last executing test programs: 15.550652376s ago: executing program 2 (id=175): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCFLSH(r3, 0x40085500, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r6, r6, 0x0, 0x9) 13.739816929s ago: executing program 2 (id=184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x1f00000000000000, 0x0, 0x0) tkill(r2, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r5, 0x0, 0x1}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12) 12.296286506s ago: executing program 2 (id=189): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) read$msr(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000180)="3c77a434c9dbabf8933c93cd41c842b6f2ba79b71c3fb92b89fab0ecd5dab43037ec137aed54e7eef24bfedd75ed998e69db3c5bf95bfe79e0e685dc19f6b9b4c73ea0b4fa94dd27308d21068b097e6ce90ae55b5e5556dee861f021a25a3e8b43a5591a", &(0x7f0000000500)="7727f0281e3740b99e3a054746f5917d64f18afbdbdae32e3e0eba451735f905017b0fec4775f907ce4e7cd88f6a776d8637b9bc049e4e0ef2702afe047d78ef9f50a4795a6081ab46fb7c94cb9125df0df40363af947f0eac10d464362eeed1c4c03992167452a4b97e0f175cac897d83030a08af2daf5cbd849f09e23486e7a52d8bea86dfad4c899af50e94681eeb3176f905df79478dead5a1d836b11f8be82faecf"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) read$FUSE(r3, &(0x7f0000001c40)={0x2020}, 0x2020) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) tee(r5, r4, 0xff, 0x0) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x1, 0x4000102b, r6, 0x0) vmsplice(r6, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x7) fcntl$setlease(r2, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) 10.975948299s ago: executing program 2 (id=193): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x9) socket(0x2c, 0x3, 0x800005) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, 0x0, 0xa000000) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x8000, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x10, @empty}, 0x1c, 0x0}}], 0x1, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 10.627912303s ago: executing program 4 (id=195): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) readv(r5, 0x0, 0x0) tkill(r6, 0xb) 9.814807835s ago: executing program 2 (id=196): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) fanotify_init(0x200, 0x0) setregid(0x0, 0xee01) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8ea3a}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mq_timedsend(r0, &(0x7f0000000600)="6d12483bb95dab4da2", 0x9, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000001600)=""/102392, 0x18ff8, 0x0, 0x0) 8.70256648s ago: executing program 0 (id=201): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x6}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x29}]}, 0x1c}}, 0x40040) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xa880}, 0x4040010) 7.864529703s ago: executing program 3 (id=204): syz_open_dev$tty1(0xc, 0x4, 0x1) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) 7.835496876s ago: executing program 4 (id=205): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0x3) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000080)=0x4, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)}, 0x0) 7.255823842s ago: executing program 0 (id=206): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x9) socket(0x2c, 0x3, 0x800005) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, 0x0, 0xa000000) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x8000, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x10, @empty}, 0x1c, 0x0}}], 0x1, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 7.228372852s ago: executing program 3 (id=207): socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) fcntl$setstatus(r1, 0x4, 0x40800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r5}, &(0x7f00000001c0), &(0x7f0000001380)=r4}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = syz_io_uring_setup(0x66f, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r6, 0x6e36, 0x0, 0x0, 0x0, 0x0) ftruncate(r2, 0x7fe) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc) 6.305447124s ago: executing program 0 (id=208): openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket(0x1d, 0x0, 0x6) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r4, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0xe}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) fchdir(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310400000008000a40fffffffc14000000110001000000000000000000e6"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r5, @ANYRES32=0x0, @ANYRESHEX=r1], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24008080) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000e7c37324350f28", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) 4.806966882s ago: executing program 3 (id=211): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x6, 0x7, 0x3, 0x8}, 'syz1\x00', 0x37}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x9) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x72801, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) connect(r2, &(0x7f0000000140)=@generic={0xa, "97eb2df7d4ca515d487550f73a387cc240d39db31775bab179c5810913fb6f031404e37a5f1c566808f0bbaa23899ab9d00f30403925a6bad70a8701abffd593919b0f21d986989471b6d6e1b8456b2dcc1158f702388e2593163f5dc1ff12538dda85f90d55299fe5a850b4a66161c9460a45853624cc3568b1b47cf89f"}, 0x80) flistxattr(r2, &(0x7f00000001c0)=""/10, 0xa) (async) io_setup(0x7f1, &(0x7f0000000200)=0x0) (async) pipe2$watch_queue(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_submit(r3, 0x4, &(0x7f0000000580)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x7fff, r0, &(0x7f0000000240)="d5f33d8b5781cd3c30bd64c43bef335a904e5f97ed3911c16c9742c87f9b2b2d44642cd67ec765410dfe976da74f39ec8035a87fe55af145b5f8681bfc380ad61ed4f09372f255c92c03b7b7c66ba1dd031b1d19f8ff8067e459f26e99f2e721d271ae827b821003be2810643a320e512070581de729d41ed7c246", 0x7b, 0x146e0f8f, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0xa, r0, &(0x7f0000000300)="f36b7f69bece6d93eb7972f4c30196ec2b61141d6256a65b3a9d39c3ac019aaa3d945f0a8a69f9e85bbe52ebff49e63486b2ea0e8f72571be6a2569e3dbcd44b467b75c82b2fc6359631f5bdff03a4314a55944a579414105f2c50018636642ea2f5557c414e74200b80efec7ee09bc62f27543c722d5422b51ff8d6a5a49908942d492c410c70b165da3db437044d7f42744a3f4eabd66a1f691b0f83045e096d54b8118c99", 0xa6, 0x5, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000400)="5079810df4d92f274a13875d2e1f49ee91ab92e953aa8d5428088129cbf13431d1922ed5e1c174f4450b191c8c456b67172e207bc4ce2ca8b7145b9945b6c961552ff6750ecedb7f41e3", 0x4a, 0x0, 0x0, 0x2, r5}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xb, 0x2, r1, &(0x7f0000000500)="6e8cef5ebd710f3a722dae783d66c017426cdfb7324ca9e374326263434db5023c3257de6cd3a818942763ed06d5fa938b8dce889ea630e8", 0x38, 0xc, 0x0, 0x3, r2}]) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f00000005c0)={0x2}) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000600)) (async) connect$802154_dgram(r2, &(0x7f0000000640)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) (async) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000680)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f00000006c0)={{r0}, r6, 0x10, @unused=[0x8, 0x400, 0x9, 0x8], @subvolid=0x800}) (async) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000016c0), &(0x7f0000001700)={0x0, 0xfb, 0x65, 0x1, 0x8, "bdceac0f9b6e4d07dea9b18227a0a4f7", "eb83000bd5687512deb2197842721376e4c6b13a97d7ea6574f22e554ebe2d0dd015f5d93b061e1891ecd44fdb9de522aae8467dbcd7d5750b183fe9105c00ab7f32bd35d75e21f11b167760abd55706"}, 0x65, 0x2) (async) lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000001880)={0x1cf10e7a, 0x6, {0xffffffffffffffff}, {0xee01}, 0x3, 0x2}) statx(r2, &(0x7f00000018c0)='./file0\x00', 0x0, 0x20, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000001ac0)={0xfffffff8, 0x5754, {}, {0x0}, 0xf, 0x9e03}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000001b00)={0x0, 0x1, {}, {0xee00}, 0x8ab9959, 0xff3f}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001b40)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000001c40)=0xe8) (async) lstat(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001e00)={0x0, 0x0, 0x0}, &(0x7f0000001e40)=0xc) (async) lstat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000004040)={{}, {0x1, 0x2}, [{0x2, 0x3, 0xee00}, {0x2, 0x3, r7}, {0x2, 0x4, 0xee00}, {0x2, 0x0, r8}, {0x2, 0x4, r9}, {0x2, 0x4, r10}, {0x2, 0x5, r11}, {0x2, 0x1, r12}, {0x2, 0x4, r13}], {0x4, 0x5}, [{0x8, 0x6, r14}, {0x8, 0x6, r15}, {0x8, 0x1, r16}, {0x8, 0x0, r17}, {0x8, 0x3}, {0x8, 0x4}], {0x10, 0xe}, {0x20, 0x4}}, 0x9c, 0x2) 4.771572306s ago: executing program 0 (id=212): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r1 = socket(0x1, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x7ffd, 0xc95a, 0xf, 0x0, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x8, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x9, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x3, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x80000133, 0x8004, 0xffffffff, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x40000310, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x10, 0x7, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0x4, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1001, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x10000002, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xad, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x0, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x5, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x1, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f00000002c0)=0x3) bind$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0xfffffffffffffee7) socket$unix(0x1, 0x5, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) bind$ax25(r1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x9e1, 0x10, 0xfffffffe, 0x100000, 0xa, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x3ff, 0x1, 0xf005, 0x0, 0x8, 0x3, 0xb, 0x9, 0x100, 0x1003, 0x7, 0x7, 0x5, 0x1, 0xb0c4, 0x7db, 0x8, 0x400007, 0x1]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 4.675484069s ago: executing program 4 (id=213): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x48, r1, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xdf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x10}]}]}, 0x48}, 0x1, 0xfff0, 0x0, 0x4814}, 0x8050) 4.385662564s ago: executing program 3 (id=214): r0 = openat$audio1(0xffffff9c, &(0x7f0000000040), 0x8081, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000000)) 4.115694769s ago: executing program 1 (id=215): io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x6, 0x682800) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c", 0x7}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x4) close(r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_submit(r0, 0x4, &(0x7f0000000500)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000100)="7fd9518aa437728113b033", 0xb, 0x8, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f00000001c0)="c33f435dd3e43f993d2f9b2987d690", 0xf, 0x5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000240)="1eccabfeb345e5eae77df29b960d28ab3aaa7db01265efc1a8e8d5364c064e0f2195024a539e193a773a9547976fc865e9f675545ae14534fb6786802f4604edc4d7b9eeef6f9cd987e845240a4d004649d8f4f9abb04140e0d8da56ad6b49c6e4991044052029d427445c30613a9aa5ef97fd70fdc0565247669b4ed9def5d54baa083a4373d5593cfe8b2fc23840821b19d52f9f9b", 0x96, 0x6453, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8a, r4, &(0x7f0000000380)="c6a377fb20dd97d5cf7e38a5603f429b266cebb2130422050d22eee54db5c2341b873d7878988a247417836811158d08228f9288f3427f2ed4a7d466f6b5d25c073647cd1e81da5ca40731ee2223ca3df6c41d09501db8d8b0eaebdb57fc1f99bb8a1fad87793caed15dcc4e331818d9b88d64f7adaf2d8cd33e35333274910e0380683af79da5d7e0f2791063d5d5cf33efe0d2d71eaa6a0c567d88f8ab7edc36ef2d863f70a5408061c36d3f1010de29b64f277ae36cc350e7b4c9ccb576999a005cf7ae6170f0ca53196bd1bcad59a98be55fcd709273aa87b2cea11c7b109aa3cbb7978bb086c308f44d75fe214b13", 0xf1, 0x80000001, 0x0, 0x2, r5}]) clock_gettime(0x0, &(0x7f0000000000)) setitimer(0x2, &(0x7f0000000580)={{}, {0x77359400}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r9], 0x378}}, 0x0) 4.106413788s ago: executing program 3 (id=216): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000070000000100010009"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="000500974463"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000040)={0x0, 0xe}, 0x0, 0x0}) io_setup(0x8, &(0x7f00000000c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.071414026s ago: executing program 4 (id=217): syz_open_dev$tty1(0xc, 0x4, 0x1) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) 3.288313343s ago: executing program 0 (id=218): add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="100c0608266be7d06c91b62300e9", 0xe, 0xfffffffffffffffc) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) 3.22812847s ago: executing program 1 (id=219): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000000)) bind$inet(r5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r8 = socket$inet(0x2, 0x5, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(r8, 0x0) 3.227017585s ago: executing program 4 (id=220): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r1 = socket(0x1, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r6}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x7ffd, 0xc95a, 0xf, 0x0, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x8, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x9, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x3, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x80000133, 0x8004, 0xffffffff, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x40000310, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x10, 0x7, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0x4, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1001, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x10000002, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xad, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x0, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x5, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x1, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0xfffffffffffffee7) socket$unix(0x1, 0x5, 0x0) bind$ax25(r1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x9e1, 0x10, 0xfffffffe, 0x100000, 0xa, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x3ff, 0x1, 0xf005, 0x0, 0x8, 0x3, 0xb, 0x9, 0x100, 0x1003, 0x7, 0x7, 0x5, 0x1, 0xb0c4, 0x7db, 0x8, 0x400007, 0x1]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 2.118080035s ago: executing program 1 (id=221): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xe803}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x12, 0x40, 0x1, 0x2, 0x7, 0x3}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1.806755236s ago: executing program 1 (id=222): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x10) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x2, r1, 0x0, 0x0, 0xfffffffc}]) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000200)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x6b]}}]}) 1.432083701s ago: executing program 4 (id=223): accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000200)=0x1c, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x0, 0x518c, 0xb49, 0x9, 0x47, 0x0, 0x4}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_route(0x10, 0x3, 0x0) 1.322048227s ago: executing program 1 (id=224): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket(0x2c, 0x3, 0x800005) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, 0x0, 0xa000000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x8000, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x10, @empty}, 0x1c, 0x0}}], 0x1, 0x20000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0) 447.841234ms ago: executing program 3 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x9eff, 0x2004c810}, 0x0) 285.265839ms ago: executing program 2 (id=226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x8100000, 0x0, 0x4000}, 0x48) 275.52336ms ago: executing program 0 (id=227): syz_usb_connect(0x2, 0x48, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 0s ago: executing program 1 (id=228): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x20000894) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x164) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0), 0xb6de53add2db1a94, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES64=r4, @ANYBLOB="ac5a8ca004bf39d707ae74fb0ae68a873ed4cee0d95efb58b0faac71886aba17417e5990f6e4f0a68eca909aed0a06108f34452152ac20a88f65e64b776714e612817db8712a90be033c85092569ab439f1089a42ae04b3ba86577c187765ea8fee216bd062612b5bb0c3d86fc18b320c4be7b1f06", @ANYRESOCT=r2]) setsockopt(r5, 0x6e6, 0x2, &(0x7f0000000100)="d5b6bb93ca711d634e39b25cb90e8248d403b6a740e6e4aebf19c484614f6cbe9bce680f5afd036be4f0f2761d97a29fd017e4ef363f3647998ee2", 0x3b) r6 = syz_clone(0x814100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f00000003c0)={&(0x7f0000000180)=""/108, 0xffffffffffffff41}) mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000003) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x0, 0x1, 0x1, 0x3}}, 0x26) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000840)={0x80}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 55.647232][ T30] audit: type=1400 audit(1758653878.261:62): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.650452][ T5830] cgroup: Unknown subsys name 'net' [ 55.670991][ T30] audit: type=1400 audit(1758653878.261:63): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.698742][ T30] audit: type=1400 audit(1758653878.291:64): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.814395][ T5830] cgroup: Unknown subsys name 'cpuset' [ 55.822004][ T5830] cgroup: Unknown subsys name 'rlimit' [ 55.949166][ T30] audit: type=1400 audit(1758653878.561:65): avc: denied { setattr } for pid=5830 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.972761][ T30] audit: type=1400 audit(1758653878.561:66): avc: denied { create } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 56.008425][ T30] audit: type=1400 audit(1758653878.561:67): avc: denied { write } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.029621][ T30] audit: type=1400 audit(1758653878.561:68): avc: denied { read } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.049012][ T5834] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 56.050513][ T30] audit: type=1400 audit(1758653878.591:69): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.083618][ T30] audit: type=1400 audit(1758653878.591:70): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.107577][ T30] audit: type=1400 audit(1758653878.611:71): avc: denied { read } for pid=5514 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 56.986452][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.961715][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 60.961729][ T30] audit: type=1400 audit(1758653883.551:78): avc: denied { create } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.043898][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.052171][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.059688][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.059694][ T30] audit: type=1400 audit(1758653883.561:79): avc: denied { read write } for pid=5842 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.098674][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.108381][ T30] audit: type=1400 audit(1758653883.561:80): avc: denied { open } for pid=5842 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.133053][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.140840][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.148217][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.156212][ T30] audit: type=1400 audit(1758653883.581:81): avc: denied { ioctl } for pid=5842 comm="syz-executor" path="socket:[5200]" dev="sockfs" ino=5200 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.182032][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.190075][ T5170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.198038][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.201732][ T30] audit: type=1400 audit(1758653883.811:82): avc: denied { read } for pid=5842 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.229205][ T5170] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.238146][ T5170] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.245759][ T5170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.253655][ T5170] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.261381][ T5170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.268685][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.278256][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.287417][ T5170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.298476][ T30] audit: type=1400 audit(1758653883.811:83): avc: denied { open } for pid=5842 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.298597][ T5170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.342815][ T5170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.374232][ T30] audit: type=1400 audit(1758653883.811:84): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.397639][ T5170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.406257][ T5170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.421811][ T5170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.431461][ T5170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.439001][ T5170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.631976][ T30] audit: type=1400 audit(1758653884.241:85): avc: denied { module_request } for pid=5846 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.713487][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 61.812973][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 61.934878][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 61.950788][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 61.961243][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.968396][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.975982][ T5846] bridge_slave_0: entered allmulticast mode [ 61.983382][ T5846] bridge_slave_0: entered promiscuous mode [ 61.997538][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 62.017969][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.025182][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.032367][ T5846] bridge_slave_1: entered allmulticast mode [ 62.039251][ T5846] bridge_slave_1: entered promiscuous mode [ 62.103108][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.114676][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.154685][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.161833][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.168976][ T5842] bridge_slave_0: entered allmulticast mode [ 62.176794][ T5842] bridge_slave_0: entered promiscuous mode [ 62.204473][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.211570][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.219206][ T5842] bridge_slave_1: entered allmulticast mode [ 62.225995][ T5842] bridge_slave_1: entered promiscuous mode [ 62.246785][ T5846] team0: Port device team_slave_0 added [ 62.254931][ T5846] team0: Port device team_slave_1 added [ 62.306862][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.315772][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.322937][ T5851] bridge_slave_0: entered allmulticast mode [ 62.329523][ T5851] bridge_slave_0: entered promiscuous mode [ 62.337347][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.344484][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.351567][ T5851] bridge_slave_1: entered allmulticast mode [ 62.358498][ T5851] bridge_slave_1: entered promiscuous mode [ 62.366393][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.383334][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.390417][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.397652][ T5853] bridge_slave_0: entered allmulticast mode [ 62.404935][ T5853] bridge_slave_0: entered promiscuous mode [ 62.436177][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.445378][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.453219][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.460300][ T5853] bridge_slave_1: entered allmulticast mode [ 62.467215][ T5853] bridge_slave_1: entered promiscuous mode [ 62.474094][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.481158][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.488324][ T5859] bridge_slave_0: entered allmulticast mode [ 62.495747][ T5859] bridge_slave_0: entered promiscuous mode [ 62.503145][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.510063][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.536155][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.549003][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.555993][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.582120][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.623471][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.630601][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.638128][ T5859] bridge_slave_1: entered allmulticast mode [ 62.645149][ T5859] bridge_slave_1: entered promiscuous mode [ 62.657825][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.668666][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.678818][ T5842] team0: Port device team_slave_0 added [ 62.686764][ T5842] team0: Port device team_slave_1 added [ 62.734865][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.746727][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.767003][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.816139][ T5853] team0: Port device team_slave_0 added [ 62.824644][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.835423][ T5851] team0: Port device team_slave_0 added [ 62.848540][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.855655][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.882127][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.896440][ T5846] hsr_slave_0: entered promiscuous mode [ 62.902656][ T5846] hsr_slave_1: entered promiscuous mode [ 62.909848][ T5853] team0: Port device team_slave_1 added [ 62.916796][ T5851] team0: Port device team_slave_1 added [ 62.937928][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.945103][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.971479][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.998955][ T5859] team0: Port device team_slave_0 added [ 63.025192][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.032227][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.058637][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.071294][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.078240][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.104200][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.116018][ T5859] team0: Port device team_slave_1 added [ 63.137327][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.144290][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.170435][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.187282][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.194314][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.220326][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.235335][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.242380][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.268291][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.274194][ T5849] Bluetooth: hci0: command tx timeout [ 63.278935][ T5170] Bluetooth: hci1: command tx timeout [ 63.294900][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.301911][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.328010][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.351775][ T5170] Bluetooth: hci2: command tx timeout [ 63.390535][ T5842] hsr_slave_0: entered promiscuous mode [ 63.397277][ T5842] hsr_slave_1: entered promiscuous mode [ 63.403402][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 63.409145][ T5842] Cannot create hsr debugfs directory [ 63.431816][ T5170] Bluetooth: hci3: command tx timeout [ 63.480930][ T5853] hsr_slave_0: entered promiscuous mode [ 63.486966][ T5853] hsr_slave_1: entered promiscuous mode [ 63.492938][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 63.498647][ T5853] Cannot create hsr debugfs directory [ 63.511812][ T5170] Bluetooth: hci4: command tx timeout [ 63.526503][ T5859] hsr_slave_0: entered promiscuous mode [ 63.532913][ T5859] hsr_slave_1: entered promiscuous mode [ 63.538775][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 63.544563][ T5859] Cannot create hsr debugfs directory [ 63.554099][ T5851] hsr_slave_0: entered promiscuous mode [ 63.560083][ T5851] hsr_slave_1: entered promiscuous mode [ 63.566303][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 63.572231][ T5851] Cannot create hsr debugfs directory [ 63.819528][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.858385][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.886035][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.896608][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.959537][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.969513][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.983134][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.993189][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.062327][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.084130][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.098512][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.107725][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.170310][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.179447][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.191612][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.202127][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.249414][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.315184][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.325036][ T5859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.343348][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.350431][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.359840][ T5859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.369543][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.387868][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.395002][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.407491][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.414605][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.468629][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.493918][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.501011][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.528929][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.536049][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.574350][ T30] audit: type=1400 audit(1758653887.181:86): avc: denied { sys_module } for pid=5846 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.600053][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.648977][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.692237][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.725251][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.732393][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.748964][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.765176][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.785618][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.792744][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.844126][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.851212][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.893137][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.900223][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.928172][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.947553][ T5846] veth0_vlan: entered promiscuous mode [ 64.959729][ T5846] veth1_vlan: entered promiscuous mode [ 64.978540][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.996841][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.003915][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.024457][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.031508][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.057365][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.067862][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.091101][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.217127][ T5846] veth0_macvtap: entered promiscuous mode [ 65.240227][ T5846] veth1_macvtap: entered promiscuous mode [ 65.265050][ T5853] veth0_vlan: entered promiscuous mode [ 65.287255][ T5853] veth1_vlan: entered promiscuous mode [ 65.300911][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.338258][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.352383][ T5170] Bluetooth: hci0: command tx timeout [ 65.357805][ T5170] Bluetooth: hci1: command tx timeout [ 65.393050][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.432368][ T5170] Bluetooth: hci2: command tx timeout [ 65.439520][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.455131][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.485221][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.500191][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.510778][ T5853] veth0_macvtap: entered promiscuous mode [ 65.516694][ T5170] Bluetooth: hci3: command tx timeout [ 65.545963][ T5853] veth1_macvtap: entered promiscuous mode [ 65.557717][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.579907][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.593318][ T5170] Bluetooth: hci4: command tx timeout [ 65.624241][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.664663][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.693725][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.706432][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.728334][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.738543][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.765243][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.776678][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.788500][ T5842] veth0_vlan: entered promiscuous mode [ 65.804877][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.819337][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.844654][ T30] audit: type=1400 audit(1758653888.461:87): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/root/syzkaller.rgqeL0/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.874736][ T5842] veth1_vlan: entered promiscuous mode [ 65.887498][ T5851] veth0_vlan: entered promiscuous mode [ 65.921623][ T5851] veth1_vlan: entered promiscuous mode [ 65.962274][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.968208][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.996974][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.021384][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 66.021397][ T30] audit: type=1400 audit(1758653888.631:99): avc: denied { read write } for pid=5846 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.064186][ T5859] veth0_vlan: entered promiscuous mode [ 66.069728][ T30] audit: type=1400 audit(1758653888.641:100): avc: denied { open } for pid=5846 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.099031][ T30] audit: type=1400 audit(1758653888.641:101): avc: denied { ioctl } for pid=5846 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.104445][ T5842] veth0_macvtap: entered promiscuous mode [ 66.133675][ T30] audit: type=1400 audit(1758653888.681:102): avc: denied { read write } for pid=5953 comm="syz.0.1" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.137973][ T5842] veth1_macvtap: entered promiscuous mode [ 66.162863][ T30] audit: type=1400 audit(1758653888.681:103): avc: denied { open } for pid=5953 comm="syz.0.1" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.179599][ T5851] veth0_macvtap: entered promiscuous mode [ 66.194681][ T30] audit: type=1400 audit(1758653888.681:104): avc: denied { ioctl } for pid=5953 comm="syz.0.1" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.203220][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.232943][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.243468][ T5859] veth1_vlan: entered promiscuous mode [ 66.269110][ T5851] veth1_macvtap: entered promiscuous mode [ 66.318630][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.322319][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.337284][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.355901][ T30] audit: type=1400 audit(1758653888.971:105): avc: denied { create } for pid=5955 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.356797][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.376631][ T30] audit: type=1400 audit(1758653888.991:106): avc: denied { ioctl } for pid=5955 comm="syz.3.4" path="socket:[8217]" dev="sockfs" ino=8217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.388480][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.417906][ T30] audit: type=1400 audit(1758653888.991:107): avc: denied { write } for pid=5955 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.444351][ T5859] veth0_macvtap: entered promiscuous mode [ 66.469130][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.480081][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.497911][ T5859] veth1_macvtap: entered promiscuous mode [ 66.504465][ T30] audit: type=1400 audit(1758653889.111:108): avc: denied { prog_load } for pid=5957 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.515428][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.534122][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.542898][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 66.542939][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.571559][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.582449][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.590607][ T10] usb 1-1: Product: syz [ 66.595620][ T10] usb 1-1: Manufacturer: syz [ 66.600483][ T10] usb 1-1: SerialNumber: syz [ 66.650192][ T10] cdc_mbim 1-1:1.0: skipping garbage [ 66.651197][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.668527][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.724645][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.756794][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.924205][ T5954] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.947384][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.981435][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.993222][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.003620][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.041623][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.066176][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.086355][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.096882][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.105301][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.130900][ T5963] tmpfs: Bad value for 'mpol' [ 67.131856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.151888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.161875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.202880][ T5963] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 67.213529][ T5963] qnx6: wrong signature (magic) in superblock #1. [ 67.219928][ T5963] qnx6: unable to read the first superblock [ 67.258210][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.310489][ T4540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.322764][ T4540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.481932][ T5170] Bluetooth: hci1: command tx timeout [ 67.497780][ T5849] Bluetooth: hci0: command tx timeout [ 67.512322][ T5170] Bluetooth: hci2: command tx timeout [ 67.541471][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.937680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.946258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.956403][ T5849] Bluetooth: hci4: command tx timeout [ 67.961821][ T5170] Bluetooth: hci3: command tx timeout [ 67.981926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.990330][ T5972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 67.997977][ T10] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 68.007443][ T10] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 68.013272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.016357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.031041][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.051819][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.098262][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.130964][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.164793][ T10] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 68.169473][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.188887][ T10] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 68.213225][ T10] wwan wwan0: port wwan0mbim0 attached [ 68.262601][ T10] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, d6:c7:1a:91:d3:12 [ 68.343790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.824664][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.163700][ T5911] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 69.166973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.172692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.208997][ T5911] usb 2-1: config 0 has no interface number 1 [ 69.234105][ T5911] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 69.260639][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.294049][ T5911] usb 2-1: config 0 descriptor?? [ 69.452140][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.518608][ T5849] Bluetooth: hci0: command tx timeout [ 69.525210][ T5170] Bluetooth: hci1: command tx timeout [ 69.606672][ T5170] Bluetooth: hci2: command tx timeout [ 69.616115][ T9] usb 5-1: config 9 has an invalid interface number: 62 but max is 2 [ 69.630815][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.641872][ T24] usb 1-1: USB disconnect, device number 2 [ 69.648705][ T24] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 69.662377][ T9] usb 5-1: config 9 has an invalid interface number: 190 but max is 2 [ 69.693513][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.710516][ T9] usb 5-1: config 9 has an invalid interface number: 120 but max is 2 [ 69.789473][ T9] usb 5-1: config 9 has no interface number 0 [ 69.832817][ T9] usb 5-1: config 9 has no interface number 1 [ 69.834416][ T24] wwan wwan0: port wwan0mbim0 disconnected [ 69.850143][ T9] usb 5-1: config 9 has no interface number 2 [ 69.869404][ T9] usb 5-1: config 9 interface 62 altsetting 60 bulk endpoint 0xC has invalid maxpacket 32 [ 69.882673][ T5911] usb 2-1: USB disconnect, device number 2 [ 69.908495][ T9] usb 5-1: config 9 interface 62 altsetting 60 bulk endpoint 0xE has invalid maxpacket 8 [ 69.969169][ T9] usb 5-1: config 9 interface 62 altsetting 60 endpoint 0x8 has invalid wMaxPacketSize 0 [ 69.992503][ T5170] Bluetooth: hci3: command tx timeout [ 69.997919][ T5170] Bluetooth: hci4: command tx timeout [ 70.060508][ T9] usb 5-1: config 9 interface 62 altsetting 60 bulk endpoint 0x3 has invalid maxpacket 64 [ 70.504106][ T9] usb 5-1: config 9 interface 62 altsetting 60 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 70.530619][ T9] usb 5-1: config 9 interface 62 altsetting 60 has a duplicate endpoint with address 0x1, skipping [ 70.618717][ T9] usb 5-1: config 9 interface 62 altsetting 60 has a duplicate endpoint with address 0x3, skipping [ 70.660957][ T9] usb 5-1: config 9 interface 190 altsetting 91 has a duplicate endpoint with address 0x5, skipping [ 70.773651][ T9] usb 5-1: config 9 interface 190 altsetting 91 has a duplicate endpoint with address 0xA, skipping [ 70.789051][ T9] usb 5-1: config 9 interface 190 altsetting 91 has a duplicate endpoint with address 0x3, skipping [ 70.804454][ T9] usb 5-1: config 9 interface 190 altsetting 91 has a duplicate endpoint with address 0xF, skipping [ 70.827375][ T9] usb 5-1: config 9 interface 120 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 70.870177][ T9] usb 5-1: config 9 interface 120 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 70.924442][ T9] usb 5-1: config 9 interface 120 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 70.945604][ T9] usb 5-1: config 9 interface 120 altsetting 3 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 70.966953][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.972001][ T9] usb 5-1: config 9 interface 120 altsetting 3 endpoint 0x84 has invalid maxpacket 45976, setting to 1024 [ 70.979563][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.018439][ T9] usb 5-1: config 9 interface 120 altsetting 3 bulk endpoint 0x84 has invalid maxpacket 1024 [ 71.040331][ T6020] capability: warning: `syz.2.16' uses 32-bit capabilities (legacy support in use) [ 71.062638][ T9] usb 5-1: config 9 interface 120 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 71.081153][ T9] usb 5-1: config 9 interface 120 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 71.095760][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.147676][ T9] usb 5-1: config 9 interface 120 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 71.179649][ T9] usb 5-1: config 9 interface 120 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 71.207360][ T9] usb 5-1: config 9 interface 120 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 71.231901][ T9] usb 5-1: config 9 interface 120 altsetting 3 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 71.265774][ T9] usb 5-1: config 9 interface 62 has no altsetting 0 [ 71.287192][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 71.302040][ T9] usb 5-1: config 9 interface 190 has no altsetting 0 [ 71.320296][ T5897] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 71.331422][ T9] usb 5-1: config 9 interface 120 has no altsetting 0 [ 71.341608][ T5897] usb 2-1: config 6 has no interface number 0 [ 71.357140][ T5897] usb 2-1: config 6 interface 200 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.385623][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=8066, bcdDevice= 8.0e [ 71.402984][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.422724][ T5897] usb 2-1: config 6 interface 200 has no altsetting 0 [ 71.440526][ T9] usb 5-1: Product: à ¾ [ 71.452653][ T9] usb 5-1: Manufacturer: ࡃ [ 71.457477][ T5897] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 71.471410][ T5897] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 71.490677][ T9] usb 5-1: SerialNumber: 刄㉳᫫歅䯱㦮᠇嵆꿛ä•êŸ¤ë­©æ¼¡åƒ·ë½‰è€Ÿí–žçšê«ˆâŠ…脭ᨻ锣ऋ쉳㮵᧫⦖꟩놵ᶽ綾캈㇩ꥃݕ䆤눯⤼ᑾ꽖ᇇ證⶗飙⡥鷕쾒ङ컜雗᳗ãµæ®âŒžé¢Šì¬„ë¡—íµë¤Šé¢†å»·ê¹”ä¥ã²€æ¡ºé¿›î¼Ÿì–ꡃ忉߳퀖ꀒè›â™ î¹­êº€ÂŽë…°ë¥€ê®‡à§‡á„µì„³æ¤ºê²¾æ†¬èƒµïµ¦î™¹è´³ë‹¥è¦‡ï›–沞总æ˜è¸žä‹¶ã¶µå±„囵순㱴⡘㚭뭹ٱïªå±¹î—˜ïª»æ®¤ [ 71.527551][ T5897] usb 2-1: Product: syz [ 71.532781][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 71.532794][ T30] audit: type=1400 audit(1758653894.141:158): avc: denied { ioctl } for pid=6010 comm="syz.0.15" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8732 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.532805][ T5897] usb 2-1: Manufacturer: syz [ 71.532825][ T5897] usb 2-1: SerialNumber: syz [ 71.615165][ T5985] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 71.663424][ T5985] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 71.691163][ T5985] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 71.714814][ T5985] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 71.741068][ T30] audit: type=1400 audit(1758653894.351:159): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 71.875363][ T30] audit: type=1400 audit(1758653894.491:160): avc: denied { create } for pid=6038 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.944432][ T5897] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 71.957805][ T30] audit: type=1400 audit(1758653894.511:161): avc: denied { getopt } for pid=6038 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.992683][ T9] cp210x 5-1:9.62: cp210x converter detected [ 72.005664][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 72.023161][ T9] cp210x 5-1:9.62: failed to get vendor val 0x370b size 1: -71 [ 72.054134][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 72.082360][ T30] audit: type=1400 audit(1758653894.701:162): avc: denied { prog_run } for pid=6041 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.089318][ T9] cp210x 5-1:9.62: querying part number failed [ 72.117772][ T30] audit: type=1400 audit(1758653894.731:163): avc: denied { connect } for pid=6041 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.144528][ T5897] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 72.161618][ T30] audit: type=1400 audit(1758653894.731:164): avc: denied { write } for pid=6041 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.207667][ T30] audit: type=1400 audit(1758653894.751:165): avc: denied { block_suspend } for pid=6041 comm="syz.2.19" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.249178][ T5897] usb 2-1: media controller created [ 72.257447][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 72.351457][ T9] cp210x 5-1:9.190: cp210x converter detected [ 72.368330][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.379276][ T9] cp210x 5-1:9.190: failed to get vendor val 0x370b size 1: -71 [ 72.400822][ T9] cp210x 5-1:9.190: querying part number failed [ 72.437011][ T30] audit: type=1400 audit(1758653895.051:166): avc: denied { write } for pid=6046 comm="syz.2.20" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.441411][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 72.469311][ T9] usb 5-1: cp210x converter now attached to ttyUSB1 [ 72.479051][ T9] cp210x 5-1:9.120: cp210x converter detected [ 72.522161][ T9] cp210x 5-1:9.120: failed to get vendor val 0x370b size 1: -71 [ 72.583132][ T9] cp210x 5-1:9.120: querying part number failed [ 72.592014][ T30] audit: type=1400 audit(1758653895.051:167): avc: denied { open } for pid=6046 comm="syz.2.20" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.628752][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 72.653555][ T5897] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 72.664029][ T9] usb 5-1: cp210x converter now attached to ttyUSB2 [ 73.016955][ T5897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 73.046852][ T9] usb 5-1: USB disconnect, device number 2 [ 73.143857][ T5897] dvb-usb: schedule remote query interval to 150 msecs. [ 73.166851][ T5897] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 73.202518][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 73.277588][ T5897] usb 2-1: USB disconnect, device number 3 [ 73.285012][ T9] cp210x 5-1:9.62: device disconnected [ 73.337353][ T9] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 73.360332][ T9] cp210x 5-1:9.190: device disconnected [ 73.382693][ T9] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 73.398309][ T5897] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 73.408654][ T9] cp210x 5-1:9.120: device disconnected [ 74.141765][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.382158][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 74.432224][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 74.441363][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.449890][ T5966] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.487800][ T43] usb 4-1: Product: syz [ 74.496185][ T43] usb 4-1: Manufacturer: syz [ 74.511060][ T43] usb 4-1: SerialNumber: syz [ 74.588307][ T43] usb 4-1: config 0 descriptor?? [ 74.635965][ T5966] usb 5-1: unable to get BOS descriptor or descriptor too short [ 74.858536][ T5966] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 74.866878][ T5966] usb 5-1: config 6 has no interface number 0 [ 74.874220][ T5966] usb 5-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 75.062596][ T5966] usb 5-1: config 6 interface 200 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.297689][ T43] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 75.318645][ T5966] usb 5-1: config 6 interface 200 has no altsetting 0 [ 75.326442][ T43] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 75.338705][ T5966] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 75.348181][ T5966] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 75.357396][ T43] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 75.368478][ T5966] usb 5-1: Product: syz [ 75.408592][ T5966] usb 5-1: Manufacturer: syz [ 75.430083][ T5966] usb 5-1: SerialNumber: syz [ 75.768203][ T5966] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 75.791031][ T6104] mmap: syz.0.32 (6104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.029099][ T5966] dvb-usb: bulk message failed: -90 (3/0) [ 76.053794][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.088816][ T5966] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 76.147569][ T5966] usb 5-1: media controller created [ 76.349282][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.508240][ T5966] dvb-usb: bulk message failed: -90 (6/0) [ 76.568593][ T5966] dvb-usb: bulk message failed: -90 (6/0) [ 76.614256][ T5966] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 76.645946][ T5966] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 76.704428][ T5966] dvb-usb: schedule remote query interval to 150 msecs. [ 76.738006][ T5966] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 76.854393][ T5966] usb 5-1: USB disconnect, device number 3 [ 77.110980][ T5966] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 77.499920][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 77.506509][ T30] audit: type=1400 audit(1758653900.111:188): avc: denied { watch } for pid=6111 comm="syz.3.35" path="/8/control" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.549006][ T30] audit: type=1400 audit(1758653900.111:189): avc: denied { read } for pid=6111 comm="syz.3.35" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.584683][ T30] audit: type=1400 audit(1758653900.111:190): avc: denied { open } for pid=6111 comm="syz.3.35" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.631043][ T6119] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.640023][ T6119] overlayfs: missing 'lowerdir' [ 78.732165][ T6124] fuse: Unknown parameter ']å·¨§øþÄP“G0xffffffffffffffff' [ 78.794694][ T6125] fuse: Bad value for 'fd' [ 79.048846][ T6109] tipc: Started in network mode [ 79.051427][ T6047] Set syz1 is full, maxelem 65536 reached [ 79.062519][ T6109] tipc: Node identity 4, cluster identity 4711 [ 79.069665][ T6109] tipc: Node number set to 4 [ 79.118051][ T6116] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.136532][ T6116] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.286341][ T6116] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.329180][ T6116] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.339529][ T6116] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.347484][ T6116] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.358161][ T6116] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.364903][ T6116] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.377384][ T30] audit: type=1400 audit(1758653901.991:191): avc: denied { create } for pid=6126 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.398745][ T30] audit: type=1400 audit(1758653901.991:192): avc: denied { ioctl } for pid=6126 comm="syz.0.39" path="socket:[8845]" dev="sockfs" ino=8845 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.428139][ T6116] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.480736][ T30] audit: type=1400 audit(1758653902.011:193): avc: denied { ioctl } for pid=6133 comm="syz.1.38" path="socket:[8846]" dev="sockfs" ino=8846 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.507791][ T6116] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.518741][ T6116] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.527108][ T6116] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.536188][ T6116] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.542433][ T6116] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 79.549752][ T6116] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 79.671933][ T30] audit: type=1400 audit(1758653902.281:194): avc: denied { ioctl } for pid=6141 comm="syz.3.41" path="socket:[8862]" dev="sockfs" ino=8862 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.743292][ T30] audit: type=1400 audit(1758653902.281:195): avc: denied { create } for pid=6141 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.882195][ T30] audit: type=1400 audit(1758653902.281:196): avc: denied { setopt } for pid=6141 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.904096][ T30] audit: type=1400 audit(1758653902.291:197): avc: denied { write } for pid=6141 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.128039][ T6152] binder: BINDER_SET_CONTEXT_MGR already set [ 80.135375][ T6152] binder: 6151:6152 ioctl 4018620d 200000004a80 returned -16 [ 80.178792][ T5966] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.343499][ T5966] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.358189][ T5966] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 80.379135][ T5966] usb 1-1: config 6 has no interface number 0 [ 80.410377][ T5966] usb 1-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 80.436840][ T5966] usb 1-1: config 6 interface 200 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 80.457262][ T5966] usb 1-1: config 6 interface 200 has no altsetting 0 [ 80.576915][ T5966] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 80.586629][ T5966] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 80.597896][ T5966] usb 1-1: Product: syz [ 80.609502][ T5966] usb 1-1: Manufacturer: syz [ 80.620383][ T5966] usb 1-1: SerialNumber: syz [ 81.155677][ T5966] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 81.197545][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.249269][ T942] cfg80211: failed to load regulatory.db [ 81.259269][ T5966] dvb-usb: bulk message failed: -90 (3/0) [ 81.471847][ T5170] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.487007][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.503689][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 81.513083][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.632339][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 81.659815][ T5966] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 81.680727][ T5966] usb 1-1: media controller created [ 81.749553][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.783996][ T5966] dvb-usb: bulk message failed: -90 (6/0) [ 81.815901][ T5966] dvb-usb: bulk message failed: -90 (6/0) [ 81.920149][ T5966] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 82.044774][ T5966] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 82.091860][ T5966] dvb-usb: schedule remote query interval to 150 msecs. [ 82.107970][ T5966] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 82.262738][ T5918] dvb-usb: bulk message failed: -90 (1/0) [ 82.350607][ T5966] usb 1-1: USB disconnect, device number 3 [ 82.356576][ T5918] dvb-usb: error while querying for an remote control event. [ 82.590809][ T5966] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 83.360577][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.511779][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.517800][ T5170] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.526146][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 83.526155][ T30] audit: type=1400 audit(1758653906.141:215): avc: denied { read write } for pid=6182 comm="syz.3.51" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.559913][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 83.570120][ T5930] hid-generic 0000:0003:0001.0001: unknown main item tag 0x0 [ 83.591828][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.629782][ T5930] hid-generic 0000:0003:0001.0001: unknown main item tag 0x0 [ 83.641186][ T6183] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 83.659954][ T6186] batman_adv: batadv0: Adding interface: dummy0 [ 83.667081][ T6186] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.692497][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 83.699992][ T6186] batman_adv: batadv0: Interface activated: dummy0 [ 83.733931][ T30] audit: type=1400 audit(1758653906.171:216): avc: denied { open } for pid=6182 comm="syz.3.51" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.741596][ T6183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.758970][ T30] audit: type=1400 audit(1758653906.271:217): avc: denied { create } for pid=6185 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.767996][ T5930] hid-generic 0000:0003:0001.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 83.785712][ T30] audit: type=1400 audit(1758653906.351:218): avc: denied { create } for pid=6185 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.832071][ T30] audit: type=1400 audit(1758653906.431:219): avc: denied { ioctl } for pid=6185 comm="syz.4.52" path="socket:[8997]" dev="sockfs" ino=8997 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.885989][ T6186] batadv0: mtu less than device minimum [ 83.888048][ T6191] netlink: 18128 bytes leftover after parsing attributes in process `syz.0.53'. [ 83.896995][ T6186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.911610][ T6186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.922469][ T6186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.933270][ T6186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.944093][ T6186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.954906][ T6186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.008879][ T6183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.51'. [ 84.064506][ T30] audit: type=1400 audit(1758653906.681:220): avc: denied { view } for pid=6190 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 84.071415][ T6189] fido_id[6189]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.119838][ T5966] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 84.157998][ T30] audit: type=1400 audit(1758653906.771:221): avc: denied { bind } for pid=6190 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.177563][ T5966] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.198403][ T30] audit: type=1400 audit(1758653906.771:222): avc: denied { node_bind } for pid=6190 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 84.274052][ T30] audit: type=1400 audit(1758653906.801:223): avc: denied { mount } for pid=6190 comm="syz.0.53" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 84.299845][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.317585][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.354151][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.354227][ T6194] Zero length message leads to an empty skb [ 84.378817][ T6195] fido_id[6195]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.394123][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.403131][ T30] audit: type=1400 audit(1758653906.941:224): avc: denied { read } for pid=6182 comm="syz.3.51" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.004792][ T6201] ceph: No mds server is up or the cluster is laggy [ 85.013006][ T5966] libceph: connect (1)[c::]:6789 error -101 [ 85.019303][ T5966] libceph: mon0 (1)[c::]:6789 connect error [ 85.356639][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.57'. [ 85.541438][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.591947][ T5170] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.604073][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.652230][ T6216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.58'. [ 85.671778][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.751979][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 86.231807][ T5930] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.888505][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 86.944859][ T5930] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 87.190004][ T5930] usb 2-1: config 6 has no interface number 0 [ 87.196337][ T5930] usb 2-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 87.260285][ T5930] usb 2-1: config 6 interface 200 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.595382][ T5930] usb 2-1: config 6 interface 200 has no altsetting 0 [ 87.604615][ T5930] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 87.613929][ T5930] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 87.624022][ T5930] usb 2-1: Product: syz [ 87.631859][ T5930] usb 2-1: Manufacturer: syz [ 87.644281][ T5930] usb 2-1: SerialNumber: syz [ 87.925627][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.015026][ T5930] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 88.015068][ T5930] dvb-usb: bulk message failed: -90 (3/0) [ 88.016329][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.016754][ T5930] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 88.016780][ T5930] usb 2-1: media controller created [ 88.024268][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.030191][ T5930] dvb-usb: bulk message failed: -90 (6/0) [ 88.030291][ T5930] dvb-usb: bulk message failed: -90 (6/0) [ 88.030347][ T5930] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 88.040789][ T5930] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 88.043998][ T5930] dvb-usb: schedule remote query interval to 150 msecs. [ 88.044010][ T5930] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 88.047459][ T5930] usb 2-1: USB disconnect, device number 4 [ 88.093500][ T24] usb 1-1: config 27 has an invalid descriptor of length 96, skipping remainder of the config [ 88.093517][ T24] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 88.093536][ T24] usb 1-1: New USB device found, idVendor=b082, idProduct=0014, bcdDevice=bb.9d [ 88.093548][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.129248][ T5930] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 88.924147][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 88.924165][ T30] audit: type=1400 audit(1758653911.061:240): avc: denied { read } for pid=6242 comm="syz.3.66" path="socket:[9079]" dev="sockfs" ino=9079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.094950][ T24] usb 1-1: string descriptor 0 read error: -71 [ 89.329967][ T24] usb 1-1: USB disconnect, device number 4 [ 89.394914][ T6253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7953 sclass=netlink_route_socket pid=6253 comm=syz.1.71 [ 89.579355][ T6261] syz_tun: entered allmulticast mode [ 89.605974][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 89.723209][ T24] libceph: connect (1)[c::]:6789 error -101 [ 89.735057][ T6262] ceph: No mds server is up or the cluster is laggy [ 89.843916][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 90.059161][ T6261] syz_tun (unregistering): left allmulticast mode [ 90.078138][ T30] audit: type=1400 audit(1758653912.691:241): avc: denied { create } for pid=6272 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 90.242328][ T30] audit: type=1400 audit(1758653912.701:242): avc: denied { setopt } for pid=6272 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 90.263616][ T30] audit: type=1400 audit(1758653912.701:243): avc: denied { read } for pid=6272 comm="syz.2.75" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.286625][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.301033][ T30] audit: type=1400 audit(1758653912.701:244): avc: denied { open } for pid=6272 comm="syz.2.75" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.347999][ T30] audit: type=1400 audit(1758653912.701:245): avc: denied { ioctl } for pid=6272 comm="syz.2.75" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.383457][ T30] audit: type=1400 audit(1758653912.991:246): avc: denied { write } for pid=6264 comm="syz.0.73" path="socket:[9175]" dev="sockfs" ino=9175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.439156][ T30] audit: type=1400 audit(1758653913.051:247): avc: denied { read write } for pid=6267 comm="syz.3.74" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.464809][ T30] audit: type=1400 audit(1758653913.051:248): avc: denied { open } for pid=6267 comm="syz.3.74" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.722305][ T30] audit: type=1400 audit(1758653913.051:249): avc: denied { ioctl } for pid=6267 comm="syz.3.74" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.881126][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.76'. [ 91.391769][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.572072][ T5930] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.581727][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 91.610878][ T24] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 91.640281][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.678583][ T24] usb 3-1: config 0 descriptor?? [ 91.704582][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 91.726300][ T6291] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 91.735010][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.756237][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.802512][ T5930] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 91.872424][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.932281][ T6283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.951394][ T6283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.953558][ T5930] usb 2-1: config 0 descriptor?? [ 92.189996][ T6283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.703186][ T6305] team0: Device gtp0 is of different type [ 93.083903][ T6283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.092851][ T24] gspca_vc032x: reg_r err -110 [ 93.101038][ T5966] libceph: connect (1)[c::]:6789 error -101 [ 93.118470][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.129013][ T5966] libceph: mon0 (1)[c::]:6789 connect error [ 93.138002][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.150134][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.156206][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.161553][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.167326][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.172879][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.178325][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.183717][ T6308] ceph: No mds server is up or the cluster is laggy [ 93.187999][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.195952][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.205222][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.220625][ T6283] netlink: 'syz.2.77': attribute type 4 has an invalid length. [ 93.238876][ T6294] net_ratelimit: 13 callbacks suppressed [ 93.238892][ T6294] sctp: failed to load transform for md5: -2 [ 93.317860][ T5930] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 93.332021][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.338235][ T5930] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 93.345321][ T5930] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 93.353625][ T5930] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 93.360642][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.361315][ T5930] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 93.370114][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.381247][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.385638][ T5930] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 93.388347][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.401795][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.404086][ T5930] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 93.407094][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.407105][ T24] gspca_vc032x: Unknown sensor... [ 93.426485][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 93.439192][ T5930] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 93.465118][ T24] usb 3-1: USB disconnect, device number 2 [ 93.534977][ T5930] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 93.671789][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.834956][ T6325] overlayfs: failed to resolve './file1': -2 [ 93.843134][ T6325] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.85'. [ 93.903749][ T6327] FAULT_INJECTION: forcing a failure. [ 93.903749][ T6327] name failslab, interval 1, probability 0, space 0, times 1 [ 93.917186][ T6327] CPU: 1 UID: 0 PID: 6327 Comm: syz.4.86 Not tainted syzkaller #0 PREEMPT(full) [ 93.917210][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.917219][ T6327] Call Trace: [ 93.917224][ T6327] [ 93.917230][ T6327] dump_stack_lvl+0x16c/0x1f0 [ 93.917256][ T6327] should_fail_ex+0x512/0x640 [ 93.917277][ T6327] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 93.917298][ T6327] should_failslab+0xc2/0x120 [ 93.917316][ T6327] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 93.917332][ T6327] ? __alloc_skb+0x2b2/0x380 [ 93.917348][ T6327] __alloc_skb+0x2b2/0x380 [ 93.917360][ T6327] ? __pfx___alloc_skb+0x10/0x10 [ 93.917373][ T6327] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 93.917391][ T6327] netlink_alloc_large_skb+0x69/0x130 [ 93.917411][ T6327] netlink_sendmsg+0x6a1/0xdd0 [ 93.917437][ T6327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.917466][ T6327] ____sys_sendmsg+0xa95/0xc70 [ 93.917490][ T6327] ? copy_msghdr_from_user+0x10a/0x160 [ 93.917510][ T6327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.917543][ T6327] ___sys_sendmsg+0x134/0x1d0 [ 93.917565][ T6327] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.917613][ T6327] __sys_sendmsg+0x16d/0x220 [ 93.917628][ T6327] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.917650][ T6327] do_syscall_64+0xcd/0x4e0 [ 93.917665][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.917676][ T6327] RIP: 0033:0x7f6e72d8eec9 [ 93.917688][ T6327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.917704][ T6327] RSP: 002b:00007f6e73baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.917720][ T6327] RAX: ffffffffffffffda RBX: 00007f6e72fe5fa0 RCX: 00007f6e72d8eec9 [ 93.917730][ T6327] RDX: 0000000000010000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 93.917740][ T6327] RBP: 00007f6e73baf090 R08: 0000000000000000 R09: 0000000000000000 [ 93.917749][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.917758][ T6327] R13: 00007f6e72fe6038 R14: 00007f6e72fe5fa0 R15: 00007ffec4248668 [ 93.917773][ T6327] [ 94.395681][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 94.395696][ T30] audit: type=1400 audit(1758653917.011:257): avc: denied { write } for pid=6281 comm="syz.1.78" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.428103][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 94.567450][ T30] audit: type=1400 audit(1758653917.181:258): avc: denied { read write } for pid=6342 comm="syz.4.90" name="mouse0" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 94.683543][ T30] audit: type=1400 audit(1758653917.181:259): avc: denied { open } for pid=6342 comm="syz.4.90" path="/dev/input/mouse0" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 94.728873][ T30] audit: type=1400 audit(1758653917.331:260): avc: denied { ioctl } for pid=6337 comm="syz.3.89" path="socket:[9772]" dev="sockfs" ino=9772 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.753680][ T5930] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 94.916119][ T6347] serio: Serial port ptm0 [ 95.281140][ T30] audit: type=1400 audit(1758653917.331:261): avc: denied { bind } for pid=6337 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.306127][ T30] audit: type=1400 audit(1758653917.341:262): avc: denied { connect } for pid=6337 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.402114][ T30] audit: type=1400 audit(1758653917.341:263): avc: denied { write } for pid=6337 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.010680][ T30] audit: type=1400 audit(1758653918.621:264): avc: denied { getopt } for pid=6358 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.477511][ T9] usb 2-1: USB disconnect, device number 5 [ 96.897424][ T30] audit: type=1400 audit(1758653919.511:265): avc: denied { name_bind } for pid=6369 comm="syz.2.97" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 97.009384][ T6375] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[6375] [ 97.256168][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.422131][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 97.431325][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 97.450795][ T9] usb 3-1: config 0 has no interface number 0 [ 97.475619][ T9] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 97.484948][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.521815][ T9] usb 3-1: Product: syz [ 97.543619][ T9] usb 3-1: Manufacturer: syz [ 97.563790][ T9] usb 3-1: SerialNumber: syz [ 97.583310][ T9] usb 3-1: config 0 descriptor?? [ 97.594994][ T9] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 97.812167][ T30] audit: type=1400 audit(1758653920.421:266): avc: denied { execute } for pid=6369 comm="syz.2.97" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 97.903420][ T5930] usb 3-1: USB disconnect, device number 3 [ 98.207377][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.101'. [ 99.508063][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 99.508080][ T30] audit: type=1400 audit(1758653922.121:283): avc: denied { map } for pid=6404 comm="syz.2.106" path="socket:[10534]" dev="sockfs" ino=10534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 99.527611][ T6405] netfs: Couldn't get user pages (rc=-14) [ 99.609346][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.105'. [ 99.942141][ T30] audit: type=1400 audit(1758653922.121:284): avc: denied { mounton } for pid=6404 comm="syz.2.106" path="/23/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 99.977196][ T30] audit: type=1400 audit(1758653922.141:285): avc: denied { read write } for pid=6404 comm="syz.2.106" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.059761][ T30] audit: type=1400 audit(1758653922.141:286): avc: denied { open } for pid=6404 comm="syz.2.106" path="/23/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.128481][ T30] audit: type=1400 audit(1758653922.731:287): avc: denied { read write } for pid=6408 comm="syz.3.108" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.232533][ T30] audit: type=1400 audit(1758653922.731:288): avc: denied { open } for pid=6408 comm="syz.3.108" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.281798][ T30] audit: type=1400 audit(1758653922.731:289): avc: denied { ioctl } for pid=6408 comm="syz.3.108" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.337213][ T30] audit: type=1400 audit(1758653922.951:290): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 100.562686][ T30] audit: type=1400 audit(1758653923.171:291): avc: denied { write } for pid=6414 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.896877][ T6428] netlink: 64 bytes leftover after parsing attributes in process `syz.2.110'. [ 100.906119][ T6428] netlink: 64 bytes leftover after parsing attributes in process `syz.2.110'. [ 102.486217][ T30] audit: type=1400 audit(1758653925.101:292): avc: denied { write } for pid=6441 comm="syz.1.114" path="socket:[9937]" dev="sockfs" ino=9937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.212189][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 103.752067][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.921823][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 104.002946][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.017006][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.026699][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.038649][ T24] usb 1-1: Product: syz [ 104.042932][ T24] usb 1-1: Manufacturer: syz [ 104.047554][ T24] usb 1-1: SerialNumber: syz [ 104.055032][ T24] usb 1-1: config 0 descriptor?? [ 104.062973][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.072442][ T24] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 104.281767][ T5897] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.441850][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 104.448526][ T5897] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 104.460576][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.483706][ T5897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 104.500139][ T5897] pvrusb2: ********** [ 104.505342][ T5897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 104.515494][ T5897] pvrusb2: Important functionality might not be entirely working. [ 104.523589][ T5897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 104.537067][ T5897] pvrusb2: ********** [ 104.681926][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 104.762662][ T2336] pvrusb2: Invalid write control endpoint [ 104.868246][ T2336] pvrusb2: Invalid write control endpoint [ 104.881152][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 104.897422][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 104.906544][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 104.917348][ T2336] pvrusb2: Device being rendered inoperable [ 104.923667][ T6481] process 'syz.1.124' launched './file0' with NULL argv: empty string added [ 104.932446][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 104.932455][ T30] audit: type=1400 audit(1758653927.541:296): avc: denied { execute } for pid=6480 comm="syz.1.124" name="file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.961632][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 104.981052][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 105.111098][ T6471] pvrusb2: Killing an I2C write to 1 that is too large (desired=8192 limit=61) [ 105.121595][ T2336] pvrusb2: Attached sub-driver cx25840 [ 105.139066][ T24] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 105.167857][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 105.171734][ T24] em28xx 1-1:0.0: board has no eeprom [ 105.187211][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 105.204060][ T30] audit: type=1400 audit(1758653927.571:297): avc: denied { execute_no_trans } for pid=6480 comm="syz.1.124" path="/21/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.278901][ T6484] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.312972][ T24] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 105.321394][ T24] em28xx 1-1:0.0: dvb set to bulk mode. [ 105.353686][ T24] usb 1-1: USB disconnect, device number 5 [ 105.363233][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 105.372397][ T5966] em28xx 1-1:0.0: Binding DVB extension [ 105.399960][ T30] audit: type=1400 audit(1758653928.011:298): avc: denied { ioctl } for pid=6483 comm="syz.1.125" path="socket:[10713]" dev="sockfs" ino=10713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.589846][ T5966] em28xx 1-1:0.0: Registering input extension [ 105.599098][ T24] em28xx 1-1:0.0: Closing input extension [ 105.648566][ T24] em28xx 1-1:0.0: Freeing device [ 106.384412][ T30] audit: type=1400 audit(1758653929.001:299): avc: denied { read } for pid=6501 comm="syz.0.130" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.764338][ T30] audit: type=1400 audit(1758653929.021:300): avc: denied { create } for pid=6501 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 106.906513][ T30] audit: type=1400 audit(1758653929.521:301): avc: denied { name_bind } for pid=6507 comm="syz.1.131" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 107.216903][ T24] usb 3-1: USB disconnect, device number 4 [ 107.232135][ T5918] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.575396][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.586563][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.759087][ T6531] tipc: Enabled bearer , priority 10 [ 108.070509][ T5918] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 108.127492][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.196144][ T5918] usb 2-1: config 0 descriptor?? [ 108.759035][ T5918] aquacomputer_d5next 0003:0C70:F014.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.1-1/input0 [ 108.955099][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.979736][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.064902][ T5918] usb 2-1: USB disconnect, device number 6 [ 109.205841][ T30] audit: type=1400 audit(1758653931.821:302): avc: granted { setsecparam } for pid=6550 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 109.225759][ T5897] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 109.686841][ T30] audit: type=1400 audit(1758653931.821:303): avc: denied { create } for pid=6550 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.706420][ T30] audit: type=1400 audit(1758653931.831:304): avc: denied { setopt } for pid=6550 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.727618][ T30] audit: type=1400 audit(1758653931.831:305): avc: denied { create } for pid=6550 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 109.906558][ T6554] binder: 6551:6554 ioctl c0306201 200000000540 returned -22 [ 109.907218][ T5897] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 109.927953][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.943954][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 109.943968][ T30] audit: type=1400 audit(1758653932.561:329): avc: denied { read write } for pid=5842 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.955281][ T5897] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 109.994811][ T5897] usb 1-1: config 0 has no interface number 0 [ 110.000894][ T5897] usb 1-1: config 0 has no interface number 1 [ 110.046414][ T30] audit: type=1400 audit(1758653932.561:330): avc: denied { mount } for pid=6560 comm="syz.3.143" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 110.048448][ T5897] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 110.099743][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.129503][ T30] audit: type=1400 audit(1758653932.591:331): avc: denied { read write } for pid=5859 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.162965][ T5897] usb 1-1: config 0 descriptor?? [ 110.173645][ T5897] usb 1-1: unknown number of interfaces: 2 [ 110.244943][ T30] audit: type=1400 audit(1758653932.591:332): avc: denied { read write open } for pid=5859 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.383849][ T30] audit: type=1400 audit(1758653932.601:333): avc: denied { ioctl } for pid=5859 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.413528][ T30] audit: type=1400 audit(1758653932.601:334): avc: denied { read write open } for pid=5842 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.488186][ T6573] block nbd1: Attempted send on invalid socket [ 110.525153][ T6573] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.544757][ T30] audit: type=1400 audit(1758653932.601:335): avc: denied { ioctl } for pid=5842 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.621115][ T6573] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 110.646795][ T6576] sp0: Synchronizing with TNC [ 110.649497][ T30] audit: type=1400 audit(1758653932.631:336): avc: denied { prog_load } for pid=6551 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.765879][ T30] audit: type=1400 audit(1758653932.631:337): avc: denied { bpf } for pid=6551 comm="syz.1.141" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.810232][ T5851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.617055][ T24] libceph: connect (1)[c::]:6789 error -101 [ 111.679985][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 111.868332][ T9] usb 1-1: USB disconnect, device number 6 [ 112.022985][ T6584] ceph: No mds server is up or the cluster is laggy [ 112.060608][ T24] libceph: connect (1)[c::]:6789 error -101 [ 112.092102][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 112.415762][ T6597] FAULT_INJECTION: forcing a failure. [ 112.415762][ T6597] name failslab, interval 1, probability 0, space 0, times 0 [ 112.492242][ T6597] CPU: 0 UID: 0 PID: 6597 Comm: syz.2.151 Not tainted syzkaller #0 PREEMPT(full) [ 112.492266][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.492276][ T6597] Call Trace: [ 112.492281][ T6597] [ 112.492288][ T6597] dump_stack_lvl+0x16c/0x1f0 [ 112.492314][ T6597] should_fail_ex+0x512/0x640 [ 112.492335][ T6597] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 112.492363][ T6597] should_failslab+0xc2/0x120 [ 112.492383][ T6597] __kmalloc_cache_noprof+0x6a/0x3e0 [ 112.492408][ T6597] ? rtnl_newlink+0x11b/0x2000 [ 112.492432][ T6597] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.492452][ T6597] rtnl_newlink+0x11b/0x2000 [ 112.492480][ T6597] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.492499][ T6597] ? find_held_lock+0x2b/0x80 [ 112.492522][ T6597] ? avc_has_perm_noaudit+0x117/0x3b0 [ 112.492546][ T6597] ? avc_has_perm_noaudit+0x149/0x3b0 [ 112.492570][ T6597] ? __lock_acquire+0x62e/0x1ce0 [ 112.492608][ T6597] ? find_held_lock+0x2b/0x80 [ 112.492628][ T6597] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.492648][ T6597] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.492668][ T6597] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 112.492691][ T6597] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.492713][ T6597] rtnetlink_rcv_msg+0x95b/0xe90 [ 112.492738][ T6597] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.492767][ T6597] ? ref_tracker_free+0x37c/0x830 [ 112.492792][ T6597] netlink_rcv_skb+0x158/0x420 [ 112.492816][ T6597] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.492839][ T6597] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.492870][ T6597] ? netlink_deliver_tap+0x1ae/0xd30 [ 112.492895][ T6597] netlink_unicast+0x5a7/0x870 [ 112.492919][ T6597] ? __pfx_netlink_unicast+0x10/0x10 [ 112.492941][ T6597] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 112.492969][ T6597] netlink_sendmsg+0x8d1/0xdd0 [ 112.492994][ T6597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.493025][ T6597] ____sys_sendmsg+0xa95/0xc70 [ 112.493051][ T6597] ? copy_msghdr_from_user+0x10a/0x160 [ 112.493077][ T6597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.493114][ T6597] ___sys_sendmsg+0x134/0x1d0 [ 112.493137][ T6597] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.493187][ T6597] __sys_sendmsg+0x16d/0x220 [ 112.493209][ T6597] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.493238][ T6597] ? xfd_validate_state+0x61/0x180 [ 112.493275][ T6597] do_syscall_64+0xcd/0x4e0 [ 112.493300][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.493317][ T6597] RIP: 0033:0x7f1bb1d8eec9 [ 112.493332][ T6597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.493348][ T6597] RSP: 002b:00007f1bb2c82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.493366][ T6597] RAX: ffffffffffffffda RBX: 00007f1bb1fe5fa0 RCX: 00007f1bb1d8eec9 [ 112.493377][ T6597] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 112.493387][ T6597] RBP: 00007f1bb2c82090 R08: 0000000000000000 R09: 0000000000000000 [ 112.493396][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.493406][ T6597] R13: 00007f1bb1fe6038 R14: 00007f1bb1fe5fa0 R15: 00007ffc699b2788 [ 112.493429][ T6597] [ 113.266639][ T6602] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 114.292846][ T5847] hid-generic 0000:0003:0001.0005: unknown main item tag 0x0 [ 114.300352][ T5847] hid-generic 0000:0003:0001.0005: unknown main item tag 0x0 [ 114.336316][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 114.390921][ T5847] hid-generic 0000:0003:0001.0005: hidraw0: HID v0.03 Device [syz0] on syz1 [ 114.428635][ T6618] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 114.698228][ T6618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.828010][ T6622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.156'. [ 115.004217][ T30] kauditd_printk_skb: 267 callbacks suppressed [ 115.004233][ T30] audit: type=1400 audit(1758653937.621:603): avc: denied { read write } for pid=6616 comm="syz.0.156" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.084174][ T6624] fido_id[6624]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.125089][ T30] audit: type=1400 audit(1758653937.621:604): avc: denied { read write open } for pid=6616 comm="syz.0.156" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.170808][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 115.259333][ T24] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.346436][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 115.391740][ T30] audit: type=1400 audit(1758653937.671:605): avc: denied { read write } for pid=5842 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.710785][ T30] audit: type=1400 audit(1758653937.671:606): avc: denied { create } for pid=6616 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.743537][ T30] audit: type=1400 audit(1758653937.681:607): avc: denied { read write open } for pid=5842 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.857628][ T6639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.864922][ T6639] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 115.873273][ T6639] audit: backlog limit exceeded [ 115.883065][ T6639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.889598][ T6639] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 116.439274][ T6642] bridge0: port 3(syz_tun) entered blocking state [ 116.446886][ T6642] bridge0: port 3(syz_tun) entered disabled state [ 116.453416][ T6642] syz_tun: entered allmulticast mode [ 116.459382][ T6642] syz_tun: entered promiscuous mode [ 116.464925][ T6642] bridge0: port 3(syz_tun) entered blocking state [ 116.471472][ T6642] bridge0: port 3(syz_tun) entered forwarding state [ 116.598658][ T6645] netlink: 'syz.2.161': attribute type 10 has an invalid length. [ 116.682712][ T6645] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 116.783467][ T6649] ipvlan2: entered promiscuous mode [ 116.896882][ T6644] fido_id[6644]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.970329][ T6642] bridge0: port 3(syz_tun) entered learning state [ 116.982221][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.193027][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 117.255150][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 117.411935][ T5918] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.461855][ T9] usb 2-1: config 0 has no interface number 0 [ 118.017928][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 118.031884][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 118.046231][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.076957][ T5918] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 118.091735][ T9] usb 2-1: Product: syz [ 118.102223][ T5918] usb 5-1: config 0 has no interface number 0 [ 118.105799][ T9] usb 2-1: Manufacturer: syz [ 118.131722][ T9] usb 2-1: SerialNumber: syz [ 118.144505][ T9] usb 2-1: config 0 descriptor?? [ 118.153686][ T5918] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 118.173321][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 118.176696][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.211255][ T5918] usb 5-1: Product: syz [ 118.220620][ T5918] usb 5-1: Manufacturer: syz [ 118.236053][ T5918] usb 5-1: SerialNumber: syz [ 118.253969][ T6667] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 118.255676][ T5918] usb 5-1: config 0 descriptor?? [ 118.264233][ T6667] netlink: 248 bytes leftover after parsing attributes in process `syz.3.169'. [ 118.284088][ T5918] smsc95xx v2.0.0 [ 118.487868][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 118.511443][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 118.673694][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.170'. [ 118.921390][ T5918] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 118.973396][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 118.981813][ T5918] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.982787][ T9] usb 2-1: USB disconnect, device number 7 [ 119.081424][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 119.159879][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 119.179076][ T9] quatech2 2-1:0.51: device disconnected [ 120.341865][ T30] kauditd_printk_skb: 387 callbacks suppressed [ 120.341882][ T30] audit: type=1400 audit(1758653942.931:949): avc: denied { read write } for pid=5851 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.401792][ T30] audit: type=1400 audit(1758653942.931:950): avc: denied { read write open } for pid=5851 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.439039][ T30] audit: type=1400 audit(1758653942.931:951): avc: denied { ioctl } for pid=5851 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.565398][ T5918] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 120.623759][ T30] audit: type=1400 audit(1758653943.021:952): avc: denied { create } for pid=6694 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.648254][ T5918] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 120.708197][ T30] audit: type=1400 audit(1758653943.021:953): avc: denied { write } for pid=6694 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.738977][ T5918] usb 5-1: USB disconnect, device number 4 [ 120.879525][ T30] audit: type=1400 audit(1758653943.021:954): avc: denied { read } for pid=6694 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.951634][ T30] audit: type=1400 audit(1758653943.021:955): avc: denied { read } for pid=6694 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.054913][ T30] audit: type=1400 audit(1758653943.091:956): avc: denied { create } for pid=6694 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.143547][ T30] audit: type=1400 audit(1758653943.121:957): avc: denied { create } for pid=6694 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.214322][ T30] audit: type=1400 audit(1758653943.121:958): avc: denied { ioctl } for pid=6694 comm="syz.1.176" path="socket:[11716]" dev="sockfs" ino=11716 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.077349][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.187'. [ 123.881413][ T942] libceph: connect (1)[c::]:6789 error -101 [ 123.887483][ T942] libceph: mon0 (1)[c::]:6789 connect error [ 123.934372][ T6735] ceph: No mds server is up or the cluster is laggy [ 124.065538][ T6742] netlink: 'syz.0.190': attribute type 2 has an invalid length. [ 125.000538][ T6756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 125.438470][ T30] kauditd_printk_skb: 285 callbacks suppressed [ 125.438486][ T30] audit: type=1400 audit(1758653948.051:1244): avc: denied { perfmon } for pid=6750 comm="syz.4.195" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.561763][ T30] audit: type=1400 audit(1758653948.051:1245): avc: denied { bpf } for pid=6750 comm="syz.4.195" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.641812][ T30] audit: type=1400 audit(1758653948.051:1246): avc: denied { perfmon } for pid=6750 comm="syz.4.195" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.737734][ T30] audit: type=1400 audit(1758653948.051:1247): avc: denied { bpf } for pid=6750 comm="syz.4.195" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.946957][ T30] audit: type=1400 audit(1758653948.051:1248): avc: denied { prog_run } for pid=6750 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 125.968763][ T30] audit: type=1400 audit(1758653948.101:1249): avc: denied { read write } for pid=5842 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.017764][ T30] audit: type=1400 audit(1758653948.101:1250): avc: denied { read write open } for pid=5842 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.157924][ T30] audit: type=1400 audit(1758653948.101:1251): avc: denied { ioctl } for pid=5842 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.217301][ T30] audit: type=1400 audit(1758653948.201:1252): avc: denied { prog_load } for pid=6750 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.338047][ T30] audit: type=1400 audit(1758653948.201:1253): avc: denied { bpf } for pid=6750 comm="syz.4.195" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.901327][ T10] libceph: connect (1)[c::]:6789 error -101 [ 126.927855][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 126.954648][ T6751] ceph: No mds server is up or the cluster is laggy [ 128.594852][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'. [ 130.509149][ T30] kauditd_printk_skb: 277 callbacks suppressed [ 130.509164][ T30] audit: type=1400 audit(1758653953.121:1531): avc: denied { read write } for pid=5846 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.620796][ T30] audit: type=1400 audit(1758653953.161:1532): avc: denied { read write open } for pid=5846 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.712825][ T30] audit: type=1400 audit(1758653953.161:1533): avc: denied { ioctl } for pid=5846 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.923286][ T30] audit: type=1400 audit(1758653953.161:1534): avc: denied { read write } for pid=5853 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.057102][ T30] audit: type=1400 audit(1758653953.161:1535): avc: denied { read write open } for pid=5853 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.144343][ T30] audit: type=1400 audit(1758653953.171:1536): avc: denied { ioctl } for pid=5853 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.345820][ T30] audit: type=1400 audit(1758653953.211:1537): avc: denied { read write } for pid=5859 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.477508][ T30] audit: type=1400 audit(1758653953.221:1538): avc: denied { read write open } for pid=5859 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.595300][ T30] audit: type=1400 audit(1758653953.221:1539): avc: denied { ioctl } for pid=5859 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.698184][ T30] audit: type=1400 audit(1758653953.281:1540): avc: denied { create } for pid=6819 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.752710][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 132.118617][ T6843] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 132.136353][ T6843] PKCS7: Only support pkcs7_signedData type [ 132.400666][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.429677][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.951731][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 133.247304][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.282804][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 133.313417][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.372679][ T10] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 133.403075][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.451366][ T10] usb 1-1: config 0 descriptor?? [ 133.498054][ T6843] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 133.763315][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 133.791793][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 133.819044][ T10] usb 1-1: USB disconnect, device number 7 [ 134.845498][ T6758] Set syz1 is full, maxelem 65536 reached [ 135.021471][ T6867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.224'. [ 135.311820][ T6866] page: refcount:515 mapcount:0 mapping:ffff888023eb8c40 index:0x0 pfn:0x62000 [ 135.321144][ T6866] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 135.329648][ T6866] aops:hugetlbfs_aops ino:3164 dentry name(?):"anon_hugepage" [ 135.337110][ T6866] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 135.345245][ T6866] page_type: f4(hugetlb) [ 135.349466][ T6866] raw: 00fff00000000041 ffffc9001bb17d68 ffffc9001bb17d68 ffff888023eb8c40 [ 135.358027][ T6866] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 135.366589][ T6866] head: 00fff00000000041 ffffc9001bb17d68 ffffc9001bb17d68 ffff888023eb8c40 [ 135.375241][ T6866] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 135.383893][ T6866] head: 00fff00000000009 ffffea0001880001 0000000000000000 0000000000000000 [ 135.392546][ T6866] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 135.401192][ T6866] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 135.408883][ T6866] page_owner tracks the page as allocated [ 135.415450][ T6866] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 6812, tgid 6808 (syz.0.208), ts 129321095643, free_ts 97898198440 [ 135.437406][ T6866] post_alloc_hook+0x1c0/0x230 [ 135.442170][ T6866] get_page_from_freelist+0x132b/0x38e0 [ 135.447698][ T6866] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 135.453573][ T6866] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 135.459365][ T6866] alloc_hugetlb_folio+0xed4/0x1560 [ 135.464547][ T6866] hugetlb_fault+0x1bce/0x2f40 [ 135.469299][ T6866] handle_mm_fault+0xbfa/0xd10 [ 135.474048][ T6866] __get_user_pages+0x551/0x34a0 [ 135.478970][ T6866] populate_vma_page_range+0x267/0x3f0 [ 135.484412][ T6866] __mm_populate+0x1d8/0x380 [ 135.488986][ T6866] vm_mmap_pgoff+0x37f/0x470 [ 135.493556][ T6866] ksys_mmap_pgoff+0x1c8/0x5c0 [ 135.498304][ T6866] __x64_sys_mmap+0x125/0x190 [ 135.502962][ T6866] do_syscall_64+0xcd/0x4e0 [ 135.507449][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.513320][ T6866] page last free pid 6373 tgid 6369 stack trace: [ 135.519620][ T6866] __free_frozen_pages+0x7d5/0x10f0 [ 135.524808][ T6866] __folio_put+0x329/0x450 [ 135.529204][ T6866] hugetlb_free_folio+0xfc/0x140 [ 135.534127][ T6866] __update_and_free_hugetlb_folio+0x1e3/0x420 [ 135.540283][ T6866] update_and_free_hugetlb_folio+0xce/0x210 [ 135.546158][ T6866] free_huge_folio+0x85b/0x1050 [ 135.550992][ T6866] folios_put_refs+0x4e7/0x740 [ 135.555736][ T6866] free_pages_and_swap_cache+0x3f0/0x4a0 [ 135.561353][ T6866] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 135.567320][ T6866] tlb_finish_mmu+0x168/0x7c0 [ 135.571981][ T6866] vms_clear_ptes+0x55e/0x770 [ 135.576645][ T6866] __mmap_region+0x5e1/0x27b0 [ 135.581303][ T6866] mmap_region+0x32b/0x3f0 [ 135.585701][ T6866] do_mmap+0xa3e/0x1210 [ 135.589838][ T6866] vm_mmap_pgoff+0x29e/0x470 [ 135.594416][ T6866] ksys_mmap_pgoff+0x1c8/0x5c0 [ 135.599259][ T6866] ------------[ cut here ]------------ [ 135.604693][ T6866] kernel BUG at mm/filemap.c:154! [ 135.609701][ T6866] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 135.616094][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.4.223 Not tainted syzkaller #0 PREEMPT(full) [ 135.625269][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.635304][ T6866] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 135.641440][ T6866] Code: 07 20 c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 3a 1b c9 ff 85 ed 7e 17 e8 f1 1f c9 ff 48 c7 c6 40 20 b9 8b 48 89 df e8 22 d1 11 00 90 <0f> 0b e8 da 1f c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 135.661026][ T6866] RSP: 0018:ffffc9001bba7310 EFLAGS: 00010046 [ 135.667073][ T6866] RAX: 0000000000080000 RBX: ffffea0001880000 RCX: ffffc90014901000 [ 135.675036][ T6866] RDX: 0000000000080000 RSI: ffffffff81f27d9e RDI: ffff88807caa4cc4 [ 135.682987][ T6866] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 135.690934][ T6866] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888023eb8c40 [ 135.698884][ T6866] R13: ffffea0001880030 R14: 0000000000000480 R15: ffffea0001880000 [ 135.706835][ T6866] FS: 00007f6e707f26c0(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 135.715743][ T6866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.722310][ T6866] CR2: 00007f6e703cef98 CR3: 000000002d40c000 CR4: 00000000003526f0 [ 135.730263][ T6866] Call Trace: [ 135.733520][ T6866] [ 135.736433][ T6866] filemap_remove_folio+0xf1/0x250 [ 135.741529][ T6866] remove_inode_hugepages+0x74a/0xed0 [ 135.746882][ T6866] ? __schedule+0x11a3/0x5de0 [ 135.751541][ T6866] ? mark_held_locks+0x49/0x80 [ 135.756296][ T6866] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 135.762171][ T6866] ? __pfx___schedule+0x10/0x10 [ 135.766999][ T6866] ? __pfx_try_to_wake_up+0x10/0x10 [ 135.772187][ T6866] ? up_write+0x209/0x520 [ 135.776494][ T6866] hugetlbfs_fallocate+0xf3f/0x12e0 [ 135.781672][ T6866] ? trace_sched_exit_tp+0xd1/0x120 [ 135.786854][ T6866] ? __schedule+0x11a3/0x5de0 [ 135.791531][ T6866] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 135.797152][ T6866] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 135.802763][ T6866] ? vfs_fallocate+0x5b4/0x10e0 [ 135.807594][ T6866] vfs_fallocate+0x5b4/0x10e0 [ 135.812248][ T6866] ? __pfx_vfs_fallocate+0x10/0x10 [ 135.817338][ T6866] ? madvise_vma_behavior+0x2b20/0x2d60 [ 135.822870][ T6866] madvise_vma_behavior+0x2ad7/0x2d60 [ 135.828232][ T6866] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 135.834022][ T6866] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 135.839725][ T6866] ? __pfx_mas_prev+0x10/0x10 [ 135.844386][ T6866] ? find_vma_prev+0xda/0x160 [ 135.849053][ T6866] ? __pfx_find_vma_prev+0x10/0x10 [ 135.854149][ T6866] madvise_walk_vmas+0x31f/0x9c0 [ 135.859073][ T6866] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 135.864514][ T6866] ? madvise_do_behavior+0x1cf/0x530 [ 135.869780][ T6866] ? madvise_do_behavior+0x1da/0x530 [ 135.875048][ T6866] madvise_do_behavior+0x1e2/0x530 [ 135.880143][ T6866] ? __pfx_madvise_do_behavior+0x10/0x10 [ 135.885757][ T6866] ? down_read+0x13d/0x480 [ 135.890161][ T6866] do_madvise+0x176/0x240 [ 135.894472][ T6866] ? __pfx_do_madvise+0x10/0x10 [ 135.899308][ T6866] ? rcu_is_watching+0x12/0xc0 [ 135.904066][ T6866] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 135.910047][ T6866] __x64_sys_madvise+0xa9/0x110 [ 135.914893][ T6866] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.920086][ T6866] do_syscall_64+0xcd/0x4e0 [ 135.924574][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.930448][ T6866] RIP: 0033:0x7f6e72d8eec9 [ 135.934841][ T6866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.954430][ T6866] RSP: 002b:00007f6e707f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 135.962832][ T6866] RAX: ffffffffffffffda RBX: 00007f6e72fe6360 RCX: 00007f6e72d8eec9 [ 135.970785][ T6866] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 135.978736][ T6866] RBP: 00007f6e72e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 135.986688][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.994637][ T6866] R13: 00007f6e72fe63f8 R14: 00007f6e72fe6360 R15: 00007ffec4248668 [ 136.002592][ T6866] [ 136.005602][ T6866] Modules linked in: [ 136.009479][ T6866] ---[ end trace 0000000000000000 ]--- [ 136.014910][ T6866] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 136.021062][ T6866] Code: 07 20 c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 3a 1b c9 ff 85 ed 7e 17 e8 f1 1f c9 ff 48 c7 c6 40 20 b9 8b 48 89 df e8 22 d1 11 00 90 <0f> 0b e8 da 1f c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 136.040648][ T6866] RSP: 0018:ffffc9001bba7310 EFLAGS: 00010046 [ 136.046696][ T6866] RAX: 0000000000080000 RBX: ffffea0001880000 RCX: ffffc90014901000 [ 136.054645][ T6866] RDX: 0000000000080000 RSI: ffffffff81f27d9e RDI: ffff88807caa4cc4 [ 136.062594][ T6866] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 136.070556][ T6866] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888023eb8c40 [ 136.078506][ T6866] R13: ffffea0001880030 R14: 0000000000000480 R15: ffffea0001880000 [ 136.086458][ T6866] FS: 00007f6e707f26c0(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 136.095368][ T6866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.101931][ T6866] CR2: 00007f6e703cef98 CR3: 000000002d40c000 CR4: 00000000003526f0 [ 136.109889][ T6866] Kernel panic - not syncing: Fatal exception [ 136.116135][ T6866] Kernel Offset: disabled [ 136.120431][ T6866] Rebooting in 86400 seconds..