last executing test programs: 1m23.429871319s ago: executing program 4 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_unix(0x0, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x2000051, &(0x7f00000002c0)={'trans=unix,', {[{@directio}, {@cachetag={'cachetag', 0x3d, ':\xe4.{@)$]$'}}]}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r1, 0x4004550c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000070a01030100000000000000020000000900010073797a30000000000900020073797a3000000000"], 0x2c}}, 0x0) recvfrom(r0, &(0x7f0000000500), 0x1000, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000000c0)=0x1, 0x4) 1m21.487478469s ago: executing program 4 (id=224): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x3000000, [{0xb}, {0x401, 0x1}]}, 0x14, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000700)=""/4102, &(0x7f0000001740)=0x1006) syz_init_net_socket$llc(0x1a, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf4) openat$ptmx(0xffffff9c, &(0x7f0000001780), 0x258100, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r3 = socket$inet6(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000017c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001800)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001840), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000001880), 0x2, 0x141102) writev(r4, &(0x7f00000018c0)=[{&(0x7f0000001900)="94", 0xf000}, {0x0}], 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000001940)=[{{&(0x7f0000001980)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendto$inet6(r3, &(0x7f00000019c0)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYBLOB="010000000000000000000100000038000180060001000a0000000700060073680000080005000100000008000800030000000c0007000000000000000000"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x70, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001e80)={r8, &(0x7f0000000700), &(0x7f0000001dc0)=""/141}, 0x20) 1m17.128946749s ago: executing program 4 (id=232): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8a, 0xc, 0x8000000000000001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000340)={'aio_iiro_16\x00', [0x100, 0x1, 0x102, 0x2, 0x0, 0x5, 0x10001, 0xfffffff8, 0x80008, 0x0, 0x7, 0xfffffffd, 0x7, 0x2, 0x0, 0xaee, 0xfffffffc, 0x10007, 0xfffffffc, 0x80000003, 0x489, 0x7, 0x3ff, 0x20001e5b, 0x80014, 0xf39e, 0x43, 0x8, 0x6, 0xffffffff, 0x5]}) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf25050000000e0030ba52b00a3279ee1c4501006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x20048000) syz_open_dev$hiddev(&(0x7f0000000040), 0x102, 0x735a40) 1m16.945887631s ago: executing program 4 (id=235): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000880)="d8000000180081044e81f782db4cb9041c1d0800fe007c05e8fe55b204000100ff02142603600e12080005007a010401a8001600203f034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f01ea23b77edf704bc2ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350d3798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 1m16.8145475s ago: executing program 4 (id=238): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c77fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x41}], 0x1, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8880) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r5, &(0x7f0000000600)='3', 0x4e) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x1200, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0xffff, 0x2002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m16.485523315s ago: executing program 4 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000260007012cbd7000fedbdf251f", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x48010) 1m1.090531812s ago: executing program 32 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000260007012cbd7000fedbdf251f", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x48010) 22.019091192s ago: executing program 2 (id=357): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000740), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000780)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f00000007c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x100, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x22, 0xfffffffe}}, 0xe8) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000900)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd81) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000a40)='.\x00', 0xfffffe41) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00'}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000c00)}, 0x800) 15.466658133s ago: executing program 0 (id=362): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000500edff0000000039f8000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000080140005"], 0x38}}, 0x0) 14.391793306s ago: executing program 3 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="180000000b1411012cbd7000fddbdf2508000100000000002955e1abd5926f05e70a45001cfb0dc44463"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='cgroup\x00') lseek(r3, 0xffffff60, 0x1) ioprio_get$pid(0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000196000/0x3000)=nil, &(0x7f000014d000/0x1000)=nil, &(0x7f00001a3000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00005ba000/0x1000)=nil, &(0x7f0000115000/0x3000)=nil, &(0x7f00003a5000/0x3000)=nil, &(0x7f0000102000/0x2000)=nil, 0x0, 0xfffffffffffffee2, r2}, 0xfffffffffffffea5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7c, &(0x7f0000000ac0)={0x0, 0xc89f, 0xc000, 0x4, 0x20002f7, 0x0, r3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r5 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000940), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000009c0)=@assoc_value, &(0x7f0000000a00)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000a40)='.\x00', 0xfffffffb) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffe0, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) syz_emit_ethernet(0x43c, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) preadv(r8, &(0x7f0000000a80)=[{&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f00000005c0)=""/20, 0x14}], 0x2, 0x80, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000406030000000000000000000100000305000100070000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf256900000008000300", @ANYRES32=r9, @ANYBLOB="b88786cb1638c9a30913c2a17dc0b8eeb5ec2a281150cdce92c3cc504944df490ad9a8fbd734250abde89b332832ee2d7af605d96b0a8bb43b015097cf8fc784f8cf0dea97ef136fa55d6d69ede194035579bb31fe44dc06956eb7d900000000f313be15dd5e932350b258fab4775b1f49cc2d0581520b6fb31370bfaef2863224d697faa016f53a190a1080eb4eefb1943e41ab0e9fb9416f29fa8a01035b7d87a2ef10c4d786f83134dc34b97280c7d5ebdc64af6faae018ccc203f0663edf5e346fd2597ff677a4d0675920aef47c69f8123a6d9d52031a1d70cdb1ce22ac7d"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 12.959743815s ago: executing program 2 (id=366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x2, 0x2, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x8d}, @exit], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r3, 0x5, 0x0, 0xff000000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffff9}]}, 0x2c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r5, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf", 0x60}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/93, 0x50}, {&(0x7f00000008c0)=""/96, 0x60}], 0x2}, 0x40000042) 12.799062332s ago: executing program 5 (id=303): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd46) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0xefd, &(0x7f0000000300)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x4004, @fd_index=0xa, 0xf, &(0x7f0000001840)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f00000019c0)=""/215, 0xffffffffffffff08}, {&(0x7f00000006c0)=""/189, 0xbd}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/146, 0x92}], 0x5, 0x4, 0x0, {0x0, 0x0, 0x4, '\x00', &(0x7f00000001c0)={0x0, 0x5, 0xd8, &(0x7f00000005c0)="6dd84112b08eece2fb9c78ae0d421869ad43956b390b331d7fb8197fc623cfd2a0fa6cd0e368e0fbe533428819e12b0ed70bc2a9ee3ec5a6703dbe10186a2ab24f1a360f13ecbf70ad51ad41f1817773280bea5b72ce623989ac6a8da4abc42c11312afb01e1f69e4258fb3f8808f58c2a6b4b5ef0f2f4a1ce77ae098e04beae52b0b2f5f2ef459322c1973d3eca5009b4c6f6c747aa952a776dea7d3ce3ed8c97a7bea950fc3353240b7df801d41ea72c44683572f62b5fc593d10f50773a827e784c506a46156a306755ca33b56bddae1a1288620409e7", 0xc}, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2002, 0x10a) write(r2, &(0x7f0000000400)="6d8ae25e13eb05e71279645925dffd43bba809003dbc91d62eb8ce6c4503ba5df2f36506db931aeb2b21340047f73477e921446b1c33090000000000000000d800000000000000003d1bda7b006de24b8fefbb15c4ed596c", 0x58) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x80, 0xa5) write(r7, &(0x7f00000000c0)='mydomain / 64', 0xd) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x10}) r9 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$proc_mixer(r9, &(0x7f0000001ac0)=ANY=[@ANYRES64=r6, @ANYRES8, @ANYRESHEX, @ANYRESHEX=r5, @ANYRES64, @ANYRES8=r9, @ANYRES64, @ANYBLOB="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", @ANYRES64=r3], 0xaf) socket$inet(0x2, 0x2, 0x0) 11.851598638s ago: executing program 3 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getrlimit(0x4, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0xc3ffffff}}], 0x7, 0x0, 0x0) 11.663078047s ago: executing program 0 (id=369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x302]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x40b) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000840)='d', 0x1) stat(&(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r2, 0x4633b85c1e135f61, r3, &(0x7f0000000940)={0x800, 0x1000, 0x7a, 0x81, 0xc01, 0x9, 0x6, 0x7, 0x6}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x78, 0x0, 0x0, 0xc, 0x8, 0x6, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x0, 0x101, 0x83, 0x80000000, 0x3, 0x0, 0x16, 0x4, 0x4, 0xffffffff, 0x4, 0x4, 0x8, 0xc, 0x10000006, 0x664, 0xfffffff8, 0x1]}) epoll_create1(0x0) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r5, 0x4147, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='wwnn=0x2+00000010000001', 0x17) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 11.660166182s ago: executing program 2 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0xf) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x97}, "b738082664932dfa4713cd009a249078df29bce8a4867398f2793b1b881fd4d01f480e9f4a834c97a6981d61992815eabc640ed12c6de05cc203f9bfabd3ff9f24a82fceed901f8b914ab44ab072f732bfa928bd2b259f0354aa4575a7f737df74b41902adce2bf37aac5f13c70ffad50b9eb02b5397a5f60d9ea74961d4e5815f4c66cb9d4713125a641261aed4e63e4f4f37c8a48fa0"}, 0x9b) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c8007d7731e4b4735c39a7d3dd8bd67f27582d6e82a6723e37fab151ed47d67b8acb3894592b63eb7f715137b60005d26fb9e54b67cd3486776de0408600db9727f48e6ee7722c504a4baaf4c51614d0807fce3b5decbc95ae18604d264663eb87d44787c772ede0f459cfbd8edd789f80a38a0e7d57349f9e4de3defa126f4f"], 0x81) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00221f00000005010904a101051009300931150025ff7508950281021901290795079102c0"], 0x0}, 0x0) 10.782219754s ago: executing program 1 (id=371): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000000280)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000019280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x200000, 0xb418842, 0x6, 0x0, 0xffffffff, 0x2}}, 0x50) setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019380)='mountstats\x00') pread64(r3, &(0x7f00000193c0)=""/102400, 0x19000, 0xff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000323c0), 0x41, 0x0) syz_open_pts(r4, 0x80) r5 = dup3(r0, r4, 0x80000) read$watch_queue(r5, &(0x7f0000032400)=""/4095, 0xfff) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000033400)='./proc\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000033440)={0x0, 0x0, &(0x7f0000033480)={&(0x7f00000334c0)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf250400000008000400"], 0x20}, 0x1, 0x0, 0x0, 0x48854}, 0x24000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e000000130005000000000000003e0003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) 10.765854971s ago: executing program 3 (id=372): syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r0 = syz_open_dev$dri(&(0x7f000001ba80), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x1c8983, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000840), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000880), 0x2, 0x141102) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000900)="94", 0xf000}, {0x0}], 0x1000000000000364) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0xd, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./dev\x00', &(0x7f0000000b40)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./dev\x00', &(0x7f0000000c40)='ext4\x00', 0x21010, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x40046607, &(0x7f0000000c80)={@id, 0x10, 0x0, '\x00', @d}) mount(0x0, &(0x7f0000000d00)='./dev\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000d80)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r3, 0xc138fd09, &(0x7f0000000dc0)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x20, 0x2, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004885}, 0x20000800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f000001bac0)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 10.529937543s ago: executing program 5 (id=373): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000840), 0x2, 0x141102) writev(r0, &(0x7f0000000880)=[{&(0x7f00000008c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0900000004000000fe00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000128a3ecbd57074766a2210306c4733d3c73f854acded69b5102c3a822e6a1b779f", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bfa200000000000007020000f8ffffffbfa3000000000000185a0000030000000000000000000000b704000001000000850000000d0000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000090601000000000000000000020000000900020073797a30000000000500010007000000040007808b53b401f7972010068158a065a9d7d37c0a1d280ee170627714add8765eeda3ce06bdad89e0dcc80add3660fd0b59e4690f52956a64f19cc1fb86317ebb6647e68c19e426a51baaaff46f93bd"], 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000d40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x8c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x65}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001280)={0xffffffffffffffff, 0x58, &(0x7f00000012c0)}, 0x10) clock_gettime(0x600, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec\x00', 0x13e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x60}}, 0x4840) openat(0xffffffffffffff9c, &(0x7f0000001400)='./sec/tomoyo/query\x00', 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x4000000, 0x0, 0x14f7325d9d03b00}, 0x4000) 7.096740472s ago: executing program 0 (id=374): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./cgroup\x00', 0xe000012b) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x100}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) 7.096297829s ago: executing program 1 (id=375): openat(0xffffffffffffffff, &(0x7f0000000a40)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000b40), 0x2, 0x143102) writev(r0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000c00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000c40)={0x0, 0xf5, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0xf5, 0x0, 0x20008000}, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0xd, &(0x7f0000000e00)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x100) mkdir(&(0x7f0000000ec0)='./bus\x00', 0x0) chdir(&(0x7f0000000fc0)='./bus\x00') preadv(0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x6, 0x0) open(&(0x7f0000001040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r3 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000540)={{0xc, 0x0, 0xffffffff, 0xfffffffe, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x4, 0x200, 0x9, 0x100000002, 0x0, 0xacd9, 0x7, 0x1, 0xa5, 0x7f, 0x1, 0x80000000, 0x4, 0xfff, 0xc, 0x2000000000, 0x0, 0x1, 0x0, 0xc, 0x0, 0x3, 0xfffffffd, 0xee8000000000000, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x20, 0x0, 0x200000000003, 0x800000000000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x6fb9, 0xffffffffffffffff, 0x100000001, 0x0, 0x0, 0x52d4, 0x8, 0x0, 0x401, 0xb4e, 0xffffffff, 0xfffffffffffffffd, 0x4, 0x40000001, 0x0, 0x20000000000, 0xd87, 0xfffffffffffffffc, 0x44, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x1, 0x800000000002, 0x5f9cd92, 0x8000200, 0xffffffffffffffff, 0x5, 0xd, 0x0, 0x0, 0xbf, 0x6, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x4, 0xffffffffffff2328, 0x2, 0x4, 0x0, 0x0, 0x556a766c, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x6, 0xfffffffffffffffc, 0x8a, 0xf, 0x5, 0xa, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x3, 0x7ff]}) r4 = add_key$fscrypt_provisioning(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000004af42c1c"], 0xa, 0xfffffffffffffffd) keyctl$describe(0x6, r4, &(0x7f0000000480)=""/97, 0x61) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0x64, 0x4, 0x2e8, 0x100000c, 0x0, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0x0, 0x0, 'veth0_vlan\x00', 'macvlan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], 0x3}}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 7.096068469s ago: executing program 2 (id=376): r0 = gettid() r1 = epoll_create1(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket(0x1f, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000480)={0x5}, 0x10) sendmsg$nl_route(r3, 0x0, 0x2000c814) fcntl$setown(r1, 0x8, r0) writev(r2, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r6 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(0x0, 0x800, 0x3000000, 0x20010, 0xffffffffffffffff, 0x8000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r7, r5, &(0x7f0000000180)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r4, 0x6a, 0x1, 0x0, 0xc) r8 = socket(0x1d, 0x2, 0x6) fchdir(r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r9, 0x8000000000000003, {0x0, 0xf}}, 0x18) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)="0203a300004375", 0x7}], 0x1}, 0x20048040) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000080)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80, 0x40000) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x9, 0x2000000005, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3fb, 0x4, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 6.794842227s ago: executing program 3 (id=377): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x3000000, [{0xb}, {0x401, 0x1}]}, 0x14, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000700)=""/4102, &(0x7f0000001740)=0x1006) syz_init_net_socket$llc(0x1a, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf4) openat$ptmx(0xffffff9c, &(0x7f0000001780), 0x258100, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r3 = socket$inet6(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000017c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001800)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001840), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000001880), 0x2, 0x141102) writev(r4, &(0x7f00000018c0)=[{&(0x7f0000001900)="94", 0xf000}, {0x0}], 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000001940)=[{{&(0x7f0000001980)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendto$inet6(r3, &(0x7f00000019c0)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYBLOB="010000000000000000000100000038000180060001000a0000000700060073680000080005000100000008000800030000000c0007000000000000000000"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x70, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001e80)={r8, &(0x7f0000000700), &(0x7f0000001dc0)=""/141}, 0x20) 6.734847082s ago: executing program 5 (id=378): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffe0, 0xa}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x1}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) copy_file_range(r2, &(0x7f0000000300)=0x1, r3, 0x0, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x5001}) write$tun(r4, 0x0, 0x64) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000500)={0x3, &(0x7f0000000540)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="834ea5fd", 0x4}], 0x1}}], 0x1, 0x20040840) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r5) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) close_range(r8, r8, 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100040100001e000000861f000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.552001725s ago: executing program 1 (id=379): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRES64], &(0x7f0000000140)='syzkaller\x00', 0x6, 0xab, &(0x7f0000000180)=""/171, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000580)={'netdevsim0\x00', &(0x7f00000005c0)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005a9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000680)=0xffffffffffff3fd8, 0x8, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x1, 0x100, 0x10000, 0x4, 0x15, "1bd60000000000000000f800000000001600"}) write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) 6.336893407s ago: executing program 0 (id=380): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioprio_set$uid(0x3, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x12) sendfile(r1, r0, 0x0, 0x3ffff) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000340)={@private1, 0x0}, &(0x7f0000000140)=0xfffffffffffffe06) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x7, 0x0, 0xa, 0x7fff, {{0xe, 0x4, 0x1, 0x30, 0x38, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @empty, {[@timestamp={0x44, 0x18, 0x45, 0x0, 0x6, [0x2, 0x2, 0x1, 0x8001, 0xffffffff]}, @ssrr={0x89, 0x7, 0x4, [@remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r8, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000006c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000010000305000000f4a69ab056d4e2ed00cd212e243734efbc2be467bf81998cd8bbe8aa0104f2fa50a695230d99eca649d0fc51fb221afe9d1fb17ec7e9f4772e5144c9385d00"/88, @ANYRES32=0x0, @ANYBLOB="07030500e3a20200140012800c0001006d616376746170000400028008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x2, 0xfff3}, {0x1, 0xfff3}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24041091}, 0x810) r15 = socket(0x10, 0x803, 0x0) getsockname$packet(r15, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x9) sendmsg$nl_route(r15, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r16, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001180)={&(0x7f0000000100), 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="0c060000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="6c01028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000003c00010024000100757365725f6c696e6b75700000000000000000000000000000000000000000000500030006000000040004000800060081f75ca7ed1c1633a22b6e904280a20296c7be0ede2123c7024c3518edc1b09bd47a7028a164053b68d0ed4cd1fd2f027919", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004007c84000008000100", @ANYRES32=r5, @ANYBLOB="80000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400fe00000008000600", @ANYRES32=r6, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400d5000b0bb60f000008000100", @ANYRES32=0x0, @ANYBLOB="f40102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400640b000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000008000100", @ANYRES32=r14, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB], 0x60c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000240)=0x3ba, 0x5, 0x2) 5.802975976s ago: executing program 5 (id=381): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0xeed7e89f6334d838}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x20, 0x0, &(0x7f0000000600)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)=""/80}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230228bd7002ffdbdf250c000000180001801400020076657468315f746f5f62617461647600200003801c0003800c000180080001"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 4.0933643s ago: executing program 1 (id=382): socket(0xa, 0x2, 0x7f7f) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus/file0\x00', 0x143041, 0x12a) r1 = io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x4c) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0xd000000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 3.671371411s ago: executing program 3 (id=383): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', &(0x7f0000000940)={[0x0, &(0x7f00000008c0)='$\x00']}, &(0x7f0000000b80), 0x1000) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x1c8983, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x65, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0x1a7) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='coda\x00', 0x8410, 0x0) r2 = open$dir(&(0x7f00000007c0)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x40046607, &(0x7f0000000800)={@id, 0x10, 0x0, '\x00', @d}) mount(0x0, &(0x7f0000000880)='./dev\x00', 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000900)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000980)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x24, 0x2, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004885}, 0x20000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 3.597100287s ago: executing program 5 (id=384): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x4, 0xc4}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x1, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235, 0x0, r0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r3], 0xa4}}, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c000280050001000000000006000340000100000800074000000001"], 0x6c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) read$FUSE(r8, &(0x7f0000000880)={0x2020}, 0x2020) 3.588120862s ago: executing program 2 (id=385): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x1fe, &(0x7f0000001180)=0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x3}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) (async) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) creat(&(0x7f0000000380)='./bus\x00', 0x0) (async) fcntl$setstatus(r0, 0x4, 0x4000) (async) io_setup(0x1fe, &(0x7f0000001180)) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x3}) (async) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) (async) 1.620895921s ago: executing program 3 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000028c0)={0xfc, {"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", 0x1000}}, 0x1006) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000003900)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003940), r2) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x4000010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000039c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003a80)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000400)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/tty/ttyS1/console\x00', 0x80040, 0x111) r9 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x1, 0x2) syz_emit_vhci(&(0x7f0000003ac0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000003b00)=ANY=[@ANYBLOB="040e079c0814"], 0xa) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, &(0x7f0000002480)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000002700)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, &(0x7f0000002880)=""/54) 482.89356ms ago: executing program 0 (id=387): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000500)='ms_mode\x00', &(0x7f0000000540)='prefer-crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r0, 0x0, 0x0, 0x80000) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x2, 0x1, 0xc0}, 0x30, 0x0) landlock_restrict_self(r1, 0xa) 395.163767ms ago: executing program 0 (id=388): add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000180)="f5", 0x1, 0xfffffffffffffffe) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100), 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=""/62, 0x28000, 0x800, 0x9, 0x2}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = syz_clone(0x2000000, &(0x7f00000005c0)="11b69573c582cdd768e5e513d2fc7668cda06fdccda5d190595b4e37683071336b1ea7caaae730ab92e2c876bde4e6ef80cf65a55815dff32e3d022425c00196d44451393fe78dacc2e0a233271f780e927a30a99e699edbcf0e81b5b91db1ae0a0d4b3ab6d139bc5a04e22b341444eccf6cc8d788728c4d85d32f3d6bb1f9bb20d711acb7058163e79e4dd1c3fa9db1ff438ac5be125a6ac26bf00dc9bd0fa115cef16397ab2cfc11ac81a9e6cf7dc03e8a489751c1caa9", 0xb8, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="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") syz_open_procfs(r5, &(0x7f0000000800)='coredump_filter\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000480)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000060309ff5bffff00c7", 0x48}], 0x1) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="28004b80110001004abee33908f8eef16f162471f400000005004ff202000000080003000dac0f00"], 0x44}}, 0x0) 339.973705ms ago: executing program 1 (id=389): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0xb, 0x4, 0x8}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x15, 0x0, @dev, 0x1f000000}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 308.120953ms ago: executing program 2 (id=390): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$inet6(0xa, 0x1, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x9, 0x6, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81def, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000003c0)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) socket(0x1d, 0x2, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="d3f34746b238aaaaaaaaaaaa0800fd0e29d42204b46756df4d9046b147344e79ccb443c3eac16f84f5e84500001c000011000011907800a5e02589674b77a1cbc6f229716ec80488eb08b943c0f09d15000000034559a663a470c282a27dcb1ee448357980be63e6d198a5730f963737e9a40cf679b3d942fb531b03f2152e988fe20383324035fbc565cbb682af6b739264ebcf02a7573fbf5c19"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000700)={0x1d, r6, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) r7 = landlock_create_ruleset(&(0x7f00000007c0)={0x37a6, 0xe}, 0x30, 0x6) landlock_restrict_self(r7, 0xe) syz_io_uring_setup(0xf03, &(0x7f0000000800)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d40)=@deltclass={0x48, 0x29, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x89c28489631adb3a}, {0x6, 0x7}, {0x1, 0xe}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x4, 0xc}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f0000000000)='jffs2\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000e80)='\\x01020304 2000000000 0 0 0 krb5 \\x00', 0x25) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="03000000690000000200000000002000"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x14, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @alu={0x4, 0x1, 0x0, 0xb, 0x5, 0x100}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x0, 0x6, 0x9, 0x2, 0x80, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000010c0)='GPL\x00', 0x403f, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001100)={0x4, 0xb, 0xd9e, 0x80}, 0x10, 0x20250, r8, 0x4, &(0x7f0000000040)=[r8, r8, r8, 0xffffffffffffffff, r8, r9, r9], &(0x7f0000001180)=[{0x2, 0x2, 0xb, 0xb}, {0x5, 0x5, 0x6, 0x8}, {0x3, 0x3, 0xa, 0xb}, {0x5, 0x5, 0x8, 0xa}], 0x10, 0x6}, 0x94) 301.951423ms ago: executing program 5 (id=391): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x4, "1691202e372a652388e0ed349ab4f1584ea8a77005fa680b30d33f5f5e4f33af", 0x1, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6000, 0x1) fsopen(&(0x7f0000000340)='erofs\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r2}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000640)="ea7e96dac5c841eeb087b99635c283b8f685950a5968f0c831dafa134f6da9d197b5a79a49ab61c06867c849b174e529564c6acee4f3053ac4d5a0f6dfd770a507d28b2768c0ec29d5f668d59c165cb540c238dbb4108fab82c3c9120eb950901fee52c77c576dd6b4063d0a6f078149794ca3bce9e1746b75c62a7f03bca506f3c354f667f444bb1d92fbffcee225f0f46817687d199a68b71c5db391c881", 0x9f, 0x1) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f00000008c0)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x0, &(0x7f0000000940)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r8, &(0x7f0000000100), 0x2000011a) r9 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4001800}, 0xc0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000380)={0x0, 0x300, &(0x7f00000003c0)={&(0x7f0000000400)={0x64, r5, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x64}}, 0x0) 0s ago: executing program 1 (id=392): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x8, 0x40001, 0x18, 0x0, 0xf0ffff, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) kernel console output (not intermixed with test programs): 85] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.315734][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.315754][ T5785] usb 1-1: Product: syz [ 117.315766][ T5785] usb 1-1: Manufacturer: syz [ 117.315779][ T5785] usb 1-1: SerialNumber: syz [ 117.318734][ T5785] usb 1-1: config 0 descriptor?? [ 117.319832][ T6218] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 117.400175][ T1220] usb 5-1: USB disconnect, device number 7 [ 117.418968][ T5785] pegasus_notetaker 1-1:0.0: packet size is too small (0) [ 117.419089][ T5785] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 117.508311][ T2324] em28xx 2-1:0.74: unknown em28xx chip ID (0) [ 117.587025][ T2324] em28xx 2-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 117.587068][ T2324] em28xx 2-1:0.74: board has no eeprom [ 117.612015][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 117.612168][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 117.635760][ T2324] em28xx 2-1:0.74: writing to i2c device at 0xb8 failed (error=-5) [ 117.635785][ T2324] em28xx 2-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 117.636149][ T2324] em28xx 2-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 117.636166][ T2324] em28xx 2-1:0.74: couldn't read from i2c device 0xba: error -5 [ 117.636875][ T2324] em28xx 2-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 117.636894][ T2324] em28xx 2-1:0.74: couldn't read from i2c device 0x90: error -5 [ 117.637316][ T2324] em28xx 2-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 117.637334][ T2324] em28xx 2-1:0.74: couldn't read from i2c device 0x42: error -5 [ 117.637962][ T2324] em28xx 2-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 117.637981][ T2324] em28xx 2-1:0.74: couldn't read from i2c device 0x60: error -5 [ 117.637996][ T2324] em28xx 2-1:0.74: No sensor detected [ 117.665012][ T30] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 117.665799][ T30] ath9k_htc: Failed to initialize the device [ 117.668692][ T5738] usb 4-1: ath9k_htc: USB layer deinitialized [ 117.710708][ T2324] em28xx 2-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 117.710730][ T2324] em28xx 2-1:0.74: Currently, V4L2 is not supported on this model [ 117.753027][ T1220] libceph: connect (1)[c::]:6789 error -101 [ 117.753248][ T1220] libceph: mon0 (1)[c::]:6789 connect error [ 117.797615][ T2324] usb 2-1: USB disconnect, device number 9 [ 117.801463][ T2324] em28xx 2-1:0.74: Disconnecting em28xx [ 117.816438][ T9] em28xx 2-1:0.74: Registering snapshot button... [ 117.832202][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.74/input/input10 [ 117.853520][ T9] em28xx 2-1:0.74: Remote control support is not available for this card. [ 117.855457][ T2324] em28xx 2-1:0.74: Closing input extension [ 117.855725][ T2324] em28xx 2-1:0.74: Deregistering snapshot button [ 118.062394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 118.092076][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 118.092091][ T31] audit: type=1400 audit(1791671380.927:346): avc: denied { create } for pid=6223 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.121662][ T31] audit: type=1400 audit(1791671380.957:347): avc: denied { setopt } for pid=6223 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.720719][ T9] libceph: connect (1)[c::]:6789 error -101 [ 118.735275][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 118.930379][ T2324] em28xx: Freeing device [ 119.002977][ T6231] process 'syz.1.113' launched '/dev/fd/3' with NULL argv: empty string added [ 119.003477][ T31] audit: type=1400 audit(1791671381.847:348): avc: denied { execute_no_trans } for pid=6229 comm="syz.1.113" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.063250][ T31] audit: type=1400 audit(1791671381.907:349): avc: denied { write } for pid=6227 comm="syz.4.112" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 119.063293][ T31] audit: type=1400 audit(1791671381.907:350): avc: denied { open } for pid=6227 comm="syz.4.112" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 119.070830][ T31] audit: type=1400 audit(1791671381.907:351): avc: denied { ioctl } for pid=6227 comm="syz.4.112" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 119.414325][ T1220] libceph: connect (1)[c::]:6789 error -101 [ 119.416129][ T1220] libceph: mon0 (1)[c::]:6789 connect error [ 119.684450][ T6213] ceph: No mds server is up or the cluster is laggy [ 119.688439][ T6210] ceph: No mds server is up or the cluster is laggy [ 119.712334][ T31] audit: type=1400 audit(1791671382.547:352): avc: denied { mount } for pid=6240 comm="syz.4.116" name="/" dev="ramfs" ino=10829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 119.924910][ T6241] comedi comedi1: dt2811-pgh: a I/O base address must be specified [ 120.292797][ T5738] usb 1-1: USB disconnect, device number 7 [ 120.468507][ T31] audit: type=1400 audit(1791671383.307:353): avc: denied { write } for pid=6244 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.471874][ T31] audit: type=1400 audit(1791671383.307:354): avc: denied { read append } for pid=6244 comm="syz.3.117" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.472199][ T31] audit: type=1400 audit(1791671383.307:355): avc: denied { open } for pid=6244 comm="syz.3.117" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.570824][ T6245] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.570904][ T6245] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.628569][ T6245] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.648559][ T6245] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.648914][ T6250] sctp: [Deprecated]: syz.1.119 (pid 6250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.648914][ T6250] Use struct sctp_sack_info instead [ 120.649536][ T6245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.687192][ T1220] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.701536][ T6245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.724686][ T6245] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.726061][ T6245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.728450][ T6245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.733943][ T6245] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.733987][ T6245] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.764580][ T6245] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.775391][ T6245] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.777029][ T6245] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 120.796077][ T6245] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 120.853072][ T1220] usb 5-1: Using ep0 maxpacket: 8 [ 120.854805][ T1220] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 120.883049][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 120.883085][ T1220] usb 5-1: Product: syz [ 120.883113][ T1220] usb 5-1: Manufacturer: syz [ 120.883128][ T1220] usb 5-1: SerialNumber: syz [ 120.918112][ T1220] usb 5-1: config 0 descriptor?? [ 120.935391][ T1220] gspca_main: sq905-2.14.0 probing 2770:9120 [ 121.055164][ T30] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 121.102386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 122.231990][ T1220] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 122.232063][ T1220] sq905 5-1:0.0: probe with driver sq905 failed with error -110 [ 122.245176][ T30] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 122.290354][ T30] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 122.290381][ T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.290391][ T30] usb 1-1: config 0 has no interface number 0 [ 122.290443][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.333310][ T30] usb 1-1: config 0 descriptor?? [ 122.366178][ T30] ldusb 1-1:0.55: Interrupt in endpoint not found [ 122.415442][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c0f400: rx timeout, send abort [ 122.418539][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057c0f400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.612541][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.673790][ T5785] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 122.692566][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.961136][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.961199][ T5608] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.962072][ T52] Bluetooth: hci2: command 0x2016 tx timeout [ 122.973624][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c0c400: rx timeout, send abort [ 122.973945][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c0cc00: rx timeout, send abort [ 122.974142][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057c0c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.974297][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057c0cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.993046][ T6268] jffs2: notice: (6268) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.470593][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 123.470662][ T31] audit: type=1400 audit(1791671385.557:374): avc: denied { listen } for pid=6264 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 123.470859][ T31] audit: type=1400 audit(1791671386.297:375): avc: denied { search } for pid=4953 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.507239][ T5785] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 123.706244][ T5785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.706283][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.706305][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.706333][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.713048][ T25] usb 1-1: USB disconnect, device number 8 [ 124.000376][ T5785] usb 4-1: config 0 descriptor?? [ 124.072160][ T2324] usb 5-1: USB disconnect, device number 8 [ 124.154026][ T31] audit: type=1400 audit(1791671386.997:376): avc: denied { setopt } for pid=6275 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.155639][ T31] audit: type=1400 audit(1791671386.997:377): avc: denied { getopt } for pid=6275 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.230637][ T5785] usbhid 4-1:0.0: can't add hid device: -71 [ 124.230711][ T5785] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 124.270760][ T5785] usb 4-1: USB disconnect, device number 11 [ 124.356206][ T31] audit: type=1400 audit(1791671387.197:378): avc: denied { nlmsg_read } for pid=6281 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.706226][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.755349][ T5785] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.787003][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.883429][ T5785] usb 3-1: device descriptor read/64, error -71 [ 125.017429][ T31] audit: type=1400 audit(1791671387.817:379): avc: denied { write } for pid=6283 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.048812][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.048849][ T5613] Bluetooth: hci2: command 0x2016 tx timeout [ 125.048873][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.104031][ T6286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6286 comm=syz.1.126 [ 125.104090][ T6286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6286 comm=syz.1.126 [ 125.104167][ T6286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6286 comm=syz.1.126 [ 125.104218][ T6286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6286 comm=syz.1.126 [ 125.141904][ T5785] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.208271][ T31] audit: type=1400 audit(1791671388.047:380): avc: denied { getopt } for pid=6278 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.254930][ T31] audit: type=1400 audit(1791671388.087:381): avc: denied { ioctl } for pid=6278 comm="syz.1.126" path="socket:[10207]" dev="sockfs" ino=10207 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.257514][ T6288] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 125.257537][ T6288] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 125.326738][ T5785] usb 3-1: device descriptor read/64, error -71 [ 125.390028][ T6286] netlink: 64 bytes leftover after parsing attributes in process `syz.1.126'. [ 125.838191][ T5785] usb usb3-port1: attempt power cycle [ 126.772422][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.853593][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.015492][ T5785] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 127.092522][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.092553][ T52] Bluetooth: hci2: command 0x2016 tx timeout [ 127.092572][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.152446][ T5785] usb 3-1: device descriptor read/8, error -71 [ 127.263350][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.560204][ T5785] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.993065][ T5785] usb 3-1: device descriptor read/8, error -71 [ 129.492214][ T5785] usb usb3-port1: unable to enumerate USB device [ 130.173881][ T6308] capability: warning: `syz.3.133' uses deprecated v2 capabilities in a way that may be insecure [ 130.854105][ T31] audit: type=1400 audit(1791671393.287:382): avc: denied { write } for pid=6305 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 132.072883][ T31] audit: type=1400 audit(1791671394.917:383): avc: denied { mounton } for pid=6303 comm="syz.4.132" path="/23/file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.138116][ T31] audit: type=1400 audit(1791671394.977:384): avc: denied { create } for pid=6303 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.197656][ T31] audit: type=1400 audit(1791671395.037:385): avc: denied { ioctl } for pid=6303 comm="syz.4.132" path="socket:[11358]" dev="sockfs" ino=11358 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.362784][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.515091][ T9] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 132.516260][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 132.516288][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.516314][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.522671][ T9] usb 4-1: config 0 descriptor?? [ 132.562955][ T6317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.653310][ T2324] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 132.673512][ T31] audit: type=1400 audit(1791671395.517:386): avc: denied { write } for pid=6322 comm="syz.4.137" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 132.804381][ T2324] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 132.806202][ T2324] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 132.806225][ T2324] usb 2-1: config 0 has no interface number 0 [ 132.806258][ T2324] usb 2-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid maxpacket 50398, setting to 64 [ 132.806883][ T6324] 9p: Bad value for 'wfdno' [ 132.814338][ T2324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.814371][ T2324] usb 2-1: Product: syz [ 132.814383][ T2324] usb 2-1: Manufacturer: syz [ 132.814395][ T2324] usb 2-1: SerialNumber: syz [ 132.827095][ T2324] usb 2-1: config 0 descriptor?? [ 132.830845][ T6321] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.847227][ T2324] kobil_sct 2-1:0.148: KOBIL USB smart card terminal converter detected [ 132.872135][ T2324] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 134.945173][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 134.945255][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 134.947294][ T9] usb 4-1: USB disconnect, device number 12 [ 134.972713][ T31] audit: type=1400 audit(1791671397.817:387): avc: denied { lock } for pid=6320 comm="syz.1.136" path="socket:[10939]" dev="sockfs" ino=10939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.124247][ T6332] netlink: 'syz.4.140': attribute type 3 has an invalid length. [ 135.441979][ T6332] wg0: entered allmulticast mode [ 135.575078][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.725791][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 135.728867][ T9] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 135.733057][ T9] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 135.733090][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.733120][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.735057][ T9] usb 1-1: config 0 descriptor?? [ 135.744842][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 135.841614][ T31] audit: type=1400 audit(1791671398.677:388): avc: denied { read write } for pid=6339 comm="syz.4.142" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 135.867431][ T31] audit: type=1400 audit(1791671398.707:389): avc: denied { open } for pid=6339 comm="syz.4.142" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 135.882427][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 135.989638][ T6335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.989975][ T6335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.048141][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 136.063073][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.063096][ T9] usb 4-1: Product: syz [ 136.063109][ T9] usb 4-1: Manufacturer: syz [ 136.063121][ T9] usb 4-1: SerialNumber: syz [ 136.078591][ T9] usb 4-1: config 0 descriptor?? [ 136.100455][ T9] ch341 4-1:0.0: ch341-uart converter detected [ 136.107568][ T5603] usb 2-1: USB disconnect, device number 10 [ 136.146429][ T5603] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 136.155005][ T5603] kobil_sct 2-1:0.148: device disconnected [ 136.341865][ T9] usb 4-1: failed to receive control message: -121 [ 136.341912][ T9] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -121 [ 136.376297][ T31] audit: type=1400 audit(1791671399.217:390): avc: denied { read write } for pid=6346 comm="syz.1.144" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 136.376768][ T31] audit: type=1400 audit(1791671399.217:391): avc: denied { open } for pid=6346 comm="syz.1.144" path="/28/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 136.409664][ T31] audit: type=1400 audit(1791671399.247:392): avc: denied { ioctl } for pid=6346 comm="syz.1.144" path="/28/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 136.428680][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 136.573451][ T31] audit: type=1400 audit(1791671399.417:393): avc: denied { ioctl } for pid=6349 comm="syz.1.145" path="socket:[10978]" dev="sockfs" ino=10978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.698389][ T31] audit: type=1400 audit(1791671399.537:394): avc: denied { mount } for pid=6351 comm="syz.2.139" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 136.699407][ T31] audit: type=1400 audit(1791671399.537:395): avc: denied { write } for pid=6351 comm="syz.2.139" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 136.701197][ T31] audit: type=1400 audit(1791671399.537:396): avc: denied { open } for pid=6351 comm="syz.2.139" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 136.726754][ T31] audit: type=1400 audit(1791671399.567:397): avc: denied { ioctl } for pid=6351 comm="syz.2.139" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 136.830741][ T31] audit: type=1400 audit(1791671399.667:398): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 137.048878][ T5603] usb 1-1: USB disconnect, device number 9 [ 137.576829][ T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 139.285938][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 139.335291][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 139.335315][ T9] usb 2-1: config 0 has no interface number 0 [ 139.335346][ T9] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.335368][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65522, setting to 64 [ 139.345682][ T9] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 139.345705][ T9] usb 2-1: Product: syz [ 139.345718][ T9] usb 2-1: SerialNumber: syz [ 139.439098][ T9] usb 2-1: config 0 descriptor?? [ 139.440743][ T6354] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.443046][ T9] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 139.444421][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input11 [ 139.646442][ T5714] usb 4-1: USB disconnect, device number 13 [ 139.664299][ T5714] ch341 4-1:0.0: device disconnected [ 139.985291][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 140.100184][ T6386] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.194441][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 140.194648][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 140.194842][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 140.195033][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 140.195224][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 140.195414][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 140.195601][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 140.195813][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 140.196002][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 140.196192][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 140.204638][ T9] usb 2-1: USB disconnect, device number 11 [ 140.204746][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 140.285261][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 140.503900][ T6397] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 142.096748][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 142.096780][ T31] audit: type=1400 audit(1791671403.977:404): avc: denied { create } for pid=6400 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.648279][ T6410] : renamed from vlan0 (while UP) [ 142.693792][ T31] audit: type=1400 audit(1791671405.527:405): avc: denied { execute } for pid=6409 comm="syz.4.160" path="/proc/113/task/114/net/vlan/vlan0" dev="proc" ino=4026533790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 143.215456][ T31] audit: type=1400 audit(1791671406.057:406): avc: denied { read } for pid=6415 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.215813][ T31] audit: type=1400 audit(1791671406.057:407): avc: denied { read open } for pid=6415 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.216530][ T31] audit: type=1400 audit(1791671406.057:408): avc: denied { getattr } for pid=6415 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.236559][ T31] audit: type=1400 audit(1791671406.077:409): avc: denied { getattr } for pid=6415 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.601034][ T31] audit: type=1400 audit(1791671406.407:410): avc: denied { bind } for pid=6413 comm="syz.0.161" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.601107][ T31] audit: type=1400 audit(1791671406.417:411): avc: denied { name_bind } for pid=6413 comm="syz.0.161" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 143.601171][ T31] audit: type=1400 audit(1791671406.427:412): avc: denied { node_bind } for pid=6413 comm="syz.0.161" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 143.952679][ T31] audit: type=1400 audit(1791671406.787:413): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.113956][ T5603] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 144.267714][ T5603] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 144.267751][ T5603] usb 3-1: too many configurations: 15, using maximum allowed: 8 [ 144.269413][ T5603] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.270949][ T5603] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.272585][ T5603] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.281974][ T5603] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.343073][ T5603] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.344466][ T5603] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.344886][ T5603] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.345306][ T5603] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.350958][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.350979][ T5603] usb 3-1: Product: syz [ 144.350992][ T5603] usb 3-1: Manufacturer: syz [ 144.351005][ T5603] usb 3-1: SerialNumber: syz [ 144.613079][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 144.613304][ T6430] netlink: 312 bytes leftover after parsing attributes in process `syz.1.164'. [ 144.613335][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 144.981665][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.166'. [ 144.995109][ T30] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 145.134004][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 145.165637][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 145.166310][ T30] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 145.167526][ T30] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping [ 145.167539][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.167559][ T30] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 145.167595][ T30] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 145.174741][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.174774][ T30] usb 1-1: Product: syz [ 145.174800][ T30] usb 1-1: Manufacturer: syz [ 145.174812][ T30] usb 1-1: SerialNumber: syz [ 145.250273][ T5714] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 145.403738][ T5714] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 145.480056][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.892663][ T5603] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 146.048335][ T5603] usb 2-1: not running at top speed; connect to a high speed hub [ 146.048395][ T5603] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 146.077695][ T5603] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.077815][ T5603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.174789][ T30] usb 1-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 146.174845][ T30] usb 1-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 146.182057][ T30] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 146.295049][ T5603] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 146.371119][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.166'. [ 146.379133][ T5714] usb 4-1: Firmware version (0.0) predates our first public release. [ 146.379168][ T5714] usb 4-1: Please update to version 0.2 or newer [ 146.436341][ T30] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 146.459099][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 146.493565][ T30] usb 1-1: USB disconnect, device number 10 [ 146.536709][ T5603] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 146.537033][ T5603] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 146.537073][ T5603] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 146.537469][ T5603] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 147.234454][ T6478] binder: 6421:6478 ioctl c0306201 0 returned -14 [ 147.423939][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.424568][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.453186][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.453795][ T5603] usb 2-1: USB disconnect, device number 12 [ 147.454347][ T5714] usb 4-1: USB disconnect, device number 14 [ 149.043261][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 149.043277][ T31] audit: type=1400 audit(1791671411.887:426): avc: denied { write } for pid=6481 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.082871][ T30] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 149.197034][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 149.197065][ T6490] netlink: 312 bytes leftover after parsing attributes in process `syz.3.175'. [ 149.197075][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 149.232919][ T5785] usb 3-1: USB disconnect, device number 11 [ 149.255328][ T30] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 149.258938][ T30] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 149.258963][ T30] usb 1-1: config 0 has no interface number 0 [ 149.258992][ T30] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.259004][ T30] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 149.259027][ T30] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 149.259041][ T30] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 149.259064][ T30] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.259093][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.261249][ T30] usb 1-1: config 0 descriptor?? [ 149.262226][ T6477] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 149.303079][ T30] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 149.892226][ T30] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 150.158588][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 150.216942][ T30] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.265972][ T30] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 150.266582][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.465261][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.465455][ T30] usb 5-1: Product: syz [ 150.465524][ T30] usb 5-1: Manufacturer: syz [ 150.465689][ T30] usb 5-1: SerialNumber: syz [ 150.643630][ T31] audit: type=1400 audit(1791671413.487:427): avc: denied { write } for pid=6493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.685824][ T30] usb 5-1: config 0 descriptor?? [ 150.710097][ T31] audit: type=1400 audit(1791671413.547:428): avc: denied { write } for pid=6509 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.763286][ T30] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.763335][ T30] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 151.207276][ T5785] usb 1-1: USB disconnect, device number 11 [ 151.269591][ T5785] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 151.452998][ T2324] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 151.605448][ T2324] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 151.607527][ T2324] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.611384][ T2324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.611439][ T2324] usb 3-1: Product: syz [ 151.611452][ T2324] usb 3-1: Manufacturer: syz [ 151.611501][ T2324] usb 3-1: SerialNumber: syz [ 151.699199][ T30] em28xx 5-1:0.0: unknown em28xx chip ID (243) [ 151.899947][ T30] em28xx 5-1:0.0: Config register raw data: 0xf3 [ 151.899984][ T30] em28xx 5-1:0.0: I2S Audio (5 sample rate(s)) [ 151.900013][ T30] em28xx 5-1:0.0: No AC97 audio processor [ 151.943258][ T2324] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.988701][ T30] usb 5-1: USB disconnect, device number 9 [ 154.625037][ T2324] usb 3-1: USB disconnect, device number 12 [ 154.933275][ T31] audit: type=1400 audit(1791671417.777:429): avc: denied { write } for pid=6511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.956517][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.132546][ T25] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 155.199624][ T31] audit: type=1400 audit(1791671418.037:430): avc: denied { write } for pid=6547 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.304028][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 155.304085][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 155.331150][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.331191][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.372446][ T2324] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 155.382995][ T25] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 155.413008][ T5785] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 155.533601][ T2324] usb 3-1: Using ep0 maxpacket: 8 [ 155.534946][ T2324] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 155.535809][ T2324] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 155.535831][ T2324] usb 3-1: config 0 has no interface number 0 [ 155.535861][ T2324] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 155.535882][ T2324] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 155.535905][ T2324] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.535926][ T2324] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.535958][ T2324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.584747][ T2324] usb 3-1: config 0 descriptor?? [ 155.608398][ T5785] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.648094][ T2324] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 155.668579][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.668607][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.668629][ T5785] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.668662][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.720438][ T5785] usb 1-1: config 0 descriptor?? [ 155.759152][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 155.777144][ T25] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 155.780265][ T25] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 155.780325][ T25] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 155.780784][ T25] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 155.864380][ T25] usb 4-1: USB disconnect, device number 15 [ 156.002102][ T31] audit: type=1400 audit(1791671418.837:431): avc: denied { bind } for pid=6556 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.030317][ T31] audit: type=1400 audit(1791671418.867:432): avc: denied { listen } for pid=6556 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.061605][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 156.061683][ T6544] A link change request failed with some changes committed already. Interface i may have been left with an inconsistent configuration, please check. [ 156.122320][ T2324] usb 3-1: USB disconnect, device number 13 [ 156.140994][ T2324] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 156.225129][ T31] audit: type=1326 audit(1791671419.057:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.0.186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62999e1d9 code=0x7ffc0000 [ 156.225205][ T31] audit: type=1326 audit(1791671419.057:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.0.186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62999e1d9 code=0x7ffc0000 [ 156.226600][ T31] audit: type=1326 audit(1791671419.067:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.0.186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa62999e1d9 code=0x7ffc0000 [ 156.226670][ T31] audit: type=1326 audit(1791671419.067:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.0.186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62999e1d9 code=0x7ffc0000 [ 156.226738][ T31] audit: type=1326 audit(1791671419.067:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.0.186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62999e1d9 code=0x7ffc0000 [ 156.227191][ T31] audit: type=1326 audit(1791671419.067:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.0.186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa62995ea0e code=0x7ffc0000 [ 156.495744][ T5785] usbhid 1-1:0.0: can't add hid device: -71 [ 156.495821][ T5785] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 156.522767][ T5785] usb 1-1: USB disconnect, device number 12 [ 157.199202][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.452858][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 157.511414][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.511610][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.511743][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.959337][ T25] usb 3-1: config 0 descriptor?? [ 158.529954][ T6593] netlink: 124 bytes leftover after parsing attributes in process `syz.1.192'. [ 158.647383][ T6596] ipvlan2: entered allmulticast mode [ 158.647404][ T6596] ip6gretap0: entered allmulticast mode [ 158.656915][ T6596] batman_adv: batadv0: Adding interface: ipvlan2 [ 158.656927][ T6596] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.656952][ T6596] batman_adv: batadv0: Interface activated: ipvlan2 [ 158.679656][ T6581] netlink: 452 bytes leftover after parsing attributes in process `syz.2.190'. [ 158.836721][ T6607] fuse: Bad value for 'rootmode' [ 159.257145][ T5613] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 159.397074][ T5785] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 159.686241][ T5785] usb 2-1: not running at top speed; connect to a high speed hub [ 159.686271][ T5785] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 159.691144][ T5785] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.691200][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.876387][ T5785] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 161.981201][ T25] ath6kl: Failed to read usb control message: -110 [ 161.981278][ T25] ath6kl: Unable to read the bmi data from the device: -110 [ 161.981302][ T25] ath6kl: Unable to recv target info: -110 [ 164.144217][ T25] ath6kl: Failed to init ath6kl core: -110 [ 164.144970][ T25] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 164.959659][ T5785] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 164.960006][ T5785] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 164.960045][ T5785] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 164.965856][ T5785] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -5 [ 165.078055][ T5785] usb 3-1: USB disconnect, device number 14 [ 165.290339][ T5603] usb 2-1: USB disconnect, device number 13 [ 165.710873][ T6664] bridge0: port 3(netdevsim0) entered blocking state [ 165.711858][ T6664] bridge0: port 3(netdevsim0) entered disabled state [ 165.718338][ T6664] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 165.797354][ T6665] netlink: 'syz.1.207': attribute type 10 has an invalid length. [ 165.820588][ T6664] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 165.847121][ T6664] bridge0: port 3(netdevsim0) entered blocking state [ 165.847319][ T6664] bridge0: port 3(netdevsim0) entered forwarding state [ 165.955582][ T6665] bridge0: port 3(netdevsim0) entered disabled state [ 165.955853][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.957615][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.069502][ T6665] bridge0: port 3(netdevsim0) entered blocking state [ 166.070242][ T6665] bridge0: port 3(netdevsim0) entered forwarding state [ 166.070634][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.070779][ T6665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.071101][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.071263][ T6665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.196673][ T6665] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 166.869861][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 166.869879][ T31] audit: type=1400 audit(1791671429.707:471): avc: denied { connect } for pid=6673 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.872841][ T31] audit: type=1400 audit(1791671429.707:472): avc: denied { setopt } for pid=6673 comm="syz.0.210" laddr=172.20.20.10 lport=30648 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.875488][ T31] audit: type=1400 audit(1791671429.717:473): avc: denied { setattr } for pid=6673 comm="syz.0.210" name="HCI" dev="sockfs" ino=12081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.928128][ T6677] Bluetooth: MGMT ver 1.23 [ 166.943113][ T31] audit: type=1400 audit(1791671429.777:474): avc: denied { accept } for pid=6673 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.262634][ T5603] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 167.517194][ T5603] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.537621][ T5603] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.537667][ T5603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.759311][ T5603] usb 2-1: config 0 descriptor?? [ 168.160816][ T5603] pwc: Askey VC010 type 2 USB webcam detected. [ 168.211925][ T5603] pwc: send_video_command error -71 [ 168.211942][ T5603] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 168.212014][ T5603] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 168.256566][ T5603] usb 2-1: USB disconnect, device number 14 [ 168.932529][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.036465][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 169.112701][ T5603] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 169.207672][ T6706] netlink: 88 bytes leftover after parsing attributes in process `syz.2.217'. [ 169.207694][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 169.230686][ T6706] netlink: 'syz.2.217': attribute type 11 has an invalid length. [ 169.263793][ T5603] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 169.264660][ T5603] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.264699][ T5603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.320755][ T5603] usb 2-1: config 0 descriptor?? [ 169.330892][ T5603] pwc: Askey VC010 type 2 USB webcam detected. [ 169.497304][ T31] audit: type=1400 audit(1791671432.337:475): avc: denied { create } for pid=6704 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.584627][ T31] audit: type=1400 audit(1791671432.387:476): avc: denied { setopt } for pid=6704 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.767874][ T31] audit: type=1400 audit(1791671432.607:477): avc: denied { mounton } for pid=6712 comm="syz.4.219" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 170.039406][ T5603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 170.326646][ T31] audit: type=1400 audit(1791671433.167:478): avc: denied { read } for pid=6712 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.606049][ T5603] pwc: recv_control_msg error -32 req 02 val 2700 [ 170.644175][ T5603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 170.691995][ T5603] pwc: recv_control_msg error -32 req 04 val 1000 [ 170.739389][ T5603] pwc: recv_control_msg error -32 req 04 val 1300 [ 170.919687][ T5603] pwc: recv_control_msg error -32 req 04 val 1400 [ 170.936332][ T5603] pwc: recv_control_msg error -32 req 02 val 2000 [ 171.002022][ T5603] pwc: recv_control_msg error -32 req 02 val 2100 [ 171.037718][ T5603] pwc: recv_control_msg error -32 req 04 val 1500 [ 171.095435][ T5603] pwc: recv_control_msg error -32 req 02 val 2500 [ 171.120569][ T5603] pwc: recv_control_msg error -32 req 02 val 2400 [ 171.166582][ T5603] pwc: recv_control_msg error -32 req 02 val 2600 [ 171.212459][ T5603] pwc: recv_control_msg error -32 req 02 val 2900 [ 171.238590][ T5603] pwc: recv_control_msg error -32 req 02 val 2800 [ 171.240050][ T5613] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 172.815958][ T6725] /dev/sg0: Can't lookup blockdev [ 173.733908][ T5603] pwc: Registered as video103. [ 173.735600][ T5603] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 173.787242][ T30] usb 2-1: USB disconnect, device number 15 [ 173.974438][ T6743] netlink: 'syz.3.225': attribute type 25 has an invalid length. [ 173.974459][ T6743] netlink: 'syz.3.225': attribute type 3 has an invalid length. [ 173.974470][ T6743] netlink: 132 bytes leftover after parsing attributes in process `syz.3.225'. [ 174.000492][ T6743] ip_tables: iptables: counters copy to user failed while replacing table [ 174.092783][ T6746] netlink: Conntrack attr has 8 unknown bytes [ 174.093020][ T6746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.113339][ T6746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.225'. [ 174.625684][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 174.978794][ T31] audit: type=1400 audit(1791671437.817:479): avc: denied { mounton } for pid=6751 comm="syz.0.228" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 175.208574][ T6755] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input13 [ 175.724948][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.232'. [ 175.896634][ T6775] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 176.132258][ T6780] FAULT_INJECTION: forcing a failure. [ 176.132258][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 176.132289][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.4.238 Not tainted syzkaller #0 PREEMPT(full) [ 176.132311][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.132322][ T6780] Call Trace: [ 176.132328][ T6780] [ 176.132336][ T6780] dump_stack_lvl+0x100/0x190 [ 176.132370][ T6780] should_fail_ex.cold+0x5/0xa [ 176.132395][ T6780] should_failslab+0xc2/0x120 [ 176.132424][ T6780] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 176.132448][ T6780] ? sock_alloc_inode+0x26/0x2c0 [ 176.132471][ T6780] ? __pfx_sock_alloc_inode+0x10/0x10 [ 176.132494][ T6780] sock_alloc_inode+0x26/0x2c0 [ 176.132514][ T6780] ? __pfx_sock_alloc_inode+0x10/0x10 [ 176.132534][ T6780] alloc_inode+0x68/0x250 [ 176.132555][ T6780] sock_alloc+0x44/0x280 [ 176.132574][ T6780] ? security_socket_create+0x7f/0x250 [ 176.132597][ T6780] __sock_create+0xc2/0x860 [ 176.132624][ T6780] __sys_socket+0x14d/0x260 [ 176.132648][ T6780] ? __pfx___sys_socket+0x10/0x10 [ 176.132679][ T6780] __x64_sys_socket+0x72/0xb0 [ 176.132701][ T6780] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.132727][ T6780] do_syscall_64+0x123/0x790 [ 176.132761][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.132780][ T6780] RIP: 0033:0x7fd102b9e1d9 [ 176.132797][ T6780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.132815][ T6780] RSP: 002b:00007fd103a88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 176.132834][ T6780] RAX: ffffffffffffffda RBX: 00007fd102e25fa0 RCX: 00007fd102b9e1d9 [ 176.132847][ T6780] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 176.132858][ T6780] RBP: 00007fd102c35888 R08: 0000000000000000 R09: 0000000000000000 [ 176.132869][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.132880][ T6780] R13: 00007fd102e26038 R14: 00007fd102e25fa0 R15: 00007ffd50987f98 [ 176.132907][ T6780] [ 176.134198][ T6780] socket: no more sockets [ 176.213432][ T31] audit: type=1400 audit(1791671439.057:480): avc: denied { read write } for pid=6785 comm="syz.3.241" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 176.213518][ T31] audit: type=1400 audit(1791671439.057:481): avc: denied { open } for pid=6785 comm="syz.3.241" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 176.246578][ T6780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.238'. [ 176.482474][ T5785] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 176.713273][ T5785] usb 3-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 176.758975][ T5785] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 7 [ 176.759012][ T5785] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 218, changing to 7 [ 176.834682][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.834704][ T5785] usb 3-1: Product: syz [ 176.834715][ T5785] usb 3-1: Manufacturer: syz [ 176.834727][ T5785] usb 3-1: SerialNumber: syz [ 177.539035][ T5785] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 177.581909][ T5785] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 177.658948][ T5785] usb 3-1: USB disconnect, device number 15 [ 177.733567][ T6802] udevd[6802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.832487][ T2324] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 177.835826][ T31] audit: type=1400 audit(1791671440.677:482): avc: denied { getopt } for pid=6803 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.851065][ T31] audit: type=1326 audit(1791671440.687:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd679e1d9 code=0x7ffc0000 [ 177.851148][ T31] audit: type=1326 audit(1791671440.687:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd679e1d9 code=0x7ffc0000 [ 177.875273][ T31] audit: type=1326 audit(1791671440.697:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd679e1d9 code=0x7ffc0000 [ 177.875350][ T31] audit: type=1326 audit(1791671440.697:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdfd679e1d9 code=0x7ffc0000 [ 177.875414][ T31] audit: type=1326 audit(1791671440.697:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd679e1d9 code=0x7ffc0000 [ 177.875478][ T31] audit: type=1326 audit(1791671440.697:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd679e1d9 code=0x7ffc0000 [ 177.896090][ T6806] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.897180][ T6806] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 178.023592][ T2324] usb 4-1: Using ep0 maxpacket: 32 [ 178.024036][ T2324] usb 4-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 178.025807][ T2324] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.025824][ T2324] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.027524][ T2324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.027543][ T2324] usb 4-1: Product: syz [ 178.027555][ T2324] usb 4-1: Manufacturer: syz [ 178.027567][ T2324] usb 4-1: SerialNumber: syz [ 178.039087][ T2324] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 178.111396][ T2324] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 178.559747][ T6801] bridge1: entered promiscuous mode [ 179.033130][ T5785] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 179.255544][ T5785] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 179.257011][ T5785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.257026][ T5785] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 179.257044][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.259858][ T5785] usb 2-1: config 0 descriptor?? [ 180.460521][ T6842] netlink: 'syz.0.254': attribute type 27 has an invalid length. [ 180.823602][ T2324] usb 4-1: can't set first interface for hiFace device. [ 180.823724][ T2324] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 180.837750][ T2324] usb 4-1: USB disconnect, device number 16 [ 181.060323][ T6741] udevd[6741]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.302548][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 181.302568][ T31] audit: type=1400 audit(1791671445.096:513): avc: denied { mounton } for pid=6849 comm="syz.0.257" path="/47/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 181.488826][ T9] usb 2-1: USB disconnect, device number 16 [ 181.655889][ T31] audit: type=1400 audit(1791671445.506:514): avc: denied { read } for pid=6862 comm="syz.1.261" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 182.016330][ T6871] tipc: Started in network mode [ 182.016382][ T6871] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 182.016465][ T6871] tipc: Enabling of bearer rejected, failed to enable media [ 182.023310][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 182.664953][ T31] audit: type=1400 audit(1791671446.516:515): avc: denied { name_bind } for pid=6872 comm="syz.3.264" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 182.958957][ T31] audit: type=1400 audit(1791671446.806:516): avc: denied { name_bind } for pid=6882 comm="syz.2.268" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 183.402495][ T5707] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 183.553305][ T5707] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 183.554835][ T5707] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.554905][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.559785][ T5707] usb 2-1: config 0 descriptor?? [ 183.577031][ T5707] pwc: Askey VC010 type 2 USB webcam detected. [ 183.776456][ T5707] pwc: send_video_command error -71 [ 183.776487][ T5707] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 183.776617][ T5707] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 183.819910][ T5707] usb 2-1: USB disconnect, device number 17 [ 183.927188][ T6895] batman_adv: batadv0: Adding interface: ip6gretap1 [ 183.927221][ T6895] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.927260][ T6895] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 184.238364][ T6899] Bluetooth: hci0: unsupported parameter 4354 [ 184.238399][ T6899] Bluetooth: hci0: unsupported parameter 8192 [ 184.238411][ T6899] Bluetooth: hci0: unsupported parameter 4354 [ 184.238436][ T6899] Bluetooth: hci0: unsupported parameter 8192 [ 184.302466][ T5707] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 184.462599][ T2324] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 184.544812][ T31] audit: type=1400 audit(1791671448.396:517): avc: denied { execute } for pid=6900 comm="syz.2.273" name="file0" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.229416][ T2324] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 185.230271][ T2324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.230292][ T2324] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.230321][ T2324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.233416][ T2324] usb 4-1: config 0 descriptor?? [ 185.296011][ T5707] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.296930][ T5707] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.296965][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.301013][ T5707] usb 2-1: config 0 descriptor?? [ 185.337181][ T5707] pwc: Askey VC010 type 2 USB webcam detected. [ 185.713047][ T5707] pwc: recv_control_msg error -32 req 02 val 2b00 [ 185.713639][ T5707] pwc: recv_control_msg error -32 req 02 val 2700 [ 185.714160][ T5707] pwc: recv_control_msg error -32 req 02 val 2c00 [ 185.714719][ T5707] pwc: recv_control_msg error -32 req 04 val 1000 [ 185.715560][ T5707] pwc: recv_control_msg error -32 req 04 val 1300 [ 185.716783][ T5707] pwc: recv_control_msg error -32 req 04 val 1400 [ 185.717305][ T5707] pwc: recv_control_msg error -32 req 02 val 2000 [ 185.718905][ T5707] pwc: recv_control_msg error -32 req 02 val 2100 [ 185.719962][ T5707] pwc: recv_control_msg error -32 req 04 val 1500 [ 185.721258][ T5707] pwc: recv_control_msg error -32 req 02 val 2500 [ 185.721756][ T5707] pwc: recv_control_msg error -32 req 02 val 2400 [ 185.729425][ T5707] pwc: recv_control_msg error -32 req 02 val 2600 [ 185.776930][ T5707] pwc: recv_control_msg error -32 req 02 val 2900 [ 185.786639][ T5707] pwc: recv_control_msg error -32 req 02 val 2800 [ 185.996531][ T5707] pwc: recv_control_msg error -71 req 04 val 1200 [ 186.007373][ T5707] pwc: Registered as video103. [ 186.012052][ T5707] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 186.039778][ T5707] usb 2-1: USB disconnect, device number 18 [ 186.416707][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 186.715716][ T31] audit: type=1400 audit(1791671450.566:518): avc: denied { create } for pid=6927 comm="syz.0.281" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 186.804176][ T31] audit: type=1400 audit(1791671450.656:519): avc: denied { write } for pid=6929 comm="syz.1.282" laddr=fe80::1cfe:14ff:feec:d393 lport=37263 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.837869][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 186.851324][ T31] audit: type=1400 audit(1791671450.696:520): avc: denied { read } for pid=6929 comm="syz.1.282" laddr=fe80::1cfe:14ff:feec:d393 lport=37263 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.889297][ T31] audit: type=1400 audit(1791671450.736:521): avc: denied { create } for pid=6927 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.912026][ T31] audit: type=1400 audit(1791671450.746:522): avc: denied { write } for pid=6927 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.993154][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 186.994327][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.994365][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.003811][ T9] usb 3-1: config 0 descriptor?? [ 187.026548][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 187.131359][ T31] audit: type=1400 audit(1791671450.976:523): avc: denied { unlink } for pid=5609 comm="syz-executor" name="file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.242176][ T9] pwc: send_video_command error -71 [ 187.242214][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 187.242317][ T9] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 187.278137][ T9] usb 3-1: USB disconnect, device number 16 [ 187.329669][ T31] audit: type=1400 audit(1791671451.176:524): avc: denied { mount } for pid=6938 comm="syz.0.284" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 187.335459][ T6939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.358043][ T6941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.446882][ T31] audit: type=1400 audit(1791671451.296:525): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 187.465514][ T5714] usb 4-1: USB disconnect, device number 17 [ 187.795267][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 188.025127][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 188.041745][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.041800][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.069329][ T9] usb 3-1: config 0 descriptor?? [ 188.089410][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 188.700223][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.852242][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 188.861203][ T31] audit: type=1400 audit(1791671452.706:526): avc: denied { allowed } for pid=6923 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 188.882991][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 188.886604][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 188.887086][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 188.892187][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 188.899221][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 188.928839][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 188.950997][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 188.959005][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 188.966987][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 188.968370][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 188.968983][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 188.970115][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 189.247319][ T31] audit: type=1400 audit(1791671453.096:527): avc: denied { watch watch_reads } for pid=6964 comm="syz.1.292" path="/57/file0" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 189.282462][ T2324] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 189.393978][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 189.399412][ T9] pwc: Registered as video103. [ 189.417355][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 189.432478][ T2324] usb 4-1: Using ep0 maxpacket: 8 [ 189.433053][ T2324] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 189.434422][ T2324] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 189.434447][ T2324] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 189.434467][ T2324] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.438149][ T2324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.438171][ T2324] usb 4-1: Product: syz [ 189.438185][ T2324] usb 4-1: Manufacturer: syz [ 189.438198][ T2324] usb 4-1: SerialNumber: syz [ 189.512568][ T5714] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 189.522760][ T6958] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 189.523369][ T9] usb 3-1: USB disconnect, device number 17 [ 189.528092][ T2324] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 189.530920][ T2324] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 189.530976][ T2324] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 189.672921][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 189.673591][ T5714] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 189.674877][ T5714] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.674914][ T5714] usb 1-1: config 0 has no interface number 0 [ 189.674977][ T5714] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 189.675011][ T5714] usb 1-1: config 0 interface 1 has no altsetting 0 [ 189.677430][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.677454][ T5714] usb 1-1: Product: syz [ 189.677462][ T5714] usb 1-1: Manufacturer: syz [ 189.677470][ T5714] usb 1-1: SerialNumber: syz [ 189.685918][ T5714] usb 1-1: config 0 descriptor?? [ 189.864601][ T1220] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 190.024088][ T1220] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.031968][ T1220] usb 2-1: not running at top speed; connect to a high speed hub [ 190.032121][ T1220] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.038912][ T1220] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.038945][ T1220] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.053067][ T1220] usb 2-1: string descriptor 0 read error: -22 [ 190.053230][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.118279][ T1220] usb 2-1: 0:2 : does not exist [ 190.155743][ T6970] netlink: 'syz.2.294': attribute type 32 has an invalid length. [ 190.223138][ T5714] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 190.224289][ T5714] cx231xx 1-1:0.1: Failed to read PCB config [ 190.224374][ T5714] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 190.228044][ T5714] usb 1-1: USB disconnect, device number 13 [ 190.287615][ T5707] usb 4-1: USB disconnect, device number 18 [ 190.762536][ T5707] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 190.914055][ T5707] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 190.916205][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.929108][ T5707] usb 3-1: config 0 descriptor?? [ 191.152326][ T1220] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 191.163449][ T1220] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 191.272831][ T5707] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 191.330726][ T1220] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 191.485955][ T5707] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 191.661598][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 191.661695][ T5707] usb 4-1: Product: syz [ 191.661725][ T5707] usb 4-1: Manufacturer: syz [ 191.661753][ T5707] usb 4-1: SerialNumber: syz [ 191.723333][ T5707] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 191.784809][ T1220] usb 2-1: USB disconnect, device number 19 [ 191.909614][ T6985] FAULT_INJECTION: forcing a failure. [ 191.909614][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 191.909663][ T6985] CPU: 1 UID: 0 PID: 6985 Comm: syz.3.301 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.909687][ T6985] Tainted: [L]=SOFTLOCKUP [ 191.909694][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 191.909705][ T6985] Call Trace: [ 191.909711][ T6985] [ 191.909718][ T6985] dump_stack_lvl+0x100/0x190 [ 191.909749][ T6985] should_fail_ex.cold+0x5/0xa [ 191.909772][ T6985] should_failslab+0xc2/0x120 [ 191.909799][ T6985] __kmalloc_noprof+0xfc/0x840 [ 191.909823][ T6985] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 191.909852][ T6985] kernfs_fop_write_iter+0x26a/0x5f0 [ 191.909879][ T6985] vfs_write+0x6af/0x1050 [ 191.909903][ T6985] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 191.909929][ T6985] ? __pfx_vfs_write+0x10/0x10 [ 191.909949][ T6985] ? find_held_lock+0x2b/0x80 [ 191.909993][ T6985] ksys_write+0x12a/0x250 [ 191.910015][ T6985] ? __pfx_ksys_write+0x10/0x10 [ 191.910050][ T6985] do_syscall_64+0x123/0x790 [ 191.910079][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.910097][ T6985] RIP: 0033:0x7f67c119e1d9 [ 191.910112][ T6985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.910129][ T6985] RSP: 002b:00007f67c1fff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.910146][ T6985] RAX: ffffffffffffffda RBX: 00007f67c1425fa0 RCX: 00007f67c119e1d9 [ 191.910158][ T6985] RDX: 0000000000000005 RSI: 00002000000007c0 RDI: 0000000000000005 [ 191.910169][ T6985] RBP: 00007f67c1fff090 R08: 0000000000000000 R09: 0000000000000000 [ 191.910179][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.910190][ T6985] R13: 00007f67c1426038 R14: 00007f67c1425fa0 R15: 00007ffd3e7f7c78 [ 191.910216][ T6985] [ 192.196489][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.200013][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.209437][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.227306][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.239119][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.260702][ T1220] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 192.267819][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 192.267832][ T31] audit: type=1400 audit(1791671456.106:534): avc: denied { mounton } for pid=6996 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 192.452489][ T5707] vp7045: USB control message 'in' went wrong. [ 192.452507][ T5707] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 192.452534][ T5707] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 192.493450][ T5707] usb 4-1: USB disconnect, device number 19 [ 192.670426][ T1220] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 192.743129][ T1220] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.743205][ T1220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.400997][ T1220] usb 2-1: config 0 descriptor?? [ 193.413715][ T1220] pwc: Askey VC010 type 2 USB webcam detected. [ 193.695563][ T7014] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 193.695637][ T7014] CIFS mount error: No usable UNC path provided in device string! [ 193.695637][ T7014] [ 193.696056][ T7014] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 193.839128][ T5707] usb 3-1: USB disconnect, device number 18 [ 193.887929][ T1220] pwc: send_video_command error -71 [ 193.887965][ T1220] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 193.888250][ T1220] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 193.982561][ T1220] usb 2-1: USB disconnect, device number 20 [ 194.292699][ T52] Bluetooth: hci5: command tx timeout [ 194.520755][ T1220] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 194.696500][ T1220] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 194.746303][ T1220] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.746634][ T1220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.867876][ T1220] usb 2-1: config 0 descriptor?? [ 194.913819][ T1220] pwc: Askey VC010 type 2 USB webcam detected. [ 195.381756][ T1220] pwc: recv_control_msg error -32 req 02 val 2b00 [ 195.433475][ T1220] pwc: recv_control_msg error -32 req 02 val 2700 [ 195.470862][ T1220] pwc: recv_control_msg error -32 req 02 val 2c00 [ 195.496851][ T1220] pwc: recv_control_msg error -32 req 04 val 1000 [ 195.576541][ T1220] pwc: recv_control_msg error -32 req 04 val 1300 [ 195.586602][ T1220] pwc: recv_control_msg error -32 req 04 val 1400 [ 195.595149][ T1220] pwc: recv_control_msg error -32 req 02 val 2000 [ 195.601118][ T1220] pwc: recv_control_msg error -32 req 02 val 2100 [ 195.650334][ T1220] pwc: recv_control_msg error -32 req 04 val 1500 [ 195.706970][ T1220] pwc: recv_control_msg error -32 req 02 val 2500 [ 195.711519][ T1220] pwc: recv_control_msg error -32 req 02 val 2400 [ 195.845832][ T1220] pwc: recv_control_msg error -32 req 02 val 2600 [ 195.899153][ T1220] pwc: recv_control_msg error -32 req 02 val 2900 [ 196.372397][ T52] Bluetooth: hci5: command tx timeout [ 196.468184][ T1220] pwc: recv_control_msg error -71 req 04 val 1200 [ 196.483151][ T1220] pwc: Registered as video103. [ 196.484463][ T1220] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 196.543185][ T1220] usb 2-1: USB disconnect, device number 21 [ 196.906391][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.906824][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.918691][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.493146][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 197.622419][ T9] usb 3-1: device descriptor read/64, error -71 [ 197.862421][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 198.072479][ T9] usb 3-1: device descriptor read/64, error -71 [ 198.184961][ T9] usb usb3-port1: attempt power cycle [ 198.452478][ T52] Bluetooth: hci5: command tx timeout [ 200.040919][ T2324] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 200.118918][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 200.200705][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.214752][ T2324] usb 2-1: Using ep0 maxpacket: 8 [ 200.276252][ T2324] usb 2-1: device descriptor read/all, error -71 [ 200.368853][ T7057] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 200.566453][ T52] Bluetooth: hci5: command tx timeout [ 200.690339][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.874190][ T9] usb 3-1: device descriptor read/8, error -71 [ 201.743985][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.098285][ T31] audit: type=1400 audit(1791671465.756:535): avc: denied { read } for pid=7063 comm="syz.2.319" name="transaction_log" dev="binder" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.098873][ T31] audit: type=1400 audit(1791671465.776:536): avc: denied { open } for pid=7063 comm="syz.2.319" path="/dev/binderfs/binder_logs/transaction_log" dev="binder" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.429656][ T7052] syz.3.316 (7052) used greatest stack depth: 20256 bytes left [ 203.202445][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 203.366283][ T9] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 203.368217][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.368238][ T9] usb 4-1: config 0 has no interfaces? [ 203.413390][ T9] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 203.413412][ T9] usb 4-1: Product: syz [ 203.413425][ T9] usb 4-1: Manufacturer: syz [ 203.413438][ T9] usb 4-1: SerialNumber: syz [ 203.416347][ T9] usb 4-1: config 0 descriptor?? [ 203.605344][ T5738] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 203.641535][ T31] audit: type=1400 audit(1791671467.486:537): avc: denied { setopt } for pid=7069 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 205.095132][ T5603] usb 4-1: USB disconnect, device number 20 [ 205.582519][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 205.583055][ T5738] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 205.589203][ T5738] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.589231][ T5738] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.589251][ T5738] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.589274][ T5738] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.589300][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.677731][ T5738] usb 3-1: config 0 descriptor?? [ 205.765194][ T31] audit: type=1400 audit(1791671469.596:538): avc: denied { ioctl } for pid=7076 comm="syz.0.321" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 205.936247][ T31] audit: type=1400 audit(1791671469.776:539): avc: denied { map } for pid=7076 comm="syz.0.321" path="socket:[14552]" dev="sockfs" ino=14552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.936559][ T31] audit: type=1400 audit(1791671469.776:540): avc: denied { read } for pid=7076 comm="syz.0.321" path="socket:[14552]" dev="sockfs" ino=14552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.247703][ T43] bridge_slave_1: left allmulticast mode [ 206.247739][ T43] bridge_slave_1: left promiscuous mode [ 206.248090][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.308091][ T5738] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 206.362433][ T43] bridge_slave_0: left allmulticast mode [ 206.362454][ T43] bridge_slave_0: left promiscuous mode [ 206.363189][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.492600][ T30] usb 3-1: USB disconnect, device number 23 [ 206.793587][ T31] audit: type=1400 audit(1791671470.406:541): avc: denied { write } for pid=7067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.876991][ T7088] fido_id[7088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:2801.0002/report_descriptor': No such file or directory [ 207.279267][ T31] audit: type=1400 audit(1791671471.116:542): avc: denied { setopt } for pid=7093 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.313530][ T31] audit: type=1400 audit(1791671471.156:543): avc: denied { listen } for pid=7093 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.354988][ T31] audit: type=1400 audit(1791671471.206:544): avc: denied { write } for pid=7092 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.740858][ T31] audit: type=1400 audit(1791671471.586:545): avc: denied { setopt } for pid=7099 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 207.822410][ T2324] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 207.878458][ T43] bond0 (unregistering): Released all slaves [ 207.979008][ T2324] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 207.981073][ T2324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.981115][ T2324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.021084][ T2324] usb 3-1: config 0 descriptor?? [ 208.052026][ T2324] pwc: Askey VC010 type 2 USB webcam detected. [ 208.291737][ T2324] pwc: send_video_command error -71 [ 208.291752][ T2324] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 208.291822][ T2324] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 208.348617][ T2324] usb 3-1: USB disconnect, device number 24 [ 208.451387][ T7108] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 208.831895][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.831965][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.832023][ T6996] bridge_slave_0: entered allmulticast mode [ 208.852696][ T2324] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 208.857019][ T6996] bridge_slave_0: entered promiscuous mode [ 208.881966][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.884073][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.885389][ T6996] bridge_slave_1: entered allmulticast mode [ 208.886779][ T6996] bridge_slave_1: entered promiscuous mode [ 208.961868][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.005243][ T2324] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 209.006086][ T2324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.006122][ T2324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.011769][ T2324] usb 3-1: config 0 descriptor?? [ 209.064452][ T2324] pwc: Askey VC010 type 2 USB webcam detected. [ 209.186440][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.188995][ T5738] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 209.320260][ T31] audit: type=1400 audit(1791671473.166:546): avc: denied { write } for pid=7112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.361478][ T43] hsr_slave_0: left promiscuous mode [ 209.362091][ T43] hsr_slave_1: left promiscuous mode [ 209.376058][ T5738] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 209.391203][ T5738] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 209.391226][ T5738] usb 1-1: config 0 has no interface number 0 [ 209.391275][ T5738] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.391296][ T5738] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 209.391322][ T5738] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 209.391343][ T5738] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 209.391365][ T5738] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.391416][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.471360][ T5738] usb 1-1: config 0 descriptor?? [ 209.480189][ T7124] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.494462][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.494493][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.513701][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.517830][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.518189][ T2324] pwc: recv_control_msg error -32 req 02 val 2b00 [ 209.545484][ T2324] pwc: recv_control_msg error -32 req 02 val 2700 [ 209.547377][ T2324] pwc: recv_control_msg error -32 req 02 val 2c00 [ 209.548463][ T2324] pwc: recv_control_msg error -32 req 04 val 1000 [ 209.576028][ T2324] pwc: recv_control_msg error -32 req 04 val 1300 [ 209.594288][ T2324] pwc: recv_control_msg error -32 req 04 val 1400 [ 209.595910][ T5738] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 209.596612][ T2324] pwc: recv_control_msg error -32 req 02 val 2000 [ 209.597142][ T2324] pwc: recv_control_msg error -32 req 02 val 2100 [ 209.599462][ T2324] pwc: recv_control_msg error -32 req 04 val 1500 [ 209.600537][ T2324] pwc: recv_control_msg error -32 req 02 val 2500 [ 209.651840][ T2324] pwc: recv_control_msg error -32 req 02 val 2400 [ 209.663565][ T2324] pwc: recv_control_msg error -32 req 02 val 2600 [ 209.664066][ T2324] pwc: recv_control_msg error -32 req 02 val 2900 [ 209.726841][ T43] veth0_macvtap: left promiscuous mode [ 209.742465][ T43] veth1_vlan: left promiscuous mode [ 209.742578][ T43] veth0_vlan: left promiscuous mode [ 209.824572][ T5738] usb 1-1: USB disconnect, device number 14 [ 209.850404][ T5738] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 210.000850][ T31] audit: type=1400 audit(1791671473.846:547): avc: denied { write } for pid=7133 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.081998][ T2324] pwc: recv_control_msg error -71 req 04 val 1200 [ 210.091837][ T2324] pwc: Registered as video103. [ 210.127768][ T2324] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 210.154530][ T2324] usb 3-1: USB disconnect, device number 25 [ 210.444986][ T43] team0 (unregistering): Port device team_slave_1 removed [ 210.467514][ T43] team0 (unregistering): Port device team_slave_0 removed [ 210.639684][ T31] audit: type=1400 audit(1791671474.486:548): avc: denied { bind } for pid=7136 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.979255][ T31] audit: type=1400 audit(1791671474.826:549): avc: denied { name_bind } for pid=7136 comm="syz.0.332" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 210.979487][ T31] audit: type=1400 audit(1791671474.826:550): avc: denied { node_bind } for pid=7136 comm="syz.0.332" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 211.609506][ T7142] comedi comedi4: bad chanlist[0]=0x00000300 chan=768 range length=2 [ 213.519948][ T6996] team0: Port device team_slave_0 added [ 213.538325][ T6996] team0: Port device team_slave_1 added [ 213.563916][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 213.660045][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.660060][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.660080][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.708320][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.708333][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.708354][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.797871][ T6996] hsr_slave_0: entered promiscuous mode [ 213.798529][ T6996] hsr_slave_1: entered promiscuous mode [ 213.799043][ T6996] debugfs: 'hsr0' already exists in 'hsr' [ 213.799058][ T6996] Cannot create hsr debugfs directory [ 213.888341][ T31] audit: type=1400 audit(1791671477.736:551): avc: denied { mount } for pid=7143 comm="syz.2.334" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 214.075855][ T31] audit: type=1400 audit(1791671477.926:552): avc: denied { map } for pid=7143 comm="syz.2.334" path="socket:[14931]" dev="sockfs" ino=14931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 214.532901][ T2324] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 214.901463][ T2324] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 214.938580][ T2324] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.938622][ T2324] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 214.938655][ T2324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.296172][ T31] audit: type=1400 audit(1791671479.116:553): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 215.490489][ T6996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.580517][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.620080][ T6996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.885413][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.899631][ T6996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.218834][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.282386][ T7170] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 217.286123][ T7170] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 217.323270][ T6996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.541389][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.541780][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.573552][ T2324] cxacru 1-1:1.0: send of cm 0x90 failed (-104) [ 217.575261][ T2324] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 217.575627][ T2324] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 217.616921][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.877920][ T31] audit: type=1400 audit(1791671481.726:554): avc: denied { getopt } for pid=7181 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 218.087908][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.121987][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.142583][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.142661][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.148486][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.148564][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.930421][ T30] usb 1-1: USB disconnect, device number 15 [ 221.356989][ T31] audit: type=1400 audit(1791671485.206:555): avc: denied { write } for pid=7166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.553552][ T31] audit: type=1400 audit(1791671485.406:556): avc: denied { bind } for pid=7219 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 221.723095][ T31] audit: type=1400 audit(1791671485.566:557): avc: denied { read write } for pid=7213 comm="syz.1.347" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 221.855842][ T31] audit: type=1400 audit(1791671485.576:558): avc: denied { open } for pid=7213 comm="syz.1.347" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 226.412452][ T7244] FAULT_INJECTION: forcing a failure. [ 226.412452][ T7244] name failslab, interval 1, probability 0, space 0, times 0 [ 226.412485][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.0.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.412510][ T7244] Tainted: [L]=SOFTLOCKUP [ 226.412517][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 226.412527][ T7244] Call Trace: [ 226.412534][ T7244] [ 226.412547][ T7244] dump_stack_lvl+0x100/0x190 [ 226.412580][ T7244] should_fail_ex.cold+0x5/0xa [ 226.412609][ T7244] should_failslab+0xc2/0x120 [ 226.412637][ T7244] __kvmalloc_node_noprof+0x113/0x9b0 [ 226.412663][ T7244] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 226.412683][ T7244] ? io_uring_setup.cold+0x1f4/0x1cde [ 226.412707][ T7244] io_uring_setup.cold+0x1f4/0x1cde [ 226.412726][ T7244] ? lock_acquire+0x1d1/0x380 [ 226.412748][ T7244] ? avc_has_perm_noaudit+0x56/0x470 [ 226.412766][ T7244] ? __pfx_io_uring_setup+0x10/0x10 [ 226.412791][ T7244] ? find_held_lock+0x2b/0x80 [ 226.412817][ T7244] ? avc_has_perm_noaudit+0x11e/0x470 [ 226.412836][ T7244] ? avc_has_perm_noaudit+0x11e/0x470 [ 226.412871][ T7244] ? xfd_validate_state+0x129/0x190 [ 226.412897][ T7244] __x64_sys_io_uring_setup+0xc2/0x170 [ 226.412927][ T7244] do_syscall_64+0x123/0x790 [ 226.412955][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.412974][ T7244] RIP: 0033:0x7fa62999e1d9 [ 226.412989][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.413006][ T7244] RSP: 002b:00007fa62a89cfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 226.413024][ T7244] RAX: ffffffffffffffda RBX: 0000200000000900 RCX: 00007fa62999e1d9 [ 226.413037][ T7244] RDX: 00002000000009c0 RSI: 0000200000000900 RDI: 0000000000000110 [ 226.413047][ T7244] RBP: 00007fa629a35888 R08: 0000000000000000 R09: 0000000000000000 [ 226.413057][ T7244] R10: 0000200000000a00 R11: 0000000000000206 R12: 00002000000009c0 [ 226.413068][ T7244] R13: 0000200000000a00 R14: 0000200000000980 R15: 00007ffd2245abc8 [ 226.413092][ T7244] [ 226.429083][ T7244] openvswitch: netlink: Tunnel attr 0 has unexpected len 528 expected 8 [ 226.444693][ T31] audit: type=1400 audit(1791671490.286:559): avc: denied { write } for pid=7228 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.516756][ T7244] FAULT_INJECTION: forcing a failure. [ 226.516756][ T7244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.516782][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.0.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.516805][ T7244] Tainted: [L]=SOFTLOCKUP [ 226.516811][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 226.516820][ T7244] Call Trace: [ 226.516826][ T7244] [ 226.516832][ T7244] dump_stack_lvl+0x100/0x190 [ 226.516860][ T7244] should_fail_ex.cold+0x5/0xa [ 226.516882][ T7244] _copy_from_iter+0x1f4/0x1690 [ 226.516909][ T7244] ? __asan_memset+0x23/0x50 [ 226.516928][ T7244] ? __pfx__copy_from_iter+0x10/0x10 [ 226.516951][ T7244] ? __pfx___alloc_skb+0x10/0x10 [ 226.516966][ T7244] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 226.516989][ T7244] ? sock_has_perm+0x25a/0x2f0 [ 226.517009][ T7244] ? __pfx_sock_has_perm+0x10/0x10 [ 226.517034][ T7244] netlink_sendmsg+0x808/0xda0 [ 226.517063][ T7244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.517089][ T7244] ? selinux_socket_sendmsg+0x198/0x2f0 [ 226.517114][ T7244] ____sys_sendmsg+0xa4d/0xbe0 [ 226.517133][ T7244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.517160][ T7244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.517190][ T7244] ___sys_sendmsg+0x190/0x1e0 [ 226.517213][ T7244] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.517234][ T7244] ? futex_wait+0x11e/0x370 [ 226.517259][ T7244] ? find_held_lock+0x2b/0x80 [ 226.517309][ T7244] __sys_sendmsg+0x160/0x210 [ 226.517327][ T7244] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.517357][ T7244] do_syscall_64+0x123/0x790 [ 226.517383][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.517403][ T7244] RIP: 0033:0x7fa62999e1d9 [ 226.517418][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.517434][ T7244] RSP: 002b:00007fa62a89d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.517450][ T7244] RAX: ffffffffffffffda RBX: 00007fa629c25fa0 RCX: 00007fa62999e1d9 [ 226.517461][ T7244] RDX: 0000000000000004 RSI: 00002000000006c0 RDI: 000000000000000d [ 226.517470][ T7244] RBP: 00007fa629a35888 R08: 0000000000000000 R09: 0000000000000000 [ 226.517480][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.517489][ T7244] R13: 00007fa629c26038 R14: 00007fa629c25fa0 R15: 00007ffd2245abc8 [ 226.517512][ T7244] [ 226.627656][ T7249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.351'. [ 226.722473][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.348'. [ 226.750511][ T31] audit: type=1400 audit(1791671490.546:560): avc: denied { read write } for pid=7251 comm="syz.0.353" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 226.754194][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3 [ 226.756816][ T31] audit: type=1400 audit(1791671490.606:561): avc: denied { open } for pid=7251 comm="syz.0.353" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 227.022755][ T7249] bridge0: port 3(netdevsim0) entered disabled state [ 227.022840][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.022945][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.024562][ T7249] bond0: (slave bridge0): Releasing backup interface [ 227.134846][ T7249] bridge_slave_0: left allmulticast mode [ 227.134869][ T7249] bridge_slave_0: left promiscuous mode [ 227.135566][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.150390][ T7249] bridge_slave_1: left allmulticast mode [ 227.150410][ T7249] bridge_slave_1: left promiscuous mode [ 227.150556][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.180001][ T31] audit: type=1400 audit(1791671491.026:562): avc: denied { accept } for pid=7251 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.187363][ T7257] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 227.187383][ T7257] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.192620][ T7257] vhci_hcd vhci_hcd.0: Device attached [ 227.194669][ T7262] vhci_hcd: cannot find the pending unlink 4096 [ 227.285557][ T7249] bond0: (slave bond_slave_0): Releasing backup interface [ 230.698748][ T5738] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 230.770293][ T7249] bond0: (slave bond_slave_1): Releasing backup interface [ 230.792420][ T5738] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 230.820801][ T7249] team0: Port device team_slave_0 removed [ 230.854132][ T7249] team0: Port device team_slave_1 removed [ 230.870681][ T7249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.886739][ T7249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.911005][ T7249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.983239][ T7249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.121437][ T7249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.186403][ T7252] netlink: 'syz.0.353': attribute type 12 has an invalid length. [ 231.186422][ T7252] netlink: 132 bytes leftover after parsing attributes in process `syz.0.353'. [ 231.376229][ T7262] vhci_hcd: connection reset by peer [ 231.396340][ T4499] vhci_hcd vhci_hcd.0: stop threads [ 231.396703][ T4499] vhci_hcd vhci_hcd.0: release socket [ 231.428559][ T4499] vhci_hcd vhci_hcd.0: disconnect device [ 231.742032][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.573337][ T7283] netlink: 76 bytes leftover after parsing attributes in process `syz.1.359'. [ 232.866127][ T7285] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 234.326592][ T5613] Bluetooth: hci5: command 0x0405 tx timeout [ 234.345755][ T31] audit: type=1400 audit(1791671496.716:563): avc: denied { relabelfrom } for pid=7276 comm="syz.0.358" name="NETLINK" dev="sockfs" ino=16606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.347994][ T31] audit: type=1400 audit(1791671496.716:564): avc: denied { relabelto } for pid=7276 comm="syz.0.358" name="NETLINK" dev="sockfs" ino=16606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 234.349994][ T31] audit: type=1400 audit(1791671496.716:565): avc: denied { create } for pid=7276 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.842710][ T5603] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 235.329583][ T7297] smc: net device lo applied user defined pnetid SYZ0 [ 235.330018][ T7297] smc: smcd device lo applied user defined pnetid SYZ0 [ 236.164217][ T5738] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 237.263772][ T5603] usb 1-1: device descriptor read/all, error -71 [ 238.412743][ T5707] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.509590][ T31] audit: type=1400 audit(1791671502.356:566): avc: denied { write } for pid=7280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.521907][ T7315] fuse: Unknown parameter '' [ 238.529017][ T6996] veth0_vlan: entered promiscuous mode [ 238.572662][ T5707] usb 2-1: Using ep0 maxpacket: 32 [ 238.579022][ T5707] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 238.588497][ T5707] usb 2-1: config 0 has no interfaces? [ 238.670724][ T6996] veth1_vlan: entered promiscuous mode [ 238.732252][ T6996] veth0_macvtap: entered promiscuous mode [ 238.742743][ T6996] veth1_macvtap: entered promiscuous mode [ 238.788947][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.803635][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.892876][ T4459] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.892910][ T4459] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.892937][ T4459] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.892963][ T4459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.026185][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.026409][ T5707] usb 2-1: Product: syz [ 239.026423][ T5707] usb 2-1: Manufacturer: syz [ 239.026641][ T5707] usb 2-1: SerialNumber: syz [ 239.140423][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.140441][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.172488][ T31] audit: type=1400 audit(1791671502.916:567): avc: denied { write } for pid=7320 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.300279][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.300296][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.422518][ T2324] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 239.444816][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4 [ 239.617711][ T2324] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 239.622073][ T5707] usb 2-1: config 0 descriptor?? [ 239.632045][ T2324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.696568][ T31] audit: type=1400 audit(1791671503.526:568): avc: denied { mounton } for pid=6996 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 239.860810][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.365'. [ 239.886718][ T2324] usb 4-1: Firmware version (0.0) predates our first public release. [ 239.886741][ T2324] usb 4-1: Please update to version 0.2 or newer [ 239.968928][ T2324] usb 4-1: USB disconnect, device number 21 [ 240.021161][ T7308] netlink: 300 bytes leftover after parsing attributes in process `syz.1.363'. [ 240.034694][ T5785] usb 2-1: USB disconnect, device number 24 [ 240.246471][ T31] audit: type=1400 audit(1791671504.086:569): avc: denied { write } for pid=7332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.344434][ T31] audit: type=1400 audit(1791671504.156:570): avc: denied { write } for pid=7357 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.732677][ T31] audit: type=1400 audit(1791671504.576:571): avc: denied { mount } for pid=7344 comm="syz.5.303" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 241.976317][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 242.028816][ T31] audit: type=1400 audit(1791671505.876:572): avc: denied { write } for pid=7378 comm="syz.3.372" name="rt_acct" dev="proc" ino=4026533236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 242.086141][ T31] audit: type=1400 audit(1791671505.936:573): avc: denied { read } for pid=7378 comm="syz.3.372" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 242.086182][ T31] audit: type=1400 audit(1791671505.936:574): avc: denied { open } for pid=7378 comm="syz.3.372" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 242.089590][ T7380] xt_connbytes: Forcing CT accounting to be enabled [ 242.089754][ T7380] set match dimension is over the limit! [ 242.220301][ T31] audit: type=1400 audit(1791671506.066:575): avc: denied { unmount } for pid=6996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 242.262195][ T7380] comedi comedi3: comedi_config --init_data is deprecated [ 242.273897][ T2324] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 242.402700][ T2324] usb 3-1: device descriptor read/64, error -71 [ 243.064825][ T31] audit: type=1400 audit(1791671506.426:576): avc: denied { ioctl } for pid=7378 comm="syz.3.372" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 243.064881][ T31] audit: type=1400 audit(1791671506.426:577): avc: denied { map } for pid=7378 comm="syz.3.372" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 243.322720][ T2324] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 244.527836][ T7390] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 244.531302][ T7390] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 244.531633][ T7390] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 244.532559][ T2324] usb 3-1: device descriptor read/64, error -71 [ 244.689634][ T2324] usb usb3-port1: attempt power cycle [ 244.779341][ T7390] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 245.312441][ T2324] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 245.358268][ T7390] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 245.584990][ T2324] usb 3-1: device descriptor read/8, error -71 [ 246.085890][ T7400] Cannot find add_set index 0 as target [ 246.224192][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 246.224210][ T31] audit: type=1400 audit(1791671510.076:579): avc: denied { watch watch_reads } for pid=7408 comm="syz.0.374" path="/syzcgroup/unified/syz0" dev="rpc_pipefs" ino=12261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 246.316042][ T31] audit: type=1400 audit(1791671510.166:580): avc: denied { setopt } for pid=7412 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.243012][ T7415] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 247.243258][ T7415] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 247.246065][ T7415] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 247.303014][ T7416] [U]  [ 247.303023][ T7416] [U] K{ [ 247.303027][ T7416] [U] t 1ŠFfˊ`GJgo/mC [ 247.303038][ T7416] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 247.303048][ T7416] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 247.303064][ T7416] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 247.303091][ T7416] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 247.303103][ T7416] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 247.303114][ T7416] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 247.303130][ T7416] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 247.303323][ T7416] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 247.303332][ T7416] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 247.303340][ T7416] [U] 22Ʃx?0;3u [ 247.303351][ T7416] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 247.303364][ T7416] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 247.303372][ T7416] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 247.303378][ T7416] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 247.303386][ T7416] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 247.303393][ T7416] [U] ec [ 247.303399][ T7416] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 247.338662][ T31] audit: type=1400 audit(1791671510.986:581): avc: denied { ioctl } for pid=7412 comm="syz.1.379" path="socket:[17186]" dev="sockfs" ino=17186 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.340399][ T31] audit: type=1400 audit(1791671511.096:582): avc: denied { firmware_load } for pid=7412 comm="syz.1.379" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 248.257326][ T7412] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 249.219332][ T7424] netlink: 116 bytes leftover after parsing attributes in process `syz.0.380'. [ 249.225803][ T31] audit: type=1400 audit(1791671513.016:583): avc: denied { read } for pid=7422 comm="syz.0.380" name="bus" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.226032][ T31] audit: type=1400 audit(1791671513.016:584): avc: denied { open } for pid=7422 comm="syz.0.380" path="/77/bus" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.226413][ T31] audit: type=1400 audit(1791671513.016:585): avc: denied { write } for pid=7422 comm="syz.0.380" name="bus" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.226618][ T31] audit: type=1400 audit(1791671513.026:586): avc: denied { ioctl } for pid=7422 comm="syz.0.380" path="/77/bus" dev="tmpfs" ino=443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.235656][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.560835][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.384'. [ 252.121465][ T31] audit: type=1400 audit(1791671515.966:587): avc: denied { ioctl } for pid=7435 comm="syz.2.385" path="/84/bus" dev="devtmpfs" ino=694 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 252.166810][ T31] audit: type=1400 audit(1791671516.016:588): avc: denied { mounton } for pid=7435 comm="syz.2.385" path="/84/bus" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 252.309849][ T31] audit: type=1400 audit(1791671516.156:589): avc: denied { accept } for pid=7452 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.396776][ T52] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 252.491338][ T1266] IPVS: starting estimator thread 0... [ 252.622801][ T7471] No source specified [ 252.653543][ T7465] IPVS: using max 42 ests per chain, 100800 per kthread [ 252.826882][ T31] audit: type=1400 audit(1792195804.666:590): avc: denied { connect } for pid=7462 comm="syz.5.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.958716][ T4499] tipc: Subscription rejected, illegal request [ 253.152329][ C0] Adjusting tsc more than 11% (5242884 vs 6650972) [ 358.352546][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 358.365978][ C0] rcu: 1-...!: (1 GPs behind) idle=6b1c/1/0x4000000000000000 softirq=24373/24374 fqs=6 [ 358.375687][ C0] rcu: (detected by 0, t=10505 jiffies, g=24133, q=1392 ncpus=2) [ 358.383472][ C0] Sending NMI from CPU 0 to CPUs 1: [ 358.388660][ C1] NMI backtrace for cpu 1 [ 358.388676][ C1] CPU: 1 UID: 0 PID: 7466 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 358.388698][ C1] Tainted: [L]=SOFTLOCKUP [ 358.388703][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.388711][ C1] RIP: 0010:enqueue_hrtimer+0xbc/0x2f0 [ 358.388738][ C1] Code: c1 ea 03 80 3c 02 00 0f 85 1d 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 8d 7c 24 51 48 89 fa 48 c1 ea 03 0f b6 04 02 <48> 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 e4 01 00 00 45 0f b6 6c [ 358.388752][ C1] RSP: 0018:ffffc90000a18ca8 EFLAGS: 00000806 [ 358.388765][ C1] RAX: 0000000000000000 RBX: ffff8880b8328640 RCX: 0000000001000102 [ 358.388775][ C1] RDX: 1ffff110170650aa RSI: ffffffff81f77e87 RDI: ffff8880b8328551 [ 358.388785][ C1] RBP: ffff88801d7b2300 R08: 0000000000000001 R09: 0000000000000000 [ 358.388794][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880b8328500 [ 358.388802][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b8328690 [ 358.388811][ C1] FS: 0000000000000000(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 358.388826][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.388836][ C1] CR2: 00007ff8bd44beb8 CR3: 000000002b15f000 CR4: 00000000003526f0 [ 358.388846][ C1] Call Trace: [ 358.388851][ C1] [ 358.388858][ C1] __hrtimer_run_queues+0x6ed/0x9c0 [ 358.388881][ C1] ? rcu_is_watching+0x13/0xc0 [ 358.388903][ C1] hrtimer_interrupt+0x441/0xaa0 [ 358.388922][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 358.388943][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 358.388963][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.388979][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 358.388999][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 1a 10 f6 48 89 df e8 fe 70 10 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 54 ff f5 65 48 83 3d b4 43 b6 09 00 74 16 5b [ 358.389013][ C1] RSP: 0018:ffffc90000a18f08 EFLAGS: 00000246 [ 358.389023][ C1] RAX: 0000000000000002 RBX: ffff8880b8328500 RCX: 0000000000000004 [ 358.389032][ C1] RDX: 0000000000000101 RSI: ffffffff8e3e34cb RDI: ffffffff8c625580 [ 358.389042][ C1] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 358.389051][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000100 [ 358.389060][ C1] R13: 0000000000000008 R14: 8000000000000100 R15: 0000000000000001 [ 358.389076][ C1] handle_softirqs+0x1e6/0x9d0 [ 358.389094][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 358.389109][ C1] ? _raw_spin_unlock+0x28/0x50 [ 358.389125][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 358.389140][ C1] __irq_exit_rcu+0x16a/0x210 [ 358.389155][ C1] irq_exit_rcu+0x9/0x30 [ 358.389169][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 358.389187][ C1] [ 358.389192][ C1] [ 358.389197][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.389212][ C1] RIP: 0010:vms_gather_munmap_vmas+0xce6/0x1720 [ 358.389229][ C1] Code: 13 0f 85 c3 08 00 00 48 81 c4 50 01 00 00 44 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 df e4 9c ff e9 97 fb ff ff d5 e4 9c ff e9 08 fa ff ff 49 8d 47 30 48 89 44 24 40 e9 e9 f4 [ 358.389242][ C1] RSP: 0018:ffffc90002e57340 EFLAGS: 00000246 [ 358.389252][ C1] RAX: 0000000000000000 RBX: ffff888035ad5780 RCX: ffffffff826f5b71 [ 358.389261][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888046988000 [ 358.389270][ C1] RBP: ffff888035ad5800 R08: 0000000000000005 R09: 0000000000000001 [ 358.389278][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 358.389287][ C1] R13: 0000000000000001 R14: ffffc90002e57920 R15: ffffc90002e578a0 [ 358.389299][ C1] ? vms_gather_munmap_vmas+0x6e1/0x1720 [ 358.389319][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 358.389334][ C1] ? mtree_range_walk+0x72b/0xb70 [ 358.389357][ C1] ? mas_walk+0x260/0x310 [ 358.389376][ C1] __mmap_region+0x4cc/0x32e0 [ 358.389393][ C1] ? __pfx___mmap_region+0x10/0x10 [ 358.389411][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.389439][ C1] ? mt_validate_nulls+0x22f/0xae0 [ 358.389465][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 358.389482][ C1] ? irqentry_exit+0x24d/0xa10 [ 358.389501][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.389520][ C1] ? lock_acquire+0x1d1/0x380 [ 358.389535][ C1] ? validate_mm+0x1f1/0x4e0 [ 358.389561][ C1] ? irqentry_exit+0x24d/0xa10 [ 358.389583][ C1] mmap_region+0x3db/0x6d0 [ 358.389600][ C1] ? __pfx_mmap_region+0x10/0x10 [ 358.389617][ C1] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 358.389631][ C1] ? bpf_lsm_mmap_addr+0x9/0x30 [ 358.389651][ C1] ? security_mmap_addr+0x71/0x1e0 [ 358.389672][ C1] ? __get_unmapped_area+0x255/0x3e0 [ 358.389692][ C1] do_mmap+0x12c7/0x1c30 [ 358.389714][ C1] ? __pfx_do_mmap+0x10/0x10 [ 358.389732][ C1] ? __pfx___might_resched+0x10/0x10 [ 358.389747][ C1] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 358.389762][ C1] ? security_current_getlsmprop_subj+0x6e/0x130 [ 358.389781][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 358.389804][ C1] vm_mmap_pgoff+0x28d/0x470 [ 358.389825][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 358.389841][ C1] ? __fget_files+0x215/0x3d0 [ 358.389862][ C1] ? __fget_files+0x21f/0x3d0 [ 358.389883][ C1] ksys_mmap_pgoff+0x3cb/0x610 [ 358.389902][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 358.389921][ C1] ? __pfx_ksys_read+0x10/0x10 [ 358.389939][ C1] __x64_sys_mmap+0x125/0x190 [ 358.389957][ C1] do_syscall_64+0x123/0x790 [ 358.389977][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.389992][ C1] RIP: 0033:0x7ff8bd736242 [ 358.390003][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 358.390016][ C1] RSP: 002b:00007ffe58b67098 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 358.390030][ C1] RAX: ffffffffffffffda RBX: 00007ff8bd433000 RCX: 00007ff8bd736242 [ 358.390039][ C1] RDX: 0000000000000001 RSI: 0000000000008000 RDI: 00007ff8bd433000 [ 358.390048][ C1] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000024000 [ 358.390056][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffe58b67120 [ 358.390065][ C1] R13: 00007ff8bd70bab0 R14: 00007ffe58b67510 R15: 00000fffcb16ce16 [ 358.390081][ C1] [ 358.998974][ C0] rcu: rcu_preempt kthread starved for 10475 jiffies! g24133 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 359.009976][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 359.019925][ C0] rcu: RCU grace-period kthread stack dump: [ 359.025789][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 359.039268][ C0] Call Trace: [ 359.042529][ C0] [ 359.045447][ C0] __schedule+0x1259/0x6920 [ 359.049943][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 359.054881][ C0] ? __pfx___schedule+0x10/0x10 [ 359.059722][ C0] ? find_held_lock+0x2b/0x80 [ 359.064392][ C0] ? schedule+0x225/0x2c0 [ 359.068713][ C0] schedule+0xdd/0x2c0 [ 359.072770][ C0] schedule_timeout+0x127/0x280 [ 359.077608][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 359.082970][ C0] ? __pfx_process_timeout+0x10/0x10 [ 359.088244][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 359.094041][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 359.099490][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 359.104241][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 359.109516][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 359.114443][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 359.119634][ C0] rcu_gp_kthread+0x17a/0x220 [ 359.124299][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 359.129482][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 359.135279][ C0] ? __kthread_parkme+0x18f/0x230 [ 359.140296][ C0] ? kthread+0x13a/0x450 [ 359.144527][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 359.149709][ C0] kthread+0x373/0x450 [ 359.153773][ C0] ? __pfx_kthread+0x10/0x10 [ 359.158355][ C0] ret_from_fork+0x730/0xd60 [ 359.162936][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 359.168038][ C0] ? __switch_to+0x800/0x10f0 [ 359.172706][ C0] ? __pfx_kthread+0x10/0x10 [ 359.177290][ C0] ret_from_fork_asm+0x1a/0x30 [ 359.182057][ C0] [ 359.185059][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 359.191365][ C0] CPU: 0 UID: 60928 PID: 7454 Comm: syz.3.386 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.202458][ C0] Tainted: [L]=SOFTLOCKUP [ 359.206760][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 359.216795][ C0] RIP: 0010:smp_call_function_many_cond+0x577/0x18c0 [ 359.223458][ C0] Code: e4 74 50 48 b8 00 00 00 00 00 fc ff df 48 89 ea 49 89 ec 48 c1 ea 03 41 83 e4 07 4c 8d 2c 02 41 83 c4 03 e8 0b c8 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 51 11 00 00 44 8b 73 08 [ 359.243049][ C0] RSP: 0018:ffffc90003d075f8 EFLAGS: 00000293 [ 359.249100][ C0] RAX: 0000000000000000 RBX: ffff8880b8341900 RCX: 0000000000000001 [ 359.257055][ C0] RDX: ffff88802bb28000 RSI: ffffffff81ff7e45 RDI: ffff88802bb28000 [ 359.265010][ C0] RBP: ffff8880b8341908 R08: 0000000000000005 R09: 0000000000000000 [ 359.272965][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 359.280919][ C0] R13: ffffed1017068321 R14: 0000000000000001 R15: 0000000000000001 [ 359.288872][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 359.297791][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.304360][ C0] CR2: 00007fd1f8449e9c CR3: 000000002dc94000 CR4: 00000000003526f0 [ 359.312319][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.320272][ C0] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 359.328225][ C0] Call Trace: [ 359.331485][ C0] [ 359.334404][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 359.339594][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 359.345912][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 359.351101][ C0] ? rcu_is_watching+0x13/0xc0 [ 359.355856][ C0] ? trace_tlb_flush+0x14b/0x1a0 [ 359.360781][ C0] flush_tlb_mm_range+0x3c9/0x1360 [ 359.365890][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 359.371444][ C0] tlb_finish_mmu+0x3fe/0x810 [ 359.376110][ C0] exit_mmap+0x454/0xa00 [ 359.380349][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 359.385101][ C0] ? rcu_is_watching+0x13/0xc0 [ 359.389861][ C0] ? find_held_lock+0x2b/0x80 [ 359.394531][ C0] ? uprobe_clear_state+0x5f/0x250 [ 359.399641][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 359.405281][ C0] __mmput+0x12a/0x410 [ 359.409336][ C0] mmput+0x67/0x80 [ 359.413043][ C0] do_exit+0x83b/0x2a50 [ 359.417192][ C0] ? __pfx_do_exit+0x10/0x10 [ 359.421771][ C0] ? do_raw_spin_lock+0x128/0x260 [ 359.426783][ C0] ? find_held_lock+0x2b/0x80 [ 359.431450][ C0] ? get_signal+0x7e0/0x21e0 [ 359.436032][ C0] do_group_exit+0xd5/0x2a0 [ 359.440531][ C0] get_signal+0x1ec7/0x21e0 [ 359.445031][ C0] ? __pfx_get_signal+0x10/0x10 [ 359.449871][ C0] ? do_futex+0x190/0x440 [ 359.454197][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 359.459736][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 359.465887][ C0] ? __fget_files+0x21f/0x3d0 [ 359.470568][ C0] exit_to_user_mode_loop+0x139/0x700 [ 359.475932][ C0] ? rcu_is_watching+0x13/0xc0 [ 359.480687][ C0] do_syscall_64+0x661/0x790 [ 359.485272][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.491150][ C0] RIP: 0033:0x7f67c119e1d9 [ 359.495546][ C0] Code: Unable to access opcode bytes at 0x7f67c119e1af. [ 359.502545][ C0] RSP: 002b:00007f67c1fde0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 359.510950][ C0] RAX: fffffffffffffe00 RBX: 00007f67c1426098 RCX: 00007f67c119e1d9 [ 359.518906][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f67c1426098 [ 359.526858][ C0] RBP: 00007f67c1426090 R08: 0000000000000000 R09: 0000000000000000 [ 359.534809][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.542763][ C0] R13: 00007f67c1426128 R14: 00007ffd3e7f7b90 R15: 00007ffd3e7f7c78 [ 359.550730][ C0]