last executing test programs: 8.410153698s ago: executing program 3 (id=1251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xe0000000, 0x0) pipe2(0x0, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 7.421189758s ago: executing program 3 (id=1253): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) gettid() r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 7.096093068s ago: executing program 2 (id=1254): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x1c) socket$packet(0x11, 0x3, 0x300) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 7.020861471s ago: executing program 1 (id=1255): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffff8b) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x14) 6.116173505s ago: executing program 2 (id=1256): mkdir(&(0x7f0000000380)='./file0\x00', 0x100) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) r1 = socket$inet(0x10, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r7, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) r8 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.854580642s ago: executing program 0 (id=1257): syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='afs_folio_dirty\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x1010, r0, 0xf4b39000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfffffffd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1200000004000000040000001403000000000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x42, 0x0) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x9735646a3e1ba35, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="4c7c7004d3090792601d1b8d96b9bf28d75ff3adf4ca8084a0f2cc2fcfc8b7c50e931bea0168201b45405c228069bedf", 0x30, 0x7ffffffd) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$OBJ_GET_MAP(0x7, 0x0, 0xfe2f) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x4059, 0x204000) 5.690206032s ago: executing program 4 (id=1258): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) keyctl$join(0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 5.531179516s ago: executing program 1 (id=1259): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000000040)=[{0xa000002, 0x0, 0x0, 0xfffeffff, 0x1ff}]}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000006793000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)={0x2c, 0x2d, 0x1, 0xfffffffc, 0x80, "", [@typed={0x8, 0x104, 0x0, 0x0, @uid=r3}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x6b, 0x0, 0x1, [@nested={0xc, 0xc4, 0x0, 0x1, [@typed={0x4, 0x13d}, @generic="fbf08a51"]}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4}, 0x5) r4 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x501400, 0x10) mknodat(r10, &(0x7f0000000240)='./file2\x00', 0x1, 0x9) 4.818501265s ago: executing program 4 (id=1260): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e}, 0x94) 4.448943077s ago: executing program 1 (id=1261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000ffff00000000002080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, 0x0, 0x0}, 0x20) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000040)={0x7, 'vlan1\x00', {0x4}, 0x800}) 4.267163836s ago: executing program 1 (id=1262): openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000002fd010000000055f5722598a7e508000100ac14140008000500ac1e0301100016800c000100000000000000000406"], 0x44}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) 4.180131318s ago: executing program 3 (id=1263): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x3e, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x2e, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1, 0x2}) 3.575234345s ago: executing program 0 (id=1264): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYRES16=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x5, 0x1, 0xfffb, 0xe06, 0x7f, "3f3c5e0000ff77dcfffffffff903ffee00", 0xb1, 0x5}) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) accept(r3, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}) 3.20167482s ago: executing program 1 (id=1265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x3) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = syz_io_uring_setup(0x496, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8002, 0x18c}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) listen(0xffffffffffffffff, 0x0) gettid() r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0), 0x0) close(0x4) close(0x3) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000200)={0x17, 0x21, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1}) 3.118940603s ago: executing program 1 (id=1266): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) gettid() r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 3.118544185s ago: executing program 4 (id=1267): r0 = open(0x0, 0x103a42, 0x80) getsockname$inet6(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast1}, 0xe}}, 0x2e) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000006162636465666768696a6b6c6d6e6f30"], 0x18, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r4 = userfaultfd(0x801) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000200)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x6, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000042000b0026bd7000004000000300000008000200070000100a0001"], 0x28}}, 0x4040080) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf250000007c", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c000280050016"], 0x3c}}, 0x0) r8 = userfaultfd(0x80801) personality(0xc) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 3.082801129s ago: executing program 3 (id=1268): openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r7, @ANYBLOB="210f000000000000000020000000", @ANYRES32, @ANYBLOB="641a9f25912ef318dd9b4aa088ca98f868265a8f2b4e94e0b825a3947ddcc63df13a08cec9ed35be03af399f384a753eba9b5b4610a067d908a79372f775f7221f9890bf19a61bef9451b01c7594061b66f67e6632a43d0f25d3e471dfd3b9833c8a4c5bab67d264dacd2b0492"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 3.019274019s ago: executing program 0 (id=1269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f00000198c0)=@ethtool_gfeatures={0x24}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000800)="ad76ce7c11976b59315952ccedbd23e49ef8ffbb1f39fb00ae77600c1ec0e988944663f06c8890d6851933c633b9114eb2a191aeb95fb76967c9a8e0d99b13cadcae771ecca7c6304ebf05e36b20b01d828c02c22e80a2f18855d3e02107c6e0044f09ea1338e614a71ae5cce36f9d9e8d413f78cd7a6426a05178c18a1be27227df5a075c6e6365109996d64a10a6f72bd44d6dcd99a4ded72c6954722caa23263b5d2259cb7ad89b521b8b6f00c6789905f2851a49cf98f6bd65255c990f77e2f9bf7d", &(0x7f00000011c0)=""/4096, &(0x7f0000000900)="45c2452d6f8ba31386dca30325f207b4013096e87a322284f6f24d5714589b4045a4e7f3eb55afb1091f723dd12aa2bd730f50fddb8bacb3776c501ac0ebd79aff35c18eb979d3af4ae3bd11d132a9065512ef0c53abf5458cd4f012fc468100f0e642c3493f8cc76d0fb28659b4642c04837f3648a142e3dd383864082ec45461e9b570e87e8d12816c833cd2a577cac8e8e6e51227423ba35af89b42d1e74874a6", &(0x7f0000000000)="e1c35e4b3f88d58fd69cfd0f0b2e0e256a423e17c48620ed899a4cb67888ea7479adcf0143f003d0ee6c532ea8400deaf733ffb50f", 0x40, r2, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r5, 0x10, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3f, @loopback}, 0x1c) 2.955095039s ago: executing program 4 (id=1270): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) keyctl$join(0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.874630316s ago: executing program 2 (id=1271): syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x10}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000a0", 0x1c, 0x3a, 0xfe, @local, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x40, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x1, 0x2, 0x0, 0x3b}}}}}}, 0x0) 2.674707389s ago: executing program 2 (id=1272): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0xffa4, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) 1.649992036s ago: executing program 0 (id=1273): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="20c1249d155a8507ad4bc2d61e41e530c86c9d6bbe46e0563b8bdf075702d876f891943592f9ab85a6dcb21c93d1ec1a27f313e24e7405d6cbc42be896a26344a654cd6e233be227e5c04217d1142b91d895c9a2858c20337ad92816412d9aa85d93ed6cc4a7e7712bae207671b32006cedeb71b322d1cf57d6a9d51f8251708ac3d62f054231968bdbc6134b4acc8545300b5f46a2aeb3c1295665c98c3943984e4ddf6dec1f83ae4cc140cf486946f14", 0xb1, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$instantiate(0xc, r1, &(0x7f00000001c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'keyring\x00', 0x20, 0x8}, 0x2f, r2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x303240, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7ff}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x2}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x358, @private1}, @in6={0xa, 0x4e20, 0xffffffff, @local, 0x1}], 0xa0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000003c0)={0x6, 0x0, 0x8, 0x1, 0x8c, 0xc0, 0x37, 0x4b, 0x6, 0x2, 0x6, 0x3, 0x6, 0x1}, 0xe) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000400)={0x0, 0xb7}, &(0x7f0000000440)=0x8) r8 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r0) r9 = add_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000580)={r9, 0x4d, 0xdc}, &(0x7f00000005c0)={'enc=', 'oaep', ' hash=', {'blake2s-160-x86\x00'}}, &(0x7f0000000640)="d314e27a5f6a7931be49f36182869d08b1fc67cc2946d28aec37d5344833b2af6f2872de84d2a53abfcf5489e3d707e297f8912ee4e7d01f7bc01c85b477f19f551d1b2c46079fed2900a76824", &(0x7f00000006c0)=""/220) add_key$user(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)="3fbaa81694e8b7442d6cdd66df3ab0853de6245b71e49e20d2e6a4e4d9cb3141ecbc12bbc7f316b9af58246812432df10d52cd4830afcb3c62d2f1025389965d3d00ed699c2d9de5d1b67accc4b4120caa3a5d273932161971c2f966f5342e063f4ff0ac6bc4ba19dd3c8a04de9f21f73cd961b0c6552cd070f0869160aa078efc148545ecace23b04c8b9fa942cdd9ee0b2b33024475fb4239a567a8c050e0db13783b93bfc2546de10e47e3dbeec9dfafbcc7703285e669e7c840200b58ffdb4bdb0cc6a8b5b49d623da2f0ec9ed06d260b6d0b9b53511d59d32da17e6c72ad592edb675c02e9cf4103f248fbded8ee4ea8e", 0xf3, r8) keyctl$search(0xa, r8, &(0x7f0000000940)='rxrpc\x00', &(0x7f0000000980)={'syz', 0x1}, r8) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x6000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000a00)={r7, 0xb9, "a13b2cf8e2a8e3ab73cafb70894feca74869d750a4510b714d1dcc5e77e2b88c0f6def9b4482d22ed5ec22644280592fb8a1b91701cf5575fc3ec3333ad4ccf110488265b0852aac448b404aabe1f93ad51e5764df56a36416ff9650b7913c701e5c92e7f3d452da73ba237e9d4d944f19a01a014c2d9a53702af541a24113c0a8110d7de23a8f340a0f89ec155bc50c100414674b00382bceba699e2d9550b91ffcb4ee043c0309504b5d8d49396e8e1f49751596926fcb6b"}, &(0x7f0000000b00)=0xc1) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000b40)=0x0) r12 = getegid() keyctl$chown(0x4, r9, r11, r12) r13 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000b80), 0x80800, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000bc0), 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r10, 0x3b88, &(0x7f0000000c00)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000c40)={0x48, 0x5, r14, 0x0, 0xffffffffffffffff, 0x1}) r16 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4081, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r16, 0x54a3) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) r18 = gettid() sendmmsg$unix(r16, &(0x7f00000064c0)=[{{&(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000d80)="3d212e690e032e4862c09906ed80655ddcc487c6663311ddfbb223cf81766944314fadd77bc2ee4a07e7192f56024c634dc5211b39e17404eddd61e2335cb77e247281fc9c5b017ca8ffd130e7ee2b0f407a5eb5eed46c106b101f74da7953d6117ccd202fe96dc93b1935d7be852f3f234a5d0354a48918ebbf33ad82b099b5660af5a09d463a368af2c8db62304ed72c4bafab2d39", 0x96}, {&(0x7f0000000e40)="eb03e91ef491d3b406f3ee60c33092f6f341bdecde9c3a21a6ac4207de10213834eb87a4ded1202dbc92275ae4e0e3dfe5690b9da089a1cc8f8caed92592e12310a5c8c5c2d3a15424cc9c91a0c05680407644ec854abd1ad6af3dfb35c3da836dc40c38d5a722e1049b5b11dd63267b6253f84bc7d2b478f6ad3dd7fd9f72ca35ef6ff310e5a7de36f43f671f4b13ac51271f0d44a9a4", 0x97}, {&(0x7f0000000f00)="be20fd289fd032935ebb964cf74447fff7399046545a914178e2c9ac6e0f60e39f592e42f451fad945ea0a6dc85dd5c9785608d6b83d06638f9fcfbaf617253c76313d664f03cb4e40e64872449ae8566e07690bd41824eb0168ec4ec64bb6c4149d52353e738efc1826bfbd97109bdacff4a34e164606b66f8bbd835364d810967d191bcc8b0fc529f230356f94fd9dea2ea246cd5330269e6d9c940fab41fe8e8b6e93a39df15a928713150597c187b358f08ba3cd266770840689231f8156f3d813578f077f3fc6fd3c19cd4154bd86fa63a7c35c197b70276cf5d3b50c18f9be0d36c09ddfbdc639a84eda41ef97f2917258181d2c43ceca1d196e45d074c218dcbf08f95572ce5e38c4ef99b5be498918d8b2b968a06d94542863ea57ef050abbba9c3605be3cec2060ea8f3dcaf1a38876a5b5ea01c7c64f684a8de49b30ab67e5d16b60d5e5050814ec45c5fcb73820876e371dfaa44232abbf09bc048f507c6df9b27a071e5e1f6a7339ccb360709ecedd3d45bee40751cefe126f50c8a361b3b926657b90e8de9394cf32f84080eae357e5c0e684af227058b9f200f28eb7ba328d86dea94f0652fa19a0e29cd5c6a41d9566ccbdc3d6ea4250466cb5ecd8a4238ed10f856415d93e29126fb6b709a64d83493d2ba59a773b74ed96c5650a84e0f747a11f4ff98c228f473472de9ef116a607eb5a66c3491a69cd9d701824547b29c2f408919ebe6d92126d0662d9323f486f9a5f54a8f6dec649f2ba7e4cf25b207d75d9423c770a6786b201e26de135ff8afd0903bfd4d9e03d7ba1ee42fa41dba459f4d7abf7478081240350f77b91229380e229afad2deb86841cb460c057a1ca7bb53b8e29f00609b43e2096d0c78af3f2eae70b8e7ad41d6c0d8eb3921fd8178aa9ef751a2cd4dce7a6d0791af0bf8af51a60a3d5aaba0ba82a7de73ae7223300cdcd21660b401060075b9a8cd356788846959ecd9db1ddb57fee0a0518ac927ff27d816efbdd2a1661583befeb2a44409a42e8693e163aa9ecd0d2d5315c49732f5cda090c3812d8c468abd8d7111de60ebbe30837648dd6bfe072418f07019a736e7cc8e1dcf181f660a3c721a19032780e1bc2deefe9064619b9693abf8736979c6d76373283d0ec1d260f4e759cee9c45380f2c177f7f700f192e7f15bc5137b2519916c9772f0d14475b176e1e722412f01a3d17f4433ddf0fff74e79461de1bee9f46e2a9cf0d348c1379bf4238100a64f21447f60ebef9da3307cc4930de0a48f51eb89e0f0f9505584809d9df50f958bfa7106f0c930eb64a8551956ffb23758f1a70b6c3e04b045571041cd8430078e170c845a0b084c8943e4d5e97e66600110769643e251dbce7435d6a7687444c80806b2ef3b9c20cf41651a5d52979d57d38700f7b29d7b429bbf243cd2252cd32c3fe3904677c22dd665ef0c635150ede22d84729ac868590d7f5d4be5d4959bf192749a66ecf05c655f3b115978ee859ebf15ea0bd50c006ec83fcb3db3113a9ea25c94935f6a106069616bb3d95d25b9e744bf25e0f002fd4870116b7fafb6c03e466e8483168c384da632604c3d15ead5085fba516114f48e481f4b58611cd6590d5634d5927e834f7351b7a4c816e5a9afaf8f12bdb103291ca52349ede21d55c3440fe528f4733ec63ceb6fcf09f3f2835725d8a89486d18d17799aad0a37aa0f4d378410b5bf73c80d213d22a69e7797c83c04654901f3240487ef1f47be524d572ccd8b0dbbf5ae81366fc5e78545c53d5c433dcfdb4a046bf36cc4e8037441839f811129b4beff3119a44b9d873d35e40600208f634dee7375cd4e3ab8f008dc618b68b9d3c6975c73cdeb7559d433daaffa9bef1f19a334b587ff7266f269a4b709026f16335f62c0fb53b1fe1fcfd8eb1e1cf7918247d2577209e0ac02b4b0bd3d0508f36d521748533c3dc48f4655d48ebf98a65140cdc351f85b04d9656cc145e7f4c0ed01b199023fc4800e960c1817368765dd0e5d161b35bad86da1a6a070a595a26eee201048637f5ea4d8c415545ada7b5525f88e1a6162eb7346c73526c8afe2f017ab093884a1786246f01080455851b397490dc77c43eb1de883a7c9a7a5b5d68631f53c6e713338434e507d230f8e59939390dbebb0689c469e6e37a7d614f491041e2ab5c68f1ee08f985fd6783a068c73611132529a0b8730ec5289647449375cd9d5de5ea15f43eb2e4d49ecefba6e0fc0b885e38c0cb36f76d0c9ed44296705cc42dfd30967fa1c42224bae1e4a703197edde8fe1e1a01650ad4bf35d808ebb33a85ffc1e20755f791586028850a947ebddef3dc04929bd42d4eb24e7d1629a46a1d7871a1ac36141cd5656ccf0a83f64ba3cce76eca3296b8227a6f0d748c2267340ffa22d2cc797a08392ee227059afb00f23bd95135d473bd0831811879634cb305c47e3c2f118a64bcd2e3b1f62f37a556afa75b88bc5b30ed8a7c5155efdc5ee61ed9abd6796658abaced27bb97bd32e8bd6f68c43237961964e54868f035fe5dfa2ebf37c6716dc2ea7a21c1aaecb24ed708e5c1803a90595ebf203bdb093b7c0da31d3b345519b9b67a84dbf4bf92d8cb0feb660b8a95b05d29e3ba46f86a01b39514a0fa2a490953758955a62912ae3475afb89ad634c005d1d7b89d5e37b55bd27c5b616813caf414bf3f47871e318ec16fcd6dad1df69c91fbd2d05d75339020423c9b7deb3fa3e9b16182246244e8983cf7a7a442c6c9a1c63793ac86c3aee46c58e377889c92938a990343063fcf266ddda049ca987003039b8acebfdd3b303fae7ebf6c486d468ef4af82d163525ad40844700ab0caa3feca865334ed5699071c0a30c3a74a5a6222b6a3380c6cf8f416de83c0b3d19bd028c01df427d20afba91977e43eceb744d149964c2c142f9b328933fc6cf2ecf4d1553236c9d4fc78e7ca859015759834b01853cd7a2dec2c57b8cfd075171edda32fbba7a50c4f43d06dddbb8e95f7631dc805b4708b77fefa8475a8ab599d85ca3851857b9f227da83d973db8606e980ecab184615613458b208aff5a0f878a8ddca56d0946830022b2424bebf24372f8dd59bcaef45c573aa9a71cc0823a590e26af2193da67390019cc5e24ab70a4e0b5709485e2c9e5d162b737bd749a7e3dd48842c721d77b646ff9a9f21e7b97825968c19be2cdcb13dbcd72bbc58370325fcdfb4304ff91e92519d67680d526f5162a1f1b5c21cb9dd52caa33b4bfe6858aebb2322e3ec56d90e7bdee95f9a16a24c01030012440cf1dd78016bfe730a71dfc9c11ab515eacbcedefcf50a3e32408fa88e6712f853542fb721a92c6ed238d7639ec54d8c3a5be107a7d623eda746161a364147414760704f62073de5f5353c663ae9f4aaec56cf23793257a5e2fb6eb9f5d8485e4fde3cef19b7881aa7417052d9105734f7ae13a43b5d493637f4d6f7d381931e90bad47f2a914d6feb9f0485a704308fd5264f3b16f350b8fff37395d55088920d4d64e8c64f58329423eec26ef575f25463975822bd233dac6c4f3b9d18991a5e9128cf04684194d68dfcf9c52bb240a6791c70c16a476e5f257c211e3db40f6388d68e09f17460cbaa19deeceffc879af155dc93cc63e59e9c9902a82589b1c66b65b7f2df298942b38e39e4c6040d3be8f891fee5c4ddcdf2aee5fef6c805aa21dc69eba724e6e69773ce8df7f784c8f6506a2bd75f5e9a3c6c582a6e548efa1297ec44c1932679a925688766f101e2eeeec43c5d7b7afa8eaa0f277de3a7d38f8685f2a801a4bb362edb57459fc6caf8373e46633ac32c3c7e5805b7d31cb0749b2af5ad4b137923af4148a885d0157e968d588a077f3c6bea4b8e6e7410382c70d9e0b0dbbd5c850bdb4fd7886325e6c1406edd38e92f3f3c34d7d039dea45d038d091b25cc1b76c31fc005489b4572c5d78e28af7112bc19c7d91ae135eb40fad888f50fd840ba17855ec4b15411004ec8c8b10bc27c22b3622d097e49adc674d1a3dd7457c2d720c584c59d4008c5f604e9da88a1bee94fa7f801a2c53af8c0244e571cd803cac253263eefd697fbcf33c1e9099448493965844014a1621bc0f39567c5b7a738f79f8b1e5abb57f88e66d5945ba9d8c5ba286899aafe03b066e0302ad075ecca586b19dc93ce73926e837afcd633e54adebd326a3de32afaaf58d772d21cfbf3a01d1d43440d78a18c32f1299ae2699f3de5929ff9dd3095cdf89496600cb468c2153583096067074ffa1c4856beb8cb3f01a39825c83152d5daf7e6f7e02a9f9215452f15217cc8014eea42516db0e26ea6a15313e95619f1f078cb888b002731c0cc09aab65c3a8c11dbd9ae0fcbc44ffce5d766ce9175e9150820e3aff66af5126792fbc2bd452ea78ed71b10c40202cdde1defebe12194fa7d2b7f5f2fbbd304c3ba52593e4769818e85b57bfd7febd090da3e435f6e79c9354659d54e6218164580c7afa2c7e854c0095d5454304b9fb504c02116cda08145ff2dae5d670faeee6ca6e6e70c4255c5f5089e789bb04751d1d23df0500c4a3aafe3bccb59195cb529fef6e97b54cb2036c16c59685bda8b71d23e20008dd1048450149b8ef7c55c83a1dcbc1f69fa5600015a9b5e77f993193adceffd8d32921dfd11f4d7a68647436ee0c078811c4e32ba141ca8f7a7dd284bc5a607e2f6ec2565da816023b74f27233957eca74a7a804ac4f6fa72c02f4029d2d2dd147cc2a7970a84d79f9fc46e3a8ca552b657f2411a02df229fdce29161a02fc0d237b2b49326878721d2c326b9256ea6f913231c9c920b4973bc2fb4e04d9a292fe2869e6e062615053aa5522e4f43ae37427a3118d5f7f1c4351fc3da657617a99c223451103b84f5c0655254c8f70cc28a6bce90dc879d0f07a08121d1dfa72090ace2dd1c694aeed67641b87a29bf93de3334342c0604cead9cc9db6112aa7efa22f5ee689540f7d6e8e62d2a26be775365502e28da45a7506f0781a58d12ff9a152685fe14e3b981d626e7be7f4e81082f7841e25cd394d8f0853689eb6fc1689f105fb617bcc604eb1135b467324ae4108707cf69cf55b64738f453cf15e53bd0da8cff3dc91fb85338a090da22c720c519664fd5b3d94327fa367bdf8b2dbe4eea2144a27147e4fc07c2ee68210fbc7a14125408e62dc325d7000f4f50a761eeaba7acb94d0a4fc5ca6b4c78263b0bcc249e39ca7611eb120c10bfc53cc34f636dd10f30ed142bd81b8687baa4bf28633d4525224e42d3de454e35fa8c074fb5db2dc0886aa1d2b1f2da60294938bf26625eca8c452b8fb0b49517e8a378c9248d09728e1e1b142e64797e390aff3ef3705a42a8e0d0bcdbb91733f7d73fbd5292fe7b9fe9e495bd05ee78a1df78c59f2dc50e89d52b1b63a864d80e7b98bbb803351d3b762059f2ef8c1005302af19f507ca91e63975186bd4f65c4f5034f68609b934e5184a249e915b07339104b4be235185da5b2a2d18e05809e6755693eb22b6b277c4a208686eaf6e460977bf0f90e3ded9a19151d47cd78f65b27fbd1effea3c43c9d7cfa591057fbe6ab11e229709e973c0d398fff9d4e199c92fdb3533f13015a15d6495c98c6028b84b5807d70b031d0b9f6cd49bbb6588cdc71ed0663ccac541115fa877aacdce3af2a5c526d290a0c26c187a2307489592bbf4d846884df818fc0d1df03d8b61fe5f30a3d53017442533ad808d9ff85d2972173549085d7aea1460f20820e40ca619b8be36f8618aee19526eee7be2fd27", 0x1000}, {&(0x7f0000001f00)="c3a2e4978aba16d1c229e979259cbeffc3f3b120a23cd13ce409eba843a5df78dc911ea163a7037a3e776244c5878af969975e8f5b1f3a9cb9ea2d372c33571c1d059fc073788d9b93c84df1f7f84d18094883ecc453aa5bd10c656b5d9368c40bf15fab3af042642fc34ab313f4872e9af586319f2e4a5feacef7de1228bfc7f28ae67a6f45", 0x86}], 0x4, &(0x7f0000002180)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}, @rights={{0x18, 0x1, 0x1, [r6, r17]}}, @rights={{0x20, 0x1, 0x1, [r3, r10, r10, r3]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r18, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}], 0xd0, 0x40040}}, {{&(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002300)="930f8553dc2285b22fecf8d10c7b5ee65a8a154aa3edfd6e1ab6e64b88f3b74f214e90160c6e810c2852606e5307d0705ea436029725669e3d2bdf4179c0945c885d87a2317df2af08c0657f325ca4b69daea1b281365abbbfad30fbc78065b0b8cd24c30db26826ed7a810a400d246ab5d2899af0f859e7b342ac84162c25df1466412f271e0be9d6519d2dac89fb753dd38dd5a23ab13c741cfea222c2a166ac0879a30dfaef6502ad3e3a4024cd9a8ebdd0d9237303e529465f36beb66087c6e829", 0xc3}], 0x1, &(0x7f0000002680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}, @rights={{0x24, 0x1, 0x1, [r16, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r6, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}], 0x128, 0x4081}}, {{&(0x7f00000027c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002840)="3c3fa63ebbbdba48572885cc57a376c9e7428af659457750ecf795425309b0c83e12cb87ee2b19f7900e6e8da21e8308cdbae127b4455a65138e644a0cfd340abecb43a2a8b758", 0x47}, {&(0x7f00000028c0)="84f6923571bb4b9ba83ea78fb4ed714d0a34595b93ec910f66c592cd17ea57bb926abb8dc9a10945389f7e6f3096ac18f1731ffd1224e81e12fe1d3c4c7babbdd343de9fdc35e8b6ef69a7f6f32764f08c579e668d1c674c6305bac4e663c03665a690b43435c5ae3bec0d274dd445fe9079ab453c4e0c44e73f72cd39fd0087d01df05e8f4585974568f62daf657c02a363f6d160870dbe17ac93edf106864f9e68605ec593b36d73bac2266ad1077c861f1a84dc82b6499643ac28750b93f5f547a225b7be02ebd2dead38060a7325cbb4d38e4a8e0ef5c7898c1023f3373bb09753", 0xe3}, {&(0x7f00000029c0)="662fd4e543185d52b98ae0ec04ac5beb6bc2e1137608e4aa114d5f8826d647c4a83c21812a956aca1c1b9975eb25c2f88593c4f1ee7717fbcae77b50d76e327ecb9e7b889e7d39baa312d315fecc019dcfed4cf8e3b75ddfe691e4c0800cb0f4913929", 0x63}, {&(0x7f0000002a40)="3ebac2cdc233125f393a690a5edcfbd1c7da858fd045dd900837807fa0f5dd804e07666e221a4cbeba94441ecc745ded74df00d1f460cf954a567952294bd1bb3f05217b628a13738e7a474205cff76282919bb7c9ded01fb0f42fd4d2a4cf0b5cc8cb219a57b819b42570cd171144479a6593b41f8e282065b26ba5198e0f6e293410a6c8c2ac89162f21ee865ce82930ad41f87d832d7db2ef146ebb32d4abbbb9bf40d8fbb171ab74232d71f76e524860fcd929e86d13dcfef10ae2e6883f1c175646e5b74e341d", 0xc9}], 0x4, &(0x7f0000002cc0)=[@rights={{0x2c, 0x1, 0x1, [r16, r13, r6, r4, r5, r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}, @rights={{0x2c, 0x1, 0x1, [r10, 0xffffffffffffffff, r13, 0xffffffffffffffff, r16, r16, r16]}}, @rights={{0x14, 0x1, 0x1, [r15]}}], 0x98, 0x8000}}, {{&(0x7f0000002d80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002e00)="fe9f0299172e5a59003fa3f77d96d7eb9da0647d6882110b2f54a9fea5218f6e3f9039c58b0a21e92ebdcdd201c70579bfabe2560667becd1a5737bcaf7a2b7ca1179b02387e83ab8921a2df9b98d3ee4837c26ee3b1fcaf0fb8950ed7aaa8b330b12775a102426c6ab2dcb2c6200ed74b6c9e28fb10c5d7f8b88528d2a0632a11818f13a77e8ec50e76526decf84c95bd97e188b70db7bdd58a224a14eac68193999f201712ac711cb25985fd601ebbe8c4219eb7469b4e8da51e6bd72bafb617decb364edf0c292a637ac32c930582359380d0ea5a7b8e7c63a3b560520f9b752cf9a82c7cb83eb805fc112164d2", 0xef}, {&(0x7f0000002f00)="61165efd38325a56d50f3a11f335140ef533165146f2314a644283393153036c5a346dc2e9131940179ea8ef414c0eca125cebbbcb720708", 0x38}, {&(0x7f0000002f40)}, {&(0x7f0000002f80)="5f4a731f4dca27394074a2842136e4887e0f26bf95ec4680c1bc3f28d4106ad4b7b0a2b93a9e47879ee94a703922cf447edf5c2c239b26c57821580b425a7f770be1c628b3df1eb2dab58dcd6f7b377d972148707bfd0e01753f7cd99255bbe70122ca957f583dc8ed9e3a7c0d5c75e6dba4db144bab795d80ce6300f22a4a8a5b1056ea05a596ce690ef86de4e0", 0x8e}], 0x4, 0x0, 0x0, 0x5}}, {{&(0x7f0000003080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="eadb6e692fe72922303d57081a62c5a9f6ac353541d20601f2033b05a62249b45e66aa192b5599a03c8ef6826316c70b01c4a5bf66d9e1774f509950e7a14aba5421a15a9e19", 0x46}], 0x2, 0x0, 0x0, 0x20000004}}, {{&(0x7f00000041c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000006440)=[{&(0x7f0000004240)="675d2554009a47b544e3d3780a7811fab79770f9b5a4eb9ebc093e6b021d6c97baab89d959d31450f7db9f8d5c12d67ed764ff0cc890d8d40fe144922a", 0x3d}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000005280)="488a887fb33401934b304b5d859662099c2b502867ebd49f68b2529b93622bb817e78d763fbc6e14433157e979acde5621a9a17d7ffdeb8e7563d1135bdec844983c9e61dc91785ac66638a45099eac1ab14940e96a5b450f261122d71d725b39c5cf1d402b9ccbcee8bc221e0dea35e4e8b077e0f0f197e5407c48a65e27dc37ded7f747405d9d0529e254cc8f9977f1df00cf72300b95259695fe5e7262544cb1e8845", 0xa4}, {&(0x7f0000005340)="14a74937c0cc54b6350eb4f470cdf421bd75bb171407386443a436dfddeba5256c0d5e7aa27ecf992e4bb639209316e01087303a", 0x34}, {&(0x7f0000005380)="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", 0x1000}, {&(0x7f0000006380)="c5772fdb90ed14f50a2685201419afe84c6b7717026bc7dc610f56d7c7ab37a8360e5566e90c3c3ee0007deab8dfa7da7f88ca20558a4b2c50ececcca5b836a19438a211f77ff5c4c73f44d4a718ddff263837564444612350de967b19468d3a43e5d3d38379b008110090ab491f9397a160cebdce8aa7edb875ee21158123e00c4e25ecda3f3dd89c74e49fc3e206f60c05a23f1a518a3641794e168be92ae02e830024805e7f2c18f2762fbae90a380cd0eb11f12bba930795", 0xba}], 0x6, 0x0, 0x0, 0x48000}}], 0x6, 0x20000010) 1.580372122s ago: executing program 4 (id=1274): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r4, &(0x7f0000004dc0)={0x2020}, 0x2020) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x3}, @sco={0x1f, @none}, @llc={0x1a, 0x205, 0x1, 0x2, 0x1, 0x9, @local}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x8000}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040880}, 0x40000000) dup3(r0, r6, 0x80000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.178517791s ago: executing program 0 (id=1275): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r1, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [r2, r0, r1, r1, r0]}}], 0x28, 0x800}}], 0x1, 0x0) (fail_nth: 11) 1.177971659s ago: executing program 2 (id=1276): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) ptrace$getsig(0x4202, 0x0, 0x2000000, &(0x7f00000003c0)) openat$vsock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) accept4$netrom(r2, &(0x7f0000000440)={{0x3, @rose}, [@netrom, @bcast, @remote, @netrom, @netrom, @default, @rose, @null]}, &(0x7f00000002c0)=0x8b, 0x80c00) socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, 0x0, 0x800) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0xff2, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) socket$nl_route(0x10, 0x3, 0x0) 843.247872ms ago: executing program 3 (id=1277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x3) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = syz_io_uring_setup(0x496, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8002, 0x18c}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) listen(0xffffffffffffffff, 0x0) gettid() r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0), 0x0) close(0x4) close(0x3) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000200)={0x17, 0x21, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1}) 733.907441ms ago: executing program 4 (id=1278): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e}, 0x94) 630.412877ms ago: executing program 0 (id=1279): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) r0 = socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8410}, 0x2004c850) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x4000000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async) r5 = fcntl$dupfd(r4, 0x0, r4) (async) ioctl$TCFLSH(r4, 0x400455c8, 0x8000000000000001) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xdb) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}}, 0x108) 204.399646ms ago: executing program 2 (id=1280): syslog(0x9, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000002080)=0x64, 0x21c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) fanotify_init(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x400040, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 0s ago: executing program 3 (id=1281): r0 = open(0x0, 0x103a42, 0x80) getsockname$inet6(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast1}, 0xe}}, 0x2e) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000006162636465666768696a6b6c6d6e6f30"], 0x18, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r4 = userfaultfd(0x801) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000200)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x6, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000042000b0026bd7000004000000300000008000200070000100a0001"], 0x28}}, 0x4040080) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf250000007c", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c000280050016"], 0x3c}}, 0x0) r8 = userfaultfd(0x80801) personality(0xc) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): rolC3/../uevent} for writing: No such file or directory [ 381.969744][ T30] audit: type=1400 audit(1757172914.886:1318): avc: denied { bind } for pid=9256 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.355886][ T5929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.420919][ T92] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 382.730964][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.767320][ T5929] usb 3-1: Product: syz [ 382.790378][ T5929] usb 3-1: Manufacturer: syz [ 382.857419][ T5929] usb 3-1: SerialNumber: syz [ 382.894195][ T9285] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 382.900791][ T9285] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 382.908400][ T9285] vhci_hcd vhci_hcd.0: Device attached [ 382.935300][ T92] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 382.971692][ T92] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 382.971714][ T92] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.971730][ T92] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 382.971749][ T92] usb 5-1: config 1 has no interface number 1 [ 382.971781][ T92] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 382.971834][ T92] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.974355][ T92] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.974381][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.974399][ T92] usb 5-1: Product: syz [ 382.974413][ T92] usb 5-1: Manufacturer: syz [ 382.974427][ T92] usb 5-1: SerialNumber: syz [ 383.005208][ T9292] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 383.007232][ T9292] VFS: Can't find a romfs filesystem on dev nullb0. [ 383.007232][ T9292] [ 383.161267][ T5939] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 383.262795][ T92] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 383.274834][ T92] usb 5-1: MIDIStreaming interface descriptor not found [ 383.345932][ T92] usb 5-1: USB disconnect, device number 27 [ 383.406035][ T6196] udevd[6196]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.437012][ T9307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.927'. [ 383.507876][ T9307] openvswitch: netlink: EtherType 0 is less than min 600 [ 383.659739][ T9287] vhci_hcd: connection reset by peer [ 383.684239][ T13] vhci_hcd: stop threads [ 383.689031][ T13] vhci_hcd: release socket [ 383.694975][ T13] vhci_hcd: disconnect device [ 383.810660][ T9306] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 383.980681][ T9306] usb 2-1: Using ep0 maxpacket: 32 [ 383.987726][ T9306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 383.997322][ T9306] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 384.018437][ T9306] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 384.030202][ T9306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.053270][ T9306] usb 2-1: Product: syz [ 384.159214][ T9306] usb 2-1: Manufacturer: syz [ 384.164372][ T9306] usb 2-1: SerialNumber: syz [ 384.275763][ T9315] binder: 9312:9315 ioctl c0306201 200000000080 returned -14 [ 384.823996][ T9306] usb 2-1: Cannot retrieve CPort count: -110 [ 384.839494][ T9306] usb 2-1: Cannot retrieve CPort count: -110 [ 384.850223][ T9306] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 384.980812][ T9] vhci_hcd: vhci_device speed not set [ 385.367479][ T5929] cdc_ncm 3-1:1.0: bind() failure [ 385.398887][ T5929] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 385.443738][ T5929] cdc_ncm 3-1:1.1: bind() failure [ 385.471685][ T5929] usb 3-1: USB disconnect, device number 19 [ 385.796370][ T9331] random: crng reseeded on system resumption [ 387.511693][ T9] usb 2-1: USB disconnect, device number 18 [ 387.651505][ T9345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.310673][ T5939] vhci_hcd: vhci_device speed not set [ 388.331921][ T9349] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 388.338509][ T9349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 388.346422][ T9349] vhci_hcd vhci_hcd.0: Device attached [ 388.378376][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 388.378390][ T30] audit: type=1400 audit(1757172922.166:1338): avc: denied { create } for pid=9354 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 388.432772][ T30] audit: type=1400 audit(1757172922.196:1339): avc: denied { getopt } for pid=9354 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 388.464241][ T30] audit: type=1400 audit(1757172922.246:1340): avc: denied { write } for pid=9354 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 388.562508][ T30] audit: type=1400 audit(1757172922.326:1341): avc: denied { mount } for pid=9354 comm="syz.0.941" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 388.615560][ T840] usb 35-1: new high-speed USB device number 9 using vhci_hcd [ 388.803882][ T9352] vhci_hcd: connection reset by peer [ 388.816330][ T1123] vhci_hcd: stop threads [ 388.820900][ T1123] vhci_hcd: release socket [ 388.825604][ T1123] vhci_hcd: disconnect device [ 389.388851][ T5903] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 389.560704][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 389.578790][ T5903] usb 1-1: unable to get BOS descriptor or descriptor too short [ 389.598701][ T5903] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 389.638411][ T5903] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 389.656763][ T5903] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 389.666646][ T5903] usb 1-1: config 128 has no interface number 0 [ 389.675276][ T5903] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 389.687301][ T5903] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.703672][ T5903] usb 1-1: config 128 interface 127 has no altsetting 0 [ 389.904622][ T5903] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 389.919747][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.936938][ T5903] usb 1-1: Manufacturer: 涤ꖆ䑠錏䟣薤䨙럑壝ᖻ㕫亥Ꝣ敺楅☵ࡡὠ쓾튚蟥℅㳎ꑏ阋떂겙屫༐ぽᛍ몳ホ麏띷ឱ⁖ [ 389.958684][ T5903] usb 1-1: SerialNumber: 为ᐩ墚쐸嵡꟬螌൱৹唋롭帏衷ꎶﯸ컝웖ᛷ俼捡ꊊ硋执狇郾ᎉ╷䓳ㄯᐥ也㘗対扶ۗ๓深꯫嶲Ⳬ衦쬝꒝㚼귪 [ 390.075383][ T9378] overlayfs: failed to resolve './file1': -2 [ 390.081528][ T30] audit: type=1400 audit(1757172923.866:1342): avc: denied { watch } for pid=9377 comm="syz.4.947" path="/179/file0" dev="tmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 390.585921][ T30] audit: type=1400 audit(1757172924.276:1343): avc: denied { mount } for pid=9381 comm="syz.2.950" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 390.921073][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 391.260811][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 391.284632][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 391.293565][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 391.304639][ T24] usb 3-1: config 1 has an invalid interface number: 48 but max is 0 [ 391.313549][ T24] usb 3-1: config 1 has no interface number 0 [ 391.319640][ T24] usb 3-1: too many endpoints for config 1 interface 48 altsetting 9: 255, using maximum allowed: 30 [ 391.330567][ T24] usb 3-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 391.341745][ T24] usb 3-1: config 1 interface 48 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 391.355554][ T24] usb 3-1: config 1 interface 48 has no altsetting 0 [ 391.411360][ T9397] FAULT_INJECTION: forcing a failure. [ 391.411360][ T9397] name failslab, interval 1, probability 0, space 0, times 0 [ 391.424216][ T9397] CPU: 1 UID: 0 PID: 9397 Comm: syz.1.952 Not tainted syzkaller #0 PREEMPT(full) [ 391.424240][ T9397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.424250][ T9397] Call Trace: [ 391.424256][ T9397] [ 391.424262][ T9397] dump_stack_lvl+0x16c/0x1f0 [ 391.424289][ T9397] should_fail_ex+0x512/0x640 [ 391.424315][ T9397] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 391.424336][ T9397] should_failslab+0xc2/0x120 [ 391.424355][ T9397] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 391.424373][ T9397] ? __d_alloc+0x32/0xae0 [ 391.424397][ T9397] __d_alloc+0x32/0xae0 [ 391.424415][ T9397] d_alloc_parallel+0x111/0x1480 [ 391.424441][ T9397] ? find_held_lock+0x2b/0x80 [ 391.424458][ T9397] ? __pfx_d_alloc_parallel+0x10/0x10 [ 391.424482][ T9397] ? lockdep_init_map_type+0x5c/0x280 [ 391.424498][ T9397] ? lockdep_init_map_type+0x5c/0x280 [ 391.424513][ T9397] proc_sys_fill_cache.isra.0+0x2e0/0x4b0 [ 391.424532][ T9397] ? find_entry.isra.0+0x1a0/0x280 [ 391.424550][ T9397] ? __pfx_proc_sys_fill_cache.isra.0+0x10/0x10 [ 391.424567][ T9397] ? preempt_schedule_thunk+0x16/0x30 [ 391.424601][ T9397] ? do_raw_spin_unlock+0x172/0x230 [ 391.424620][ T9397] proc_sys_readdir+0x8a4/0xaa0 [ 391.424644][ T9397] ? __pfx_proc_sys_readdir+0x10/0x10 [ 391.424664][ T9397] ? __pfx_down_read_killable+0x10/0x10 [ 391.424683][ T9397] ? selinux_file_permission+0x126/0x660 [ 391.424707][ T9397] iterate_dir+0x296/0xaf0 [ 391.424731][ T9397] __x64_sys_getdents64+0x13c/0x2c0 [ 391.424744][ T9397] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 391.424758][ T9397] ? __pfx_filldir64+0x10/0x10 [ 391.424786][ T9397] do_syscall_64+0xcd/0x4c0 [ 391.424805][ T9397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.424818][ T9397] RIP: 0033:0x7f1907d8ebe9 [ 391.424829][ T9397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.424842][ T9397] RSP: 002b:00007f1908b72038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 391.424855][ T9397] RAX: ffffffffffffffda RBX: 00007f1907fc6180 RCX: 00007f1907d8ebe9 [ 391.424863][ T9397] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000006 [ 391.424871][ T9397] RBP: 00007f1908b72090 R08: 0000000000000000 R09: 0000000000000000 [ 391.424879][ T9397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.424887][ T9397] R13: 00007f1907fc6218 R14: 00007f1907fc6180 R15: 00007ffd85e0d038 [ 391.424908][ T9397] [ 391.918953][ T24] usb 3-1: New USB device found, idVendor=110a, idProduct=f730, bcdDevice=f3.9d [ 391.928403][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.936958][ T24] usb 3-1: Product: syz [ 391.941443][ T24] usb 3-1: Manufacturer: syz [ 391.946129][ T24] usb 3-1: SerialNumber: syz [ 392.031431][ T9391] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 392.192796][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 392.199243][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 392.208580][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.210780][ T5916] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 392.233477][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 392.240866][ T9] pvrusb2: ********** [ 392.244861][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 392.255252][ T9] pvrusb2: Important functionality might not be entirely working. [ 392.263785][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 392.275348][ T9] pvrusb2: ********** [ 392.304446][ T30] audit: type=1400 audit(1757172926.086:1344): avc: denied { connect } for pid=9390 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 392.329329][ T9391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.338290][ T30] audit: type=1400 audit(1757172926.086:1345): avc: denied { setopt } for pid=9390 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 392.359457][ T9391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.390116][ T30] audit: type=1400 audit(1757172926.086:1346): avc: denied { bind } for pid=9390 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 392.421777][ T5903] usb 1-1: USB disconnect, device number 28 [ 392.432628][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 392.441605][ T2339] pvrusb2: Invalid write control endpoint [ 392.449213][ T5916] usb 5-1: config 0 has no interface number 0 [ 392.458464][ T30] audit: type=1400 audit(1757172926.166:1347): avc: denied { create } for pid=9390 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 392.496264][ T5916] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 392.505647][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.520056][ T5916] usb 5-1: Product: syz [ 392.524503][ T5916] usb 5-1: Manufacturer: syz [ 392.529635][ T5916] usb 5-1: SerialNumber: syz [ 392.537292][ T5916] usb 5-1: config 0 descriptor?? [ 392.549465][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.660907][ T2339] pvrusb2: Invalid write control endpoint [ 392.667647][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 392.677421][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 392.686932][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 392.699089][ T2339] pvrusb2: Device being rendered inoperable [ 392.744871][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 393.267482][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 393.279645][ T5916] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 393.368853][ T2339] pvrusb2: Attached sub-driver cx25840 [ 393.384928][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 393.387298][ T5916] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 393.406543][ T5916] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 393.414695][ T5916] usb 5-1: media controller created [ 393.432761][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 393.548495][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.557980][ T9399] pvrusb2: Attempted to execute control transfer when device not ok [ 393.581401][ T5916] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 393.623352][ T5916] usb 5-1: USB disconnect, device number 28 [ 393.751137][ T840] vhci_hcd: vhci_device speed not set [ 394.002709][ T5929] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 394.046879][ T5916] usb 4-1: USB disconnect, device number 26 [ 394.091666][ T24] usb 3-1: USB disconnect, device number 20 [ 394.171080][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 394.199691][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short [ 394.224447][ T5929] usb 2-1: config 4 interface 0 has no altsetting 0 [ 394.244584][ T5929] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 394.254057][ T5929] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 394.263419][ T5929] usb 2-1: Manufacturer: 㰊 [ 394.268093][ T5929] usb 2-1: SerialNumber:  [ 394.450684][ T5916] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 394.897997][ T5916] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 394.908073][ T5916] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 394.940398][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.952274][ T5929] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 395.382590][ T5916] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 395.400695][ T5916] usb 4-1: config 1 has no interface number 1 [ 395.407949][ T5916] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 395.407981][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'. [ 395.429673][ T5916] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 395.431825][ T5929] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 395.452626][ T5916] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.464335][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.464464][ T5929] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 395.480829][ T5929] usb 2-1: media controller created [ 395.505268][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 395.527039][ T5916] usb 4-1: Product: syz [ 395.531667][ T5929] zl10353_read_register: readreg error (reg=127, ret==0) [ 395.890801][ T5916] usb 4-1: Manufacturer: syz [ 395.961605][ T5916] usb 4-1: SerialNumber: syz [ 396.242678][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 396.242693][ T30] audit: type=1400 audit(1757172929.826:1355): avc: denied { bind } for pid=9439 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 396.289661][ T5929] usb 2-1: USB disconnect, device number 19 [ 396.352184][ T30] audit: type=1400 audit(1757172929.836:1356): avc: denied { accept } for pid=9439 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 396.507579][ T30] audit: type=1400 audit(1757172929.836:1357): avc: denied { ioctl } for pid=9439 comm="syz.1.965" path="socket:[20361]" dev="sockfs" ino=20361 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 396.776938][ T5916] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 396.788277][ T5916] usb 4-1: MIDIStreaming interface descriptor not found [ 396.861984][ T30] audit: type=1400 audit(1757172930.106:1358): avc: denied { create } for pid=9442 comm="syz.1.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 396.904446][ T30] audit: type=1400 audit(1757172930.696:1359): avc: denied { write } for pid=9442 comm="syz.1.967" name="tcp6" dev="proc" ino=4026533386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 397.024966][ T5916] usb 4-1: USB disconnect, device number 27 [ 397.197644][ T30] audit: type=1400 audit(1757172930.796:1360): avc: denied { write } for pid=9442 comm="syz.1.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 397.231420][ T9458] input: syz1 as /devices/virtual/input/input6 [ 397.453819][ T30] audit: type=1400 audit(1757172931.016:1361): avc: denied { bind } for pid=9454 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.516954][ T30] audit: type=1400 audit(1757172931.016:1362): avc: denied { node_bind } for pid=9454 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 397.613689][ T30] audit: type=1400 audit(1757172931.016:1363): avc: denied { read write } for pid=9454 comm="syz.2.968" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 397.797171][ T30] audit: type=1400 audit(1757172931.016:1364): avc: denied { open } for pid=9454 comm="syz.2.968" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 398.768148][ T5852] Bluetooth: hci4: ISO packet too small [ 398.970673][ T9478] binder: 9469:9478 ioctl c0306201 200000000080 returned -14 [ 400.507080][ T9494] /dev/sg0: Can't lookup blockdev [ 400.871420][ T9497] random: crng reseeded on system resumption [ 401.273126][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 401.273140][ T30] audit: type=1400 audit(1757172935.066:1372): avc: denied { write } for pid=9501 comm="syz.2.982" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 401.282411][ T9502] random: crng reseeded on system resumption [ 401.416740][ T30] audit: type=1400 audit(1757172935.076:1373): avc: denied { append } for pid=9501 comm="syz.2.982" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 401.609293][ T30] audit: type=1400 audit(1757172935.386:1374): avc: denied { ioctl } for pid=9504 comm="syz.4.984" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 401.792407][ T30] audit: type=1400 audit(1757172935.586:1375): avc: denied { read write } for pid=9504 comm="syz.4.984" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 401.825939][ T30] audit: type=1400 audit(1757172935.586:1376): avc: denied { open } for pid=9504 comm="syz.4.984" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 402.344441][ T30] audit: type=1400 audit(1757172935.616:1377): avc: denied { mount } for pid=9504 comm="syz.4.984" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 402.559321][ T30] audit: type=1400 audit(1757172935.776:1378): avc: denied { bind } for pid=9493 comm="syz.0.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 402.745442][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 402.754390][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 402.764388][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 402.773232][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 402.783792][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 402.792636][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 402.806244][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 402.815199][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 402.825311][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 402.834213][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 402.879183][ T30] audit: type=1400 audit(1757172935.816:1379): avc: denied { create } for pid=9504 comm="syz.4.984" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 403.416912][ T9517] ipvlan2: left promiscuous mode [ 403.481569][ T30] audit: type=1400 audit(1757172937.276:1380): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 404.434593][ T30] audit: type=1400 audit(1757172937.996:1381): avc: denied { nosuid_transition } for pid=9538 comm="syz.2.992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 404.674577][ T9543] netlink: 'syz.1.993': attribute type 12 has an invalid length. [ 405.775137][ T9558] random: crng reseeded on system resumption [ 407.420722][ T5939] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 407.486385][ T9582] FAULT_INJECTION: forcing a failure. [ 407.486385][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 407.499498][ T9582] CPU: 1 UID: 0 PID: 9582 Comm: syz.3.999 Not tainted syzkaller #0 PREEMPT(full) [ 407.499519][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.499529][ T9582] Call Trace: [ 407.499535][ T9582] [ 407.499541][ T9582] dump_stack_lvl+0x16c/0x1f0 [ 407.499565][ T9582] should_fail_ex+0x512/0x640 [ 407.499586][ T9582] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 407.499608][ T9582] should_failslab+0xc2/0x120 [ 407.499627][ T9582] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 407.499652][ T9582] ? __alloc_skb+0x2b2/0x380 [ 407.499675][ T9582] __alloc_skb+0x2b2/0x380 [ 407.499692][ T9582] ? __pfx___alloc_skb+0x10/0x10 [ 407.499714][ T9582] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 407.499741][ T9582] netlink_alloc_large_skb+0x69/0x130 [ 407.499764][ T9582] netlink_sendmsg+0x6a1/0xdd0 [ 407.499790][ T9582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.499821][ T9582] ____sys_sendmsg+0xa98/0xc70 [ 407.499844][ T9582] ? copy_msghdr_from_user+0x10a/0x160 [ 407.499857][ T9582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.499879][ T9582] ___sys_sendmsg+0x134/0x1d0 [ 407.499895][ T9582] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.499924][ T9582] __sys_sendmsg+0x16d/0x220 [ 407.499937][ T9582] ? __pfx___sys_sendmsg+0x10/0x10 [ 407.499958][ T9582] do_syscall_64+0xcd/0x4c0 [ 407.499973][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.499983][ T9582] RIP: 0033:0x7fa8baf8ebe9 [ 407.499992][ T9582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.500007][ T9582] RSP: 002b:00007fa8b91f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.500024][ T9582] RAX: ffffffffffffffda RBX: 00007fa8bb1c6090 RCX: 00007fa8baf8ebe9 [ 407.500034][ T9582] RDX: 0000000040040000 RSI: 0000200000000600 RDI: 000000000000000d [ 407.500043][ T9582] RBP: 00007fa8b91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 407.500052][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.500058][ T9582] R13: 00007fa8bb1c6128 R14: 00007fa8bb1c6090 R15: 00007ffd9cfe0678 [ 407.500072][ T9582] [ 407.706594][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.712143][ T5939] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 407.721708][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 407.998588][ T5939] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 408.020449][ T5939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.040864][ T5939] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 408.050024][ T5939] usb 5-1: config 1 has no interface number 1 [ 408.056654][ T5939] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 408.073275][ T5939] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.082683][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.090814][ T5939] usb 5-1: Product: syz [ 408.096684][ T5939] usb 5-1: Manufacturer: syz [ 408.124032][ T5939] usb 5-1: SerialNumber: syz [ 408.142166][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 408.169611][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.201825][ T9] usb 3-1: config 0 descriptor?? [ 408.379271][ T9592] /dev/sg0: Can't lookup blockdev [ 408.462178][ T5939] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 408.494686][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 408.494700][ T30] audit: type=1400 audit(1757172942.286:1388): avc: denied { create } for pid=9591 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 408.520213][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.535564][ T5939] usb 5-1: MIDIStreaming interface descriptor not found [ 408.670508][ T30] audit: type=1400 audit(1757172942.326:1389): avc: denied { setcheckreqprot } for pid=9579 comm="syz.2.1005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 408.671673][ T9] ath6kl: Failed to submit usb control message: -71 [ 408.734873][ T5939] usb 5-1: USB disconnect, device number 29 [ 408.790689][ T30] audit: type=1400 audit(1757172942.326:1390): avc: denied { setopt } for pid=9591 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 408.792964][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 408.826274][ T9] ath6kl: Unable to send get target info: -71 [ 408.872691][ T9] ath6kl: Failed to init ath6kl core: -71 [ 408.884029][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 408.940083][ T9] usb 3-1: USB disconnect, device number 21 [ 408.989264][ T30] audit: type=1400 audit(1757172942.776:1391): avc: denied { read write } for pid=5846 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.158504][ T30] audit: type=1400 audit(1757172942.776:1392): avc: denied { open } for pid=5846 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.208860][ T30] audit: type=1400 audit(1757172942.776:1393): avc: denied { ioctl } for pid=5846 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.238223][ T30] audit: type=1400 audit(1757172942.826:1394): avc: denied { execmem } for pid=9588 comm="syz.0.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 409.273628][ T30] audit: type=1400 audit(1757172942.966:1395): avc: denied { read write } for pid=9598 comm="syz.4.1010" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 410.322184][ T9604] __nla_validate_parse: 139 callbacks suppressed [ 410.322206][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.361694][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.371611][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.380666][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.392154][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.401113][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.411343][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.420255][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.429982][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.438946][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.520066][ T30] audit: type=1400 audit(1757172942.966:1396): avc: denied { open } for pid=9598 comm="syz.4.1010" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 410.550693][ T30] audit: type=1400 audit(1757172942.976:1397): avc: denied { create } for pid=9591 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.623590][ T9604] vlan2: left promiscuous mode [ 410.628465][ T9604] batadv0: left promiscuous mode [ 410.638969][ T9604] ipvlan2: left promiscuous mode [ 411.059295][ T9614] binder: BINDER_SET_CONTEXT_MGR already set [ 411.067992][ T9614] binder: 9588:9614 ioctl 4018620d 200000004a80 returned -16 [ 413.747685][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 413.747695][ T30] audit: type=1400 audit(1757172947.536:1440): avc: denied { map_create } for pid=9633 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 413.804373][ T30] audit: type=1400 audit(1757172947.566:1441): avc: denied { map_read map_write } for pid=9633 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 413.839389][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.848584][ T30] audit: type=1400 audit(1757172947.576:1442): avc: denied { create } for pid=9635 comm="syz.4.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 413.893371][ T30] audit: type=1400 audit(1757172947.576:1443): avc: denied { write } for pid=9635 comm="syz.4.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 413.901942][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.006785][ T9641] FAULT_INJECTION: forcing a failure. [ 414.006785][ T9641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.070641][ T5974] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 414.085290][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: syz.3.1021 Not tainted syzkaller #0 PREEMPT(full) [ 414.085311][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.085320][ T9641] Call Trace: [ 414.085325][ T9641] [ 414.085330][ T9641] dump_stack_lvl+0x16c/0x1f0 [ 414.085355][ T9641] should_fail_ex+0x512/0x640 [ 414.085380][ T9641] _copy_to_iter+0x463/0x1710 [ 414.085408][ T9641] ? __pfx__copy_to_iter+0x10/0x10 [ 414.085436][ T9641] ? __up_read+0x1f8/0x750 [ 414.085453][ T9641] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 414.085475][ T9641] ? mm_access+0x22d/0x2e0 [ 414.085500][ T9641] copy_page_to_iter+0x12a/0x1e0 [ 414.085527][ T9641] process_vm_rw_core.constprop.0+0x5ad/0x970 [ 414.085556][ T9641] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 414.085596][ T9641] ? iovec_from_user+0xbb/0x140 [ 414.085622][ T9641] process_vm_rw+0x2ff/0x360 [ 414.085641][ T9641] ? __pfx_process_vm_rw+0x10/0x10 [ 414.085665][ T9641] ? ksys_write+0x190/0x250 [ 414.085703][ T9641] ? ksys_write+0x1ac/0x250 [ 414.085718][ T9641] ? __pfx_ksys_write+0x10/0x10 [ 414.085738][ T9641] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 414.085757][ T9641] ? do_syscall_64+0x91/0x4c0 [ 414.085777][ T9641] ? lockdep_hardirqs_on+0x7c/0x110 [ 414.085797][ T9641] do_syscall_64+0xcd/0x4c0 [ 414.085817][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.085833][ T9641] RIP: 0033:0x7fa8baf8ebe9 [ 414.085846][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.085862][ T9641] RSP: 002b:00007fa8bbd3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 414.085878][ T9641] RAX: ffffffffffffffda RBX: 00007fa8bb1c5fa0 RCX: 00007fa8baf8ebe9 [ 414.085888][ T9641] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000002a2 [ 414.085897][ T9641] RBP: 00007fa8bbd3a090 R08: 0000000000000286 R09: 0000000000000000 [ 414.085907][ T9641] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000002 [ 414.085917][ T9641] R13: 00007fa8bb1c6038 R14: 00007fa8bb1c5fa0 R15: 00007ffd9cfe0678 [ 414.085940][ T9641] [ 414.300754][ T30] audit: type=1400 audit(1757172947.576:1444): avc: denied { create } for pid=9633 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.436631][ T30] audit: type=1400 audit(1757172947.576:1445): avc: denied { bind } for pid=9633 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.456557][ T30] audit: type=1400 audit(1757172947.576:1446): avc: denied { write } for pid=9633 comm="syz.0.1019" path="socket:[21509]" dev="sockfs" ino=21509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.482186][ T30] audit: type=1400 audit(1757172947.576:1447): avc: denied { create } for pid=9633 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 414.501844][ T30] audit: type=1400 audit(1757172947.576:1448): avc: denied { connect } for pid=9633 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 414.618559][ T30] audit: type=1400 audit(1757172948.116:1449): avc: denied { ioctl } for pid=9640 comm="syz.3.1021" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21517 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 414.705909][ T9650] ipvlan2: left promiscuous mode [ 414.712588][ T9650] ipvlan3: left promiscuous mode [ 414.721107][ T9650] ipvlan4: left promiscuous mode [ 415.320387][ T9656] ubi31: attaching mtd0 [ 415.325392][ T9656] ubi31: scanning is finished [ 415.711870][ T9656] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 415.720676][ T9656] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 415.730408][ T9656] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 415.739897][ T9656] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 415.749790][ T9656] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 415.759063][ T9656] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 415.767596][ T9656] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3084392402 [ 415.777694][ T9656] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 415.787822][ T9663] ubi31: background thread "ubi_bgt31d" started, PID 9663 [ 417.167514][ T9683] /dev/sg0: Can't lookup blockdev [ 417.362318][ T9684] random: crng reseeded on system resumption [ 418.776865][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 418.776880][ T30] audit: type=1400 audit(1757172952.566:1504): avc: denied { read write } for pid=9695 comm="syz.4.1035" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 418.857603][ T30] audit: type=1400 audit(1757172952.566:1505): avc: denied { open } for pid=9695 comm="syz.4.1035" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 418.976721][ T30] audit: type=1400 audit(1757172952.566:1506): avc: denied { ioctl } for pid=9695 comm="syz.4.1035" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 419.077646][ T30] audit: type=1400 audit(1757172952.726:1507): avc: denied { create } for pid=9702 comm="syz.3.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.098030][ T9704] syz.3.1036 uses obsolete (PF_INET,SOCK_PACKET) [ 419.233171][ T9708] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 419.488232][ T30] audit: type=1400 audit(1757172952.886:1508): avc: denied { mount } for pid=9702 comm="syz.3.1036" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 419.625120][ T30] audit: type=1400 audit(1757172952.926:1509): avc: denied { ioctl } for pid=9702 comm="syz.3.1036" path="socket:[21669]" dev="sockfs" ino=21669 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 419.630533][ T9713] __nla_validate_parse: 294 callbacks suppressed [ 419.630551][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1037'. [ 419.776298][ T30] audit: type=1400 audit(1757172953.566:1510): avc: denied { add_name } for pid=9693 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.909420][ T30] audit: type=1400 audit(1757172953.566:1511): avc: denied { create } for pid=9693 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.064894][ T30] audit: type=1400 audit(1757172953.566:1512): avc: denied { write } for pid=9693 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm0.link" dev="tmpfs" ino=6240 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.402277][ T30] audit: type=1400 audit(1757172953.566:1513): avc: denied { append } for pid=9693 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=6240 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.741305][ T5974] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 420.851181][ T9743] random: crng reseeded on system resumption [ 421.487883][ T5974] usb 3-1: Using ep0 maxpacket: 32 [ 421.509616][ T5974] usb 3-1: unable to get BOS descriptor or descriptor too short [ 421.912765][ T5974] usb 3-1: config 1 has an invalid interface number: 48 but max is 0 [ 422.066850][ T5974] usb 3-1: config 1 has no interface number 0 [ 422.488011][ T5974] usb 3-1: too many endpoints for config 1 interface 48 altsetting 9: 255, using maximum allowed: 30 [ 422.505897][ T5974] usb 3-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 422.521037][ T5974] usb 3-1: config 1 interface 48 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 422.540646][ T5974] usb 3-1: config 1 interface 48 has no altsetting 0 [ 422.553742][ T5974] usb 3-1: New USB device found, idVendor=110a, idProduct=f730, bcdDevice=f3.9d [ 422.563078][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.579483][ T5974] usb 3-1: Product: syz [ 422.681637][ T5974] usb 3-1: Manufacturer: syz [ 422.686389][ T5974] usb 3-1: SerialNumber: syz [ 422.718414][ T9729] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.936043][ T9729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.006264][ T9729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.856098][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 423.856135][ T30] audit: type=1400 audit(1757172957.646:1558): avc: denied { create } for pid=9765 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 424.211555][ T9306] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 424.303775][ T5974] usb 3-1: USB disconnect, device number 22 [ 424.450693][ T9306] usb 4-1: Using ep0 maxpacket: 32 [ 424.475973][ T30] audit: type=1400 audit(1757172958.266:1559): avc: denied { mounton } for pid=9779 comm="syz.4.1050" path="/198/bus" dev="tmpfs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 424.998364][ T9789] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 425.013227][ T24] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 425.028934][ T9306] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 425.037924][ T30] audit: type=1400 audit(1757172958.266:1560): avc: denied { unlink } for pid=9779 comm="syz.4.1050" name="#1" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 425.048549][ T9306] usb 4-1: config 0 has no interface number 0 [ 425.063861][ T30] audit: type=1400 audit(1757172958.266:1561): avc: denied { mount } for pid=9779 comm="syz.4.1050" name="/" dev="overlay" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 425.182624][ T30] audit: type=1400 audit(1757172958.416:1562): avc: denied { bind } for pid=9784 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 425.202318][ T30] audit: type=1400 audit(1757172958.416:1563): avc: denied { setopt } for pid=9784 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 425.222325][ T30] audit: type=1400 audit(1757172958.416:1564): avc: denied { accept } for pid=9784 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 425.223919][ T9306] usb 4-1: config 0 interface 12 has no altsetting 0 [ 425.242965][ T30] audit: type=1400 audit(1757172958.816:1565): avc: denied { connect } for pid=9791 comm="syz.0.1053" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 425.318686][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.705348][ T9306] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 425.715561][ T9306] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 425.715681][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.725158][ T9306] usb 4-1: Product: syz [ 425.738328][ T9306] usb 4-1: Manufacturer: syz [ 425.738340][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 425.746148][ T9306] usb 4-1: SerialNumber: syz [ 425.760493][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.773670][ T30] audit: type=1400 audit(1757172959.566:1566): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 425.786773][ T9306] usb 4-1: config 0 descriptor?? [ 425.794210][ T24] usb 2-1: config 0 descriptor?? [ 425.835485][ T24] hub 2-1:0.0: USB hub found [ 425.917362][ T9306] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 425.926061][ T9306] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 425.935983][ T9306] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 425.944480][ T9306] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 426.052018][ T24] hub 2-1:0.0: 2 ports detected [ 426.371413][ T9306] usb 4-1: USB disconnect, device number 28 [ 427.473469][ T24] usb 2-1: USB disconnect, device number 20 [ 429.094542][ T30] audit: type=1400 audit(1757172961.936:1567): avc: denied { module_request } for pid=9816 comm="syz.3.1059" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 430.167428][ T9819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1059'. [ 430.420594][ T30] audit: type=1400 audit(1757172964.206:1568): avc: denied { write } for pid=9837 comm="syz.4.1065" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 430.516323][ T9840] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 430.522918][ T9840] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 430.530691][ T9840] vhci_hcd vhci_hcd.0: Device attached [ 430.610934][ T5939] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 430.640679][ T840] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 430.811318][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 430.811807][ T24] usb 41-1: new high-speed USB device number 7 using vhci_hcd [ 430.962427][ T840] usb 3-1: Using ep0 maxpacket: 32 [ 430.971472][ T5939] usb 2-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 430.994073][ T840] usb 3-1: unable to get BOS descriptor or descriptor too short [ 431.004332][ T840] usb 3-1: config 1 has an invalid interface number: 48 but max is 0 [ 431.009766][ T5939] usb 2-1: config 0 interface 0 has no altsetting 0 [ 431.019547][ T840] usb 3-1: config 1 has no interface number 0 [ 431.025927][ T840] usb 3-1: too many endpoints for config 1 interface 48 altsetting 9: 255, using maximum allowed: 30 [ 431.059585][ T840] usb 3-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 431.079824][ T840] usb 3-1: config 1 interface 48 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 431.102861][ T840] usb 3-1: config 1 interface 48 has no altsetting 0 [ 431.149219][ T840] usb 3-1: New USB device found, idVendor=110a, idProduct=f730, bcdDevice=f3.9d [ 431.194654][ T840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.202771][ T5939] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 431.202797][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.202815][ T5939] usb 2-1: Product: syz [ 431.202829][ T5939] usb 2-1: Manufacturer: syz [ 431.202843][ T5939] usb 2-1: SerialNumber: syz [ 431.246551][ T9844] vhci_hcd: connection reset by peer [ 431.255617][ T5939] usb 2-1: config 0 descriptor?? [ 431.266983][ T13] vhci_hcd: stop threads [ 431.270678][ T840] usb 3-1: Product: syz [ 431.276460][ T5939] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 431.277519][ T840] usb 3-1: Manufacturer: syz [ 431.287236][ T13] vhci_hcd: release socket [ 431.292783][ T840] usb 3-1: SerialNumber: syz [ 431.316064][ T9833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 431.336584][ T13] vhci_hcd: disconnect device [ 431.379192][ T30] audit: type=1400 audit(1757172965.166:1569): avc: denied { create } for pid=9853 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 431.405283][ T30] audit: type=1400 audit(1757172965.176:1570): avc: denied { write } for pid=9853 comm="syz.3.1069" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 431.483984][ T9854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 431.485566][ T5939] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 431.502714][ T5939] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 431.512755][ T5939] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 431.528759][ T9833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.558242][ T9833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.853885][ T9838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.863572][ T9838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.064359][ T9838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.076874][ T9838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.163538][ T9306] usb 2-1: USB disconnect, device number 21 [ 432.838917][ T9857] netlink: 'syz.3.1069': attribute type 23 has an invalid length. [ 434.458479][ T840] usb 3-1: USB disconnect, device number 23 [ 434.980619][ T9889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1074'. [ 435.290851][ T30] audit: type=1400 audit(1757172969.046:1571): avc: denied { write } for pid=9886 comm="syz.2.1076" name="tcp6" dev="proc" ino=4026533157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 435.498907][ T30] audit: type=1400 audit(1757172969.166:1572): avc: denied { create } for pid=9886 comm="syz.2.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 435.566717][ T30] audit: type=1400 audit(1757172969.176:1573): avc: denied { ioctl } for pid=9886 comm="syz.2.1076" path="socket:[21395]" dev="sockfs" ino=21395 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 435.655597][ T30] audit: type=1400 audit(1757172969.446:1574): avc: denied { append } for pid=9896 comm="syz.0.1077" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 436.171483][ T5974] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 436.350892][ T9897] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 436.357395][ T9897] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 436.364994][ T9897] vhci_hcd vhci_hcd.0: Device attached [ 436.410629][ T24] vhci_hcd: vhci_device speed not set [ 436.611959][ T5974] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 436.624689][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.640701][ T840] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 436.649804][ T9898] vhci_hcd: connection reset by peer [ 436.673624][ T3535] vhci_hcd: stop threads [ 436.677865][ T3535] vhci_hcd: release socket [ 436.716610][ T5974] usb 2-1: config 0 descriptor?? [ 436.722490][ T3535] vhci_hcd: disconnect device [ 437.419334][ T30] audit: type=1400 audit(1757172970.896:1575): avc: denied { map_create } for pid=9913 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 437.447943][ T30] audit: type=1400 audit(1757172970.896:1576): avc: denied { map_read map_write } for pid=9913 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 437.460629][ T5974] ath6kl: Failed to submit usb control message: -71 [ 437.472636][ T30] audit: type=1400 audit(1757172970.906:1577): avc: denied { prog_load } for pid=9913 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 437.475669][ T5974] ath6kl: unable to send the bmi data to the device: -71 [ 437.498454][ T5939] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 437.501971][ T5974] ath6kl: Unable to send get target info: -71 [ 437.510755][ T30] audit: type=1400 audit(1757172970.906:1578): avc: denied { bpf } for pid=9913 comm="syz.3.1082" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 437.590136][ T30] audit: type=1400 audit(1757172970.906:1579): avc: denied { perfmon } for pid=9913 comm="syz.3.1082" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 437.616028][ T30] audit: type=1400 audit(1757172970.906:1580): avc: denied { create } for pid=9913 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 437.647330][ T5974] ath6kl: Failed to init ath6kl core: -71 [ 437.792401][ T5974] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 437.860815][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 437.956777][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.270756][ T5939] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 438.279927][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.292244][ T5974] usb 2-1: USB disconnect, device number 22 [ 438.324695][ T5939] usb 3-1: config 0 descriptor?? [ 438.774114][ T5939] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 438.844211][ T9936] random: crng reseeded on system resumption [ 439.224009][ T5939] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 439.245379][ T5939] hid-steam 0003:28DE:1102.0004: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 439.402817][ T5974] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 439.412815][ T5939] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' connected [ 439.415268][ T9938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.903901][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.910196][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.934330][ T5939] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0004/input/input7 [ 439.937052][ T9938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.031826][ T9938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9938 comm=syz.2.1083 [ 440.110635][ T5974] usb 2-1: Using ep0 maxpacket: 32 [ 440.137862][ T5939] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 440.145837][ T5974] usb 2-1: unable to get BOS descriptor or descriptor too short [ 440.153773][ T9938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9938 comm=syz.2.1083 [ 440.172090][ T5974] usb 2-1: config 1 has an invalid interface number: 48 but max is 0 [ 440.188252][ T5939] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 440.270673][ T9917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1083'. [ 440.322288][ T5939] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 440.359486][ T5974] usb 2-1: config 1 has no interface number 0 [ 440.774753][ T5974] usb 2-1: too many endpoints for config 1 interface 48 altsetting 9: 255, using maximum allowed: 30 [ 440.785896][ T5974] usb 2-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 440.796831][ T5974] usb 2-1: config 1 interface 48 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 440.810112][ T5974] usb 2-1: config 1 interface 48 has no altsetting 0 [ 440.819668][ T5974] usb 2-1: New USB device found, idVendor=110a, idProduct=f730, bcdDevice=f3.9d [ 440.871779][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.879560][ T5939] usb 3-1: USB disconnect, device number 24 [ 440.953164][ T5974] usb 2-1: Product: syz [ 440.957344][ T5974] usb 2-1: Manufacturer: syz [ 440.995770][ T5939] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' disconnected [ 441.021900][ T5974] usb 2-1: SerialNumber: syz [ 441.133453][ T9930] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 441.148573][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 441.148587][ T30] audit: type=1400 audit(1757172974.936:1621): avc: denied { read open } for pid=9951 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.225466][ T9948] fido_id[9948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 441.770664][ T30] audit: type=1400 audit(1757172974.946:1622): avc: denied { getattr } for pid=9951 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.771298][ T5974] usb 2-1: USB disconnect, device number 23 [ 441.851166][ T840] vhci_hcd: vhci_device speed not set [ 441.893206][ T30] audit: type=1400 audit(1757172974.976:1623): avc: denied { create } for pid=9954 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 441.994367][ T30] audit: type=1400 audit(1757172974.986:1624): avc: denied { read } for pid=9950 comm="syz.4.1090" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 442.169570][ T30] audit: type=1400 audit(1757172974.986:1625): avc: denied { open } for pid=9950 comm="syz.4.1090" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 442.193826][ T9970] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 442.200336][ T9970] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 442.208518][ T9970] vhci_hcd vhci_hcd.0: Device attached [ 442.217579][ T9971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.602356][ T30] audit: type=1400 audit(1757172975.016:1626): avc: denied { ioctl } for pid=9950 comm="syz.4.1090" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x6407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 442.730749][ T5974] usb 41-1: new high-speed USB device number 8 using vhci_hcd [ 442.886985][ T30] audit: type=1400 audit(1757172975.086:1627): avc: denied { setopt } for pid=9954 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 442.982415][ T5929] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 443.066880][ T30] audit: type=1400 audit(1757172975.906:1628): avc: denied { create } for pid=9963 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 443.148019][ T5929] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 443.160688][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.171497][ T30] audit: type=1400 audit(1757172975.916:1629): avc: denied { setopt } for pid=9963 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 443.201308][ T5929] usb 2-1: config 0 descriptor?? [ 443.271787][ T9986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1096'. [ 443.510697][ T30] audit: type=1400 audit(1757172975.956:1630): avc: denied { read append } for pid=9968 comm="syz.4.1095" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 443.688803][ T5929] ath6kl: Failed to submit usb control message: -71 [ 443.695685][ T5929] ath6kl: unable to send the bmi data to the device: -71 [ 443.716799][ T5929] ath6kl: Unable to send get target info: -71 [ 443.731261][ T5929] ath6kl: Failed to init ath6kl core: -71 [ 443.760203][ T5929] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 443.794828][ T5929] usb 2-1: USB disconnect, device number 24 [ 443.854266][ T5939] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 443.946097][ T9994] CUSE: info not properly terminated [ 444.030651][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 444.038151][ T5939] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 444.049561][ T5939] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 444.058545][ T5939] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 444.068016][ T5939] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 444.077172][ T5939] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 444.090796][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.099662][ T5939] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 444.114219][ T5939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.123283][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.131669][ T5939] usb 3-1: Product: Й [ 444.135713][ T5939] usb 3-1: Manufacturer: 杅ﱛ퇰씈惗甜ꔪ接픧ڿ뛼쌾㾜멮虠ꮷ銝ቖ콍櫴珔훩埁ឺꗿဌ鄋旴㱲T⟍흎ꤨ闰ቼ꺠蠶ἁ畄ꋦ퐏ꌲ↵㔮ҋ폄B䧅⎅鿪芭◃쬻᷑ᣎ뢣柔塊ꕔ媢쫊ꬻᬠ蒿戬䃥䜻敎ቬퟖآ焗偝쇣ꦤ吼촉쑃썒줫ގ츘ạ돈⌳ꉻ⭘秦魕鱷镮㐱⡑헲ᬠᎋꍡ徨뷌拡㤲忞듊肘︉Ẋྉ밵㽇费휊嶍 [ 444.171896][ T5939] usb 3-1: SerialNumber: syz [ 444.225010][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 444.225019][ T9306] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 444.225194][ T9974] vhci_hcd: connection reset by peer [ 444.271386][ T3535] vhci_hcd: stop threads [ 444.278806][ T3535] vhci_hcd: release socket [ 444.293043][ T3535] vhci_hcd: disconnect device [ 444.442584][ T9306] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 444.470191][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 444.479437][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 444.491002][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 444.499867][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 444.551365][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 444.577585][T10022] block nbd1: Attempted send on invalid socket [ 444.584944][T10022] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 444.962033][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 444.983222][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 445.329064][ T5939] usb 3-1: 0:2 : does not exist [ 445.536205][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 445.545496][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 445.548451][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 445.554805][ T9306] usb 4-1: config 0 has no interface number 0 [ 445.586451][ T5939] usb 3-1: USB disconnect, device number 25 [ 445.592344][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 445.592382][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 445.592664][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 445.616300][ T9306] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 445.674806][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 445.687601][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 445.725430][ T9306] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 445.731872][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 445.749704][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.762376][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.779547][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 445.793689][ T9306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.811004][ T24] usb 1-1: config 0 descriptor?? [ 445.819535][ T9306] usb 4-1: config 0 descriptor?? [ 445.833896][ T9994] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 445.842790][ T9306] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 445.858739][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 445.964086][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 446.045206][T10020] ipvlan2: left promiscuous mode [ 446.055454][T10020] ipvlan3: left promiscuous mode [ 446.072307][T10020] ipvlan4: left promiscuous mode [ 446.094421][ T9306] usb 4-1: USB disconnect, device number 29 [ 446.186240][ T24] hdpvr 1-1:0.0: firmware version 0x51 dated [ 446.312676][ T24] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 446.373715][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 446.373726][ T30] audit: type=1400 audit(1757172980.166:1726): avc: denied { read append } for pid=10033 comm="syz.4.1107" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 446.504758][ T30] audit: type=1400 audit(1757172980.166:1727): avc: denied { open } for pid=10033 comm="syz.4.1107" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 446.976322][ T30] audit: type=1400 audit(1757172980.196:1728): avc: denied { map } for pid=10033 comm="syz.4.1107" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 447.016166][ T30] audit: type=1400 audit(1757172980.196:1729): avc: denied { write execute } for pid=10033 comm="syz.4.1107" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 447.047566][ T30] audit: type=1400 audit(1757172980.396:1730): avc: denied { map_create } for pid=10033 comm="syz.4.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 447.138312][ T30] audit: type=1400 audit(1757172980.396:1731): avc: denied { map_read map_write } for pid=10033 comm="syz.4.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 447.189072][ T30] audit: type=1400 audit(1757172980.396:1732): avc: denied { prog_load } for pid=10033 comm="syz.4.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 447.344346][ T30] audit: type=1400 audit(1757172980.406:1733): avc: denied { bpf } for pid=10033 comm="syz.4.1107" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 447.444519][ T30] audit: type=1400 audit(1757172980.406:1734): avc: denied { perfmon } for pid=10033 comm="syz.4.1107" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 447.469635][ T30] audit: type=1400 audit(1757172980.406:1735): avc: denied { create } for pid=10033 comm="syz.4.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 447.979099][ T24] hdpvr 1-1:0.0: Could not setup controls [ 447.994565][ T24] hdpvr 1-1:0.0: registering videodev failed [ 448.155837][T10055] FAULT_INJECTION: forcing a failure. [ 448.155837][T10055] name failslab, interval 1, probability 0, space 0, times 0 [ 448.169808][T10055] CPU: 0 UID: 0 PID: 10055 Comm: syz.2.1110 Not tainted syzkaller #0 PREEMPT(full) [ 448.169830][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.169838][T10055] Call Trace: [ 448.169842][T10055] [ 448.169846][T10055] dump_stack_lvl+0x16c/0x1f0 [ 448.169864][T10055] should_fail_ex+0x512/0x640 [ 448.169877][T10055] ? fs_reclaim_acquire+0xae/0x150 [ 448.169892][T10055] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 448.169908][T10055] should_failslab+0xc2/0x120 [ 448.169920][T10055] __kmalloc_noprof+0xd2/0x510 [ 448.169934][T10055] tomoyo_realpath_from_path+0xc2/0x6e0 [ 448.169951][T10055] ? tomoyo_profile+0x47/0x60 [ 448.169962][T10055] tomoyo_path_number_perm+0x245/0x580 [ 448.169975][T10055] ? tomoyo_path_number_perm+0x237/0x580 [ 448.169989][T10055] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 448.170003][T10055] ? find_held_lock+0x2b/0x80 [ 448.170029][T10055] ? find_held_lock+0x2b/0x80 [ 448.170041][T10055] ? hook_file_ioctl_common+0x145/0x410 [ 448.170055][T10055] ? __fget_files+0x20e/0x3c0 [ 448.170069][T10055] security_file_ioctl+0x9b/0x240 [ 448.170085][T10055] __x64_sys_ioctl+0xb7/0x210 [ 448.170102][T10055] do_syscall_64+0xcd/0x4c0 [ 448.170117][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.170127][T10055] RIP: 0033:0x7f294778ebe9 [ 448.170136][T10055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.170146][T10055] RSP: 002b:00007f29459d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.170156][T10055] RAX: ffffffffffffffda RBX: 00007f29479c6180 RCX: 00007f294778ebe9 [ 448.170162][T10055] RDX: 0000200000000140 RSI: 00000000c04064a0 RDI: 0000000000000004 [ 448.170169][T10055] RBP: 00007f29459d5090 R08: 0000000000000000 R09: 0000000000000000 [ 448.170174][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.170186][T10055] R13: 00007f29479c6218 R14: 00007f29479c6180 R15: 00007ffd3a7b8448 [ 448.170199][T10055] [ 448.170217][T10055] ERROR: Out of memory at tomoyo_realpath_from_path. [ 448.471724][ T5974] vhci_hcd: vhci_device speed not set [ 448.658126][ T24] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 448.978487][ T24] usb 1-1: USB disconnect, device number 29 [ 449.320616][ T5916] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 450.515524][ T5916] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 450.525747][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.536937][ T5916] usb 3-1: config 0 descriptor?? [ 450.631179][ T5974] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 450.800923][ T5974] usb 4-1: Using ep0 maxpacket: 16 [ 450.824586][ T5974] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 450.837069][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.929645][ T5974] usb 4-1: Product: syz [ 450.949903][ T5974] usb 4-1: Manufacturer: syz [ 450.960783][ T5974] usb 4-1: SerialNumber: syz [ 450.980916][ T5974] usb 4-1: config 0 descriptor?? [ 451.004862][ T5974] safe_serial 4-1:0.0: safe_serial converter detected [ 451.043682][ T5974] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 451.275857][T10079] __nla_validate_parse: 284 callbacks suppressed [ 451.275875][T10079] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1117'. [ 451.296032][ T5916] ath6kl: Failed to submit usb control message: -71 [ 451.365968][ T5916] ath6kl: unable to send the bmi data to the device: -71 [ 451.461780][ T5916] ath6kl: Unable to send get target info: -71 [ 451.465868][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 451.465880][ T30] audit: type=1400 audit(1757172985.156:1787): avc: denied { map_create } for pid=10077 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 451.495529][ T30] audit: type=1400 audit(1757172985.186:1788): avc: denied { read } for pid=10073 comm="syz.4.1117" dev="nsfs" ino=4026532811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 451.543844][ T30] audit: type=1400 audit(1757172985.196:1789): avc: denied { open } for pid=10073 comm="syz.4.1117" path="net:[4026532811]" dev="nsfs" ino=4026532811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 451.570659][ T5852] Bluetooth: hci1: ISO packet too small [ 451.578240][ T9306] usb 4-1: USB disconnect, device number 30 [ 451.591201][ T9306] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 452.142501][ T9306] safe_serial 4-1:0.0: device disconnected [ 452.148731][ T30] audit: type=1400 audit(1757172985.206:1790): avc: denied { create } for pid=10073 comm="syz.4.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 452.171621][ T5916] ath6kl: Failed to init ath6kl core: -71 [ 452.184514][ T30] audit: type=1400 audit(1757172985.216:1791): avc: denied { perfmon } for pid=10078 comm="syz.1.1119" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 452.242857][ T5916] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 452.262004][ T5916] usb 3-1: USB disconnect, device number 26 [ 452.272559][ T30] audit: type=1400 audit(1757172985.226:1792): avc: denied { map_read map_write } for pid=10078 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 452.296911][ T30] audit: type=1400 audit(1757172985.266:1793): avc: denied { create } for pid=10078 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 452.319271][ T30] audit: type=1400 audit(1757172985.266:1794): avc: denied { setopt } for pid=10078 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 452.338998][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.369234][T10087] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 452.375743][T10087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 452.383377][T10087] vhci_hcd vhci_hcd.0: Device attached [ 452.404063][ T30] audit: type=1400 audit(1757172985.266:1795): avc: denied { prog_load } for pid=10078 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 452.423173][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.491055][ T30] audit: type=1400 audit(1757172985.286:1796): avc: denied { execmem } for pid=10078 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 452.620769][ T24] usb 35-1: new high-speed USB device number 10 using vhci_hcd [ 452.670965][ T9306] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 452.896987][T10102] random: crng reseeded on system resumption [ 453.332242][ T9306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 453.342072][ T9306] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 453.373981][ T9306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 453.383948][ T9306] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 453.394246][ T9306] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 453.805608][ T9306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.900420][ T9306] usb 1-1: config 0 descriptor?? [ 454.040835][T10088] vhci_hcd: connection reset by peer [ 454.046580][T10109] ubi: mtd0 is already attached to ubi31 [ 454.061032][ T13] vhci_hcd: stop threads [ 454.065457][ T13] vhci_hcd: release socket [ 454.073858][ T13] vhci_hcd: disconnect device [ 454.214231][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 454.223649][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 454.233760][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 454.245306][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 454.255773][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 454.264841][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 454.275140][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 454.284178][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 454.293961][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 454.662994][ T9306] hdpvr 1-1:0.0: firmware version 0x51 dated [ 454.669092][ T9306] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 456.545262][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 456.545278][ T30] audit: type=1400 audit(1757172990.336:1859): avc: denied { read write } for pid=10133 comm="syz.3.1135" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 456.580743][ T30] audit: type=1400 audit(1757172990.336:1860): avc: denied { open } for pid=10133 comm="syz.3.1135" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 456.647951][T10132] FAULT_INJECTION: forcing a failure. [ 456.647951][T10132] name failslab, interval 1, probability 0, space 0, times 0 [ 456.681780][T10135] input: syz1 as /devices/virtual/input/input8 [ 456.731886][T10132] CPU: 1 UID: 0 PID: 10132 Comm: syz.4.1134 Not tainted syzkaller #0 PREEMPT(full) [ 456.731911][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.731920][T10132] Call Trace: [ 456.731926][T10132] [ 456.731933][T10132] dump_stack_lvl+0x16c/0x1f0 [ 456.731959][T10132] should_fail_ex+0x512/0x640 [ 456.731979][T10132] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 456.732007][T10132] should_failslab+0xc2/0x120 [ 456.732027][T10132] __kmalloc_cache_noprof+0x6a/0x3e0 [ 456.732052][T10132] ? tcf_chain_create+0x98/0x370 [ 456.732074][T10132] tcf_chain_create+0x98/0x370 [ 456.732095][T10132] __tcf_chain_get+0x153/0x1b0 [ 456.732119][T10132] tc_new_tfilter+0x6ed/0x2340 [ 456.732148][T10132] ? avc_has_perm_noaudit+0x117/0x3b0 [ 456.732168][T10132] ? __pfx_tc_new_tfilter+0x10/0x10 [ 456.732205][T10132] ? __lock_acquire+0x62e/0x1ce0 [ 456.732240][T10132] ? find_held_lock+0x2b/0x80 [ 456.732261][T10132] ? __pfx_tc_new_tfilter+0x10/0x10 [ 456.732282][T10132] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 456.732304][T10132] ? __pfx_tc_new_tfilter+0x10/0x10 [ 456.732328][T10132] rtnetlink_rcv_msg+0x95e/0xe90 [ 456.732353][T10132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.732382][T10132] ? ref_tracker_free+0x37c/0x830 [ 456.732409][T10132] netlink_rcv_skb+0x155/0x420 [ 456.732431][T10132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.732452][T10132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.732484][T10132] ? netlink_deliver_tap+0x1ae/0xd30 [ 456.732510][T10132] netlink_unicast+0x5aa/0x870 [ 456.732537][T10132] ? __pfx_netlink_unicast+0x10/0x10 [ 456.732569][T10132] netlink_sendmsg+0x8d1/0xdd0 [ 456.732594][T10132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.732625][T10132] ____sys_sendmsg+0xa98/0xc70 [ 456.732651][T10132] ? copy_msghdr_from_user+0x10a/0x160 [ 456.732671][T10132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.732710][T10132] ___sys_sendmsg+0x134/0x1d0 [ 456.732732][T10132] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.732786][T10132] __sys_sendmsg+0x16d/0x220 [ 456.732807][T10132] ? __pfx___sys_sendmsg+0x10/0x10 [ 456.732845][T10132] do_syscall_64+0xcd/0x4c0 [ 456.732870][T10132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.732888][T10132] RIP: 0033:0x7f90df78ebe9 [ 456.732904][T10132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.732919][T10132] RSP: 002b:00007f90e0589038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.732936][T10132] RAX: ffffffffffffffda RBX: 00007f90df9c5fa0 RCX: 00007f90df78ebe9 [ 456.732946][T10132] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 456.732956][T10132] RBP: 00007f90e0589090 R08: 0000000000000000 R09: 0000000000000000 [ 456.732965][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.732974][T10132] R13: 00007f90df9c6038 R14: 00007f90df9c5fa0 R15: 00007ffd2734f888 [ 456.732996][T10132] [ 457.031445][ T9306] hdpvr 1-1:0.0: Could not setup controls [ 457.039948][ T30] audit: type=1400 audit(1757172990.366:1861): avc: denied { create } for pid=10133 comm="syz.3.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 457.059679][ T30] audit: type=1400 audit(1757172990.456:1862): avc: denied { ioctl } for pid=10133 comm="syz.3.1135" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 457.060308][ T9306] hdpvr 1-1:0.0: registering videodev failed [ 457.085906][ T30] audit: type=1400 audit(1757172990.516:1863): avc: denied { read } for pid=5205 comm="acpid" name="event4" dev="devtmpfs" ino=3197 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.113782][ T30] audit: type=1400 audit(1757172990.516:1864): avc: denied { open } for pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3197 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.138481][ T30] audit: type=1400 audit(1757172990.516:1865): avc: denied { ioctl } for pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3197 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.164898][ T30] audit: type=1400 audit(1757172990.536:1866): avc: denied { write } for pid=10126 comm="syz.1.1133" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 457.185588][ T30] audit: type=1326 audit(1757172990.826:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10137 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294778ebe9 code=0x7ffc0000 [ 457.210002][ T30] audit: type=1326 audit(1757172990.826:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10137 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294778ebe9 code=0x7ffc0000 [ 457.409811][ T9306] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 457.579888][ T9306] usb 1-1: USB disconnect, device number 30 [ 457.585883][T10141] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 457.592361][T10141] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 457.600246][T10141] vhci_hcd vhci_hcd.0: Device attached [ 457.666735][T10148] random: crng reseeded on system resumption [ 458.101426][ T24] vhci_hcd: vhci_device speed not set [ 458.840707][ T9] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 460.202863][T10173] __nla_validate_parse: 139 callbacks suppressed [ 460.202894][T10173] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1145'. [ 460.469238][T10146] vhci_hcd: connection reset by peer [ 460.485586][ T1123] vhci_hcd: stop threads [ 460.511095][ T1123] vhci_hcd: release socket [ 460.540764][ T1123] vhci_hcd: disconnect device [ 460.864986][ T9306] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 461.172303][ T9306] usb 3-1: Using ep0 maxpacket: 8 [ 461.279819][ T9306] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 461.310683][ T5929] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 461.321236][ T9306] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 461.340749][ T9306] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.399528][ T9306] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.445774][ T9306] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 461.465032][ T9306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.512217][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 461.530620][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 461.680947][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 461.704907][ T9306] usb 3-1: GET_CAPABILITIES returned 0 [ 461.713471][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 461.780889][T10191] random: crng reseeded on system resumption [ 462.146173][ T9306] usbtmc 3-1:16.0: can't read capabilities [ 462.154469][ T5929] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 462.209576][ T9306] usb 3-1: USB disconnect, device number 27 [ 462.227084][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 462.227094][ T30] audit: type=1400 audit(1757172996.016:1914): avc: denied { read } for pid=5205 comm="acpid" name="event9" dev="devtmpfs" ino=3205 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 462.267247][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.314515][ T5929] usb 1-1: config 0 descriptor?? [ 462.335036][ T30] audit: type=1400 audit(1757172996.016:1915): avc: denied { open } for pid=5205 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=3205 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 462.360517][ T30] audit: type=1400 audit(1757172996.016:1916): avc: denied { ioctl } for pid=5205 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=3205 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 462.464304][ T30] audit: type=1400 audit(1757172996.256:1917): avc: denied { module_request } for pid=10192 comm="syz.4.1152" kmod="net-pf-10-proto-132-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 462.903493][ T5929] hdpvr 1-1:0.0: firmware version 0x51 dated [ 462.918598][ T5929] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 463.510727][ T30] audit: type=1400 audit(1757172997.296:1918): avc: denied { bind } for pid=10203 comm="syz.2.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 463.572757][ T30] audit: type=1400 audit(1757172997.296:1919): avc: denied { write } for pid=10203 comm="syz.2.1154" path="socket:[23114]" dev="sockfs" ino=23114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 463.759248][ T30] audit: type=1400 audit(1757172997.296:1920): avc: denied { create } for pid=10203 comm="syz.2.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 463.783187][ T30] audit: type=1400 audit(1757172997.296:1921): avc: denied { connect } for pid=10203 comm="syz.2.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 463.810534][ T30] audit: type=1400 audit(1757172997.396:1922): avc: denied { create } for pid=10209 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 464.359417][ T30] audit: type=1400 audit(1757172997.416:1923): avc: denied { ioctl } for pid=10209 comm="syz.2.1156" path="socket:[23122]" dev="sockfs" ino=23122 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 464.432434][ T9] vhci_hcd: vhci_device speed not set [ 464.506872][ T5929] hdpvr 1-1:0.0: Could not setup controls [ 464.553910][ T5929] hdpvr 1-1:0.0: registering videodev failed [ 465.230755][T10219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1158'. [ 465.278610][T10219] comedi comedi0: dt2814: I/O port conflict (0x5,2) [ 465.464312][ T5929] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 465.508757][ T5929] usb 1-1: USB disconnect, device number 31 [ 466.106568][T10229] bridge_slave_0: left allmulticast mode [ 466.112601][T10229] bridge_slave_0: left promiscuous mode [ 466.119089][T10229] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.730733][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 467.730743][ T30] audit: type=1400 audit(1757173001.496:1932): avc: denied { ioctl } for pid=10232 comm="syz.3.1162" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23568 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 467.788453][T10233] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 467.795046][T10233] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 467.803776][T10233] vhci_hcd vhci_hcd.0: Device attached [ 467.851703][ T30] audit: type=1400 audit(1757173001.496:1933): avc: denied { read } for pid=10232 comm="syz.3.1162" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 467.866699][T10229] bridge_slave_1: left allmulticast mode [ 467.874831][ T30] audit: type=1400 audit(1757173001.496:1934): avc: denied { open } for pid=10232 comm="syz.3.1162" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 467.874875][ T30] audit: type=1400 audit(1757173001.506:1935): avc: denied { read write } for pid=10223 comm="syz.1.1161" name="vbi5" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 467.874914][ T30] audit: type=1400 audit(1757173001.506:1936): avc: denied { open } for pid=10223 comm="syz.1.1161" path="/dev/vbi5" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 467.874951][ T30] audit: type=1400 audit(1757173001.506:1937): avc: denied { ioctl } for pid=10223 comm="syz.1.1161" path="/dev/vbi5" dev="devtmpfs" ino=981 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 467.874987][ T30] audit: type=1400 audit(1757173001.506:1938): avc: denied { create } for pid=10220 comm="syz.0.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 467.875022][ T30] audit: type=1400 audit(1757173001.506:1939): avc: denied { sys_admin } for pid=10220 comm="syz.0.1159" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 467.875065][ T30] audit: type=1400 audit(1757173001.556:1940): avc: denied { write } for pid=10232 comm="syz.3.1162" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 467.875101][ T30] audit: type=1400 audit(1757173001.556:1941): avc: denied { write } for pid=10232 comm="syz.3.1162" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 467.906254][T10229] bridge_slave_1: left promiscuous mode [ 468.089303][T10229] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.120006][T10229] bond0: (slave bond_slave_0): Releasing backup interface [ 468.139491][T10229] bond0: (slave bond_slave_1): Releasing backup interface [ 468.160884][ T24] usb 39-1: new high-speed USB device number 9 using vhci_hcd [ 468.176752][T10229] team0: Port device team_slave_0 removed [ 468.197558][T10229] team0: Port device team_slave_1 removed [ 468.203349][ T92] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 468.214814][T10229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.223705][T10229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.242831][T10229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.253242][T10229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.262107][T10241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1164'. [ 468.360605][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 468.367172][ T92] usb 3-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 468.383063][ T92] usb 3-1: config 0 interface 0 has no altsetting 0 [ 468.394917][ T92] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 468.406498][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.419187][ T92] usb 3-1: Product: syz [ 468.425195][ T92] usb 3-1: Manufacturer: syz [ 468.429837][ T92] usb 3-1: SerialNumber: syz [ 468.440672][ T92] usb 3-1: config 0 descriptor?? [ 468.452826][ T92] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 468.464162][T10246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10246 comm=syz.0.1166 [ 468.486490][T10248] Bluetooth: MGMT ver 1.23 [ 468.802607][ T92] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 468.810168][ T92] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 468.836454][T10234] vhci_hcd: connection reset by peer [ 468.848570][ T12] vhci_hcd: stop threads [ 468.861205][ T12] vhci_hcd: release socket [ 468.868408][ T92] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 468.896840][ T12] vhci_hcd: disconnect device [ 468.948976][T10255] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 468.955490][T10255] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 468.964970][T10255] vhci_hcd vhci_hcd.0: Device attached [ 469.012856][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.024337][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.037660][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.054171][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.074059][ T92] usb 3-1: USB disconnect, device number 28 [ 469.210687][ T840] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 470.278867][T10274] ref_ctr increment failed for inode: 0x499 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880318db5c0 [ 470.375383][T10275] random: crng reseeded on system resumption [ 471.060527][T10256] vhci_hcd: connection reset by peer [ 471.136580][ T3535] vhci_hcd: stop threads [ 471.141323][ T3535] vhci_hcd: release socket [ 471.145961][ T3535] vhci_hcd: disconnect device [ 471.315598][T10285] random: crng reseeded on system resumption [ 471.877643][T10286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1178'. [ 472.866967][T10296] random: crng reseeded on system resumption [ 473.383269][ T24] vhci_hcd: vhci_device speed not set [ 473.489142][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 473.489152][ T30] audit: type=1400 audit(1757173007.276:1961): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 473.832183][ T30] audit: type=1326 audit(1757173007.596:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a98ebe9 code=0x7ffc0000 [ 473.926609][ T30] audit: type=1326 audit(1757173007.596:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a98ebe9 code=0x7ffc0000 [ 474.031634][ T30] audit: type=1326 audit(1757173007.596:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff00a98ebe9 code=0x7ffc0000 [ 474.301374][ T30] audit: type=1326 audit(1757173007.596:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a98ebe9 code=0x7ffc0000 [ 474.331199][ T840] vhci_hcd: vhci_device speed not set [ 474.352387][T10326] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 474.358877][T10326] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 474.366515][T10326] vhci_hcd vhci_hcd.0: Device attached [ 474.860656][ T9] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 474.896528][ T30] audit: type=1326 audit(1757173007.596:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a98ebe9 code=0x7ffc0000 [ 475.090498][ T30] audit: type=1326 audit(1757173007.606:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff00a98ebe9 code=0x7ffc0000 [ 475.269432][ T30] audit: type=1326 audit(1757173007.606:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a98ebe9 code=0x7ffc0000 [ 475.329255][ T30] audit: type=1326 audit(1757173007.606:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a98ebe9 code=0x7ffc0000 [ 475.365535][ T30] audit: type=1400 audit(1757173007.606:1970): avc: denied { read open } for pid=10309 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.604533][T10328] vhci_hcd: connection reset by peer [ 475.620784][ T49] vhci_hcd: stop threads [ 475.625199][ T49] vhci_hcd: release socket [ 475.632538][ T49] vhci_hcd: disconnect device [ 476.033222][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 476.833572][T10364] random: crng reseeded on system resumption [ 477.222388][T10362] tmpfs: Bad value for 'mpol' [ 477.761152][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 477.780966][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 477.790217][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 478.883433][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 478.883494][ T30] audit: type=1400 audit(1757173012.676:2033): avc: denied { create } for pid=10385 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 478.970681][ T30] audit: type=1400 audit(1757173012.706:2034): avc: denied { setopt } for pid=10385 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 479.180899][ T30] audit: type=1400 audit(1757173012.706:2035): avc: denied { connect } for pid=10385 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 479.255924][T10392] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 479.400831][ T9306] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 479.401898][T10392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.436526][T10405] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 479.443039][T10405] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 479.450868][T10405] vhci_hcd vhci_hcd.0: Device attached [ 479.562400][ T9306] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 479.577781][ T9306] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 479.610606][ T9306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.620809][ T840] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 479.643996][ T9306] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 479.695507][ T9306] usb 3-1: config 1 has no interface number 1 [ 479.701700][ T92] usb 35-1: new high-speed USB device number 11 using vhci_hcd [ 479.740643][ T9306] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 479.750843][ T30] audit: type=1400 audit(1757173013.536:2036): avc: denied { create } for pid=10412 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 479.786084][ T9306] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.866996][T10415] befs: (nullb0): No write support. Marking filesystem read-only [ 479.878846][T10415] befs: (nullb0): invalid magic header [ 479.905660][ T840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.917176][ T30] audit: type=1400 audit(1757173013.646:2037): avc: denied { mounton } for pid=10412 comm="syz.0.1201" path="/244/bus" dev="tmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 480.132470][ T9306] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.144507][ T9306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.160887][ T9] vhci_hcd: vhci_device speed not set [ 480.166072][ T840] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 480.290875][ T840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.299181][ T840] usb 4-1: Product: syz [ 480.309286][ T840] usb 4-1: Manufacturer: syz [ 480.310709][ T9306] usb 3-1: Product: syz [ 480.323428][ T840] usb 4-1: SerialNumber: syz [ 480.751332][ T30] audit: type=1400 audit(1757173013.686:2038): avc: denied { write } for pid=10412 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 480.771890][ T9306] usb 3-1: Manufacturer: syz [ 480.786347][ T9306] usb 3-1: SerialNumber: syz [ 480.788833][ T840] usb 4-1: config 0 descriptor?? [ 480.811604][ T840] ims_pcu 4-1:0.0: Zero length descriptor [ 480.817508][ T840] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 481.568632][ T9306] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 481.592789][ T5929] usb 4-1: USB disconnect, device number 31 [ 481.612044][ T9306] usb 3-1: MIDIStreaming interface descriptor not found [ 481.920864][T10406] vhci_hcd: connection reset by peer [ 481.939705][ T30] audit: type=1400 audit(1757173015.726:2039): avc: denied { bind } for pid=10432 comm="syz.4.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 481.943727][ T6883] vhci_hcd: stop threads [ 482.039649][ T6883] vhci_hcd: release socket [ 482.094310][ T30] audit: type=1400 audit(1757173015.786:2040): avc: denied { getopt } for pid=10438 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 482.113400][ T9306] usb 3-1: USB disconnect, device number 29 [ 482.114100][ T6883] vhci_hcd: disconnect device [ 482.497957][ T30] audit: type=1400 audit(1757173016.276:2041): avc: denied { create } for pid=10447 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 482.557723][ T30] audit: type=1400 audit(1757173016.276:2042): avc: denied { ioctl } for pid=10447 comm="syz.3.1207" path="socket:[23407]" dev="sockfs" ino=23407 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 483.113735][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1209'. [ 483.564616][T10463] kvm: emulating exchange as write [ 483.915496][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1211'. [ 484.020929][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 484.020944][ T30] audit: type=1400 audit(1757173017.806:2046): avc: denied { bind } for pid=10477 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 484.050199][ T30] audit: type=1400 audit(1757173017.806:2047): avc: denied { create } for pid=10475 comm="syz.4.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 484.070680][ T30] audit: type=1400 audit(1757173017.836:2048): avc: denied { setopt } for pid=10477 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 484.091998][ T30] audit: type=1400 audit(1757173017.846:2049): avc: denied { write } for pid=10475 comm="syz.4.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 484.183142][ T30] audit: type=1400 audit(1757173017.966:2050): avc: denied { ioctl } for pid=10477 comm="syz.1.1213" path="socket:[24398]" dev="sockfs" ino=24398 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 484.343076][T10491] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 484.349593][T10491] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 484.357597][T10491] vhci_hcd vhci_hcd.0: Device attached [ 485.780965][ T30] audit: type=1400 audit(1757173019.566:2051): avc: denied { create } for pid=10516 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 486.190070][T10493] vhci_hcd: connection reset by peer [ 486.217914][ T49] vhci_hcd: stop threads [ 486.238825][ T49] vhci_hcd: release socket [ 486.262703][ T49] vhci_hcd: disconnect device [ 486.347938][ T92] vhci_hcd: vhci_device speed not set [ 486.398956][ T30] audit: type=1400 audit(1757173020.186:2052): avc: denied { name_bind } for pid=10536 comm="syz.2.1220" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 486.510658][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 486.551710][ T30] audit: type=1400 audit(1757173020.186:2053): avc: denied { node_bind } for pid=10536 comm="syz.2.1220" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 486.576287][ T30] audit: type=1400 audit(1757173020.266:2054): avc: denied { create } for pid=10533 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 486.617388][ T30] audit: type=1400 audit(1757173020.266:2055): avc: denied { connect } for pid=10533 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 486.763012][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.785741][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.838614][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 486.890485][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 486.933572][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 486.944925][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.096428][T10554] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1223'. [ 487.378528][ T24] usb 4-1: config 0 descriptor?? [ 488.888540][T10576] random: crng reseeded on system resumption [ 490.106176][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 490.115805][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 490.152002][ T24] usb 4-1: USB disconnect, device number 32 [ 490.350691][ T840] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 490.733916][T10593] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 490.740433][T10593] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 490.748280][T10593] vhci_hcd vhci_hcd.0: Device attached [ 490.862142][ T840] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 490.908940][ T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.920750][ T5903] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 490.942738][ T840] usb 3-1: config 0 descriptor?? [ 490.990697][ T92] usb 41-1: new high-speed USB device number 9 using vhci_hcd [ 491.112319][ T5903] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 491.130024][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.142301][ T5903] usb 1-1: config 0 descriptor?? [ 491.215133][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 491.215144][ T30] audit: type=1400 audit(1757173025.006:2058): avc: denied { setcheckreqprot } for pid=10582 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 491.253382][ T840] ath6kl: Failed to submit usb control message: -71 [ 491.260288][ T840] ath6kl: unable to send the bmi data to the device: -71 [ 491.269921][ T840] ath6kl: Unable to send get target info: -71 [ 491.283673][ T840] ath6kl: Failed to init ath6kl core: -71 [ 491.297127][ T840] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 491.323469][ T840] usb 3-1: USB disconnect, device number 30 [ 491.407594][ T30] audit: type=1400 audit(1757173025.196:2059): avc: denied { setcheckreqprot } for pid=10588 comm="syz.0.1231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 491.430321][ T5903] ath6kl: Failed to submit usb control message: -71 [ 491.437005][ T5903] ath6kl: unable to send the bmi data to the device: -71 [ 491.444510][ T5903] ath6kl: Unable to send get target info: -71 [ 491.452223][ T5903] ath6kl: Failed to init ath6kl core: -71 [ 491.463268][ T5903] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 491.479792][ T5903] usb 1-1: USB disconnect, device number 32 [ 491.553900][ T30] audit: type=1400 audit(1757173025.346:2060): avc: denied { read write } for pid=5843 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.579318][ T30] audit: type=1400 audit(1757173025.346:2061): avc: denied { open } for pid=5843 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.605375][ T30] audit: type=1400 audit(1757173025.346:2062): avc: denied { ioctl } for pid=5843 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.657723][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 491.710473][ T30] audit: type=1400 audit(1757173025.486:2063): avc: denied { create } for pid=10609 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 491.750068][ T30] audit: type=1400 audit(1757173025.526:2064): avc: denied { read } for pid=10611 comm="syz.1.1237" name="event3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 491.778523][T10614] geneve2: entered promiscuous mode [ 491.848984][ T30] audit: type=1400 audit(1757173025.526:2065): avc: denied { open } for pid=10611 comm="syz.1.1237" path="/dev/input/event3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 491.898597][ T30] audit: type=1400 audit(1757173025.526:2066): avc: denied { ioctl } for pid=10611 comm="syz.1.1237" path="/dev/input/event3" dev="devtmpfs" ino=966 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 491.926673][ T30] audit: type=1400 audit(1757173025.636:2067): avc: denied { create } for pid=10615 comm="syz.2.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.136212][T10594] vhci_hcd: connection reset by peer [ 492.142297][T10624] random: crng reseeded on system resumption [ 492.163655][ T1090] vhci_hcd: stop threads [ 492.168195][ T1090] vhci_hcd: release socket [ 492.179738][ T1090] vhci_hcd: disconnect device [ 493.914679][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 494.388699][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.424952][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.450733][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 494.475385][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.509386][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.527334][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.548922][ T24] usb 1-1: config 0 descriptor?? [ 496.561183][ T92] vhci_hcd: vhci_device speed not set [ 496.802911][T10702] random: crng reseeded on system resumption [ 496.899393][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 496.933849][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 496.980460][ T24] usb 1-1: USB disconnect, device number 33 [ 497.300790][ T5903] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 497.328206][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 497.328220][ T30] audit: type=1400 audit(1757173031.116:2148): avc: denied { read } for pid=10708 comm="syz.0.1257" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 497.517561][T10709] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 497.525143][T10709] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 498.325258][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 498.340080][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 498.341753][T10709] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 498.363916][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.392034][ T5903] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 498.401256][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.411533][T10709] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 498.417827][ T5903] usb 3-1: config 0 descriptor?? [ 498.434647][ T30] audit: type=1400 audit(1757173032.226:2149): avc: denied { read write } for pid=10721 comm="syz.4.1260" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 498.465195][ T30] audit: type=1400 audit(1757173032.226:2150): avc: denied { open } for pid=10721 comm="syz.4.1260" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 498.580519][T10709] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 498.635182][T10709] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 498.650872][ T30] audit: type=1400 audit(1757173032.436:2151): avc: denied { read } for pid=10704 comm="syz.2.1256" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 498.676108][T10709] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 498.707482][T10709] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 498.737699][T10709] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 498.760598][ T30] audit: type=1400 audit(1757173032.436:2152): avc: denied { open } for pid=10704 comm="syz.2.1256" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 498.859464][ T30] audit: type=1400 audit(1757173032.616:2153): avc: denied { ioctl } for pid=10704 comm="syz.2.1256" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 498.893754][ T30] audit: type=1400 audit(1757173032.636:2154): avc: denied { mounton } for pid=10704 comm="syz.2.1256" path="/242/file1" dev="tmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 498.917130][ T30] audit: type=1400 audit(1757173032.636:2155): avc: denied { mount } for pid=10704 comm="syz.2.1256" name="/" dev="autofs" ino=25695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 499.000923][T10735] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1263'. [ 499.115579][T10736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1262'. [ 499.201222][ T30] audit: type=1400 audit(1757173032.976:2156): avc: denied { create } for pid=10730 comm="syz.1.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 499.446563][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 499.452521][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 499.461939][ T5903] usb 3-1: USB disconnect, device number 31 [ 499.469114][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 499.836678][ T30] audit: type=1400 audit(1757173033.626:2157): avc: denied { bind } for pid=10740 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 500.017447][T10746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1267'. [ 501.215562][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.222235][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.250964][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 501.257230][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 501.263508][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 501.530823][T10763] Bluetooth: hci0: command 0x0406 tx timeout [ 501.820422][T10773] FAULT_INJECTION: forcing a failure. [ 501.820422][T10773] name failslab, interval 1, probability 0, space 0, times 0 [ 501.880714][T10773] CPU: 1 UID: 0 PID: 10773 Comm: syz.0.1275 Not tainted syzkaller #0 PREEMPT(full) [ 501.880740][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.880751][T10773] Call Trace: [ 501.880756][T10773] [ 501.880763][T10773] dump_stack_lvl+0x16c/0x1f0 [ 501.880790][T10773] should_fail_ex+0x512/0x640 [ 501.880812][T10773] ? __kvmalloc_node_noprof+0x124/0x620 [ 501.880831][T10773] should_failslab+0xc2/0x120 [ 501.880850][T10773] __kvmalloc_node_noprof+0x137/0x620 [ 501.880867][T10773] ? unix_prepare_fpl+0x211/0x320 [ 501.880895][T10773] ? unix_prepare_fpl+0x211/0x320 [ 501.880917][T10773] unix_prepare_fpl+0x211/0x320 [ 501.880946][T10773] unix_scm_to_skb+0x3ba/0x520 [ 501.880974][T10773] unix_dgram_sendmsg+0x40f/0x17f0 [ 501.881000][T10773] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 501.881027][T10773] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 501.881061][T10773] ____sys_sendmsg+0xa98/0xc70 [ 501.881087][T10773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.881115][T10773] ? __pfx__kstrtoull+0x10/0x10 [ 501.881137][T10773] ___sys_sendmsg+0x134/0x1d0 [ 501.881157][T10773] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.881189][T10773] ? find_held_lock+0x2b/0x80 [ 501.881224][T10773] __sys_sendmmsg+0x200/0x420 [ 501.881247][T10773] ? __pfx___sys_sendmmsg+0x10/0x10 [ 501.881275][T10773] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 501.881306][T10773] ? fput+0x9b/0xd0 [ 501.881328][T10773] ? ksys_write+0x1ac/0x250 [ 501.881344][T10773] ? __pfx_ksys_write+0x10/0x10 [ 501.881365][T10773] __x64_sys_sendmmsg+0x9c/0x100 [ 501.881385][T10773] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.881405][T10773] do_syscall_64+0xcd/0x4c0 [ 501.881428][T10773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.881444][T10773] RIP: 0033:0x7ff00a98ebe9 [ 501.881458][T10773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.881474][T10773] RSP: 002b:00007ff00b813038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 501.881491][T10773] RAX: ffffffffffffffda RBX: 00007ff00abc5fa0 RCX: 00007ff00a98ebe9 [ 501.881501][T10773] RDX: 0000000000000001 RSI: 0000200000005940 RDI: 0000000000000004 [ 501.881511][T10773] RBP: 00007ff00b813090 R08: 0000000000000000 R09: 0000000000000000 [ 501.881521][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.881530][T10773] R13: 00007ff00abc6038 R14: 00007ff00abc5fa0 R15: 00007ffec6460f58 [ 501.881552][T10773] [ 502.483052][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 502.483084][ T30] audit: type=1400 audit(1757173036.236:2173): avc: denied { ioctl } for pid=10771 comm="syz.2.1276" path="/dev/video8" dev="devtmpfs" ino=951 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 503.125259][ T30] audit: type=1400 audit(1757173036.436:2174): avc: denied { ioctl } for pid=10780 comm="syz.4.1278" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 503.151286][ T30] audit: type=1400 audit(1757173036.746:2175): avc: denied { create } for pid=10789 comm="syz.0.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 505.130611][T10763] Bluetooth: hci4: command 0x0406 tx timeout [ 505.136658][T10763] Bluetooth: hci2: command 0x0406 tx timeout [ 505.144037][T10763] Bluetooth: hci1: command 0x0406 tx timeout [ 608.070526][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 608.077482][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10789/1:b..l P5220/1:b..l P5854/1:b..l [ 608.088125][ C0] rcu: (detected by 0, t=10502 jiffies, g=36661, q=1091 ncpus=2) [ 608.095914][ C0] task:syz-executor state:R running task stack:24024 pid:5854 tgid:5854 ppid:5841 task_flags:0x400140 flags:0x00004000 [ 608.109811][ C0] Call Trace: [ 608.113082][ C0] [ 608.116005][ C0] __schedule+0x1190/0x5de0 [ 608.120502][ C0] ? look_up_lock_class+0x6b/0x150 [ 608.125620][ C0] ? __pfx___schedule+0x10/0x10 [ 608.130471][ C0] ? page_table_check_set+0x627/0x750 [ 608.135849][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 608.140870][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 608.146240][ C0] preempt_schedule_common+0x44/0xc0 [ 608.151520][ C0] preempt_schedule_thunk+0x16/0x30 [ 608.156727][ C0] _raw_spin_unlock+0x3e/0x50 [ 608.161398][ C0] copy_page_range+0x1f7d/0x5c80 [ 608.166365][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 608.171656][ C0] ? __pfx___might_resched+0x10/0x10 [ 608.176937][ C0] ? __pfx_mas_store+0x10/0x10 [ 608.181696][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 608.186900][ C0] ? dup_mmap+0xe38/0x21d0 [ 608.191311][ C0] ? down_write+0x14d/0x200 [ 608.195812][ C0] ? up_write+0x1b2/0x520 [ 608.200131][ C0] dup_mmap+0xe88/0x21d0 [ 608.204377][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 608.209063][ C0] copy_process+0x4081/0x7690 [ 608.214425][ C0] ? do_wp_page+0x1aa7/0x4f00 [ 608.219102][ C0] ? __pfx_copy_process+0x10/0x10 [ 608.224115][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 608.229127][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 608.234497][ C0] kernel_clone+0xfc/0x930 [ 608.238909][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 608.243932][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 608.249391][ C0] __do_sys_clone+0xce/0x120 [ 608.253971][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 608.259160][ C0] ? handle_mm_fault+0x2ab/0xd10 [ 608.264103][ C0] ? do_user_addr_fault+0x843/0x1370 [ 608.269380][ C0] do_syscall_64+0xcd/0x4c0 [ 608.273878][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.279756][ C0] RIP: 0033:0x7fa8baf85453 [ 608.284156][ C0] RSP: 002b:00007ffd9cfe08f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 608.292555][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa8baf85453 [ 608.300511][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 608.308471][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 608.316425][ C0] R10: 000055557fe607d0 R11: 0000000000000246 R12: 0000000000000000 [ 608.324383][ C0] R13: 00000000000927c0 R14: 000000000007ac8b R15: 00007ffd9cfe0a90 [ 608.332353][ C0] [ 608.335360][ C0] task:udevd state:R running task stack:24712 pid:5220 tgid:5220 ppid:1 task_flags:0x400140 flags:0x00004002 [ 608.348832][ C0] Call Trace: [ 608.352095][ C0] [ 608.355016][ C0] __schedule+0x1190/0x5de0 [ 608.359516][ C0] ? __print_lock_name+0xc1/0xe0 [ 608.364444][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 608.369637][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 608.374395][ C0] ? __pfx___schedule+0x10/0x10 [ 608.379231][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 608.384165][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 608.389105][ C0] preempt_schedule_irq+0x51/0x90 [ 608.394118][ C0] irqentry_exit+0x36/0x90 [ 608.398523][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 608.404492][ C0] RIP: 0010:unwind_next_frame+0x642/0x20a0 [ 608.410289][ C0] Code: fc ff df 48 c1 e8 03 0f b6 34 10 48 8d 41 01 48 89 c7 48 c1 ef 03 0f b6 14 17 48 89 cf 83 e7 07 40 38 fe 40 0f 9e c7 40 84 f6 <40> 0f 95 c6 40 84 f7 0f 85 a1 16 00 00 83 e0 07 38 c2 40 0f 9e c6 [ 608.429881][ C0] RSP: 0018:ffffc90003b0f8b8 EFLAGS: 00000246 [ 608.435931][ C0] RAX: ffffffff913ac61f RBX: 0000000000000001 RCX: ffffffff913ac61e [ 608.443887][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 608.451842][ C0] RBP: ffffc90003b0f970 R08: ffffffff913ac622 R09: 0000000000000000 [ 608.459797][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90003b0f978 [ 608.467752][ C0] R13: ffffc90003b0f928 R14: 0000000000000005 R15: ffffc90003b0ff58 [ 608.475722][ C0] ? unwind_next_frame+0x2ec/0x20a0 [ 608.480909][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.486970][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 608.493118][ C0] arch_stack_walk+0x94/0x100 [ 608.497792][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.503849][ C0] stack_trace_save+0x8e/0xc0 [ 608.508516][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 608.513879][ C0] ? __kernel_text_address+0xd/0x40 [ 608.519064][ C0] ? unwind_get_return_address+0x59/0xa0 [ 608.524686][ C0] ? arch_stack_walk+0xa6/0x100 [ 608.529529][ C0] kasan_save_stack+0x33/0x60 [ 608.534192][ C0] ? kasan_save_stack+0x33/0x60 [ 608.539031][ C0] ? kasan_save_track+0x14/0x30 [ 608.543867][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 608.548876][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 608.554497][ C0] ? getname_flags.part.0+0x4c/0x550 [ 608.559773][ C0] ? getname_flags+0x93/0xf0 [ 608.564350][ C0] ? vfs_fstatat+0xe1/0xf0 [ 608.568759][ C0] ? __do_sys_newfstatat+0x97/0x120 [ 608.573945][ C0] ? do_syscall_64+0xcd/0x4c0 [ 608.578612][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.584726][ C0] kasan_save_track+0x14/0x30 [ 608.589402][ C0] __kasan_slab_alloc+0x89/0x90 [ 608.594239][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 608.599689][ C0] ? getname_flags.part.0+0x4c/0x550 [ 608.604972][ C0] getname_flags.part.0+0x4c/0x550 [ 608.610079][ C0] getname_flags+0x93/0xf0 [ 608.614503][ C0] vfs_fstatat+0xe1/0xf0 [ 608.618739][ C0] __do_sys_newfstatat+0x97/0x120 [ 608.623755][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 608.629403][ C0] do_syscall_64+0xcd/0x4c0 [ 608.633899][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.639776][ C0] RIP: 0033:0x7f487b311b0a [ 608.644173][ C0] RSP: 002b:00007ffd3b6d80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 608.652575][ C0] RAX: ffffffffffffffda RBX: 00007ffd3b6d8560 RCX: 00007f487b311b0a [ 608.660530][ C0] RDX: 00007ffd3b6d80d0 RSI: 00007ffd3b6d8560 RDI: 00000000ffffff9c [ 608.668487][ C0] RBP: 000055e85669f2c0 R08: 0000000000000000 R09: 0000000000000001 [ 608.676442][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3b6d8160 [ 608.684396][ C0] R13: 0000000000000100 R14: 000055e83207cbe0 R15: 00007ffd3b6d8be0 [ 608.692366][ C0] [ 608.695379][ C0] task:syz.0.1279 state:R running task stack:26264 pid:10789 tgid:10789 ppid:5844 task_flags:0x40004c flags:0x00004000 [ 608.708866][ C0] Call Trace: [ 608.712142][ C0] [ 608.715067][ C0] __schedule+0x1190/0x5de0 [ 608.719581][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 608.724529][ C0] ? __pfx___schedule+0x10/0x10 [ 608.729383][ C0] ? lock_acquire+0x179/0x350 [ 608.734086][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 608.739106][ C0] ? find_held_lock+0x2b/0x80 [ 608.743778][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 608.749152][ C0] preempt_schedule_common+0x44/0xc0 [ 608.754444][ C0] preempt_schedule_thunk+0x16/0x30 [ 608.759646][ C0] _raw_spin_unlock+0x3e/0x50 [ 608.764317][ C0] unmap_page_range+0xf77/0x42c0 [ 608.769295][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 608.774659][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 608.779593][ C0] ? uprobe_munmap+0x20/0x5c0 [ 608.784264][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 608.790153][ C0] unmap_vmas+0x218/0x470 [ 608.794481][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 608.799343][ C0] exit_mmap+0x1b9/0xb90 [ 608.803579][ C0] ? trace_contention_end+0xdd/0x130 [ 608.808852][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 608.813612][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 608.818565][ C0] __mmput+0x12a/0x410 [ 608.822628][ C0] mmput+0x62/0x70 [ 608.826340][ C0] do_exit+0x7c7/0x2bf0 [ 608.830495][ C0] ? __pfx_do_exit+0x10/0x10 [ 608.835086][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 608.840471][ C0] do_group_exit+0xd3/0x2a0 [ 608.844980][ C0] __x64_sys_exit_group+0x3e/0x50 [ 608.850009][ C0] x64_sys_call+0x14fa/0x1720 [ 608.854694][ C0] do_syscall_64+0xcd/0x4c0 [ 608.859201][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.865090][ C0] RIP: 0033:0x7ff00a98ebe9 [ 608.869499][ C0] RSP: 002b:00007ffec64612b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 608.877902][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff00a98ebe9 [ 608.885860][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 608.893815][ C0] RBP: 00007ffec646131c R08: 00000013c64613af R09: 00000000000927c0 [ 608.901774][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000104 [ 608.909731][ C0] R13: 00000000000927c0 R14: 000000000007aa0e R15: 00007ffec6461370 [ 608.917706][ C0] [ 608.920715][ C0] rcu: rcu_preempt kthread starved for 9714 jiffies! g36661 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 608.931807][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 608.941757][ C0] rcu: RCU grace-period kthread stack dump: [ 608.947626][ C0] task:rcu_preempt state:R running task stack:27928 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 608.961114][ C0] Call Trace: [ 608.964407][ C0] [ 608.967328][ C0] __schedule+0x1190/0x5de0 [ 608.971842][ C0] ? __pfx___schedule+0x10/0x10 [ 608.976692][ C0] ? find_held_lock+0x2b/0x80 [ 608.981368][ C0] ? schedule+0x2d7/0x3a0 [ 608.985701][ C0] schedule+0xe7/0x3a0 [ 608.989759][ C0] schedule_timeout+0x123/0x290 [ 608.994596][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 608.999955][ C0] ? __pfx_process_timeout+0x10/0x10 [ 609.005233][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 609.011028][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 609.016484][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 609.021238][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 609.026518][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 609.031723][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 609.036660][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 609.041523][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 609.047331][ C0] rcu_gp_kthread+0x270/0x380 [ 609.052005][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 609.057196][ C0] ? rcu_is_watching+0x12/0xc0 [ 609.061959][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 609.067155][ C0] ? __kthread_parkme+0x19e/0x250 [ 609.072179][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 609.077366][ C0] kthread+0x3c2/0x780 [ 609.081433][ C0] ? __pfx_kthread+0x10/0x10 [ 609.086013][ C0] ? rcu_is_watching+0x12/0xc0 [ 609.090773][ C0] ? __pfx_kthread+0x10/0x10 [ 609.095362][ C0] ret_from_fork+0x5d4/0x6f0 [ 609.099936][ C0] ? __pfx_kthread+0x10/0x10 [ 609.104514][ C0] ret_from_fork_asm+0x1a/0x30 [ 609.109280][ C0] [ 609.112283][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 609.118592][ C0] Sending NMI from CPU 0 to CPUs 1: [ 609.123781][ C1] NMI backtrace for cpu 1 [ 609.123792][ C1] CPU: 1 UID: 0 PID: 10786 Comm: vhost-10785 Not tainted syzkaller #0 PREEMPT(full) [ 609.123808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.123815][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x70 [ 609.123832][ C1] Code: 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 b8 21 1b 12 65 8b 05 c9 21 1b 12 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 [ 609.123843][ C1] RSP: 0018:ffffc9000475f8d8 EFLAGS: 00000287 [ 609.123855][ C1] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffc9001a772000 [ 609.123863][ C1] RDX: ffff88802e0f8000 RSI: ffffffff82055704 RDI: 0000000000000007 [ 609.123871][ C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 609.123878][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000fff [ 609.123886][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 609.123894][ C1] FS: 00007f90e05476c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 609.123907][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.123916][ C1] CR2: 0000200000027000 CR3: 0000000079cc6000 CR4: 00000000003526f0 [ 609.123924][ C1] Call Trace: [ 609.123930][ C1] [ 609.123934][ C1] gup_fast_fallback+0xeb4/0x23f0 [ 609.123961][ C1] ? __pfx_gup_fast_fallback+0x10/0x10 [ 609.123979][ C1] ? __mutex_trylock_common+0xe9/0x250 [ 609.124000][ C1] pin_user_pages_fast+0xa7/0xf0 [ 609.124019][ C1] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 609.124035][ C1] ? trace_contention_end+0xdd/0x130 [ 609.124048][ C1] log_write+0x267/0x320 [ 609.124064][ C1] ? __pfx_log_write+0x10/0x10 [ 609.124077][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 609.124092][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 609.124108][ C1] log_used.isra.0+0x170/0x1e0 [ 609.124124][ C1] vhost_update_used_flags+0x2ff/0x3d0 [ 609.124142][ C1] vhost_disable_notify+0xba/0x180 [ 609.124159][ C1] vhost_vsock_handle_tx_kick+0x18e/0xd20 [ 609.124179][ C1] ? __pfx_vhost_vsock_handle_tx_kick+0x10/0x10 [ 609.124196][ C1] ? find_held_lock+0x2b/0x80 [ 609.124210][ C1] ? find_held_lock+0x2b/0x80 [ 609.124225][ C1] ? rcu_is_watching+0x12/0xc0 [ 609.124239][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 609.124252][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 609.124268][ C1] vhost_run_work_list+0x18b/0x230 [ 609.124283][ C1] vhost_task_fn+0x162/0x460 [ 609.124296][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 609.124309][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 609.124323][ C1] ? find_held_lock+0x2b/0x80 [ 609.124338][ C1] ? rcu_is_watching+0x12/0xc0 [ 609.124352][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 609.124364][ C1] ret_from_fork+0x5d4/0x6f0 [ 609.124375][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 609.124387][ C1] ret_from_fork_asm+0x1a/0x30 [ 609.124406][ C1] [ 609.124492][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 609.790983][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 609.797286][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=59488 sent=0 n=-1 (errno 32: Broken pipe) [ 609.925256][T10802] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 609.943074][T10802] CPU: 0 UID: 0 PID: 10802 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 609.943089][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.943095][T10802] Call Trace: [ 609.943099][T10802] [ 609.943103][T10802] dump_stack_lvl+0x16c/0x1f0 [ 609.943120][T10802] warn_alloc+0x248/0x3a0 [ 609.943132][T10802] ? __pfx_warn_alloc+0x10/0x10 [ 609.943148][T10802] ? kcov_ioctl+0x4c/0x730 [ 609.943159][T10802] ? __vmalloc_node_noprof+0xad/0xf0 [ 609.943176][T10802] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 609.943196][T10802] ? kcov_ioctl+0x4c/0x730 [ 609.943209][T10802] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 609.943226][T10802] ? hook_file_ioctl_common+0x145/0x410 [ 609.943239][T10802] ? kcov_ioctl+0x4c/0x730 [ 609.943250][T10802] vmalloc_user_noprof+0x9e/0xe0 [ 609.943265][T10802] ? kcov_ioctl+0x4c/0x730 [ 609.943275][T10802] kcov_ioctl+0x4c/0x730 [ 609.943286][T10802] ? __pfx_kcov_ioctl+0x10/0x10 [ 609.943297][T10802] __x64_sys_ioctl+0x18b/0x210 [ 609.943314][T10802] do_syscall_64+0xcd/0x4c0 [ 609.943329][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.943339][T10802] RIP: 0033:0x7f1aaa98e7eb [ 609.943348][T10802] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 609.943358][T10802] RSP: 002b:00007ffe8aa88af0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.943368][T10802] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f1aaa98e7eb [ 609.943374][T10802] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 609.943380][T10802] RBP: 00007f1aaabc6038 R08: 0000000000000005 R09: 0000000000000000 [ 609.943386][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.943392][T10802] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 609.943404][T10802] [ 609.943408][T10802] Mem-Info: [ 610.131841][T10802] active_anon:10411 inactive_anon:0 isolated_anon:0 [ 610.131841][T10802] active_file:6775 inactive_file:40739 isolated_file:0 [ 610.131841][T10802] unevictable:768 dirty:306 writeback:31 [ 610.131841][T10802] slab_reclaimable:11941 slab_unreclaimable:99435 [ 610.131841][T10802] mapped:27326 shmem:1355 pagetables:1322 [ 610.131841][T10802] sec_pagetables:0 bounce:0 [ 610.131841][T10802] kernel_misc_reclaimable:0 [ 610.131841][T10802] free:1310801 free_pcp:14199 free_cma:0 [ 610.177309][T10802] Node 0 active_anon:41644kB inactive_anon:0kB active_file:27100kB inactive_file:162752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109304kB dirty:1224kB writeback:124kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12060kB pagetables:5144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 610.209788][T10802] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 610.239694][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1281'. [ 610.248872][T10802] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 610.279847][T10802] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 610.286067][T10802] Node 0 DMA32 free:1346704kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41628kB inactive_anon:0kB active_file:27100kB inactive_file:161428kB unevictable:1536kB writepending:1248kB present:3129332kB managed:2539344kB mlocked:0kB bounce:0kB free_pcp:38488kB local_pcp:19896kB free_cma:0kB [ 610.295771][ T30] audit: type=1400 audit(1757173143.696:2176): avc: denied { write } for pid=5833 comm="syz-executor" path="pipe:[3936]" dev="pipefs" ino=3936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 610.318486][T10802] lowmem_reserve[]: 0 0 1 1 1 [ 610.433855][T10802] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 610.632728][T10802] lowmem_reserve[]: 0 0 0 0 0 [ 610.637432][T10802] Node 1 Normal free:3881128kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18016kB local_pcp:7648kB free_cma:0kB [ 610.810541][T10802] lowmem_reserve[]: 0 0 0 0 0 [ 610.822516][T10802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 610.896782][T10802] Node 0 DMA32: 2722*4kB (UM) 1212*8kB (UME) 752*16kB (UME) 631*32kB (UME) 276*64kB (UME) 141*128kB (UME) 78*256kB (UM) 42*512kB (UME) 34*1024kB (UME) 14*2048kB (UME) 309*4096kB (UM) = 1459144kB [ 610.970569][T10802] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 611.086187][T10802] Node 1 Normal: 212*4kB (UM) 55*8kB (UME) 48*16kB (UME) 167*32kB (UME) 49*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 943*4096kB (M) = 3881128kB [ 611.106304][T10802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 611.120863][T10802] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 611.133830][T10802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 611.161796][T10802] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 611.173014][ T3535] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.262083][T10802] 47518 total pagecache pages [ 611.266811][T10802] 0 pages in swap cache [ 611.280147][T10802] Free swap = 124996kB [ 611.284469][T10802] Total swap = 124996kB [ 611.288626][T10802] 2097051 pages RAM [ 611.300622][T10802] 0 pages HighMem/MovableOnly [ 611.312407][T10802] 430253 pages reserved [ 611.323149][T10802] 0 pages cma reserved [ 611.386522][ T3535] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.543462][ T3535] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.613327][ T3535] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.983525][ T3535] bond0 (unregistering): Released all slaves [ 612.244750][ T3535] hsr_slave_0: left promiscuous mode [ 612.258209][ T3535] hsr_slave_1: left promiscuous mode [ 612.283312][ T3535] veth1_macvtap: left promiscuous mode [ 612.289253][ T3535] veth0_macvtap: left promiscuous mode [ 612.301592][ T3535] veth1_vlan: left promiscuous mode [ 612.306972][ T3535] veth0_vlan: left promiscuous mode [ 613.089546][ T3535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.185738][ T3535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.248831][ T3535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.311904][ T3535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.463970][ T3535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.518804][ T3535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.579254][ T3535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.634844][ T3535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.764655][ T3535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.818853][ T3535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.867250][ T3535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.939273][ T3535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.114281][ T3535] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.188178][ T3535] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.244409][ T3535] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.314908][ T3535] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.444775][ T3535] dummy0: left allmulticast mode [ 614.453075][ T3535] bridge0: port 3(dummy0) entered disabled state [ 614.465585][ T3535] bridge_slave_1: left allmulticast mode [ 614.474057][ T3535] bridge_slave_1: left promiscuous mode [ 614.480434][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.489815][ T3535] bridge_slave_0: left allmulticast mode [ 614.495506][ T3535] bridge_slave_0: left promiscuous mode [ 614.502386][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.513885][ T3535] bridge_slave_1: left allmulticast mode [ 614.519531][ T3535] bridge_slave_1: left promiscuous mode [ 614.525536][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.535529][ T3535] bridge_slave_0: left allmulticast mode [ 614.541964][ T3535] bridge_slave_0: left promiscuous mode [ 614.547642][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.557943][ T3535] bridge_slave_1: left allmulticast mode [ 614.565226][ T3535] bridge_slave_1: left promiscuous mode [ 614.571171][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.582081][ T3535] bridge_slave_0: left allmulticast mode [ 614.587724][ T3535] bridge_slave_0: left promiscuous mode [ 614.594364][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.604198][ T3535] bridge_slave_1: left allmulticast mode [ 614.609815][ T3535] bridge_slave_1: left promiscuous mode [ 614.617586][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.625959][ T3535] bridge_slave_0: left allmulticast mode [ 614.632275][ T3535] bridge_slave_0: left promiscuous mode [ 614.637875][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.958519][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.968530][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.978057][ T3535] bond0 (unregistering): Released all slaves [ 615.138756][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.150195][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.159727][ T3535] bond0 (unregistering): Released all slaves [ 615.350383][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.360338][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.370029][ T3535] bond0 (unregistering): Released all slaves [ 615.432434][ T3535] bond1 (unregistering): Released all slaves [ 615.494975][ T3535] bond2 (unregistering): Released all slaves [ 615.687789][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.697642][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.707143][ T3535] bond0 (unregistering): Released all slaves [ 615.871391][ T3535] IPVS: stopping backup sync thread 9789 ... [ 616.457666][ T3535] hsr_slave_0: left promiscuous mode [ 616.463556][ T3535] hsr_slave_1: left promiscuous mode [ 616.469271][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.477098][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.487040][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.495293][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.506594][ T3535] hsr_slave_0: left promiscuous mode [ 616.512254][ T3535] hsr_slave_1: left promiscuous mode [ 616.517804][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.525402][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.533023][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.540377][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.550355][ T3535] hsr_slave_0: left promiscuous mode [ 616.556608][ T3535] hsr_slave_1: left promiscuous mode [ 616.562514][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.569862][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.577558][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.585210][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.595020][ T3535] hsr_slave_0: left promiscuous mode [ 616.600672][ T3535] hsr_slave_1: left promiscuous mode [ 616.606247][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.613740][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.621235][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.628585][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.663215][ T3535] veth1_macvtap: left promiscuous mode [ 616.668713][ T3535] veth0_macvtap: left promiscuous mode [ 616.674525][ T3535] veth1_vlan: left promiscuous mode [ 616.679747][ T3535] veth0_vlan: left promiscuous mode [ 616.686816][ T3535] veth1_macvtap: left promiscuous mode [ 616.692630][ T3535] veth0_macvtap: left promiscuous mode [ 616.698128][ T3535] veth1_vlan: left promiscuous mode [ 616.703410][ T3535] veth0_vlan: left promiscuous mode [ 616.709314][ T3535] veth1_macvtap: left promiscuous mode [ 616.714851][ T3535] veth0_macvtap: left promiscuous mode [ 616.720370][ T3535] veth1_vlan: left promiscuous mode [ 616.727063][ T3535] veth0_vlan: left promiscuous mode [ 616.733376][ T3535] veth1_macvtap: left promiscuous mode [ 616.738852][ T3535] veth0_macvtap: left promiscuous mode [ 616.744467][ T3535] veth1_vlan: left promiscuous mode [ 616.749698][ T3535] veth0_vlan: left promiscuous mode [ 617.129934][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 617.156870][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 617.566313][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 617.591162][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 617.995869][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 618.022430][ T3535] team0 (unregistering): Port device team_slave_0 removed