last executing test programs: 39.884458009s ago: executing program 3 (id=789): socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) (async, rerun: 64) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x100, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0xfffff507, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xff, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x9}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = inotify_init1(0x80800) (async) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0x64000ba6) (async, rerun: 32) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) (rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) (async) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socket(0x1e, 0x5, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) (async, rerun: 64) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (rerun: 64) 36.617305755s ago: executing program 3 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (rerun: 64) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9", 0xe, 0x0, 0x0, 0x0) (async) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r3, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) (async) close(r4) (async) mknod(0x0, 0x1ffa, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xb}, {0x8, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x10}, 0xc4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) (async) listen(r7, 0x6) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, 0x0, 0x0) (async) r9 = socket$inet6(0x10, 0x2, 0x4) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) (async) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) eventfd2(0x8, 0x800) 34.429182643s ago: executing program 2 (id=802): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10000, 0xfffffffc, 0x1000000000000007, 0x0, 0xfffffe0000000001, 0xd, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x6, 0x81}, 'port0\x00', 0x80, 0x12, 0x2, 0x1ff, 0x3, 0xfffffffe, 0x8008, 0x0, 0x4, 0x9}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000340)='k', 0xc, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x3, 0x6, @multicast}, 0x14) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac1414aa00000000442c00030a0101000000e7b2d60ba30000ac1c14bbfffffffe0000000000000000ac141400ffffff"], 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r6, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 23.542550623s ago: executing program 2 (id=811): r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setgroups(0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x3f) fchdir(r6) getgroups(0x0, &(0x7f0000000080)) setgroups(0x1, &(0x7f00000000c0)=[0x0]) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) connect$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_clone(0x8c000800, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x330, 0x120, 0x450, 0x330, 0x330, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000380), {[{{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x3a}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], [0x0, 0x298ae45919f1461, 0xffffff00, 0xffffff], 'dvmrp1\x00', 'virt_wifi0\x00', {0xec1afcbb0608c48c}, {0xff}, 0x67, 0x69, 0x4, 0x1}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x2f, 0x40, 0x40, 0x4, 0x2, 0x200, 0x600}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x3a, 0x57}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@mcast1, 0x29, 0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xe, 0x10, 0x2633}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0x807fff80, 0xff000000, 0xff, 0xff], [0xffffffff, 0xffffffff, 0xff, 0xff], 'pimreg\x00', 'veth0\x00', {0xff}, {0xff}, 0x2, 0x5, 0x2, 0x4d}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@mh={{0x28}, {"ae0a", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@private2, @private0, [0xff, 0x0, 0xff], [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], 'hsr0\x00', 'lo\x00', {0xff}, {0xff}, 0x88, 0x9d, 0x5, 0x3d}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}, @ipv4=@private=0xa010102, 0x40, 0x1e, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) ioprio_set$pid(0x1, r8, 0x4000) 23.333380565s ago: executing program 3 (id=813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, r1, 0x405, 0x72bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r5 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r5, &(0x7f0000000240)=""/151, 0x97) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 23.191988332s ago: executing program 3 (id=815): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) getpeername(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34000082}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xca11, 0x3, 0x6}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000001c0)={r10, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x5}}, [0x8, 0xffffffffffff8651, 0x45, 0x7, 0x7ff, 0x0, 0xff, 0x9, 0x200, 0x8, 0x3, 0x1d, 0x2, 0x6, 0xfffffffffffffffa]}, &(0x7f00000000c0)=0x100) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f901000", @ANYRES16=r5], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 22.831552512s ago: executing program 0 (id=817): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) exit(0x7) statx(r1, 0x0, 0x1000, 0x10, 0x0) r4 = userfaultfd(0x80001) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000040), &(0x7f0000000000)=0x4) 22.31423127s ago: executing program 1 (id=818): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) (fail_nth: 2) 22.013287489s ago: executing program 2 (id=819): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xc, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xc, 0x1008, 0x1}) 21.940598265s ago: executing program 2 (id=821): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000080), 0x1002400, &(0x7f0000000400)={[{@metacopy_off}, {@verity_on}, {@metacopy_off}, {@uuid_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000080)={0x10000, 0x0, 0x1, 0x10001, 0x2, 0x700, "c46519af4b2e657e8e659f0da5a552b7", 0x6, 0x6, 0xb, 0xc, 0x0, 0x9, 0x8}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x2182, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x21, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdab, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@jmp={0x5, 0x0, 0xc, 0x5, 0x3, 0xfffffffffffffffc, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6a}}, @call={0x85, 0x0, 0x0, 0x79}, @ldst={0x1, 0x0, 0x6, 0x4, 0x9, 0x40, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0xa3, 0x6, 0xa, 0x8, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x8, 0xdf, &(0x7f0000000340)=""/223, 0x40f00, 0x25, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x5, 0x400, 0x7fffffff}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xcc0c}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04073e2002"], 0x7) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000040)=""/104, 0x4d) 21.906186457s ago: executing program 0 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000840), &(0x7f0000000000)=@udp=r2}, 0x20) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x2000000000014f) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r4, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 21.35714731s ago: executing program 0 (id=823): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='dctcp\x00', 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x79e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x2, 0x2, 0x0, 0xa0, 0x32, 0x0, r2}, {0x2, 0x7, 0x41357612, 0x2, 0x7, 0x5, 0x2, 0x2}, {0x9cf, 0x100000000, 0x7, 0x9}, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in=@multicast2, 0x4d5, 0xff}, 0xa, @in=@multicast1, 0x3501, 0x2, 0x3, 0x9, 0x1, 0x1}}, 0xe8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000002c0)="4ff681774ae005fe72f4cfcd30cd5c8acf4f65734a3384c433e7480087310c598bd6ec9cf7b5065a3dbda4a1796076e66d52acd9f2f5394f2d074f84ce33e336") ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000300)) fsetxattr$security_ima(r3, &(0x7f0000000380), &(0x7f00000003c0)=@v2={0x5, 0x3, 0x13, 0x1, 0x7c, "609099fa55bf6bdeadf7a468e2d8f4de914c25e8c894237b4f804ec336c0e57df86603867924b41d046596926931d0424e1de58211c1e1072f475a07c307a372399fa6b1b816aea5d328ccb4afd03573bfa9d62e860e7442956ce411314c179ea7e050bc2203bef69d5a18c5a949f66a623448e2332d90e96133cf39"}, 0x85, 0x1) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x60, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x8, 0x9, 0x81}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@ptr={0xc, 0x0, 0x0, 0x2, 0x2}, @const={0x2, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000600)=""/156, 0x34, 0x9c, 0x1, 0x5, 0x10000}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x4, 0x451e, 0xf20, 0x5a0, r4, 0x46, '\x00', r5, r6, 0x4, 0x1, 0x3, 0xc}, 0x50) preadv(r7, &(0x7f0000000980)=[{&(0x7f0000000780)=""/205, 0xcd}, {&(0x7f0000000880)=""/2, 0x2}, {&(0x7f00000008c0)=""/75, 0x4b}, {&(0x7f0000000940)=""/50, 0x32}], 0x4, 0xbf, 0x68) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r8 = socket$key(0xf, 0x3, 0x2) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xffffffff, '\x00', r5, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', r5, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x22, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x7, 0x1, 0x0, r7}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x8, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0x9, 0xd, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[r7, r4, r7, r9, 0x1, r7, r10, r7], &(0x7f0000000d00)=[{0x2, 0x5, 0x4, 0x4}, {0x3, 0x4, 0x8, 0x1}], 0x10, 0x54}, 0x94) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) symlinkat(&(0x7f0000000e80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00') clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000f40)={r11, r12/1000+60000}, 0x10) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000f80)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r13, 0x2, 0x0) sched_setaffinity(r13, 0x8, &(0x7f0000000fc0)=0x3) r14 = socket$packet(0x11, 0x2, 0x300) accept$packet(r14, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001040)=0x14) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x20, r15, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) 20.469867819s ago: executing program 1 (id=825): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x4) syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp\x00') r3 = userfaultfd(0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000912e1900"/23, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYBLOB="00001e5e44a400000000000000fffffffd007f000000000000000000", @ANYRESDEC=r1], 0x48) r5 = fsopen(&(0x7f0000000180)='efs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000680)="0b036800e0ff64000200475400f64a21854ba588afd65e2aa5bd345566ddc4ea9d3556500a70ff645560b94589248959f6d928fd285e909f4334f70e64a57a56d8384513f0199b127dfc30ee8b01f1ae17f1f2f86d0dd7f702a2bc48a6af34be816ded289321b967c5260ede119890b829724ac4dbbb9b248a5b88a1964ad64b4b51e2ffc6288ed8615f5884ca3753f6fb63401b6e99e13f64ba0d8301f230926c", 0xfffffffffffffdf6, 0x8054, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e27, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="14", 0x1, 0x10048095, 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000f93000/0x4000)=nil, &(0x7f0000339000/0x1000)=nil, 0x4000, 0x3}) r12 = socket$inet(0xa, 0x801, 0x84) connect$inet(r12, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 20.329198147s ago: executing program 0 (id=826): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x30000840) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000007a000900030073797a3100000000"], 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="710e28bd70000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000100)={'gre0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 20.193347957s ago: executing program 3 (id=827): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x3d, 0x100, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0x3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x1, 0x8}, [@FRA_SRC={0x8, 0x2, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = dup(r11) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206030000000000fffff000000000000900020073797a32000100000500040000000000050005000200000010000300686173683a69702c6d616300050001000700000014000780080013400000000008001240"], 0x5c}}, 0x0) 19.697397087s ago: executing program 2 (id=829): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0xa1, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@loopback}, {@empty, 0x3}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@remote}]}, @rr={0x7, 0x23, 0xfe, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @remote, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x640100ff]}, @lsrr={0x83, 0x3}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) (async) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce6000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/151], 0x1dc}}, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYBLOB="1bef1191ec9d78e159f9a502bc9601797a506d34b53e00cdf1fa9e696e03d3365a8d153b6eb3b632e78266d12aa4ab6e274edba4223627999e5ff1585ee33207dd56bd9e88deb13c2d2f70ccc555b654568e151494a755d051f07e4acda019dc029dd93b31236836aef905acdc6cc7b39a6300903c2e2a373f118490aedfbc57c0daf8c6a97495d7e86def5e9e53fe8e24716a1ed6f4620da83a2b7f52cdeeff5f4ff7584c91e408810f6a", @ANYRES32=r0], 0x118) mmap(&(0x7f00003ae000/0x4000)=nil, 0x4000, 0x5, 0x12, r5, 0xfffff000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x5}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r10, 0x11c, 0x4, 0x0, &(0x7f0000006c80)=0x35) (async) getsockopt$inet_mptcp_buf(r10, 0x11c, 0x4, 0x0, &(0x7f0000006c80)=0x35) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 19.545319934s ago: executing program 4 (id=830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000005c0)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r3, 0x1, 0x127, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0xc854}, 0x24000040) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r4 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4004006) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/145, 0x91}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000340)=""/155, 0x9b}], 0x3, &(0x7f0000001080)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000000440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/52, 0x34}, 0x7}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/59, 0x3b}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/163, 0xa3}], 0x3, &(0x7f0000000700)=""/21, 0x15}, 0x7}], 0x4, 0x40000002, 0x0) 19.516759748s ago: executing program 4 (id=831): setreuid(0x0, 0xee01) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) 19.448142208s ago: executing program 4 (id=832): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4004080}, 0xc000) socket$rds(0x15, 0x5, 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x42a00, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x437, 0xfefffffe, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x50584, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f00000003c0)={0xa0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="dc0bec091ffb0e8466b7b388b6f9df96bdceca1594817cedab675204841af12ce611c98518ab7b559c4d5f2c306d3285c4be6118927aba92967b7f85374495e8546f58b198310c79c6216cf0"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r4, r4, 0x0, 0x200000) 19.379724043s ago: executing program 0 (id=833): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffffffffeeb, 0x0, 0x52}, 0x4004800) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000200)=""/27, 0x1b}, {&(0x7f0000000580)=""/201, 0xc9}], 0x6) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0xb, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0xba05d480, 0x0, 0x11, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r5, 0x6c9, 0x9, &(0x7f00000002c0)=""/247, &(0x7f0000000000)=0xf7) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) sendmsg$nl_route_sched(r4, 0x0, 0x2400c800) r8 = inotify_init1(0x80800) socket$inet6(0xa, 0x3, 0x5) inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0x64000ba6) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 19.328151243s ago: executing program 1 (id=834): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r1, r0, 0x0, 0x4) r2 = socket(0x2, 0x2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) read$FUSE(r3, &(0x7f0000000c80)={0x2020}, 0x2020) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendfile(r1, r0, 0x0, 0x4) (async) socket(0x2, 0x2, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async) read$FUSE(r3, &(0x7f0000000c80)={0x2020}, 0x2020) (async) 18.937172377s ago: executing program 1 (id=835): socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x0) unlink(&(0x7f0000000180)='./file1\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x4100, 0x14, 0xc2}, &(0x7f00000005c0)=0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="80000400000000003c0012800b00010067656e65766500002c00028008000b4000000007040006000500090001000000140007"], 0x5c}}, 0x0) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$read(0x2, 0x0, &(0x7f0000002140)=""/4121, 0x1019) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe7e, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 18.542896453s ago: executing program 4 (id=836): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 18.486675953s ago: executing program 2 (id=837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="14000020", @ANYRES16=r2, @ANYBLOB="bbdf26bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x0, 0x0) poll(&(0x7f00000003c0)=[{r5, 0x20}], 0x1, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x11) ioctl$KDGETMODE(r6, 0x4b3b, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0xd000, 0x80af000}}, "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", "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"}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r7, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000005c0)=""/177, 0xfec3, 0x0, 0x3, 0x2}}, 0x48) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18.045384431s ago: executing program 4 (id=838): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x34d640, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24, 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) rmdir(&(0x7f0000000040)='./bus\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa) r6 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="a5", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r6) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0x0) (async) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000580)="a5", 0x1, r6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="cff525bd7000fddbdf253f0000000c009900000000803300000024005e80080007003e0600000800020003000000080005005f00000008000300000400001c005e80080005005300000008000600480bffff080007003e0400002c005e80080002000800000008000700d40300000800030008000000080003000200000008000600010000000c005e8008000500640000004c005e80080007007c010000080005004800000018000100070000000400000005000000090000006201000008000700f303000008000600010000000800020001040000080002000080000010005e80080009000010000004000100"], 0xf4}, 0x1, 0x0, 0x0, 0x4040}, 0x20000004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') (async) socket$kcm(0x29, 0x2, 0x0) 16.016500235s ago: executing program 3 (id=839): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000040)={{&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000180)=@adf_str={@format={'Cy', '4', 'RingRx\x00'}, {"6c1430f70f5e152f1f2bd8427ba570189de85a00925b749580a5aa8fe3c80507efc857097b017bf28a4f1a0e757ce3f7edb02a6e779d3cbdec88ef84e436fe0c"}, {&(0x7f00000000c0)=@adf_dec={@format={'Dc', '3', 'BankNumber\x00'}, {0x3}}}}}}}, 0x5}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 14.406565727s ago: executing program 0 (id=840): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x40}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x115200, 0x20b) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r8) 14.329156058s ago: executing program 1 (id=841): io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0xf0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0x7fff}, 0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) 13.315610431s ago: executing program 1 (id=842): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x2, {{0xa, 0x0, 0x80000001, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4a21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x5}, 0x1c) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000072009fb332e4c8000000d736fe5965d841222dca69d16f2b3005e9ab301d99ec8e6bdba1af774d021375510b9bb979ae26dde641170d49d9e8863bdd551256c738cb0e4f917fcc32c7519770437b1619f3bab7614fce3098b30cfa6264b55647ed76271d4a5c540e5960b040ba098c0f4be2f7f83dced3665e13188441e1e930638c5ff43dad702eb0659a8cc5c317d488fb4990e18ff65ab9708aadee73c090fbc0570659b39f46bcdbc2e000"/187, @ANYRES8=r0, @ANYBLOB="0fa213566c8d3573dc0c766ffb1a30abbf124e191364863b8fb4ef0d5e0d884114a69e060c887559ec10f9e9bd9e7efe462c604365aac0dc8a98f30406467ecee0d2ec668d843c3dbc7b1d71e9f113d2af7e28d65257cf08d9781db38c5ae78ce709e1ee0a1ba9dc9fbba839480d28c9c4f5e1b22acacfa4c9e97e6eb5b8f863203b9cf2f5748aad2010d5bd923faf2518c4e5f12fc27e4edee4c19ebf4c1e206c"], 0x20}}, 0x4000001) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x2, {{0xa, 0x0, 0x80000001, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x108) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4a21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x5}, 0x1c) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000072009fb332e4c8000000d736fe5965d841222dca69d16f2b3005e9ab301d99ec8e6bdba1af774d021375510b9bb979ae26dde641170d49d9e8863bdd551256c738cb0e4f917fcc32c7519770437b1619f3bab7614fce3098b30cfa6264b55647ed76271d4a5c540e5960b040ba098c0f4be2f7f83dced3665e13188441e1e930638c5ff43dad702eb0659a8cc5c317d488fb4990e18ff65ab9708aadee73c090fbc0570659b39f46bcdbc2e000"/187, @ANYRES8=r0, @ANYBLOB="0fa213566c8d3573dc0c766ffb1a30abbf124e191364863b8fb4ef0d5e0d884114a69e060c887559ec10f9e9bd9e7efe462c604365aac0dc8a98f30406467ecee0d2ec668d843c3dbc7b1d71e9f113d2af7e28d65257cf08d9781db38c5ae78ce709e1ee0a1ba9dc9fbba839480d28c9c4f5e1b22acacfa4c9e97e6eb5b8f863203b9cf2f5748aad2010d5bd923faf2518c4e5f12fc27e4edee4c19ebf4c1e206c"], 0x20}}, 0x4000001) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000040)) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) 0s ago: executing program 4 (id=843): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) socket$nl_rdma(0x10, 0x3, 0x14) socket(0xa, 0x3, 0x3a) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private1, 0x206}, {0xa, 0x4e20, 0x0, @private0, 0x1}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) add_key(0x0, 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) kernel console output (not intermixed with test programs): n invalid interface number: 67 but max is 0 [ 99.846935][ T5935] usb 3-1: config 0 has no interface number 0 [ 99.909817][ T6954] smc: ib device syz1 port 1 has pnetid [ 99.932484][ T5935] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 99.943400][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.955760][ T5935] usb 3-1: Product: syz [ 99.960176][ T5935] usb 3-1: Manufacturer: syz [ 99.964843][ T5935] usb 3-1: SerialNumber: syz [ 99.978004][ T5935] usb 3-1: config 0 descriptor?? [ 99.989121][ T5935] smsc95xx v2.0.0 [ 100.350288][ T6972] random: crng reseeded on system resumption [ 100.859280][ T5935] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 100.881334][ T5935] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 100.991173][ T54] usb 1-1: USB disconnect, device number 12 [ 101.221919][ T5935] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 101.241659][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 101.251061][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 101.265279][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 101.274159][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 101.284064][ T6716] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.332979][ T6716] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.401174][ T6716] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.441043][ T6716] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.655454][ T5935] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 102.288169][ T7006] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.328921][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 102.328933][ T30] audit: type=1400 audit(1755682615.155:483): avc: denied { validate_trans } for pid=7009 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 102.647663][ T6010] usb 3-1: USB disconnect, device number 11 [ 102.667514][ T7018] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 102.677566][ T30] audit: type=1400 audit(1755682615.495:484): avc: denied { load_policy } for pid=7017 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 102.771243][ T7018] SELinux: failed to load policy [ 102.829756][ T5935] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 102.992186][ T5935] usb 5-1: config 0 has no interfaces? [ 102.999184][ T5935] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 103.014053][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.056191][ T5935] usb 5-1: Product: syz [ 103.066742][ T5935] usb 5-1: Manufacturer: syz [ 103.078992][ T5935] usb 5-1: SerialNumber: syz [ 103.096797][ T5935] usb 5-1: config 0 descriptor?? [ 103.413466][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 103.461597][ T30] audit: type=1400 audit(1755682616.275:485): avc: denied { mount } for pid=7027 comm="syz.0.285" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.564631][ T7032] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 103.618666][ T5935] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 103.695699][ T30] audit: type=1400 audit(1755682616.525:486): avc: denied { name_bind } for pid=7039 comm="syz.2.289" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 103.794103][ T7042] usb usb8: usbfs: process 7042 (syz.2.290) did not claim interface 0 before use [ 103.803733][ T30] audit: type=1400 audit(1755682616.635:487): avc: denied { ioctl } for pid=7041 comm="syz.2.290" path="socket:[13140]" dev="sockfs" ino=13140 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.828112][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.841385][ T5935] usb 2-1: config 4 has an invalid descriptor of length 62, skipping remainder of the config [ 103.853163][ T5935] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.881217][ T5935] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 103.911163][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.937338][ T5935] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 103.996780][ T30] audit: type=1400 audit(1755682616.825:488): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 104.440717][ T7052] netlink: 132 bytes leftover after parsing attributes in process `syz.0.291'. [ 104.449763][ T5846] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 104.609823][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 104.616076][ T5846] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.625824][ T5846] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.634565][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.644278][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.669878][ T5846] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.681741][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.697428][ T5846] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.711535][ T7062] evm: overlay not supported [ 104.750269][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.856391][ T5846] usb 3-1: config 0 descriptor?? [ 104.869614][ T30] audit: type=1400 audit(1755682617.695:489): avc: denied { create } for pid=7030 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 105.088000][ T5935] usb 5-1: USB disconnect, device number 14 [ 105.194996][ T7065] Unsupported ieee802154 address type: 0 [ 105.200704][ T30] audit: type=1400 audit(1755682618.025:490): avc: denied { bind } for pid=7064 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.453748][ T30] audit: type=1400 audit(1755682618.285:491): avc: denied { create } for pid=7050 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 105.473603][ T30] audit: type=1400 audit(1755682618.285:492): avc: denied { connect } for pid=7050 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 105.497804][ T5846] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 105.528939][ T7072] process 'syz.2.293' launched './file0' with NULL argv: empty string added [ 105.538767][ T7072] netlink: 'syz.2.293': attribute type 2 has an invalid length. [ 105.546659][ T7072] netlink: 'syz.2.293': attribute type 8 has an invalid length. [ 105.554537][ T7072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.293'. [ 105.573913][ T7065] fuse: Bad value for 'fd' [ 105.585422][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 106.111846][ T5894] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 106.302856][ T5846] usb 2-1: USB disconnect, device number 7 [ 106.393336][ T7095] syz.1.306: attempt to access beyond end of device [ 106.393336][ T7095] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 106.406855][ T7095] syz.1.306: attempt to access beyond end of device [ 106.406855][ T7095] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 106.419747][ T7095] Mount JFS Failure: -5 [ 106.490968][ T5894] usb 1-1: config 0 has an invalid descriptor of length 241, skipping remainder of the config [ 106.504121][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.518670][ T5894] usb 1-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 106.529817][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.821945][ T5894] usb 1-1: config 0 descriptor?? [ 106.828714][ T5894] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 107.280979][ T54] usb 3-1: USB disconnect, device number 12 [ 107.287629][ T54] usblp0: removed [ 107.356836][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 107.356850][ T30] audit: type=1400 audit(1755682620.185:494): avc: denied { name_bind } for pid=7105 comm="syz.2.308" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 107.417350][ T10] usb 1-1: USB disconnect, device number 13 [ 107.523175][ T7117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 107.681947][ T7120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7120 comm=syz.0.311 [ 108.015055][ T7125] overlay: filesystem on ./bus not supported as upperdir [ 108.199796][ T5935] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 108.641441][ T5935] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 108.657607][ T5935] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 108.666820][ T5935] usb 1-1: config 0 has no interface number 0 [ 108.679168][ T5935] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 108.699494][ T5935] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.712928][ T5935] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 108.722252][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.731611][ T5935] usb 1-1: config 0 descriptor?? [ 108.850664][ T30] audit: type=1400 audit(1755682621.685:495): avc: denied { read write } for pid=7132 comm="syz.1.316" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.875544][ T7133] 9pnet_fd: Insufficient options for proto=fd [ 108.875834][ T30] audit: type=1400 audit(1755682621.685:496): avc: denied { open } for pid=7132 comm="syz.1.316" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.943724][ T7081] delete_channel: no stack [ 109.008613][ T30] audit: type=1400 audit(1755682621.835:497): avc: denied { write } for pid=7138 comm="syz.1.318" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.025949][ T7141] 9pnet_fd: Insufficient options for proto=fd [ 109.031565][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.085987][ T30] audit: type=1400 audit(1755682621.915:498): avc: denied { getopt } for pid=7138 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.244800][ T5935] usb 1-1: USB disconnect, device number 14 [ 110.292152][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 110.348758][ T7164] netlink: 308 bytes leftover after parsing attributes in process `syz.1.326'. [ 110.478005][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 110.547762][ T30] audit: type=1400 audit(1755682623.375:499): avc: denied { read } for pid=7171 comm="syz.0.328" dev="nsfs" ino=4026533366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.579926][ T6010] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 110.581635][ T30] audit: type=1400 audit(1755682623.385:500): avc: denied { open } for pid=7171 comm="syz.0.328" path="net:[4026533366]" dev="nsfs" ino=4026533366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.697525][ T7177] sp0: Synchronizing with TNC [ 110.743865][ T30] audit: type=1400 audit(1755682623.385:501): avc: denied { create } for pid=7171 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.779947][ T6010] usb 5-1: Using ep0 maxpacket: 32 [ 110.787777][ T6010] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 110.808327][ T6010] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 110.834372][ T6010] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 110.863840][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.892172][ T6010] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.922394][ T6010] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.935441][ T30] audit: type=1400 audit(1755682623.385:502): avc: denied { create } for pid=7171 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.935892][ T6010] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.030710][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.097486][ T6010] usb 5-1: config 0 descriptor?? [ 111.128190][ T30] audit: type=1400 audit(1755682623.385:503): avc: denied { write } for pid=7171 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.148317][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.757046][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 112.757057][ T30] audit: type=1400 audit(1755682624.235:526): avc: denied { mounton } for pid=7181 comm="syz.3.330" path="/proc/201/task" dev="proc" ino=13922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 112.848721][ T30] audit: type=1400 audit(1755682624.235:527): avc: denied { mount } for pid=7181 comm="syz.3.330" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.871197][ T6010] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.980716][ T30] audit: type=1400 audit(1755682625.815:528): avc: denied { read write } for pid=7190 comm="syz.0.333" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.965340][ T30] audit: type=1400 audit(1755682625.815:529): avc: denied { open } for pid=7190 comm="syz.0.333" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.988664][ T30] audit: type=1400 audit(1755682625.855:530): avc: denied { create } for pid=7193 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.008628][ T30] audit: type=1400 audit(1755682625.865:531): avc: denied { write } for pid=7193 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.087275][ T30] audit: type=1400 audit(1755682625.865:532): avc: denied { create } for pid=7193 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.107876][ T30] audit: type=1400 audit(1755682625.865:533): avc: denied { read } for pid=7193 comm="syz.2.334" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.144488][ T7202] x_tables: ip_tables: udp match: only valid for protocol 17 [ 114.170278][ T30] audit: type=1400 audit(1755682625.865:534): avc: denied { open } for pid=7193 comm="syz.2.334" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.212678][ T10] usb 5-1: USB disconnect, device number 15 [ 114.225462][ T10] usblp0: removed [ 114.231291][ T30] audit: type=1400 audit(1755682625.865:535): avc: denied { ioctl } for pid=7193 comm="syz.2.334" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.346544][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.361882][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.383481][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.392393][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 115.372414][ T7230] netlink: 52 bytes leftover after parsing attributes in process `syz.4.344'. [ 115.530990][ T5935] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 115.583357][ T7230] overlayfs: missing 'lowerdir' [ 115.772280][ T5935] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 115.781527][ T5935] usb 3-1: config 0 has no interface number 0 [ 115.787614][ T5935] usb 3-1: config 0 interface 98 has no altsetting 0 [ 115.796530][ T5935] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 115.806897][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.819012][ T7225] could not allocate digest TFM handle hmac(sha256-avx2) [ 115.828316][ T5935] usb 3-1: Product: syz [ 115.850688][ T5935] usb 3-1: Manufacturer: syz [ 115.871035][ T5935] usb 3-1: SerialNumber: syz [ 115.877151][ T5935] usb 3-1: config 0 descriptor?? [ 116.143743][ T7245] 9pnet_fd: Insufficient options for proto=fd [ 116.424887][ T5935] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 116.638839][ T7251] netlink: 132 bytes leftover after parsing attributes in process `syz.1.347'. [ 117.379975][ T5935] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 117.387699][ T5935] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 117.395657][ T54] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 117.462332][ T54] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 117.477198][ T5935] usb 3-1: USB disconnect, device number 13 [ 119.241566][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 119.241582][ T30] audit: type=1400 audit(1755682632.075:597): avc: denied { write } for pid=7272 comm="syz.2.356" name="vlan0" dev="proc" ino=4026533766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.359276][ T30] audit: type=1400 audit(1755682632.185:598): avc: denied { create } for pid=7278 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.468778][ T30] audit: type=1400 audit(1755682632.215:599): avc: denied { getopt } for pid=7278 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.601846][ T30] audit: type=1400 audit(1755682632.215:600): avc: denied { create } for pid=7278 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.639760][ T30] audit: type=1400 audit(1755682632.215:601): avc: denied { setopt } for pid=7278 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.707387][ T30] audit: type=1400 audit(1755682632.225:602): avc: denied { setopt } for pid=7272 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.726979][ T30] audit: type=1400 audit(1755682632.225:603): avc: denied { bind } for pid=7272 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.763199][ T7290] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[7290] [ 119.800272][ T30] audit: type=1400 audit(1755682632.225:604): avc: denied { name_bind } for pid=7272 comm="syz.2.356" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 119.839833][ T5846] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 119.887102][ T5949] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 120.150689][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 120.159522][ T30] audit: type=1400 audit(1755682632.225:605): avc: denied { node_bind } for pid=7272 comm="syz.2.356" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 120.200897][ T5989] IPVS: starting estimator thread 0... [ 120.241943][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 120.260389][ T5846] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 120.277152][ T30] audit: type=1400 audit(1755682632.225:606): avc: denied { write } for pid=7272 comm="syz.2.356" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.278843][ T5846] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 120.320275][ T7304] IPVS: using max 72 ests per chain, 172800 per kthread [ 120.327310][ T7280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10623 sclass=netlink_route_socket pid=7280 comm=syz.2.356 [ 120.372773][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.381170][ T5846] usb 1-1: config 0 has no interface number 0 [ 120.381203][ T5846] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 120.381224][ T5846] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.381254][ T5846] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 120.381275][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.382188][ T5846] usb 1-1: config 0 descriptor?? [ 120.432214][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.441333][ T6010] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 120.609493][ T6010] usb 4-1: Using ep0 maxpacket: 16 [ 120.619053][ T6010] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.629218][ T6010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.640207][ T6010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.650363][ T6010] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 120.660326][ T6010] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.710016][ T6010] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 120.719092][ T6010] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.728069][ T6010] usb 4-1: Manufacturer: syz [ 120.735069][ T6010] usb 4-1: config 0 descriptor?? [ 121.101868][ T5846] usb 1-1: USB disconnect, device number 15 [ 121.645799][ T7323] rdma_rxe: rxe_newlink: failed to add syz_tun [ 121.850356][ T7331] FAULT_INJECTION: forcing a failure. [ 121.850356][ T7331] name failslab, interval 1, probability 0, space 0, times 0 [ 121.863155][ T7331] CPU: 0 UID: 0 PID: 7331 Comm: syz.0.372 Not tainted syzkaller #0 PREEMPT(full) [ 121.863177][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.863186][ T7331] Call Trace: [ 121.863191][ T7331] [ 121.863203][ T7331] dump_stack_lvl+0x16c/0x1f0 [ 121.863225][ T7331] should_fail_ex+0x512/0x640 [ 121.863244][ T7331] ? sock_kmalloc+0x111/0x170 [ 121.863266][ T7331] should_failslab+0xc2/0x120 [ 121.863286][ T7331] __kmalloc_noprof+0xd2/0x510 [ 121.863303][ T7331] ? sock_kmalloc+0x13a/0x170 [ 121.863322][ T7331] sock_kmalloc+0x111/0x170 [ 121.863342][ T7331] skcipher_recvmsg+0x4a6/0x1030 [ 121.863367][ T7331] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 121.863390][ T7331] sock_recvmsg+0x1f9/0x250 [ 121.863410][ T7331] ____sys_recvmsg+0x218/0x6b0 [ 121.863433][ T7331] ? __pfx_____sys_recvmsg+0x10/0x10 [ 121.863463][ T7331] ? lock_release+0x201/0x2f0 [ 121.863492][ T7331] ___sys_recvmsg+0x114/0x1a0 [ 121.863508][ T7331] ? __pfx____sys_recvmsg+0x10/0x10 [ 121.863524][ T7331] ? ksys_write+0x12a/0x250 [ 121.863541][ T7331] ? rcu_is_watching+0x12/0xc0 [ 121.863569][ T7331] __sys_recvmsg+0x16a/0x220 [ 121.863586][ T7331] ? __pfx___sys_recvmsg+0x10/0x10 [ 121.863609][ T7331] do_syscall_64+0xcd/0x4c0 [ 121.863627][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.863644][ T7331] RIP: 0033:0x7f587a18ebe9 [ 121.863657][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.863673][ T7331] RSP: 002b:00007f587afe4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 121.863690][ T7331] RAX: ffffffffffffffda RBX: 00007f587a3b5fa0 RCX: 00007f587a18ebe9 [ 121.863701][ T7331] RDX: 0000000000000000 RSI: 000020000000b680 RDI: 0000000000000004 [ 121.863711][ T7331] RBP: 00007f587afe4090 R08: 0000000000000000 R09: 0000000000000000 [ 121.863721][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.863729][ T7331] R13: 00007f587a3b6038 R14: 00007f587a3b5fa0 R15: 00007ffd6641a578 [ 121.863746][ T7331] [ 122.102567][ T7333] rdma_rxe: rxe_newlink: failed to add syz_tun [ 122.111457][ T7333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 122.226872][ T5949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.236786][ T5949] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 122.270909][ T5949] usb 3-1: can't read configurations, error -71 [ 122.580726][ T7342] rdma_rxe: rxe_newlink: failed to add syz_tun [ 122.589004][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.376'. [ 123.119412][ T7353] rdma_rxe: rxe_newlink: failed to add syz_tun [ 123.234962][ T6010] rc_core: IR keymap rc-hauppauge not found [ 123.253962][ T6010] Registered IR keymap rc-empty [ 123.258920][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 123.279856][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 123.288664][ T5846] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 123.324984][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.382'. [ 123.510781][ T6010] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 123.577980][ T5846] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 123.586362][ T5846] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 123.586795][ T6010] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 123.599755][ T5846] usb 1-1: config 0 has no interface number 0 [ 123.614540][ T7368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.645834][ T5846] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 123.646995][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 123.666849][ T5846] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.848677][ T5846] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 124.113586][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.154223][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.159747][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.178720][ T5846] usb 1-1: config 0 descriptor?? [ 124.230618][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.260092][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.261876][ T7394] overlay: filesystem on ./bus not supported as upperdir [ 124.299834][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.320331][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.355737][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 124.355749][ T30] audit: type=1400 audit(1755682637.185:647): avc: denied { add_name } for pid=7367 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.387676][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.405507][ T30] audit: type=1400 audit(1755682637.185:648): avc: denied { create } for pid=7367 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.427837][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.440764][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.530951][ T6010] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.560139][ T7404] rdma_rxe: rxe_newlink: failed to add syz_tun [ 124.600479][ T6010] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 124.619749][ T6010] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 124.689484][ T6010] usb 4-1: USB disconnect, device number 13 [ 124.718065][ T30] audit: type=1400 audit(1755682637.185:649): avc: denied { write } for pid=7367 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=3790 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.816352][ T5846] usb 1-1: USB disconnect, device number 16 [ 124.875129][ T30] audit: type=1400 audit(1755682637.185:650): avc: denied { append } for pid=7367 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3790 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.899363][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.240689][ T30] audit: type=1400 audit(1755682637.335:651): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 125.307072][ T30] audit: type=1400 audit(1755682637.525:652): avc: denied { remove_name } for pid=7405 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3790 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.330455][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.337520][ T30] audit: type=1400 audit(1755682637.525:653): avc: denied { unlink } for pid=7405 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3790 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.364496][ T30] audit: type=1400 audit(1755682637.645:654): avc: denied { create } for pid=7409 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.387463][ T30] audit: type=1400 audit(1755682637.645:655): avc: denied { bind } for pid=7409 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.420281][ T30] audit: type=1400 audit(1755682637.645:656): avc: denied { write } for pid=7409 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.221678][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803565e400: rx timeout, send abort [ 126.369769][ T5846] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 126.526216][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 126.544099][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.554149][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 126.669824][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 126.687536][ T7460] overlay: filesystem on ./bus not supported as upperdir [ 126.702849][ T5846] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 126.721184][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.729904][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803565e400: abort rx timeout. Force session deactivation [ 126.821473][ T5846] usb 3-1: Product: syz [ 126.828215][ T5846] usb 3-1: Manufacturer: syz [ 126.906850][ T5846] usb 3-1: SerialNumber: syz [ 126.934523][ T5846] usb 3-1: config 0 descriptor?? [ 127.304598][ T5846] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 127.540780][ T7446] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 128.383737][ T7513] overlayfs: failed to resolve './file1': -2 [ 128.599853][ T1208] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 128.732981][ T6010] usb 3-1: USB disconnect, device number 16 [ 129.240925][ T1208] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.264032][ T1208] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 129.293032][ T1208] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.313356][ T1208] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 129.353136][ T1208] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 129.404774][ T1208] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.414080][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.422277][ T1208] usb 5-1: Product: syz [ 129.429852][ T1208] usb 5-1: Manufacturer: syz [ 129.440026][ T1208] cdc_wdm 5-1:1.0: skipping garbage [ 129.445505][ T1208] cdc_wdm 5-1:1.0: skipping garbage [ 129.452180][ T1208] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 129.458141][ T1208] cdc_wdm 5-1:1.0: Unknown control protocol [ 129.535839][ T7541] overlayfs: failed to resolve './file1': -2 [ 129.566509][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 129.566519][ T30] audit: type=1400 audit(1755682642.385:674): avc: denied { read } for pid=7536 comm="syz.3.417" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.647203][ T7512] tmpfs: Bad value for 'mpol' [ 129.696571][ T30] audit: type=1400 audit(1755682642.385:675): avc: denied { open } for pid=7536 comm="syz.3.417" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.758461][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 129.778696][ T7553] netlink: 6 bytes leftover after parsing attributes in process `syz.3.417'. [ 129.805316][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.908252][ T30] audit: type=1400 audit(1755682642.415:676): avc: denied { map } for pid=7536 comm="syz.3.417" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.932537][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.021295][ T30] audit: type=1400 audit(1755682642.475:677): avc: denied { read } for pid=7511 comm="syz.4.412" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 130.088208][ T30] audit: type=1400 audit(1755682642.475:678): avc: denied { open } for pid=7511 comm="syz.4.412" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 130.168651][ T30] audit: type=1400 audit(1755682642.475:679): avc: denied { ioctl } for pid=7511 comm="syz.4.412" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 130.197716][ T30] audit: type=1400 audit(1755682642.635:680): avc: denied { read write } for pid=7511 comm="syz.4.412" name="cdc-wdm0" dev="devtmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 130.304480][ T30] audit: type=1400 audit(1755682642.635:681): avc: denied { open } for pid=7511 comm="syz.4.412" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 130.699789][ T30] audit: type=1400 audit(1755682643.505:682): avc: denied { create } for pid=7569 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 130.839552][ T7576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.423'. [ 130.849622][ T5847] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 130.883794][ T30] audit: type=1400 audit(1755682643.505:683): avc: denied { write } for pid=7569 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.283795][ T7570] syz.2.421 (7570): drop_caches: 2 [ 131.290404][ T7570] syz.2.421 (7570): drop_caches: 2 [ 131.559915][ T7589] overlay: filesystem on ./bus not supported as upperdir [ 131.869791][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 131.915337][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.932462][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.309740][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 132.319204][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 132.327712][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 132.336414][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 132.347721][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.529577][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.557055][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.577409][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 132.602447][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 132.617740][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.637185][ T10] usb 3-1: config 0 descriptor?? [ 132.876315][ T7623] overlayfs: failed to resolve './file1': -2 [ 133.007462][ T10] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 133.223373][ T10] usb 3-1: USB disconnect, device number 17 [ 133.237403][ T10] usblp1: removed [ 134.972673][ T7634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.436'. [ 135.033096][ T7644] 9pnet_fd: Insufficient options for proto=fd [ 135.038438][ T5854] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 135.212355][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 135.212370][ T30] audit: type=1400 audit(1755682648.045:699): avc: denied { bind } for pid=7646 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.239834][ T30] audit: type=1400 audit(1755682648.045:700): avc: denied { ioctl } for pid=7646 comm="syz.3.442" path="socket:[16877]" dev="sockfs" ino=16877 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.601399][ T30] audit: type=1400 audit(1755682648.405:701): avc: denied { nlmsg_write } for pid=7646 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.625139][ T7655] ALSA: mixer_oss: invalid OSS volume 'u' [ 135.821073][ T30] audit: type=1400 audit(1755682648.565:702): avc: denied { getopt } for pid=7646 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.194627][ T30] audit: type=1400 audit(1755682650.025:703): avc: denied { create } for pid=7679 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.334945][ T30] audit: type=1400 audit(1755682650.025:704): avc: denied { connect } for pid=7679 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.409868][ T1208] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 137.448039][ T7683] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 137.457034][ T7683] overlayfs: missing 'lowerdir' [ 137.609781][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 137.623239][ T1208] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 137.646279][ T1208] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 137.669768][ T1208] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 137.692722][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.724546][ T1208] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.761615][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 137.789727][ T1208] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 137.825615][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.858620][ T1208] usb 4-1: config 0 descriptor?? [ 138.193940][ T1208] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 138.204787][ T5949] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 138.287590][ T1208] usb 4-1: USB disconnect, device number 14 [ 138.296832][ T1208] usblp1: removed [ 138.441058][ T5949] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.455734][ T7706] overlayfs: failed to resolve './file1': -2 [ 138.462050][ T5949] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.523146][ T5949] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.555155][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.819747][ T5949] usb 3-1: GET_CAPABILITIES returned 0 [ 138.829240][ T5949] usbtmc 3-1:16.0: can't read capabilities [ 138.839766][ T30] audit: type=1400 audit(1755682651.575:705): avc: denied { ioctl } for pid=7707 comm="syz.4.457" path="socket:[17055]" dev="sockfs" ino=17055 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.519717][ T30] audit: type=1400 audit(1755682652.335:706): avc: denied { create } for pid=7720 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.562798][ T5949] usb 3-1: USB disconnect, device number 18 [ 140.604937][ T30] audit: type=1400 audit(1755682653.405:707): avc: denied { create } for pid=7743 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 140.691990][ T7747] netlink: zone id is out of range [ 140.697174][ T7747] netlink: zone id is out of range [ 140.703995][ T7747] netlink: zone id is out of range [ 140.709786][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 140.717702][ T7747] netlink: zone id is out of range [ 140.722861][ T7747] netlink: zone id is out of range [ 140.728241][ T7747] netlink: zone id is out of range [ 140.733507][ T7747] netlink: zone id is out of range [ 140.738774][ T7747] netlink: zone id is out of range [ 140.767715][ T30] audit: type=1400 audit(1755682653.595:708): avc: denied { read } for pid=7732 comm="syz.4.465" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 140.799507][ T7747] netlink: zone id is out of range [ 140.804876][ T7747] netlink: zone id is out of range [ 140.909992][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 141.044991][ T30] audit: type=1400 audit(1755682653.595:709): avc: denied { open } for pid=7732 comm="syz.4.465" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.076435][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.125141][ T7738] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.131162][ T7738] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.151770][ T7738] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.182865][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.194319][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.232417][ T10] usb 1-1: config 0 descriptor?? [ 141.251050][ T7738] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.312310][ T7738] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.368153][ T7738] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.404076][ T7738] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.594727][ T7738] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.602914][ T7738] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.624575][ T7738] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.641229][ T7738] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.653582][ T7738] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.668654][ T7738] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.820693][ T10] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 141.866002][ T7738] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.889630][ T7738] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.915891][ T7738] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.962202][ T7738] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.971480][ T7738] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 142.033663][ T7779] tipc: Enabling of bearer rejected, failed to enable media [ 142.140834][ T5935] usb 1-1: USB disconnect, device number 17 [ 142.143015][ T30] audit: type=1400 audit(1755682654.965:710): avc: denied { ioctl } for pid=7735 comm="syz.0.458" path="socket:[16256]" dev="sockfs" ino=16256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.675554][ T30] audit: type=1400 audit(1755682655.205:711): avc: denied { bind } for pid=7792 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.762808][ T30] audit: type=1800 audit(1755682655.595:712): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.470" name="bus" dev="ramfs" ino=16327 res=0 errno=0 [ 142.876620][ T30] audit: type=1400 audit(1755682655.705:713): avc: denied { append } for pid=7790 comm="syz.4.470" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.969736][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.241327][ T7819] rdma_rxe: rxe_newlink: failed to add syz_tun [ 143.430558][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.690047][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.692663][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.949797][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 144.099740][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 144.339746][ T5949] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 144.361564][ T10] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 144.369954][ T10] usb 1-1: config 0 has no interface number 0 [ 144.377899][ T10] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 144.387728][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.396589][ T10] usb 1-1: Product: syz [ 144.401050][ T10] usb 1-1: Manufacturer: syz [ 144.405816][ T10] usb 1-1: SerialNumber: syz [ 144.413897][ T10] usb 1-1: config 0 descriptor?? [ 144.552540][ T7832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.558553][ T7832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.565013][ T7832] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.575170][ T7832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.579786][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 144.581595][ T7832] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.633972][ T5949] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 144.655451][ T5949] usb 2-1: config 0 has no interface number 0 [ 144.669179][ T5949] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.697487][ T7844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.710002][ T7844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.720619][ T5949] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.820841][ T7845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.483'. [ 144.886490][ T10] usb 1-1: Firmware version (0.0) predates our first public release. [ 144.911555][ T10] usb 1-1: Please update to version 0.2 or newer [ 144.934960][ T10] usb 1-1: Firmware: build [ 145.380497][ T5846] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 145.539812][ T5846] usb 4-1: device descriptor read/64, error -71 [ 145.583731][ T5854] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 145.810162][ T5846] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 145.969876][ T5846] usb 4-1: device descriptor read/64, error -71 [ 146.081116][ T5846] usb usb4-port1: attempt power cycle [ 146.262406][ T5949] usb 2-1: config 0 interface 85 has no altsetting 0 [ 146.271271][ T5949] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 146.280350][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.288460][ T5949] usb 2-1: Product: syz [ 146.294789][ T5949] usb 2-1: Manufacturer: syz [ 146.299899][ T5949] usb 2-1: SerialNumber: syz [ 146.319006][ T5949] usb 2-1: config 0 descriptor?? [ 146.329777][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.429043][ T1208] usb 1-1: USB disconnect, device number 18 [ 146.504072][ T30] audit: type=1400 audit(1755682659.335:714): avc: denied { create } for pid=7859 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 146.510289][ T5846] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 146.543379][ T7841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.552090][ T7841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.561597][ T30] audit: type=1400 audit(1755682659.365:715): avc: denied { setopt } for pid=7856 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.588133][ T5949] appletouch 2-1:0.85: Failed to read mode from device. [ 146.624719][ T5949] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 146.628762][ T30] audit: type=1400 audit(1755682659.425:716): avc: denied { setopt } for pid=7856 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.635690][ T5949] usb 2-1: USB disconnect, device number 8 [ 146.660384][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.661569][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.666366][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.674247][ T5846] usb 4-1: device descriptor read/8, error -71 [ 146.847785][ T7867] overlayfs: failed to resolve './file1': -2 [ 147.019742][ T5846] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 147.046224][ T5846] usb 4-1: device descriptor read/8, error -71 [ 147.160434][ T5846] usb usb4-port1: unable to enumerate USB device [ 148.235201][ T7882] smc: net device bond0 applied user defined pnetid SYZ0 [ 148.248233][ T7882] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 148.253176][ T7885] netlink: 124 bytes leftover after parsing attributes in process `syz.2.495'. [ 148.257914][ T7882] smc: net device bond0 erased user defined pnetid SYZ0 [ 148.265950][ T7885] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 148.283531][ T7885] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 148.311307][ T7882] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 148.409786][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.469738][ T5935] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.477260][ T1208] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 148.602323][ T7894] overlayfs: failed to resolve './file1': -2 [ 148.634029][ T5935] usb 2-1: device descriptor read/64, error -71 [ 148.669742][ T1208] usb 1-1: Using ep0 maxpacket: 32 [ 148.699492][ T1208] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 148.708769][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.716837][ T1208] usb 1-1: Product: syz [ 148.727588][ T1208] usb 1-1: Manufacturer: syz [ 148.729794][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.738185][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 148.744694][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.756826][ T1208] usb 1-1: SerialNumber: syz [ 148.771044][ T1208] usb 1-1: config 0 descriptor?? [ 148.889863][ T5935] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 149.039806][ T5935] usb 2-1: device descriptor read/64, error -71 [ 149.150021][ T5935] usb usb2-port1: attempt power cycle [ 149.179106][ T1208] airspy 1-1:0.0: Board ID: 00 [ 149.184402][ T1208] airspy 1-1:0.0: Firmware version: [ 149.406519][ T7906] loop7: detected capacity change from 0 to 16384 [ 149.591405][ T5935] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.680227][ T5935] usb 2-1: device descriptor read/8, error -71 [ 149.789902][ T7914] loop7: detected capacity change from 16384 to 0 [ 149.808536][ T1208] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 149.816504][ C0] I/O error, dev loop7, sector 9472 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 1 [ 149.816980][ T1208] airspy 1-1:0.0: Registered as swradio24 [ 149.899785][ T1208] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 149.917714][ T1208] usb 1-1: USB disconnect, device number 19 [ 149.939761][ T5935] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 149.970165][ T5935] usb 2-1: device descriptor read/8, error -71 [ 150.130925][ T5935] usb usb2-port1: unable to enumerate USB device [ 150.489818][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.502974][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'. [ 150.809733][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.815948][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.314700][ T30] audit: type=1400 audit(1755682664.145:717): avc: denied { accept } for pid=7933 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.340382][ T7936] JFS: charset not found [ 152.424351][ T30] audit: type=1400 audit(1755682664.715:718): avc: denied { ioctl } for pid=7947 comm="syz.2.509" path="socket:[17759]" dev="sockfs" ino=17759 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.607476][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.516'. [ 152.832901][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.899871][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.932212][ T7974] ptrace attach of "./syz-executor exec"[5843] was attempted by " [ 153.041175][ T30] audit: type=1400 audit(1755682665.865:719): avc: denied { ioctl } for pid=7967 comm="syz.2.518" path="socket:[17794]" dev="sockfs" ino=17794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.160797][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 153.208071][ T7982] overlayfs: failed to resolve './file1': -2 [ 153.874227][ T7995] tipc: Started in network mode [ 153.879092][ T7995] tipc: Node identity 3a145d2c7d86, cluster identity 4711 [ 153.888480][ T7995] tipc: Enabled bearer , priority 0 [ 153.900585][ T7995] syzkaller0: entered promiscuous mode [ 153.906041][ T7995] syzkaller0: entered allmulticast mode [ 153.923098][ T7995] netlink: 21 bytes leftover after parsing attributes in process `syz.0.524'. [ 153.937866][ T7995] tipc: Resetting bearer [ 153.945112][ T7994] tipc: Resetting bearer [ 153.957870][ T7994] tipc: Disabling bearer [ 154.018405][ T7998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.525'. [ 154.056137][ T30] audit: type=1400 audit(1755682666.845:720): avc: denied { write } for pid=7997 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.102328][ T30] audit: type=1400 audit(1755682666.865:721): avc: denied { read write } for pid=5840 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.215216][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 154.224184][ T8005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.527'. [ 154.315696][ T30] audit: type=1400 audit(1755682666.865:722): avc: denied { open } for pid=5840 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.397264][ T30] audit: type=1400 audit(1755682666.865:723): avc: denied { ioctl } for pid=5840 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.476171][ T30] audit: type=1400 audit(1755682666.875:724): avc: denied { create } for pid=7999 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.541595][ T5854] Bluetooth: hci4: unexpected event for opcode 0x203e [ 154.807061][ T30] audit: type=1400 audit(1755682666.875:725): avc: denied { bind } for pid=7999 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.845662][ T30] audit: type=1400 audit(1755682666.875:726): avc: denied { setopt } for pid=7999 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.937072][ T8014] netlink: 176 bytes leftover after parsing attributes in process `syz.1.531'. [ 154.938901][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.988159][ T8019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8019 comm=syz.1.531 [ 155.033122][ T30] audit: type=1400 audit(1755682666.875:727): avc: denied { accept } for pid=7999 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.124030][ T8024] Invalid ELF header type: 3 != 1 [ 155.162065][ T8032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 155.217181][ T8035] 9pnet_fd: Insufficient options for proto=fd [ 155.350552][ T8043] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 155.376628][ T8043] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 155.402235][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.416385][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.522058][ T5846] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 155.842957][ T5846] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 155.852361][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.862226][ T5846] usb 2-1: Product: syz [ 155.866757][ T5846] usb 2-1: Manufacturer: syz [ 155.871420][ T5846] usb 2-1: SerialNumber: syz [ 155.883888][ T5846] usb 2-1: config 0 descriptor?? [ 155.891375][ T5846] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 155.899413][ T5846] usb 2-1: setting power ON [ 155.904591][ T5846] dvb-usb: bulk message failed: -22 (2/0) [ 155.915659][ T5846] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 155.930343][ T5846] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 155.940521][ T5846] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 156.118983][ T8061] __nla_validate_parse: 1 callbacks suppressed [ 156.118995][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.546'. [ 156.144589][ T1208] usb 2-1: USB disconnect, device number 13 [ 156.173930][ T8049] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.180063][ T8052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.180924][ T8049] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 156.186479][ T8052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.196018][ T8049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.224399][ T8049] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 156.232668][ T8049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.238597][ T8052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.244888][ T8049] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 156.252864][ T8052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.260127][ T8049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.266006][ T8049] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 156.274822][ T8049] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.280760][ T8049] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 156.437226][ T8072] 9pnet_fd: Insufficient options for proto=fd [ 156.509762][ T6010] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 156.757093][ T8083] overlayfs: failed to resolve './file1': -2 [ 156.770659][ T6010] usb 3-1: Using ep0 maxpacket: 32 [ 156.776862][ T6010] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.788811][ T6010] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 156.798397][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.806494][ T6010] usb 3-1: Product: syz [ 156.828549][ T6010] usb 3-1: Manufacturer: syz [ 156.833320][ T6010] usb 3-1: SerialNumber: syz [ 156.875508][ T6010] usb 3-1: config 0 descriptor?? [ 156.898270][ T6010] usb 3-1: no audio or video endpoints found [ 156.979885][ T1208] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 157.102866][ T6010] usb 3-1: USB disconnect, device number 19 [ 157.140292][ T1208] usb 2-1: Using ep0 maxpacket: 8 [ 157.157236][ T1208] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.173196][ T1208] usb 2-1: config 9 has an invalid interface number: 78 but max is 0 [ 157.182080][ T1208] usb 2-1: config 9 has no interface number 0 [ 157.188885][ T1208] usb 2-1: config 9 interface 78 altsetting 6 endpoint 0x2 has an invalid bInterval 250, changing to 11 [ 157.210399][ T1208] usb 2-1: config 9 interface 78 has no altsetting 0 [ 157.219313][ T1208] usb 2-1: New USB device found, idVendor=07fa, idProduct=0846, bcdDevice=86.84 [ 157.228921][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.242604][ T1208] usb 2-1: Product: syz [ 157.249582][ T1208] usb 2-1: Manufacturer: syz [ 157.257803][ T1208] usb 2-1: SerialNumber: syz [ 157.500812][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.509236][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.540208][ T1208] HFC-S_USB 2-1:9.78: probe with driver HFC-S_USB failed with error -5 [ 157.542869][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 157.542881][ T30] audit: type=1400 audit(1755682670.375:806): avc: denied { ioctl } for pid=8089 comm="syz.4.556" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 157.592344][ T1208] usb 2-1: USB disconnect, device number 14 [ 157.667344][ T30] audit: type=1400 audit(1755682670.475:807): avc: denied { map_read map_write } for pid=8091 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 157.776360][ T30] audit: type=1400 audit(1755682670.605:808): avc: denied { mount } for pid=8097 comm="syz.2.560" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 158.336921][ T8099] pimreg: entered allmulticast mode [ 158.440654][ T30] audit: type=1326 audit(1755682670.805:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f46d8ebe9 code=0x7ffc0000 [ 158.562441][ T30] audit: type=1326 audit(1755682670.805:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f46d8ebe9 code=0x7ffc0000 [ 158.563958][ T8100] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.592687][ T30] audit: type=1326 audit(1755682670.805:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f1f46d8ebe9 code=0x7ffc0000 [ 158.618449][ T8100] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 158.626135][ T8100] audit: backlog limit exceeded [ 158.635557][ T8097] pimreg: left allmulticast mode [ 158.674996][ T8100] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.749635][ T8112] fuse: Unknown parameter 'df\ [ 158.749635][ T8112] pEefault_iermissions' [ 158.761931][ T8112] fuse: Bad value for 'user_id' [ 158.767042][ T8112] fuse: Bad value for 'user_id' [ 158.775674][ T8111] FAULT_INJECTION: forcing a failure. [ 158.775674][ T8111] name failslab, interval 1, probability 0, space 0, times 0 [ 158.861332][ T8111] CPU: 1 UID: 0 PID: 8111 Comm: syz.2.562 Not tainted syzkaller #0 PREEMPT(full) [ 158.861357][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.861367][ T8111] Call Trace: [ 158.861372][ T8111] [ 158.861378][ T8111] dump_stack_lvl+0x16c/0x1f0 [ 158.861401][ T8111] should_fail_ex+0x512/0x640 [ 158.861421][ T8111] should_failslab+0xc2/0x120 [ 158.861441][ T8111] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 158.861458][ T8111] ? __alloc_skb+0x2b2/0x380 [ 158.861474][ T8111] ? avc_has_perm+0x144/0x1f0 [ 158.861496][ T8111] __alloc_skb+0x2b2/0x380 [ 158.861510][ T8111] ? __pfx___alloc_skb+0x10/0x10 [ 158.861524][ T8111] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 158.861546][ T8111] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 158.861571][ T8111] netlink_alloc_large_skb+0x69/0x130 [ 158.861591][ T8111] netlink_sendmsg+0x6a1/0xdd0 [ 158.861610][ T8111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.861632][ T8111] ____sys_sendmsg+0xa95/0xc70 [ 158.861653][ T8111] ? copy_msghdr_from_user+0x10a/0x160 [ 158.861670][ T8111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.861690][ T8111] ? __pfx_kstrtouint+0x10/0x10 [ 158.861709][ T8111] ? kstrtouint_from_user+0x13c/0x1d0 [ 158.861727][ T8111] ___sys_sendmsg+0x134/0x1d0 [ 158.861743][ T8111] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.861762][ T8111] ? rcu_is_watching+0x12/0xc0 [ 158.861787][ T8111] __sys_sendmsg+0x16d/0x220 [ 158.861804][ T8111] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.861826][ T8111] do_syscall_64+0xcd/0x4c0 [ 158.861845][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.861862][ T8111] RIP: 0033:0x7f1f46d8ebe9 [ 158.861875][ T8111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.861892][ T8111] RSP: 002b:00007f1f47be3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.861908][ T8111] RAX: ffffffffffffffda RBX: 00007f1f46fb5fa0 RCX: 00007f1f46d8ebe9 [ 158.861919][ T8111] RDX: 0000000024040840 RSI: 0000200000000200 RDI: 0000000000000003 [ 158.861929][ T8111] RBP: 00007f1f47be3090 R08: 0000000000000000 R09: 0000000000000000 [ 158.861938][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.861948][ T8111] R13: 00007f1f46fb6038 R14: 00007f1f46fb5fa0 R15: 00007ffde6f46198 [ 158.861964][ T8111] [ 159.096342][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.104031][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 159.279973][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 159.285463][ T10] usb 4-1: no configurations [ 159.290077][ T10] usb 4-1: can't read configurations, error -22 [ 159.419799][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 159.569738][ T5989] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 159.577252][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 159.584085][ T10] usb 4-1: no configurations [ 159.588666][ T10] usb 4-1: can't read configurations, error -22 [ 159.595360][ T10] usb usb4-port1: attempt power cycle [ 159.659740][ T5846] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 159.730933][ T5989] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 159.739197][ T5989] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 159.747325][ T5989] usb 1-1: config 0 has no interface number 0 [ 159.753402][ T5989] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 159.763988][ T5989] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.774322][ T5989] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 159.784125][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.795388][ T5989] usb 1-1: config 0 descriptor?? [ 159.809855][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 159.819124][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 159.865391][ T8131] overlayfs: failed to resolve './file1': -2 [ 159.908201][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.919154][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.931530][ T5846] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 159.941181][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.949157][ T5846] usb 3-1: Product: syz [ 159.953376][ T5846] usb 3-1: Manufacturer: syz [ 159.959520][ T5846] usb 3-1: SerialNumber: syz [ 159.959834][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 159.974350][ T5846] usb 3-1: config 0 descriptor?? [ 159.984020][ T5846] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 159.996091][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 160.004103][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 160.013625][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 160.019285][ T10] usb 4-1: no configurations [ 160.026084][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 160.034269][ T10] usb 4-1: can't read configurations, error -22 [ 160.040600][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 160.048911][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 160.057188][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 160.065405][ T5846] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 160.170118][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 160.192776][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 160.200601][ T10] usb 4-1: no configurations [ 160.206747][ T10] usb 4-1: can't read configurations, error -22 [ 160.216555][ T10] usb usb4-port1: unable to enumerate USB device [ 160.587436][ T8135] overlayfs: failed to resolve './file1': -2 [ 160.999793][ T5949] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 161.161443][ T5949] usb 2-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 161.241970][ T5949] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 11 [ 161.256206][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.273810][ T5949] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 161.288428][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.314964][ T5949] usb 2-1: config 0 descriptor?? [ 161.525778][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.534389][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.560740][ T5949] usb 2-1: string descriptor 0 read error: -71 [ 161.567902][ T5949] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 161.578058][ T5949] usb 2-1: USB disconnect, device number 15 [ 162.518330][ T5989] usb 1-1: USB disconnect, device number 20 [ 162.539726][ T8175] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 162.594574][ T1208] usb 3-1: USB disconnect, device number 20 [ 162.714569][ T1208] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 162.725965][ T1208] keyspan 3-1:0.0: device disconnected [ 162.745504][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 162.745513][ T30] audit: type=1400 audit(1755682675.575:885): avc: denied { create } for pid=8176 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.783711][ T30] audit: type=1400 audit(1755682675.605:886): avc: denied { setopt } for pid=8176 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.997770][ T30] audit: type=1400 audit(1755682675.605:887): avc: denied { bind } for pid=8176 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.073386][ T30] audit: type=1400 audit(1755682675.645:888): avc: denied { read } for pid=8181 comm="syz.0.581" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.097421][ T8191] overlayfs: missing 'lowerdir' [ 163.102380][ T30] audit: type=1400 audit(1755682675.645:889): avc: denied { open } for pid=8181 comm="syz.0.581" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.150990][ T30] audit: type=1400 audit(1755682675.645:890): avc: denied { ioctl } for pid=8181 comm="syz.0.581" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.176188][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.214836][ T8197] overlayfs: failed to resolve './file1': -2 [ 163.235505][ T8199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.584'. [ 163.536720][ T30] audit: type=1400 audit(1755682675.725:891): avc: denied { write } for pid=8179 comm="syz.3.582" name="udp6" dev="proc" ino=4026533115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 163.614847][ T30] audit: type=1400 audit(1755682675.825:892): avc: denied { create } for pid=8178 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 163.639104][ T8180] loop2: detected capacity change from 0 to 7 [ 163.655765][ T30] audit: type=1400 audit(1755682675.905:893): avc: denied { read write } for pid=8178 comm="syz.4.580" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 163.679781][ T30] audit: type=1400 audit(1755682675.905:894): avc: denied { open } for pid=8178 comm="syz.4.580" path="/136/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 163.685882][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.711681][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.723308][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.732411][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.755461][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.764561][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.779869][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.789003][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.799446][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.808593][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.816707][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.825809][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.834728][ T5846] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 163.842365][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.851461][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.859532][ T8180] ldm_validate_partition_table(): Disk read failed. [ 163.869716][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.878838][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.886835][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.895946][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.903990][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.913095][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.922041][ T8180] Dev loop2: unable to read RDB block 0 [ 163.928117][ T8180] loop2: unable to read partition table [ 163.944384][ T8180] loop2: partition table beyond EOD, truncated [ 163.961968][ T8180] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 163.994646][ T8210] capability: warning: `syz.0.587' uses deprecated v2 capabilities in a way that may be insecure [ 164.022503][ T5846] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 164.033387][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.041282][ T5846] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 164.073167][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.092449][ T5846] usb 4-1: config 0 descriptor?? [ 164.098558][ T8204] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.519857][ T5846] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 164.527555][ T5846] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 164.628320][ T5846] konepure 0003:1E7D:2DBE.0004: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 164.791983][ T5846] usb 4-1: USB disconnect, device number 23 [ 164.926764][ T8233] overlayfs: failed to resolve './file1': -2 [ 164.969647][ T8236] overlayfs: failed to resolve './file1': -2 [ 165.324192][ T8245] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 165.395609][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.429869][ T5846] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 165.444792][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.484189][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.502443][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.583955][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 165.671395][ T5846] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 165.679510][ T5846] usb 1-1: config 0 has no interface number 0 [ 165.703392][ T5846] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.714334][ T5846] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.736097][ T5846] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 165.752326][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 165.779021][ T5846] usb 1-1: Product: syz [ 165.789133][ T5846] usb 1-1: SerialNumber: syz [ 165.910560][ T5846] usb 1-1: config 0 descriptor?? [ 165.959602][ T8256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.601'. [ 166.163299][ T5846] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 166.177582][ T5846] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input20 [ 166.450061][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.453444][ T1208] usb 1-1: USB disconnect, device number 21 [ 166.457020][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 166.496406][ T1208] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 166.741422][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 166.944994][ T8275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.282975][ T5846] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 167.323087][ T8302] overlayfs: failed to resolve './file1': -2 [ 167.523109][ T5846] usb 4-1: device descriptor read/64, error -71 [ 167.654939][ T8306] syzkaller0: entered promiscuous mode [ 167.799099][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 167.799126][ T30] audit: type=1400 audit(1755682680.575:930): avc: denied { mounton } for pid=8307 comm="syz.2.618" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.833573][ T8306] syzkaller0: entered allmulticast mode [ 167.964190][ T8311] net_ratelimit: 23 callbacks suppressed [ 167.964202][ T8311] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 167.993701][ T5846] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 168.142433][ T30] audit: type=1400 audit(1755682680.575:931): avc: denied { mount } for pid=8307 comm="syz.2.618" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 168.164604][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.172206][ T5846] usb 4-1: device descriptor read/64, error -71 [ 168.281651][ T30] audit: type=1400 audit(1755682681.095:932): avc: denied { connect } for pid=8313 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.326939][ T5846] usb usb4-port1: attempt power cycle [ 168.468081][ T30] audit: type=1400 audit(1755682681.275:933): avc: denied { read write } for pid=8316 comm="syz.1.620" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 168.522443][ T8318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.620'. [ 168.539756][ T30] audit: type=1400 audit(1755682681.275:934): avc: denied { open } for pid=8316 comm="syz.1.620" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 168.541391][ T8322] netlink: 96 bytes leftover after parsing attributes in process `syz.2.622'. [ 168.563973][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.669981][ T5846] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 168.684812][ T30] audit: type=1400 audit(1755682681.515:935): avc: denied { execute } for pid=8323 comm="syz.4.624" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=20487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 168.716169][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.782748][ T5989] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 168.790351][ T5846] usb 4-1: device descriptor read/8, error -71 [ 168.996240][ T1208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1208 comm=kworker/1:2 [ 169.009535][ T8329] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 169.039857][ T5989] usb 1-1: Using ep0 maxpacket: 32 [ 169.060340][ T5989] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 169.068643][ T5989] usb 1-1: config 0 has no interface number 0 [ 169.081011][ T5989] usb 1-1: config 0 interface 184 has no altsetting 0 [ 169.089543][ T5989] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 169.098694][ T5846] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 169.103422][ T30] audit: type=1400 audit(1755682681.935:936): avc: denied { read } for pid=8332 comm="syz.2.627" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 169.110675][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.128671][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.146632][ T5989] usb 1-1: Product: syz [ 169.151071][ T5989] usb 1-1: Manufacturer: syz [ 169.155718][ T5989] usb 1-1: SerialNumber: syz [ 169.159107][ T30] audit: type=1400 audit(1755682681.935:937): avc: denied { open } for pid=8332 comm="syz.2.627" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 169.162933][ T5846] usb 4-1: device descriptor read/8, error -71 [ 169.198185][ T5989] usb 1-1: config 0 descriptor?? [ 169.205272][ T5989] smsc75xx v1.0.0 [ 169.310824][ T5846] usb usb4-port1: unable to enumerate USB device [ 169.369837][ T6010] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 169.428435][ T8340] overlayfs: failed to resolve './file1': -2 [ 169.529761][ T6010] usb 3-1: device descriptor read/64, error -71 [ 169.581821][ T30] audit: type=1400 audit(1755682682.415:938): avc: denied { setattr } for pid=8337 comm="syz.1.629" name="KEY" dev="sockfs" ino=20529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.799751][ T6010] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 169.929729][ T6010] usb 3-1: device descriptor read/64, error -71 [ 170.027229][ T6716] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.036819][ T6716] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.050067][ T6010] usb usb3-port1: attempt power cycle [ 170.157504][ T8349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.199180][ T8349] overlayfs: missing 'lowerdir' [ 170.310748][ T30] audit: type=1400 audit(1755682683.145:939): avc: denied { write } for pid=8357 comm="syz.3.637" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 170.426403][ T8364] smc: net device bond0 applied user defined pnetid SYZ0 [ 170.433617][ T8364] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 170.442446][ T8320] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 170.458952][ T8364] smc: net device bond0 erased user defined pnetid SYZ0 [ 170.476431][ T8320] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 170.484041][ T8364] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 170.807728][ T6010] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 171.051459][ T6010] usb 3-1: device descriptor read/8, error -71 [ 171.135121][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.148508][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.159126][ T6716] smc: removing ib device syz1 [ 171.191360][ T1208] syz1: Port: 1 Link DOWN [ 171.289800][ T6010] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 171.320124][ T6010] usb 3-1: device descriptor read/8, error -71 [ 171.327548][ T8365] random: crng reseeded on system resumption [ 171.449957][ T6010] usb usb3-port1: unable to enumerate USB device [ 171.613073][ T8383] siw: device registration error -23 [ 172.180666][ T5989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 172.191536][ T5989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 172.201669][ T5989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 172.213074][ T5989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 172.225548][ T5989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 172.271166][ T8397] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.647'. [ 172.274969][ T5989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 172.291114][ T5989] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 172.316257][ T5989] usb 1-1: USB disconnect, device number 22 [ 172.563716][ T8408] ISOFS: Unable to identify CD-ROM format. [ 172.573001][ T8408] openvswitch: netlink: Missing valid actions attribute. [ 172.581287][ T8408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.999035][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 172.999060][ T30] audit: type=1400 audit(1755682685.825:969): avc: denied { mounton } for pid=8413 comm="syz.1.652" path="/syzcgroup/unified/syz1" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 173.293551][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.344935][ T30] audit: type=1400 audit(1755682685.895:970): avc: denied { ioctl } for pid=8413 comm="syz.1.652" path="socket:[20716]" dev="sockfs" ino=20716 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.371226][ T30] audit: type=1400 audit(1755682685.905:971): avc: denied { connect } for pid=8413 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.384588][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.391672][ T30] audit: type=1400 audit(1755682686.125:972): avc: denied { bind } for pid=8426 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.426775][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.438486][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.557347][ T30] audit: type=1400 audit(1755682686.375:973): avc: denied { remount } for pid=8420 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 173.756138][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.765385][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.218493][ T30] audit: type=1400 audit(1755682687.045:974): avc: denied { write } for pid=8460 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.253845][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'. [ 174.272488][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'. [ 174.281899][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'. [ 174.290945][ T30] audit: type=1400 audit(1755682687.095:975): avc: denied { read } for pid=8460 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.294384][ T8463] sit1: entered allmulticast mode [ 174.390598][ T30] audit: type=1400 audit(1755682687.125:976): avc: denied { write } for pid=8462 comm="syz.3.661" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.474696][ T30] audit: type=1400 audit(1755682687.175:977): avc: denied { setattr } for pid=8462 comm="syz.3.661" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.857927][ T30] audit: type=1400 audit(1755682687.685:978): avc: denied { ioctl } for pid=8472 comm="syz.1.664" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.347289][ T8478] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 175.413100][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 175.429918][ T8486] bridge_slave_0: left allmulticast mode [ 175.435604][ T8486] bridge_slave_0: left promiscuous mode [ 175.444679][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.530660][ T1208] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 175.703975][ T1208] usb 2-1: device descriptor read/64, error -71 [ 175.818570][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 176.100293][ T1208] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 176.289733][ T1208] usb 2-1: device descriptor read/64, error -71 [ 176.428903][ T1208] usb usb2-port1: attempt power cycle [ 176.717027][ T8520] overlayfs: failed to resolve './file1': -2 [ 176.770839][ T1208] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 176.970933][ T1208] usb 2-1: device descriptor read/8, error -71 [ 177.029888][ T5989] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 177.229924][ T1208] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 177.352179][ T1208] usb 2-1: device descriptor read/8, error -71 [ 177.448825][ T5989] usb 1-1: Using ep0 maxpacket: 32 [ 177.459855][ T1208] usb usb2-port1: unable to enumerate USB device [ 177.466193][ T5989] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 177.483594][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.659745][ T5989] usb 1-1: Product: syz [ 177.663917][ T5989] usb 1-1: Manufacturer: syz [ 177.668488][ T5989] usb 1-1: SerialNumber: syz [ 177.705192][ T5989] usb 1-1: config 0 descriptor?? [ 177.715833][ T5989] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 177.877661][ T8547] netlink: 'syz.2.684': attribute type 2 has an invalid length. [ 177.964691][ T5989] gspca_topro: reg_w err -71 [ 178.000665][ T5989] gspca_topro: Sensor soi763a [ 178.028401][ T5989] usb 1-1: USB disconnect, device number 23 [ 178.480074][ T54] usb 3-1: [UEAGLE-ATM] firmware is not available [ 178.482537][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 178.482550][ T30] audit: type=1400 audit(1755682691.255:987): avc: denied { connect } for pid=8555 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.874519][ T8574] netlink: 13 bytes leftover after parsing attributes in process `syz.3.690'. [ 180.166367][ T8575] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 180.332452][ T8575] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 180.380119][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 180.404031][ T30] audit: type=1400 audit(1755682693.235:988): avc: denied { name_connect } for pid=8581 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 180.549760][ T30] audit: type=1400 audit(1755682693.235:989): avc: denied { shutdown } for pid=8581 comm="syz.1.692" lport=46009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.652490][ T30] audit: type=1400 audit(1755682693.285:990): avc: denied { create } for pid=8572 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.888341][ T30] audit: type=1400 audit(1755682693.615:991): avc: denied { bind } for pid=8591 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.390704][ T30] audit: type=1400 audit(1755682693.635:992): avc: denied { getopt } for pid=8595 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.563008][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 181.572699][ T8619] bridge_slave_1: left allmulticast mode [ 181.579095][ T8619] bridge_slave_1: left promiscuous mode [ 181.586295][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.707914][ T8619] bridge_slave_0: left allmulticast mode [ 181.714152][ T8619] bridge_slave_0: left promiscuous mode [ 181.721428][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.943739][ T8626] smc: net device bond0 applied user defined pnetid SYZ0 [ 181.968464][ T8626] smc: net device bond0 erased user defined pnetid SYZ0 [ 182.022845][ T30] audit: type=1400 audit(1755682694.855:993): avc: denied { append } for pid=8627 comm="syz.0.702" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.077746][ T8628] 9pnet_fd: Insufficient options for proto=fd [ 182.140785][ T30] audit: type=1400 audit(1755682694.905:994): avc: denied { write } for pid=8627 comm="syz.0.702" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 183.407056][ T8655] nfs: Unknown parameter '' [ 183.687575][ T30] audit: type=1400 audit(1755682696.515:995): avc: denied { write } for pid=8665 comm="syz.1.713" path="socket:[21359]" dev="sockfs" ino=21359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.543905][ T30] audit: type=1326 audit(1755682698.295:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.4.711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bd958ebe9 code=0x0 [ 185.764238][ T30] audit: type=1400 audit(1755682698.585:997): avc: denied { create } for pid=8665 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 185.833977][ T30] audit: type=1400 audit(1755682698.595:998): avc: denied { write } for pid=8665 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 185.901928][ T30] audit: type=1400 audit(1755682698.595:999): avc: denied { read } for pid=8665 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.293241][ T5846] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 186.801540][ T30] audit: type=1400 audit(1755682699.635:1000): avc: denied { create } for pid=8710 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.838897][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 186.846269][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.858526][ T5846] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 186.867829][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.876720][ T5846] usb 4-1: Product: syz [ 186.881059][ T5846] usb 4-1: Manufacturer: syz [ 186.885977][ T5846] usb 4-1: SerialNumber: syz [ 186.893066][ T5846] usb 4-1: config 0 descriptor?? [ 186.900598][ T5846] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 186.908069][ T5846] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 186.916003][ T30] audit: type=1400 audit(1755682699.635:1001): avc: denied { listen } for pid=8710 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.936385][ T5846] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 186.945622][ T5846] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 186.953399][ T5846] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 186.961308][ T30] audit: type=1400 audit(1755682699.635:1002): avc: denied { connect } for pid=8710 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.982668][ T5846] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 186.990440][ T5846] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 186.998336][ T5846] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 187.008685][ T5846] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 187.241883][ T1208] usb 4-1: USB disconnect, device number 28 [ 187.258698][ T1208] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 187.278323][ T1208] keyspan 4-1:0.0: device disconnected [ 187.636027][ T8719] smc: net device bond0 applied user defined pnetid SYZ0 [ 187.660119][ T8719] smc: net device bond0 erased user defined pnetid SYZ0 [ 187.821502][ T8727] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 188.061341][ T30] audit: type=1400 audit(1755682700.805:1003): avc: denied { watch watch_reads } for pid=8722 comm="syz.2.723" path="/136" dev="tmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 188.115656][ T8727] netlink: 232 bytes leftover after parsing attributes in process `syz.3.728'. [ 188.133775][ T8732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1298 sclass=netlink_tcpdiag_socket pid=8732 comm=syz.3.728 [ 188.139749][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 188.185619][ T8735] netlink: 'syz.3.730': attribute type 23 has an invalid length. [ 188.232996][ T8737] netlink: 'syz.3.731': attribute type 23 has an invalid length. [ 188.301605][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 188.313245][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 188.336465][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 188.351128][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.368486][ T10] usb 1-1: Product: syz [ 188.377103][ T10] usb 1-1: Manufacturer: syz [ 188.397022][ T10] usb 1-1: SerialNumber: syz [ 188.397257][ T8739] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 188.414453][ T10] usb 1-1: config 0 descriptor?? [ 188.420416][ T54] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 188.424147][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 188.441745][ T10] usb 1-1: Detected FT232R [ 188.475937][ T8744] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 188.487228][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.494500][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.587246][ T8750] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 188.610617][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 188.622241][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.645992][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.646046][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 188.769252][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 188.836289][ T54] usb 3-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 188.924503][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.961113][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 188.973161][ T8755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.738'. [ 189.067312][ T54] usb 3-1: config 0 descriptor?? [ 189.166922][ T8721] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 189.176269][ T8721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.727'. [ 189.192942][ T8721] vcan0: entered promiscuous mode [ 189.204532][ T8721] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 189.354653][ T30] audit: type=1400 audit(1755682702.185:1004): avc: denied { mounton } for pid=8766 comm="syz.3.739" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 189.653300][ T30] audit: type=1400 audit(1755682702.485:1005): avc: denied { nlmsg_write } for pid=8771 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 189.674498][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 189.681795][ T30] audit: type=1400 audit(1755682702.485:1006): avc: denied { getopt } for pid=8771 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 189.701670][ T30] audit: type=1400 audit(1755682702.485:1007): avc: denied { ioctl } for pid=8771 comm="syz.4.741" path="socket:[22566]" dev="sockfs" ino=22566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 189.754704][ T30] audit: type=1400 audit(1755682702.585:1008): avc: denied { write } for pid=8775 comm="syz.4.743" name="event2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 189.830523][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 189.939749][ T54] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 190.115581][ T8785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1044 sclass=netlink_route_socket pid=8785 comm=syz.4.743 [ 190.618903][ T30] audit: type=1400 audit(1755682702.965:1009): avc: denied { map } for pid=8775 comm="syz.4.743" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.661713][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.677106][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.679360][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 190.703846][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.728927][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.739590][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.751742][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.771758][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.781131][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.781448][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.799427][ T54] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 190.808567][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.842472][ T54] usb 2-1: config 0 descriptor?? [ 190.872223][ T54] pwc: Askey VC010 type 2 USB webcam detected. [ 191.007841][ T30] audit: type=1400 audit(1755682703.835:1010): avc: denied { read write } for pid=8766 comm="syz.3.739" name="cdc-wdm0" dev="devtmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 191.031638][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.038217][ T30] audit: type=1400 audit(1755682703.835:1011): avc: denied { open } for pid=8766 comm="syz.3.739" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 191.061940][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.086926][ T30] audit: type=1400 audit(1755682703.885:1012): avc: denied { ioctl } for pid=8766 comm="syz.3.739" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2952 ioctlcmd=0x5b02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 191.111461][ T10] usb 4-1: usb_control_msg returned -71 [ 191.112261][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.120298][ T10] usbtmc 4-1:16.0: can't read capabilities [ 191.285927][ T10] usb 4-1: USB disconnect, device number 29 [ 191.342332][ T30] audit: type=1400 audit(1755682704.005:1013): avc: denied { set_context_mgr } for pid=8801 comm="syz.4.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 191.485146][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 191.491444][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 191.543053][ T8806] overlayfs: failed to resolve '/ 1 0': -2 [ 191.566407][ T54] pwc: recv_control_msg error -32 req 02 val 2b00 [ 191.574985][ T54] pwc: recv_control_msg error -71 req 02 val 2700 [ 191.589970][ T54] pwc: recv_control_msg error -71 req 02 val 2c00 [ 191.603993][ T54] pwc: recv_control_msg error -71 req 04 val 1000 [ 191.619285][ T54] pwc: recv_control_msg error -71 req 04 val 1300 [ 191.627677][ T54] pwc: recv_control_msg error -71 req 04 val 1400 [ 191.649736][ T54] pwc: recv_control_msg error -71 req 02 val 2000 [ 191.658709][ T54] pwc: recv_control_msg error -71 req 02 val 2100 [ 191.666654][ T54] pwc: recv_control_msg error -71 req 04 val 1500 [ 191.679553][ T54] pwc: recv_control_msg error -71 req 02 val 2500 [ 191.696477][ T54] pwc: recv_control_msg error -71 req 02 val 2400 [ 191.704134][ T54] pwc: recv_control_msg error -71 req 02 val 2600 [ 191.718027][ T54] pwc: recv_control_msg error -71 req 02 val 2900 [ 191.735323][ T54] pwc: recv_control_msg error -71 req 02 val 2800 [ 191.743959][ T54] pwc: recv_control_msg error -71 req 04 val 1100 [ 191.751319][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 191.764273][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 191.770734][ T54] pwc: recv_control_msg error -71 req 04 val 1200 [ 191.778663][ T54] pwc: Registered as video103. [ 191.788288][ T54] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 191.815453][ T54] usb 2-1: USB disconnect, device number 20 [ 191.876101][ T8793] ceph: No mds server is up or the cluster is laggy [ 192.103378][ T54] usb 3-1: USB disconnect, device number 25 [ 193.609849][ T5989] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 193.650813][ T54] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 193.759720][ T5989] usb 3-1: Invalid ep0 maxpacket: 64 [ 193.788439][ T8860] team0: No ports can be present during mode change [ 193.796672][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.850010][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 193.857699][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.875031][ T54] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 193.892900][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.918184][ T54] usb 2-1: Product: syz [ 193.927664][ T54] usb 2-1: Manufacturer: syz [ 193.930741][ T5989] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 193.943232][ T54] usb 2-1: SerialNumber: syz [ 193.959640][ T54] usb 2-1: config 0 descriptor?? [ 194.114945][ T5989] usb 3-1: Invalid ep0 maxpacket: 64 [ 194.150418][ T5989] usb usb3-port1: attempt power cycle [ 194.413912][ T8874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.422857][ T8874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.437782][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 194.437794][ T30] audit: type=1400 audit(1755682707.265:1022): avc: denied { execute_no_trans } for pid=8844 comm="syz.1.759" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 194.501129][ T8874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.522283][ T5989] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 194.554616][ T8874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.581333][ T5989] usb 3-1: Invalid ep0 maxpacket: 64 [ 194.599413][ T30] audit: type=1400 audit(1755682707.305:1023): avc: denied { name_bind } for pid=8844 comm="syz.1.759" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 194.855477][ T5989] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 194.891853][ T5989] usb 3-1: Invalid ep0 maxpacket: 64 [ 194.897290][ T5989] usb usb3-port1: unable to enumerate USB device [ 194.988455][ T30] audit: type=1804 audit(1755682707.815:1024): pid=8886 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.772" name="/newroot/148/file0" dev="tmpfs" ino=823 res=1 errno=0 [ 195.997429][ T8908] smc: net device bond0 applied user defined pnetid SYZ0 [ 196.005904][ T8908] smc: net device bond0 erased user defined pnetid SYZ0 [ 196.081391][ T8906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.092247][ T8906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.205529][ T30] audit: type=1400 audit(1755682709.035:1025): avc: denied { mount } for pid=8911 comm="syz.0.779" name="/" dev="rpc_pipefs" ino=23184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 196.479568][ T10] usb 2-1: USB disconnect, device number 21 [ 196.771979][ T30] audit: type=1400 audit(1755682709.605:1026): avc: denied { mounton } for pid=8927 comm="syz.1.785" path="/newroot/proc/484/ns/mnt" dev="proc" ino=22342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 196.922997][ T8940] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.788'. [ 197.008444][ T30] audit: type=1400 audit(1755682709.835:1027): avc: denied { append } for pid=8939 comm="syz.3.788" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.640470][ T30] audit: type=1400 audit(1755682710.245:1028): avc: denied { ioctl } for pid=8945 comm="syz.0.790" path="/154/file0" dev="tmpfs" ino=828 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 198.853066][ T30] audit: type=1400 audit(1755682711.675:1029): avc: denied { setopt } for pid=8952 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 199.656642][ T8962] syzkaller0: entered promiscuous mode [ 199.789020][ T8962] syzkaller0: entered allmulticast mode [ 200.459891][ T30] audit: type=1400 audit(1755682713.285:1030): avc: denied { mounton } for pid=8971 comm="syz.4.797" path="/proc/622/task" dev="proc" ino=23364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 202.451300][ T8982] FAULT_INJECTION: forcing a failure. [ 202.451300][ T8982] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 202.506171][ T30] audit: type=1400 audit(1755682713.285:1031): avc: denied { mount } for pid=8971 comm="syz.4.797" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 203.406766][ T8982] CPU: 1 UID: 0 PID: 8982 Comm: syz.1.800 Not tainted syzkaller #0 PREEMPT(full) [ 203.406793][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.406804][ T8982] Call Trace: [ 203.406809][ T8982] [ 203.406816][ T8982] dump_stack_lvl+0x16c/0x1f0 [ 203.406840][ T8982] should_fail_ex+0x512/0x640 [ 203.406862][ T8982] _copy_from_user+0x2e/0xd0 [ 203.406884][ T8982] copy_msghdr_from_user+0x98/0x160 [ 203.406903][ T8982] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 203.406920][ T8982] ? __pfx_kstrtouint+0x10/0x10 [ 203.406938][ T8982] ? kstrtouint_from_user+0x13c/0x1d0 [ 203.406955][ T8982] ___sys_sendmsg+0xfe/0x1d0 [ 203.406972][ T8982] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.406993][ T8982] ? rcu_is_watching+0x12/0xc0 [ 203.407023][ T8982] __sys_sendmsg+0x16d/0x220 [ 203.407041][ T8982] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.407065][ T8982] do_syscall_64+0xcd/0x4c0 [ 203.407085][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.407109][ T8982] RIP: 0033:0x7fa36b78ebe9 [ 203.407123][ T8982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.407139][ T8982] RSP: 002b:00007fa36c647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.407158][ T8982] RAX: ffffffffffffffda RBX: 00007fa36b9b5fa0 RCX: 00007fa36b78ebe9 [ 203.407169][ T8982] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 203.407180][ T8982] RBP: 00007fa36c647090 R08: 0000000000000000 R09: 0000000000000000 [ 203.407190][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.407201][ T8982] R13: 00007fa36b9b6038 R14: 00007fa36b9b5fa0 R15: 00007ffc1f4d4c38 [ 203.407217][ T8982] [ 209.449959][ T30] audit: type=1400 audit(1755682715.185:1032): avc: denied { read write } for pid=8973 comm="syz.2.798" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 209.509678][ C0] sched: DL replenish lagged too much [ 211.199718][ T30] audit: type=1400 audit(1755682715.185:1033): avc: denied { open } for pid=8973 comm="syz.2.798" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 211.444335][ T30] audit: type=1400 audit(1755682715.335:1034): avc: denied { bind } for pid=8983 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 212.840772][ T30] audit: type=1400 audit(1755682725.665:1035): avc: denied { ioctl } for pid=9005 comm="syz.0.809" path="socket:[23670]" dev="sockfs" ino=23670 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 212.844348][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.810'. [ 213.004194][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.187310][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.673414][ T30] audit: type=1400 audit(1755682726.415:1036): avc: denied { mount } for pid=9019 comm="syz.2.811" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 213.843564][ T30] audit: type=1400 audit(1755682726.475:1037): avc: denied { mount } for pid=9022 comm="syz.3.813" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 214.216699][ T30] audit: type=1400 audit(1755682726.475:1038): avc: denied { search } for pid=9022 comm="syz.3.813" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 214.594584][ T30] audit: type=1400 audit(1755682726.475:1039): avc: denied { search } for pid=9022 comm="syz.3.813" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 214.689029][ T30] audit: type=1400 audit(1755682726.475:1040): avc: denied { read open } for pid=9022 comm="syz.3.813" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 214.786501][ T30] audit: type=1400 audit(1755682726.705:1041): avc: denied { read } for pid=9029 comm="syz.3.815" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.886383][ T30] audit: type=1400 audit(1755682726.705:1042): avc: denied { open } for pid=9029 comm="syz.3.815" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.966485][ T30] audit: type=1400 audit(1755682727.005:1043): avc: denied { ioctl } for pid=9029 comm="syz.3.815" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 215.008154][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.076361][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.183505][ T30] audit: type=1400 audit(1755682727.035:1044): avc: denied { create } for pid=9035 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 215.456446][ T30] audit: type=1400 audit(1755682727.365:1045): avc: denied { getopt } for pid=9035 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 215.657016][ T30] audit: type=1400 audit(1755682728.005:1046): avc: denied { accept } for pid=9041 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 216.468523][ T30] audit: type=1400 audit(1755682729.285:1047): avc: denied { bind } for pid=9059 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.580927][ T30] audit: type=1400 audit(1755682729.285:1048): avc: denied { setattr } for pid=9054 comm="syz.0.823" name="tty20" dev="devtmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 216.792434][ T9065] smc: net device bond0 applied user defined pnetid SYZ0 [ 216.810802][ T9065] smc: net device bond0 erased user defined pnetid SYZ0 [ 222.796863][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 222.796898][ T30] audit: type=1400 audit(1755682735.605:1056): avc: denied { connect } for pid=9124 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.559704][ T30] audit: type=1400 audit(1755682735.665:1057): avc: denied { shutdown } for pid=9124 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.772176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.919625][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 351.926590][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9119/1:b..l P5217/1:b..l [ 351.935598][ C1] rcu: (detected by 1, t=10503 jiffies, g=24001, q=1634169 ncpus=2) [ 351.943649][ C1] task:udevd state:R running task stack:23432 pid:5217 tgid:5217 ppid:1 task_flags:0x400140 flags:0x00004002 [ 351.957090][ C1] Call Trace: [ 351.960356][ C1] [ 351.963272][ C1] __schedule+0x1190/0x5de0 [ 351.967748][ C1] ? rcu_is_watching+0x12/0xc0 [ 351.972496][ C1] ? __pfx___schedule+0x10/0x10 [ 351.977342][ C1] ? rcu_is_watching+0x12/0xc0 [ 351.982098][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 351.987107][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 351.993668][ C1] ? rcu_is_watching+0x12/0xc0 [ 351.998425][ C1] preempt_schedule_irq+0x51/0x90 [ 352.003435][ C1] irqentry_exit+0x36/0x90 [ 352.007821][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.013775][ C1] RIP: 0010:unwind_next_frame+0xd58/0x20a0 [ 352.019576][ C1] Code: 00 0f 85 d3 0e 00 00 48 8b 14 24 49 89 45 48 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c6 12 00 00 4c 89 e2 <4d> 89 75 38 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 [ 352.039171][ C1] RSP: 0018:ffffc900041ff500 EFLAGS: 00000246 [ 352.045224][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff9150edea [ 352.053172][ C1] RDX: ffffc900041ff5c0 RSI: 1ffff9200083feb7 RDI: ffffc900041ffda8 [ 352.061139][ C1] RBP: ffffc900041ff5b8 R08: ffffffff9150edee R09: 0000000000000000 [ 352.069098][ C1] R10: ffffc900041ff570 R11: 00000000000135a9 R12: ffffc900041ff5c0 [ 352.077044][ C1] R13: ffffc900041ff570 R14: ffffc900041ffdb0 R15: ffffc900041ff5a4 [ 352.085004][ C1] ? vfs_fstatat+0x7b/0xf0 [ 352.089396][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 352.095530][ C1] arch_stack_walk+0x94/0x100 [ 352.100200][ C1] ? __do_sys_newfstatat+0x97/0x120 [ 352.105392][ C1] stack_trace_save+0x8e/0xc0 [ 352.110056][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 352.115424][ C1] ? debug_check_no_obj_freed+0x31f/0x600 [ 352.121140][ C1] ? rcu_is_watching+0x12/0xc0 [ 352.125891][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 352.131847][ C1] save_stack+0x160/0x1f0 [ 352.136166][ C1] ? __pfx_save_stack+0x10/0x10 [ 352.141004][ C1] ? __free_frozen_pages+0x7d5/0x10f0 [ 352.146364][ C1] ? __put_partials+0x165/0x1c0 [ 352.151192][ C1] ? qlist_free_all+0x4d/0x120 [ 352.155946][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 352.161567][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 352.166578][ C1] ? __kmalloc_noprof+0x1d4/0x510 [ 352.171575][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 352.176420][ C1] ? tomoyo_encode+0x29/0x50 [ 352.181002][ C1] ? tomoyo_realpath_from_path+0x18f/0x6e0 [ 352.186798][ C1] ? tomoyo_path_perm+0x274/0x460 [ 352.191798][ C1] ? security_inode_getattr+0x116/0x290 [ 352.197336][ C1] ? vfs_statx+0x121/0x3f0 [ 352.201743][ C1] ? vfs_fstatat+0x7b/0xf0 [ 352.206154][ C1] ? lock_release+0x201/0x2f0 [ 352.210810][ C1] ? rcu_read_lock_held+0x9/0x50 [ 352.215742][ C1] __reset_page_owner+0x84/0x1a0 [ 352.220672][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 352.225860][ C1] ? mod_node_page_state+0x90/0x150 [ 352.231036][ C1] __put_partials+0x165/0x1c0 [ 352.235710][ C1] qlist_free_all+0x4d/0x120 [ 352.240288][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 352.245129][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 352.250563][ C1] __kasan_slab_alloc+0x69/0x90 [ 352.255404][ C1] __kmalloc_noprof+0x1d4/0x510 [ 352.260243][ C1] ? d_absolute_path+0x136/0x1a0 [ 352.265166][ C1] tomoyo_encode2+0x100/0x3e0 [ 352.269820][ C1] ? try_to_unlazy+0x1e1/0x660 [ 352.274572][ C1] tomoyo_encode+0x29/0x50 [ 352.278984][ C1] tomoyo_realpath_from_path+0x18f/0x6e0 [ 352.284621][ C1] tomoyo_path_perm+0x274/0x460 [ 352.289444][ C1] ? tomoyo_path_perm+0x260/0x460 [ 352.294443][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 352.299821][ C1] ? __might_fault+0xe3/0x190 [ 352.304482][ C1] ? __might_fault+0x13b/0x190 [ 352.309213][ C1] ? rcu_is_watching+0x12/0xc0 [ 352.313949][ C1] ? __might_fault+0xe3/0x190 [ 352.318613][ C1] ? lock_release+0x201/0x2f0 [ 352.323285][ C1] security_inode_getattr+0x116/0x290 [ 352.328628][ C1] vfs_statx+0x121/0x3f0 [ 352.332850][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 352.337605][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 352.342972][ C1] vfs_fstatat+0x7b/0xf0 [ 352.347202][ C1] __do_sys_newfstatat+0x97/0x120 [ 352.352201][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 352.357832][ C1] ? xfd_validate_state+0x61/0x180 [ 352.362947][ C1] do_syscall_64+0xcd/0x4c0 [ 352.367435][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.373305][ C1] RIP: 0033:0x7f163d511b0a [ 352.377706][ C1] RSP: 002b:00007ffd8e741fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 352.386105][ C1] RAX: ffffffffffffffda RBX: 0000563e45cbd410 RCX: 00007f163d511b0a [ 352.394049][ C1] RDX: 00007ffd8e741ff0 RSI: 0000563e45cab2a8 RDI: 00000000ffffff9c [ 352.402006][ C1] RBP: 0000563e748ba668 R08: 00063478c1c69200 R09: 00007f163dd5c000 [ 352.409965][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.417925][ C1] R13: 00007ffd8e741ff0 R14: 0000000000000000 R15: 00063478c1c69200 [ 352.425885][ C1] [ 352.428877][ C1] task:syz.3.839 state:R running task stack:24728 pid:9119 tgid:9119 ppid:5845 task_flags:0x40004c flags:0x00004000 [ 352.442320][ C1] Call Trace: [ 352.445585][ C1] [ 352.448489][ C1] __schedule+0x1190/0x5de0 [ 352.452966][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 352.458423][ C1] ? __pfx___schedule+0x10/0x10 [ 352.463271][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 352.469223][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 352.474226][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 352.479598][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 352.484964][ C1] preempt_schedule_common+0x44/0xc0 [ 352.490226][ C1] preempt_schedule_thunk+0x16/0x30 [ 352.495424][ C1] _raw_spin_unlock+0x3e/0x50 [ 352.500099][ C1] unmap_page_range+0xf77/0x42c0 [ 352.505042][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 352.510389][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 352.515319][ C1] ? uprobe_munmap+0x20/0x5c0 [ 352.519993][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 352.525876][ C1] unmap_vmas+0x218/0x470 [ 352.530184][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 352.535027][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.540918][ C1] exit_mmap+0x1b9/0xb90 [ 352.545153][ C1] ? trace_contention_end+0xdd/0x130 [ 352.550413][ C1] ? uprobe_clear_state+0xfc/0x400 [ 352.555524][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 352.560284][ C1] ? lock_release+0x201/0x2f0 [ 352.564956][ C1] ? lock_release+0x201/0x2f0 [ 352.569610][ C1] __mmput+0x12a/0x410 [ 352.573664][ C1] mmput+0x62/0x70 [ 352.577379][ C1] do_exit+0x7c7/0x2bf0 [ 352.581530][ C1] ? __pfx_do_exit+0x10/0x10 [ 352.586109][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 352.591461][ C1] do_group_exit+0xd3/0x2a0 [ 352.595961][ C1] __x64_sys_exit_group+0x3e/0x50 [ 352.600980][ C1] x64_sys_call+0x14fa/0x1720 [ 352.605646][ C1] do_syscall_64+0xcd/0x4c0 [ 352.610128][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.616008][ C1] RIP: 0033:0x7fc928d8ebe9 [ 352.620409][ C1] RSP: 002b:00007ffc5823e298 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 352.628806][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc928d8ebe9 [ 352.636750][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.644712][ C1] RBP: 00007ffc5823e2fc R08: 000000075823e38f R09: 000055556ee3f590 [ 352.652656][ C1] R10: 0000000000000084 R11: 0000000000000246 R12: 000000000000009d [ 352.660614][ C1] R13: 000055556ee3f590 R14: 0000000000035367 R15: 00007ffc5823e350 [ 352.668573][ C1] [ 352.671568][ C1] rcu: rcu_preempt kthread starved for 10077 jiffies! g24001 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 352.682745][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 352.692704][ C1] rcu: RCU grace-period kthread stack dump: [ 352.698576][ C1] task:rcu_preempt state:R running task stack:28000 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 352.712055][ C1] Call Trace: [ 352.715323][ C1] [ 352.718241][ C1] __schedule+0x1190/0x5de0 [ 352.722734][ C1] ? __mod_timer+0x8ed/0xd30 [ 352.727319][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 352.733283][ C1] ? __pfx___schedule+0x10/0x10 [ 352.738132][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 352.743763][ C1] ? schedule+0x2d7/0x3a0 [ 352.748066][ C1] ? rcu_is_watching+0x12/0xc0 [ 352.752807][ C1] ? lock_release+0x201/0x2f0 [ 352.757485][ C1] schedule+0xe7/0x3a0 [ 352.761543][ C1] schedule_timeout+0x123/0x290 [ 352.766386][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 352.771737][ C1] ? __pfx_process_timeout+0x10/0x10 [ 352.777035][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 352.782842][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 352.788292][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 352.793030][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 352.798304][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 352.803225][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 352.808046][ C1] rcu_gp_kthread+0x270/0x380 [ 352.812696][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 352.817882][ C1] ? rcu_is_watching+0x12/0xc0 [ 352.822639][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.827824][ C1] ? __kthread_parkme+0x19e/0x250 [ 352.832827][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 352.838014][ C1] kthread+0x3c2/0x780 [ 352.842073][ C1] ? __pfx_kthread+0x10/0x10 [ 352.846648][ C1] ? rcu_is_watching+0x12/0xc0 [ 352.851389][ C1] ? __pfx_kthread+0x10/0x10 [ 352.855967][ C1] ret_from_fork+0x5d7/0x6f0 [ 352.860545][ C1] ? __pfx_kthread+0x10/0x10 [ 352.865118][ C1] ret_from_fork_asm+0x1a/0x30 [ 352.869866][ C1] [ 352.872869][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 352.879170][ C1] Sending NMI from CPU 1 to CPUs 0: [ 352.884379][ C0] NMI backtrace for cpu 0 [ 352.884390][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 352.884405][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.884412][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 352.884428][ C0] Code: 5c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 72 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 352.884440][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 352.884451][ C0] RAX: 0000000000a11e6c RBX: 0000000000000000 RCX: ffffffff8b939c29 [ 352.884460][ C0] RDX: ffffed1017086656 RSI: ffffffff8c162880 RDI: ffffffff81913321 [ 352.884469][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000000 R09: ffffed1017086655 [ 352.884477][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 352.884485][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab4090 R15: 0000000000000000 [ 352.884493][ C0] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 352.884506][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.884514][ C0] CR2: 0000001b31d0aff8 CR3: 0000000062bab000 CR4: 00000000003526f0 [ 352.884522][ C0] Call Trace: [ 352.884526][ C0] [ 352.884531][ C0] default_idle+0x13/0x20 [ 352.884546][ C0] default_idle_call+0x6d/0xb0 [ 352.884559][ C0] do_idle+0x391/0x510 [ 352.884575][ C0] ? __pfx_do_idle+0x10/0x10 [ 352.884589][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 352.884604][ C0] cpu_startup_entry+0x4f/0x60 [ 352.884619][ C0] rest_init+0x16b/0x2b0 [ 352.884633][ C0] ? acpi_subsystem_init+0x133/0x180 [ 352.884651][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 352.884664][ C0] start_kernel+0x3ee/0x4d0 [ 352.884681][ C0] x86_64_start_reservations+0x18/0x30 [ 352.884700][ C0] x86_64_start_kernel+0x130/0x190 [ 352.884718][ C0] common_startup_64+0x13e/0x148 [ 352.884735][ C0] [ 359.131947][ T1300] ieee802154 phy1 wpan1: encryption failed: -22