last executing test programs: 11.654863684s ago: executing program 0 (id=441): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x10, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffff8, 0x4, 0x400, 0xfffffffe}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettaction={0x20, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x7}, [@generic="7eb06f633aa685a2f0"]}, 0x20}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a9"], 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x63a42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902930003010000000904000000010100000a2401ff0300020102132406040006020000000000000001000000000924030000010000000924050100f8431cfd0924030002030604c006240504000009040100000101", @ANYRESHEX=r8], 0x0) 9.359088684s ago: executing program 2 (id=452): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x1009}}) io_uring_enter(r3, 0x29ed, 0x8a24, 0x4, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 8.405491935s ago: executing program 2 (id=456): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x800, 0x0, 0x32, 0x1, 0x18, 0x0, {0x0, 0x2000000}, {}, {}, {}, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 8.395646119s ago: executing program 0 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.282625861s ago: executing program 0 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000dc0)=@newtaction={0x280, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x26c, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x10000000, 0x200000, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x1, 0xa, 0x1}]}, {0x4}, {0xc, 0x7, {0x5000000}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x94, 0xc, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xe4e, 0x3, 0x4, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}]}, {0xf, 0x6, "1abf842170b99b2d385cd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x168, 0x2, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7b84, 0xffffffffffffffff, 0x0, 0x4000}, 0x1}}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x696}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xc9}, @TCA_IFE_DMAC={0xa, 0x3, @random="8e626b6bfbf7"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0x100000, 0x4, 0x6, 0x3}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x2, 0x1, 0x4}, 0x1}}]}, {0x92, 0x6, "0745eda98a44af97ae46a19127d038c5123f3cb17331ff9148552ed3e66c1ec3da02b7f8bf5c416577450e40e13f05636db4c6ad1b3b41745844ead184f6931b6094c2079d7cfc0e3261b4596fbfbc0d19da37719c7dae4fc8e453fa633c7fd941086e3a72eaace8b91ccace63675f74944e81a9c807e2e4fbfbfd06a5fa8083ba3da79908908e58145dc1ca9b47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x20048840}, 0x1004) 8.225501892s ago: executing program 2 (id=460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x1009}}) io_uring_enter(r5, 0x29ed, 0x8a24, 0x4, 0x0, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.602578241s ago: executing program 2 (id=469): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x772bc000) sched_setscheduler(0x0, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/bnep\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=""/172, 0xac}, 0x80000000}], 0x1, 0x836b, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x1}, 0xe) close(r0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="200900000000c282fea773f9f59e89c80120539ba81bc537ea9917dff5167ccb500af527e3fc0098cf663c3e92e93656436c8d129a3a80f2d64604e828872a8d1c0de02d4c30f69bb5b806a572a7e6cf9cad24a19ede05873ce1b289272790cd548594ed31a69f421942622fc705d883f58750ef65105ed31e1b9752aa199598f7cab94f8dbf2ac718561be2395472d77cfed5c0eb5cd94a0b35374ef8fe74ed63aa096480fbae966fc0fb490e3431eca3005a1cc8b94b88036ba73c4da29a82a93af732ece03fed22b1457dea1bf219865a7ab35aa74e11"], 0x0}) (rerun: 32) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010c"], 0x0}) (async) r5 = syz_io_uring_setup(0x1cbc, &(0x7f0000000200)={0x0, 0x8d4a, 0x0, 0x2, 0x2f4}, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000300)="81", 0x0) (async, rerun: 64) syz_usb_control_io(r4, 0x0, 0x0) (rerun: 64) syz_usb_control_io(r4, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x20, 0x5, 0x3, "d34e8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$radio(0x0, 0x3, 0x2) (async) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000000c0)={0x6, @sdr={0x4f565559, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x437}, 0x20}}, 0x0) (async, rerun: 32) r6 = syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x220000) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) prlimit64(r7, 0x7, &(0x7f0000000580)={0x1, 0x5b}, &(0x7f0000000340)) (async) syz_open_dev$swradio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) getpgid(0xffffffffffffffff) 5.529084587s ago: executing program 0 (id=473): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(0x0, 0x7e, 0x8a) fcntl$setstatus(r0, 0x4, 0x42400) openat(r0, &(0x7f0000000040)='./file0\x00', 0x101000, 0x120) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.003313711s ago: executing program 3 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0xffa7) 4.969227947s ago: executing program 4 (id=476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000002000150000000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 4.888823259s ago: executing program 3 (id=477): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c250000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1068000000000000) 4.770089864s ago: executing program 1 (id=478): setresgid(0xee00, 0xee01, 0x0) r0 = getpgid(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000000)=0x4, 0x0, 0x4) prlimit64(r0, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.746094414s ago: executing program 4 (id=479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x1009}}) io_uring_enter(r5, 0x29ed, 0x8a24, 0x4, 0x0, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4.702838374s ago: executing program 2 (id=480): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0xc7, 0x52, 0x20, 0x10cf, 0x8063, 0xd1d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x88, 0x0, 0x2, 0x3e, 0x3f, 0x5c, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0x4e22, @private=0xa010102}}}, &(0x7f0000000040)=0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r7 = openat$null(0xffffff9c, &(0x7f0000000840), 0x42f583cda19f95d7, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000002080)={{r5}, r8, 0xe, @inherit={0x90, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000001000000090000000000000004000800a884e13db93c0d4dcbcdbb260f41dc620000000009000000000000001c00000000000000400000000000000003000000000000000700000000000000d100000000000000040000000000000000000000000000002d00000000000000000000000000000084050e000000000008000000000000000000000000000000b4dff82800f24506000000bfa26ddc69f0626b2a8aac14dcb96acdd1c4ddd1255ccc41a8"]}, @name="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"}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000002040)={r7, 0x2a22, 0x1}) ptrace$peek(0x1, r2, &(0x7f00000000c0)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000240)="7c773d39aeef000000006dcffe32d6e49f") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000080)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x204c090) 4.638898676s ago: executing program 1 (id=481): r0 = gettid() r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) tkill(r0, 0xb) close(0xffffffffffffffff) 4.490973766s ago: executing program 0 (id=482): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500016800000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.395087606s ago: executing program 3 (id=483): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x6f, 0x2b, 0x1, 0x8, 0x1}, 0x0, 0x0, 0x2, [{0x49, &(0x7f0000000240)=@string={0x49, 0x3, "24a6f83abab2f641d0d11b32a757dd5cc75ee9cf4f45e08fba6f577d7304ae57cec1ffdfae0eb7902b1e3c12e3285402955f3c1db180568d705b552d907f74e44b7fc634a6f95a"}}, {0x19, &(0x7f00000002c0)=@string={0x19, 0x3, "06b58596d4291d7b6f0fdbf3f8962ae182a6844c5085fa"}}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000071c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00140b000000a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r6, 0x3}}, 0x18) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r7, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x7041, 0x0) 3.48938477s ago: executing program 1 (id=484): syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='ocfs2\x00', 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000000180)=ANY=[], 0x79) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRES16=r4, @ANYRESDEC=r1], 0x3c}}, 0x20004040) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x40) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x424203, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000370000082cbd7000fd00008a6261490d3caab263c2a077229c2673914aba64395dfa4b32ef54df581139d3bb99ebf5e4e3c4a2d46ded642f998c37f723298118ab5a47b021c8ca671f98cbd9fe40a53348ba68d9f45f9a682042b3e2686efaaafd1d8dd901d594b14d949ec3528de04925197ea20000001d4535a8f00b54dc9434f9dabc10b0b14a321b1151a1f8478157cc6b6ffb2097bc4dfb9eb85380cb7c5e9a61f3241e11c61dc498565c17d70968ca67b6e38e17464963e5679b"], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r10 = accept$alg(r9, 0x0, 0x0) write$binfmt_script(r10, &(0x7f0000000580)={'#! ', '', [{0x20, 'md5-generic\x00'}]}, 0x11) 2.934370283s ago: executing program 4 (id=485): socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) fcntl$setstatus(r1, 0x4, 0x40800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r4}, &(0x7f00000001c0), &(0x7f0000001380)=r3}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20082, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000) socket$kcm(0x10, 0x2, 0x10) 2.699407207s ago: executing program 1 (id=486): socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) fcntl$setstatus(r1, 0x4, 0x40800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r5}, &(0x7f00000001c0), &(0x7f0000001380)=r4}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x20082, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000) socket$kcm(0x10, 0x2, 0x10) 2.090875633s ago: executing program 0 (id=487): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00002f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="20062300000034247a3b20c375"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x84, 0x1, '4'}, &(0x7f0000000880)={0x20, 0x85, 0x3, "69baf3"}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x3}, 0x8) listen(r4, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x5, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}, @union={0x9, 0x7, 0x0, 0x5, 0x1, 0x3, [{0xb, 0x2, 0x9}, {0x5, 0x3, 0x3}, {0x6, 0x2, 0x7}, {0x2, 0x2, 0x7}, {0xd, 0x3, 0x6}, {0x5, 0x1, 0x4}, {0xf, 0x3, 0xffffffff}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x53, 0x0, 0x28, 0x7}]}, {0x0, [0x0, 0x2e, 0x0]}}, &(0x7f00000002c0)=""/76, 0xa9, 0x4c, 0xfffffffb, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f00000003c0)=""/232, 0xe8, 0x0, &(0x7f00000004c0)=""/179, 0xb3}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x33) splice(r10, 0x0, r11, 0x0, 0xbfd1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x18, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r6}, @ldst={0x2, 0x0, 0x4, 0xa, 0x9, 0x20, 0x8}, @call={0x85, 0x0, 0x0, 0x31}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x379f75ac, 0x80, &(0x7f0000000140)=""/128, 0x41100, 0x55, '\x00', r7, @fallback=0x36, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x8, &(0x7f0000000600)=[r6, r6, r6, r10, r6, r6, r6, r6, r10, r6], &(0x7f0000000640)=[{0x3, 0x1, 0x0, 0x3}, {0x3, 0x1, 0x2, 0x3}, {0x5, 0x2, 0x6, 0xb}, {0x1, 0x1, 0x6, 0x6}, {0x3, 0x5, 0x6, 0x4}, {0x3, 0x4, 0x10, 0xb}, {0x1, 0x2, 0x9, 0xc}, {0x2, 0x1, 0x5, 0xa}], 0x10, 0x4}, 0x94) 1.491495844s ago: executing program 4 (id=488): openat2$dir(0xffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={0x80100, 0x101, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x42000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000740)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000780)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000840)={0x8, r5}) tkill(r0, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) writev(0xffffffffffffffff, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.326644588s ago: executing program 2 (id=489): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchownat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (fail_nth: 9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 1.254425362s ago: executing program 3 (id=490): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x14}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1, 0x0, 0x4800}, 0x41) 1.055136583s ago: executing program 3 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x14, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.054537986s ago: executing program 4 (id=492): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (rerun: 32) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) (async) dup3(r4, r3, 0x0) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x9, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x1, 0x7, 0x8, 0x0, 0x8, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x5, 0x0, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000140)='GPL\x00', 0x10, 0x4b, &(0x7f0000000180)=""/75, 0x41000, 0x1, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x8, 0x44}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x4, 0xd, 0x4}, {0x3, 0x3, 0x7, 0x4}, {0x2, 0x1, 0x5, 0x1}], 0x10, 0xff}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r4, r5, 0x4}, 0x10) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/uevent_helper', 0x242, 0x2b0) listen(r6, 0xdffffffd) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}}, 0x4000010) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 532.966715ms ago: executing program 1 (id=493): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x34, &(0x7f0000000240)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0d", 0xe) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x60201, 0x0) r3 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x88d4) sysfs$2(0x2, 0x2000419, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x128841, 0x0) close(0xffffffffffffffff) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000001c0)=0x30) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) 507.566907ms ago: executing program 3 (id=494): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r2, &(0x7f0000000000)=""/181, 0xb5) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x100000003, 0x515980) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b1b, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) 463.151699ms ago: executing program 4 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x1009}}) io_uring_enter(r5, 0x29ed, 0x8a24, 0x4, 0x0, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=496): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.299019][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.306825][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.314931][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.322757][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.350403][ T30] audit: type=1400 audit(1757185095.548:81): avc: denied { ioctl } for pid=5843 comm="syz-executor" path="socket:[3908]" dev="sockfs" ino=3908 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.404834][ T30] audit: type=1400 audit(1757185095.758:82): avc: denied { read } for pid=5847 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.429216][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.438853][ T30] audit: type=1400 audit(1757185095.758:83): avc: denied { open } for pid=5847 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.441295][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.469653][ T5171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.477773][ T5171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.480493][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.492927][ T5171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.500676][ T5171] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.508215][ T5171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.515480][ T5171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.523341][ T5171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.529829][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.544378][ T5171] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.553309][ T5171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.563892][ T30] audit: type=1400 audit(1757185095.768:84): avc: denied { mounton } for pid=5847 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.590288][ T5171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.602025][ T5171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.747115][ T30] audit: type=1400 audit(1757185096.168:85): avc: denied { module_request } for pid=5847 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.808041][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 65.945272][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 66.008470][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 66.077070][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.084810][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.092415][ T5847] bridge_slave_0: entered allmulticast mode [ 66.099088][ T5847] bridge_slave_0: entered promiscuous mode [ 66.133452][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.140837][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.147940][ T5847] bridge_slave_1: entered allmulticast mode [ 66.155325][ T5847] bridge_slave_1: entered promiscuous mode [ 66.184698][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.193494][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.200742][ T5843] bridge_slave_0: entered allmulticast mode [ 66.207677][ T5843] bridge_slave_0: entered promiscuous mode [ 66.253157][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.260278][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.267771][ T5843] bridge_slave_1: entered allmulticast mode [ 66.275192][ T5843] bridge_slave_1: entered promiscuous mode [ 66.296566][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.303697][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.310947][ T5852] bridge_slave_0: entered allmulticast mode [ 66.317558][ T5852] bridge_slave_0: entered promiscuous mode [ 66.325335][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.332512][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.339652][ T5852] bridge_slave_1: entered allmulticast mode [ 66.347259][ T5852] bridge_slave_1: entered promiscuous mode [ 66.355929][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 66.398499][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.448188][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.459662][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.471566][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.494753][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.505448][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.546205][ T5847] team0: Port device team_slave_0 added [ 66.567196][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 66.578175][ T5852] team0: Port device team_slave_0 added [ 66.589514][ T5847] team0: Port device team_slave_1 added [ 66.608357][ T5852] team0: Port device team_slave_1 added [ 66.636844][ T5843] team0: Port device team_slave_0 added [ 66.648787][ T5843] team0: Port device team_slave_1 added [ 66.698935][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.706114][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.732711][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.745627][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.752638][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.778712][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.789992][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.797249][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.804393][ T5857] bridge_slave_0: entered allmulticast mode [ 66.811158][ T5857] bridge_slave_0: entered promiscuous mode [ 66.818277][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.825408][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.851338][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.863419][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.870390][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.896270][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.915271][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.922276][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.948303][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.967543][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.975014][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.984756][ T5857] bridge_slave_1: entered allmulticast mode [ 66.991614][ T5857] bridge_slave_1: entered promiscuous mode [ 67.016660][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.023816][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.049754][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.121455][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.131037][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.138558][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.146236][ T5853] bridge_slave_0: entered allmulticast mode [ 67.153702][ T5853] bridge_slave_0: entered promiscuous mode [ 67.187861][ T5847] hsr_slave_0: entered promiscuous mode [ 67.194053][ T5847] hsr_slave_1: entered promiscuous mode [ 67.202185][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.218751][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.226081][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.233267][ T5853] bridge_slave_1: entered allmulticast mode [ 67.239849][ T5853] bridge_slave_1: entered promiscuous mode [ 67.258536][ T5843] hsr_slave_0: entered promiscuous mode [ 67.264862][ T5843] hsr_slave_1: entered promiscuous mode [ 67.270977][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 67.276725][ T5843] Cannot create hsr debugfs directory [ 67.312816][ T5852] hsr_slave_0: entered promiscuous mode [ 67.318800][ T5852] hsr_slave_1: entered promiscuous mode [ 67.325242][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 67.331009][ T5852] Cannot create hsr debugfs directory [ 67.349723][ T5857] team0: Port device team_slave_0 added [ 67.357674][ T5857] team0: Port device team_slave_1 added [ 67.373355][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.383020][ T51] Bluetooth: hci1: command tx timeout [ 67.390622][ T51] Bluetooth: hci0: command tx timeout [ 67.426471][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.453611][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.460847][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.486983][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.499599][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.507052][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.532966][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.605137][ T5853] team0: Port device team_slave_0 added [ 67.616826][ T5853] team0: Port device team_slave_1 added [ 67.620672][ T51] Bluetooth: hci2: command tx timeout [ 67.628181][ T5171] Bluetooth: hci3: command tx timeout [ 67.684339][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.691711][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.717631][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.722895][ T51] Bluetooth: hci4: command tx timeout [ 67.729526][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.740831][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.766894][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.846713][ T5857] hsr_slave_0: entered promiscuous mode [ 67.853154][ T5857] hsr_slave_1: entered promiscuous mode [ 67.858988][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 67.864769][ T5857] Cannot create hsr debugfs directory [ 67.954653][ T5853] hsr_slave_0: entered promiscuous mode [ 67.961428][ T5853] hsr_slave_1: entered promiscuous mode [ 67.967321][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 67.973819][ T5853] Cannot create hsr debugfs directory [ 68.053290][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.064822][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.078645][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.105174][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.202649][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.219352][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.230811][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.240013][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.315542][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.327871][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.338757][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.348920][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.429953][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.437321][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.463008][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.474026][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.509824][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.526373][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.568388][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.586958][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.594108][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.605890][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.615153][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.638324][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.649976][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.657053][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.669298][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.697015][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.712401][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.719498][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.728148][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.735213][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.796072][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.846679][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.863688][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.870811][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.899141][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.917917][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.925055][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.949000][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.949364][ T30] audit: type=1400 audit(1757185099.368:86): avc: denied { sys_module } for pid=5847 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.995669][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.003032][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.027482][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.034645][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.194497][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.274390][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.287019][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.314744][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.354329][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.361464][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.388916][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.396057][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.461915][ T51] Bluetooth: hci0: command tx timeout [ 69.463053][ T5171] Bluetooth: hci1: command tx timeout [ 69.481299][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.497282][ T5852] veth0_vlan: entered promiscuous mode [ 69.567287][ T5852] veth1_vlan: entered promiscuous mode [ 69.579918][ T5843] veth0_vlan: entered promiscuous mode [ 69.617602][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.649677][ T5843] veth1_vlan: entered promiscuous mode [ 69.689521][ T5852] veth0_macvtap: entered promiscuous mode [ 69.703014][ T5171] Bluetooth: hci2: command tx timeout [ 69.703319][ T51] Bluetooth: hci3: command tx timeout [ 69.741583][ T5852] veth1_macvtap: entered promiscuous mode [ 69.780757][ T51] Bluetooth: hci4: command tx timeout [ 69.786796][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.816631][ T5843] veth0_macvtap: entered promiscuous mode [ 69.829223][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.859364][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.869674][ T3542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.888661][ T3542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.897507][ T3542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.913749][ T5847] veth0_vlan: entered promiscuous mode [ 69.919725][ T5843] veth1_macvtap: entered promiscuous mode [ 69.940116][ T5857] veth0_vlan: entered promiscuous mode [ 69.957218][ T5847] veth1_vlan: entered promiscuous mode [ 69.975133][ T5857] veth1_vlan: entered promiscuous mode [ 69.982827][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.999205][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.017859][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.056576][ T3542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.065944][ T3542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.091310][ T3542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.113941][ T3542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.125648][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.136762][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.154328][ T5847] veth0_macvtap: entered promiscuous mode [ 70.184131][ T5847] veth1_macvtap: entered promiscuous mode [ 70.195320][ T5857] veth0_macvtap: entered promiscuous mode [ 70.207940][ T5857] veth1_macvtap: entered promiscuous mode [ 70.219478][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.227207][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.234661][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.256967][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.266493][ T30] audit: type=1400 audit(1757185100.678:87): avc: denied { mounton } for pid=5852 comm="syz-executor" path="/root/syzkaller.8i0ERI/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.291769][ T30] audit: type=1400 audit(1757185100.678:88): avc: denied { mount } for pid=5852 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.314679][ T30] audit: type=1400 audit(1757185100.698:89): avc: denied { mounton } for pid=5852 comm="syz-executor" path="/root/syzkaller.8i0ERI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.331047][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.341415][ T30] audit: type=1400 audit(1757185100.698:90): avc: denied { mount } for pid=5852 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.364478][ T5853] veth0_vlan: entered promiscuous mode [ 70.374853][ T30] audit: type=1400 audit(1757185100.698:91): avc: denied { mounton } for pid=5852 comm="syz-executor" path="/root/syzkaller.8i0ERI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.412630][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.428610][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.435267][ T30] audit: type=1400 audit(1757185100.698:92): avc: denied { mounton } for pid=5852 comm="syz-executor" path="/root/syzkaller.8i0ERI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.466228][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.477888][ T1137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.481463][ T30] audit: type=1400 audit(1757185100.698:93): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.496770][ T5853] veth1_vlan: entered promiscuous mode [ 70.507004][ T30] audit: type=1400 audit(1757185100.718:94): avc: denied { mounton } for pid=5852 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.540495][ T30] audit: type=1400 audit(1757185100.718:95): avc: denied { mount } for pid=5852 comm="syz-executor" name="/" dev="gadgetfs" ino=8243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.550236][ T5853] veth0_macvtap: entered promiscuous mode [ 70.565392][ T30] audit: type=1400 audit(1757185100.718:96): avc: denied { mount } for pid=5852 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.600697][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.610909][ T1137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.624613][ T1137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.634409][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.642927][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.655358][ T5853] veth1_macvtap: entered promiscuous mode [ 70.670546][ T1137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.720272][ T1137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.729566][ T1137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.778764][ T1137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.795354][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.818440][ T5961] netlink: 'syz.0.1': attribute type 13 has an invalid length. [ 70.889120][ T5968] Zero length message leads to an empty skb [ 70.902989][ T5961] gretap1: entered allmulticast mode [ 70.913394][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.919810][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.926530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.935152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.033787][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.051547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.165976][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.276068][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.318660][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.523302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.540507][ T51] Bluetooth: hci1: command tx timeout [ 71.550470][ T51] Bluetooth: hci0: command tx timeout [ 71.824475][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.836952][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.840653][ T51] Bluetooth: hci2: command tx timeout [ 71.850154][ T51] Bluetooth: hci3: command tx timeout [ 71.851955][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.863436][ T51] Bluetooth: hci4: command tx timeout [ 71.873726][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.892759][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.911855][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.968241][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.988959][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.004097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.021076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.058498][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.081980][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.097469][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.117867][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.456771][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.503546][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.990657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.130738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 73.211093][ T6002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 73.335426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.633710][ T5171] Bluetooth: hci1: command tx timeout [ 73.639113][ T51] Bluetooth: hci0: command tx timeout [ 73.864333][ T5171] Bluetooth: hci2: command tx timeout [ 73.869824][ T51] Bluetooth: hci3: command tx timeout [ 73.901473][ T5924] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.926469][ T6012] bond1: entered allmulticast mode [ 73.941607][ T51] Bluetooth: hci4: command tx timeout [ 73.978753][ T6012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.016000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.142844][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 74.280167][ T5924] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 74.463064][ T5924] usb 1-1: config 0 has no interface number 0 [ 74.713485][ T5924] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 74.746547][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.760617][ T5924] usb 1-1: Product: syz [ 74.764953][ T5924] usb 1-1: Manufacturer: syz [ 74.910506][ T5924] usb 1-1: SerialNumber: syz [ 74.924649][ T5924] usb 1-1: config 0 descriptor?? [ 75.142821][ T5924] redrat3 1-1:0.31: Couldn't find all endpoints [ 75.295637][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 75.295654][ T30] audit: type=1400 audit(1757185105.718:153): avc: denied { read write } for pid=6003 comm="syz.0.13" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.303732][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 75.424376][ T30] audit: type=1400 audit(1757185105.728:154): avc: denied { open } for pid=6003 comm="syz.0.13" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.448217][ T30] audit: type=1400 audit(1757185105.728:155): avc: denied { ioctl } for pid=6003 comm="syz.0.13" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.525113][ T6007] bond0: (slave bond_slave_1): Releasing backup interface [ 75.608694][ T30] audit: type=1400 audit(1757185106.028:156): avc: denied { create } for pid=6033 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.634059][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 75.669469][ T6034] vlan2: entered promiscuous mode [ 75.689697][ T6034] batadv0: entered promiscuous mode [ 75.696892][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23'. [ 75.766384][ T30] audit: type=1400 audit(1757185106.188:157): avc: denied { write } for pid=6036 comm="syz.3.22" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.034070][ T30] audit: type=1400 audit(1757185106.458:158): avc: denied { name_bind } for pid=6049 comm="syz.2.26" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 76.081782][ T978] cfg80211: failed to load regulatory.db [ 76.323623][ T6052] warning: `syz.4.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.341225][ T975] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.525013][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.612585][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.663926][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.762739][ T975] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 76.792985][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.837250][ T5924] usb 1-1: USB disconnect, device number 2 [ 76.911203][ T975] usb 3-1: config 0 descriptor?? [ 77.144980][ T30] audit: type=1400 audit(1757185107.568:159): avc: denied { create } for pid=6058 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.283850][ T30] audit: type=1400 audit(1757185107.688:160): avc: denied { create } for pid=6060 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.627957][ T975] usbhid 3-1:0.0: can't add hid device: -71 [ 77.808186][ T30] audit: type=1400 audit(1757185107.758:161): avc: denied { ioctl } for pid=6060 comm="syz.1.30" path="socket:[8921]" dev="sockfs" ino=8921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.822384][ T975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 77.834241][ T30] audit: type=1400 audit(1757185107.798:162): avc: denied { getopt } for pid=6060 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.911956][ T6070] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 77.927579][ T975] usb 3-1: USB disconnect, device number 2 [ 79.951007][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.959723][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.977412][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34'. [ 80.768996][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 80.769012][ T30] audit: type=1400 audit(1757185111.188:179): avc: denied { create } for pid=6100 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.801550][ T30] audit: type=1400 audit(1757185111.198:180): avc: denied { ioctl } for pid=6100 comm="syz.1.39" path="socket:[9013]" dev="sockfs" ino=9013 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.869478][ T30] audit: type=1400 audit(1757185111.288:181): avc: denied { setopt } for pid=6105 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.895806][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.917442][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.954578][ T30] audit: type=1400 audit(1757185111.328:182): avc: denied { sqpoll } for pid=6106 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.050403][ T6098] : entered promiscuous mode [ 81.120571][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.160452][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.169333][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.202395][ T30] audit: type=1400 audit(1757185111.618:183): avc: denied { write } for pid=6112 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.210413][ T5924] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.246571][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.390387][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 81.428406][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.482116][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.507628][ T5924] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 81.568469][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'. [ 81.587317][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 81.624448][ T30] audit: type=1400 audit(1757185111.948:184): avc: denied { ioctl } for pid=6121 comm="syz.0.47" path="/dev/vbi1" dev="devtmpfs" ino=953 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 81.661862][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.689180][ T5924] usb 4-1: config 0 descriptor?? [ 81.706254][ T30] audit: type=1400 audit(1757185111.968:185): avc: denied { create } for pid=6121 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.728513][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 81.756226][ T6131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 81.765326][ T30] audit: type=1400 audit(1757185111.968:186): avc: denied { ioctl } for pid=6121 comm="syz.0.47" path="socket:[9149]" dev="sockfs" ino=9149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.789599][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.858069][ T6132] netlink: 'syz.1.48': attribute type 1 has an invalid length. [ 81.889384][ T6132] netlink: 'syz.1.48': attribute type 3 has an invalid length. [ 81.952129][ T30] audit: type=1400 audit(1757185112.128:187): avc: denied { mount } for pid=6121 comm="syz.0.47" name="/" dev="ramfs" ino=8161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.985764][ T6132] netlink: 224 bytes leftover after parsing attributes in process `syz.1.48'. [ 82.048410][ T6132] NCSI netlink: No device for ifindex 246 [ 82.351850][ T5924] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 82.374372][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.421283][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.453054][ T30] audit: type=1400 audit(1757185112.868:188): avc: denied { write } for pid=6136 comm="syz.2.50" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.587921][ T6138] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.647598][ T6138] block device autoloading is deprecated and will be removed. [ 83.478844][ T6157] 9pnet_fd: Insufficient options for proto=fd [ 83.488436][ T6157] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 83.495045][ T6157] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 83.503105][ T6157] vhci_hcd vhci_hcd.0: Device attached [ 83.681737][ T5959] vhci_hcd: vhci_device speed not set [ 83.777314][ T48] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 83.976141][ T6165] mmap: syz.4.56 (6165) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.040857][ T5959] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 84.218619][ T9] usb 4-1: USB disconnect, device number 2 [ 84.221285][ T48] usb 2-1: device descriptor read/64, error -71 [ 84.904669][ T48] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 84.969622][ T6174] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 85.040396][ T48] usb 2-1: device descriptor read/64, error -71 [ 85.152665][ T48] usb usb2-port1: attempt power cycle [ 85.670521][ T48] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 85.740967][ T48] usb 2-1: device descriptor read/8, error -71 [ 85.957779][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 85.957792][ T30] audit: type=1400 audit(1757185116.378:206): avc: denied { read } for pid=6197 comm="syz.3.67" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.989047][ T6201] program syz.3.67 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.042328][ T6201] process 'syz.3.67' launched './file1' with NULL argv: empty string added [ 86.070657][ T48] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 86.220514][ T30] audit: type=1400 audit(1757185116.378:207): avc: denied { open } for pid=6197 comm="syz.3.67" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.244148][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.256141][ T48] usb 2-1: device descriptor read/8, error -71 [ 86.292394][ T6205] netlink: 148 bytes leftover after parsing attributes in process `syz.0.70'. [ 86.314704][ T6205] netlink: 56 bytes leftover after parsing attributes in process `syz.0.70'. [ 86.340564][ T6205] netlink: 'syz.0.70': attribute type 1 has an invalid length. [ 86.377013][ T30] audit: type=1400 audit(1757185116.468:208): avc: denied { execute } for pid=6197 comm="syz.3.67" name="file1" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.401775][ T30] audit: type=1400 audit(1757185116.478:209): avc: denied { write } for pid=6202 comm="syz.0.69" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.421424][ T48] usb usb2-port1: unable to enumerate USB device [ 86.429871][ T30] audit: type=1400 audit(1757185116.478:210): avc: denied { ioctl } for pid=6202 comm="syz.0.69" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.440406][ T5916] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.469842][ T30] audit: type=1400 audit(1757185116.508:211): avc: denied { execute_no_trans } for pid=6197 comm="syz.3.67" path="/12/file1" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.511476][ T6158] vhci_hcd: connection reset by peer [ 86.570662][ T3542] vhci_hcd: stop threads [ 86.580257][ T3542] vhci_hcd: release socket [ 86.600158][ T3542] vhci_hcd: disconnect device [ 87.210940][ T48] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.258153][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 87.285393][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.295058][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.304442][ T5916] usb 4-1: Product: syz [ 87.311413][ T5916] usb 4-1: Manufacturer: syz [ 87.316286][ T5916] usb 4-1: SerialNumber: syz [ 87.371073][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 87.381794][ T5916] usb 4-1: config 0 descriptor?? [ 87.491011][ T48] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 87.499736][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.598527][ T48] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 87.772350][ T48] usb 5-1: config 1 has no interface number 1 [ 88.361614][ T48] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 88.626766][ T48] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.735545][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.773896][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.813756][ T48] usb 5-1: Product: syz [ 88.836231][ T48] usb 5-1: Manufacturer: syz [ 88.854830][ T48] usb 5-1: SerialNumber: syz [ 88.997657][ T30] audit: type=1400 audit(1757185119.418:212): avc: denied { create } for pid=6232 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.046461][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 89.716207][ T6238] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 89.730408][ T30] audit: type=1400 audit(1757185120.138:213): avc: denied { setopt } for pid=6206 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.780379][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 89.840449][ T5959] vhci_hcd: vhci_device speed not set [ 90.137548][ T9] usb 4-1: USB disconnect, device number 3 [ 90.301098][ T5916] IPVS: starting estimator thread 0... [ 90.309551][ T6244] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 90.379062][ T48] usb 5-1: USB disconnect, device number 2 [ 90.411373][ T6245] IPVS: using max 41 ests per chain, 98400 per kthread [ 90.446516][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.500611][ T975] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 90.654025][ T975] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.665559][ T975] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 90.675138][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.719354][ T975] usb 2-1: config 0 descriptor?? [ 90.736097][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 90.872504][ T30] audit: type=1400 audit(1757185121.298:214): avc: denied { getopt } for pid=6249 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.925534][ T6255] 9pnet_fd: Insufficient options for proto=fd [ 90.937754][ T6255] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 90.944269][ T6255] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.953151][ T6255] vhci_hcd vhci_hcd.0: Device attached [ 91.146918][ T975] isku 0003:1E7D:3264.0002: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.1-1/input0 [ 91.177831][ T48] vhci_hcd: vhci_device speed not set [ 91.216605][ T6263] IPVS: sh: FWM 3 0x00000003 - no destination available [ 91.230594][ T5916] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 91.240959][ T48] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 91.353538][ T975] usb 2-1: USB disconnect, device number 6 [ 91.387008][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 91.399627][ T5916] usb 5-1: device descriptor read/64, error -71 [ 91.442433][ T6267] vlan2: entered promiscuous mode [ 91.447587][ T6267] batadv0: entered promiscuous mode [ 91.650401][ T5916] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 91.795221][ T5916] usb 5-1: device descriptor read/64, error -71 [ 91.858666][ T30] audit: type=1800 audit(1757185122.268:215): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.88" name="file1" dev="tmpfs" ino=115 res=0 errno=0 [ 91.970958][ T5916] usb usb5-port1: attempt power cycle [ 91.987001][ T30] audit: type=1400 audit(1757185122.378:216): avc: denied { mount } for pid=6272 comm="syz.2.89" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 92.040236][ T30] audit: type=1400 audit(1757185122.378:217): avc: denied { create } for pid=6272 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 92.095052][ T30] audit: type=1400 audit(1757185122.388:218): avc: denied { sys_admin } for pid=6272 comm="syz.2.89" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 92.194491][ T6271] pim6reg: entered allmulticast mode [ 92.360523][ T5916] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 92.409840][ T5916] usb 5-1: device descriptor read/8, error -71 [ 92.533690][ T30] audit: type=1400 audit(1757185122.448:219): avc: denied { map } for pid=6277 comm="syz.0.92" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.568264][ T30] audit: type=1400 audit(1757185122.498:220): avc: denied { append } for pid=6279 comm="syz.0.93" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.744683][ T30] audit: type=1400 audit(1757185122.498:221): avc: denied { setopt } for pid=6279 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.765624][ T30] audit: type=1400 audit(1757185122.628:222): avc: denied { create } for pid=6268 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.997175][ T5916] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 92.997183][ T30] audit: type=1400 audit(1757185122.638:223): avc: denied { ioctl } for pid=6268 comm="syz.3.88" path="socket:[9636]" dev="sockfs" ino=9636 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.997222][ T30] audit: type=1400 audit(1757185122.638:224): avc: denied { bind } for pid=6268 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.075426][ T6268] pim6reg: left allmulticast mode [ 93.233138][ T5916] usb 5-1: device descriptor read/8, error -71 [ 93.362706][ T5916] usb usb5-port1: unable to enumerate USB device [ 94.102633][ T6306] netlink: 'syz.0.99': attribute type 4 has an invalid length. [ 94.182820][ T6307] netlink: 'syz.0.99': attribute type 4 has an invalid length. [ 94.413860][ T6256] vhci_hcd: connection reset by peer [ 94.422770][ T78] vhci_hcd: stop threads [ 94.455275][ T78] vhci_hcd: release socket [ 94.470242][ T78] vhci_hcd: disconnect device [ 95.309498][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.317093][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.832870][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 96.069675][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.138224][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.489470][ T48] vhci_hcd: vhci_device speed not set [ 96.688916][ T6309] : entered promiscuous mode [ 96.697571][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.764679][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.900923][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.914341][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.210423][ T5916] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.468265][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 98.468277][ T30] audit: type=1400 audit(1757185384.889:235): avc: denied { ioctl } for pid=6349 comm="syz.3.111" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 98.500249][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.619255][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.300924][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 99.316265][ T9] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 99.369745][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.415118][ T9] usb 5-1: Product: syz [ 99.428182][ T9] usb 5-1: Manufacturer: syz [ 99.445980][ T9] usb 5-1: SerialNumber: syz [ 99.472769][ T9] usb 5-1: config 0 descriptor?? [ 99.483556][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 99.687031][ T30] audit: type=1400 audit(1757185386.109:236): avc: denied { bind } for pid=6343 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 99.771080][ T5854] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.427886][ T30] audit: type=1400 audit(1757185386.489:237): avc: denied { read write } for pid=6371 comm="syz.3.116" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 100.471665][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 100.577154][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.771597][ T9] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 100.782823][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.793292][ T30] audit: type=1400 audit(1757185386.489:238): avc: denied { open } for pid=6371 comm="syz.3.116" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 100.820091][ T5854] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 100.832867][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.842695][ T9] usb 5-1: USB disconnect, device number 7 [ 100.853150][ T5854] usb 1-1: config 0 descriptor?? [ 100.985642][ T10] kernel write not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 101.176821][ T30] audit: type=1400 audit(1757185387.599:239): avc: denied { mounton } for pid=6391 comm="syz.2.120" path="/proc/78/task" dev="proc" ino=10886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 101.383318][ T6392] FAULT_INJECTION: forcing a failure. [ 101.383318][ T6392] name failslab, interval 1, probability 0, space 0, times 1 [ 101.405547][ T5854] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 101.632555][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(full) [ 101.632582][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.632592][ T6392] Call Trace: [ 101.632598][ T6392] [ 101.632605][ T6392] dump_stack_lvl+0x16c/0x1f0 [ 101.632631][ T6392] should_fail_ex+0x512/0x640 [ 101.632652][ T6392] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 101.632674][ T6392] should_failslab+0xc2/0x120 [ 101.632693][ T6392] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 101.632711][ T6392] ? alloc_empty_file+0x55/0x1e0 [ 101.632738][ T6392] alloc_empty_file+0x55/0x1e0 [ 101.632761][ T6392] path_openat+0xda/0x2cb0 [ 101.632779][ T6392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.632805][ T6392] ? __pfx_path_openat+0x10/0x10 [ 101.632831][ T6392] do_filp_open+0x20b/0x470 [ 101.632850][ T6392] ? __pfx_do_filp_open+0x10/0x10 [ 101.632887][ T6392] ? alloc_fd+0x471/0x7d0 [ 101.632913][ T6392] do_sys_openat2+0x11b/0x1d0 [ 101.632936][ T6392] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.632961][ T6392] ? __fget_files+0x20e/0x3c0 [ 101.632984][ T6392] __x64_sys_openat+0x174/0x210 [ 101.633007][ T6392] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.633029][ T6392] ? ksys_write+0x1ac/0x250 [ 101.633054][ T6392] do_syscall_64+0xcd/0x4c0 [ 101.633079][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.633095][ T6392] RIP: 0033:0x7f654a58d550 [ 101.633109][ T6392] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 101.633124][ T6392] RSP: 002b:00007f654b460f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 101.633141][ T6392] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f654a58d550 [ 101.633152][ T6392] RDX: 0000000000000000 RSI: 00007f654b460fa0 RDI: 00000000ffffff9c [ 101.633162][ T6392] RBP: 00007f654b460fa0 R08: 0000000000000000 R09: 00007f654b460cd6 [ 101.633172][ T6392] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 101.633181][ T6392] R13: 00007f654a7c6038 R14: 00007f654a7c5fa0 R15: 00007ffe6e6baf58 [ 101.633204][ T6392] [ 101.854859][ T6397] netlink: 'syz.3.121': attribute type 4 has an invalid length. [ 101.906401][ T6397] netlink: 'syz.3.121': attribute type 4 has an invalid length. [ 102.094008][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.161376][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.425855][ T30] audit: type=1400 audit(1757185388.849:240): avc: denied { write } for pid=6409 comm="syz.4.124" name="hidraw0" dev="devtmpfs" ino=2835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.448897][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.511673][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'. [ 103.137878][ T30] audit: type=1400 audit(1757185389.259:241): avc: denied { write } for pid=6411 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.417615][ T30] audit: type=1400 audit(1757185389.759:242): avc: denied { sys_module } for pid=6411 comm="syz.3.125" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.738116][ T5916] usb 1-1: USB disconnect, device number 4 [ 103.934167][ T6435] netlink: 'syz.1.130': attribute type 4 has an invalid length. [ 104.229119][ T30] audit: type=1400 audit(1757185390.269:243): avc: denied { setopt } for pid=6427 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.350953][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 104.579059][ T30] audit: type=1400 audit(1757185390.999:244): avc: denied { bind } for pid=6437 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.698381][ T30] audit: type=1400 audit(1757185391.119:245): avc: denied { connect } for pid=6437 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.775690][ T30] audit: type=1400 audit(1757185391.169:246): avc: denied { write } for pid=6437 comm="syz.4.132" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.223835][ T30] audit: type=1400 audit(1757185391.169:247): avc: denied { open } for pid=6437 comm="syz.4.132" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.515642][ T30] audit: type=1400 audit(1757185391.169:248): avc: denied { ioctl } for pid=6437 comm="syz.4.132" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.697103][ T6452] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 105.764012][ T6454] netlink: 'syz.2.136': attribute type 3 has an invalid length. [ 105.791874][ T6454] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.136'. [ 105.985422][ T6464] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.733001][ T30] audit: type=1400 audit(1757185393.149:249): avc: denied { read write } for pid=6466 comm="syz.0.141" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.950483][ T30] audit: type=1400 audit(1757185393.149:250): avc: denied { open } for pid=6466 comm="syz.0.141" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.601538][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 107.873290][ T30] audit: type=1400 audit(1757185393.219:251): avc: denied { map } for pid=6466 comm="syz.0.141" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.898727][ T30] audit: type=1400 audit(1757185393.249:252): avc: denied { setopt } for pid=6466 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.938416][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.946689][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.605563][ T6539] Invalid ELF header magic: != ELF [ 108.725480][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.772262][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.372652][ T6458] : entered promiscuous mode [ 109.521250][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.530173][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.660723][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.696529][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.516323][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 110.516340][ T30] audit: type=1400 audit(1757185396.939:255): avc: denied { create } for pid=6570 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.998814][ T30] audit: type=1400 audit(1757185396.969:256): avc: denied { connect } for pid=6570 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.072991][ T30] audit: type=1400 audit(1757185398.499:257): avc: denied { mounton } for pid=6578 comm="syz.3.161" path="/34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.132426][ T6581] 9pnet_fd: Insufficient options for proto=fd [ 112.474516][ T30] audit: type=1400 audit(1757185398.889:258): avc: denied { connect } for pid=6586 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.563507][ T30] audit: type=1400 audit(1757185398.889:259): avc: denied { listen } for pid=6586 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.679541][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.155'. [ 112.701169][ T30] audit: type=1400 audit(1757185399.119:260): avc: denied { listen } for pid=6591 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 112.844081][ T30] audit: type=1400 audit(1757185399.119:261): avc: denied { map } for pid=6591 comm="syz.2.163" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.906664][ T30] audit: type=1400 audit(1757185399.189:262): avc: denied { bind } for pid=6558 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.936590][ T30] audit: type=1400 audit(1757185399.189:263): avc: denied { name_bind } for pid=6558 comm="syz.1.155" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 112.961147][ T30] audit: type=1400 audit(1757185399.189:264): avc: denied { node_bind } for pid=6558 comm="syz.1.155" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 113.359225][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.434668][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.570290][ T6612] bridge0: port 3(vxlan0) entered blocking state [ 113.674540][ T6612] bridge0: port 3(vxlan0) entered disabled state [ 113.707769][ T6612] vxlan0: entered allmulticast mode [ 113.747035][ T6612] vxlan0: entered promiscuous mode [ 113.984396][ T6623] 9pnet_fd: Insufficient options for proto=fd [ 113.999443][ T6623] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 114.005942][ T6623] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.013832][ T6623] vhci_hcd vhci_hcd.0: Device attached [ 114.020833][ T48] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 114.190995][ T6492] vhci_hcd: vhci_device speed not set [ 114.237134][ T48] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.252074][ T6492] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 114.275578][ T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.291096][ T5981] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 114.313855][ T48] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.350130][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 114.398577][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 114.441667][ T5981] usb 4-1: device descriptor read/64, error -71 [ 114.680601][ T5981] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 114.700396][ T48] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.729646][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.740284][ T6619] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.767492][ T48] hub 2-1:1.0: bad descriptor, ignoring hub [ 114.773693][ T48] hub 2-1:1.0: probe with driver hub failed with error -5 [ 114.781950][ T48] cdc_wdm 2-1:1.0: skipping garbage [ 114.787620][ T48] cdc_wdm 2-1:1.0: skipping garbage [ 114.855480][ T48] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 114.855774][ T5981] usb 4-1: device descriptor read/64, error -71 [ 114.861520][ T48] cdc_wdm 2-1:1.0: Unknown control protocol [ 115.116459][ T5981] usb usb4-port1: attempt power cycle [ 115.122738][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 115.531003][ T5981] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 115.617770][ T5981] usb 4-1: device descriptor read/8, error -71 [ 115.701281][ T5854] usb 2-1: USB disconnect, device number 7 [ 115.864966][ T5981] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 115.903604][ T5981] usb 4-1: device descriptor read/8, error -71 [ 116.023159][ T5981] usb usb4-port1: unable to enumerate USB device [ 116.069955][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 116.069969][ T30] audit: type=1400 audit(1757185402.489:279): avc: denied { create } for pid=6649 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.191692][ T30] audit: type=1400 audit(1757185402.569:280): avc: denied { read } for pid=6649 comm="syz.4.180" path="socket:[12346]" dev="sockfs" ino=12346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.457049][ T6659] bond2: entered promiscuous mode [ 116.491445][ T6659] bond2: entered allmulticast mode [ 116.519759][ T6659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.636207][ T6669] netlink: 'syz.0.186': attribute type 13 has an invalid length. [ 116.713950][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 116.906369][ T6673] nbd: device at index 4 is going down [ 116.958836][ T6677] FAULT_INJECTION: forcing a failure. [ 116.958836][ T6677] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 117.005479][ T6625] vhci_hcd: connection reset by peer [ 117.042606][ T78] vhci_hcd: stop threads [ 117.048691][ T78] vhci_hcd: release socket [ 117.084661][ T6675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.095481][ T78] vhci_hcd: disconnect device [ 117.102594][ T6677] CPU: 1 UID: 0 PID: 6677 Comm: syz.2.190 Not tainted syzkaller #0 PREEMPT(full) [ 117.102615][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.102623][ T6677] Call Trace: [ 117.102629][ T6677] [ 117.102635][ T6677] dump_stack_lvl+0x16c/0x1f0 [ 117.102660][ T6677] should_fail_ex+0x512/0x640 [ 117.102684][ T6677] should_fail_alloc_page+0xe7/0x130 [ 117.102704][ T6677] prepare_alloc_pages+0x3c2/0x610 [ 117.102729][ T6677] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 117.102753][ T6677] ? find_held_lock+0x2b/0x80 [ 117.102773][ T6677] ? is_bpf_text_address+0x8a/0x1a0 [ 117.102790][ T6677] ? bpf_ksym_find+0x127/0x1c0 [ 117.102809][ T6677] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.102827][ T6677] ? is_bpf_text_address+0x94/0x1a0 [ 117.102844][ T6677] ? kernel_text_address+0x8d/0x100 [ 117.102862][ T6677] ? __kernel_text_address+0xd/0x40 [ 117.102888][ T6677] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.102908][ T6677] ? policy_nodemask+0xea/0x4e0 [ 117.102929][ T6677] alloc_pages_mpol+0x1fb/0x550 [ 117.102948][ T6677] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 117.102968][ T6677] ? __lock_acquire+0x62e/0x1ce0 [ 117.102995][ T6677] folio_alloc_mpol_noprof+0x36/0x2f0 [ 117.103018][ T6677] vma_alloc_folio_noprof+0xed/0x1e0 [ 117.103039][ T6677] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 117.103068][ T6677] do_pte_missing+0x2230/0x3ba0 [ 117.103095][ T6677] ? find_held_lock+0x2b/0x80 [ 117.103123][ T6677] __handle_mm_fault+0x152a/0x2a50 [ 117.103156][ T6677] ? __pfx___handle_mm_fault+0x10/0x10 [ 117.103186][ T6677] ? lock_vma_under_rcu+0x1eb/0x530 [ 117.103221][ T6677] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 117.103254][ T6677] handle_mm_fault+0x589/0xd10 [ 117.103280][ T6677] ? trace_raw_output_exceptions+0x131/0x150 [ 117.103309][ T6677] do_user_addr_fault+0x60c/0x1370 [ 117.103329][ T6677] ? rcu_is_watching+0x12/0xc0 [ 117.103353][ T6677] exc_page_fault+0x5c/0xb0 [ 117.103374][ T6677] asm_exc_page_fault+0x26/0x30 [ 117.103390][ T6677] RIP: 0033:0x7f654a45a5ab [ 117.103405][ T6677] Code: 00 00 00 48 8d 3d 3d 3a 19 00 48 89 c1 31 c0 e8 4b 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 3a 19 00 48 89 34 24 48 8b 14 24 48 8b [ 117.103421][ T6677] RSP: 002b:00007f654b45ffb0 EFLAGS: 00010202 [ 117.103435][ T6677] RAX: 0000000000000000 RBX: 00007f654a7c5fa0 RCX: 0000000000000000 [ 117.103445][ T6677] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000300 [ 117.103455][ T6677] RBP: 00007f654b461090 R08: 0000000000000000 R09: 0000000000000000 [ 117.103464][ T6677] R10: 0000200000000300 R11: 0000000000000000 R12: 0000000000000001 [ 117.103474][ T6677] R13: 00007f654a7c6038 R14: 00007f654a7c5fa0 R15: 00007ffe6e6baf58 [ 117.103497][ T6677] [ 117.103643][ T6677] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 118.121791][ T6068] udevd[6068]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 119.052834][ T30] audit: type=1400 audit(1757185405.289:281): avc: denied { create } for pid=6702 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 119.097622][ T6675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.561334][ T6492] vhci_hcd: vhci_device speed not set [ 119.567846][ T6675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.749898][ T6675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.776794][ T6719] 9pnet_fd: Insufficient options for proto=fd [ 119.814644][ T6719] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 119.821145][ T6719] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.829398][ T6719] vhci_hcd vhci_hcd.0: Device attached [ 119.949725][ T6516] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.991832][ T6516] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.011796][ T5981] vhci_hcd: vhci_device speed not set [ 120.056143][ T6516] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.073323][ T5854] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 120.089521][ T5981] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 120.231747][ T5854] usb 3-1: device descriptor read/64, error -71 [ 120.250487][ T5959] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 120.413292][ T5959] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 120.428500][ T5959] usb 5-1: config 0 has no interface number 0 [ 120.447782][ T5959] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 120.452303][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.459393][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.464275][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.517104][ T5854] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 120.554290][ T5959] usb 5-1: Product: syz [ 120.579203][ T5959] usb 5-1: Manufacturer: syz [ 120.631472][ T5959] usb 5-1: SerialNumber: syz [ 120.668298][ T5959] usb 5-1: config 0 descriptor?? [ 120.690701][ T5854] usb 3-1: device descriptor read/64, error -71 [ 120.800232][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.809333][ T5854] usb usb3-port1: attempt power cycle [ 120.894296][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.160901][ T5854] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 121.199259][ T5854] usb 3-1: device descriptor read/8, error -71 [ 121.215204][ T6728] : entered promiscuous mode [ 121.249663][ T6516] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.288744][ T30] audit: type=1400 audit(1757185407.709:282): avc: denied { open } for pid=6738 comm="syz.0.205" path="/dev/ttyq4" dev="devtmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 121.316761][ T30] audit: type=1400 audit(1757185407.719:283): avc: denied { bind } for pid=6738 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.337890][ T30] audit: type=1400 audit(1757185407.719:284): avc: denied { node_bind } for pid=6738 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 121.393829][ T6516] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.521898][ T5854] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 121.714888][ T6516] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.721409][ T5854] usb 3-1: device descriptor read/8, error -71 [ 121.738729][ T6516] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.831596][ T5854] usb usb3-port1: unable to enumerate USB device [ 121.895376][ T30] audit: type=1400 audit(1757185408.319:285): avc: denied { setopt } for pid=6745 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.917853][ T30] audit: type=1400 audit(1757185408.319:286): avc: denied { read write } for pid=6745 comm="syz.1.207" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 121.949038][ T6516] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.987857][ T30] audit: type=1400 audit(1757185408.319:287): avc: denied { open } for pid=6745 comm="syz.1.207" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.065646][ T6752] netlink: 'syz.0.208': attribute type 13 has an invalid length. [ 122.078466][ T6752] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 122.094641][ T6752] gretap2: entered allmulticast mode [ 122.193041][ T5959] usb 5-1: Firmware version (0.0) predates our first public release. [ 122.225308][ T5959] usb 5-1: Please update to version 0.2 or newer [ 122.623571][ T30] audit: type=1400 audit(1757185665.048:288): avc: denied { search } for pid=5515 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.651528][ T30] audit: type=1400 audit(1757185665.048:289): avc: denied { search } for pid=5515 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.673657][ T30] audit: type=1400 audit(1757185665.048:290): avc: denied { search } for pid=5515 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.696201][ T30] audit: type=1400 audit(1757185665.048:291): avc: denied { read } for pid=5515 comm="dhcpcd" name="n100" dev="tmpfs" ino=2784 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.774042][ T6723] vhci_hcd: connection reset by peer [ 122.779602][ T6516] vhci_hcd: stop threads [ 122.784429][ T6516] vhci_hcd: release socket [ 122.836557][ T6516] vhci_hcd: disconnect device [ 122.854408][ T5854] usb 5-1: USB disconnect, device number 9 [ 123.939566][ T6770] netlink: 148 bytes leftover after parsing attributes in process `syz.0.214'. [ 123.951069][ T6770] netlink: 56 bytes leftover after parsing attributes in process `syz.0.214'. [ 123.960194][ T6770] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 124.595175][ T6782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.216'. [ 124.720472][ T5854] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 125.318870][ T5981] vhci_hcd: vhci_device speed not set [ 125.384191][ T5854] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 125.394424][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.410898][ T5854] usb 4-1: Product: syz [ 125.418010][ T5854] usb 4-1: Manufacturer: syz [ 125.428832][ T5854] usb 4-1: SerialNumber: syz [ 125.451547][ T5854] usb 4-1: config 0 descriptor?? [ 125.584574][ T6791] 9pnet_fd: Insufficient options for proto=fd [ 125.592567][ T6791] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 125.599079][ T6791] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 125.607521][ T6791] vhci_hcd vhci_hcd.0: Device attached [ 125.907009][ T5981] vhci_hcd: vhci_device speed not set [ 125.917408][ T5854] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 126.023737][ T5959] usb 4-1: USB disconnect, device number 8 [ 126.024123][ T6804] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 126.070483][ T5981] usb 37-1: device descriptor read/64, error -110 [ 126.170949][ T5854] usb 3-1: device descriptor read/64, error -71 [ 126.231828][ T6810] bond1 (unregistering): Released all slaves [ 126.252150][ T5981] vhci_hcd: vhci_device speed not set [ 126.321372][ T5981] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 126.410986][ T5854] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 126.540906][ T5854] usb 3-1: device descriptor read/64, error -71 [ 126.685584][ T5854] usb usb3-port1: attempt power cycle [ 126.776972][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.785139][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.100114][ T6818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.121347][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 127.160821][ T5854] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 127.173692][ T6818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.181889][ T5854] usb 3-1: device descriptor read/8, error -71 [ 127.431114][ T5854] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 127.461941][ T5854] usb 3-1: device descriptor read/8, error -71 [ 127.573368][ T6819] : entered promiscuous mode [ 127.597864][ T6837] random: crng reseeded on system resumption [ 127.600373][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 127.600385][ T30] audit: type=1400 audit(1757185670.018:299): avc: denied { append } for pid=6835 comm="syz.4.233" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 127.609902][ T30] audit: type=1400 audit(1757185670.018:300): avc: denied { open } for pid=6835 comm="syz.4.233" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 127.659463][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.679194][ T5854] usb usb3-port1: unable to enumerate USB device [ 127.709326][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.743828][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.838535][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.929255][ T30] audit: type=1400 audit(1757185670.348:301): avc: denied { read } for pid=6845 comm="syz.1.236" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.954437][ T30] audit: type=1400 audit(1757185670.348:302): avc: denied { open } for pid=6845 comm="syz.1.236" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.001590][ T30] audit: type=1400 audit(1757185670.348:303): avc: denied { ioctl } for pid=6845 comm="syz.1.236" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.033406][ T30] audit: type=1400 audit(1757185670.458:304): avc: denied { create } for pid=6841 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.054541][ T30] audit: type=1400 audit(1757185670.458:305): avc: denied { write } for pid=6841 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.174379][ T975] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.344209][ T975] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 128.345711][ T30] audit: type=1400 audit(1757185670.768:306): avc: denied { create } for pid=6848 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.356453][ T975] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 128.382282][ T975] usb 2-1: Product: syz [ 128.387109][ T975] usb 2-1: Manufacturer: syz [ 128.392581][ T30] audit: type=1400 audit(1757185670.798:307): avc: denied { write } for pid=6848 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.393217][ T975] usb 2-1: SerialNumber: syz [ 128.432536][ T975] usb 2-1: config 0 descriptor?? [ 128.439710][ T975] ch341 2-1:0.0: ch341-uart converter detected [ 128.615112][ T6792] vhci_hcd: connection reset by peer [ 128.638316][ T6523] vhci_hcd: stop threads [ 128.648370][ T6523] vhci_hcd: release socket [ 128.663926][ T6523] vhci_hcd: disconnect device [ 129.827140][ T30] audit: type=1400 audit(1757185672.028:308): avc: denied { read } for pid=6855 comm="syz.3.239" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 129.972951][ T975] ch341-uart ttyUSB0: failed to read break control: -71 [ 129.979944][ T975] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 130.044220][ T975] usb 2-1: USB disconnect, device number 8 [ 130.063719][ T975] ch341 2-1:0.0: device disconnected [ 130.065857][ T6860] netlink: 56 bytes leftover after parsing attributes in process `syz.2.240'. [ 130.079148][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 130.359600][ T6869] binder: 6865:6869 ioctl c0306201 0 returned -14 [ 130.420971][ T6866] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 130.429327][ T6866] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 130.462977][ T6866] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 130.769378][ T6875] pim6reg: entered allmulticast mode [ 131.597047][ T5981] vhci_hcd: vhci_device speed not set [ 131.671293][ T6870] pim6reg: left allmulticast mode [ 132.416175][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.426923][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.813531][ T6901] bond1: entered promiscuous mode [ 132.884526][ T6901] bond1: entered allmulticast mode [ 132.890167][ T6901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.215144][ T6918] bond1: entered allmulticast mode [ 133.221396][ T6918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.876732][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 133.876743][ T30] audit: type=1400 audit(1757185676.298:316): avc: denied { getopt } for pid=6928 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.328471][ T6933] netlink: 'syz.4.260': attribute type 4 has an invalid length. [ 134.563487][ T30] audit: type=1400 audit(1757185676.968:317): avc: denied { mount } for pid=6928 comm="syz.0.259" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 134.893744][ T6942] pim6reg: entered allmulticast mode [ 134.912606][ T30] audit: type=1800 audit(1757185677.288:318): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.261" name="file1" dev="tmpfs" ino=273 res=0 errno=0 [ 134.975805][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.263'. [ 135.458812][ T6935] pim6reg: left allmulticast mode [ 135.487366][ T30] audit: type=1400 audit(1757185677.908:319): avc: denied { write } for pid=6936 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.780584][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.268'. [ 136.792290][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'. [ 137.076880][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'. [ 137.132113][ T6974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6974 comm=syz.1.270 [ 138.259970][ T6992] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 138.431819][ T975] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 138.453648][ T6994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'. [ 138.675793][ T6999] tipc: Started in network mode [ 138.682538][ T6999] tipc: Node identity ac14140f, cluster identity 4711 [ 138.694687][ T6999] tipc: New replicast peer: 255.255.255.255 [ 138.704854][ T6999] tipc: Enabled bearer , priority 10 [ 138.967564][ T975] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 139.018196][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.098730][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 139.192408][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 139.382383][ T5981] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.455695][ T975] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 139.470870][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.509564][ T975] usb 3-1: Product: syz [ 139.520425][ T975] usb 3-1: Manufacturer: syz [ 139.520430][ T5981] usb 4-1: device descriptor read/64, error -71 [ 139.546800][ T975] usb 3-1: SerialNumber: syz [ 139.569038][ T975] usb 3-1: config 0 descriptor?? [ 139.840055][ T5924] tipc: Node number set to 2886997007 [ 139.902417][ T7013] /dev/nullb0: Can't open blockdev [ 140.261006][ T5981] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.280792][ T30] audit: type=1400 audit(1757185682.348:320): avc: denied { write } for pid=7010 comm="syz.4.283" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 140.400988][ T5981] usb 4-1: device descriptor read/64, error -71 [ 140.542129][ T5981] usb usb4-port1: attempt power cycle [ 140.941163][ T5981] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.146718][ T7024] ======================================================= [ 141.146718][ T7024] WARNING: The mand mount option has been deprecated and [ 141.146718][ T7024] and is ignored by this kernel. Remove the mand [ 141.146718][ T7024] option from the mount to silence this warning. [ 141.146718][ T7024] ======================================================= [ 141.444639][ T30] audit: type=1400 audit(1757185683.668:321): avc: denied { firmware_load } for pid=7019 comm="syz.4.285" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 141.779661][ T7024] syz.4.285 (7024) used greatest stack depth: 17768 bytes left [ 142.284760][ T30] audit: type=1400 audit(1757185684.688:322): avc: denied { watch watch_reads } for pid=7007 comm="syz.0.282" path="/59/file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.669488][ T975] usb 3-1: USB disconnect, device number 11 [ 142.680999][ T5981] usb 4-1: device descriptor read/8, error -71 [ 142.894233][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.037493][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.288'. [ 143.858862][ T30] audit: type=1400 audit(1757185685.398:323): avc: denied { create } for pid=7031 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.092734][ T30] audit: type=1400 audit(1757185685.398:324): avc: denied { connect } for pid=7031 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.687736][ T7051] netlink: 'syz.0.293': attribute type 4 has an invalid length. [ 144.725189][ T7051] netlink: 'syz.0.293': attribute type 4 has an invalid length. [ 145.112398][ T7053] bridge1: entered promiscuous mode [ 145.332097][ T7057] Bluetooth: MGMT ver 1.23 [ 145.339258][ T30] audit: type=1400 audit(1757185687.758:325): avc: denied { bind } for pid=7055 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.508510][ T7059] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 145.546542][ T4355] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.181824][ T6461] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.341420][ T6461] usb 5-1: Using ep0 maxpacket: 8 [ 146.347753][ T6461] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 146.356643][ T6461] usb 5-1: config 0 has no interface number 0 [ 146.383892][ T6461] usb 5-1: config 0 interface 110 has no altsetting 0 [ 146.443582][ T6461] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=fc.00 [ 146.512387][ T30] audit: type=1326 audit(1757185688.928:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488958ebe9 code=0x7ffc0000 [ 146.542560][ T6461] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 146.589314][ T6461] usb 5-1: Product: syz [ 146.624735][ T6461] usb 5-1: Manufacturer: syz [ 146.635152][ T6461] usb 5-1: SerialNumber: syz [ 146.658008][ T30] audit: type=1326 audit(1757185688.928:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488958ebe9 code=0x7ffc0000 [ 146.658644][ T6461] usb 5-1: config 0 descriptor?? [ 146.732285][ T30] audit: type=1326 audit(1757185688.958:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f488958d550 code=0x7ffc0000 [ 146.761082][ T30] audit: type=1326 audit(1757185688.958:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488958ebe9 code=0x7ffc0000 [ 146.788215][ T30] audit: type=1326 audit(1757185688.968:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488958ebe9 code=0x7ffc0000 [ 146.812540][ T30] audit: type=1326 audit(1757185688.998:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f488958ebe9 code=0x7ffc0000 [ 146.836908][ T30] audit: type=1326 audit(1757185688.998:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488958ebe9 code=0x7ffc0000 [ 146.861447][ T30] audit: type=1326 audit(1757185688.998:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488958ebe9 code=0x7ffc0000 [ 147.073408][ T30] audit: type=1326 audit(1757185688.998:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488958ebe9 code=0x7ffc0000 [ 147.695778][ T5171] Bluetooth: hci5: command 0x1003 tx timeout [ 147.707120][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.371492][ T5924] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 150.973026][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.054231][ T5924] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 151.081283][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.102252][ T5924] usb 3-1: config 0 descriptor?? [ 151.212986][ T6461] usb 5-1: USB disconnect, device number 10 [ 151.269233][ T5924] usb 3-1: can't set config #0, error -71 [ 151.285108][ T5924] usb 3-1: USB disconnect, device number 12 [ 151.317190][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 151.317203][ T30] audit: type=1400 audit(1757185693.737:367): avc: denied { append } for pid=7113 comm="syz.1.312" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 151.440056][ T7119] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 151.843429][ T30] audit: type=1400 audit(1757185694.217:368): avc: denied { nlmsg_write } for pid=7127 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 152.550609][ T7146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.066401][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.324'. [ 154.121852][ T7161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7161 comm=syz.1.324 [ 155.136106][ T7172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.146922][ T30] audit: type=1400 audit(1757185698.427:369): avc: denied { bind } for pid=7164 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.301086][ T6461] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.531079][ T6461] usb 2-1: Using ep0 maxpacket: 32 [ 156.585988][ T6461] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.604884][ T6461] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.659351][ T6461] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 156.716628][ T6461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.775523][ T6461] usb 2-1: config 0 descriptor?? [ 157.372557][ T6461] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 157.394978][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.451489][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.549463][ T30] audit: type=1326 audit(1757185699.967:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.2.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f654a58ebe9 code=0x0 [ 157.832055][ T30] audit: type=1400 audit(1757185700.147:371): avc: denied { append } for pid=7203 comm="syz.2.336" name="media2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.855579][ T30] audit: type=1400 audit(1757185700.147:372): avc: denied { kexec_image_load } for pid=7203 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 157.890406][ T30] audit: type=1400 audit(1757185700.307:373): avc: denied { connect } for pid=7208 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.093623][ T7213] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 158.854540][ T6461] usb 2-1: USB disconnect, device number 9 [ 159.599661][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 159.988466][ T30] audit: type=1400 audit(1757185702.407:374): avc: denied { name_bind } for pid=7233 comm="syz.1.343" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 160.137942][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 160.158899][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 160.169310][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 160.181354][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 160.868423][ T7257] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 160.895345][ T7259] 9pnet_fd: Insufficient options for proto=fd [ 160.904530][ T7259] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 160.911052][ T7259] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 160.919835][ T7259] vhci_hcd vhci_hcd.0: Device attached [ 160.952388][ T7257] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 160.978039][ T7257] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 160.991482][ T7257] bond3 (unregistering): Released all slaves [ 161.131213][ T6461] vhci_hcd: vhci_device speed not set [ 161.443465][ T6461] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 162.316826][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 162.334003][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 162.405522][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 163.201498][ T30] audit: type=1400 audit(1757185705.607:375): avc: denied { ioctl } for pid=7295 comm="syz.2.360" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 163.236167][ T30] audit: type=1400 audit(1757185705.617:376): avc: denied { getopt } for pid=7295 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.679481][ T7304] FAULT_INJECTION: forcing a failure. [ 163.679481][ T7304] name failslab, interval 1, probability 0, space 0, times 0 [ 163.752269][ T7304] CPU: 0 UID: 0 PID: 7304 Comm: syz.4.361 Not tainted syzkaller #0 PREEMPT(full) [ 163.752294][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.752303][ T7304] Call Trace: [ 163.752308][ T7304] [ 163.752315][ T7304] dump_stack_lvl+0x16c/0x1f0 [ 163.752343][ T7304] should_fail_ex+0x512/0x640 [ 163.752364][ T7304] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 163.752385][ T7304] should_failslab+0xc2/0x120 [ 163.752405][ T7304] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 163.752423][ T7304] ? __alloc_skb+0x2b2/0x380 [ 163.752446][ T7304] __alloc_skb+0x2b2/0x380 [ 163.752465][ T7304] ? __pfx___alloc_skb+0x10/0x10 [ 163.752484][ T7304] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 163.752508][ T7304] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 163.752539][ T7304] netlink_alloc_large_skb+0x69/0x130 [ 163.752567][ T7304] netlink_sendmsg+0x6a1/0xdd0 [ 163.752595][ T7304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.752627][ T7304] __sys_sendto+0x4a0/0x520 [ 163.752647][ T7304] ? __pfx___sys_sendto+0x10/0x10 [ 163.752673][ T7304] ? find_held_lock+0x2b/0x80 [ 163.752713][ T7304] __x64_sys_sendto+0xe0/0x1c0 [ 163.752731][ T7304] ? do_syscall_64+0x91/0x4c0 [ 163.752753][ T7304] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.752774][ T7304] do_syscall_64+0xcd/0x4c0 [ 163.752797][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.752814][ T7304] RIP: 0033:0x7fa04bb90a7c [ 163.752829][ T7304] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 163.752844][ T7304] RSP: 002b:00007fa04c938ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 163.752861][ T7304] RAX: ffffffffffffffda RBX: 00007fa04c938fc0 RCX: 00007fa04bb90a7c [ 163.752872][ T7304] RDX: 000000000000001c RSI: 00007fa04c939010 RDI: 0000000000000005 [ 163.752882][ T7304] RBP: 0000000000000000 R08: 00007fa04c938f14 R09: 000000000000000c [ 163.752892][ T7304] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 163.752901][ T7304] R13: 00007fa04c938f68 R14: 00007fa04c939010 R15: 0000000000000000 [ 163.752924][ T7304] [ 164.045801][ T7260] vhci_hcd: connection reset by peer [ 164.096410][ T4355] vhci_hcd: stop threads [ 164.101407][ T4355] vhci_hcd: release socket [ 164.105843][ T4355] vhci_hcd: disconnect device [ 165.132005][ T30] audit: type=1400 audit(1757185963.557:377): avc: denied { bind } for pid=7336 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.421129][ T975] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 165.615442][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.647094][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.711910][ T975] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 165.743204][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.763476][ T30] audit: type=1400 audit(1757185964.177:378): avc: denied { create } for pid=7349 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 165.798253][ T975] usb 4-1: config 0 descriptor?? [ 165.832655][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.375'. [ 165.843230][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 165.908664][ T30] audit: type=1400 audit(1757185964.177:379): avc: denied { write } for pid=7349 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 166.077117][ T30] audit: type=1400 audit(1757185964.497:380): avc: denied { write } for pid=7361 comm="syz.0.380" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 166.300762][ T6463] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 166.313052][ T975] usbhid 4-1:0.0: can't add hid device: -71 [ 166.318980][ T975] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 166.363720][ T975] usb 4-1: USB disconnect, device number 13 [ 166.472313][ T6463] usb 2-1: Using ep0 maxpacket: 32 [ 166.478769][ T6463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.492966][ T6463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.506189][ T6463] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 166.522474][ T6463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.564887][ T6463] usb 2-1: config 0 descriptor?? [ 166.651444][ T6461] vhci_hcd: vhci_device speed not set [ 167.439104][ T6463] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 167.839184][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.815614][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.581641][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 171.063575][ T5924] usb 2-1: USB disconnect, device number 10 [ 171.161664][ T6463] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 171.176555][ T7407] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.326867][ T6463] usb 3-1: Using ep0 maxpacket: 16 [ 171.372525][ T6463] usb 3-1: config index 0 descriptor too short (expected 16402, got 18) [ 171.395176][ T6463] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 171.439675][ T6463] usb 3-1: config 0 has no interface number 0 [ 171.497568][ T6463] usb 3-1: config 0 interface 10 has no altsetting 0 [ 171.531266][ T6463] usb 3-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice= b.d6 [ 171.542407][ T6463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.573782][ T6463] usb 3-1: Product: syz [ 171.581895][ T6463] usb 3-1: Manufacturer: syz [ 171.586558][ T6463] usb 3-1: SerialNumber: syz [ 171.665196][ T6463] usb 3-1: config 0 descriptor?? [ 171.679024][ T7416] netlink: 148 bytes leftover after parsing attributes in process `syz.0.394'. [ 171.714347][ T6463] qmi_wwan 3-1:0.10: probe with driver qmi_wwan failed with error -22 [ 171.913928][ T6463] usb 3-1: USB disconnect, device number 13 [ 172.495487][ T7425] 9pnet_fd: Insufficient options for proto=fd [ 172.525635][ T7425] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 172.532152][ T7425] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.540350][ T7425] vhci_hcd vhci_hcd.0: Device attached [ 172.731571][ T5924] vhci_hcd: vhci_device speed not set [ 172.791581][ T5981] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 172.801563][ T5924] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 172.950369][ T5981] usb 3-1: device descriptor read/64, error -71 [ 173.190968][ T5981] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 173.304431][ T7436] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 173.330968][ T5981] usb 3-1: device descriptor read/64, error -71 [ 173.355974][ T7437] netlink: 'syz.0.401': attribute type 26 has an invalid length. [ 173.386239][ T7438] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 173.451060][ T5981] usb usb3-port1: attempt power cycle [ 173.739221][ T30] audit: type=1400 audit(1757185971.817:381): avc: denied { relabelto } for pid=7432 comm="syz.3.400" name="file0" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:" [ 173.769884][ T7436] netlink: 224 bytes leftover after parsing attributes in process `syz.0.401'. [ 173.770096][ T30] audit: type=1400 audit(1757185971.817:382): avc: denied { associate } for pid=7432 comm="syz.3.400" name="file0" dev="tmpfs" ino=413 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 173.808761][ T30] audit: type=1400 audit(1757185971.827:383): avc: denied { accept } for pid=7432 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.811852][ T7440] bridge0: port 3(vxlan0) entered blocking state [ 173.838735][ T7440] bridge0: port 3(vxlan0) entered disabled state [ 173.847844][ T7440] vxlan0: entered allmulticast mode [ 173.854873][ T7440] vxlan0: entered promiscuous mode [ 174.057809][ T7444] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 174.082524][ T30] audit: type=1400 audit(1757185972.487:384): avc: denied { unlink } for pid=5857 comm="syz-executor" name="file0" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:" [ 174.121313][ T5981] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 174.167650][ T7444] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.176418][ T5981] usb 3-1: device descriptor read/8, error -71 [ 174.345211][ T30] audit: type=1400 audit(1757185972.767:385): avc: denied { write } for pid=7450 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.489511][ T5981] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 174.633014][ T5981] usb 3-1: device descriptor read/8, error -71 [ 174.798322][ T5981] usb usb3-port1: unable to enumerate USB device [ 174.940058][ T30] audit: type=1400 audit(1757185973.357:386): avc: denied { read } for pid=7463 comm="syz.1.410" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 175.034715][ T30] audit: type=1400 audit(1757185973.357:387): avc: denied { open } for pid=7463 comm="syz.1.410" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 176.025717][ T7475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.355924][ T7429] vhci_hcd: connection reset by peer [ 176.378069][ T4355] vhci_hcd: stop threads [ 176.451145][ T4355] vhci_hcd: release socket [ 176.456507][ T4355] vhci_hcd: disconnect device [ 176.661272][ T7483] FAULT_INJECTION: forcing a failure. [ 176.661272][ T7483] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 176.675134][ T7483] CPU: 0 UID: 0 PID: 7483 Comm: syz.4.413 Not tainted syzkaller #0 PREEMPT(full) [ 176.675157][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.675168][ T7483] Call Trace: [ 176.675174][ T7483] [ 176.675181][ T7483] dump_stack_lvl+0x16c/0x1f0 [ 176.675207][ T7483] should_fail_ex+0x512/0x640 [ 176.675232][ T7483] _copy_from_user+0x2e/0xd0 [ 176.675259][ T7483] evdev_do_ioctl+0x1d5/0x1b30 [ 176.675280][ T7483] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 176.675299][ T7483] ? rcu_is_watching+0x12/0xc0 [ 176.675321][ T7483] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.675356][ T7483] evdev_ioctl+0x16f/0x1a0 [ 176.675371][ T7483] ? __pfx_evdev_ioctl+0x10/0x10 [ 176.675388][ T7483] __x64_sys_ioctl+0x18b/0x210 [ 176.675418][ T7483] do_syscall_64+0xcd/0x4c0 [ 176.675442][ T7483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.675459][ T7483] RIP: 0033:0x7fa04bb8ebe9 [ 176.675473][ T7483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.675490][ T7483] RSP: 002b:00007fa049dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.675506][ T7483] RAX: ffffffffffffffda RBX: 00007fa04bdc6180 RCX: 00007fa04bb8ebe9 [ 176.675518][ T7483] RDX: 0000200000000100 RSI: 0000000040104593 RDI: 0000000000000003 [ 176.675528][ T7483] RBP: 00007fa049dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 176.675539][ T7483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.675549][ T7483] R13: 00007fa04bdc6218 R14: 00007fa04bdc6180 R15: 00007ffd72eb4ad8 [ 176.675573][ T7483] [ 177.931028][ T5924] vhci_hcd: vhci_device speed not set [ 178.241236][ T7502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.241609][ T30] audit: type=1400 audit(1757185976.647:388): avc: denied { ioctl } for pid=7494 comm="syz.2.418" path="socket:[15284]" dev="sockfs" ino=15284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.749731][ T7511] 9pnet_fd: Insufficient options for proto=fd [ 178.801653][ T7511] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 178.801696][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.801763][ T7511] vhci_hcd vhci_hcd.0: Device attached [ 178.991586][ T6463] vhci_hcd: vhci_device speed not set [ 179.031208][ T5981] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 179.051795][ T6461] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 179.062635][ T6463] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 179.181297][ T5981] usb 3-1: device descriptor read/64, error -71 [ 179.202511][ T7519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.212345][ T7519] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.228096][ T7519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.241412][ T6461] usb 4-1: device descriptor read/64, error -71 [ 179.570975][ T5981] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 179.766172][ T30] audit: type=1400 audit(1757185978.187:389): avc: denied { create } for pid=7525 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.767734][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.428'. [ 179.804075][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.428'. [ 179.851043][ T5981] usb 3-1: device descriptor read/64, error -71 [ 179.875148][ T7531] netlink: 68 bytes leftover after parsing attributes in process `syz.1.429'. [ 179.941168][ T6461] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 179.982666][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.106621][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.121134][ T6461] usb 4-1: device descriptor read/64, error -71 [ 180.283314][ T6461] usb usb4-port1: attempt power cycle [ 180.387522][ T5981] usb usb3-port1: attempt power cycle [ 180.696577][ T6461] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 180.717984][ T7536] netlink: 'syz.1.431': attribute type 13 has an invalid length. [ 180.732943][ T7536] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 180.739855][ T7534] sctp: [Deprecated]: syz.4.430 (pid 7534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.739855][ T7534] Use struct sctp_sack_info instead [ 180.764841][ T6461] usb 4-1: device descriptor read/8, error -71 [ 180.776066][ T7536] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 180.788368][ T7536] gretap1: entered allmulticast mode [ 180.948424][ T30] audit: type=1400 audit(1757185979.367:390): avc: denied { read open } for pid=7544 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.984176][ T30] audit: type=1400 audit(1757185979.367:391): avc: denied { getattr } for pid=7544 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.009374][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.021497][ T6461] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 181.051286][ T5981] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 181.053527][ T6461] usb 4-1: device descriptor read/8, error -71 [ 181.090910][ T5981] usb 3-1: device descriptor read/8, error -71 [ 181.173061][ T6461] usb usb4-port1: unable to enumerate USB device [ 181.391149][ T5981] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 181.423933][ T5981] usb 3-1: device descriptor read/8, error -71 [ 181.571225][ T5981] usb usb3-port1: unable to enumerate USB device [ 181.661246][ T30] audit: type=1400 audit(1757185980.077:392): avc: denied { add_name } for pid=7543 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.719452][ T7514] vhci_hcd: connection reset by peer [ 181.799139][ T30] audit: type=1400 audit(1757185980.077:393): avc: denied { create } for pid=7543 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.866237][ T30] audit: type=1400 audit(1757185980.077:394): avc: denied { write } for pid=7543 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb5.link" dev="tmpfs" ino=3721 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.895188][ T3542] vhci_hcd: stop threads [ 181.899445][ T3542] vhci_hcd: release socket [ 181.904520][ T3542] vhci_hcd: disconnect device [ 181.911486][ T30] audit: type=1400 audit(1757185980.077:395): avc: denied { append } for pid=7543 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" dev="tmpfs" ino=3721 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.165298][ T30] audit: type=1400 audit(1757185980.587:396): avc: denied { remove_name } for pid=7572 comm="rm" name="resolv.conf.lapb5.link" dev="tmpfs" ino=3721 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.281540][ T30] audit: type=1400 audit(1757185980.637:397): avc: denied { unlink } for pid=7572 comm="rm" name="resolv.conf.lapb5.link" dev="tmpfs" ino=3721 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.603353][ T30] audit: type=1400 audit(1757185981.997:398): avc: denied { name_bind } for pid=7597 comm="syz.4.447" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 183.625926][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.732225][ T7602] 9pnet_fd: Insufficient options for proto=fd [ 183.814983][ T7602] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 183.821516][ T7602] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.831094][ T7602] vhci_hcd vhci_hcd.0: Device attached [ 184.031040][ T6461] vhci_hcd: vhci_device speed not set [ 184.091559][ T5909] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 184.099221][ T6461] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 184.181575][ T6463] vhci_hcd: vhci_device speed not set [ 184.241668][ T5909] usb 5-1: device descriptor read/64, error -71 [ 184.481436][ T5909] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 184.611478][ T5909] usb 5-1: device descriptor read/64, error -71 [ 184.721810][ T5909] usb usb5-port1: attempt power cycle [ 184.979411][ T7639] 9pnet_fd: Insufficient options for proto=fd [ 185.136041][ T5909] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 185.172133][ T5909] usb 5-1: device descriptor read/8, error -71 [ 185.676796][ T7647] netlink: 56 bytes leftover after parsing attributes in process `syz.3.455'. [ 185.688693][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 185.771508][ T5909] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 185.815962][ T5909] usb 5-1: device descriptor read/8, error -71 [ 185.951831][ T5909] usb usb5-port1: unable to enumerate USB device [ 185.966695][ T7660] i2c i2c-0: Invalid block write size 34 [ 185.975605][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 186.107874][ T30] audit: type=1400 audit(1757185984.527:399): avc: denied { bind } for pid=7657 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.138295][ T30] audit: type=1400 audit(1757185984.557:400): avc: denied { getopt } for pid=7657 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.157675][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.371490][ T5909] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 186.535371][ T5909] usb 4-1: config 1 interface 0 has no altsetting 0 [ 186.673389][ T5909] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 186.777312][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.860241][ T5909] usb 4-1: Product: syz [ 186.900067][ T5909] usb 4-1: Manufacturer: syz [ 186.946517][ T5909] usb 4-1: SerialNumber: syz [ 186.987892][ T7604] vhci_hcd: connection reset by peer [ 187.032018][ T3542] vhci_hcd: stop threads [ 187.036285][ T3542] vhci_hcd: release socket [ 187.055470][ T3542] vhci_hcd: disconnect device [ 187.991417][ T5909] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 188.005501][ T7702] 9pnet_fd: Insufficient options for proto=fd [ 188.390999][ T5981] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 188.652028][ T7719] debugfs: 'ttyS3' already exists in 'caif_serial' [ 188.683555][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.709741][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.735368][ T5981] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 188.759227][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.786599][ T5981] usb 3-1: config 0 descriptor?? [ 189.009888][ T5981] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 189.033601][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 189.043670][ T5909] usb 4-1: USB disconnect, device number 18 [ 189.058233][ T5909] usblp0: removed [ 189.067018][ T5981] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 189.183227][ T5981] cp2112 0003:10C4:EA90.0006: error requesting version [ 189.212168][ T6461] vhci_hcd: vhci_device speed not set [ 189.220072][ T5981] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -32 [ 189.242744][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 189.387874][ T5981] usb 3-1: USB disconnect, device number 22 [ 189.871210][ T5981] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 190.674772][ T5981] usb 3-1: Using ep0 maxpacket: 32 [ 190.682306][ T5981] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 190.692662][ T5981] usb 3-1: config 0 has no interface number 0 [ 190.706014][ T5981] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 190.743838][ T7724] Bluetooth: hci0: command 0x0406 tx timeout [ 190.750134][ T7724] Bluetooth: hci4: command 0x0406 tx timeout [ 190.756914][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 190.763755][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 190.769781][ T7724] Bluetooth: hci2: command 0x0406 tx timeout [ 190.877189][ T30] audit: type=1400 audit(1757185989.297:401): avc: denied { validate_trans } for pid=7772 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 190.885597][ T5981] usb 3-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 191.162801][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.182619][ T5981] usb 3-1: Product: syz [ 191.187397][ T5981] usb 3-1: Manufacturer: syz [ 191.193399][ T5981] usb 3-1: SerialNumber: syz [ 191.217013][ T5981] usb 3-1: config 0 descriptor?? [ 191.229368][ T7749] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.264877][ T5981] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 191.349751][ T30] audit: type=1400 audit(1757185989.767:402): avc: denied { getopt } for pid=7772 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.383743][ T7773] netlink: 44 bytes leftover after parsing attributes in process `syz.1.484'. [ 191.657975][ T7784] 9pnet_virtio: no channels available for device syz [ 191.665701][ T7784] netlink: 204 bytes leftover after parsing attributes in process `syz.2.480'. [ 192.735570][ T7804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.794573][ T6461] usb 3-1: USB disconnect, device number 23 [ 193.852064][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.857493][ T30] audit: type=1400 audit(1757185992.137:403): avc: denied { getopt } for pid=7823 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.858373][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.890246][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 298.896859][ C0] rcu: 0-...!: (1 GPs behind) idle=829c/1/0x4000000000000000 softirq=29866/29867 fqs=3 [ 298.907178][ C0] rcu: (t=10502 jiffies g=19017 q=415 ncpus=2) [ 298.913391][ C0] rcu: rcu_preempt kthread starved for 9917 jiffies! g19017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 298.924463][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 298.934400][ C0] rcu: RCU grace-period kthread stack dump: [ 298.940258][ C0] task:rcu_preempt state:R running task stack:27688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 298.953736][ C0] Call Trace: [ 298.956994][ C0] [ 298.959896][ C0] __schedule+0x1190/0x5de0 [ 298.964381][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 298.969294][ C0] ? __pfx___schedule+0x10/0x10 [ 298.974132][ C0] ? find_held_lock+0x2b/0x80 [ 298.978778][ C0] ? schedule+0x2d7/0x3a0 [ 298.983086][ C0] schedule+0xe7/0x3a0 [ 298.987124][ C0] schedule_timeout+0x123/0x290 [ 298.991943][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 298.997293][ C0] ? __pfx_process_timeout+0x10/0x10 [ 299.002563][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 299.008344][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 299.013780][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 299.018521][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 299.023772][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.028949][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 299.033852][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 299.038679][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 299.044465][ C0] rcu_gp_kthread+0x270/0x380 [ 299.049129][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 299.054318][ C0] ? rcu_is_watching+0x12/0xc0 [ 299.059063][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.064234][ C0] ? __kthread_parkme+0x19e/0x250 [ 299.069235][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 299.074408][ C0] kthread+0x3c2/0x780 [ 299.078455][ C0] ? __pfx_kthread+0x10/0x10 [ 299.083018][ C0] ? rcu_is_watching+0x12/0xc0 [ 299.087763][ C0] ? __pfx_kthread+0x10/0x10 [ 299.092321][ C0] ret_from_fork+0x5d4/0x6f0 [ 299.096883][ C0] ? __pfx_kthread+0x10/0x10 [ 299.101450][ C0] ret_from_fork_asm+0x1a/0x30 [ 299.106201][ C0] [ 299.109187][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 299.115475][ C0] Sending NMI from CPU 0 to CPUs 1: [ 299.120653][ C1] NMI backtrace for cpu 1 [ 299.120665][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 299.120681][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.120688][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 299.120705][ C1] Code: 66 cf 55 00 48 89 df 5b e9 ed 56 5b 00 be 03 00 00 00 5b e9 22 14 28 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 b8 21 1b 12 65 8b 05 c9 21 1b [ 299.120717][ C1] RSP: 0018:ffffc90000a08b70 EFLAGS: 00000207 [ 299.120728][ C1] RAX: 0000000000000000 RBX: 00000000002af31d RCX: ffffffff89a61c9d [ 299.120737][ C1] RDX: ffff88801e2ea440 RSI: 00000000000f4240 RDI: 0000000000000005 [ 299.120745][ C1] RBP: 00000010c6f7a0b5 R08: 0000000000000005 R09: 00000000000f4240 [ 299.120754][ C1] R10: 00000000000f4240 R11: 0000000000000000 R12: 00000000004c4b40 [ 299.120762][ C1] R13: 0000000000000001 R14: 0000000000044b82 R15: 0000000000000000 [ 299.120770][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 299.120784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.120792][ C1] CR2: 000000110c2e0244 CR3: 000000005b4dd000 CR4: 00000000003526f0 [ 299.120801][ C1] Call Trace: [ 299.120807][ C1] [ 299.120811][ C1] pie_calculate_probability+0x272/0x850 [ 299.120833][ C1] fq_pie_timer+0x21e/0x5b0 [ 299.120850][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 299.120864][ C1] call_timer_fn+0x197/0x620 [ 299.120884][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 299.120905][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.120921][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 299.120937][ C1] __run_timers+0x6ef/0x960 [ 299.120957][ C1] ? __pfx___run_timers+0x10/0x10 [ 299.120982][ C1] run_timer_base+0x114/0x190 [ 299.121000][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 299.121018][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.121033][ C1] run_timer_softirq+0x1a/0x40 [ 299.121051][ C1] handle_softirqs+0x219/0x8e0 [ 299.121069][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 299.121086][ C1] __irq_exit_rcu+0x109/0x170 [ 299.121101][ C1] irq_exit_rcu+0x9/0x30 [ 299.121115][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 299.121132][ C1] [ 299.121136][ C1] [ 299.121140][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 299.121155][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 299.121171][ C1] Code: dc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 299.121182][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 299.121192][ C1] RAX: 0000000000ac3b01 RBX: 0000000000000001 RCX: ffffffff8b944c29 [ 299.121200][ C1] RDX: 0000000000000000 RSI: ffffffff8de522e0 RDI: ffffffff8c162d80 [ 299.121209][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 299.121217][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 299.121225][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 299.121236][ C1] ? ct_kernel_exit+0x139/0x190 [ 299.121254][ C1] default_idle+0x13/0x20 [ 299.121270][ C1] default_idle_call+0x6d/0xb0 [ 299.121287][ C1] do_idle+0x391/0x510 [ 299.121303][ C1] ? __pfx_do_idle+0x10/0x10 [ 299.121318][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 299.121334][ C1] cpu_startup_entry+0x4f/0x60 [ 299.121350][ C1] start_secondary+0x21d/0x2b0 [ 299.121368][ C1] ? __pfx_start_secondary+0x10/0x10 [ 299.121388][ C1] common_startup_64+0x13e/0x148 [ 299.121407][ C1] [ 299.121652][ C0] CPU: 0 UID: 0 PID: 1300 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 299.121664][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.121669][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 299.121682][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 ce 00 f6 48 89 df e8 0e 22 01 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 1e f1 f5 65 8b 05 be bb 3f 08 85 c0 74 16 5b [ 299.121690][ C0] RSP: 0018:ffffc900043f7978 EFLAGS: 00000246 [ 299.121698][ C0] RAX: 0000000000000006 RBX: ffffffff9b115ba0 RCX: 0000000000000002 [ 299.121704][ C0] RDX: 0000000000000000 RSI: ffffffff8de522e0 RDI: ffffffff8c162d80 [ 299.121710][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 299.121715][ C0] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: ffffffff9b115ca8 [ 299.121721][ C0] R13: 0000000000000003 R14: 0000000000000001 R15: 0000000000000003 [ 299.121726][ C0] FS: 0000000000000000(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 299.121735][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.121742][ C0] CR2: 00007f72a51c6f98 CR3: 0000000035039000 CR4: 00000000003526f0 [ 299.121747][ C0] Call Trace: [ 299.121751][ C0] [ 299.121755][ C0] uart_write+0x4c1/0xb30 [ 299.121770][ C0] handle_tx+0x204/0x630 [ 299.121783][ C0] dev_hard_start_xmit+0x94/0x740 [ 299.121796][ C0] __dev_queue_xmit+0xa46/0x4490 [ 299.121807][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.121818][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 299.121831][ C0] ? rcu_is_watching+0x12/0xc0 [ 299.121842][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 299.121851][ C0] ? __schedule+0x11a3/0x5de0 [ 299.121862][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 299.121881][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 299.121892][ C0] ? find_held_lock+0x2b/0x80 [ 299.121903][ C0] ? skb_dequeue+0x126/0x180 [ 299.121917][ C0] ? find_held_lock+0x2b/0x80 [ 299.121929][ C0] ? rcu_is_watching+0x12/0xc0 [ 299.121942][ C0] tx+0xcc/0x190 [ 299.121954][ C0] ? __pfx_tx+0x10/0x10 [ 299.121963][ C0] kthread+0x1e4/0x3e0 [ 299.121973][ C0] ? find_held_lock+0x2b/0x80 [ 299.121984][ C0] ? __pfx_kthread+0x10/0x10 [ 299.121994][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 299.122005][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.122017][ C0] ? __kthread_parkme+0x19e/0x250 [ 299.122031][ C0] ? __pfx_kthread+0x10/0x10 [ 299.122040][ C0] kthread+0x3c2/0x780 [ 299.122050][ C0] ? __pfx_kthread+0x10/0x10 [ 299.122059][ C0] ? rcu_is_watching+0x12/0xc0 [ 299.122071][ C0] ? __pfx_kthread+0x10/0x10 [ 299.122080][ C0] ret_from_fork+0x5d4/0x6f0 [ 299.122089][ C0] ? __pfx_kthread+0x10/0x10 [ 299.122098][ C0] ret_from_fork_asm+0x1a/0x30 [ 299.122116][ C0]