last executing test programs: 2m30.259631151s ago: executing program 0 (id=1799): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m30.027948046s ago: executing program 0 (id=1800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800000000000000080009"], 0x44}}, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000020806000186dd06100203aaaaaaaaaa1dfc020000000000000000000000000000fffffffffffffc0100"/62], 0x0) 2m29.830170479s ago: executing program 0 (id=1801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m29.764644054s ago: executing program 0 (id=1802): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a382f"], 0x4c}, 0x1, 0x0, 0x0, 0x24048001}, 0x2400c014) 2m29.662253491s ago: executing program 0 (id=1803): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a3f1800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5", 0x5f}, {0x0}], 0x2, 0x0, 0x0, 0x2663}, 0x50000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0xc0000001}) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x3, 0x400081, 0x1fd, 0x1, 0x1}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x568, 0x1d0, 0x1d0, 0x2b0, 0x3c8, 0x3c8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff0000ff], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x0, 0x2}, 0x400000}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'wg0\x00', {}, {0xff}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xffff00, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0x912a97ef168388c6, 0xff, 0xffffff00], 'pim6reg0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x4c, 0xff, 0x4, 0x3}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x4, 0xfe, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xfffffffa}, @sack_perm, @timestamp], 0x3) r8 = socket$pppl2tp(0x18, 0x1, 0x1) pipe2(&(0x7f0000000040), 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) write$rfkill(r0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_ublk_setup_io_uring(0xa, &(0x7f0000000500)={0x0, 0x30b6, 0x0, 0x2, 0x377}, &(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000300)) 2m28.334024342s ago: executing program 0 (id=1811): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m13.201997811s ago: executing program 32 (id=1811): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 10.162722558s ago: executing program 2 (id=2342): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a01000000000061117400000000001800000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x28000000}, {0x85, 0x0, 0x0, 0x50}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x24) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0x8, 0x80600) fsetxattr$security_evm(r3, &(0x7f0000000180), &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x7, 0x2) socket$unix(0x1, 0x5, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) 10.110127139s ago: executing program 1 (id=2343): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="00020000160020002abd7000fddbdf25ac1e00010000000000000000000000000a0101020000000000000000000000004e2300804e22007f0a0080006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d63c000000ffff00000000000000000000000000018300000000000000ff030000000000005e0900000000000005000000000000000800000000000000050000000000000000000600000000000400000000000000b20a00000000000005000000000000000f00000000000000fdffffffffffffff0200000009000000ff7f00002abd70000735000002000536c00000000000000001000000040000000c000f00010000000000000008001f0003000000080016000800000008001e0000040000e4000600ac14142c000000000000000000000000640101020000000000000000000000004e2300054e2200100200800032000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="ac1414aa000000000000000000000000000004d56c000000fc0100000000000000000000000000800500000000000000090000000000000007000000000000000100000000000000080000000000000004000000000000004b0e0000000000000100000000000000060000000000000000000000000000000400000000000000cb8f00000000000006000000ed010000feffffff29bd7000013510000a0004c54400000000000000"], 0x200}, 0x1, 0x0, 0x0, 0xc000}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140), 0x10, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="020000ecffffff000200000000000000", @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000a001000000000000403c0100009ae6a97e67ecdcda5d62143725b1f31c6ecd890422c7f3bbf0b64586be02617af9db90fab4e96c7992718fa22fd66a8acd2bae4e6a703c935dadaf71fdbd6d7a131b61d23c2aaf5ccc2acee3a278f930d7d1e2716bbaf4655ecb8720b2ace27669482b4cd9cb82ba76b391dc25c65fcfa1a3211b57e6fd751e153bf1113a84b971681c670ce4b7709fe53b169e5dd238ff7c2304b91a6c55444d94a65e81f7e31935c7a9659d82dd06c5a83cb949303cb529e957381e217827f8"], 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x20000011) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6) socket(0x15, 0x6, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) fsopen(&(0x7f00000000c0)='9p\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fanotify_mark(r1, 0x80, 0x8, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x3, 0x32, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 10.026924711s ago: executing program 5 (id=2345): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a01000000000061117400000000001800000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x28000000}, {0x85, 0x0, 0x0, 0x50}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x24) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0x8, 0x80600) fsetxattr$security_evm(r3, &(0x7f0000000180), &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x7, 0x2) socket$unix(0x1, 0x5, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc7, 0x0, 0x0, 0xf}) 9.016474791s ago: executing program 2 (id=2346): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b3", 0xa3}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604"], 0xdd12}], 0x1}, 0x20040851) 8.921905598s ago: executing program 5 (id=2347): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000087d788"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.727899191s ago: executing program 2 (id=2349): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x4, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @remote}, 0x0, 0x4, 0x0, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000700)}, 0x400c845) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x2c}}, 0x20048000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000190c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(r2, r2, 0x2) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) syz_io_uring_setup(0x2057, 0x0, &(0x7f00000002c0), &(0x7f00000001c0), &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r4, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x736, 0x0, 0x0) 7.566496737s ago: executing program 3 (id=2350): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.445341333s ago: executing program 1 (id=2351): eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000001240), 0x80000) socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x1455, &(0x7f0000001540)={0x0, 0xf70c, 0x400, 0x1, 0x1e0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x128}, 0x40000100) readv(r1, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = gettid() tkill(r4, 0x21) 7.438815511s ago: executing program 2 (id=2352): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, 0x0, 0x40000) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x88) syz_io_uring_setup(0x1602, &(0x7f0000000400)={0x0, 0x2f65, 0x4000, 0x0, 0x75, 0x0, r4}, &(0x7f0000000480), 0x0, &(0x7f0000000500)) r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r5, &(0x7f00000000c0)='auth.unix.ip/channel\x00', 0x2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) read$usbmon(r7, &(0x7f0000000140)=""/123, 0x7b) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xc, 0x4, 0x200, 0x0, {}, {0x1, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800}) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x31435641, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) mincore(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979f4877541100e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c52400760a89e01177d3d458dd4992861acfcff00", "f4bd000000801900", [0x2, 0x31]}}) 7.343150098s ago: executing program 3 (id=2353): write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x134b8, &(0x7f0000000740)={0x0, 0x2730, 0x20000, 0x10000802, 0x86}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r6, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xea) 5.747641505s ago: executing program 5 (id=2354): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, 0x0, 0x40000) syz_emit_ethernet(0x4a, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='auth.unix.ip/channel\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x8, 0x6, &(0x7f0000000540)=ANY=[@ANYRES16=r1], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @value=r4}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) read$usbmon(r5, &(0x7f0000000140)=""/123, 0x7b) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xc, 0x4, 0x200, 0x0, {}, {0x1, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800}) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x31435641, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) mincore(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x0) write$binfmt_misc(r5, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) listxattr(0x0, &(0x7f0000001880)=""/4096, 0x1000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979f4877541100e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c52400760a89e01177d3d458dd4992861acfcff00", "f4bd000000801900", [0x2, 0x31]}}) 5.734394921s ago: executing program 3 (id=2355): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x2c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) 5.660017831s ago: executing program 1 (id=2356): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a01000000000061117400000000001800000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x28000000}, {0x85, 0x0, 0x0, 0x50}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x24) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0x8, 0x80600) fsetxattr$security_evm(r3, &(0x7f0000000180), &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x7, 0x2) socket$unix(0x1, 0x5, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc7, 0x0, 0x0, 0xf}) 4.919373765s ago: executing program 4 (id=2357): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a01000000000061117400000000001800000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x28000000}, {0x85, 0x0, 0x0, 0x50}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x24) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0x8, 0x80600) fsetxattr$security_evm(r3, &(0x7f0000000180), &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x7, 0x2) socket$unix(0x1, 0x5, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc7, 0x0, 0x0, 0xf}) 4.68046362s ago: executing program 1 (id=2358): socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001900000828bd7000fddbdf25021080030002ff04001e000008000500ac14143ec6b973faa11a1170a82e3aee29a808eccc6cb24770264cbcef0f5358f8f2b06ff747e64136c76fc8e4632db8ec3740e1c06feaa69d27bb4ae4fae1419795bc80dcb8c51469430141a34340a390372f1f1a68ffd2e1a50e920a87a2dc93743e"], 0x24}, 0x1, 0x0, 0x0, 0x48012}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) r0 = eventfd(0xe467) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080)=r0, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 3.955504758s ago: executing program 3 (id=2359): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b3", 0xa3}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604"], 0xdd12}], 0x1}, 0x20040851) 3.840581919s ago: executing program 4 (id=2360): write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x134b8, &(0x7f0000000740)={0x0, 0x2730, 0x20000, 0x10000802, 0x86}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x39, &(0x7f0000000340), &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x1, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xea) 3.66188965s ago: executing program 3 (id=2361): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) sigaltstack(0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendto$inet(r3, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x1234, @local}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 3.236646121s ago: executing program 2 (id=2362): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140), 0x10, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="020000ecffffff000200000000000000", @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000a001000000000000403c0100009ae6a97e67ecdcda5d62143725b1f31c6ecd890422c7f3bbf0b64586be02617af9db90fab4e96c7992718fa22fd66a8acd2bae4e6a703c935dadaf71fdbd6d7a131b61d23c2aaf5ccc2acee3a278f930d7d1e2716bbaf4655ecb8720b2ace27669482b4cd9cb82ba76b391dc25c65fcfa1a3211b57e6fd751e153bf1113a84b971681c670ce4b7709fe53b169e5dd238ff7c2304b91a6c55444d94a65e81f7e31935c7a9659d82dd06c5a83cb949303cb529e957381e217827f8"], 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x20000011) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6) socket(0x15, 0x6, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r1, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) fsopen(&(0x7f00000000c0)='9p\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fanotify_mark(r0, 0x80, 0x8, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x3, 0x32, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 3.192620278s ago: executing program 1 (id=2363): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, 0x0, 0x40000) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x88) syz_io_uring_setup(0x1602, &(0x7f0000000400)={0x0, 0x2f65, 0x4000, 0x0, 0x75, 0x0, r4}, &(0x7f0000000480), &(0x7f00000004c0), 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r6 = openat(r5, &(0x7f00000000c0)='auth.unix.ip/channel\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x8, 0x6, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYBLOB="a9c643e8e912e943d29d59653acf7f5b55b47c86291125f9992068fe8b245556ed600d10013cf7b92ffc35da209a1144d2771e3e3e40a34496bd2e94a809484b9d157b1c6c4dcc1061d47e3542555bc4d253dffccb89776040c2f69b236c462ecfe625190a8917c44725601b083d211c3ae05e8d1f8779523b8f9f8d367953219a839b4f9ff655e380cec6da53673f198a85530ddafd7e407a73584dc88a8b2bd2be7665b420687920d35d1e254b4998882c45373fb540da21e0a1ecc5420e8b215b3733cd598101c432b95f", @ANYBLOB="0000000000000000b702000014000000b70200"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @value=r6}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) read$usbmon(r8, &(0x7f0000000140)=""/123, 0x7b) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xc, 0x4, 0x200, 0x0, {}, {0x1, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800}) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x31435641, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) mincore(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r10, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979f4877541100e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c52400760a89e01177d3d458dd4992861acfcff00", "f4bd000000801900", [0x2, 0x31]}}) 2.984038701s ago: executing program 4 (id=2364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000c00)="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", 0xfe0}], 0x1}}], 0x1, 0x8080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2, {0x5, 0xf}, {0xfff3, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x480bc}, 0x20000000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0xa, 0x4}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}}, 0x4000) syslog(0x3, &(0x7f0000000180)=""/21, 0x15) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000100)={0x401, 0x3, 0x65e, 0x40, 0x81, 0x7fff, 0xc}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="06000000e964eadab347df3a46d28c84084dfab907000000d526ba677dad6cafc7755baeafe93bff2c527ce848b3f04f1a9fb29307b23a3adcf481bac81a0b7ebcbacc69c8cf776a387d8d05fe4c21b574777e3b8df55006358ba9d4ddbd7cf60cd3", @ANYRES32=0x0, @ANYBLOB], 0x20) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0xeef9, 0x0, 0x3, 0x3b, 0x4}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000240)={0x4, 0xb, 0x60000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 2.674661127s ago: executing program 5 (id=2365): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000087d788"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.846531748s ago: executing program 3 (id=2366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, 0x0, 0x40000) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x88) syz_io_uring_setup(0x1602, &(0x7f0000000400)={0x0, 0x2f65, 0x4000, 0x0, 0x75, 0x0, r4}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r6 = openat(r5, &(0x7f00000000c0)='auth.unix.ip/channel\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x8, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @value=r6}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) read$usbmon(r8, &(0x7f0000000140)=""/123, 0x7b) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xc, 0x4, 0x200, 0x0, {}, {0x1, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800}) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x31435641, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) mincore(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r10, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979f4877541100e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c52400760a89e01177d3d458dd4992861acfcff00", "f4bd000000801900", [0x2, 0x31]}}) 1.673885795s ago: executing program 4 (id=2367): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a01000000000061117400000000001800000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x28000000}, {0x85, 0x0, 0x0, 0x50}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x24) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0x8, 0x80600) fsetxattr$security_evm(r3, &(0x7f0000000180), &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x7, 0x2) socket$unix(0x1, 0x5, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc7, 0x0, 0x0, 0xf}) 659.494734ms ago: executing program 4 (id=2368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 441.834709ms ago: executing program 4 (id=2369): sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120000000a0000000400000003"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, r3, 0x15, 0x0, @val=@iter={0x0}}, 0x20) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0x0, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, &(0x7f0000001080)) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r3, 0x0, &(0x7f0000000440)=@tcp=r6, 0x1}, 0x20) r7 = dup(r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r7}, 0x20) pipe2$9p(&(0x7f00000001c0), 0x800) write$P9_RLERRORu(r7, &(0x7f0000000600)={0x20b, 0x7, 0x2, {{0x1fe, '\x12{[%z^{:].\xc8\x9chZ\xd46\xdf~\x95i\xeeX\x90\xb0[\xe8\x844Q\x18\a\x9a\x1b\xd0\xe1\xa0\xd8\x0ez\"\xc7\xac\x99\xdf\xcf\xde\xec\xf4\xb2P\xe9\xd8\xde\x8e\xbc\x93\x04\xda\fs^h\xddC\xe1Ed>\xcdc!\xf7\xde \xf4\xa8\xde\x90\x14\xaeW\x88gM\x0f\xde\xf4\xbb\x1f&\xa3\xc4\xfc\\?\x15\xf7\xbd\xbcTY\x86\x85\xbdi\xee\x86wrS\xf6\x9aG|\xf3\xc9\xfc9\xf2\xea\xeeB\n\x8eIT\xcb\x9e\x8b^\xf5=\t\xe3\x02WVy\xd9\x8c\x89\v!O\x81\xbf\tLQ-\xd44RP\x167K*/z!\r$z\xbe|\xd4Vh\xde\xc3&\x1d\xad\xd7i\xb3\x11\xb7\x15~O\x13\xedj\xce\xbcp\xfc\x14_\x8a\x12\xc9\xee\xe9n\xba2\xb6\xe8S>k\x80Lq\xf3j\r\xea<[E\xf1\x85\x138\xfeN\x8dLO\nfU\xa0Q\xb1x\x98\xf9\\\x12P\xf7\xcc\x88\x14\xf4\x8a)f\xdd\n\xc63\x8a\x81\x9c\xb5\xfd\xdb\tH\xa8\x03\x17\x9a\xd7L[\x18\xf1\xed\xa8\xa8\x94\xf3B\xc1\x1b\xc4\x98\x81\x8f\xac\x1a\x1al\xd8\xcb\xd2\xac\x96\x8d\x1b!1[\xa7\xd6\x9f\xcb\xd2\x9a\xd3\x84\x8b\xd6mC\xbfc\x80\xca\\\xa0\xa1\xd2\xed\x13E\x1cj\xf5\xfd\'\x9e)\x12\xed\xce\xee\x10{~]X\f\xc9\x05g\x90i\a\x8b\xc2t\xa5\xb9\x12-V\xb0&\\Fb-\xf0\xe0\xbe\xc0\xb4\aSt\xeb\'|?7\f\xd6\xe7|+\xb7\xf0\x18\xb8\xab\xac\x8c\"X\x02\xf4\xe8\x05f3+\xf6\xcf\xd7\f\xef\x81\xb4\x105\xd9M\xa0\xa19#\x88m?\xf1z\x88[\xfcEiD\"\xffF4\xf7\x93\x84O\xd1\x17\xf6\xe3T\xb1\xc0\x8d\x84\xe0JW\\\x1c\xe6g\x80s\x7f\xf8\xdf\x04\xf0P\x8f$\x84\x80h\x90\x93\xda\b\xa7x\xd4\x81\xf0\x0f+\xad\xd0\x91Aa\xffV\xd8nC\xec\x1c\'K@\xb5\xa4\x11\xd2\xbf\xbf\x19\f\\]\xb6\xdf1\xa1+\x15\x19\xee\xa8\x05\xc3\xf7\xc1E\xe3\xae\x10\x1d\xd4\\\x13\xaf\xfb\xb7b\xfeA'}, 0x9}}, 0x20b) readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}], 0x1) 428.107506ms ago: executing program 2 (id=2370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00"], 0x12c}, 0x1, 0x0, 0x0, 0x4048885}, 0x8000) 221.061454ms ago: executing program 5 (id=2371): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b3", 0xa3}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604ac14141de0000003808a89"], 0xdd12}], 0x1}, 0x20040851) 30.339675ms ago: executing program 5 (id=2372): write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x134b8, &(0x7f0000000740)={0x0, 0x2730, 0x20000, 0x10000802, 0x86}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000480), 0x8, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xea) 0s ago: executing program 1 (id=2373): socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001900000828bd7000fddbdf25021080030002ff04001e000008000500ac14143ec6b973faa11a1170a82e3aee29a808eccc6cb24770264cbcef0f5358f8f2b06ff747e64136c76fc8e4632db8ec3740e1c06feaa69d27bb4ae4fae1419795bc80dcb8c51469430141a34340a390372f1f1a68ffd2e1a50e920a87a2dc93743e"], 0x24}, 0x1, 0x0, 0x0, 0x48012}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) r0 = eventfd(0xe467) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080)=r0, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) kernel console output (not intermixed with test programs): Tainted: [L]=SOFTLOCKUP [ 357.246475][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 357.246488][T11330] Call Trace: [ 357.246496][T11330] [ 357.246505][T11330] dump_stack_lvl+0x100/0x190 [ 357.246541][T11330] should_fail_ex.cold+0x5/0xa [ 357.246581][T11330] should_failslab+0xc2/0x120 [ 357.246613][T11330] __kmalloc_cache_noprof+0x91/0x6d0 [ 357.246638][T11330] ? assoc_array_insert+0x10b/0x32c0 [ 357.246671][T11330] assoc_array_insert+0x10b/0x32c0 [ 357.246698][T11330] ? __mutex_lock+0x26c/0x1bd0 [ 357.246722][T11330] ? key_link+0x2bb/0x390 [ 357.246741][T11330] ? find_held_lock+0x2b/0x80 [ 357.246779][T11330] ? __pfx___mutex_lock+0x10/0x10 [ 357.246804][T11330] ? __pfx_assoc_array_insert+0x10/0x10 [ 357.246829][T11330] ? __pfx___might_resched+0x10/0x10 [ 357.246858][T11330] ? down_write+0x146/0x1f0 [ 357.246882][T11330] ? __pfx_down_write+0x10/0x10 [ 357.246910][T11330] __key_link_begin+0xf5/0x260 [ 357.246932][T11330] key_link+0x103/0x390 [ 357.246952][T11330] ? selinux_key_permission+0x157/0x1d0 [ 357.246976][T11330] ? __pfx_key_link+0x10/0x10 [ 357.246994][T11330] ? bpf_lsm_key_permission+0x9/0x10 [ 357.247028][T11330] ? key_task_permission+0x2c7/0x3c0 [ 357.247057][T11330] keyctl_get_persistent+0x5e2/0x8b0 [ 357.247090][T11330] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 357.247124][T11330] ? __x64_sys_futex+0x34f/0x4d0 [ 357.247152][T11330] ? __x64_sys_futex+0x358/0x4d0 [ 357.247185][T11330] ? xfd_validate_state+0x129/0x190 [ 357.247217][T11330] __do_sys_keyctl+0x3b2/0x5a0 [ 357.247243][T11330] do_syscall_64+0x123/0x790 [ 357.247269][T11330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.247294][T11330] RIP: 0033:0x7ff65f99e159 [ 357.247313][T11330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.247334][T11330] RSP: 002b:00007ff6607b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 357.247356][T11330] RAX: ffffffffffffffda RBX: 00007ff65fc25fa0 RCX: 00007ff65f99e159 [ 357.247372][T11330] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 357.247386][T11330] RBP: 00007ff65fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 357.247400][T11330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.247414][T11330] R13: 00007ff65fc26038 R14: 00007ff65fc25fa0 R15: 00007fff68e6c0f8 [ 357.247445][T11330] [ 357.326369][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 357.502493][ T30] audit: type=1400 audit(1791031001.649:1260): avc: denied { write } for pid=11334 comm="syz.1.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.534350][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 357.563560][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 357.563602][ T25] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 357.564670][ T25] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 357.564694][ T25] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 357.564715][ T25] usb 5-1: config 14 has no interface number 0 [ 357.564732][ T25] usb 5-1: config 14 has no interface number 1 [ 357.564786][ T25] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 357.564809][ T25] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 357.564835][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 357.564861][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 357.564887][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 357.564913][ T25] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.564938][ T25] usb 5-1: config 14 interface 57 has no altsetting 0 [ 357.564956][ T25] usb 5-1: config 14 interface 228 has no altsetting 0 [ 357.567094][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.567115][ T25] usb 5-1: Product: syz [ 357.567131][ T25] usb 5-1: Manufacturer: syz [ 357.567148][ T25] usb 5-1: SerialNumber: syz [ 357.816552][ T30] audit: type=1400 audit(1791031001.969:1261): avc: denied { create } for pid=11345 comm="syz.2.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 358.396122][ T25] legousbtower 5-1:14.57: interrupt endpoints not found [ 358.532491][T11362] FAULT_INJECTION: forcing a failure. [ 358.532491][T11362] name failslab, interval 1, probability 0, space 0, times 0 [ 358.532524][T11362] CPU: 0 UID: 60928 PID: 11362 Comm: syz.1.1882 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.532556][T11362] Tainted: [L]=SOFTLOCKUP [ 358.532564][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.532577][T11362] Call Trace: [ 358.532585][T11362] [ 358.532594][T11362] dump_stack_lvl+0x100/0x190 [ 358.532632][T11362] should_fail_ex.cold+0x5/0xa [ 358.532663][T11362] should_failslab+0xc2/0x120 [ 358.532694][T11362] __kmalloc_noprof+0xfc/0x840 [ 358.532722][T11362] ? lsm_blob_alloc+0x68/0x90 [ 358.532748][T11362] lsm_blob_alloc+0x68/0x90 [ 358.532768][T11362] security_key_alloc+0x34/0x310 [ 358.532797][T11362] key_alloc+0x876/0x1310 [ 358.532834][T11362] ? __kasan_kmalloc+0xaa/0xb0 [ 358.532861][T11362] ? __pfx_key_alloc+0x10/0x10 [ 358.532895][T11362] keyring_alloc+0x44/0xc0 [ 358.532928][T11362] install_session_keyring_to_cred+0x190/0x230 [ 358.532962][T11362] join_session_keyring+0x1bc/0x350 [ 358.532999][T11362] lookup_user_key+0xbf9/0x1300 [ 358.533029][T11362] ? __pfx_lookup_user_key+0x10/0x10 [ 358.533053][T11362] ? futex_wait+0x11e/0x370 [ 358.533082][T11362] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 358.533112][T11362] ? ksys_write+0x190/0x250 [ 358.533144][T11362] keyctl_get_persistent+0x197/0x8b0 [ 358.533177][T11362] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 358.533211][T11362] ? __x64_sys_futex+0x34f/0x4d0 [ 358.533239][T11362] ? __x64_sys_futex+0x358/0x4d0 [ 358.533270][T11362] ? xfd_validate_state+0x129/0x190 [ 358.533301][T11362] __do_sys_keyctl+0x3b2/0x5a0 [ 358.533327][T11362] do_syscall_64+0x123/0x790 [ 358.533355][T11362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.533378][T11362] RIP: 0033:0x7fab9e79e159 [ 358.533397][T11362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.533418][T11362] RSP: 002b:00007fab9f6df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 358.533439][T11362] RAX: ffffffffffffffda RBX: 00007fab9ea25fa0 RCX: 00007fab9e79e159 [ 358.533452][T11362] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 358.533464][T11362] RBP: 00007fab9e83506b R08: 0000000000000000 R09: 0000000000000000 [ 358.533476][T11362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.533488][T11362] R13: 00007fab9ea26038 R14: 00007fab9ea25fa0 R15: 00007ffedd5f3418 [ 358.533518][T11362] [ 358.895963][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.896684][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.935063][ T30] audit: type=1400 audit(1791031003.089:1262): avc: denied { append } for pid=11376 comm="syz.1.1889" name="uprobe_events" dev="tracefs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 358.935929][ T30] audit: type=1400 audit(1791031003.089:1263): avc: denied { wake_alarm } for pid=11376 comm="syz.1.1889" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 358.966799][ T25] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 359.000912][ T25] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 359.126586][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.127161][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.301433][T11368] atomic_op ffff88802f57c9e0 conn xmit_atomic 0000000000000000 [ 359.334454][T11375] usb 5-1: LEGO USB Tower reset control request failed [ 359.337223][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.342872][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.357445][T11391] FAULT_INJECTION: forcing a failure. [ 359.357445][T11391] name failslab, interval 1, probability 0, space 0, times 0 [ 359.357479][T11391] CPU: 0 UID: 60928 PID: 11391 Comm: syz.1.1894 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.357507][T11391] Tainted: [L]=SOFTLOCKUP [ 359.357515][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 359.357528][T11391] Call Trace: [ 359.357535][T11391] [ 359.357545][T11391] dump_stack_lvl+0x100/0x190 [ 359.357581][T11391] should_fail_ex.cold+0x5/0xa [ 359.357612][T11391] should_failslab+0xc2/0x120 [ 359.357640][T11391] __kmalloc_noprof+0xfc/0x840 [ 359.357665][T11391] ? lsm_blob_alloc+0x68/0x90 [ 359.357692][T11391] lsm_blob_alloc+0x68/0x90 [ 359.357710][T11391] security_key_alloc+0x34/0x310 [ 359.357737][T11391] key_alloc+0x876/0x1310 [ 359.357772][T11391] ? __kasan_kmalloc+0xaa/0xb0 [ 359.357798][T11391] ? __pfx_key_alloc+0x10/0x10 [ 359.357832][T11391] keyring_alloc+0x44/0xc0 [ 359.357864][T11391] install_session_keyring_to_cred+0x190/0x230 [ 359.357893][T11391] join_session_keyring+0x1bc/0x350 [ 359.357926][T11391] lookup_user_key+0xbf9/0x1300 [ 359.357957][T11391] ? __pfx_lookup_user_key+0x10/0x10 [ 359.357982][T11391] ? futex_wait+0x11e/0x370 [ 359.358013][T11391] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 359.358043][T11391] ? ksys_write+0x190/0x250 [ 359.358074][T11391] keyctl_get_persistent+0x197/0x8b0 [ 359.358106][T11391] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 359.358139][T11391] ? __x64_sys_futex+0x34f/0x4d0 [ 359.358166][T11391] ? __x64_sys_futex+0x358/0x4d0 [ 359.358197][T11391] ? xfd_validate_state+0x129/0x190 [ 359.358228][T11391] __do_sys_keyctl+0x3b2/0x5a0 [ 359.358252][T11391] do_syscall_64+0x123/0x790 [ 359.358279][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.358301][T11391] RIP: 0033:0x7fab9e79e159 [ 359.358320][T11391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.358339][T11391] RSP: 002b:00007fab9f6df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 359.358360][T11391] RAX: ffffffffffffffda RBX: 00007fab9ea25fa0 RCX: 00007fab9e79e159 [ 359.358373][T11391] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 359.358387][T11391] RBP: 00007fab9e83506b R08: 0000000000000000 R09: 0000000000000000 [ 359.358400][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.358413][T11391] R13: 00007fab9ea26038 R14: 00007fab9ea25fa0 R15: 00007ffedd5f3418 [ 359.358442][T11391] [ 359.741831][ T30] audit: type=1400 audit(1791031003.889:1264): avc: denied { read append } for pid=11396 comm="syz.2.1896" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 359.742277][ T30] audit: type=1400 audit(1791031003.889:1265): avc: denied { open } for pid=11396 comm="syz.2.1896" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 360.220659][ T30] audit: type=1400 audit(1791031004.369:1266): avc: denied { write } for pid=11402 comm="syz.2.1897" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 360.221355][ T30] audit: type=1400 audit(1791031004.369:1267): avc: denied { create } for pid=11402 comm="syz.2.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 360.409467][ T30] audit: type=1400 audit(1791031004.559:1268): avc: denied { connect } for pid=11402 comm="syz.2.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 360.433672][T11375] usb 5-1: LEGO USB Tower reset control request failed [ 360.442806][T11355] usb 5-1: LEGO USB Tower reset control request failed [ 360.452676][ T5769] usb 5-1: USB disconnect, device number 17 [ 360.509040][ T5769] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 361.427702][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 361.460105][T11418] ip6gretap0: entered promiscuous mode [ 361.460301][T11418] macvtap1: entered promiscuous mode [ 361.460423][T11418] macvtap1: entered allmulticast mode [ 361.460436][T11418] ip6gretap0: entered allmulticast mode [ 361.505856][T11418] ip6gretap0: left allmulticast mode [ 361.505995][T11418] ip6gretap0: left promiscuous mode [ 361.507458][T11418] macvtap1: left promiscuous mode [ 361.507477][T11418] macvtap1: left allmulticast mode [ 361.618409][ C0] net_ratelimit: 91 callbacks suppressed [ 362.113349][ T30] audit: type=1400 audit(1791031006.259:1269): avc: denied { create } for pid=11425 comm="syz.1.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 362.115830][T11426] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 362.234153][T11426] 8021q: adding VLAN 0 to HW filter on device bond5 [ 362.281010][T11437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.293003][T11437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.349651][ T30] audit: type=1400 audit(1791031006.499:1270): avc: denied { getopt } for pid=11425 comm="syz.1.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.349694][ T30] audit: type=1400 audit(1791031006.499:1271): avc: denied { connect } for pid=11425 comm="syz.1.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.349731][ T30] audit: type=1400 audit(1791031006.499:1272): avc: denied { name_connect } for pid=11425 comm="syz.1.1904" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 362.437504][T11434] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 362.483203][ T30] audit: type=1400 audit(1791031006.629:1273): avc: denied { cmd } for pid=11425 comm="iou-wrk-11431" path="socket:[31687]" dev="sockfs" ino=31687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 362.540350][T11434] dummy0: left promiscuous mode [ 362.596445][T11426] netlink: 'syz.1.1904': attribute type 10 has an invalid length. [ 362.596466][T11426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'. [ 362.604667][T11434] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 362.604827][T11426] dummy0: entered promiscuous mode [ 362.651773][T11426] bond5: (slave dummy0): Releasing backup interface [ 363.711209][T11428] atomic_op ffff888029bd89e0 conn xmit_atomic 0000000000000000 [ 364.167200][T11460] FAULT_INJECTION: forcing a failure. [ 364.167200][T11460] name failslab, interval 1, probability 0, space 0, times 0 [ 364.167248][T11460] CPU: 1 UID: 60928 PID: 11460 Comm: syz.3.1912 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.167280][T11460] Tainted: [L]=SOFTLOCKUP [ 364.167288][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 364.167305][T11460] Call Trace: [ 364.167313][T11460] [ 364.167322][T11460] dump_stack_lvl+0x100/0x190 [ 364.167361][T11460] should_fail_ex.cold+0x5/0xa [ 364.167393][T11460] should_failslab+0xc2/0x120 [ 364.167424][T11460] __kmalloc_noprof+0xfc/0x840 [ 364.167449][T11460] ? lsm_blob_alloc+0x68/0x90 [ 364.167475][T11460] lsm_blob_alloc+0x68/0x90 [ 364.167495][T11460] security_key_alloc+0x34/0x310 [ 364.167522][T11460] key_alloc+0x876/0x1310 [ 364.167557][T11460] ? __kasan_kmalloc+0xaa/0xb0 [ 364.167581][T11460] ? __pfx_key_alloc+0x10/0x10 [ 364.167617][T11460] keyring_alloc+0x44/0xc0 [ 364.167649][T11460] install_session_keyring_to_cred+0x190/0x230 [ 364.167680][T11460] join_session_keyring+0x1bc/0x350 [ 364.167709][T11460] lookup_user_key+0xbf9/0x1300 [ 364.167738][T11460] ? __pfx_lookup_user_key+0x10/0x10 [ 364.167762][T11460] ? futex_wait+0x11e/0x370 [ 364.167793][T11460] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 364.167824][T11460] ? ksys_write+0x190/0x250 [ 364.167856][T11460] keyctl_get_persistent+0x197/0x8b0 [ 364.167889][T11460] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 364.167935][T11460] ? __x64_sys_futex+0x34f/0x4d0 [ 364.167966][T11460] ? __x64_sys_futex+0x358/0x4d0 [ 364.168002][T11460] ? xfd_validate_state+0x129/0x190 [ 364.168035][T11460] __do_sys_keyctl+0x3b2/0x5a0 [ 364.168061][T11460] do_syscall_64+0x123/0x790 [ 364.168097][T11460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.168121][T11460] RIP: 0033:0x7ff65f99e159 [ 364.168142][T11460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.168162][T11460] RSP: 002b:00007ff6607b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 364.168191][T11460] RAX: ffffffffffffffda RBX: 00007ff65fc25fa0 RCX: 00007ff65f99e159 [ 364.168207][T11460] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 364.168223][T11460] RBP: 00007ff65fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 364.168236][T11460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.168250][T11460] R13: 00007ff65fc26038 R14: 00007ff65fc25fa0 R15: 00007fff68e6c0f8 [ 364.168281][T11460] [ 364.939716][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 364.939730][ T30] audit: type=1400 audit(1791031009.089:1275): avc: denied { create } for pid=11470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.940519][ T30] audit: type=1400 audit(1791031009.089:1276): avc: denied { read } for pid=11470 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 364.944707][ T30] audit: type=1400 audit(1791031009.099:1277): avc: denied { open } for pid=11470 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 365.008679][ T30] audit: type=1400 audit(1791031009.149:1278): avc: denied { ioctl } for pid=11470 comm="syz-executor" path="socket:[32839]" dev="sockfs" ino=32839 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.009718][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.040762][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.060018][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.066508][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.067567][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.109062][ T30] audit: type=1400 audit(1791031009.259:1279): avc: denied { mounton } for pid=11470 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 366.813828][ C0] net_ratelimit: 96 callbacks suppressed [ 367.137213][ T5606] Bluetooth: hci5: command tx timeout [ 367.704696][T11510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1925'. [ 367.850070][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 368.851684][T11500] atomic_op ffff88807cafb1e0 conn xmit_atomic 0000000000000000 [ 369.046406][T11470] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.052352][T11470] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.052471][T11470] bridge_slave_0: entered allmulticast mode [ 369.074535][T11470] bridge_slave_0: entered promiscuous mode [ 369.092338][T11470] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.100087][T11470] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.100263][T11470] bridge_slave_1: entered allmulticast mode [ 369.119443][T11470] bridge_slave_1: entered promiscuous mode [ 369.218382][ T5606] Bluetooth: hci5: command tx timeout [ 369.338580][T11470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.364095][T11470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.105577][T11470] team0: Port device team_slave_0 added [ 370.122071][T11470] team0: Port device team_slave_1 added [ 370.384801][T11470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.384808][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.384834][T11470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.394332][T11470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.394343][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.394364][T11470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.877391][T11557] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1935'. [ 370.878511][T11557] ksmbd: Unknown IPC event: 3, ignore. [ 370.888839][T11557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1935'. [ 370.963677][ T30] audit: type=1400 audit(1791031015.019:1280): avc: denied { write } for pid=11553 comm="syz.4.1935" path="socket:[33021]" dev="sockfs" ino=33021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.964018][ T30] audit: type=1400 audit(1791031015.039:1281): avc: denied { ioctl } for pid=11553 comm="syz.4.1935" path="socket:[33024]" dev="sockfs" ino=33024 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.183016][T11557] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.1935: No space for directory leaf checksum. Please run e2fsck -D. [ 371.183052][T11557] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.1935: checksumming directory block 0 [ 371.184384][T11557] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 371.184526][T11557] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.1935: No space for directory leaf checksum. Please run e2fsck -D. [ 371.184560][T11557] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.1935: checksumming directory block 0 [ 371.184729][T11557] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 371.184848][T11557] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.1935: No space for directory leaf checksum. Please run e2fsck -D. [ 371.184872][T11557] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.1935: checksumming directory block 0 [ 371.185380][T11557] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 371.185483][T11557] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.1935: No space for directory leaf checksum. Please run e2fsck -D. [ 371.185507][T11557] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.1935: checksumming directory block 0 [ 371.185672][T11557] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 371.185704][T11557] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 371.187208][T11557] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 371.190463][ T30] audit: type=1400 audit(1791031015.339:1282): avc: denied { firmware_load } for pid=11553 comm="syz.4.1935" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 371.300230][ T5606] Bluetooth: hci5: command tx timeout [ 371.420307][T11470] hsr_slave_0: entered promiscuous mode [ 371.433172][T11470] hsr_slave_1: entered promiscuous mode [ 371.434162][T11470] debugfs: 'hsr0' already exists in 'hsr' [ 371.434182][T11470] Cannot create hsr debugfs directory [ 371.853781][ T6414] net_ratelimit: 73 callbacks suppressed [ 372.948143][ T30] audit: type=1400 audit(1791031017.099:1283): avc: denied { read } for pid=11569 comm="syz.4.1938" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 372.948184][ T30] audit: type=1400 audit(1791031017.099:1284): avc: denied { open } for pid=11569 comm="syz.4.1938" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 373.416701][ T5606] Bluetooth: hci5: command tx timeout [ 373.954106][ T30] audit: type=1400 audit(1791031018.099:1285): avc: denied { create } for pid=11575 comm="syz.1.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 373.954148][ T30] audit: type=1400 audit(1791031018.099:1286): avc: denied { allowed } for pid=11575 comm="syz.1.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 373.954182][ T30] audit: type=1400 audit(1791031018.099:1287): avc: denied { create } for pid=11575 comm="syz.1.1940" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.954917][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'. [ 374.042244][ T30] audit: type=1400 audit(1791031018.189:1288): avc: denied { read } for pid=5600 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.084423][ T30] audit: type=1400 audit(1791031018.239:1289): avc: denied { open } for pid=5600 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.429988][T11470] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 374.499100][T11470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.499745][T11470] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 374.542388][T11470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.544064][T11470] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 374.607122][T11470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.617345][T11470] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 374.658051][T11470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.569498][T11470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.617322][T11470] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.720233][T11606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.720859][T11606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.790385][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.790483][ T6414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.819337][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.819422][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.483518][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 376.483538][ T30] audit: type=1400 audit(1791031020.609:1323): avc: denied { module_request } for pid=11470 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 376.620480][ T30] audit: type=1400 audit(1791031020.769:1324): avc: denied { sys_module } for pid=11470 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 376.773036][ T30] audit: type=1400 audit(1791031020.919:1325): avc: denied { watch_mount } for pid=11609 comm="syz.1.1950" path="/436" dev="tmpfs" ino=2279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 376.773207][ T30] audit: type=1400 audit(1791031020.919:1326): avc: denied { watch_reads } for pid=11609 comm="syz.1.1950" path="/436" dev="tmpfs" ino=2279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 377.053540][ C0] net_ratelimit: 66 callbacks suppressed [ 377.154447][ T30] audit: type=1400 audit(1791031021.309:1327): avc: denied { read } for pid=11620 comm="syz.4.1952" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 377.154491][ T30] audit: type=1400 audit(1791031021.309:1328): avc: denied { open } for pid=11620 comm="syz.4.1952" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 377.712554][ T30] audit: type=1400 audit(1791031021.859:1329): avc: denied { map_create } for pid=11620 comm="syz.4.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 377.755826][ T30] audit: type=1400 audit(1791031021.889:1330): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.199 dest=44448 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 377.859318][ T30] audit: type=1400 audit(1791031022.009:1331): avc: denied { module_request } for pid=11470 comm="syz-executor" kmod="netdev-caif0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 377.915862][ T30] audit: type=1400 audit(1791031022.069:1332): avc: denied { create } for pid=11629 comm="syz.1.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 377.970187][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 378.341798][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.341862][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.850845][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'. [ 378.855832][T11470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.858970][T11650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.890451][T11652] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1961'. [ 378.968229][T11650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.093634][ T5769] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 380.244745][ T5769] usb 5-1: Using ep0 maxpacket: 8 [ 380.245613][ T5769] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 380.248541][ T5769] usb 5-1: config 0 has no interfaces? [ 380.248594][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.290801][ T5769] usb 5-1: config 0 descriptor?? [ 380.415925][T11470] veth0_vlan: entered promiscuous mode [ 380.467468][T11470] veth1_vlan: entered promiscuous mode [ 380.548353][ T5769] usb 5-1: USB disconnect, device number 18 [ 380.591231][T11470] veth0_macvtap: entered promiscuous mode [ 380.619317][T11470] veth1_macvtap: entered promiscuous mode [ 380.654668][T11470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.679467][T11470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.723843][ T3987] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.794189][ T6409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.795432][ T6435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.795465][ T6435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.014558][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.014568][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.130381][ T6409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.130395][ T6409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.527437][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 381.527447][ T30] audit: type=1400 audit(1791031025.679:1396): avc: denied { sqpoll } for pid=11677 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 381.568469][ T30] audit: type=1400 audit(1791031025.719:1397): avc: denied { bind } for pid=11677 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 381.576051][T11680] atomic_op ffff8880531c01e0 conn xmit_atomic 0000000000000000 [ 381.583561][ T30] audit: type=1400 audit(1791031025.729:1399): avc: denied { write } for pid=11677 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 381.629810][ T30] audit: type=1400 audit(1791031025.719:1398): avc: denied { map } for pid=11677 comm="syz.2.1965" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 381.630083][ T30] audit: type=1400 audit(1791031025.779:1400): avc: denied { read write } for pid=11677 comm="syz.2.1965" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 382.072416][ T5719] net_ratelimit: 205 callbacks suppressed [ 382.766133][ T30] audit: type=1400 audit(1791031026.919:1401): avc: denied { write } for pid=11717 comm="syz.5.1975" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 383.566434][ T30] audit: type=1400 audit(1791031027.719:1402): avc: denied { connect } for pid=11717 comm="syz.5.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 383.742501][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.742883][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.787605][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.787987][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.821471][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.821872][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.904149][ T5716] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 384.053502][ T5716] usb 5-1: Using ep0 maxpacket: 8 [ 384.058410][ T5716] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 384.058855][ T5716] usb 5-1: config 0 has no interfaces? [ 384.058884][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.063105][ T5716] usb 5-1: config 0 descriptor?? [ 384.316264][ T9] usb 5-1: USB disconnect, device number 19 [ 384.509341][ T30] audit: type=1400 audit(1791031028.659:1403): avc: denied { read } for pid=11734 comm="syz.2.1980" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 384.509383][ T30] audit: type=1400 audit(1791031028.659:1404): avc: denied { open } for pid=11734 comm="syz.2.1980" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 384.625329][ T30] audit: type=1400 audit(1791031028.779:1405): avc: denied { map_create } for pid=11734 comm="syz.2.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.079354][T11742] jffs2: notice: (11742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 385.451096][ T5606] Bluetooth: Wrong link type (-71) [ 386.818205][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 386.818217][ T30] audit: type=1400 audit(1791031030.969:1430): avc: denied { unmount } for pid=11470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 386.857056][ T30] audit: type=1400 audit(1791031031.009:1431): avc: denied { unmount } for pid=11470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 387.323342][ T6424] net_ratelimit: 176 callbacks suppressed [ 387.512701][ T30] audit: type=1400 audit(1791031031.659:1432): avc: denied { read write } for pid=11764 comm="syz.5.1986" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 387.537281][ T30] audit: type=1400 audit(1791031031.689:1433): avc: denied { open } for pid=11764 comm="syz.5.1986" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 387.564467][ T30] audit: type=1400 audit(1791031031.719:1434): avc: denied { create } for pid=11764 comm="syz.5.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 387.762510][ T30] audit: type=1400 audit(1791031031.909:1435): avc: denied { map_create } for pid=11768 comm="syz.2.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 387.788231][ T30] audit: type=1400 audit(1791031031.939:1436): avc: denied { map_read map_write } for pid=11768 comm="syz.2.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 388.087073][ T30] audit: type=1400 audit(1791031032.239:1437): avc: denied { sqpoll } for pid=11746 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 388.115956][ T30] audit: type=1400 audit(1791031032.269:1438): avc: denied { create } for pid=11746 comm="syz.1.1983" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.117183][ T30] audit: type=1400 audit(1791031032.269:1439): avc: denied { map } for pid=11746 comm="syz.1.1983" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.202740][T11749] atomic_op ffff88803cac41e0 conn xmit_atomic 0000000000000000 [ 390.034823][ T5707] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 390.662100][ T5707] usb 5-1: Using ep0 maxpacket: 8 [ 390.662870][ T5707] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 390.663509][ T5707] usb 5-1: config 0 has no interfaces? [ 390.663558][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.666574][ T5707] usb 5-1: config 0 descriptor?? [ 390.987956][ T5716] usb 5-1: USB disconnect, device number 20 [ 391.666447][T11825] netlink: 'syz.5.2003': attribute type 1 has an invalid length. [ 392.333523][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 392.421166][ T6424] net_ratelimit: 85 callbacks suppressed [ 392.547788][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.551787][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.551815][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.551839][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.551898][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.617703][ T9] usb 6-1: config 0 descriptor?? [ 392.789118][T11840] ip_tables: iptables: counters copy to user failed while replacing table [ 393.087909][ T9] hid_parser_main: 4010 callbacks suppressed [ 393.087920][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 393.087936][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 393.087961][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 393.087977][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 393.087992][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 393.088008][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 393.088023][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 393.088039][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 393.088055][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 393.088070][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 393.213533][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 393.213546][ T30] audit: type=1400 audit(1791031037.359:1485): avc: denied { read write } for pid=11835 comm="syz.2.2006" name="video0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 393.227898][ T30] audit: type=1400 audit(1791031037.369:1486): avc: denied { open } for pid=11835 comm="syz.2.2006" path="/dev/video0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 393.274832][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 393.502294][ T30] audit: type=1400 audit(1791031037.649:1487): avc: denied { cmd } for pid=11823 comm="iou-wrk-11828" path="socket:[34896]" dev="sockfs" ino=34896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 393.788547][T11855] netlink: 'syz.5.2003': attribute type 10 has an invalid length. [ 393.788558][T11855] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2003'. [ 394.586976][T11855] dummy0: entered promiscuous mode [ 394.668924][ T5769] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 395.500070][T11836] atomic_op ffff88807f6a79e0 conn xmit_atomic 0000000000000000 [ 396.284889][ T30] audit: type=1400 audit(1791031040.439:1488): avc: denied { read write } for pid=11875 comm="syz.2.2014" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 396.289941][ T30] audit: type=1400 audit(1791031040.439:1489): avc: denied { open } for pid=11875 comm="syz.2.2014" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 396.351655][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.364342][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.483564][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.484177][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.491363][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.492030][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.922855][ T5794] usb 6-1: USB disconnect, device number 2 [ 397.129543][ T30] audit: type=1400 audit(1791031041.279:1490): avc: denied { mount } for pid=11892 comm="syz.4.2019" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 397.456205][ T6424] net_ratelimit: 101 callbacks suppressed [ 397.583485][ T30] audit: type=1400 audit(1791031041.669:1491): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 397.817380][ T30] audit: type=1400 audit(1791031041.969:1492): avc: denied { create } for pid=11899 comm="syz.3.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.822866][ T30] audit: type=1400 audit(1791031041.969:1493): avc: denied { mmap_zero } for pid=11899 comm="syz.3.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 397.843881][ T30] audit: type=1400 audit(1791031041.979:1494): avc: denied { read } for pid=11899 comm="syz.3.2022" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 399.327499][T11897] atomic_op ffff88802696c1e0 conn xmit_atomic 0000000000000000 [ 399.659174][T11930] Cannot find set identified by id 0 to match [ 401.285001][T11923] atomic_op ffff88805312b1e0 conn xmit_atomic 0000000000000000 [ 402.018749][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 402.163581][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 402.170634][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 402.197507][ T25] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 402.201409][ T25] usb 5-1: config 14 has an invalid interface number: 57 but max is 0 [ 402.201465][ T25] usb 5-1: config 14 has no interface number 0 [ 402.201636][ T25] usb 5-1: config 14 interface 57 has no altsetting 0 [ 402.387702][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.387714][ T25] usb 5-1: Product: syz [ 402.387722][ T25] usb 5-1: Manufacturer: syz [ 402.387737][ T25] usb 5-1: SerialNumber: syz [ 402.618395][ C0] net_ratelimit: 86 callbacks suppressed [ 403.032173][ T25] legousbtower 5-1:14.57: interrupt endpoints not found [ 403.150791][T11978] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 403.332711][T11978] veth0_to_team: entered promiscuous mode [ 403.363172][T11978] ip6gretap0: entered promiscuous mode [ 404.596127][T11984] atomic_op ffff888077be81e0 conn xmit_atomic 0000000000000000 [ 404.793247][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.802458][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.833250][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.834163][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.834283][ T5707] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 404.850231][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.857170][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.876864][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.880293][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.984050][ T5707] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 404.985067][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.437440][T12005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.437919][T12005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.468488][ T5707] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 405.488759][T12003] atomic_op ffff8880356911e0 conn xmit_atomic 0000000000000000 [ 405.607579][T12022] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2048'. [ 405.647592][T12005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.649753][T12005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.652951][T12005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.680000][ T25] usb 5-1: USB disconnect, device number 21 [ 405.680288][T12005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.683797][ T5707] lg-g15 0003:046D:C222.0008: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 405.772320][ T5707] usb 3-1: USB disconnect, device number 21 [ 406.841519][T12038] vlan2: entered allmulticast mode [ 406.841533][T12038] veth0_vlan: entered allmulticast mode [ 407.712423][ T5719] net_ratelimit: 227 callbacks suppressed [ 407.908429][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 407.908441][ T30] audit: type=1400 audit(1791031052.059:1500): avc: denied { write } for pid=12056 comm="syz.2.2060" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 408.058969][T12065] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2062'. [ 408.733901][ T5794] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 408.786618][T12059] atomic_op ffff88807ee319e0 conn xmit_atomic 0000000000000000 [ 408.868754][ T30] audit: type=1400 audit(1791031053.019:1501): avc: denied { create } for pid=12076 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 408.897721][ T5794] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 408.899071][ T5794] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 408.899244][ T5794] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 408.899302][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.913461][ T30] audit: type=1400 audit(1791031053.059:1502): avc: denied { ioctl } for pid=12076 comm="syz.4.2066" path="socket:[35318]" dev="sockfs" ino=35318 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 408.973058][ T5794] usb 6-1: probing VID:PID(0424:012C) [ 408.980929][ T5794] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 408.980951][ T5794] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 408.980970][ T5794] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 408.980988][ T5794] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 408.981008][ T5794] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 409.336333][ T30] audit: type=1400 audit(1791031053.489:1503): avc: denied { read } for pid=12093 comm="syz.4.2072" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 409.336384][ T30] audit: type=1400 audit(1791031053.489:1504): avc: denied { open } for pid=12093 comm="syz.4.2072" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 409.475975][ T5794] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 409.714118][ T5794] usb 6-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 409.914693][ T30] audit: type=1400 audit(1791031054.069:1505): avc: denied { read write } for pid=12062 comm="syz.5.2063" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.914743][ T30] audit: type=1400 audit(1791031054.069:1506): avc: denied { open } for pid=12062 comm="syz.5.2063" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.914785][ T30] audit: type=1400 audit(1791031054.069:1507): avc: denied { ioctl } for pid=12062 comm="syz.5.2063" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.919600][T12063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.923997][T12063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.071620][ T30] audit: type=1400 audit(1791031054.219:1508): avc: denied { recv } for pid=5600 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.199 dest=44448 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 410.072858][ T30] audit: type=1400 audit(1791031054.219:1509): avc: denied { read } for pid=5600 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.608089][ T5794] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 410.692461][ T5794] usb 6-1: USB disconnect, device number 3 [ 410.730041][ T10] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 410.816835][ T5794] USB vub300 remote SDIO host controller[0] now disconnected [ 412.201779][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.202430][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.235714][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2081'. [ 412.535349][T12114] netlink: 'syz.1.2076': attribute type 1 has an invalid length. [ 412.625560][T12114] 8021q: adding VLAN 0 to HW filter on device bond6 [ 412.722802][T12114] net_ratelimit: 117 callbacks suppressed [ 412.874318][T12139] bond6: (slave veth13): Enslaving as a backup interface with a down link [ 412.915670][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 412.915682][ T30] audit: type=1400 audit(1791031057.069:1562): avc: denied { cmd } for pid=12112 comm="iou-wrk-12139" path="socket:[35494]" dev="sockfs" ino=35494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 412.921287][ T30] audit: type=1400 audit(1791031057.069:1563): avc: denied { read } for pid=12145 comm="syz.3.2088" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 412.921485][ T30] audit: type=1400 audit(1791031057.069:1564): avc: denied { open } for pid=12145 comm="syz.3.2088" path="/dev/input/event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 412.922792][ T30] audit: type=1400 audit(1791031057.069:1565): avc: denied { sqpoll } for pid=12109 comm="syz.2.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 412.974769][ T30] audit: type=1400 audit(1791031057.119:1566): avc: denied { shutdown } for pid=12112 comm="syz.1.2076" laddr=40:: lport=52749 faddr=::ffff:172.30.1.2 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 412.978207][ T30] audit: type=1400 audit(1791031057.129:1567): avc: denied { write } for pid=12145 comm="syz.3.2088" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 413.005551][ T30] audit: type=1400 audit(1791031057.149:1568): avc: denied { create } for pid=12109 comm="syz.2.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.102843][ T30] audit: type=1400 audit(1791031057.249:1569): avc: denied { create } for pid=12155 comm="syz.4.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 413.103785][ T30] audit: type=1400 audit(1791031057.259:1570): avc: denied { bind } for pid=12109 comm="syz.2.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.118714][T12111] atomic_op ffff88803a1c01e0 conn xmit_atomic 0000000000000000 [ 413.118800][ T30] audit: type=1400 audit(1791031057.269:1571): avc: denied { write } for pid=12109 comm="syz.2.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.594262][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 413.743442][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 413.756279][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 413.756321][ T25] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 413.758139][ T25] usb 3-1: config 14 has an invalid interface number: 57 but max is 0 [ 413.758162][ T25] usb 3-1: config 14 has no interface number 0 [ 413.758201][ T25] usb 3-1: config 14 interface 57 has no altsetting 0 [ 413.803119][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.803140][ T25] usb 3-1: Product: syz [ 413.803155][ T25] usb 3-1: Manufacturer: syz [ 413.803170][ T25] usb 3-1: SerialNumber: syz [ 414.491972][ T25] legousbtower 3-1:14.57: interrupt endpoints not found [ 415.363896][ T5794] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 415.514613][ T5794] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 415.515825][ T5794] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 415.515840][ T5794] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 415.515873][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.522057][ T5794] usb 6-1: probing VID:PID(0424:012C) [ 415.524377][ T5794] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 415.524399][ T5794] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 415.524418][ T5794] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 415.524436][ T5794] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 415.524452][ T5794] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 415.600226][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 415.755931][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 415.756667][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 415.757718][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 415.757781][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.757803][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.757817][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.757837][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.757877][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.930375][ T5794] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 415.967356][ T25] usb 5-1: usb_control_msg returned -32 [ 415.967395][ T25] usbtmc 5-1:16.0: can't read capabilities [ 416.132054][ T5794] usb 6-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 416.307992][T12196] atomic_op ffff8880267911e0 conn xmit_atomic 0000000000000000 [ 416.333120][T12182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.350038][T12182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.751066][T12215] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 417.053232][ T5794] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 417.082149][ T5769] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 417.090441][ T5769] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 417.095754][ T5769] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 417.105845][ T5794] usb 6-1: USB disconnect, device number 4 [ 417.147310][ T25] usb 3-1: USB disconnect, device number 22 [ 417.519334][T12218] netlink: 'syz.2.2106': attribute type 1 has an invalid length. [ 417.630275][T12218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.812837][ T5794] USB vub300 remote SDIO host controller[0] now disconnected [ 417.821303][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 417.933801][ T6409] net_ratelimit: 149 callbacks suppressed [ 417.984587][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.985673][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.985699][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.985720][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.985773][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.551931][ T9] usb 3-1: config 0 descriptor?? [ 418.601251][ T5794] usb 5-1: USB disconnect, device number 22 [ 419.059173][ T9] hid_parser_main: 14 callbacks suppressed [ 419.059183][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 419.059199][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 419.059214][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 419.059228][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 419.059243][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 419.059257][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 419.059272][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 419.059287][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 419.059301][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 419.059321][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 419.141199][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 419.465985][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 419.521180][T12218] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 420.200310][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 420.200324][ T30] audit: type=1400 audit(1791031064.349:1589): avc: denied { ioctl } for pid=12270 comm="syz.4.2119" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 420.282712][ T30] audit: type=1400 audit(1791031064.429:1590): avc: denied { read } for pid=12270 comm="syz.4.2119" dev="nsfs" ino=4026532940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 420.282902][ T30] audit: type=1400 audit(1791031064.429:1591): avc: denied { open } for pid=12270 comm="syz.4.2119" path="net:[4026532940]" dev="nsfs" ino=4026532940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 420.523540][ T10] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 420.592215][ T30] audit: type=1400 audit(1791031064.739:1592): avc: denied { watch_mount } for pid=12270 comm="syz.4.2119" path="/395" dev="tmpfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 420.592452][ T30] audit: type=1400 audit(1791031064.739:1593): avc: denied { watch_reads } for pid=12270 comm="syz.4.2119" path="/395" dev="tmpfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 421.519880][T12243] atomic_op ffff88802696e9e0 conn xmit_atomic 0000000000000000 [ 421.629522][ T30] audit: type=1400 audit(1791031065.779:1594): avc: denied { read } for pid=12268 comm="syz.3.2118" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 421.630686][ T30] audit: type=1400 audit(1791031065.779:1595): avc: denied { open } for pid=12268 comm="syz.3.2118" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 421.635571][ T30] audit: type=1400 audit(1791031065.779:1596): avc: denied { ioctl } for pid=12268 comm="syz.3.2118" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 422.003501][ T5729] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 422.618673][ T30] audit: type=1400 audit(1791031066.769:1597): avc: denied { egress } for pid=25 comm="kworker/1:0" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 422.618718][ T30] audit: type=1400 audit(1791031066.769:1598): avc: denied { sendto } for pid=25 comm="kworker/1:0" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 422.693723][ T5729] usb 5-1: Using ep0 maxpacket: 8 [ 422.714260][ T5729] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 422.743925][ T5729] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 422.744001][ T5729] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.744024][ T5729] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.744045][ T5729] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.744068][ T5729] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.744124][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.973434][ C0] net_ratelimit: 171 callbacks suppressed [ 422.982047][ T5729] usb 5-1: usb_control_msg returned -32 [ 422.982101][ T5729] usbtmc 5-1:16.0: can't read capabilities [ 423.031842][ T9] usb 3-1: USB disconnect, device number 23 [ 423.953663][ T5707] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 424.113850][ T5707] usb 6-1: Using ep0 maxpacket: 8 [ 424.121307][ T5707] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 424.121896][ T5707] usb 6-1: config 0 has no interfaces? [ 424.121946][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.125644][ T5707] usb 6-1: config 0 descriptor?? [ 424.339647][ T5707] usb 6-1: USB disconnect, device number 5 [ 424.438646][T12333] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2134'. [ 424.438693][T12333] ksmbd: Unknown IPC event: 3, ignore. [ 424.955465][ T5707] usb 5-1: USB disconnect, device number 23 [ 425.373841][T12339] vlan2: entered allmulticast mode [ 425.373857][T12339] veth0_vlan: entered allmulticast mode [ 426.179547][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2143'. [ 426.247391][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 426.247404][ T30] audit: type=1400 audit(1791031070.399:1602): avc: denied { read append } for pid=12365 comm="syz.2.2146" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 426.257046][ T30] audit: type=1400 audit(1791031070.399:1603): avc: denied { open } for pid=12365 comm="syz.2.2146" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 426.260276][T12361] ip6gretap0: entered promiscuous mode [ 426.263280][T12361] macvtap1: entered promiscuous mode [ 426.268456][T12361] macvtap1: entered allmulticast mode [ 426.268475][T12361] ip6gretap0: entered allmulticast mode [ 426.309268][ T30] audit: type=1400 audit(1791031070.439:1604): avc: denied { create } for pid=12365 comm="syz.2.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 426.337755][ T30] audit: type=1400 audit(1791031070.489:1605): avc: denied { write } for pid=12366 comm="syz.1.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 426.362913][T12364] ip6gretap0: left allmulticast mode ** 29444 printk messages dropped ** [ 427.011302][T12364] macvtap1: left promiscuous mode [ 427.011328][T12364] macvtap1: left allmulticast mode [ 427.943496][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 428.095728][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 428.100991][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 428.101016][ T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 428.102749][ T9] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 428.102771][ T9] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 428.102792][ T9] usb 5-1: config 14 has no interface number 0 [ 428.102804][ T9] usb 5-1: config 14 has no interface number 1 [ 428.102831][ T9] usb 5-1: config 14 interface 57 has no altsetting 0 [ 428.102841][ T9] usb 5-1: config 14 interface 228 has no altsetting 0 [ 428.115867][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.115887][ T9] usb 5-1: Product: syz [ 428.115902][ T9] usb 5-1: Manufacturer: syz [ 428.115918][ T9] usb 5-1: SerialNumber: syz [ 428.178541][ T1274] net_ratelimit: 167 callbacks suppressed [ 428.544615][ T5729] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 428.704820][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 428.713329][ T5729] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.714747][ T5729] usb 6-1: config 0 has no interfaces? [ 428.714795][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.739746][ T9] legousbtower 5-1:14.57: interrupt endpoints not found [ 428.742914][ T5729] usb 6-1: config 0 descriptor?? [ 428.770913][ T30] audit: type=1400 audit(1791031072.919:1606): avc: denied { setopt } for pid=12397 comm="syz.3.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.918435][ T9] legousbtower 5-1:14.228: interrupt endpoints not found [ 428.958237][ T9] usb 6-1: USB disconnect, device number 6 [ 430.363545][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2160'. [ 431.176645][T12420] atomic_op ffff88802c05f1e0 conn xmit_atomic 0000000000000000 [ 431.548327][ T5707] usb 5-1: USB disconnect, device number 24 [ 432.705362][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 432.713466][ T5707] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 432.863778][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 432.871669][ T9] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 432.873987][ T9] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 432.874011][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 432.874032][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 432.874050][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 432.874067][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 432.874087][ T9] usb 5-1: config 0 has no interface number 0 [ 432.874121][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 432.874146][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 432.874167][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 432.874214][ T9] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.874248][ T9] usb 5-1: config 0 interface 125 has no altsetting 0 [ 432.874265][ T9] usb 5-1: config 0 interface 125 has no altsetting 2 [ 432.881677][ T5707] usb 6-1: Using ep0 maxpacket: 8 [ 432.890777][ T5707] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 432.899673][ T5707] usb 6-1: config 0 has no interfaces? [ 432.899703][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.903549][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.903570][ T9] usb 5-1: Product: syz [ 432.903585][ T9] usb 5-1: Manufacturer: syz [ 432.903601][ T9] usb 5-1: SerialNumber: syz [ 433.094538][ T5707] usb 6-1: config 0 descriptor?? [ 433.094818][ T9] usb 5-1: config 0 descriptor?? [ 433.126345][ T9] usb 5-1: selecting invalid altsetting 2 [ 433.316114][ T5707] usb 6-1: USB disconnect, device number 7 [ 433.618356][ C0] net_ratelimit: 167 callbacks suppressed [ 433.834105][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.835844][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.942485][T12480] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2172'. [ 433.942554][T12480] ksmbd: Unknown IPC event: 3, ignore. [ 434.374025][ T9] get_1284_register timeout [ 434.374166][ C0] usb 5-1: async_complete: urb error -104 [ 434.404789][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.432449][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.481346][ T3215] usb 5-1: USB disconnect, device number 25 [ 434.789839][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2174'. [ 434.881674][T12486] ip6gretap0: entered promiscuous mode [ 434.881819][T12486] macvtap2: entered promiscuous mode [ 434.881928][T12486] macvtap2: entered allmulticast mode [ 434.881938][T12486] ip6gretap0: entered allmulticast mode [ 434.967666][T12489] ip6gretap0: left allmulticast mode [ 434.967763][T12489] ip6gretap0: left promiscuous mode [ 434.969467][T12489] macvtap2: left promiscuous mode [ 434.969481][T12489] macvtap2: left allmulticast mode [ 435.322469][ T30] audit: type=1400 audit(1791031079.469:1607): avc: denied { create } for pid=12496 comm="syz.2.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 435.374841][ T30] audit: type=1400 audit(1791031079.519:1608): avc: denied { ioctl } for pid=12496 comm="syz.2.2179" path="socket:[36480]" dev="sockfs" ino=36480 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 436.328274][ T64] IPVS: starting estimator thread 0... [ 436.413942][T12512] IPVS: using max 65 ests per chain, 156000 per kthread [ 436.735918][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 436.903533][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 436.904115][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 436.904669][ T10] usb 5-1: config 0 has no interfaces? [ 436.904700][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.907006][ T10] usb 5-1: config 0 descriptor?? [ 436.954221][T12491] atomic_op ffff88802b4e29e0 conn xmit_atomic 0000000000000000 [ 437.144578][ T9] usb 5-1: USB disconnect, device number 26 [ 437.484208][ T30] audit: type=1400 audit(1791031081.629:1609): avc: denied { append } for pid=12525 comm="syz.3.2186" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 437.536071][ T30] audit: type=1400 audit(1791031081.689:1610): avc: denied { ioctl } for pid=12525 comm="syz.3.2186" path="/dev/vbi2" dev="devtmpfs" ino=961 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 438.250530][T12528] loop5: detected capacity change from 0 to 7 [ 438.432431][T12528] Dev loop5: unable to read RDB block 7 [ 438.432463][T12528] loop5: AHDI p2 p4 [ 438.432483][T12528] loop5: partition table partially beyond EOD, truncated [ 438.511332][T12528] loop5: p4 start 254 is beyond EOD, truncated [ 439.143914][ C1] net_ratelimit: 106 callbacks suppressed [ 439.527288][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'. [ 439.574866][T12547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.667255][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2193'. [ 439.779144][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.779179][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.852879][T12547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.143240][T12549] macvtap2: entered promiscuous mode [ 440.152841][T12549] macvtap2: entered allmulticast mode [ 440.152862][T12549] ip6gretap0: entered allmulticast mode [ 442.193532][T12035] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 442.353549][T12035] usb 6-1: Using ep0 maxpacket: 8 [ 442.354525][T12035] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 442.355713][T12035] usb 6-1: config 0 has no interfaces? [ 442.355763][T12035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.397697][T12035] usb 6-1: config 0 descriptor?? [ 442.690078][ T10] usb 6-1: USB disconnect, device number 8 [ 442.734356][T12555] atomic_op ffff88801c1769e0 conn xmit_atomic 0000000000000000 [ 443.341542][T12606] loop5: detected capacity change from 0 to 7 [ 443.381295][T12606] Dev loop5: unable to read RDB block 7 [ 443.381418][T12606] loop5: AHDI p2 p4 [ 443.381444][T12606] loop5: partition table partially beyond EOD, truncated [ 443.406190][T12606] loop5: p4 start 254 is beyond EOD, truncated [ 444.253534][ C0] net_ratelimit: 107 callbacks suppressed [ 445.877738][T12627] atomic_op ffff8880233c49e0 conn xmit_atomic 0000000000000000 [ 449.374773][ T6435] net_ratelimit: 144 callbacks suppressed [ 451.145361][ T30] audit: type=1400 audit(1791031095.279:1611): avc: denied { recv } for pid=4960 comm="klogd" saddr=10.128.0.169 src=30006 daddr=10.128.0.199 dest=44448 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 451.178785][ T30] audit: type=1400 audit(1791031095.309:1612): avc: denied { read } for pid=5601 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.178831][ T30] audit: type=1400 audit(1791031095.309:1613): avc: denied { open } for pid=5601 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.178862][ T30] audit: type=1400 audit(1791031095.309:1614): avc: denied { ioctl } for pid=5601 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.432345][ T30] audit: type=1400 audit(1791031095.579:1615): avc: denied { mounton } for pid=12693 comm="syz.2.2229" path="/428/file0" dev="tmpfs" ino=2225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 451.433063][T12694] jffs2: notice: (12694) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 451.496384][ T30] audit: type=1400 audit(1791031095.649:1616): avc: denied { mount } for pid=12693 comm="syz.2.2229" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 451.526445][ T30] audit: type=1400 audit(1791031095.669:1617): avc: denied { allowed } for pid=12693 comm="syz.2.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 451.639262][ T30] audit: type=1400 audit(1791031095.789:1618): avc: denied { prog_load } for pid=12693 comm="syz.2.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 451.639472][ T30] audit: type=1400 audit(1791031095.789:1619): avc: denied { bpf } for pid=12693 comm="syz.2.2229" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 451.698550][ T30] audit: type=1400 audit(1791031095.849:1620): avc: denied { mount } for pid=12693 comm="syz.2.2229" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 451.903056][ T5606] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 453.726861][ T5606] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 454.169558][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 454.207102][T12698] atomic_op ffff88803471d1e0 conn xmit_atomic 0000000000000000 [ 454.413448][ C0] net_ratelimit: 71 callbacks suppressed [ 454.520413][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2236'. [ 454.520522][T12722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.587518][T12722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.731129][T12724] veth0_to_bond: Caught tx_queue_len zero misconfig [ 456.192736][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 456.192755][ T30] audit: type=1400 audit(1791031100.339:1655): avc: denied { create } for pid=12734 comm="syz.2.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.739008][ T30] audit: type=1400 audit(1791031100.889:1656): avc: denied { connect } for pid=12734 comm="syz.2.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.740766][ T30] audit: type=1400 audit(1791031100.889:1657): avc: denied { write } for pid=12734 comm="syz.2.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.972428][ T30] audit: type=1400 audit(1791031101.119:1658): avc: denied { create } for pid=12746 comm="syz.5.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 457.020986][ T30] audit: type=1400 audit(1791031101.169:1659): avc: denied { write } for pid=12746 comm="syz.5.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 457.130977][ T30] audit: type=1400 audit(1791031101.279:1660): avc: denied { read append } for pid=12750 comm="syz.4.2243" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 457.131856][ T30] audit: type=1400 audit(1791031101.279:1661): avc: denied { open } for pid=12750 comm="syz.4.2243" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 457.280017][ T30] audit: type=1400 audit(1791031101.429:1662): avc: denied { create } for pid=12750 comm="syz.4.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 457.409789][T12753] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2244'. [ 457.409837][T12753] ksmbd: Unknown IPC event: 3, ignore. [ 457.423911][T12753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2244'. [ 457.424051][ T30] audit: type=1400 audit(1791031101.539:1663): avc: denied { read } for pid=12748 comm="syz.3.2244" dev="nsfs" ino=4026533346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 457.424235][ T30] audit: type=1400 audit(1791031101.539:1664): avc: denied { open } for pid=12748 comm="syz.3.2244" path="net:[4026533346]" dev="nsfs" ino=4026533346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 457.831543][T12753] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.2244: No space for directory leaf checksum. Please run e2fsck -D. [ 457.831571][T12753] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.2244: checksumming directory block 0 [ 457.831791][T12753] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 457.831906][T12753] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.2244: No space for directory leaf checksum. Please run e2fsck -D. [ 457.831931][T12753] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.2244: checksumming directory block 0 [ 457.832099][T12753] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 457.832227][T12753] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.2244: No space for directory leaf checksum. Please run e2fsck -D. [ 457.832252][T12753] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.2244: checksumming directory block 0 [ 457.832426][T12753] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 457.832532][T12753] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.2244: No space for directory leaf checksum. Please run e2fsck -D. [ 457.832557][T12753] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.2244: checksumming directory block 0 [ 457.832715][T12753] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 457.832736][T12753] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 457.833114][T12753] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 458.439466][T12763] loop5: detected capacity change from 0 to 7 [ 458.460247][T12763] Dev loop5: unable to read RDB block 7 [ 458.460276][T12763] loop5: AHDI p2 p4 [ 458.461295][T12763] loop5: partition table partially beyond EOD, truncated [ 458.472821][T12763] loop5: p4 start 254 is beyond EOD, truncated [ 459.614140][ T6424] net_ratelimit: 85 callbacks suppressed [ 460.135495][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 460.138179][T12762] atomic_op ffff88807b8b81e0 conn xmit_atomic 0000000000000000 [ 460.414453][T12787] ip6gretap0: entered promiscuous mode [ 460.414555][T12787] macvtap3: entered promiscuous mode [ 460.414639][T12787] macvtap3: entered allmulticast mode [ 460.414648][T12787] ip6gretap0: entered allmulticast mode [ 460.546774][T12790] ip6gretap0: left allmulticast mode [ 460.546874][T12790] ip6gretap0: left promiscuous mode [ 460.549122][T12790] macvtap3: left promiscuous mode [ 460.549137][T12790] macvtap3: left allmulticast mode [ 461.385210][T12802] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2256'. [ 461.385256][T12802] ksmbd: Unknown IPC event: 3, ignore. [ 461.400042][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2256'. [ 461.403931][T12802] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.2256: No space for directory leaf checksum. Please run e2fsck -D. [ 461.403989][T12802] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.2256: checksumming directory block 0 [ 461.404893][T12802] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 461.405521][T12802] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.2256: No space for directory leaf checksum. Please run e2fsck -D. [ 461.405575][T12802] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.2256: checksumming directory block 0 [ 461.406301][T12802] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 461.406817][T12802] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.2256: No space for directory leaf checksum. Please run e2fsck -D. [ 461.406869][T12802] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.2256: checksumming directory block 0 [ 461.407575][T12802] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 461.408077][T12802] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.2256: No space for directory leaf checksum. Please run e2fsck -D. [ 461.408123][T12802] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.2256: checksumming directory block 0 [ 461.408838][T12802] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 461.408968][T12802] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 461.412696][T12802] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 461.436093][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 461.436130][ T30] audit: type=1400 audit(1791031105.519:1709): avc: denied { read } for pid=12796 comm="syz.3.2256" dev="nsfs" ino=4026533346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 461.436322][ T30] audit: type=1400 audit(1791031105.519:1710): avc: denied { open } for pid=12796 comm="syz.3.2256" path="net:[4026533346]" dev="nsfs" ino=4026533346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 461.436481][ T30] audit: type=1400 audit(1791031105.519:1711): avc: denied { create } for pid=12796 comm="syz.3.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 461.436665][ T30] audit: type=1400 audit(1791031105.529:1712): avc: denied { write } for pid=12796 comm="syz.3.2256" path="socket:[37656]" dev="sockfs" ino=37656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 461.436808][ T30] audit: type=1400 audit(1791031105.529:1713): avc: denied { create } for pid=12796 comm="syz.3.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 461.436971][ T30] audit: type=1400 audit(1791031105.539:1714): avc: denied { write } for pid=12796 comm="syz.3.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 461.437135][ T30] audit: type=1400 audit(1791031105.539:1715): avc: denied { read } for pid=12796 comm="syz.3.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 461.437290][ T30] audit: type=1400 audit(1791031105.549:1716): avc: denied { create } for pid=12796 comm="syz.3.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 461.437448][ T30] audit: type=1400 audit(1791031105.549:1717): avc: denied { ioctl } for pid=12796 comm="syz.3.2256" path="socket:[37659]" dev="sockfs" ino=37659 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 461.437608][ T30] audit: type=1400 audit(1791031105.559:1718): avc: denied { firmware_load } for pid=12796 comm="syz.3.2256" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 462.240624][T12808] jffs2: notice: (12808) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 462.527291][ T5606] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 464.628952][T12823] jffs2: notice: (12823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 464.656269][ T6441] net_ratelimit: 94 callbacks suppressed [ 465.452581][ T5606] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 466.510967][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 466.510984][ T30] audit: type=1400 audit(1791031110.639:1775): avc: denied { write } for pid=12832 comm="syz.5.2265" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 467.067213][ T30] audit: type=1400 audit(1791031111.219:1776): avc: denied { create } for pid=12838 comm="syz.4.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 467.108519][ T30] audit: type=1400 audit(1791031111.259:1777): avc: denied { write } for pid=12838 comm="syz.4.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 467.140008][ T30] audit: type=1400 audit(1791031111.289:1778): avc: denied { map_create } for pid=12831 comm="syz.3.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 467.140055][ T30] audit: type=1400 audit(1791031111.289:1779): avc: denied { bpf } for pid=12831 comm="syz.3.2266" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 467.140097][ T30] audit: type=1400 audit(1791031111.289:1780): avc: denied { map_read map_write } for pid=12831 comm="syz.3.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 467.247227][ T30] audit: type=1400 audit(1791031111.399:1781): avc: denied { recv } for pid=12831 comm="syz.3.2266" saddr=10.128.0.169 src=30006 daddr=10.128.0.199 dest=44448 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 467.463214][ T30] audit: type=1400 audit(1791031111.599:1782): avc: denied { read } for pid=5600 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 467.463292][ T30] audit: type=1400 audit(1791031111.599:1783): avc: denied { open } for pid=5600 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 467.463333][ T30] audit: type=1400 audit(1791031111.599:1784): avc: denied { ioctl } for pid=5600 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.255382][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 468.403443][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 468.404251][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 468.404835][ T10] usb 5-1: config 0 has no interfaces? [ 468.404886][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.411549][ T10] usb 5-1: config 0 descriptor?? [ 468.553523][T12866] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2271'. [ 468.553569][T12866] ksmbd: Unknown IPC event: 3, ignore. [ 468.568366][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2271'. [ 468.569642][T12866] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.2271: No space for directory leaf checksum. Please run e2fsck -D. [ 468.569695][T12866] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.2271: checksumming directory block 0 [ 468.570532][T12866] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 468.572340][T12866] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.2271: No space for directory leaf checksum. Please run e2fsck -D. [ 468.572395][T12866] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.2271: checksumming directory block 0 [ 468.573303][T12866] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 468.574175][T12866] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.2271: No space for directory leaf checksum. Please run e2fsck -D. [ 468.574227][T12866] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.2271: checksumming directory block 0 [ 468.574983][T12866] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 468.575538][T12866] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.2271: No space for directory leaf checksum. Please run e2fsck -D. [ 468.575580][T12866] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.2271: checksumming directory block 0 [ 468.576300][T12866] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 468.576411][T12866] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 468.579209][T12866] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 468.781246][ T5729] usb 5-1: USB disconnect, device number 27 [ 469.853549][ C1] net_ratelimit: 98 callbacks suppressed [ 470.447911][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 471.150794][T12900] loop5: detected capacity change from 0 to 7 [ 471.163641][T12900] Dev loop5: unable to read RDB block 7 [ 471.165321][T12900] loop5: AHDI p2 p4 [ 471.165344][T12900] loop5: partition table partially beyond EOD, truncated [ 471.169411][T12900] loop5: p4 start 254 is beyond EOD, truncated [ 471.297585][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.302114][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.365232][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.378349][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.413191][T12905] syzkaller0: entered promiscuous mode [ 471.413206][T12905] syzkaller0: entered allmulticast mode [ 471.443589][ T6441] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.443629][ T6441] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.443648][ T6441] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.443667][ T6441] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.592940][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 471.592958][ T30] audit: type=1400 audit(1791031115.739:1845): avc: denied { read } for pid=12907 comm="syz.4.2284" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 471.614541][ T30] audit: type=1400 audit(1791031115.739:1846): avc: denied { open } for pid=12907 comm="syz.4.2284" path="/dev/input/event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 471.655976][ T30] audit: type=1400 audit(1791031115.809:1847): avc: denied { write } for pid=12907 comm="syz.4.2284" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 471.692346][ T30] audit: type=1400 audit(1791031115.839:1848): avc: denied { module_request } for pid=12909 comm="syz.1.2285" kmod="netdev-batadv_slave_0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 471.777639][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'. [ 471.824869][ T30] audit: type=1400 audit(1791031115.979:1849): avc: denied { sys_module } for pid=12909 comm="syz.1.2285" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 471.880247][ T30] audit: type=1400 audit(1791031116.029:1850): avc: denied { create } for pid=12909 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 471.914763][ T30] audit: type=1400 audit(1791031116.069:1851): avc: denied { write } for pid=12909 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 471.915107][ T30] audit: type=1400 audit(1791031116.069:1852): avc: denied { read } for pid=12909 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 472.110292][ T30] audit: type=1400 audit(1791031116.259:1853): avc: denied { mounton } for pid=12917 comm="syz.3.2286" path="/505/file0" dev="tmpfs" ino=2665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 472.111042][T12918] jffs2: notice: (12918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 472.154466][ T30] audit: type=1400 audit(1791031116.309:1854): avc: denied { mount } for pid=12917 comm="syz.3.2286" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 472.661471][ T5606] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 473.802857][T12929] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2290'. [ 473.861986][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2292'. [ 473.890391][T12937] netlink: 'syz.1.2293': attribute type 11 has an invalid length. [ 473.911007][T12933] ip6gretap0: entered promiscuous mode [ 473.912442][T12933] macvtap4: entered promiscuous mode [ 473.912778][T12933] macvtap4: entered allmulticast mode [ 473.912789][T12933] ip6gretap0: entered allmulticast mode [ 474.017058][T12938] loop5: detected capacity change from 0 to 7 [ 474.038666][T12938] Dev loop5: unable to read RDB block 7 [ 474.038682][T12938] loop5: AHDI p2 p4 [ 474.039290][T12938] loop5: partition table partially beyond EOD, truncated [ 474.040348][T12938] loop5: p4 start 254 is beyond EOD, truncated [ 474.080929][T12939] ip6gretap0: left allmulticast mode [ 474.081144][T12939] ip6gretap0: left promiscuous mode [ 474.101067][T12939] macvtap4: left promiscuous mode [ 474.101084][T12939] macvtap4: left allmulticast mode [ 474.133758][T12940] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.135193][T12940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.137721][T12940] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.137786][T12940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.274259][T12940] erspan0: entered promiscuous mode [ 474.308622][T12940] ip6gretap0: entered promiscuous mode [ 474.629546][ T1274] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 474.690727][ T1274] bond4: active interface up! [ 474.778276][ T1254] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 474.821127][ T1254] bond3: active interface up! [ 474.842271][ T6424] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 474.842660][ T6424] bond2: active interface up! [ 474.867009][T12285] bond6: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 474.867149][T12285] net_ratelimit: 247 callbacks suppressed [ 474.867156][T12285] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 474.971375][T12285] bond6: active interface up! [ 475.034420][ T64] bond5: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 475.034557][ T64] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 475.039651][ T64] bond5: active interface up! [ 475.085871][T12285] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 475.092665][T12285] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 475.124975][T12285] bond1: active interface up! [ 475.174219][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 475.227235][T12931] atomic_op ffff8880297e61e0 conn xmit_atomic 0000000000000000 [ 475.325614][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 475.329127][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.559351][T12959] jffs2: notice: (12959) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 475.882977][ T5606] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 476.020130][T12950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.020889][T12950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.223174][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 476.297398][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 476.972178][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 476.972230][ T30] audit: type=1400 audit(1791031121.119:1893): avc: denied { map } for pid=12965 comm="syz.5.2300" path="socket:[38214]" dev="sockfs" ino=38214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 477.060841][ T10] usb 3-1: USB disconnect, device number 24 [ 477.230005][ T30] audit: type=1400 audit(1791031121.379:1894): avc: denied { read } for pid=12956 comm="syz.4.2297" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 477.230058][ T30] audit: type=1400 audit(1791031121.379:1895): avc: denied { open } for pid=12956 comm="syz.4.2297" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 477.286512][ T30] audit: type=1400 audit(1791031121.429:1896): avc: denied { ioctl } for pid=12956 comm="syz.4.2297" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 477.524906][T12984] netlink: 'syz.2.2305': attribute type 11 has an invalid length. [ 477.699477][T12989] 8021q: adding VLAN 0 to HW filter on device eth0 [ 477.717477][T12989] 8021q: adding VLAN 0 to HW filter on device eth1 [ 477.734250][T12989] 8021q: adding VLAN 0 to HW filter on device eth2 [ 477.740259][T12989] 8021q: adding VLAN 0 to HW filter on device eth3 [ 477.742590][T12989] ip6gretap0: entered promiscuous mode [ 477.750559][T12989] veth0_to_team: entered promiscuous mode [ 477.764365][T12035] bridge0: entered promiscuous mode [ 477.882317][ T6441] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 477.946953][ T6441] bond1: active interface up! [ 477.986519][ T30] audit: type=1400 audit(1791031122.139:1897): avc: denied { read } for pid=12997 comm="syz.4.2309" dev="nsfs" ino=4026532804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 477.986561][ T30] audit: type=1400 audit(1791031122.139:1898): avc: denied { open } for pid=12997 comm="syz.4.2309" path="uts:[4026532804]" dev="nsfs" ino=4026532804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 477.988251][ T30] audit: type=1400 audit(1791031122.139:1899): avc: denied { read } for pid=12997 comm="syz.4.2309" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 477.988295][ T30] audit: type=1400 audit(1791031122.139:1900): avc: denied { open } for pid=12997 comm="syz.4.2309" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 478.721330][ T30] audit: type=1400 audit(1791031122.869:1901): avc: denied { recv } for pid=5588 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.199 dest=44448 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 478.749250][ T30] audit: type=1400 audit(1791031122.899:1902): avc: denied { read } for pid=5600 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 478.950764][T13006] loop5: detected capacity change from 0 to 7 [ 478.953560][T13006] Dev loop5: unable to read RDB block 7 [ 478.953584][T13006] loop5: AHDI p2 p4 [ 478.959621][T13006] loop5: partition table partially beyond EOD, truncated [ 478.975174][T13006] loop5: p4 start 254 is beyond EOD, truncated [ 479.133525][ T3215] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 479.306706][ T3215] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.307777][ T3215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.307792][ T3215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.307805][ T3215] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.307860][ T3215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.310841][ T3215] usb 5-1: config 0 descriptor?? [ 479.467583][T12992] atomic_op ffff888022b2d9e0 conn xmit_atomic 0000000000000000 [ 479.558904][ T3215] usbhid 5-1:0.0: can't add hid device: -71 [ 479.558982][ T3215] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 479.578532][ T3215] usb 5-1: USB disconnect, device number 28 [ 480.096312][ T6424] net_ratelimit: 415 callbacks suppressed [ 481.565258][T13052] jffs2: notice: (13052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 481.746763][T13052] overlayfs: failed to clone upperpath [ 481.760967][ T5606] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 482.013620][ C1] ipvlan_process_outbound: 2 callbacks suppressed [ 482.021485][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 482.021499][ T30] audit: type=1400 audit(1791031126.169:1960): avc: denied { read write } for pid=13057 comm="syz.2.2325" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.021688][ T30] audit: type=1400 audit(1791031126.169:1961): avc: denied { open } for pid=13057 comm="syz.2.2325" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.030212][ T30] audit: type=1400 audit(1791031126.179:1962): avc: denied { ioctl } for pid=13057 comm="syz.2.2325" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.240917][ T30] audit: type=1400 audit(1791031126.269:1963): avc: denied { perfmon } for pid=13054 comm="syz.4.2324" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 482.241148][ T30] audit: type=1400 audit(1791031126.339:1964): avc: denied { read append } for pid=13054 comm="syz.4.2324" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 482.241313][ T30] audit: type=1400 audit(1791031126.339:1965): avc: denied { open } for pid=13054 comm="syz.4.2324" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 482.241549][ T30] audit: type=1400 audit(1791031126.369:1966): avc: denied { setattr } for pid=13054 comm="syz.4.2324" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 482.704867][ T5707] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 482.810813][ T30] audit: type=1400 audit(1791031126.959:1967): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 482.841327][ T30] audit: type=1400 audit(1791031126.989:1968): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 482.864912][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 482.865501][ T5707] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 482.878899][ T5707] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 482.878921][ T5707] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 482.878942][ T5707] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 482.878962][ T5707] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 482.878981][ T5707] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 482.879000][ T5707] usb 3-1: config 0 has no interface number 0 [ 482.879036][ T5707] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 482.879062][ T5707] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 482.879084][ T5707] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 482.879134][ T5707] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.879159][ T5707] usb 3-1: config 0 interface 125 has no altsetting 0 [ 482.879177][ T5707] usb 3-1: config 0 interface 125 has no altsetting 2 [ 482.881417][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.881438][ T5707] usb 3-1: Product: syz [ 482.881453][ T5707] usb 3-1: Manufacturer: syz [ 482.881468][ T5707] usb 3-1: SerialNumber: syz [ 482.897710][ T5707] usb 3-1: config 0 descriptor?? [ 482.913990][ T5707] usb 3-1: selecting invalid altsetting 2 [ 482.939691][ T30] audit: type=1400 audit(1791031127.089:1969): avc: denied { create } for pid=13060 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 483.529678][T13061] atomic_op ffff8880227bf1e0 conn xmit_atomic 0000000000000000 [ 483.551497][T13058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.554727][T13058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.583163][ C1] usb 3-1: async_complete: urb error -71 [ 483.583268][ C1] usb 3-1: async_complete: urb error -71 [ 483.591015][ T5707] get_1284_register: usb error -71 [ 483.626438][ T5707] usb 3-1: USB disconnect, device number 25 [ 483.790800][T13079] loop5: detected capacity change from 0 to 7 [ 483.818849][T13083] jffs2: notice: (13083) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 483.821380][T13079] Dev loop5: unable to read RDB block 7 [ 483.821407][T13079] loop5: AHDI p2 p4 [ 483.821427][T13079] loop5: partition table partially beyond EOD, truncated [ 483.851684][T13079] loop5: p4 start 254 is beyond EOD, truncated [ 483.921385][T13083] overlayfs: failed to clone upperpath [ 483.931358][ T5606] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 483.954515][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2332'. [ 484.024374][T13085] ip6gretap0: entered promiscuous mode [ 484.031960][T13085] macvtap4: entered promiscuous mode [ 484.032727][T13085] macvtap4: entered allmulticast mode [ 484.033039][T13085] ip6gretap0: entered allmulticast mode [ 484.062425][T13086] ip6gretap0: left allmulticast mode [ 484.062527][T13086] ip6gretap0: left promiscuous mode [ 484.065288][T13086] macvtap4: left promiscuous mode [ 484.065308][T13086] macvtap4: left allmulticast mode [ 484.652958][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 484.745400][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 484.822262][T13106] jffs2: notice: (13106) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 485.063541][ T5707] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 485.150257][ T5606] Bluetooth: Wrong link type (-71) [ 485.166163][ T6414] net_ratelimit: 114 callbacks suppressed [ 485.443428][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 485.654023][ T5707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 485.654067][ T5707] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 485.773680][ T5707] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 485.773708][ T5707] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 485.773729][ T5707] usb 5-1: config 14 has no interface number 0 [ 485.773745][ T5707] usb 5-1: config 14 has no interface number 1 [ 485.773802][ T5707] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 485.773826][ T5707] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 485.773852][ T5707] usb 5-1: config 14 interface 57 has no altsetting 0 [ 485.773870][ T5707] usb 5-1: config 14 interface 228 has no altsetting 0 [ 486.888527][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.888548][ T5707] usb 5-1: Product: syz [ 486.888564][ T5707] usb 5-1: Manufacturer: syz [ 486.888579][ T5707] usb 5-1: SerialNumber: syz [ 487.229647][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 487.229662][ T30] audit: type=1400 audit(1791031131.379:1998): avc: denied { read write } for pid=13103 comm="syz.4.2338" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 487.230448][ T30] audit: type=1400 audit(1791031131.379:1999): avc: denied { open } for pid=13103 comm="syz.4.2338" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 487.231663][ T30] audit: type=1400 audit(1791031131.379:2000): avc: denied { create } for pid=13103 comm="syz.4.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 488.094798][T13113] Bluetooth: hci5: command 0x0406 tx timeout [ 488.418004][ T5707] legousbtower 5-1:14.57: interrupt endpoints not found [ 488.563506][ T5716] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 488.625895][ T5707] legousbtower 5-1:14.228: interrupt endpoints not found [ 488.719467][ T5716] usb 6-1: Using ep0 maxpacket: 16 [ 488.720238][ T5716] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 488.721352][ T5716] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 488.721375][ T5716] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 488.721395][ T5716] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 488.721415][ T5716] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 488.721435][ T5716] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 488.721455][ T5716] usb 6-1: config 0 has no interface number 0 [ 488.790833][ T5716] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 488.790861][ T5716] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 488.790874][ T5716] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 488.790903][ T5716] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 488.790918][ T5716] usb 6-1: config 0 interface 125 has no altsetting 0 [ 488.790928][ T5716] usb 6-1: config 0 interface 125 has no altsetting 2 [ 488.860298][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.860310][ T5716] usb 6-1: Product: syz [ 488.860318][ T5716] usb 6-1: Manufacturer: syz [ 488.860327][ T5716] usb 6-1: SerialNumber: syz [ 488.862892][ T5716] usb 6-1: config 0 descriptor?? [ 488.904198][ T5716] usb 6-1: selecting invalid altsetting 2 [ 489.301237][ T30] audit: type=1400 audit(1791031133.449:2001): avc: denied { read } for pid=13144 comm="syz.2.2349" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 489.301483][ T30] audit: type=1400 audit(1791031133.449:2002): avc: denied { open } for pid=13144 comm="syz.2.2349" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 489.359443][ T30] audit: type=1400 audit(1791031133.509:2003): avc: denied { ioctl } for pid=13144 comm="syz.2.2349" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 489.488373][T13141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.509014][T13141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.513719][ C1] usb 6-1: async_complete: urb error -71 [ 489.513912][ C1] usb 6-1: async_complete: urb error -71 [ 489.522879][ T5716] get_1284_register: usb error -71 [ 489.580345][ T5716] usb 6-1: USB disconnect, device number 9 [ 489.769876][T13156] jffs2: notice: (13156) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 490.030664][T13160] loop5: detected capacity change from 0 to 7 [ 490.048572][T13160] Dev loop5: unable to read RDB block 7 [ 490.048607][T13160] loop5: AHDI p2 p4 [ 490.048619][T13160] loop5: partition table partially beyond EOD, truncated [ 490.048758][T13160] loop5: p4 start 254 is beyond EOD, truncated [ 490.069404][ T5606] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 490.174905][ T6414] net_ratelimit: 94 callbacks suppressed [ 490.785563][ T30] audit: type=1400 audit(1791031134.919:2004): avc: denied { create } for pid=13161 comm="syz.1.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 491.701282][ T5794] usb 5-1: USB disconnect, device number 29 [ 492.225412][T13169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.292226][T13169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.401027][T13188] jffs2: notice: (13188) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 493.560812][ T5606] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 494.313715][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 494.313830][T13204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.378340][T13204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.833752][T12035] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 494.984883][T12035] usb 6-1: Using ep0 maxpacket: 16 [ 494.985865][T12035] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 495.012929][T12035] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 495.012956][T12035] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 495.012977][T12035] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 495.012998][T12035] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 495.013017][T12035] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 495.013038][T12035] usb 6-1: config 0 has no interface number 0 [ 495.013072][T12035] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 495.013088][T12035] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 495.013101][T12035] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 495.013131][T12035] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.013146][T12035] usb 6-1: config 0 interface 125 has no altsetting 0 [ 495.013156][T12035] usb 6-1: config 0 interface 125 has no altsetting 2 [ 495.128773][T12035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.128792][T12035] usb 6-1: Product: syz [ 495.128803][T12035] usb 6-1: Manufacturer: syz [ 495.128814][T12035] usb 6-1: SerialNumber: syz [ 495.160205][T12035] usb 6-1: config 0 descriptor?? [ 495.182751][T12035] usb 6-1: selecting invalid altsetting 2 [ 495.213420][ C0] net_ratelimit: 89 callbacks suppressed [ 496.202462][T13217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.220739][T13217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.222816][ C1] usb 6-1: async_complete: urb error -71 [ 496.222993][ C1] usb 6-1: async_complete: urb error -71 [ 496.243051][T12035] get_1284_register: usb error -71 [ 496.273152][T12035] usb 6-1: USB disconnect, device number 10 [ 496.503255][T13214] loop5: detected capacity change from 0 to 7 [ 496.509472][T13214] Dev loop5: unable to read RDB block 7 [ 496.509498][T13214] loop5: AHDI p2 p4 [ 496.509518][T13214] loop5: partition table partially beyond EOD, truncated [ 496.511407][T13214] loop5: p4 start 254 is beyond EOD, truncated [ 496.782010][ T30] audit: type=1400 audit(1791031140.929:2005): avc: denied { map_create } for pid=13221 comm="syz.4.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.782610][ T30] audit: type=1400 audit(1791031140.929:2006): avc: denied { map_read map_write } for pid=13221 comm="syz.4.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 497.204281][T13227] jffs2: notice: (13227) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 497.267375][T13229] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2370'. [ 497.267405][T13229] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2370'. [ 497.429233][T13233] overlayfs: mkdir(bus/work, 040000) [ 497.429966][T13233] overlayfs: ...mkdir = 0 [ 497.430085][ T32] INFO: task syz.0.1811:11168 blocked for more than 143 seconds. [ 497.430170][ T32] Tainted: G L syzkaller #0 [ 497.430208][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.430245][ T32] task:syz.0.1811 state:D stack:28056 pid:11168 tgid:11165 ppid:5599 task_flags:0x400040 flags:0x00080002 [ 497.430508][ T32] Call Trace: [ 497.430550][ T32] [ 497.430592][ T32] __schedule+0x1259/0x6920 [ 497.430656][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 497.430878][ T32] ? __pfx___schedule+0x10/0x10 [ 497.430905][ T32] ? find_held_lock+0x2b/0x80 [ 497.430974][ T32] ? schedule+0x225/0x2c0 [ 497.431044][ T32] schedule+0xdd/0x2c0 [ 497.431124][ T32] schedule_preempt_disabled+0x13/0x30 [ 497.431155][ T32] __mutex_lock+0xccb/0x1bd0 [ 497.431187][ T32] ? nfsd_nl_threads_get_doit+0x1c1/0x820 [ 497.431227][ T32] ? trace_kmem_cache_alloc+0xdd/0x100 [ 497.431296][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 497.431328][ T32] ? kmalloc_reserve+0xf9/0x350 [ 497.431357][ T32] ? skb_put+0x138/0x180 [ 497.431443][ T32] ? genlmsg_put+0x258/0x2d0 [ 497.431564][ T32] ? nfsd_nl_threads_get_doit+0x1c1/0x820 [ 497.431599][ T32] nfsd_nl_threads_get_doit+0x1c1/0x820 [ 497.431640][ T32] ? __nla_parse+0x40/0x60 [ 497.431661][ T32] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 497.432137][ T32] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 497.432201][ T32] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 497.432274][ T32] genl_family_rcv_msg_doit+0x214/0x300 [ 497.432368][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 497.432402][ T32] ? genl_get_cmd+0x3e7/0x760 [ 497.432472][ T32] ? __dev_queue_xmit+0xa81/0x4a40 [ 497.432501][ T32] ? __radix_tree_lookup+0x217/0x2b0 [ 497.432571][ T32] genl_rcv_msg+0x560/0x800 [ 497.432638][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.432672][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 497.432701][ T32] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 497.432807][ T32] netlink_rcv_skb+0x159/0x420 [ 497.432870][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.432906][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.433077][ T32] ? netlink_deliver_tap+0x1ae/0xcc0 [ 497.433154][ T32] genl_rcv+0x28/0x40 [ 497.433222][ T32] netlink_unicast+0x585/0x850 [ 497.433289][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 497.469632][T13233] overlayfs: tmpfile(bus/work, 0100000) = 0 [ 497.485157][T13234] kcov: kcov_start: t = ffff8880328ca580, size = 524288, area = ffffc9001f72d000 [ 497.490478][ C1] virtqueue callback for ffff888026bd9a00 (ffffffff86ec8710) [ 497.490510][ C1] No more buffers in queue [ 497.490948][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 497.490976][ C1] No more buffers in queue [ 497.529281][T13233] overlayfs: create(work/#23, 0100000) = 0 [ 497.529730][T13233] overlayfs: rename(work/#23, work/#24, 0x4) [ 497.533583][ C1] eth0: xmit ffff888035679b40 42:01:0a:80:00:01 [ 497.533621][ C1] Added buffer head 1 to ffff888026bd9800 [ 497.533653][ C1] virtqueue callback for ffff888026bd9800 (ffffffff86ed14c0) [ 497.533741][T13233] overlayfs: unlink(work/#23) = 0 [ 497.533778][ C1] Sent skb ffff888035679b40 [ 497.533841][ C1] No more buffers in queue [ 497.534501][T13233] overlayfs: unlink(work/#24) = 0 [ 497.535232][T13233] overlayfs: setxattr(bus/work, "trusted.overlay.opaque", "0", 1, 0) = 0 [ 497.535402][T13233] overlayfs: removexattr(bus/work, "trusted.overlay.opaque") = 0 [ 497.536116][T13233] overlayfs: getxattr(80/file1, "trusted.overlay.uuid", "", 16, 0) = -61 [ 497.536180][T13233] overlayfs: getxattr(80/file1, "trusted.overlay.impure", "", 0, 0) = -61 [ 497.536620][T13233] overlayfs: setxattr(80/file1, "trusted.overlay.uuid", "ÊöÎÏ\216àO«\231©?µ.\233\017ý", 16, 0) = 0 [ 497.536796][T13233] overlayfs: getxattr(80/file1, "trusted.overlay.origin", "", 0, 0) = -61 [ 497.542807][T13233] overlayfs: setxattr(80/file1, "trusted.overlay.origin", "\0û\035\0\001\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\001\0\0\0\0\0\0\0", 29, 0) = 0 [ 497.543404][T13233] overlayfs: mkdir(bus/index, 040000) [ 497.561983][ T32] netlink_sendmsg+0x8b0/0xda0 [ 497.562087][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.562154][ T32] ? selinux_socket_sendmsg+0x198/0x2f0 [ 497.562220][ T32] ____sys_sendmsg+0xa4d/0xbe0 [ 497.562249][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.562284][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.562388][ T32] ___sys_sendmsg+0x190/0x1e0 [ 497.562421][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.562488][ T32] ? futex_wait+0x11e/0x370 [ 497.562689][T13233] overlayfs: ...mkdir = 0 [ 497.567942][ T32] ? find_held_lock+0x2b/0x80 [ 497.573676][T13233] overlayfs: getxattr(bus/index, "trusted.overlay.origin", "", 0, 0) = -61 [ 497.573766][T13233] overlayfs: getxattr(bus/index, "trusted.overlay.upper", "", 0, 0) = -61 [ 497.578465][T13233] overlayfs: setxattr(bus/index, "trusted.overlay.upper", "\0û!\004\001¢®\001AÒÜBô\210Q'1N©Ïbp¬âNÌ\001\0\0\0\0\0\0", 33, 0) = 0 [ 497.599522][T13233] overlayfs: getxattr(80/file1, "trusted.overlay.impure", "", 1, 0) = -61 [ 497.715106][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 497.715129][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001e72a000 [ 497.715160][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.726442][ T32] __sys_sendmsg+0x160/0x210 [ 497.726510][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.726649][ T32] do_syscall_64+0x123/0x790 [ 497.726681][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.726709][ T32] RIP: 0033:0x7ffa8199e159 [ 497.726736][ T32] RSP: 002b:00007ffa827ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.726809][ T32] RAX: ffffffffffffffda RBX: 00007ffa81c26090 RCX: 00007ffa8199e159 [ 497.726847][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000006 [ 497.726887][ T32] RBP: 00007ffa81a3506b R08: 0000000000000000 R09: 0000000000000000 [ 497.726928][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.726965][ T32] R13: 00007ffa81c26128 R14: 00007ffa81c26090 R15: 00007ffff457fca8 [ 497.727084][ T32] [ 497.727276][ T32] [ 497.727276][ T32] Showing all locks held in the system: [ 497.727320][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 497.727360][ T32] #0: ffffffff8edd88b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 497.727583][ T32] locks held by kworker/1:0/25: 2, last CPU#1: [ 497.727622][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 497.727809][ T32] #1: ffffc900001f7d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 497.727986][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 497.728017][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 497.728160][ T32] locks held by kworker/u8:8/1254: 4, last CPU#1: [ 497.728215][ T32] #0: ffff888034186940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 497.728369][ T32] #1: ffffc90005b27d08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 497.728592][ T32] #2: [ 497.733747][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 497.733768][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001e72a000 [ 497.733800][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.739200][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.739221][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.770957][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 497.770977][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 497.777156][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 69 [ 497.777191][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.777205][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.777258][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 102 [ 497.777281][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.777295][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.777324][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.777347][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.777361][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.777389][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.777412][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.777426][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.777454][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.777477][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.777490][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.777519][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.777541][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.777555][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.777583][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.777606][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.777619][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.777647][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.777715][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.777730][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.777758][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.777814][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.777827][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.777856][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.777914][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.777928][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.777956][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.778015][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778029][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778058][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.778147][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778160][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778189][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.778248][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778262][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778290][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.778349][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778361][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778379][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 33 [ 497.778398][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778410][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778428][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 33 [ 497.778449][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778460][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778476][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 33 [ 497.778495][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778507][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778523][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 33 [ 497.778543][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778555][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778573][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 33 [ 497.778595][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778608][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778637][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.778660][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778673][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778702][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.778725][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778738][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778766][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.778789][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778802][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778831][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.778896][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.778910][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.778939][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.779001][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779015][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779044][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.779067][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779081][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779109][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.779132][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779145][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779174][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.779197][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779210][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779239][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.779273][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779286][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779315][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.779409][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779422][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779451][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.779508][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779522][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779541][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 33 [ 497.779574][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779588][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779617][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.779675][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779689][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779717][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.779776][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779790][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779819][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.779904][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.779918][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.779947][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780009][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780023][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780052][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780075][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780088][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780117][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780140][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780153][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780181][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780204][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780218][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780246][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780280][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780294][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780322][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780380][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780394][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780423][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780481][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780494][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780513][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 33 [ 497.780580][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780594][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780622][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780679][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780693][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780721][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780778][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780795][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780824][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780879][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780893][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.780922][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.780979][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.780993][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.781026][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.781081][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.781095][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.781123][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.781181][T13236] kcov: kcov_remote_start: handle = 2, context: task [ 497.781195][T13236] kcov: kcov_start: t = ffff88802dbc2580, size = 1048576, area = ffffc9001e72a000 [ 497.781223][T13236] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001e72a000 45 [ 497.806235][T13235] kcov: kcov_start: t = ffff88802fc38000, size = 524288, area = ffffc9000eae1000 [ 497.826350][ T5606] hci5 [ 497.826369][ T5606] kcov: kcov_remote_start: handle = 6, context: task [ 497.826385][ T5606] kcov: kcov_start: t = ffff8880294a4b00, size = 1048576, area = ffffc9001e72a000 [ 497.826404][ T5606] hci5 ACL data packet [ 497.826415][ T5606] hci5: len 18 handle 0x00c9 flags 0x0002 [ 497.826436][ T5606] hcon ffff888030fcc000 mode 0 [ 497.826452][ T5606] conn ffff8880212af000 orig refcnt 1 [ 497.826468][ T5606] conn ffff8880212af000 len 18 flags 0x2 [ 497.826485][ T5606] len 14, cid 0x0005 [ 497.826503][ T5606] code 0x14 len 10 id 0x01 [ 497.826518][ T5606] Bluetooth: Wrong link type (-71) [ 497.826529][ T5606] conn ffff8880212af000, code 0x01, ident 0x01, len 2 [ 497.826575][ T5606] code 0x01 [ 497.826587][ T5606] hci5 chan ffff888054658300 flags 0x0000 [ 497.826603][ T5606] hci5 nonfrag skb ffff888034fdf780 len 14 [ 497.826620][ T5606] hci5: chan ffff888054658300 queued 1 [ 497.826668][ T5606] kcov: kcov_move_area: ffffc90020f33000 1048576 <= ffffc9001e72a000 12648 [ 497.826710][ T5606] hci5 acl 4 sco 0 le 0 iso 0 [ 497.826726][ T5606] hci5: type 0 [ 497.826737][ T5606] hci5: type 2 [ 497.826748][ T5606] hci5 [ 497.826756][ T5606] hci5 [ 497.826764][ T5606] hci5 [ 497.826773][ T5606] hci5 [ 497.826781][ T5606] hci5 [ 497.826790][ T5606] hci5 [ 497.826800][ T5606] chan ffff888054658300 quote 4 [ 497.826813][ T5606] chan ffff888054658300 skb ffff888034fdf780 len 14 priority 7 [ 497.826831][ T5606] hci5 type 2 len 14 [ 497.826847][ T5606] hci5: type 0 [ 497.826858][ T5606] hci5: type 2 [ 497.826867][ T5606] hci5 [ 497.826876][ T5606] hci5 [ 497.830098][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 71 [ 497.830127][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 497.830141][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 497.830169][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 45 [ 497.882706][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 497.882727][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 497.882825][ T32] ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: batadv_mcast_mla_update+0x88a/0x3200 [ 497.882972][ T32] #3: ffff8880b843bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 497.883148][ T32] locks held by kworker/u8:10/1274: 3, last CPU#1: [ 497.883193][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 497.883964][ T32] #1: ffffc90005b57d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 497.884142][ T32] #2: ffff888022aae258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 497.884388][ T32] locks held by kworker/0:1H/2095: 6, last CPU#0: [ 497.884427][ T32] #0: ffff88801c05ad40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 497.884580][ T32] #1: ffffc90006d47d08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 497.884755][ T32] #2: ffff888033323750 (&substream->lock){....}-{3:3}, at: snd_rawmidi_transmit+0x28/0x130 [ 497.884927][ T32] #3: ffff88802745d070 (&runtime->sleep#2){....}-{3:3}, at: __wake_up+0x1c/0x60 [ 497.885128][ T32] #4: ffff888034ff5598 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xbd/0x1c90 [ 497.885315][ T32] #5: ffff8880b843bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 497.885653][ T32] locks held by getty/5362: 2, on CPU#0: [ 497.885683][ T32] #0: ffff88803732e0a0 [ 497.933428][ C0] nf_nat: Already setup manip DST for ct ffff888021b17500 (status bits 0x188) [ 497.933483][ C0] nf_nat: Already setup manip SRC for ct ffff888021b17500 (status bits 0x188) [ 497.933623][ C0] nf_nat: Already setup manip DST for ct ffff888021b17500 (status bits 0x188) [ 497.950517][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 81 [ 497.990139][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 497.990160][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 497.990191][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 45 [ 498.015553][ C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 498.036562][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.036586][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.037037][T13237] kcov: kcov_start: t = ffff88807c16cb00, size = 524288, area = ffffc90010503000 [ 498.039517][ T32] (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 498.039598][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 498.039854][ T32] locks held by kworker/u8:38/6435: 3, last CPU#1: [ 498.039894][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 498.040104][ T32] #1: ffffc9000ea2fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 498.040320][ T32] #2: ffff88802e1f0258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 498.040477][ T32] locks held by kworker/u8:44/6441: 2, last CPU#1: [ 498.040501][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 498.040660][ T32] #1: ffffc9000ea9fd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 498.040843][ T32] locks held by syz.0.1811/11167: 3, on CPU#0: [ 498.040882][ T32] #0: ffff8880264120f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 498.041066][ T32] #1: ffff88807fefe460 (sb_writers#21){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 498.041341][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 498.041501][ T32] locks held by syz.0.1811/11168: 2, on CPU#1: [ 498.041540][ T32] #0: ffffffff90d84208 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.041717][ T32] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c1/0x820 [ 498.041870][ T32] locks held by syz.1.2343/13136: 1, last CPU#1: [ 498.041895][ T32] #0: ffffffff8edec5a0 [ 498.082211][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 102 [ 498.082246][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.082262][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.126130][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 67 [ 498.126173][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.126187][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.165668][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 71 [ 498.165702][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.165713][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.165732][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 33 [ 498.198824][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.198846][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.198867][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 33 [ 498.198887][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.198900][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.202462][ T32] (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x2c/0x5f0 [ 498.202607][ T32] locks held by syz.2.2362/13197: 3, last CPU#1: [ 498.202646][ T32] #0: ffff88807ee1c460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 498.202825][ T32] #1: ffff888021350340 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x151/0xad0 [ 498.202938][ T32] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 498.203130][ T32] locks held by syz.3.2366/13211: 2, last CPU#1: [ 498.203170][ T32] #0: ffff888029deb440 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6f0 [ 498.203507][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 498.203695][ T32] locks held by syz.4.2369/13221: 1, on CPU#1: [ 498.203741][ T32] #0: ffff888029def180 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 498.203976][ T32] locks held by syz.4.2369/13222: 1, last CPU#1: [ 498.203992][ T32] #0: ffff888029def180 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x229/0x3a0 [ 498.204171][ T32] locks held by syz.2.2370/13229: 2, last CPU#1: [ 498.204217][ T32] #0: ffff888013298f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 498.204397][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 498.204577][ T32] locks held by syz.1.2373/13231: 2, last CPU#0: [ 498.204618][ T32] #0: ffff88807d9720a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __do_sys_io_uring_enter+0xa7e/0x1b10 [ 498.204810][ T32] #1: ffffffff8effd758 (remove_cache_srcu [ 498.230236][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 57 [ 498.230269][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.230282][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.230299][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 33 [ 498.230319][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.230333][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.271818][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 69 [ 498.271854][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.271868][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.323862][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 94 [ 498.323897][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.323911][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.354090][ T32] ){.+.+}-{0:0}, at: unwind_next_frame+0xbd/0x2090 [ 498.354190][ T32] [ 498.354225][ T32] ============================================= [ 498.354225][ T32] [ 498.354306][ T32] NMI backtrace for cpu 1 [ 498.354323][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 498.354350][ T32] Tainted: [L]=SOFTLOCKUP [ 498.354357][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 498.354370][ T32] Call Trace: [ 498.354379][ T32] [ 498.354388][ T32] dump_stack_lvl+0x100/0x190 [ 498.354419][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 498.354448][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.354472][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 498.354504][ T32] sys_info+0x141/0x190 [ 498.354529][ T32] watchdog+0xcb1/0x1030 [ 498.354560][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 498.354591][ T32] ? __pfx_watchdog+0x10/0x10 [ 498.354616][ T32] ? __kthread_parkme+0x18f/0x230 [ 498.354644][ T32] ? kthread+0x13a/0x450 [ 498.354669][ T32] ? __pfx_watchdog+0x10/0x10 [ 498.354691][ T32] kthread+0x373/0x450 [ 498.354717][ T32] ? __pfx_kthread+0x10/0x10 [ 498.354746][ T32] ret_from_fork+0x730/0xd60 [ 498.354771][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 498.354795][ T32] ? __switch_to+0x800/0x10f0 [ 498.354822][ T32] ? __pfx_kthread+0x10/0x10 [ 498.354851][ T32] ret_from_fork_asm+0x1a/0x30 [ 498.354887][ T32] [ 498.354896][ T32] Sending NMI from CPU 1 to CPUs 0: [ 498.354924][ C0] NMI backtrace for cpu 0 [ 498.354938][ C0] CPU: 0 UID: 0 PID: 2095 Comm: kworker/0:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 498.354962][ C0] Tainted: [L]=SOFTLOCKUP [ 498.354968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 498.354984][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 498.355010][ C0] RIP: 0010:do_raw_spin_unlock+0xb8/0x1e0 [ 498.355034][ C0] Code: fc ff df 4c 8d 63 10 4c 89 e2 48 c1 ea 03 80 3c 02 00 0f 85 2b 01 00 00 65 48 8b 05 1a 4d a5 12 48 39 43 10 0f 85 a8 00 00 00 <48> b8 00 00 00 00 00 fc ff df 48 8d 6b 08 48 89 ea 48 c1 ea 03 0f [ 498.355049][ C0] RSP: 0018:ffffc90006d47900 EFLAGS: 00000046 [ 498.355063][ C0] RAX: ffff88802ca14b00 RBX: ffff888034ff5580 RCX: ffffffff81e7d2a3 [ 498.355076][ C0] RDX: 1ffff110069feab2 RSI: 0000000000000004 RDI: ffff888034ff5580 [ 498.355088][ C0] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed10069feab0 [ 498.355099][ C0] R10: ffff888034ff5583 R11: 0000000000000000 R12: ffff888034ff5590 [ 498.355110][ C0] R13: ffff8880b843cde0 R14: ffff888034ff5580 R15: ffff888034ff4b00 [ 498.355122][ C0] FS: 0000000000000000(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 498.355138][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.355149][ C0] CR2: 0000200000009000 CR3: 000000007bad6000 CR4: 00000000003526f0 [ 498.355161][ C0] Call Trace: [ 498.355166][ C0] [ 498.355173][ C0] _raw_spin_unlock_irqrestore+0x22/0x80 [ 498.355200][ C0] try_to_wake_up+0xd8d/0x1c90 [ 498.355221][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 498.355245][ C0] ? do_raw_spin_lock+0x128/0x260 [ 498.355270][ C0] __wake_up_common+0x135/0x1f0 [ 498.355290][ C0] __wake_up+0x31/0x60 [ 498.355307][ C0] __snd_rawmidi_transmit_ack+0x225/0x380 [ 498.355335][ C0] snd_rawmidi_transmit+0xdf/0x130 [ 498.355353][ C0] snd_vmidi_output_work+0x111/0x390 [ 498.355377][ C0] ? process_one_work+0xa2c/0x1b10 [ 498.355402][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 498.355430][ C0] ? process_one_work+0x906/0x1b10 [ 498.355454][ C0] ? process_one_work+0x906/0x1b10 [ 498.355480][ C0] process_one_work+0xac7/0x1b10 [ 498.355510][ C0] ? __pfx_process_one_work+0x10/0x10 [ 498.355536][ C0] ? lock_acquire+0x1d1/0x380 [ 498.355558][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 498.355583][ C0] worker_thread+0x5ef/0xe50 [ 498.355603][ C0] ? __pfx_worker_thread+0x10/0x10 [ 498.355628][ C0] ? kthread+0x13a/0x450 [ 498.355649][ C0] ? __pfx_worker_thread+0x10/0x10 [ 498.355672][ C0] kthread+0x373/0x450 [ 498.355695][ C0] ? __pfx_kthread+0x10/0x10 [ 498.355718][ C0] ret_from_fork+0x730/0xd60 [ 498.355738][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 498.355757][ C0] ? __switch_to+0x800/0x10f0 [ 498.355779][ C0] ? __pfx_kthread+0x10/0x10 [ 498.355802][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.355826][ C0] [ 498.363555][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 69 [ 498.363599][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.363613][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.410653][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 71 [ 498.410703][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.410717][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.461936][T13232] kcov: kcov_move_area: ffffc90018921000 1048576 <= ffffc9001b927000 69 [ 498.461973][T13232] kcov: kcov_remote_start: handle = 2, context: task [ 498.461989][T13232] kcov: kcov_start: t = ffff88807c7e4b00, size = 1048576, area = ffffc9001b927000 [ 498.496912][ C1] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 11) [ 498.504667][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 501.057027][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 501.067679][ T32] Tainted: [L]=SOFTLOCKUP [ 501.071977][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 501.082006][ T32] Call Trace: [ 501.085268][ T32] [ 501.088178][ T32] dump_stack_lvl+0x100/0x190 [ 501.092840][ T32] vpanic+0x553/0x970 [ 501.096805][ T32] ? __pfx_vpanic+0x10/0x10 [ 501.101299][ T32] ? irqentry_exit+0x24d/0xa10 [ 501.106046][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 501.111225][ T32] panic+0xd1/0xe0 [ 501.114925][ T32] ? __pfx_panic+0x10/0x10 [ 501.119318][ T32] ? watchdog.cold+0x1ec/0x234 [ 501.124078][ T32] watchdog.cold+0x1fd/0x234 [ 501.128647][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 501.134434][ T32] ? __pfx_watchdog+0x10/0x10 [ 501.139091][ T32] ? __kthread_parkme+0x18f/0x230 [ 501.144093][ T32] ? kthread+0x13a/0x450 [ 501.148312][ T32] ? __pfx_watchdog+0x10/0x10 [ 501.152962][ T32] kthread+0x373/0x450 [ 501.157007][ T32] ? __pfx_kthread+0x10/0x10 [ 501.161591][ T32] ret_from_fork+0x730/0xd60 [ 501.166169][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 501.171257][ T32] ? __switch_to+0x800/0x10f0 [ 501.175916][ T32] ? __pfx_kthread+0x10/0x10 [ 501.180485][ T32] ret_from_fork_asm+0x1a/0x30 [ 501.185239][ T32] [ 501.188468][ T32] Kernel Offset: disabled [ 501.192768][ T32] Rebooting in 86400 seconds..