath_from_path+0xb6/0x690 [ 381.118459][ C1] tomoyo_path_perm+0x276/0x460 [ 381.123309][ C1] ? tomoyo_path_perm+0x262/0x460 [ 381.128336][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 381.133734][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 381.138931][ C1] ? putname+0xb1/0x110 [ 381.143085][ C1] ? kmem_cache_free+0x124/0x6a0 [ 381.148027][ C1] security_inode_getattr+0x116/0x280 [ 381.153421][ C1] vfs_fstat+0x4b/0xe0 [ 381.157481][ C1] __do_sys_newfstat+0x8b/0x110 [ 381.162315][ C1] ? __pfx___do_sys_newfstat+0x10/0x10 [ 381.167796][ C1] do_syscall_64+0x106/0xf80 [ 381.172383][ C1] ? clear_bhb_loop+0x40/0x90 [ 381.177062][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.182951][ C1] RIP: 0033:0x7f8791b9ae27 [ 381.187360][ C1] RSP: 002b:00007ffd0fbaa978 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 381.195814][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8791b9ae27 [ 381.203776][ C1] RDX: 0000000000000000 RSI: 00007ffd0fbaa980 RDI: 0000000000000003 [ 381.211728][ C1] RBP: 00007ffd0fbaaa7c R08: 0000000000000000 R09: 0000000000000000 [ 381.219703][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000094 [ 381.227685][ C1] R13: 0000000000000000 R14: 000000000002c237 R15: 00007ffd0fbaaad0 [ 381.235692][ C1] [ 381.238733][ C1] task:syz-executor state:R running task stack:22536 pid:5808 tgid:5808 ppid:5798 task_flags:0x400140 flags:0x00080000 [ 381.252229][ C1] Call Trace: [ 381.255511][ C1] [ 381.258468][ C1] __schedule+0xfee/0x6120 [ 381.262897][ C1] ? __pfx___schedule+0x10/0x10 [ 381.267774][ C1] ? mark_held_locks+0x40/0x70 [ 381.272539][ C1] preempt_schedule_irq+0x50/0x90 [ 381.277574][ C1] irqentry_exit+0x17b/0x670 [ 381.282164][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.288141][ C1] RIP: 0010:bpf_ksym_find+0x48/0x1c0 [ 381.293425][ C1] Code: f0 ff 8b 05 8a 35 28 0c 41 89 c6 89 44 24 04 41 83 e6 01 49 63 c6 48 8d 3c c5 70 14 41 8e 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <0f> 85 5f 01 00 00 49 63 c6 48 83 c0 06 48 8b 1c c5 40 14 41 8e 48 [ 381.313034][ C1] RSP: 0018:ffffc90003517610 EFLAGS: 00000246 [ 381.319108][ C1] RAX: 1ffffffff1c8228e RBX: 0000000000000001 RCX: ffffffff821a8e02 [ 381.327077][ C1] RDX: ffff88807aef24c0 RSI: ffffffff8218deb0 RDI: ffffffff8e411470 [ 381.335048][ C1] RBP: 00007efee379b907 R08: 0000000000000001 R09: 0000000000000000 [ 381.343025][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00007efee379b907 [ 381.350994][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807aef24c0 [ 381.358999][ C1] ? is_bpf_text_address+0xb2/0x1a0 [ 381.364198][ C1] ? bpf_ksym_find+0x20/0x1c0 [ 381.368906][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.375085][ C1] is_bpf_text_address+0x58/0x1a0 [ 381.380130][ C1] kernel_text_address+0x8d/0x100 [ 381.385177][ C1] __kernel_text_address+0xd/0x30 [ 381.390218][ C1] unwind_get_return_address+0x59/0xa0 [ 381.395686][ C1] arch_stack_walk+0xa6/0xf0 [ 381.400293][ C1] stack_trace_save+0x8e/0xc0 [ 381.404979][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 381.410360][ C1] ? __lock_acquire+0x4a5/0x2630 [ 381.415283][ C1] ? __lock_acquire+0x4a5/0x2630 [ 381.420221][ C1] save_stack+0x162/0x1e0 [ 381.424560][ C1] ? __pfx_save_stack+0x10/0x10 [ 381.429500][ C1] ? __free_frozen_pages+0x7e1/0x10d0 [ 381.434870][ C1] ? qlist_free_all+0x47/0xe0 [ 381.439553][ C1] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 381.445187][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 381.450205][ C1] ? __kmalloc_noprof+0x2b9/0x850 [ 381.455225][ C1] ? tomoyo_realpath_from_path+0xb6/0x690 [ 381.460934][ C1] ? tomoyo_path_perm+0x276/0x460 [ 381.465958][ C1] ? tomoyo_path_unlink+0x91/0xe0 [ 381.470980][ C1] ? security_path_unlink+0x145/0x2b0 [ 381.476349][ C1] ? filename_unlinkat+0x316/0x730 [ 381.481462][ C1] ? __x64_sys_unlink+0x46/0x70 [ 381.486311][ C1] ? do_syscall_64+0x106/0xf80 [ 381.491068][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.497143][ C1] ? page_ext_put+0x3e/0xd0 [ 381.501675][ C1] __reset_page_owner+0x84/0x190 [ 381.506620][ C1] __free_frozen_pages+0x7e1/0x10d0 [ 381.511810][ C1] ? __free_slab+0xd0/0x220 [ 381.516320][ C1] ? tomoyo_realpath_from_path+0xb6/0x690 [ 381.522048][ C1] qlist_free_all+0x47/0xe0 [ 381.526559][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 381.532029][ C1] __kasan_slab_alloc+0x69/0x90 [ 381.536882][ C1] __kmalloc_noprof+0x2b9/0x850 [ 381.541743][ C1] tomoyo_realpath_from_path+0xb6/0x690 [ 381.547305][ C1] tomoyo_path_perm+0x276/0x460 [ 381.552166][ C1] ? tomoyo_path_perm+0x262/0x460 [ 381.557287][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 381.562646][ C1] ? mntput+0x70/0xa0 [ 381.566776][ C1] ? __d_lookup+0x25c/0x4a0 [ 381.571286][ C1] tomoyo_path_unlink+0x91/0xe0 [ 381.576138][ C1] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 381.581692][ C1] ? lookup_dcache+0x66/0x170 [ 381.586380][ C1] security_path_unlink+0x145/0x2b0 [ 381.591577][ C1] filename_unlinkat+0x316/0x730 [ 381.596518][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 381.601988][ C1] ? do_getname+0x191/0x390 [ 381.606515][ C1] __x64_sys_unlink+0x46/0x70 [ 381.611180][ C1] do_syscall_64+0x106/0xf80 [ 381.615770][ C1] ? clear_bhb_loop+0x40/0x90 [ 381.620450][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.626342][ C1] RIP: 0033:0x7efee379b907 [ 381.630750][ C1] RSP: 002b:00007fff9cefa2b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 381.639156][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efee379b907 [ 381.647122][ C1] RDX: 00007fff9cefa2e0 RSI: 00007fff9cefa370 RDI: 00007fff9cefa370 [ 381.655093][ C1] RBP: 00007fff9cefa370 R08: 00007fff9cefb370 R09: 00000000ffffffff [ 381.663060][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff9cefb400 [ 381.671042][ C1] R13: 00007efee3832048 R14: 000000000002bfa5 R15: 00007fff9cefb440 [ 381.679031][ C1] [ 381.682047][ C1] task:syz.2.636 state:R running task stack:26216 pid:7995 tgid:7980 ppid:5811 task_flags:0x400140 flags:0x00080002 [ 381.695548][ C1] Call Trace: [ 381.698860][ C1] [ 381.701789][ C1] __schedule+0xfee/0x6120 [ 381.706217][ C1] ? __pfx___schedule+0x10/0x10 [ 381.711070][ C1] ? rcu_is_watching+0x12/0xc0 [ 381.715841][ C1] preempt_schedule_irq+0x50/0x90 [ 381.720870][ C1] irqentry_exit+0x17b/0x670 [ 381.725459][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 381.731440][ C1] RIP: 0010:unwind_next_frame+0x4d6/0x1ea0 [ 381.737248][ C1] Code: e8 6f f3 ff ff 48 89 c1 48 85 c0 0f 84 2d 0b 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 <4c> 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 bd 13 00 00 0f b6 41 05 [ 381.756854][ C1] RSP: 0018:ffffc90003826d78 EFLAGS: 00000a07 [ 381.762908][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91817c22 [ 381.770877][ C1] RDX: 1ffffffff2302f84 RSI: 0000000000000000 RDI: ffffffff90f7cfb0 [ 381.778843][ C1] RBP: ffffc90003826e30 R08: ffffffff91817c28 R09: 0000000000000007 [ 381.786810][ C1] R10: 0000000000000200 R11: 0000000000011d05 R12: ffffc90003826e38 [ 381.794778][ C1] R13: ffffc90003826de8 R14: ffffc90003826e1d R15: ffffffff91817c27 [ 381.802761][ C1] ? unwind_next_frame+0x2ec/0x1ea0 [ 381.807961][ C1] ? __sys_bpf+0x2091/0x4b90 [ 381.812542][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.818700][ C1] arch_stack_walk+0x94/0xf0 [ 381.823298][ C1] ? __sys_bpf+0x2091/0x4b90 [ 381.827896][ C1] stack_trace_save+0x8e/0xc0 [ 381.832576][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 381.837969][ C1] save_stack+0x162/0x1e0 [ 381.842303][ C1] ? __pfx_save_stack+0x10/0x10 [ 381.847158][ C1] ? post_alloc_hook+0x153/0x170 [ 381.852098][ C1] ? get_page_from_freelist+0x111d/0x3140 [ 381.857816][ C1] ? __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 381.863872][ C1] ? alloc_pages_bulk_noprof+0x782/0x1490 [ 381.869596][ C1] ? __kasan_populate_vmalloc+0xf0/0x210 [ 381.875235][ C1] ? alloc_vmap_area+0x95d/0x2bd0 [ 381.880255][ C1] ? __get_vm_area_node+0x1ca/0x330 [ 381.885452][ C1] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 381.891515][ C1] ? __bpf_map_area_alloc+0x12e/0x200 [ 381.896912][ C1] ? array_map_alloc+0x27e/0x750 [ 381.901847][ C1] ? map_create+0x84e/0x2ba0 [ 381.906429][ C1] ? __sys_bpf+0x2091/0x4b90 [ 381.911095][ C1] ? __lock_acquire+0x4a5/0x2630 [ 381.916048][ C1] __set_page_owner+0x8c/0x540 [ 381.920850][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 381.926222][ C1] ? bad_range+0x261/0x400 [ 381.930636][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 381.935839][ C1] post_alloc_hook+0x153/0x170 [ 381.940606][ C1] get_page_from_freelist+0x111d/0x3140 [ 381.946171][ C1] ? __pfx___might_resched+0x10/0x10 [ 381.951460][ C1] ? prepare_alloc_pages+0x16d/0x5f0 [ 381.956745][ C1] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 381.962641][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 381.968984][ C1] ? policy_nodemask+0xed/0x4f0 [ 381.973836][ C1] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 381.979810][ C1] ? find_held_lock+0x2b/0x80 [ 381.984489][ C1] ? kasan_populate_vmalloc_pte+0xe3/0x170 [ 381.990303][ C1] ? kasan_populate_vmalloc_pte+0xe3/0x170 [ 381.996130][ C1] alloc_pages_bulk_noprof+0x782/0x1490 [ 382.001680][ C1] ? kasan_populate_vmalloc_pte+0xe3/0x170 [ 382.007498][ C1] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 382.013736][ C1] ? __apply_to_page_range+0x12b2/0x1520 [ 382.019389][ C1] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 382.025378][ C1] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 382.031639][ C1] ? alloc_pages_bulk_noprof+0x811/0x1490 [ 382.037373][ C1] __kasan_populate_vmalloc+0xf0/0x210 [ 382.042879][ C1] alloc_vmap_area+0x95d/0x2bd0 [ 382.047743][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 382.053043][ C1] __get_vm_area_node+0x1ca/0x330 [ 382.058092][ C1] __vmalloc_node_range_noprof+0x213/0x1530 [ 382.063983][ C1] ? array_map_alloc+0x27e/0x750 [ 382.068940][ C1] ? avc_has_perm_noaudit+0x145/0x3b0 [ 382.074401][ C1] ? array_map_alloc+0x27e/0x750 [ 382.079341][ C1] ? cred_has_capability.isra.0+0x186/0x300 [ 382.085241][ C1] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 382.091489][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 382.097821][ C1] ? rcu_is_watching+0x12/0xc0 [ 382.102585][ C1] ? cap_capable+0x107/0x460 [ 382.107181][ C1] ? array_map_alloc+0x27e/0x750 [ 382.112101][ C1] __bpf_map_area_alloc+0x12e/0x200 [ 382.117301][ C1] ? array_map_alloc+0x27e/0x750 [ 382.122241][ C1] array_map_alloc+0x27e/0x750 [ 382.127012][ C1] ? __pfx_array_map_mem_usage+0x10/0x10 [ 382.132640][ C1] map_create+0x84e/0x2ba0 [ 382.137053][ C1] ? avc_has_perm_noaudit+0x145/0x3b0 [ 382.142435][ C1] ? __pfx_map_create+0x10/0x10 [ 382.147284][ C1] ? __might_fault+0xc5/0x140 [ 382.151962][ C1] ? __might_fault+0xc5/0x140 [ 382.156640][ C1] ? selinux_bpf+0xfb/0x150 [ 382.161132][ C1] __sys_bpf+0x2091/0x4b90 [ 382.165546][ C1] ? futex_private_hash_put+0x107/0x1c0 [ 382.171101][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 382.175863][ C1] ? __pfx_futex_wake+0x10/0x10 [ 382.180728][ C1] ? do_futex+0x192/0x350 [ 382.185071][ C1] ? xfd_validate_state+0x129/0x190 [ 382.190275][ C1] __x64_sys_bpf+0x7b/0xc0 [ 382.194699][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 382.199898][ C1] do_syscall_64+0x106/0xf80 [ 382.204480][ C1] ? clear_bhb_loop+0x40/0x90 [ 382.209132][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.215004][ C1] RIP: 0033:0x7f8791b9c819 [ 382.219412][ C1] RSP: 002b:00007f878f991028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.227819][ C1] RAX: ffffffffffffffda RBX: 00007f8791e16270 RCX: 00007f8791b9c819 [ 382.235783][ C1] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000 [ 382.243803][ C1] RBP: 00007f8791c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 382.251777][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.259749][ C1] R13: 00007f8791e16308 R14: 00007f8791e16270 R15: 00007ffd0fbaa6d8 [ 382.267731][ C1] [ 382.270753][ C1] rcu: rcu_preempt kthread starved for 331 jiffies! g22341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 382.281773][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 382.291737][ C1] rcu: RCU grace-period kthread stack dump: [ 382.297623][ C1] task:rcu_preempt state:R running task stack:27832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 382.311116][ C1] Call Trace: [ 382.314390][ C1] [ 382.317319][ C1] __schedule+0xfee/0x6120 [ 382.321813][ C1] ? __lock_acquire+0x4a5/0x2630 [ 382.326775][ C1] ? __pfx___schedule+0x10/0x10 [ 382.331644][ C1] ? find_held_lock+0x2b/0x80 [ 382.336329][ C1] ? schedule+0x2bf/0x390 [ 382.340672][ C1] schedule+0xdd/0x390 [ 382.344746][ C1] schedule_timeout+0x127/0x280 [ 382.349597][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 382.354968][ C1] ? __pfx_process_timeout+0x10/0x10 [ 382.360244][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 382.366040][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 382.371507][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 382.376281][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 382.381575][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 382.386517][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 382.391749][ C1] ? rcu_is_watching+0x12/0xc0 [ 382.396511][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 382.402321][ C1] rcu_gp_kthread+0x179/0x230 [ 382.406998][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 382.412180][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 382.417997][ C1] ? __kthread_parkme+0x18c/0x230 [ 382.423028][ C1] ? kthread+0x13a/0x450 [ 382.427267][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 382.432470][ C1] kthread+0x370/0x450 [ 382.436533][ C1] ? __pfx_kthread+0x10/0x10 [ 382.441122][ C1] ret_from_fork+0x754/0xd80 [ 382.445733][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 382.450845][ C1] ? __switch_to+0x7b4/0x1120 [ 382.455593][ C1] ? __pfx_kthread+0x10/0x10 [ 382.460179][ C1] ret_from_fork_asm+0x1a/0x30 [ 382.464970][ C1] [ 382.467997][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 382.474320][ C1] Sending NMI from CPU 1 to CPUs 0: [ 382.479528][ C0] NMI backtrace for cpu 0 [ 382.479540][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 382.479556][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 382.479564][ C0] RIP: 0010:rcu_is_watching+0x71/0xc0 [ 382.479585][ C0] Code: e0 c8 12 8e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 <8b> 03 c1 e8 02 83 e0 01 65 ff 0d 80 08 21 12 74 07 5b 5d c3 cc cc [ 382.479598][ C0] RSP: 0018:ffffc90000006a10 EFLAGS: 00000246 [ 382.479610][ C0] RAX: 0000000000000003 RBX: ffff8880b8433ce8 RCX: 0000000000000002 [ 382.479619][ C0] RDX: 0000000000000000 RSI: ffffffff8c1b1e20 RDI: ffffffff8e12c8e0 [ 382.479628][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.479661][ C0] R10: 0000000000000200 R11: 0000000000086401 R12: 0000000000000002 [ 382.479670][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.479678][ C0] FS: 0000000000000000(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 382.479692][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.479701][ C0] CR2: 00002000001df030 CR3: 000000004ab67000 CR4: 00000000003526f0 [ 382.479710][ C0] Call Trace: [ 382.479715][ C0] [ 382.479720][ C0] lock_acquire+0x317/0x380 [ 382.479735][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 382.479752][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 382.479768][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 382.479787][ C0] unwind_next_frame+0xd1/0x1ea0 [ 382.479803][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 382.479818][ C0] ? __netif_receive_skb+0x1f/0x120 [ 382.479835][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 382.479853][ C0] arch_stack_walk+0x94/0xf0 [ 382.479871][ C0] ? __netif_receive_skb+0x1f/0x120 [ 382.479887][ C0] stack_trace_save+0x8e/0xc0 [ 382.479909][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 382.479925][ C0] ? kmem_cache_free+0x124/0x6a0 [ 382.479942][ C0] ? dev_queue_xmit_nit+0x6fc/0xa60 [ 382.479959][ C0] ? dev_hard_start_xmit+0x2f5/0x7d0 [ 382.479973][ C0] ? __dev_queue_xmit+0x32c1/0x4800 [ 382.479987][ C0] ? ip_finish_output2+0xf4a/0x24d0 [ 382.479999][ C0] ? __ip_finish_output.part.0+0x444/0x6f0 [ 382.480012][ C0] ? ip_output+0x39b/0xc10 [ 382.480022][ C0] ? ip_local_out+0x193/0x1f0 [ 382.480034][ C0] ? synproxy_send_tcp.isra.0+0x481/0x680 [ 382.480048][ C0] kasan_save_stack+0x30/0x50 [ 382.480067][ C0] ? kasan_save_stack+0x30/0x50 [ 382.480084][ C0] ? kasan_save_track+0x14/0x30 [ 382.480102][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 382.480114][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 382.480131][ C0] ? skb_clone+0x190/0x400 [ 382.480148][ C0] ? dev_queue_xmit_nit+0x255/0xa60 [ 382.480165][ C0] ? dev_hard_start_xmit+0x2f5/0x7d0 [ 382.480179][ C0] ? __dev_queue_xmit+0x32c1/0x4800 [ 382.480193][ C0] ? ip_finish_output2+0xf4a/0x24d0 [ 382.480204][ C0] ? __ip_finish_output.part.0+0x444/0x6f0 [ 382.480217][ C0] ? ip_output+0x39b/0xc10 [ 382.480228][ C0] ? ip_local_out+0x193/0x1f0 [ 382.480239][ C0] ? synproxy_send_tcp.isra.0+0x481/0x680 [ 382.480252][ C0] ? synproxy_send_client_synack+0x6ea/0x970 [ 382.480264][ C0] ? nft_synproxy_do_eval+0xa73/0xd50 [ 382.480279][ C0] ? nft_do_chain+0x2e8/0x1930 [ 382.480292][ C0] ? nft_do_chain_inet+0xee/0x340 [ 382.480304][ C0] ? nf_hook_slow+0xbf/0x220 [ 382.480321][ C0] ? nf_hook.constprop.0+0x2a6/0x750 [ 382.480337][ C0] ? ip_local_deliver+0x163/0x1f0 [ 382.480353][ C0] ? ip_rcv+0x33a/0x3c0 [ 382.480368][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 382.480383][ C0] ? __netif_receive_skb+0x1f/0x120 [ 382.480407][ C0] kasan_save_track+0x14/0x30 [ 382.480425][ C0] __kasan_slab_alloc+0x89/0x90 [ 382.480438][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 382.480455][ C0] ? skb_clone+0x190/0x400 [ 382.480474][ C0] skb_clone+0x190/0x400 [ 382.480492][ C0] dev_queue_xmit_nit+0x255/0xa60 [ 382.480513][ C0] dev_hard_start_xmit+0x2f5/0x7d0 [ 382.480529][ C0] __dev_queue_xmit+0x32c1/0x4800 [ 382.480546][ C0] ? __lock_acquire+0x4a5/0x2630 [ 382.480560][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 382.480575][ C0] ? ipt_do_table+0xd4f/0x1b00 [ 382.480589][ C0] ? rcu_is_watching+0x12/0xc0 [ 382.480603][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 382.480621][ C0] ? __lock_acquire+0x4a5/0x2630 [ 382.480633][ C0] ? lock_acquire+0x1cf/0x380 [ 382.480648][ C0] ? lock_acquire+0x1cf/0x380 [ 382.480660][ C0] ? find_held_lock+0x2b/0x80 [ 382.480675][ C0] ? __ip_finish_output.part.0+0x444/0x6f0 [ 382.480688][ C0] ? rcu_is_watching+0x12/0xc0 [ 382.480705][ C0] ip_finish_output2+0xf4a/0x24d0 [ 382.480719][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 382.480732][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 382.480751][ C0] ? nf_nat_ipv4_out+0xb2/0x510 [ 382.480766][ C0] ? find_held_lock+0x2b/0x80 [ 382.480784][ C0] __ip_finish_output.part.0+0x444/0x6f0 [ 382.480798][ C0] ip_output+0x39b/0xc10 [ 382.480810][ C0] ? __pfx_ip_output+0x10/0x10 [ 382.480821][ C0] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 382.480841][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 382.480855][ C0] ? __pfx_ip_output+0x10/0x10 [ 382.480867][ C0] ip_local_out+0x193/0x1f0 [ 382.480880][ C0] synproxy_send_tcp.isra.0+0x481/0x680 [ 382.480895][ C0] synproxy_send_client_synack+0x6ea/0x970 [ 382.480915][ C0] ? find_held_lock+0x2b/0x80 [ 382.480935][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 382.480948][ C0] ? net_generic+0xea/0x2a0 [ 382.480964][ C0] nft_synproxy_do_eval+0xa73/0xd50 [ 382.480979][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 382.480994][ C0] ? do_raw_spin_lock+0x128/0x260 [ 382.481012][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 382.481028][ C0] nft_do_chain+0x2e8/0x1930 [ 382.481044][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 382.481057][ C0] ? ipt_do_table+0xd4f/0x1b00 [ 382.481070][ C0] ? rcu_is_watching+0x12/0xc0 [ 382.481085][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 382.481104][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 382.481119][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 382.481138][ C0] nft_do_chain_inet+0xee/0x340 [ 382.481151][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 382.481165][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 382.481180][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 382.481199][ C0] nf_hook_slow+0xbf/0x220 [ 382.481217][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 382.481234][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 382.481252][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 382.481268][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 382.481285][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 382.481304][ C0] ? ip_rcv_finish_core+0x80a/0x2220 [ 382.481321][ C0] ip_local_deliver+0x163/0x1f0 [ 382.481338][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 382.481354][ C0] ip_rcv+0x33a/0x3c0 [ 382.481371][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 382.481385][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 382.481401][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 382.481418][ C0] ? lock_acquire+0x1cf/0x380 [ 382.481431][ C0] ? process_backlog+0x32a/0x1580 [ 382.481447][ C0] ? process_backlog+0x32a/0x1580 [ 382.481462][ C0] __netif_receive_skb+0x1f/0x120 [ 382.481477][ C0] process_backlog+0x37a/0x1580 [ 382.481495][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 382.481512][ C0] net_rx_action+0xa40/0xf20 [ 382.481531][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 382.481548][ C0] ? sched_balance_domains+0x26c/0xd20 [ 382.481572][ C0] ? rcu_is_watching+0x12/0xc0 [ 382.481588][ C0] handle_softirqs+0x1eb/0x9e0 [ 382.481605][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 382.481623][ C0] __irq_exit_rcu+0xef/0x150 [ 382.481638][ C0] irq_exit_rcu+0x9/0x30 [ 382.481653][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 382.481673][ C0] [ 382.481677][ C0] [ 382.481682][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.481697][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 382.481716][ C0] Code: 88 81 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 31 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 382.481728][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 382.481738][ C0] RAX: 0000000000c28da3 RBX: ffffffff8e4975c0 RCX: ffffffff8b915c75 [ 382.481746][ C0] RDX: 0000000000000000 RSI: ffffffff8de7b1e3 RDI: ffffffff8c1b1ea0 [ 382.481754][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708679d [ 382.481762][ C0] R10: ffff8880b8433ceb R11: 0000000000000000 R12: 0000000000000000 [ 382.481770][ C0] R13: fffffbfff1c92eb8 R14: 0000000000000000 R15: ffffffff90d9da10 [ 382.481781][ C0] ? ct_kernel_exit+0x125/0x180 [ 382.481795][ C0] default_idle+0x9/0x10 [ 382.481808][ C0] default_idle_call+0x6c/0xb0 [ 382.481822][ C0] do_idle+0x464/0x590 [ 382.481839][ C0] ? __pfx_do_idle+0x10/0x10 [ 382.481857][ C0] cpu_startup_entry+0x4f/0x60 [ 382.481873][ C0] rest_init+0x251/0x260 [ 382.481887][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 382.481906][ C0] start_kernel+0x47f/0x480 [ 382.481925][ C0] x86_64_start_reservations+0x24/0x30 [ 382.481943][ C0] x86_64_start_kernel+0x12b/0x130 [ 382.481962][ C0] common_startup_64+0x13e/0x148 [ 382.481982][ C0]