last executing test programs: 29.510300039s ago: executing program 3 (id=251): syz_usb_connect(0x5, 0x2cc, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1, 0x2, 0x6, 0x20, 0x1}, 0xee, &(0x7f0000000180)=ANY=[@ANYBLOB="050fee000310100a0901000000000f4b0000c00000c5100b9aaa01df8771d4929e0d6075df52f4344be4f912eb00a93ad0b55d50aa41823677c3939a22d24c7500709dcf6b0e633248ab28d5104f8c33990ae187958364eedf4c21f4a8e396aba4ee0232f68ecdcc7f14a9acb96e651333c2e807a6abcdf3d73a0c2453e3e24cab5ac77dcd8c1fec34da8fa8cd8360a14ce86c0998016f6e1771cfd19dc2d9973c34d6a75690a69c564bad8a2ecdc96233b00b1b6b498b39899923cbd147c4e318539b85a8100cfd3b82e8d611f89f97b7222e89acae700ed3ed141004066ebf7e7d31837169a161546c20b8df5b"], 0x1, [{0x57, &(0x7f0000000040)=ANY=[@ANYBLOB="57037a039ba0baa50a390548fd3f0d6c5ee6b3c6b297734ee369be070e030c42bf15038291c86a13d0a88f9867405c3dca2ab709a96f9977ada20b36a173a198b68647a70bee6aa22dc7c4967d83b16c38655398bd1c7a"]}]}) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/98, 0x62}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x5, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 28.238308448s ago: executing program 4 (id=256): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x4001) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000002ac0)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000090001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0xfffffffffffffe7c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5}, {0x9, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 27.980240002s ago: executing program 0 (id=258): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xf05624a53e7b8201, 0x40000001, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x202001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x4000002) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x8, 0x8, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000000c0)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_init_net_socket$llc(0x1a, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000280)=0x9) getpid() io_uring_setup(0x30a7, &(0x7f0000000400)={0x0, 0x9dd9, 0x800, 0x1, 0x8036c}) 27.22379757s ago: executing program 4 (id=260): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) getsockopt(0xffffffffffffffff, 0x2af, 0x9, &(0x7f0000001100)=""/216, &(0x7f0000001200)=0xd8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd0301000000000095b0000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/protocols\x00') preadv(r6, &(0x7f0000003940)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x82, 0x3) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 26.818351642s ago: executing program 1 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11002bbd7000fddbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="08000500010000001400040070"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) 26.506607272s ago: executing program 1 (id=262): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001001100040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 25.89350371s ago: executing program 0 (id=263): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) mkdir(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi1\x00', 0x40041, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 25.863736783s ago: executing program 3 (id=264): prlimit64(0x0, 0xe, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff0200000000000000002a7ffda40001000000000000000000000000f9ffffff00"/138], 0x90) r7 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d0, 0x2, 0x42, 0xfc}) io_uring_enter(r7, 0x100000, 0x2, 0xf, &(0x7f0000000000)={[0x100000]}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) socket$inet(0x2, 0x2, 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) 25.786062377s ago: executing program 4 (id=265): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) r1 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 25.362598055s ago: executing program 1 (id=267): socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x10c) 25.178298128s ago: executing program 0 (id=268): modify_ldt$read(0x0, &(0x7f0000000040)=""/64, 0x40) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000000000000000ea20000000000000000000000e00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) 24.770472489s ago: executing program 1 (id=270): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000540)) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x801, 0x70bd27}, 0x20}}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000, 0x7}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r0}, 0x0) (async, rerun: 64) landlock_restrict_self(r4, 0x0) (async, rerun: 64) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000580)={@private, @rand_addr, 0x0}, &(0x7f00000005c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r0, r5, 0x25, 0x11, @val=@kprobe_multi=@addrs={0x0, 0x4, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x3, 0x4, 0x0], 0xfc}}, 0x30) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="514b7ca3da2aaf8dd7707f90e8c703f541763c4f5e8d90fb005441d77fd10c4a724c9c88342d944e7fe4b761ee85ce7adee867cdcb92f15d4f48b57cd4337916f045561a15754493dfba5cbe85a4af1ae062e0abb27ac51337e69fc3aaf414f6f15e1ecdac81612cf971e07b211f9c494776205fa7eb97bad6e7371be844bff00fd6a9a586a701", 0x87}, {&(0x7f00000000c0)="55acb7ed99ba667fe3b760c36df18077d1bab3b2fa214cdad8b08d155ca0d3fd1c0c7735e28c55d9554fbf8cdc22880f47f6030f49a561b0ab67d0baa3e9393bec03", 0x42}, {&(0x7f0000000140)="e149794b6d8d42cc927753df70b05fcd540fdba598a13e73e7427f4edfa0c12127fc0a59c1e7f423eedaa46f72e6e8c89dfb9150e7d850c2fd37943d1b1fd9b604a3c73aec9759bc40a342dbaf71f1d46bf75ef78ad5daf1da9a0952e675fe38d53e4dec2234b4861ae0a1e879142e6cdbb7014aef24fd472f919d3dea862fcd4e313fbce87331b9ac9614db165e", 0x8e}, {&(0x7f0000000200)="8b91b9d2689e629f834dbe4445b0c15dd93a8927cbd0a767791ad448941d30377ec6afb7540cf556", 0x28}, {&(0x7f0000000240)="876e8f9a71af4e519cf5491b10dfd97b70b2b792b4d353821bbe01e5a7e000ec24c4a9a6a49205ab9a568f5473af413e79a6b9c6af204322110512a44cd383942cf979b530756159b7c7181bc9dc7c4692c499af588bffe86992f8e32ad11d3e6d5c165ae3df8c0ad83bcf6a186bb064a496393b14d10419d2a376608cc6071a0e2895ba28347a01e78d453ace78cef3d6de1b75ad94f147d9479bd375aa62aaa859db3bc48057ad40b9b6864ede0722d188bfb8224554c6a01fa78ea8fb0200c370bb4260267167a63ca65cb550ef4235eaf8b61f99ade39613", 0xda}, {&(0x7f0000000340)="1d15a5c4de62cbb39ec7e11860f99a63f4c4253e1552fa34aa76c2be55601e264c307bc3cd63980e20e5947b49456a449f7f43afbae7a58ab6066967123adcfbcb3b98011562d27317b4fe349584151c8d7fc49619d99f9702b0d3571cb8bb4ee490bd5f9842020d2641a2c9fd9ccc7b330b9f7d70b96ac5061f07e05fc837aa0b3229fd805d5315d76eb7492cffea64a2", 0x91}, {&(0x7f0000000400)="1f5737a6beb73d97ee98703d1688bcdcd978c691ed2753d95f7f98e89b0dfe1d1e723a1bd8e0e1d1a2312e730965d200886cfcbf26e05fd51b132e4ac889d25b0827304aa026ef4e7e2d9dc8ce2de6c393a9e6b42d9f16ae954295684d6a74e7ab39583ef1775840f6ffa393498e0b620fa1fd5ae7d49a7bf0d06462d3f8c416b6b2cec3119652b6f251d4346d46ab9a3c4e2739819698f672db7afec834aa8ff13a3e4f106ad5b9789175fce2dd69c9de8836d6ca72eedc98cbe7730fa751f7d7878a5d04d08667d3f823986a4cc30947da3778d28cd89f28c41f3468b9d8527dc87a80d4d5f9f6d6f2f395420e920d0c", 0xf1}], 0x7}, 0x200000c0) 24.322264757s ago: executing program 2 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) connect$rds(r2, &(0x7f0000000c80)={0x2, 0x4e24, @multicast1}, 0x10) (async) connect$rds(r2, &(0x7f0000000c80)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$netlink(r0, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000a80)={0x14, 0x6a, 0x15, 0x8000000, 0x0, "", [@generic='8']}, 0x14}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f04) (async) sendfile(r3, r3, &(0x7f0000000080), 0x7f04) write$P9_RVERSION(r3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYRESDEC=r0, @ANYRESHEX=r0], 0xfffffe0a) (async) write$P9_RVERSION(r3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYRESDEC=r0, @ANYRESHEX=r0], 0xfffffe0a) r4 = dup(0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r7, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000600)=""/135, 0x87}], 0x2, 0xc, 0x8) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x80000, 0x2d63, 0x6c2, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x1ff}}, 0x50) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)) (async) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) read$FUSE(r3, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1000, 0x400, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r4, &(0x7f00000007c0)={0xa0, 0x0, r9, {{0x5, 0x3, 0x7, 0x2, 0x7fffffff, 0x1, {0x5, 0xd6b, 0x6, 0x8, 0x2, 0x7, 0x9, 0x6, 0x8, 0x0, 0x5, r8, r10, 0x8ea, 0x1}}}}, 0xa0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 24.321755251s ago: executing program 1 (id=272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3200000004020000030000d400000000000000e8099f423330795c6a11e1b26ba8d2ba9c2e6e6b55c251f7422bcd111f9748825145f5e6b02aa57b61da484bb041200b45f8513b76f55b83cb250aea882058bb7b754d4e28", @ANYRES32=0x1, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000200)}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x194) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000500)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, '$-}@.+-'}}, {@uid_gt}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@measure}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') syz_emit_vhci(0x0, 0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) keyctl$read(0x1f, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0) 24.250903727s ago: executing program 3 (id=273): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000070000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.238124864s ago: executing program 2 (id=274): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000001c0)={0x0, 0x1, 0x6fc0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="038000000000b6001c0012800b00010067726574617000000c00028008000100", @ANYRESHEX, @ANYRES64=r1, @ANYBLOB="d07232b1bbf89093572736f4cd04162200fd8f2a02fc81d8b8935ec6e2bb68d06a19e7e4e28336a638592a1d084b8868081072d8c077e9a7d86adaad7ad46f855530d6fec22b68c5b6467fdf0251c3c5c7db1714c1", @ANYRES8=0x0], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x4054) gettid() prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000011000300686173683a6e6574"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) r7 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000340)={&(0x7f00000002c0)=""/109, 0x6d}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r8, 0x0, 0x0, 0x0) 24.066140158s ago: executing program 3 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000002000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 23.420329503s ago: executing program 0 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, &(0x7f0000000100)=""/29}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) 23.32098833s ago: executing program 2 (id=277): io_uring_setup(0x5da5, &(0x7f0000000200)={0x0, 0xfbd, 0x0, 0x0, 0x327}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000240)='jfs\x00', 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x100000000000000}, 0x20000000) 23.186540598s ago: executing program 3 (id=278): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6728, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=0x7, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23.150704235s ago: executing program 2 (id=279): socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r2, 0x0, 0x1}, 0x18) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=b', @ANYRESOCT]) lseek(r0, 0xd0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xa, &(0x7f00000002c0)=""/10, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x20000005}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xf, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r1, r1, r1, r1, r1, r1, r1, r6, r6, 0xffffffffffffffff], &(0x7f0000000300), 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000002000000001800"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000001001800"/21], 0x48) 23.081514659s ago: executing program 3 (id=280): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) fchdir(r1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x3100188, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000001c0)=0x36, 0x4) wait4(r3, 0x0, 0x80000000, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0xb}, 0x1c) getdents64(r4, 0x0, 0x0) 22.569667861s ago: executing program 2 (id=281): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) mount$afs(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000340)=ANY=[@ANYBLOB='dyn,flockLope\\\tfs,\x00']) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="016f0002040016000000150000004514002400650000fd2190780a010101ac1414bb4e214e2104d190786a2c1a4f9969257215fa591776f2388c845359b8fe266ed86052cdfc15fe224d3923a36daeaad30c5c0d94147e7519a770694be1b1a66251f156d9f64ebc169617c0a7f9b22e"], 0x32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x480c0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r6, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0) 22.51312204s ago: executing program 4 (id=282): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysinfo(0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/57, 0x8e, 0x39, 0x1, 0xa}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(0x0, 0x0, 0x0) fcntl$getown(r2, 0x9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000ffef0004"], 0x0, 0x26, 0x0, 0x2}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000004c0)={0x7, {{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}}, {{0xa, 0x4e22, 0x4, @loopback, 0x10001}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendto$inet6(r5, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x7e9, @loopback, 0xffffffff}, 0x1c) 21.407143809s ago: executing program 0 (id=283): r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x800) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f00000001c0)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca98", 0x86}], 0x2}, 0x0) recvmmsg(r1, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 21.390008874s ago: executing program 1 (id=284): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x3f00}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 21.278234398s ago: executing program 0 (id=285): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000000d40)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000003c0)="8f0a0d30acf9908b607a8e04cfc895c2dbb5d64f05087151f5db47211a02cc6726f239c283e7d920010d769a53616a5ac7f57cbca048798f9035283ec23cdd6558921b4f3e2c94a5a487f817362c3b558699e1e2f4e5b36f69cbfddd5abd2b45910c08868ec705954bf00c9d9a8ea2a0f46d35f2c1c5b92e4abcfc4458c8afb599f47decce75f6d2cd5cfd283bc7d275a95a639ae5376308be72ff3eff55efc24edccda6aa923ce29047d87f04d430a1", 0xb0}, {&(0x7f0000000d80)="b1f3d84ff29ff132fcc29f0b9f2b591aa82de7ff5c3e8a68cd53db0bfe918790c4c73e84d0b6c9a3409a9add664ccddbff48960532e530545c96d01acfb6ed8a9a1dc06b1c917ec16499c39f05e01af9a8e3afa36a044becc2aacb3ad1453c4540f578b7a90000747a369a1f7146cb5585f19074607e1bd0b3ae4d5f7284abe216eac61d76868572c4f8bee7da0cedb451f552ffee3db1344dc97a4b7dabd50c7b", 0xa1}, {&(0x7f0000000a80)="11c2cef3f2b5346301252bf23a3fcb7392517ab98b5809b604456aaa38699813da6ff68805a1998361b72d39775787a1867da87774b20b9b09dad8dcea1ec6b099fccc110a7c6fe288aa1c81fa52639793cf5c", 0x53}, {&(0x7f0000000b00)="466de16b4bcd8b30aa1281cddde5bc9fbb32ebda686f91d97c82cbb9483b095cb0c0575261f7b6b16190886fa15a0fabfcd511c7efe7e7d8adbd6502904abc33b2faa61037e02f861bac7fbc4fc1047aa90badfdcb4caa8fd07acfd27a8a0be4da7f54ee7ee01b4f01fc63a8f3c2567fbe10016a2970e39bedc54dedc2e4dd471707b5d743c10293cba97ec077fe52e92279d99fe2aa20faaea430c805ddd06a7e4c06e0ce2f07d38a91e47b2a231102bc6bb34deb532adb41e684bdbc5f7e5230c268d0eec1b516f5a2c39859ec0b803450d71f4736125f5bd1d65d56cfa907ae101db51897943e4d035d27c62206", 0xef}, {&(0x7f0000000000)="d9cb16b64143b0e1ffd82960b7ae0367f9bed658d780eb447988b4102362bb444b3b2976121c3cb3981095e37a0890c7cf86690a", 0x34}], 0x5, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r7}}}], 0x38, 0x4006811}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) r8 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r9, 0x3da, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60e400ff00403a00fe800000000000000000004000000027fe059078020000006f000000000000000000000000000001fe8000000000000000000000000000372900040001300200f1a96e3d0e3a60"], 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x3, 0x4ea, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x562) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r10, @ANYBLOB], 0x20}}, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 21.189247431s ago: executing program 4 (id=286): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi1\x00', 0x40041, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'comedi_parport\x00', [0x4f27, 0x3, 0x5, 0x2, 0x1, 0xcc9, 0x9, 0x7, 0x1, 0x0, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a44d, 0x7fff, 0x40000007, 0x9d, 0xcaa7, 0x7f, 0x20001e58, 0x4, 0xe68, 0x3c, 0xc, 0x5, 0xfffffffd, 0xfffffff7]}) 21.068270308s ago: executing program 2 (id=287): r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) (async) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) r3 = socket$kcm(0x29, 0x2, 0x0) writev(r3, &(0x7f0000000480)=[{&(0x7f00000001c0)="13", 0x1}], 0x1) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r1}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000340)={r2}) (async) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000001a40)={0x7, 0x0, {0xffffffffffffffff, 0x3, 0x40, 0x3, 0x2f757b3b}, 0x5}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) 21.062084935s ago: executing program 4 (id=288): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x4001) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000002ac0)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000069000000000e0001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0xfffffffffffffe7c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5}, {0x9, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 0s ago: executing program 32 (id=280): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) fchdir(r1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x3100188, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000001c0)=0x36, 0x4) wait4(r3, 0x0, 0x80000000, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0xb}, 0x1c) getdents64(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 57.776784][ T30] audit: type=1400 audit(1758985925.583:62): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.780504][ T5832] cgroup: Unknown subsys name 'net' [ 57.799542][ T30] audit: type=1400 audit(1758985925.583:63): avc: denied { mount } for pid=5832 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.827289][ T30] audit: type=1400 audit(1758985925.623:64): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.933614][ T5832] cgroup: Unknown subsys name 'cpuset' [ 57.941248][ T5832] cgroup: Unknown subsys name 'rlimit' [ 58.085965][ T30] audit: type=1400 audit(1758985925.893:65): avc: denied { setattr } for pid=5832 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.118425][ T30] audit: type=1400 audit(1758985925.893:66): avc: denied { create } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.141301][ T30] audit: type=1400 audit(1758985925.893:67): avc: denied { write } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.164772][ T30] audit: type=1400 audit(1758985925.893:68): avc: denied { read } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.184884][ T5834] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.185117][ T30] audit: type=1400 audit(1758985925.903:69): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.218555][ T30] audit: type=1400 audit(1758985925.903:70): avc: denied { mount } for pid=5832 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.242159][ T30] audit: type=1400 audit(1758985925.943:71): avc: denied { read } for pid=5514 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.158426][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.340268][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.347875][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.355704][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.363500][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.371389][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.379109][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.386548][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.394003][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.402324][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.410606][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.424853][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.441760][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.449500][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.457359][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.458907][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.473780][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.483558][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.483724][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.491317][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.512517][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.520185][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.527454][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.530319][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.549700][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.560359][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.905607][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 61.996312][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 62.058123][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 62.082832][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.090193][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.097419][ T5857] bridge_slave_0: entered allmulticast mode [ 62.104301][ T5857] bridge_slave_0: entered promiscuous mode [ 62.112124][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.119158][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.126533][ T5857] bridge_slave_1: entered allmulticast mode [ 62.133143][ T5857] bridge_slave_1: entered promiscuous mode [ 62.194308][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.237713][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.270262][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.277425][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.284737][ T5847] bridge_slave_0: entered allmulticast mode [ 62.292479][ T5847] bridge_slave_0: entered promiscuous mode [ 62.308338][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 62.318126][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 62.327567][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.335322][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.342437][ T5847] bridge_slave_1: entered allmulticast mode [ 62.349012][ T5847] bridge_slave_1: entered promiscuous mode [ 62.356739][ T5857] team0: Port device team_slave_0 added [ 62.380190][ T5857] team0: Port device team_slave_1 added [ 62.430487][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.447640][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.454778][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.462074][ T5842] bridge_slave_0: entered allmulticast mode [ 62.468673][ T5842] bridge_slave_0: entered promiscuous mode [ 62.475942][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.483134][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.490261][ T5842] bridge_slave_1: entered allmulticast mode [ 62.497180][ T5842] bridge_slave_1: entered promiscuous mode [ 62.518712][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.552412][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.559367][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.585794][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.598584][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.605665][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.631664][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.672259][ T5847] team0: Port device team_slave_0 added [ 62.683014][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.697929][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.718079][ T5847] team0: Port device team_slave_1 added [ 62.763617][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.772744][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.780298][ T5846] bridge_slave_0: entered allmulticast mode [ 62.786918][ T5846] bridge_slave_0: entered promiscuous mode [ 62.809375][ T5842] team0: Port device team_slave_0 added [ 62.824306][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.832928][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.840245][ T5846] bridge_slave_1: entered allmulticast mode [ 62.846855][ T5846] bridge_slave_1: entered promiscuous mode [ 62.854376][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.861455][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.868522][ T5855] bridge_slave_0: entered allmulticast mode [ 62.875267][ T5855] bridge_slave_0: entered promiscuous mode [ 62.889936][ T5842] team0: Port device team_slave_1 added [ 62.900339][ T5857] hsr_slave_0: entered promiscuous mode [ 62.906568][ T5857] hsr_slave_1: entered promiscuous mode [ 62.913429][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.920582][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.946945][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.970207][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.977341][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.984621][ T5855] bridge_slave_1: entered allmulticast mode [ 62.991257][ T5855] bridge_slave_1: entered promiscuous mode [ 63.006297][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.013373][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.039544][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.088787][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.108263][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.118205][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.125374][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.151749][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.169119][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.187287][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.205778][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.212737][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.238608][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.295094][ T5846] team0: Port device team_slave_0 added [ 63.304096][ T5846] team0: Port device team_slave_1 added [ 63.311060][ T5855] team0: Port device team_slave_0 added [ 63.318442][ T5855] team0: Port device team_slave_1 added [ 63.331459][ T5847] hsr_slave_0: entered promiscuous mode [ 63.337404][ T5847] hsr_slave_1: entered promiscuous mode [ 63.343505][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 63.349255][ T5847] Cannot create hsr debugfs directory [ 63.411123][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.418061][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.444272][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.466949][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.474115][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.500407][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.511398][ T5853] Bluetooth: hci2: command tx timeout [ 63.511401][ T5861] Bluetooth: hci0: command tx timeout [ 63.534458][ T5842] hsr_slave_0: entered promiscuous mode [ 63.540989][ T5842] hsr_slave_1: entered promiscuous mode [ 63.546947][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 63.552684][ T5842] Cannot create hsr debugfs directory [ 63.558696][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.565931][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.570536][ T5853] Bluetooth: hci3: command tx timeout [ 63.592002][ T5861] Bluetooth: hci1: command tx timeout [ 63.597586][ T5860] Bluetooth: hci4: command tx timeout [ 63.603492][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.629683][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.636672][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.663107][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.736901][ T5846] hsr_slave_0: entered promiscuous mode [ 63.743609][ T5846] hsr_slave_1: entered promiscuous mode [ 63.749452][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 63.755253][ T5846] Cannot create hsr debugfs directory [ 63.832346][ T5855] hsr_slave_0: entered promiscuous mode [ 63.838538][ T5855] hsr_slave_1: entered promiscuous mode [ 63.844567][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 63.850329][ T5855] Cannot create hsr debugfs directory [ 64.004363][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.033181][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.071024][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.080780][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.161784][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.191098][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.202658][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.218618][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.259450][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.273806][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.296148][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.312079][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.392310][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.423184][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.432211][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.442752][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.508304][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.517952][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.527267][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.536595][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.561883][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.586302][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.624805][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.637256][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.657481][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.664696][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.676564][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.683738][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.696882][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.709120][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.728466][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.735554][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.751065][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.758153][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.784451][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.791564][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.803431][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.810593][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.879729][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.919719][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.981907][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.002488][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 65.002503][ T30] audit: type=1400 audit(1758985932.813:86): avc: denied { sys_module } for pid=5857 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.020286][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.067428][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.074556][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.084991][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.092101][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.121803][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.180604][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.187734][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.256686][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.263831][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.284595][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.364227][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.519575][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.557446][ T5857] veth0_vlan: entered promiscuous mode [ 65.571731][ T5853] Bluetooth: hci2: command tx timeout [ 65.577155][ T5853] Bluetooth: hci0: command tx timeout [ 65.606826][ T5857] veth1_vlan: entered promiscuous mode [ 65.651674][ T5853] Bluetooth: hci3: command tx timeout [ 65.657098][ T5853] Bluetooth: hci4: command tx timeout [ 65.663715][ T5860] Bluetooth: hci1: command tx timeout [ 65.702851][ T5857] veth0_macvtap: entered promiscuous mode [ 65.734239][ T5857] veth1_macvtap: entered promiscuous mode [ 65.757105][ T5847] veth0_vlan: entered promiscuous mode [ 65.766610][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.778636][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.811304][ T5847] veth1_vlan: entered promiscuous mode [ 65.826655][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.854235][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.883052][ T5842] veth0_vlan: entered promiscuous mode [ 65.895219][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.905475][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.929700][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.938687][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.949494][ T5855] veth0_vlan: entered promiscuous mode [ 65.963781][ T5847] veth0_macvtap: entered promiscuous mode [ 65.982938][ T5847] veth1_macvtap: entered promiscuous mode [ 65.990701][ T5842] veth1_vlan: entered promiscuous mode [ 65.997393][ T5855] veth1_vlan: entered promiscuous mode [ 66.037052][ T5846] veth0_vlan: entered promiscuous mode [ 66.075664][ T5846] veth1_vlan: entered promiscuous mode [ 66.085738][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.099526][ T5842] veth0_macvtap: entered promiscuous mode [ 66.113692][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.126456][ T3517] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.139410][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.149413][ T5842] veth1_macvtap: entered promiscuous mode [ 66.150950][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.166805][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.175714][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.198528][ T5846] veth0_macvtap: entered promiscuous mode [ 66.208929][ T5855] veth0_macvtap: entered promiscuous mode [ 66.228120][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.246234][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.258946][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.268873][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.276317][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.296570][ T5846] veth1_macvtap: entered promiscuous mode [ 66.309547][ T5855] veth1_macvtap: entered promiscuous mode [ 66.333795][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.344444][ T30] audit: type=1400 audit(1758985934.143:87): avc: denied { mounton } for pid=5857 comm="syz-executor" path="/root/syzkaller.I3XJKJ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.369425][ T30] audit: type=1400 audit(1758985934.143:88): avc: denied { mount } for pid=5857 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.397543][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.400059][ T30] audit: type=1400 audit(1758985934.143:89): avc: denied { mounton } for pid=5857 comm="syz-executor" path="/root/syzkaller.I3XJKJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.433268][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.448583][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.449122][ T30] audit: type=1400 audit(1758985934.143:90): avc: denied { mount } for pid=5857 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.485950][ T30] audit: type=1400 audit(1758985934.143:91): avc: denied { mounton } for pid=5857 comm="syz-executor" path="/root/syzkaller.I3XJKJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.495391][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.515382][ T30] audit: type=1400 audit(1758985934.153:92): avc: denied { mounton } for pid=5857 comm="syz-executor" path="/root/syzkaller.I3XJKJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.528874][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.558601][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.560223][ T30] audit: type=1400 audit(1758985934.163:93): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.576975][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.589900][ T30] audit: type=1400 audit(1758985934.183:94): avc: denied { mounton } for pid=5857 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.602733][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.633191][ T30] audit: type=1400 audit(1758985934.183:95): avc: denied { mount } for pid=5857 comm="syz-executor" name="/" dev="gadgetfs" ino=7351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.635200][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.682840][ T3517] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.714145][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.719507][ T5959] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.737650][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.745976][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.755750][ T3517] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.795159][ T3517] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.806167][ T3517] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.110671][ T3517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.135152][ T3517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.150103][ T3517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.228422][ T3517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.317516][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.317694][ T5963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 67.372834][ T4452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.387012][ T4452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.417871][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.502098][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.510071][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.604980][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.655989][ T5860] Bluetooth: hci2: command tx timeout [ 67.662026][ T5853] Bluetooth: hci0: command tx timeout [ 67.730099][ T5860] Bluetooth: hci4: command tx timeout [ 67.735644][ T5853] Bluetooth: hci3: command tx timeout [ 67.741511][ T5860] Bluetooth: hci1: command tx timeout [ 67.821723][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.026036][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.054737][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.123581][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.144633][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.240086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.250113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.940130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.076159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.179028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.313608][ T5975] Sensor B: ================= START STATUS ================= [ 69.321312][ T5975] Sensor B: Test Pattern: 75% Colorbar [ 69.326843][ T5975] Sensor B: Show Information: All [ 69.332329][ T5975] Sensor B: Vertical Flip: false [ 69.337249][ T5975] Sensor B: Horizontal Flip: false [ 69.342365][ T5975] Sensor B: Brightness: 128 [ 69.346845][ T5975] Sensor B: Contrast: 128 [ 69.351168][ T5975] Sensor B: Hue: 0 [ 69.354865][ T5975] Sensor B: Saturation: 128 [ 69.359427][ T5975] Sensor B: ================== END STATUS ================== [ 69.579984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.589148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.690098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 69.690514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.707001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.812042][ T5861] Bluetooth: hci0: command tx timeout [ 69.817452][ T5861] Bluetooth: hci2: command tx timeout [ 69.822900][ T5860] Bluetooth: hci1: command tx timeout [ 69.828395][ T5853] Bluetooth: hci3: command tx timeout [ 69.833909][ T5860] Bluetooth: hci4: command tx timeout [ 70.017791][ T977] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.691272][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 70.755040][ T5990] evm: overlay not supported [ 70.774589][ T977] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 70.789662][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.244920][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.251730][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.260787][ T977] usb 3-1: config 0 has no interface number 0 [ 71.266921][ T977] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 71.277058][ T977] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 71.288210][ T977] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 71.337489][ T977] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 71.360965][ T977] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 71.416379][ T977] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 71.478153][ T977] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 71.502902][ T977] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 71.605618][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 71.605628][ T30] audit: type=1400 audit(1758985939.413:129): avc: denied { create } for pid=6005 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.647487][ T977] usb 3-1: config 0 interface 239 has no altsetting 0 [ 72.087894][ T977] usb 3-1: string descriptor 0 read error: -71 [ 72.094286][ T977] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 72.103344][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.341827][ T30] audit: type=1400 audit(1758985940.093:130): avc: denied { prog_run } for pid=6005 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.431766][ T30] audit: type=1400 audit(1758985940.213:131): avc: denied { map_create } for pid=6009 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.505895][ T977] usb 3-1: config 0 descriptor?? [ 72.513601][ T977] usb 3-1: can't set config #0, error -71 [ 72.797954][ T977] usb 3-1: USB disconnect, device number 2 [ 72.808313][ T6010] block device autoloading is deprecated and will be removed. [ 72.816224][ T30] audit: type=1400 audit(1758985940.223:132): avc: denied { map_read map_write } for pid=6009 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.181091][ T30] audit: type=1400 audit(1758985940.463:133): avc: denied { create } for pid=6013 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.270314][ T30] audit: type=1400 audit(1758985940.483:134): avc: denied { ioctl } for pid=6013 comm="syz.4.13" path="socket:[7904]" dev="sockfs" ino=7904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.336655][ T6023] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.399543][ T30] audit: type=1400 audit(1758985940.483:135): avc: denied { write } for pid=6013 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.491642][ T6006] tmpfs: Bad value for 'mpol' [ 73.960754][ T6028] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 74.005155][ T30] audit: type=1400 audit(1758985941.113:136): avc: denied { mount } for pid=6013 comm="syz.4.13" name="/" dev="rpc_pipefs" ino=8848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 74.076025][ T6036] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[6036] [ 74.874477][ T6042] _Z`Ԁ@: entered promiscuous mode [ 75.165446][ T30] audit: type=1400 audit(1758985941.143:137): avc: denied { ioctl } for pid=6022 comm="syz.3.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 75.244690][ T30] audit: type=1400 audit(1758985941.143:138): avc: denied { map } for pid=6022 comm="syz.3.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 75.410217][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.411887][ T6049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 76.020237][ T6055] kvm: user requested TSC rate below hardware speed [ 76.046930][ T6055] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 76.079432][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.206507][ T6060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 76.259913][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 76.269275][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.283247][ T43] usb 5-1: config 0 has no interface number 0 [ 76.290844][ T6062] netlink: 68 bytes leftover after parsing attributes in process `syz.1.26'. [ 76.316808][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.339162][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.350439][ T43] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 76.359549][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.427178][ T43] usb 5-1: config 0 descriptor?? [ 76.459842][ T5929] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.482999][ T6064] binder: 6063:6064 ioctl 4002f516 200000000140 returned -22 [ 76.530388][ T6065] binder: 6063:6065 ioctl 4002f516 200000000140 returned -22 [ 76.752860][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 76.763932][ T5929] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 76.773755][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.787485][ T5929] usb 3-1: config 0 descriptor?? [ 77.129207][ T43] input: HID 28bd:0094 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.0001/input/input5 [ 77.153826][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 77.153840][ T30] audit: type=1400 audit(1758985944.963:161): avc: denied { read } for pid=5204 comm="acpid" name="mouse1" dev="devtmpfs" ino=2794 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.225189][ T6078] comedi comedi3: dac02: I/O port conflict (0xffffffff80000001,8) [ 77.230807][ T5929] kye 0003:0458:501B.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 77.244613][ T43] uclogic 0003:28BD:0094.0001: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 77.290862][ T30] audit: type=1400 audit(1758985944.963:162): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2794 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.324287][ T30] audit: type=1400 audit(1758985945.023:163): avc: denied { ioctl } for pid=5204 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2794 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.386564][ T5929] kye 0003:0458:501B.0002: hidraw1: USB HID v1.01 Device [HID 0458:501b] on usb-dummy_hcd.2-1/input0 [ 77.419920][ T5929] kye 0003:0458:501B.0002: tablet-enabling feature report not found [ 77.419943][ T5929] kye 0003:0458:501B.0002: tablet enabling failed [ 77.550216][ T30] audit: type=1400 audit(1758985945.283:164): avc: denied { read append } for pid=6054 comm="syz.2.25" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.550258][ T30] audit: type=1400 audit(1758985945.283:165): avc: denied { open } for pid=6054 comm="syz.2.25" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.550291][ T30] audit: type=1400 audit(1758985945.283:166): avc: denied { map } for pid=6054 comm="syz.2.25" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.550327][ T30] audit: type=1400 audit(1758985945.283:167): avc: denied { execute } for pid=6054 comm="syz.2.25" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.977624][ T30] audit: type=1400 audit(1758985945.773:168): avc: denied { write } for pid=6083 comm="syz.3.32" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.977655][ T30] audit: type=1400 audit(1758985945.783:169): avc: denied { ioctl } for pid=6083 comm="syz.3.32" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.220073][ T30] audit: type=1400 audit(1758985945.963:170): avc: denied { create } for pid=6083 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.398265][ T5915] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 78.474957][ T6081] team0: Port device team_slave_0 removed [ 78.562929][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.590501][ T6095] sctp: [Deprecated]: syz.0.33 (pid 6095) Use of int in max_burst socket option. [ 78.590501][ T6095] Use struct sctp_assoc_value instead [ 78.869875][ T977] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.370676][ T24] usb 3-1: USB disconnect, device number 3 [ 79.477797][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 79.492159][ T977] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 79.507532][ T977] usb 1-1: config 0 has no interface number 0 [ 79.563104][ T977] usb 1-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 194 [ 79.841724][ T9] usb 5-1: USB disconnect, device number 2 [ 79.859143][ T977] usb 1-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 79.919646][ T977] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 79.969892][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.985878][ T977] usb 1-1: Product: syz [ 79.995785][ T977] usb 1-1: Manufacturer: syz [ 80.023337][ T977] usb 1-1: SerialNumber: syz [ 80.046876][ T977] usb 1-1: config 0 descriptor?? [ 80.070906][ T6095] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.090686][ T977] redrat3 1-1:0.83: Couldn't find all endpoints [ 81.106253][ T10] cfg80211: failed to load regulatory.db [ 81.208885][ T6125] misc userio: Invalid payload size [ 81.465948][ T24] usb 1-1: USB disconnect, device number 2 [ 81.653957][ T6134] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.43'. [ 81.958377][ T6141] FAULT_INJECTION: forcing a failure. [ 81.958377][ T6141] name failslab, interval 1, probability 0, space 0, times 1 [ 81.971237][ T6141] CPU: 1 UID: 0 PID: 6141 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT(full) [ 81.971258][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 81.971268][ T6141] Call Trace: [ 81.971273][ T6141] [ 81.971279][ T6141] dump_stack_lvl+0x16c/0x1f0 [ 81.971308][ T6141] should_fail_ex+0x512/0x640 [ 81.971334][ T6141] should_failslab+0xc2/0x120 [ 81.971355][ T6141] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 81.971374][ T6141] ? skb_clone+0x139/0x3f0 [ 81.971394][ T6141] ? skb_clone+0x190/0x3f0 [ 81.971418][ T6141] skb_clone+0x190/0x3f0 [ 81.971440][ T6141] netlink_deliver_tap+0xabd/0xd30 [ 81.971463][ T6141] ? netlink_unicast+0x17c/0x870 [ 81.971488][ T6141] netlink_unicast+0x64c/0x870 [ 81.971514][ T6141] ? __pfx_netlink_unicast+0x10/0x10 [ 81.971547][ T6141] netlink_sendmsg+0x8d1/0xdd0 [ 81.971574][ T6141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.971607][ T6141] ____sys_sendmsg+0xa98/0xc70 [ 81.971634][ T6141] ? copy_msghdr_from_user+0x10a/0x160 [ 81.971654][ T6141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.971683][ T6141] ? rcu_is_watching+0x12/0xc0 [ 81.971704][ T6141] ? finish_task_switch.isra.0+0x221/0xc10 [ 81.971726][ T6141] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.971752][ T6141] ___sys_sendmsg+0x134/0x1d0 [ 81.971775][ T6141] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.971824][ T6141] ? irqentry_exit+0x30/0x90 [ 81.971853][ T6141] __sys_sendmsg+0x16d/0x220 [ 81.971874][ T6141] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.971895][ T6141] ? fput+0x88/0xd0 [ 81.971934][ T6141] do_syscall_64+0xcd/0x4e0 [ 81.971959][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.971976][ T6141] RIP: 0033:0x7f99b478eec9 [ 81.971990][ T6141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.972006][ T6141] RSP: 002b:00007f99b29d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.972022][ T6141] RAX: ffffffffffffffda RBX: 00007f99b49e6180 RCX: 00007f99b478eec9 [ 81.972033][ T6141] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 81.972043][ T6141] RBP: 00007f99b29d5090 R08: 0000000000000000 R09: 0000000000000000 [ 81.972053][ T6141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.972062][ T6141] R13: 00007f99b49e6218 R14: 00007f99b49e6180 R15: 00007ffde6f7ebf8 [ 81.972086][ T6141] [ 82.215473][ T6141] _Z`Ԁ@: entered promiscuous mode [ 82.319158][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 82.319176][ T30] audit: type=1400 audit(1758985950.033:203): avc: denied { getattr } for pid=6140 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.407635][ T30] audit: type=1400 audit(1758985950.173:204): avc: denied { mount } for pid=6139 comm="syz.1.44" name="/" dev="hugetlbfs" ino=8155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 82.586078][ T30] audit: type=1400 audit(1758985950.383:205): avc: denied { create } for pid=6139 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.705595][ T30] audit: type=1400 audit(1758985950.383:206): avc: denied { bind } for pid=6139 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.734559][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.903989][ T30] audit: type=1400 audit(1758985951.713:207): avc: denied { ioctl } for pid=6157 comm="syz.0.49" path="socket:[8166]" dev="sockfs" ino=8166 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.589138][ T5929] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.647523][ T30] audit: type=1400 audit(1758985952.453:208): avc: denied { add_name } for pid=6135 comm="dhcpcd-run-hook" name="resolv.conf.ipvlan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.764544][ T30] audit: type=1400 audit(1758985952.483:209): avc: denied { create } for pid=6135 comm="dhcpcd-run-hook" name="resolv.conf.ipvlan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.867244][ T30] audit: type=1400 audit(1758985952.483:210): avc: denied { write } for pid=6135 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ipvlan0.link" dev="tmpfs" ino=2144 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.938094][ T30] audit: type=1400 audit(1758985952.483:211): avc: denied { append } for pid=6135 comm="dhcpcd-run-hook" name="resolv.conf.ipvlan0.link" dev="tmpfs" ino=2144 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.981472][ T30] audit: type=1400 audit(1758985952.773:212): avc: denied { name_bind } for pid=6175 comm="syz.2.50" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 86.455303][ T6203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.58'. [ 86.477422][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 86.513379][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 86.554732][ T6204] netlink: 'syz.2.57': attribute type 19 has an invalid length. [ 86.681469][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.760519][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.824184][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.152131][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.368551][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 87.368567][ T30] audit: type=1400 audit(1758985955.173:223): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 87.762930][ T30] audit: type=1400 audit(1758985955.353:224): avc: denied { read write } for pid=6231 comm="syz.2.65" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.102254][ T30] audit: type=1400 audit(1758985955.353:225): avc: denied { open } for pid=6231 comm="syz.2.65" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.538880][ T6240] comedi comedi0: pcm3724: a I/O base address must be specified [ 88.585340][ T6257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'. [ 88.659912][ T30] audit: type=1400 audit(1758985955.363:226): avc: denied { ioctl } for pid=6231 comm="syz.2.65" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.786415][ T30] audit: type=1400 audit(1758985955.733:227): avc: denied { write } for pid=6238 comm="syz.1.68" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.858763][ T30] audit: type=1400 audit(1758985956.053:228): avc: denied { write } for pid=6242 comm="syz.4.67" name="netlink" dev="proc" ino=4026532820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.449925][ T6277] FAULT_INJECTION: forcing a failure. [ 89.449925][ T6277] name failslab, interval 1, probability 0, space 0, times 0 [ 89.463402][ T6277] CPU: 1 UID: 0 PID: 6277 Comm: syz.1.76 Not tainted syzkaller #0 PREEMPT(full) [ 89.463425][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.463435][ T6277] Call Trace: [ 89.463441][ T6277] [ 89.463447][ T6277] dump_stack_lvl+0x16c/0x1f0 [ 89.463474][ T6277] should_fail_ex+0x512/0x640 [ 89.463500][ T6277] should_failslab+0xc2/0x120 [ 89.463520][ T6277] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 89.463540][ T6277] ? skb_clone+0x190/0x3f0 [ 89.463565][ T6277] skb_clone+0x190/0x3f0 [ 89.463586][ T6277] netlink_deliver_tap+0xabd/0xd30 [ 89.463614][ T6277] netlink_unicast+0x64c/0x870 [ 89.463640][ T6277] ? __pfx_netlink_unicast+0x10/0x10 [ 89.463673][ T6277] netlink_sendmsg+0x8d1/0xdd0 [ 89.463699][ T6277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.463732][ T6277] ____sys_sendmsg+0xa98/0xc70 [ 89.463758][ T6277] ? copy_msghdr_from_user+0x10a/0x160 [ 89.463779][ T6277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.463808][ T6277] ? rcu_is_watching+0x12/0xc0 [ 89.463829][ T6277] ? finish_task_switch.isra.0+0x221/0xc10 [ 89.463850][ T6277] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.463876][ T6277] ___sys_sendmsg+0x134/0x1d0 [ 89.463898][ T6277] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.463942][ T6277] ? lockdep_hardirqs_on+0x50/0x110 [ 89.463970][ T6277] __sys_sendmsg+0x16d/0x220 [ 89.463997][ T6277] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.464018][ T6277] ? fput+0x88/0xd0 [ 89.464056][ T6277] do_syscall_64+0xcd/0x4e0 [ 89.464081][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.464098][ T6277] RIP: 0033:0x7fcd5498eec9 [ 89.464112][ T6277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.464127][ T6277] RSP: 002b:00007fcd5585e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.464144][ T6277] RAX: ffffffffffffffda RBX: 00007fcd54be6180 RCX: 00007fcd5498eec9 [ 89.464154][ T6277] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 89.464165][ T6277] RBP: 00007fcd5585e090 R08: 0000000000000000 R09: 0000000000000000 [ 89.464174][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.464184][ T6277] R13: 00007fcd54be6218 R14: 00007fcd54be6180 R15: 00007ffdcee873c8 [ 89.464209][ T6277] [ 89.697963][ T6277] _Z`Ԁ@: entered promiscuous mode [ 89.939986][ T5929] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.806397][ T30] audit: type=1400 audit(1758985958.573:229): avc: denied { create } for pid=6270 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.389845][ T30] audit: type=1400 audit(1758985960.193:230): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.513756][ T6284] mmap: syz.3.75 (6284) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.637527][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.75'. [ 92.679903][ T977] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 92.697714][ T6295] fuse: Bad value for 'fd' [ 92.748311][ T6295] fuse: Bad value for 'group_id' [ 92.754138][ T6295] fuse: Bad value for 'group_id' [ 92.934164][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.945041][ T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 92.960262][ T5929] usb 2-1: device descriptor read/64, error -71 [ 92.969970][ T977] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 92.988554][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.062031][ T977] usb 3-1: config 0 descriptor?? [ 93.073337][ T977] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 93.126565][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 93.168780][ T977] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 93.182486][ T977] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 93.190626][ T977] usb 3-1: media controller created [ 93.197913][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.282027][ T977] dvb-usb: bulk message failed: -22 (6/0) [ 93.300916][ T6290] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 93.306241][ T5929] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.317908][ T977] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 93.358377][ T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 93.377237][ T977] dvb-usb: schedule remote query interval to 150 msecs. [ 93.384908][ T977] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 93.439931][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.527767][ T977] usb 3-1: USB disconnect, device number 5 [ 93.972089][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.054436][ T977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 94.058474][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.074127][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 94.083235][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.094990][ T5929] usb 2-1: config 0 descriptor?? [ 94.134327][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.152507][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.163098][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.173068][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 94.184210][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 94.196864][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.206003][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.214397][ T24] usb 1-1: Product: syz [ 94.218564][ T24] usb 1-1: Manufacturer: syz [ 94.228478][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 94.233737][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 94.243199][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 94.249123][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 94.368225][ T6292] syz.1.79 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.504048][ T30] audit: type=1400 audit(1758985962.313:231): avc: denied { read write } for pid=6302 comm="syz.0.81" name="cdc-wdm0" dev="devtmpfs" ino=2835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 94.541274][ T30] audit: type=1400 audit(1758985962.313:232): avc: denied { open } for pid=6302 comm="syz.0.81" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 94.654085][ T30] audit: type=1400 audit(1758985962.463:233): avc: denied { bind } for pid=6291 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.744556][ T30] audit: type=1400 audit(1758985962.493:234): avc: denied { connect } for pid=6291 comm="syz.1.79" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.745253][ T5929] usbhid 2-1:0.0: can't add hid device: -71 [ 94.782236][ T5929] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 94.801382][ T5929] usb 2-1: USB disconnect, device number 3 [ 94.897655][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 95.221536][ T977] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 95.392205][ T977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.403582][ T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.418772][ T977] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 95.427923][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.435997][ T977] usb 4-1: SerialNumber: syz [ 95.449657][ T977] usb 4-1: 0:2 : does not exist [ 95.813416][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 96.165454][ T30] audit: type=1400 audit(1758985963.973:235): avc: denied { create } for pid=6339 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.324361][ T6337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.88'. [ 96.341497][ T5929] usb 1-1: USB disconnect, device number 3 [ 96.352674][ T6326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.87'. [ 96.375852][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.400243][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.472494][ T30] audit: type=1400 audit(1758985964.283:236): avc: denied { create } for pid=6339 comm="syz.1.90" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.558405][ T977] usb 4-1: USB disconnect, device number 4 [ 96.652754][ T30] audit: type=1400 audit(1758985964.333:237): avc: denied { write } for pid=6339 comm="syz.1.90" name="file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.717617][ T6350] vlan2: entered allmulticast mode [ 96.722817][ T6350] bridge0: entered allmulticast mode [ 96.783065][ T30] audit: type=1400 audit(1758985964.333:238): avc: denied { open } for pid=6339 comm="syz.1.90" path="/19/file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.869925][ T5929] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.025971][ T30] audit: type=1400 audit(1758985964.353:239): avc: denied { ioctl } for pid=6339 comm="syz.1.90" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.095465][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.118177][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.169585][ T5929] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 97.282778][ T6356] misc userio: Invalid payload size [ 97.287485][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.373179][ T5929] usb 1-1: config 0 descriptor?? [ 97.709341][ T6355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.781450][ T5929] usbhid 1-1:0.0: can't add hid device: -71 [ 97.787455][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 97.856819][ T5929] usb 1-1: USB disconnect, device number 4 [ 97.985940][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 97.985957][ T30] audit: type=1400 audit(1758985965.783:243): avc: denied { unlink } for pid=5847 comm="syz-executor" name="file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.041380][ T6369] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 99.023543][ T6392] vlan2: entered allmulticast mode [ 99.028704][ T6392] bridge0: entered allmulticast mode [ 99.227755][ T30] audit: type=1400 audit(1758985967.033:244): avc: denied { create } for pid=6378 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.529869][ T6396] netlink: 'syz.3.105': attribute type 2 has an invalid length. [ 99.793719][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 99.980465][ T30] audit: type=1400 audit(1758985967.793:245): avc: denied { create } for pid=6404 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 100.094569][ T6413] netlink: 68 bytes leftover after parsing attributes in process `syz.3.108'. [ 100.229852][ T5985] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 100.521009][ T5985] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.540708][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 100.606149][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 100.649031][ T6432] comedi comedi0: pcm3724: a I/O base address must be specified [ 100.873732][ T5985] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 100.884792][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.920099][ T5985] usb 2-1: Product: syz [ 100.926595][ T5985] usb 2-1: Manufacturer: syz [ 100.935162][ T5985] usb 2-1: SerialNumber: syz [ 100.955795][ T5985] usb 2-1: config 0 descriptor?? [ 100.983279][ T5985] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 101.362325][ T5985] usb 2-1: USB disconnect, device number 4 [ 101.914167][ T6452] FAULT_INJECTION: forcing a failure. [ 101.914167][ T6452] name failslab, interval 1, probability 0, space 0, times 0 [ 101.927017][ T6452] CPU: 0 UID: 0 PID: 6452 Comm: syz.2.116 Not tainted syzkaller #0 PREEMPT(full) [ 101.927040][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.927049][ T6452] Call Trace: [ 101.927054][ T6452] [ 101.927061][ T6452] dump_stack_lvl+0x16c/0x1f0 [ 101.927087][ T6452] should_fail_ex+0x512/0x640 [ 101.927108][ T6452] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 101.927129][ T6452] should_failslab+0xc2/0x120 [ 101.927147][ T6452] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 101.927164][ T6452] ? getname_flags.part.0+0x4c/0x550 [ 101.927194][ T6452] getname_flags.part.0+0x4c/0x550 [ 101.927221][ T6452] getname_flags+0x93/0xf0 [ 101.927238][ T6452] do_sys_openat2+0xb8/0x1d0 [ 101.927261][ T6452] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.927286][ T6452] ? __fget_files+0x20e/0x3c0 [ 101.927309][ T6452] __x64_sys_openat+0x174/0x210 [ 101.927332][ T6452] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.927354][ T6452] ? ksys_write+0x1ac/0x250 [ 101.927379][ T6452] do_syscall_64+0xcd/0x4e0 [ 101.927403][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.927420][ T6452] RIP: 0033:0x7f99b478eec9 [ 101.927433][ T6452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.927448][ T6452] RSP: 002b:00007f99b29f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.927463][ T6452] RAX: ffffffffffffffda RBX: 00007f99b49e6090 RCX: 00007f99b478eec9 [ 101.927474][ T6452] RDX: 0000000000003f00 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 101.927484][ T6452] RBP: 00007f99b29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 101.927493][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.927502][ T6452] R13: 00007f99b49e6128 R14: 00007f99b49e6090 R15: 00007ffde6f7ebf8 [ 101.927523][ T6452] [ 101.973634][ T6446] misc userio: Invalid payload size [ 102.488733][ T30] audit: type=1400 audit(1758985970.293:246): avc: denied { mounton } for pid=6435 comm="syz.3.112" path="/proc/96" dev="proc" ino=10422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 102.638164][ T6464] vlan2: entered allmulticast mode [ 102.643329][ T6464] bridge0: entered allmulticast mode [ 102.661971][ T30] audit: type=1400 audit(1758985970.463:247): avc: denied { sys_module } for pid=6435 comm="syz.3.112" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.271036][ T30] audit: type=1400 audit(1758985971.063:248): avc: denied { append } for pid=6472 comm="syz.0.121" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.337749][ T30] audit: type=1400 audit(1758985971.063:249): avc: denied { ioctl } for pid=6472 comm="syz.0.121" path="/dev/sg0" dev="devtmpfs" ino=741 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.919473][ T6492] vlan2: entered allmulticast mode [ 103.924712][ T6492] bridge0: entered allmulticast mode [ 105.650081][ T977] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.959948][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 106.149814][ T30] audit: type=1400 audit(1758985973.953:250): avc: denied { read write } for pid=6498 comm="syz.0.127" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.649031][ T30] audit: type=1400 audit(1758985973.953:251): avc: denied { open } for pid=6498 comm="syz.0.127" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.675507][ T30] audit: type=1400 audit(1758985973.953:252): avc: denied { read } for pid=6498 comm="syz.0.127" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.769229][ T6526] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 106.777718][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.797013][ T30] audit: type=1400 audit(1758985973.953:253): avc: denied { open } for pid=6498 comm="syz.0.127" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.826414][ T6528] netlink: 68 bytes leftover after parsing attributes in process `syz.4.135'. [ 106.847306][ T30] audit: type=1400 audit(1758985973.953:254): avc: denied { ioctl } for pid=6498 comm="syz.0.127" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.890973][ T30] audit: type=1400 audit(1758985974.573:255): avc: denied { mounton } for pid=6524 comm="syz.1.136" path="/25/file0" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.954824][ T43] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 106.972394][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.058173][ T43] usb 4-1: Product: syz [ 107.067321][ T43] usb 4-1: Manufacturer: syz [ 107.074380][ T43] usb 4-1: SerialNumber: syz [ 107.089442][ T43] usb 4-1: config 0 descriptor?? [ 107.099836][ T5985] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.126220][ T43] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 005 [ 107.343967][ T5985] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.585391][ T5985] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.633582][ T5985] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 107.665161][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 107.697165][ T5985] usb 3-1: Product: syz [ 107.726344][ T5985] usb 3-1: config 0 descriptor?? [ 107.871599][ T30] audit: type=1400 audit(1758985975.673:256): avc: denied { write } for pid=6550 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.958484][ T977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.977097][ T977] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 107.991769][ T977] usb 1-1: can't read configurations, error -71 [ 108.016954][ T30] audit: type=1400 audit(1758985975.813:257): avc: denied { bind } for pid=6550 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.106507][ T43] i2c i2c-1: connected i2c-tiny-usb device [ 108.300526][ T9] usb 4-1: USB disconnect, device number 5 [ 108.667964][ T6574] vivid-002: disconnect [ 108.917819][ T6563] vivid-002: reconnect [ 110.210064][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 110.210078][ T30] audit: type=1400 audit(1758985977.833:259): avc: denied { mount } for pid=6587 comm="syz.1.152" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.599379][ T30] audit: type=1400 audit(1758985977.863:260): avc: denied { mount } for pid=6587 comm="syz.1.152" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 110.854181][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.153'. [ 111.254178][ T30] audit: type=1400 audit(1758985979.063:261): avc: denied { write } for pid=6610 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.738446][ T10] usb 3-1: USB disconnect, device number 6 [ 111.760597][ T30] audit: type=1400 audit(1758985979.143:262): avc: denied { read write } for pid=6603 comm="syz.4.156" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.803977][ T30] audit: type=1400 audit(1758985979.143:263): avc: denied { open } for pid=6603 comm="syz.4.156" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.882174][ T30] audit: type=1400 audit(1758985979.153:264): avc: denied { ioctl } for pid=6603 comm="syz.4.156" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.908528][ T30] audit: type=1400 audit(1758985979.613:265): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 111.987527][ T30] audit: type=1400 audit(1758985979.793:266): avc: denied { write } for pid=6614 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.309832][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.819624][ T6631] netlink: 68 bytes leftover after parsing attributes in process `syz.1.162'. [ 112.874728][ T10] usb 3-1: config 0 has no interfaces? [ 112.886229][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 112.895400][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.904564][ T10] usb 3-1: Product: syz [ 112.912781][ T10] usb 3-1: Manufacturer: syz [ 112.918428][ T10] usb 3-1: SerialNumber: syz [ 112.927096][ T10] usb 3-1: config 0 descriptor?? [ 113.183380][ T5929] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.352576][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.367503][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.377797][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.389251][ T5929] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.398961][ T5929] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 113.407272][ T5929] usb 4-1: Manufacturer: syz [ 113.502234][ T5929] usb 4-1: config 0 descriptor?? [ 113.619526][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'. [ 113.711006][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 113.719149][ T43] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 113.728637][ T43] usb 2-1: config 0 has no interface number 0 [ 113.734927][ T43] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.755322][ T43] usb 2-1: config 0 interface 85 has no altsetting 0 [ 113.775171][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 113.787762][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.797953][ T43] usb 2-1: Product: syz [ 113.802384][ T43] usb 2-1: Manufacturer: syz [ 113.807193][ T43] usb 2-1: SerialNumber: syz [ 113.815591][ T43] usb 2-1: config 0 descriptor?? [ 114.039035][ T43] appletouch 2-1:0.85: Failed to read mode from device. [ 114.046656][ T43] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 114.303879][ T30] audit: type=1400 audit(1758985982.103:267): avc: denied { ioctl } for pid=6638 comm="syz.1.166" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10831 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 114.545774][ T6655] misc userio: Invalid payload size [ 114.811390][ T5929] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0003/input/input10 [ 114.823378][ T6639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.841066][ T6639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.863493][ T43] usb 2-1: USB disconnect, device number 5 [ 114.913470][ T5929] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0003/input/input11 [ 115.042234][ T5929] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0003/input/input12 [ 115.078464][ T5929] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0003/input/input13 [ 115.094163][ T5929] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 115.134879][ T5929] usb 4-1: USB disconnect, device number 6 [ 115.266089][ T30] audit: type=1400 audit(1758985983.043:268): avc: denied { map } for pid=6656 comm="syz.0.172" path="socket:[10847]" dev="sockfs" ino=10847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 115.541233][ T5908] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.746447][ T5985] usb 3-1: USB disconnect, device number 7 [ 115.754488][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.805109][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.817713][ T6660] fido_id[6660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 115.854957][ T5908] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.879805][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.892612][ T5908] usb 1-1: SerialNumber: syz [ 115.905542][ T30] audit: type=1400 audit(1758985983.713:269): avc: denied { append } for pid=6666 comm="syz.2.174" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.086495][ T6668] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 116.108746][ T6668] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 116.302943][ T5908] usb 1-1: 0:2 : does not exist [ 116.349897][ T5908] usb 1-1: unit 5 not found! [ 116.913767][ T6680] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 116.931607][ T6680] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 117.304392][ T6684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.180'. [ 117.411940][ T30] audit: type=1400 audit(1758985985.203:270): avc: denied { create } for pid=6686 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.440542][ T30] audit: type=1400 audit(1758985985.203:271): avc: denied { connect } for pid=6686 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.479517][ T30] audit: type=1400 audit(1758985985.283:272): avc: denied { ioctl } for pid=6686 comm="syz.3.181" path="socket:[10895]" dev="sockfs" ino=10895 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.787435][ T30] audit: type=1400 audit(1758985985.593:273): avc: denied { mount } for pid=6690 comm="syz.2.183" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.843257][ T30] audit: type=1400 audit(1758985985.623:274): avc: denied { create } for pid=6690 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.470459][ T5908] usb 1-1: USB disconnect, device number 7 [ 118.538467][ T6698] macvtap1: entered promiscuous mode [ 118.544067][ T6698] vlan1: entered promiscuous mode [ 118.553550][ T6698] vlan1: left promiscuous mode [ 118.796801][ T30] audit: type=1400 audit(1758985986.603:275): avc: denied { watch watch_reads } for pid=6708 comm="syz.0.189" path="/proc/135/task" dev="proc" ino=11500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 118.937753][ T30] audit: type=1400 audit(1758985986.743:276): avc: denied { create } for pid=6706 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.030350][ T6717] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 119.046699][ T6717] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 119.262382][ T6720] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.192'. [ 120.279869][ T5957] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.349054][ T30] audit: type=1400 audit(1758985988.143:277): avc: denied { create } for pid=6738 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.489419][ T5957] usb 2-1: config 8 has an invalid interface number: 184 but max is 0 [ 120.572761][ T30] audit: type=1400 audit(1758985988.143:278): avc: denied { connect } for pid=6738 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.585599][ T5957] usb 2-1: config 8 has no interface number 0 [ 120.607538][ T30] audit: type=1400 audit(1758985988.203:279): avc: denied { setopt } for pid=6738 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.699682][ T30] audit: type=1400 audit(1758985988.473:280): avc: denied { mounton } for pid=6741 comm="syz.0.199" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.723270][ T5957] usb 2-1: config 8 interface 184 has no altsetting 0 [ 120.758656][ T5957] usb 2-1: New USB device found, idVendor=03f0, idProduct=a31d, bcdDevice=f9.9d [ 120.798462][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.017725][ T5957] usb 2-1: Product: 岵ʷȎㄌ疎ࡣ顕籱➺뿉 [ 121.124673][ T5957] usb 2-1: Manufacturer: 漥ﻱ祪ᙢ經璊越⇀鄘푭⠭ꔀ볔쎂ᨄ鯟Ѹ䅔勀늑椟⃖⣹Ꮔ娍阂븧Ｊ [ 121.199540][ T5957] usb 2-1: SerialNumber: ఄ [ 122.100605][ T5908] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.992388][ T5957] option 2-1:8.184: GSM modem (1-port) converter detected [ 123.018037][ T5957] usb 2-1: USB disconnect, device number 6 [ 123.049251][ T5957] option 2-1:8.184: device disconnected [ 123.197063][ T6774] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 123.209310][ T6774] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 124.050915][ T6783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.209'. [ 124.102048][ T30] audit: type=1400 audit(1758985991.903:281): avc: denied { firmware_load } for pid=6773 comm="syz.1.207" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 124.203124][ T30] audit: type=1400 audit(1758985991.953:282): avc: denied { create } for pid=6773 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 124.368251][ T6785] syz.1.207 (6785) used greatest stack depth: 19112 bytes left [ 124.491463][ T30] audit: type=1400 audit(1758985991.953:283): avc: denied { ioctl } for pid=6773 comm="syz.1.207" path="socket:[11755]" dev="sockfs" ino=11755 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 124.517771][ T30] audit: type=1400 audit(1758985992.303:284): avc: denied { create } for pid=6787 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.538516][ T30] audit: type=1400 audit(1758985992.323:285): avc: denied { connect } for pid=6787 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.621668][ T30] audit: type=1400 audit(1758985992.323:286): avc: denied { write } for pid=6787 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.414265][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'. [ 125.553273][ T6812] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 125.575263][ T6812] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 126.069830][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 126.069845][ T30] audit: type=1400 audit(1758985993.713:289): avc: denied { mount } for pid=6807 comm="syz.0.219" name="/" dev="ramfs" ino=11807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 127.195105][ T30] audit: type=1400 audit(1758985994.993:290): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 127.371380][ T6834] FAULT_INJECTION: forcing a failure. [ 127.371380][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.386853][ T30] audit: type=1326 audit(1758985995.193:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5898eec9 code=0x7ffc0000 [ 127.413738][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.2.228 Not tainted syzkaller #0 PREEMPT(full) [ 127.413761][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.413771][ T6834] Call Trace: [ 127.413777][ T6834] [ 127.413783][ T6834] dump_stack_lvl+0x16c/0x1f0 [ 127.413811][ T6834] should_fail_ex+0x512/0x640 [ 127.413836][ T6834] _copy_to_user+0x32/0xd0 [ 127.413863][ T6834] simple_read_from_buffer+0xcb/0x170 [ 127.413883][ T6834] proc_fail_nth_read+0x197/0x240 [ 127.413905][ T6834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.413926][ T6834] ? rw_verify_area+0xcf/0x6c0 [ 127.413952][ T6834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.413971][ T6834] vfs_read+0x1e4/0xcf0 [ 127.413992][ T6834] ? __pfx___mutex_lock+0x10/0x10 [ 127.414015][ T6834] ? __pfx_vfs_read+0x10/0x10 [ 127.414039][ T6834] ? __fget_files+0x20e/0x3c0 [ 127.414065][ T6834] ksys_read+0x12a/0x250 [ 127.414082][ T6834] ? __pfx_ksys_read+0x10/0x10 [ 127.414099][ T6834] ? fput+0x9b/0xd0 [ 127.414125][ T6834] do_syscall_64+0xcd/0x4e0 [ 127.414149][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.414166][ T6834] RIP: 0033:0x7f99b478d8dc [ 127.414181][ T6834] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.414196][ T6834] RSP: 002b:00007f99b555c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.414212][ T6834] RAX: ffffffffffffffda RBX: 00007f99b49e5fa0 RCX: 00007f99b478d8dc [ 127.414223][ T6834] RDX: 000000000000000f RSI: 00007f99b555c0a0 RDI: 0000000000000004 [ 127.414233][ T6834] RBP: 00007f99b555c090 R08: 0000000000000000 R09: 0000000000000000 [ 127.414243][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.414252][ T6834] R13: 00007f99b49e6038 R14: 00007f99b49e5fa0 R15: 00007ffde6f7ebf8 [ 127.414275][ T6834] [ 127.629382][ T30] audit: type=1326 audit(1758985995.223:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0c5898eec9 code=0x7ffc0000 [ 127.654051][ T30] audit: type=1326 audit(1758985995.223:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5898eec9 code=0x7ffc0000 [ 127.687376][ T30] audit: type=1326 audit(1758985995.223:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5898eec9 code=0x7ffc0000 [ 127.754754][ T30] audit: type=1326 audit(1758985995.223:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0c5898eec9 code=0x7ffc0000 [ 127.778299][ T30] audit: type=1326 audit(1758985995.223:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5898eec9 code=0x7ffc0000 [ 127.802267][ T30] audit: type=1326 audit(1758985995.223:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5898eec9 code=0x7ffc0000 [ 127.828628][ T30] audit: type=1326 audit(1758985995.223:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0c5898eec9 code=0x7ffc0000 [ 127.962046][ T6840] Zero length message leads to an empty skb [ 128.549866][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 129.119840][ T5929] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.330225][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 129.363108][ T5929] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 129.553825][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.567145][ T5929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.604228][ T5929] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 129.616496][ T5929] usb 2-1: config 1 has no interface number 1 [ 129.624650][ T5929] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 129.637722][ T5929] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.653131][ T5929] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.662345][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.679309][ T5929] usb 2-1: Product: syz [ 129.685536][ T5929] usb 2-1: Manufacturer: syz [ 129.690801][ T5929] usb 2-1: SerialNumber: syz [ 129.707710][ T10] usb 4-1: device descriptor read/64, error -71 [ 129.929936][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.100017][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 130.139978][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.145423][ T5929] usb 2-1: USB disconnect, device number 7 [ 130.189408][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.207188][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.240'. [ 130.219841][ T24] usb 1-1: device descriptor read/64, error -71 [ 130.309787][ T10] usb 4-1: device descriptor read/64, error -71 [ 130.402505][ T6880] syz.4.241 uses obsolete (PF_INET,SOCK_PACKET) [ 130.411079][ T6880] syzkaller1: entered promiscuous mode [ 130.418900][ T6880] syzkaller1: entered allmulticast mode [ 130.583054][ T10] usb usb4-port1: attempt power cycle [ 130.649824][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 130.829810][ T24] usb 1-1: device descriptor read/64, error -71 [ 130.963556][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.991540][ T24] usb usb1-port1: attempt power cycle [ 131.050697][ T10] usb 4-1: device descriptor read/8, error -71 [ 131.307489][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 131.307499][ T30] audit: type=1400 audit(1758985999.113:303): avc: denied { create } for pid=6891 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.341818][ T6892] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.418969][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.426673][ T30] audit: type=1400 audit(1758985999.153:304): avc: denied { write } for pid=6891 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.459661][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 131.519828][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 131.543223][ T10] usb 4-1: device descriptor read/8, error -71 [ 131.550448][ T24] usb 1-1: device descriptor read/8, error -71 [ 131.603476][ T6895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=6895 comm=syz.1.246 [ 131.652912][ T10] usb usb4-port1: unable to enumerate USB device [ 131.900090][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 131.938063][ T24] usb 1-1: device descriptor read/8, error -71 [ 132.018572][ T30] audit: type=1400 audit(1758985999.823:305): avc: denied { watch } for pid=6907 comm="syz.1.252" path="/52" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.041969][ T30] audit: type=1400 audit(1758985999.823:306): avc: denied { watch_reads } for pid=6907 comm="syz.1.252" path="/52" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.132312][ T24] usb usb1-port1: unable to enumerate USB device [ 132.641871][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.646131][ T30] audit: type=1400 audit(1758986000.073:307): avc: denied { create } for pid=6907 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 132.669370][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.677626][ T1299] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 132.699859][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 133.154223][ T6863] delete_channel: no stack [ 133.319114][ T30] audit: type=1400 audit(1758986000.123:308): avc: denied { sys_admin } for pid=6907 comm="syz.1.252" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 133.360533][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 133.407027][ T10] usb 4-1: config 9 has an invalid interface number: 2 but max is 1 [ 133.429145][ T10] usb 4-1: config 9 has an invalid interface number: 88 but max is 1 [ 133.547967][ T10] usb 4-1: config 9 has an invalid descriptor of length 235, skipping remainder of the config [ 133.562752][ T10] usb 4-1: config 9 has no interface number 0 [ 133.568907][ T10] usb 4-1: config 9 has no interface number 1 [ 133.804522][ T5929] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 133.996624][ T10] usb 4-1: config 9 interface 2 altsetting 9 bulk endpoint 0x2 has invalid maxpacket 32 [ 134.007603][ T10] usb 4-1: config 9 interface 2 altsetting 9 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 134.018530][ T10] usb 4-1: config 9 interface 2 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 134.029209][ T10] usb 4-1: config 9 interface 88 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 134.065681][ T10] usb 4-1: config 9 interface 88 altsetting 9 endpoint 0xA has invalid maxpacket 3367, setting to 64 [ 134.084872][ T10] usb 4-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 134.109374][ T10] usb 4-1: config 9 interface 88 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 134.123160][ T10] usb 4-1: config 9 interface 2 has no altsetting 0 [ 134.130051][ T10] usb 4-1: config 9 interface 88 has no altsetting 0 [ 134.139709][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=4013, bcdDevice= c.4a [ 134.151060][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.159097][ T10] usb 4-1: Product: syz [ 134.166929][ T10] usb 4-1: Manufacturer: syz [ 134.172594][ T10] usb 4-1: SerialNumber: syz [ 134.185456][ T6906] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 134.644975][ T5929] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 134.653913][ T5929] usb 3-1: config 0 has no interface number 0 [ 134.661692][ T5929] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.686688][ T30] audit: type=1400 audit(1758986002.493:309): avc: denied { setopt } for pid=6905 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.720029][ T5929] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.755349][ T5929] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 134.766066][ T30] audit: type=1400 audit(1758986002.493:310): avc: denied { connect } for pid=6933 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 134.790223][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.838320][ T5929] usb 3-1: config 0 descriptor?? [ 135.050964][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 135.059961][ T30] audit: type=1400 audit(1758986002.853:311): avc: denied { create } for pid=6922 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.079728][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 135.106447][ T6925] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.125738][ T30] audit: type=1400 audit(1758986002.853:312): avc: denied { ioctl } for pid=6922 comm="syz.2.257" path="socket:[12408]" dev="sockfs" ino=12408 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.192251][ T6925] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.398808][ T5929] usbhid 3-1:0.109: can't add hid device: -71 [ 135.418514][ T5929] usbhid 3-1:0.109: probe with driver usbhid failed with error -71 [ 135.454785][ T5929] usb 3-1: USB disconnect, device number 8 [ 135.879224][ T10] usb 4-1: USB disconnect, device number 12 [ 136.157879][ T6958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.266'. [ 136.928095][ T6975] misc userio: Invalid payload size [ 137.162713][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 137.162727][ T30] audit: type=1400 audit(1758986004.973:315): avc: denied { create } for pid=6981 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.195006][ T30] audit: type=1400 audit(1758986005.003:316): avc: denied { connect } for pid=6981 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.234321][ T6982] 9pnet_fd: Insufficient options for proto=fd [ 137.242874][ T6982] overlayfs: overlapping lowerdir path [ 137.332693][ T6988] warning: `syz.1.272' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.385629][ T6991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.493996][ T6993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'. [ 138.197812][ T6996] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.275'. [ 138.439876][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 138.615399][ T7005] tmpfs: Bad value for 'mpol' [ 138.791582][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 138.804437][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 138.819815][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.859476][ T24] usb 1-1: config 0 descriptor?? [ 138.867196][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 138.930850][ T7011] afs: Unknown parameter 'flockLope\ fs' [ 139.068863][ T24] gspca_nw80x: reg_w err -71 [ 139.729820][ T24] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 140.055591][ T24] usb 1-1: USB disconnect, device number 12 [ 140.145922][ T30] audit: type=1400 audit(1758986007.953:317): avc: denied { connect } for pid=7017 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.180467][ T30] audit: type=1400 audit(1758986007.973:318): avc: denied { bind } for pid=7017 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.200990][ T30] audit: type=1400 audit(1758986007.983:319): avc: denied { write } for pid=7017 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.221766][ T30] audit: type=1400 audit(1758986007.983:320): avc: denied { read } for pid=7017 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.343149][ T7023] comedi comedi1: comedi_parport: I/O port conflict (0x4f27,3) [ 140.374293][ T30] audit: type=1800 audit(1758986008.183:321): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.285" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 144.199112][ C1] sched: DL replenish lagged too much [ 193.854955][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.866691][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.859696][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 272.866655][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7021/2:b..l P7006/1:b..l [ 272.875982][ C0] rcu: (detected by 0, t=10503 jiffies, g=13601, q=680 ncpus=2) [ 272.883691][ C0] task:syz.3.280 state:R running task stack:26264 pid:7006 tgid:7006 ppid:5857 task_flags:0x40044c flags:0x00004006 [ 272.897832][ C0] Call Trace: [ 272.901112][ C0] [ 272.904045][ C0] __schedule+0x1190/0x5de0 [ 272.908551][ C0] ? __pfx___schedule+0x10/0x10 [ 272.913394][ C0] preempt_schedule_irq+0x51/0x90 [ 272.918420][ C0] irqentry_exit+0x36/0x90 [ 272.922844][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.928822][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 272.934875][ C0] Code: e9 3d 5f 5b 00 be 03 00 00 00 5b e9 f2 64 28 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 38 55 1b 12 65 8b 05 49 55 1b 12 a9 00 01 ff 00 74 1d [ 272.954479][ C0] RSP: 0018:ffffc9001c92f1f0 EFLAGS: 00000202 [ 272.960543][ C0] RAX: 0000000000000000 RBX: 0000000001a0a6d0 RCX: ffffffff822dac3b [ 272.968502][ C0] RDX: ffff88801f7f8000 RSI: ffffffff822dac52 RDI: 0000000000000007 [ 272.976448][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 272.984425][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801cb00000 [ 272.992377][ C0] R13: ffff88823ffef400 R14: 0000000000000000 R15: ffffea00014d5240 [ 273.000359][ C0] ? lookup_page_ext+0x13b/0x1d0 [ 273.005293][ C0] ? lookup_page_ext+0x152/0x1d0 [ 273.010220][ C0] lookup_page_ext+0x152/0x1d0 [ 273.014987][ C0] page_ext_get+0x58/0x1a0 [ 273.019411][ C0] __reset_page_owner+0x2b/0x1a0 [ 273.024350][ C0] free_unref_folios+0xa61/0x16b0 [ 273.029369][ C0] ? rcu_is_watching+0x12/0xc0 [ 273.034116][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.039926][ C0] folios_put_refs+0x56f/0x740 [ 273.044683][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 273.049950][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 273.056280][ C0] shmem_undo_range+0x58f/0x1150 [ 273.061220][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 273.066590][ C0] ? find_held_lock+0x2b/0x80 [ 273.071248][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 273.076436][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 273.081201][ C0] ? stack_trace_save+0x8e/0xc0 [ 273.086049][ C0] ? percpu_counter_add_batch+0xb8/0x1f0 [ 273.091683][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 273.097394][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 273.102831][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 273.108903][ C0] ? find_held_lock+0x2b/0x80 [ 273.113575][ C0] ? evict+0x3a2/0x920 [ 273.117635][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 273.123071][ C0] evict+0x3e6/0x920 [ 273.126963][ C0] ? __pfx_evict+0x10/0x10 [ 273.131382][ C0] ? iput+0x519/0x880 [ 273.135356][ C0] iput+0x521/0x880 [ 273.139137][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 273.144833][ C0] dentry_unlink_inode+0x29c/0x480 [ 273.149945][ C0] __dentry_kill+0x1d0/0x600 [ 273.154533][ C0] dput.part.0+0x4b1/0x9b0 [ 273.158940][ C0] dput+0x1f/0x30 [ 273.162572][ C0] __fput+0x51c/0xb70 [ 273.166546][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.171731][ C0] task_work_run+0x150/0x240 [ 273.176319][ C0] ? __pfx_task_work_run+0x10/0x10 [ 273.181419][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 273.186592][ C0] do_exit+0x86f/0x2bf0 [ 273.190732][ C0] ? __pfx_do_exit+0x10/0x10 [ 273.195322][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 273.200339][ C0] ? find_held_lock+0x2b/0x80 [ 273.204990][ C0] do_group_exit+0xd3/0x2a0 [ 273.209468][ C0] get_signal+0x2673/0x26d0 [ 273.213951][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 273.219152][ C0] ? __pfx_get_signal+0x10/0x10 [ 273.224081][ C0] ? do_futex+0x122/0x350 [ 273.228387][ C0] ? __pfx_do_futex+0x10/0x10 [ 273.233047][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 273.238590][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 273.244757][ C0] exit_to_user_mode_loop+0x84/0x110 [ 273.250020][ C0] do_syscall_64+0x41c/0x4e0 [ 273.254614][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.260497][ C0] RIP: 0033:0x7f9b4db8eec9 [ 273.264895][ C0] RSP: 002b:00007ffedc5ce438 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 273.273282][ C0] RAX: 0000000000000000 RBX: 000000000002252d RCX: 00007f9b4db8eec9 [ 273.281260][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9b4dde5fac [ 273.289203][ C0] RBP: 0000000000000032 R08: 00007f9b4e9c3000 R09: 0000000ddc5ce72f [ 273.297409][ C0] R10: 00007ffedc5ce530 R11: 0000000000000246 R12: 00007f9b4dde5fac [ 273.305366][ C0] R13: 00007ffedc5ce530 R14: 000000000002255f R15: 00007ffedc5ce550 [ 273.313329][ C0] [ 273.316338][ C0] task:syz.0.285 state:R running task stack:26088 pid:7021 tgid:7020 ppid:5855 task_flags:0x400140 flags:0x00004006 [ 273.329818][ C0] Call Trace: [ 273.333089][ C0] [ 273.336015][ C0] __schedule+0x1190/0x5de0 [ 273.340533][ C0] ? __pfx___schedule+0x10/0x10 [ 273.345386][ C0] ? kfree_skb_list_reason+0x168/0x4c0 [ 273.350835][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 273.356209][ C0] preempt_schedule_common+0x44/0xc0 [ 273.361490][ C0] preempt_schedule_thunk+0x16/0x30 [ 273.366680][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 273.372636][ C0] ? __dev_queue_xmit+0xaf1/0x4490 [ 273.377736][ C0] __local_bh_enable_ip+0x107/0x120 [ 273.382925][ C0] ? __dev_queue_xmit+0xaf1/0x4490 [ 273.388007][ C0] __dev_queue_xmit+0xb06/0x4490 [ 273.392922][ C0] ? sock_alloc_send_pskb+0x757/0x990 [ 273.398293][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 273.403655][ C0] ? selinux_ip_postroute+0x670/0xde0 [ 273.409017][ C0] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 273.414715][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 273.419671][ C0] ? find_held_lock+0x2b/0x80 [ 273.424339][ C0] ip_finish_output2+0xc38/0x21a0 [ 273.429337][ C0] ? ip_skb_dst_mtu+0x4e3/0xc70 [ 273.434169][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 273.439624][ C0] ? ip_skb_dst_mtu+0x5b6/0xc70 [ 273.444497][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 273.449681][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 273.455043][ C0] __ip_finish_output.part.0+0x1b4/0x350 [ 273.460677][ C0] ip_output+0x35e/0xa10 [ 273.464911][ C0] ip_send_skb+0x437/0x590 [ 273.469310][ C0] udp_send_skb+0x71d/0x15b0 [ 273.473898][ C0] udp_sendmsg+0x1813/0x2870 [ 273.478465][ C0] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 273.483993][ C0] ? avc_has_perm_noaudit+0x130/0x3b0 [ 273.489357][ C0] ? __pfx_udp_sendmsg+0x10/0x10 [ 273.494293][ C0] ? avc_has_perm+0x144/0x1f0 [ 273.498962][ C0] ? do_wp_page+0x1aa7/0x4f00 [ 273.503641][ C0] ? __import_iovec+0x1dd/0x650 [ 273.508488][ C0] ? __might_fault+0xe3/0x190 [ 273.513155][ C0] ? __might_fault+0x13b/0x190 [ 273.517912][ C0] ? __pfx_udp_sendmsg+0x10/0x10 [ 273.522833][ C0] inet_sendmsg+0x105/0x140 [ 273.527331][ C0] ____sys_sendmsg+0x973/0xc70 [ 273.532095][ C0] ? copy_msghdr_from_user+0x10a/0x160 [ 273.537542][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.542813][ C0] ? kfree+0x24f/0x4d0 [ 273.546894][ C0] ___sys_sendmsg+0x134/0x1d0 [ 273.551569][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.556767][ C0] ? __pfx___might_resched+0x10/0x10 [ 273.562035][ C0] __sys_sendmmsg+0x200/0x420 [ 273.566714][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.571904][ C0] ? udp_connect+0x4a/0x70 [ 273.576317][ C0] ? __pfx_do_futex+0x10/0x10 [ 273.580995][ C0] ? xfd_validate_state+0x61/0x180 [ 273.586104][ C0] ? __pfx_ksys_write+0x10/0x10 [ 273.591986][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 273.596932][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.602131][ C0] do_syscall_64+0xcd/0x4e0 [ 273.606637][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.612514][ C0] RIP: 0033:0x7f0c5898eec9 [ 273.616923][ C0] RSP: 002b:00007f0c59788038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.625327][ C0] RAX: ffffffffffffffda RBX: 00007f0c58be5fa0 RCX: 00007f0c5898eec9 [ 273.633277][ C0] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 273.641244][ C0] RBP: 00007f0c58a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 273.649201][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.657147][ C0] R13: 00007f0c58be6038 R14: 00007f0c58be5fa0 R15: 00007fffcfdf8158 [ 273.665115][ C0] [ 273.668106][ C0] rcu: rcu_preempt kthread starved for 10404 jiffies! g13601 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 273.679272][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 273.689223][ C0] rcu: RCU grace-period kthread stack dump: [ 273.695092][ C0] task:rcu_preempt state:R running task stack:29128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 273.708575][ C0] Call Trace: [ 273.711842][ C0] [ 273.714772][ C0] __schedule+0x1190/0x5de0 [ 273.719281][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 273.724222][ C0] ? __pfx___schedule+0x10/0x10 [ 273.729058][ C0] ? find_held_lock+0x2b/0x80 [ 273.733714][ C0] ? schedule+0x2d7/0x3a0 [ 273.738043][ C0] schedule+0xe7/0x3a0 [ 273.742105][ C0] schedule_timeout+0x123/0x290 [ 273.746943][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 273.752294][ C0] ? __pfx_process_timeout+0x10/0x10 [ 273.757583][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 273.763382][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 273.768834][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 273.773578][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 273.778854][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.784059][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 273.788965][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 273.793794][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.799597][ C0] rcu_gp_kthread+0x270/0x380 [ 273.804262][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 273.809428][ C0] ? rcu_is_watching+0x12/0xc0 [ 273.814171][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.819370][ C0] ? __kthread_parkme+0x19e/0x250 [ 273.824391][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 273.829558][ C0] kthread+0x3c2/0x780 [ 273.833602][ C0] ? __pfx_kthread+0x10/0x10 [ 273.838186][ C0] ? rcu_is_watching+0x12/0xc0 [ 273.842943][ C0] ? __pfx_kthread+0x10/0x10 [ 273.847520][ C0] ret_from_fork+0x56a/0x730 [ 273.852091][ C0] ? __pfx_kthread+0x10/0x10 [ 273.856675][ C0] ret_from_fork_asm+0x1a/0x30 [ 273.861447][ C0] [ 273.864449][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 273.870746][ C0] Sending NMI from CPU 0 to CPUs 1: [ 273.875941][ C1] NMI backtrace for cpu 1 [ 273.875952][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 273.875968][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.875976][ C1] RIP: 0010:lock_release+0xc1/0x2f0 [ 273.875998][ C1] Code: e8 84 33 fd 09 65 ff 05 55 61 3f 12 8b 0d db d7 13 0f c7 44 24 08 01 00 00 00 c7 44 24 0c 00 00 00 00 85 c9 0f 84 86 00 00 00 <45> 8b be e8 0a 00 00 45 85 ff 0f 84 63 01 00 00 48 8d 4c 24 0c 44 [ 273.876010][ C1] RSP: 0018:ffffc90000a08060 EFLAGS: 00000002 [ 273.876021][ C1] RAX: 0000000000000001 RBX: ffffffff8e5c16a0 RCX: 0000000000000001 [ 273.876030][ C1] RDX: 0000000000000000 RSI: ffffffff8df4673d RDI: ffffffff8c163380 [ 273.876038][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 273.876046][ C1] R10: 0000000000000002 R11: 0000000000087184 R12: ffffffff816af8a4 [ 273.876054][ C1] R13: 0000000000000202 R14: ffff88801e69a440 R15: ffffc90000a0814c [ 273.876063][ C1] FS: 0000000000000000(0000) GS:ffff8881247b1000(0000) knlGS:0000000000000000 [ 273.876076][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.876085][ C1] CR2: 00005555bf190be0 CR3: 0000000035774000 CR4: 00000000003526f0 [ 273.876093][ C1] Call Trace: [ 273.876097][ C1] [ 273.876104][ C1] unwind_next_frame+0x3f9/0x20a0 [ 273.876119][ C1] ? __napi_poll.constprop.0+0xba/0x550 [ 273.876134][ C1] ? lock_acquire+0x179/0x350 [ 273.876145][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.876163][ C1] arch_stack_walk+0x94/0x100 [ 273.876185][ C1] ? net_rx_action+0xa9f/0xfe0 [ 273.876200][ C1] stack_trace_save+0x8e/0xc0 [ 273.876222][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 273.876239][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 273.876264][ C1] kasan_save_stack+0x33/0x60 [ 273.876277][ C1] ? kasan_save_stack+0x33/0x60 [ 273.876289][ C1] ? kasan_save_track+0x14/0x30 [ 273.876300][ C1] ? kasan_save_free_info+0x3b/0x60 [ 273.876317][ C1] ? __kasan_slab_free+0x60/0x70 [ 273.876329][ C1] ? kmem_cache_free+0x2d1/0x4d0 [ 273.876341][ C1] ? skb_free_head+0x1b7/0x210 [ 273.876353][ C1] ? skb_release_data+0x795/0x9e0 [ 273.876367][ C1] ? consume_skb+0xbf/0x100 [ 273.876383][ C1] ? nft_synproxy_do_eval+0xa6b/0xd80 [ 273.876405][ C1] ? nft_do_chain+0x2e9/0x1920 [ 273.876423][ C1] ? nft_do_chain_inet+0x18a/0x340 [ 273.876440][ C1] ? nf_hook_slow+0xbb/0x200 [ 273.876454][ C1] ? nf_hook.constprop.0+0x422/0x750 [ 273.876468][ C1] ? ip_local_deliver+0x169/0x1f0 [ 273.876481][ C1] ? ip_rcv+0x2e0/0x600 [ 273.876493][ C1] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 273.876507][ C1] ? __netif_receive_skb+0x1d/0x160 [ 273.876519][ C1] ? process_backlog+0x442/0x15e0 [ 273.876531][ C1] ? __napi_poll.constprop.0+0xba/0x550 [ 273.876558][ C1] kasan_save_track+0x14/0x30 [ 273.876576][ C1] kasan_save_free_info+0x3b/0x60 [ 273.876592][ C1] __kasan_slab_free+0x60/0x70 [ 273.876605][ C1] kmem_cache_free+0x2d1/0x4d0 [ 273.876617][ C1] ? synproxy_send_tcp.isra.0+0x439/0x630 [ 273.876633][ C1] ? skb_free_head+0x1b7/0x210 [ 273.876647][ C1] skb_free_head+0x1b7/0x210 [ 273.876660][ C1] skb_release_data+0x795/0x9e0 [ 273.876676][ C1] ? dst_release+0x8d/0x340 [ 273.876691][ C1] consume_skb+0xbf/0x100 [ 273.876707][ C1] nft_synproxy_do_eval+0xa6b/0xd80 [ 273.876726][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 273.876748][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 273.876771][ C1] nft_do_chain+0x2e9/0x1920 [ 273.876790][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 273.876810][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 273.876831][ C1] ? nf_conntrack_in+0x8b0/0x1930 [ 273.876852][ C1] nft_do_chain_inet+0x18a/0x340 [ 273.876868][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 273.876886][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 273.876905][ C1] ? lock_acquire+0x179/0x350 [ 273.876918][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 273.876934][ C1] nf_hook_slow+0xbb/0x200 [ 273.876949][ C1] nf_hook.constprop.0+0x422/0x750 [ 273.876962][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 273.876978][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 273.876991][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 273.877006][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 273.877024][ C1] ip_local_deliver+0x169/0x1f0 [ 273.877038][ C1] ip_rcv+0x2e0/0x600 [ 273.877052][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 273.877064][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 273.877078][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 273.877092][ C1] ? lock_acquire+0x179/0x350 [ 273.877106][ C1] ? process_backlog+0x3f0/0x15e0 [ 273.877119][ C1] __netif_receive_skb+0x1d/0x160 [ 273.877132][ C1] process_backlog+0x442/0x15e0 [ 273.877148][ C1] __napi_poll.constprop.0+0xba/0x550 [ 273.877161][ C1] ? rcu_is_watching+0x12/0xc0 [ 273.877177][ C1] net_rx_action+0xa9f/0xfe0 [ 273.877193][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 273.877207][ C1] ? rcu_is_watching+0x12/0xc0 [ 273.877222][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.877238][ C1] ? tmigr_handle_remote+0x132/0x380 [ 273.877256][ C1] ? run_timer_base+0x121/0x190 [ 273.877270][ C1] handle_softirqs+0x219/0x8e0 [ 273.877287][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 273.877304][ C1] __irq_exit_rcu+0x109/0x170 [ 273.877318][ C1] irq_exit_rcu+0x9/0x30 [ 273.877333][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 273.877348][ C1] [ 273.877352][ C1] [ 273.877356][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.877370][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 273.877385][ C1] Code: 3d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 16 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 273.877397][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 273.877407][ C1] RAX: 0000000001258259 RBX: 0000000000000001 RCX: ffffffff8b94fb49 [ 273.877415][ C1] RDX: 0000000000000000 RSI: ffffffff8de52fc1 RDI: ffffffff8c163380 [ 273.877423][ C1] RBP: ffffed1003cd3488 R08: 0000000000000001 R09: ffffed10170a6655 [ 273.877431][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 273.877439][ C1] R13: ffff88801e69a440 R14: ffffffff90ab7690 R15: 0000000000000000 [ 273.877450][ C1] ? ct_kernel_exit+0x139/0x190 [ 273.877468][ C1] default_idle+0x13/0x20 [ 273.877484][ C1] default_idle_call+0x6d/0xb0 [ 273.877501][ C1] do_idle+0x391/0x510 [ 273.877517][ C1] ? __pfx_do_idle+0x10/0x10 [ 273.877533][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 273.877548][ C1] cpu_startup_entry+0x4f/0x60 [ 273.877568][ C1] start_secondary+0x21d/0x2b0 [ 273.877586][ C1] ? __pfx_start_secondary+0x10/0x10 [ 273.877606][ C1] common_startup_64+0x13e/0x148 [ 273.877624][ C1]