last executing test programs: 13m43.463668989s ago: executing program 0 (id=1883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280"], 0x38}}, 0x0) 13m43.304052476s ago: executing program 0 (id=1887): r0 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)=""/179, 0xb3}], 0x2) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 13m43.238045199s ago: executing program 0 (id=1891): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x44, 0x2d, 0x1, 0x70bd21, 0x25dfdbfe, {0xf}, [@nested={0x30, 0x12b, 0x0, 0x1, [@nested={0x18, 0x89, 0x0, 0x1, [@nested={0x4, 0x10c}, @nested={0x10, 0x106, 0x0, 0x1, [@typed={0xc, 0x101, 0x0, 0x0, @u64=0xffff}]}]}, @nested={0x12, 0x5, 0x0, 0x1, [@generic="5ddcc8", @generic="ae60564ac00c7754563ca3"]}]}]}, 0x44}}, 0x8000) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 13m43.163899473s ago: executing program 0 (id=1894): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x55) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c2) 13m43.056417405s ago: executing program 0 (id=1896): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m42.828830328s ago: executing program 0 (id=1905): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) sendmmsg$sock(r0, &(0x7f0000001ec0), 0x0, 0x200088d0) 13m42.613251562s ago: executing program 32 (id=1905): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) sendmmsg$sock(r0, &(0x7f0000001ec0), 0x0, 0x200088d0) 13m25.174061176s ago: executing program 4 (id=2257): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x28, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x28}}, 0x0) 13m24.968700588s ago: executing program 4 (id=2259): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000004"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) 13m24.819788765s ago: executing program 4 (id=2260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000140)="aa", &(0x7f0000000000)=@tcp6=r1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r3, 0x1}, 0x20) 13m24.636406502s ago: executing program 4 (id=2261): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 13m24.474950639s ago: executing program 4 (id=2262): socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 13m23.989572369s ago: executing program 4 (id=2265): capset(&(0x7f0000000040)={0x20080522}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 13m23.585674051s ago: executing program 33 (id=2265): capset(&(0x7f0000000040)={0x20080522}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 9.366460306s ago: executing program 2 (id=9325): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0) sendfile(r0, r0, 0x0, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000400)={0x0, 0x0, {0x8154, 0x5d5, 0x3009, 0x9, 0x3, 0x2, 0x2}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) tkill(r7, 0x18) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, 0x0) rt_sigprocmask(0x2a122f45fbf17d61, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/243, 0xf3}], 0x1}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TDX_GET_CPUID(r10, 0xc008aeba, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c000000000001907800000100ac1414aae0009078000000007c5bf1d6f5bf6dc2a793f685e4bb583db18a0b0fcb3ad369d0af3653b00c4ee9b971d498c04d58fcf78720399b039dbbad92ba56f1019efcb89cc35b1eea32aa67e4751bea336f110734c713794853a0a45f2c628ce09a7e2c724e10e3ddb65721a576487e291575949b98680990210ae5a443293d715bef069b58b363bfb9a8db51aac0bb1a3244d5ca219ec83b2393ed38c694b0b54613b40715890000000000"], 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x27, 0x63, 0x40, 0x8, @mcast2, @loopback, 0x8000, 0x8000, 0xfff, 0x20000000}}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @empty, r11}, 0xc) 9.238441569s ago: executing program 2 (id=9329): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46c, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "57f3bc", 0x436, 0x2f, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x3b, 0x3, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x2, 0x3ba4, [0x4, 0x3]}}, @ra={0x5, 0x2, 0x717d}]}, @dstopts={0x62, 0x35, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x8}, @generic={0x7, 0xbf, "9511e7f11c76780213264c911fb57ca7630ba60e19a1a8d1ccb1c58b906064eaef4a760c299964834840b3a42fd1da0eacc24170de2dcc1fa1e625176ff3b7f0de733581e8425f38fac4f671d8dc47f436b2686da5e6c05adf98b844e5362f4088c8b4bf216946f1ef3f1f227d7bda06f943f8a8662a00dbfc561ecc61af8548371b32d1368d8a3bbfb363a3033d096caedd6e851bc5ded9ecc0fa332895a7b457cb3b2bd1287871518dca493a930d4988b60d0b903314139897d3854a9723"}, @generic={0x9, 0xad, "e0970cf4f4ef3e3eaadd52fb450386bf97ed85f39a556d4d3bc7ac1e226bc7fb7c29a6fd9fe897083f0d95c0fa7e2c5ef2f133312ef8231e1abd7d7a9f516b721ba0276ffd3adf57d09a4a8a71499cd6df8cbbb11df04bd67d66dbe38be17b5d8b28c98c20631ae3ae5be5d4ffea49a9159bcaf8852ad711bd7e59a39f3c563d574cc0fad89a8c367511abf880b8d06418d55b54145444e7119eb407c0baf6005d8a8ce0a388eb7acf334b1bf6"}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x8, [0x6623, 0xfffffffffffffffe, 0x8, 0xffffffffffffff28]}}]}, @srh={0x2f, 0x14, 0x4, 0xa, 0xff, 0x8, 0x29cf, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private0, @dev={0xfe, 0x80, '\x00', 0x32}]}, @srh={0x3a, 0x4, 0x4, 0x2, 0x4, 0x30, 0x7, [@loopback, @ipv4={'\x00', '\xff\xff', @local}]}, @routing={0x2, 0x12, 0x0, 0x8, 0x0, [@local, @loopback, @empty, @private2, @empty, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @empty]}, @dstopts={0x8}, @srh={0x1d, 0xc, 0x4, 0x6, 0x2, 0x40, 0x4, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x44}, @remote, @ipv4={'\x00', '\xff\xff', @local}]}, @hopopts={0x5e, 0x3, '\x00', [@ra={0x5, 0x2, 0x17d6}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x9e}]}], "833a2c0957131d814dbb87df2da9ee4241ad8198cb8ea4fbc06f444542b0698ceff97970307635d977554d7189e1a9a31b8f40e8ef957d6b400d82718a779d0b101411ae2e95b162cc7b4030fc91685326a810aeeb00d7775d8cffb9bd14"}}}}}, 0x0) 9.181609102s ago: executing program 2 (id=9330): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x3, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x4, 0x3c, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x1, 0x75}}}}}]}}]}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x104}, {0x60, 0x8}, {0x0, 0x0, 0xfe, 0x3ff}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x1}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) lsm_set_self_attr(0x66, &(0x7f0000000080)={0x65, 0x100000001, 0x20}, 0x20, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x9, 0x12000) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000280)=0xfff, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) close(r7) socket$xdp(0x2c, 0x3, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0xa0028010}) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000680)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}]}}) 7.835823951s ago: executing program 2 (id=9337): move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000), 0x0) (async) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$setregs(0x1a, r0, 0xd, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}]}, 0x2c}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e22"], 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000200000928000480240001800b000100657874686472000014000280080006400000000105000200000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/124], 0x7c}}, 0xc084) read$FUSE(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x0) 7.535461136s ago: executing program 6 (id=9340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x23, 0x7, 0x1000002, 0x10000004, 0x1, 0xa14f, 0x30000002, 0x5, 0xc72d, 0x0, 0x7, 0x3, 0x400004, 0x10001, 0x9ef5, 0x5, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0x5, 0x0, 0x383, 0x8001, 0x4, 0x263]}) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a718", 0x12}, {&(0x7f0000000300)="ac3d9002", 0x4}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d155", 0x92}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805", 0x5d}, {0x0}], 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6(0xa, 0x1, 0x0) 5.5691563s ago: executing program 5 (id=9345): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r2, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000480)={r3, 0x5a, 0x9, 0x8, 0x5, 0x8, 0x438d, 0x1, {r1, @in6={{0xa, 0x4e22, 0x401, @remote, 0xfffffff9}}, 0x8, 0x0, 0x0, 0xffffffff, 0xd}}, &(0x7f0000000540)=0xb0) 5.533312677s ago: executing program 6 (id=9346): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r0) exit(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 5.466022794s ago: executing program 3 (id=9347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x2000, {[0x7]}}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000081000000030000000500000016"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000019700)={0x2, 0x240, 0x380, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r6, 0x40109441, &(0x7f0000000440)={0x1, 0x4, 0x8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.296971012s ago: executing program 3 (id=9349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x3e, &(0x7f0000000480)={&(0x7f0000000300)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0xffffffffffffffe4, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0xffffffffffffff71, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x90) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x4c, 0x0, &(0x7f00000000c0), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x5, 0x27, 0x2006, 0xf1, 0x20008, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x4, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x9f, 0x6, 0x4, 0xee, 0x4, 0x8000]}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socket$inet(0x2, 0x3, 0x6) r9 = socket$inet(0x2, 0xa, 0x6) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) 4.232129208s ago: executing program 6 (id=9352): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x36}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0xfff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r5, @ANYBLOB="44401f7ef89f77512359ca852b558a2f35bc1af1e8005aa28399d40900"/43], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000838ed1b905f2", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r5, @ANYBLOB="9201000000000000"], 0x20}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = syz_io_uring_setup(0xeff, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffb, 0xc6}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) fchdir(r1) write$cgroup_int(r0, &(0x7f0000000040)=0x1c9, 0x12) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2d) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="83564f40e5a950f9711f7365b37959a3b1ef5e12027247aa02b1bfc939b7ad6dc9471649be19ea4422bd1d3278cf591f97e3aa74c2fff0f0e5c96510e4c5feddab7688031d428b2ecfb5efecb6ff717747febeeafb8214f5fcee9e73f8d15eb2", 0x60) recvfrom$unix(r0, &(0x7f0000001540)=""/4101, 0x1005, 0x40000000, &(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e) 4.21617918s ago: executing program 5 (id=9353): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000000, 0x80010, r1, 0x764f9000) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 4.169218002s ago: executing program 3 (id=9354): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x6, 0x1, 0x0, 0xf, 0x0, 0x1efc, [{0x9, 0x4, 0x6}]}]}, {0x0, [0x2e, 0x5f, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x38, 0x0, 0x0, 0x2}, 0x28) r1 = fsmount(r0, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000300)={0xf0f004, 0x1}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000040)='qnx6\x00', 0x1) 4.135099996s ago: executing program 2 (id=9355): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x2a614b000, &(0x7f00000008c0), 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121843, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x15) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aa", 0x21}], 0x1}], 0x1, 0x40800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000400000010100000890004dc30e38a9f613e18e2f665b2fd57c1003654da2977929fb5b6c7741dcb331683a0939b07001e5c950f31eb1bacf12e69c561952e77deef318096db5edd1b95a1da"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a05030000000000000000020000000c00034000000000000800020900020073797a32000000000900010073797a30"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0x5, 0x1, 0xa, 0xa}, {0x0, 0x2, 0xb, 0x3}], 0x10, 0x7ff}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = syz_open_dev$sg(&(0x7f0000000840), 0x7fffffff, 0x80) ioctl$SG_GET_LOW_DMA(r10, 0x227a, &(0x7f0000000500)) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x3, &(0x7f0000000040)=""/169, &(0x7f0000000180)=0xa9) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000200)={0x0, 0x9, 0xf9, {0xf9, 0x32, "ea44be87e00ec43f27f881aaa52e042ddcc9fbc0a167dd7c312a90eb1e7bd620bc401168b571e46549c8b2676ffd1d913646084525e36ae18534654040605e76659ab5c54ae7f21cab9e9bad3d1038d6e1b3752148a3dd327febcde60a8c0b085f274ab06706f8d86295179d8ea274d90dcc1146e15e93566301107e7191b08d3d8622d65cb19e9fc582688733b1437205d3fcac0e4ac12bd3737566abc6731873f37cf2ee3f4a513fa267e5371d894ebf3ee6869b3093268853cd98667157bb48ba1499bdf37d58fc9b55904fe8bda7025b150176c2902faf341f8fef4f7305c21c3d44a5a4ba8843d285768cd0595fe40630a3061ba0"}}, &(0x7f00000003c0)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "a8ff10d3e2c3879474e0bd3248a118bee0d8f3530877b7f1e6b0659dc0b45232d7f15c4bc6139f3376b79c841483ab1b4b636b5a422630a7c45f7d6a91bdde7f39eecab81a5d2f83532cd537367a35594b3992f06c9037434beb3111d492a75d9fde3de51fba465c5241d878ea339e74876c25e8cc58b3968d8e8ad6b4ae30a1b25fc7aa90734de01998f13497bee21b9df8f30ac9f144cd8ae3619e88a282b37c144a31bb0510bb238884fbe577fd67f2c0cdf414c22ce178f705ce8138e89cde034c714df25393adf3fe54e048d270db590437b933"}}}, &(0x7f0000000800)={0x34, &(0x7f00000005c0)={0x20, 0xd, 0x64, "43925cedd8533ec430b1b7d02191b0d190e8791e37368acf9cf73baf7a9c4e25725680fb64b18eefa7e26a1c4b4ab6ef2f2e16ca61bae315429a42a6ef6143782f94af2c58b3669447f94f061e314e06f146f965f87681535759c65df25d5a90e1c855ab"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000006c0)=ANY=[@ANYBLOB="20009400000000928f2be1f3cd1c47758d3061c586da7d352a1818510f2b590ae03d4d8ca40b1aae1b7be7c32fbd0aa27b1fbc675e8ce229ddc1680872f4d39e6615a09ecff0fef098b9efd273c4a57eb68fb57d000c3c2450acc4b4ea2ce43126585f00bb03e7b35e07f4fec93d1b5f7294e770cf676498d5773e56dd593d5f3834f2404a6155f0c643028be641be00"/154], &(0x7f0000000780)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0x8}}) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000a0090ee0000080009000000000008000a00afc3000008000a000000000008000a000000000008000900"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) 3.897905714s ago: executing program 3 (id=9356): r0 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x7, 0xf, 0x1, @loopback, @loopback, 0x7f70, 0x8000, 0x465c, 0x5}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000340), 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x69, 0x24, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="03000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$sysctl(r3, &(0x7f0000000080)='4\x00', 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000000000202020730af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6, r5}, 0xc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0) lseek(r7, 0x164, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000613757329600c8f2c2fd96fff1", @ANYRES32, @ANYBLOB="c74e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000100"/28], 0x50) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x2}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x28, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0x9, 0x4, 0x100, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xad}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x7fffffff, 0x31, &(0x7f0000000400)=""/49, 0x41100, 0x4, '\x00', r10, 0x1a, r11, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xb, 0x0, 0x8}, 0x10, 0x27e92, r4, 0x1, &(0x7f0000000780)=[0xffffffffffffffff, r12, r13, r14, 0xffffffffffffffff, r15], &(0x7f00000007c0)=[{0x0, 0x5, 0x2, 0x4}]}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r16, 0x0, 0x0}, 0x10) listen(r11, 0x80000001) 3.828235964s ago: executing program 5 (id=9357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="660f55a40000653e3e660fc2f10066f30f537e0e66b9fe02000066b80aade43266ba000000000f3066b9800000c00f326635008000000f30b85a000f00d0baf80c66b860ac9b8566efbafc0cedf20f12e0f3d07436b805000f00d0", 0x5b}], 0x1, 0x0, &(0x7f0000000240)=[@cr0={0x0, 0x8}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/'], 0x20) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) r4 = syz_open_procfs(r3, &(0x7f0000000000)='fdinfo/3\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) ptrace$getregs(0xe, r3, 0x6, &(0x7f00000004c0)=""/95) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f0000000140)={0xffffffd1, 0x2001002, 0x7ff800, 0xbe, 0x3, "040000ffff000800", 0x8, 0x1}) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000080)=0x42) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0xff) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r7}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000000000007110180000cefd01d4ac000000070000"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 3.826526431s ago: executing program 3 (id=9358): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(r0, 0x1, 0x4, &(0x7f0000000440)="d4aefde56a9e31d9289753bb70f128219a4acf18d08c9431373ac9da1a0d293b788be707c231902cb79ec7477e761a9343ca46e141ae66b37ba2fda4dbe25945f849aff6a20190f5b1798a2afbe872b1c1ae2849d6cae2e3cb032ef849ecd6cbe40cf5e13405234d872ee3f6bbbd227155428178211849e384faa7a79eec6e9d71370ac3b127ad90dd519a73a870b56eb919d384896c0c252b4a44d0b3b1aaae195ae1bbc21fd9c9dc12953bba1f6533f5a1af022ceef8b0e7050e9a8409a2cce8e1131a844490", 0xc7) r1 = getpid() r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) 3.678303488s ago: executing program 6 (id=9359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7fffffffffffffff, 0x8, 0x10000, 0x7, 0x4, 0xa, 0x11, 0x4, 0x8000000000000000, 0x1, 0x0, 0x3, 0x5, 0x3, 0xffffffffffffffff], 0x0, 0x110940}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.598440506s ago: executing program 5 (id=9361): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x88, @broadcast, 0x4e20, 0x0, 'ovf\x00', 0x8, 0x85, 0x57}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) fanotify_init(0x8, 0x2) r2 = openat$cgroup_devices(r1, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)={'c', ' *:* ', 'w\x00'}, 0x8) 2.596385992s ago: executing program 5 (id=9363): socket$inet6(0xa, 0x6, 0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xd314, 0x80, 0x2, 0x3d1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x4b2082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x8000, 0x200000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000001c0)={0x23800000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f000071c000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f926d6f64653d30303030303030303030303030303030301d5108662ab6933130303030302c757365725f69603d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xc200040, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xb, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000004200)=[{&(0x7f0000000e80)='/', 0x1}], 0x1) syz_fuse_handle_req(r2, &(0x7f0000005040)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x18, 0x0, 0x401, {0x7e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000040, 0x0, 0xff, 0x1, 0x480}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) 2.592858138s ago: executing program 6 (id=9364): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x4c42bb4f92, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x7f) 1.273352662s ago: executing program 3 (id=9366): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{r1, r2+10000000}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) syz_usb_connect(0x5, 0x36, 0x0, 0x0) 1.147119259s ago: executing program 1 (id=9367): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "1bbf0356652bf9088f2db95c68ab38428583c6cc0b9ca22a747f94412366801d", "c7d740047349abf5ce288f86bb3fb99ad89d267bb97ce5137b0ed9658648df1e", "712eb11aa45beb926bb1c34113a166b2f9d9e260436438a1e7093dc93ba8287d", "652f1649db1eb4465935efe83852e4eb32e71e4e4ef2d985529e1090013868db", "158eba675b712f07c11ecf7f44f1fe59b51aedac0861a29c9019ea624e68d447", "d48cf4e50f8ff9de3234b18a", 0x3, 0x4, 0x16, 0x80000001, 0x8}}) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/74, 0x4a) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x4, 0x15e}) 887.946884ms ago: executing program 1 (id=9368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r3, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x0, r3}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 852.23197ms ago: executing program 1 (id=9369): r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/165, 0x8000000000000001}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x40043d14, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000080)=""/6) r4 = syz_ublk_setup_io_uring(0x3abb, &(0x7f0000000080)={0x0, 0x8000382b, 0x1, 0xfffffffd, 0x8000099}, &(0x7f0000000100), &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000440)={0x4, 0x0, 0x1, '\x00', 0x3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x8, @private1, 0xfffffffa}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x7}], 0x49) 685.666189ms ago: executing program 1 (id=9371): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0xff}, &(0x7f00000002c0)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 579.232709ms ago: executing program 6 (id=9372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) 387.770927ms ago: executing program 1 (id=9373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) 387.02826ms ago: executing program 5 (id=9374): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003400)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="79227f650094e069920024b9d0f87129d56a638509677c0beb5a41cfedef15da8b1aa86848e6e1bc4618b5", 0x2b}, {&(0x7f0000001500)="a81687de3bc5b54d03f0b8d54e629346549008fa9dd2b3a7c3afa8e712cd794191daa8b11d4f845621525943a12bd18d883952e4661714eb3c8a1035c57735f74ca2ad0027b02e3efed1b1544f66c7d75729c708f50269d7673ff75df709b6649820a95e7ca9543678b8120cd9083cf4d48c3cd5485b99bfa692702472221f4e5941de92a04c6fab058bd289aff8e525ef484c8ccbbeef0248a9d3044e742cfb73d7b473cae09e85950052", 0xab}], 0x3, &(0x7f0000001800)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, r6, 0xffffffffffffffff, r3, r1, r2, r5, r3, r3]}}], 0x68, 0x4004805}}, {{&(0x7f00000018c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000001940)="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", 0xfd}, {&(0x7f0000001a40)="a2cfc7f554c7cd0856c309c14ecf43a1064553e1e65e916703b8dcd6dd09aef58d7d509a29cb74bb248c4ad57606acbdb136bb80c83e3520da7041d8c6f53e6eeb76f16bc50852835324859cb33065ffd68fac8e3349ad054852f1d9f75450434ae9c2b29943880ad14829bcf15bb26bc961c0a6a410a2d2562ea46a9248b0ac75ba3b", 0x83}, {&(0x7f0000001b00)="fd37db21b21405c948296d2c30dbd5446e9b349a40367a8fa6ffabf38bd16ed7457c38ac189c01dba0ee1adfe7e3da5fd395c9341b5d36e32c2de8af147e10873f5e47dd6db3a3f1066f1937d2e543a81885fe7d8f28bda336d93996b5e2943e2dc0a4cc9997d5030950f7ebd279a35a6c704e38008ce57da989fc2855e3ba15c894ee8bc6381bcbf1c22fcaf9f8e6382505cf04cb1b6443f0dd41f335ffbe008530e67f891e67ba891e12a50de85acc", 0xb0}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000002bc0)="94fae34845c6a7a72e5c6b69d50d878a8af87b61992e64b2367bf7079985b3e0193571411bc0d668eb6e5f3a1ab648f023f50914bec70728e45805b0454115fcf77500329465a3f64759cd140a04d2f1f8cd6f3a4d9a03ee9c5a9b01a10535ff800d5d9f27eadbc685e82f1d803edb0d30bd399e9afb68ef7c2206783d11092616248913b1825ccf7b1f0729323b1bc6524c91f5c8102b048db45624960141754eae5e42e614e19e305dc80ffaa7e229e800cbaf3b0740e5f06d96b4e70be38a99cf38ce3454a82e4168136efadccff43c8d43df7d15e7e7607fb21028a5d1457393cc2d949f1fb410ed53e552230d5b821fee92d5", 0xf5}, {&(0x7f0000002cc0)="6fe692288d36e714aac27fa8fb73410318d1aecc05be91738e377b4cb8e0cdccceab30ab2c8d1558ad571fed96a81b5958e424a2590c15112233a383babdeda2af976b38173cb58419", 0x49}], 0x6, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c}}], 0x40, 0x4}}, {{&(0x7f0000002e00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002e80)="65db4ea27e399e87ce0490c5fe91b115792def3490809826be1033a32ae26f0876c76f64a4304d29482955ab29866a8cbd71e4d792f31209f712935fcec2f047dd382d06821fae36cc608dcc48ebdb15d8b14a1bb9bc6e0747d3e81d002ec622ec528722b3bd47ac89b9b323ee653221b094a395601b1bb2b18caf5d48c445c512c651a04ddc16cc0f23cc3077652b632558c85dcc17ae75e3e097877ad83c115cb1212ff21ea59730d033d793b24bac18e628c578489afd3801b1940bd386eb901f9fb60b6b96352b96303e103cdfaeca89bf7f1b8e900918fcebf0c1", 0xdd}], 0x1, 0x0, 0x0, 0x20000800}}, {{&(0x7f0000002fc0)=@abs={0x1}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000003040)="ea7b7784f20e33f68e54a684ab08d3598c4a51a020a82ddef783559ed34dc740a7266f24c16dd59196b140b2693b3200db7b2edc33e948446228e6551a645fda5bfe5884316dc3961784e2510d71b7854b98c5f1afc12db51c3dd17470f170b94d0168aab80016e74d92b1284c320d84450bfb677ccdda25b549eb782be42621efde827631aae8f63c7e817e207db6525172f6e9e655be25af228b9bf01ad8465f1d72dd4afc6d90a08735b4104f2a1a8294526dde95b69669503542228fbe437167b2bc515604d7", 0xc8}], 0x1, 0x0, 0x0, 0x20004004}}, {{&(0x7f0000003180)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000003200)="56772b06270b587634a71fae7f0947198fdce74ac696845c225e8baaaf00667137088e16ad8f5a1fb8d87d5b5c4b5d569e04cf1da3aac85aefaea818cd9a8b428c4d6e229d929bf9ed3ab9b1718bc1c62a74e7b80b3e8e283482e4a47e781eaa79bfb35b4b18016b4b1d637f78825a5be566737c6030f48cab560c1a9d55b6ad52dfca956ac1a9017209e00b119c4de3e286f0c45a208cf1635aae8d355113a55344b173bacf50bdd7382be6f015d5006cd83d1ab6af85a3", 0xb8}], 0x1, &(0x7f0000003300)=ANY=[@ANYBLOB="000000ef00000000000092a723002ae9", @ANYRES32, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x20000000}}], 0x5, 0x8000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x54, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x40, 0x1, [@m_ct={0x3c, 0x1, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004041}, 0x80) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x10) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r7, 0x0, 0xbfd1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x3a, 0x1, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xf) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 372.184929ms ago: executing program 2 (id=9375): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2a80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514e5b80000000020000000080001000000000008000300"], 0x20}, 0x1, 0x0, 0x0, 0xd0ff3f28}, 0x40) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001080)={0xf, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYRESHEX, @ANYRES8=r0, @ANYRES8=r0, @ANYRES8=r5, @ANYRES32=r5], 0x110) 0s ago: executing program 1 (id=9376): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="50a9fa815568fb3d0bff764e2a1a985c4654a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): 339246][T31111] netlink: 'syz.2.8979': attribute type 4 has an invalid length. [ 912.356254][ T30] audit: type=1400 audit(1783087788.730:18085): avc: denied { mounton } for pid=31115 comm="syz.6.8981" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 912.532617][ T11] usb 4-1: no configurations [ 912.541904][ T11] usb 4-1: can't read configurations, error -22 [ 912.557935][ T11] usb usb4-port1: attempt power cycle [ 912.883420][ T30] audit: type=1400 audit(1783087789.219:18086): avc: denied { append } for pid=31148 comm="syz.6.8991" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 912.932799][ T11] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 912.977370][ T11] usb 4-1: no configurations [ 912.984720][ T11] usb 4-1: can't read configurations, error -22 [ 913.140529][ T11] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 913.171653][ T11] usb 4-1: no configurations [ 913.177780][ T11] usb 4-1: can't read configurations, error -22 [ 913.198364][ T11] usb usb4-port1: unable to enumerate USB device [ 913.959289][ T30] audit: type=1400 audit(1783087790.207:18087): avc: denied { setopt } for pid=31189 comm="syz.1.9003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 914.015719][ T30] audit: type=1400 audit(1783087790.271:18088): avc: denied { write } for pid=31184 comm="syz.2.9001" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 914.053037][ T30] audit: type=1400 audit(1783087790.290:18089): avc: denied { open } for pid=31184 comm="syz.2.9001" path="/508/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 914.060654][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 914.086884][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 914.171738][T31201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9006'. [ 914.217775][T31203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1304 sclass=netlink_route_socket pid=31203 comm=syz.6.9008 [ 915.128177][T31220] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9014'. [ 915.219588][T31225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9017'. [ 915.235202][T31225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9017'. [ 915.259892][T31225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9017'. [ 915.431871][T31230] netlink: 277 bytes leftover after parsing attributes in process `syz.6.9015'. [ 915.986190][T31237] validate_nla: 25 callbacks suppressed [ 915.986208][T31237] netlink: 'syz.5.9018': attribute type 4 has an invalid length. [ 916.137929][T31242] FAULT_INJECTION: forcing a failure. [ 916.137929][T31242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.153852][T31242] CPU: 0 UID: 0 PID: 31242 Comm: syz.2.9021 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.153880][T31242] Tainted: [L]=SOFTLOCKUP [ 916.153886][T31242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 916.153897][T31242] Call Trace: [ 916.153902][T31242] [ 916.153909][T31242] dump_stack_lvl+0x100/0x190 [ 916.153933][T31242] should_fail_ex.cold+0x5/0xa [ 916.153954][T31242] _copy_from_user+0x2e/0xd0 [ 916.153975][T31242] sctp_getsockopt+0x1ad8/0x7110 [ 916.153997][T31242] ? find_held_lock+0x2b/0x80 [ 916.154019][T31242] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 916.154044][T31242] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 916.154071][T31242] ? __pfx_sctp_getsockopt+0x10/0x10 [ 916.154092][T31242] ? avc_has_perm_noaudit+0x145/0x3b0 [ 916.154120][T31242] ? __lock_acquire+0x49f/0x1a40 [ 916.154140][T31242] ? __pfx_avc_has_perm+0x10/0x10 [ 916.154172][T31242] ? find_held_lock+0x2b/0x80 [ 916.154193][T31242] ? __might_fault+0xc5/0x140 [ 916.154216][T31242] ? __might_fault+0xc5/0x140 [ 916.154245][T31242] ? _copy_from_user+0x59/0xd0 [ 916.154262][T31242] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 916.154284][T31242] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 916.154309][T31242] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 916.154331][T31242] do_sock_getsockopt+0x50a/0x6e0 [ 916.154351][T31242] ? __lock_acquire+0x49f/0x1a40 [ 916.154373][T31242] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 916.154392][T31242] ? rcu_read_lock_any_held+0x6a/0xa0 [ 916.154423][T31242] ? find_held_lock+0x2b/0x80 [ 916.154452][T31242] ? __fget_files+0x21f/0x3d0 [ 916.154486][T31242] __sys_getsockopt+0x148/0x260 [ 916.154520][T31242] ? __x64_sys_getsockopt+0xbd/0x160 [ 916.154552][T31242] __x64_sys_getsockopt+0xbd/0x160 [ 916.154577][T31242] ? do_syscall_64+0x90/0x870 [ 916.154602][T31242] ? lockdep_hardirqs_on+0x78/0x100 [ 916.154624][T31242] do_syscall_64+0x115/0x870 [ 916.154647][T31242] ? clear_bhb_loop+0x40/0x90 [ 916.154668][T31242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.154685][T31242] RIP: 0033:0x7f199e99de59 [ 916.154700][T31242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.154716][T31242] RSP: 002b:00007f199f926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 916.154735][T31242] RAX: ffffffffffffffda RBX: 00007f199ec25fa0 RCX: 00007f199e99de59 [ 916.154746][T31242] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000004 [ 916.154756][T31242] RBP: 00007f199f926090 R08: 0000200000000240 R09: 0000000000000000 [ 916.154767][T31242] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 916.154778][T31242] R13: 00007f199ec26038 R14: 00007f199ec25fa0 R15: 00007ffeabe64888 [ 916.154804][T31242] [ 916.333498][ T29] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 916.562631][ T5614] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 916.712694][ T30] audit: type=1400 audit(1783087792.746:18090): avc: denied { write } for pid=31257 comm="syz.5.9029" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 916.737097][ T30] audit: type=1400 audit(1783087792.746:18091): avc: denied { open } for pid=31257 comm="syz.5.9029" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 916.778196][ T29] usb 4-1: no configurations [ 916.782841][ T29] usb 4-1: can't read configurations, error -22 [ 916.831750][ T30] audit: type=1400 audit(1783087792.746:18092): avc: denied { ioctl } for pid=31257 comm="syz.5.9029" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 916.940629][ T29] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 916.954276][ T30] audit: type=1400 audit(1783087792.976:18093): avc: denied { watch } for pid=31270 comm="syz.6.9031" path="/113" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 917.039511][T31273] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9031'. [ 917.069832][T31273] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 917.110204][ T29] usb 4-1: no configurations [ 917.115409][ T29] usb 4-1: can't read configurations, error -22 [ 917.305708][ T29] usb usb4-port1: attempt power cycle [ 917.446312][T31285] FAULT_INJECTION: forcing a failure. [ 917.446312][T31285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.472779][T31285] CPU: 1 UID: 0 PID: 31285 Comm: syz.6.9035 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.472810][T31285] Tainted: [L]=SOFTLOCKUP [ 917.472817][T31285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 917.472828][T31285] Call Trace: [ 917.472835][T31285] [ 917.472842][T31285] dump_stack_lvl+0x100/0x190 [ 917.472871][T31285] should_fail_ex.cold+0x5/0xa [ 917.472895][T31285] _copy_to_iter+0x5a4/0x1720 [ 917.472922][T31285] ? __pfx__copy_to_iter+0x10/0x10 [ 917.472942][T31285] ? userfaultfd_show_fdinfo+0x17d/0x1d0 [ 917.472969][T31285] ? __pfx_userfaultfd_show_fdinfo+0x10/0x10 [ 917.472992][T31285] ? fput+0x79/0x100 [ 917.473009][T31285] ? __pfx_userfaultfd_show_fdinfo+0x10/0x10 [ 917.473031][T31285] ? seq_show+0x590/0x870 [ 917.473060][T31285] seq_read_iter+0xdab/0x1270 [ 917.473096][T31285] seq_read+0x344/0x4d0 [ 917.473120][T31285] ? __pfx_seq_read+0x10/0x10 [ 917.473145][T31285] ? lock_acquire+0x1b9/0x370 [ 917.473169][T31285] ? avc_policy_seqno+0x9/0x20 [ 917.473197][T31285] ? selinux_file_permission+0x8f/0x6d0 [ 917.473228][T31285] ? rw_verify_area+0xce/0x6d0 [ 917.473250][T31285] ? __pfx_seq_read+0x10/0x10 [ 917.473277][T31285] vfs_read+0x1e4/0xb40 [ 917.473308][T31285] ? __pfx_vfs_read+0x10/0x10 [ 917.473332][T31285] ? __fget_files+0x215/0x3d0 [ 917.473363][T31285] ? __fget_files+0x21f/0x3d0 [ 917.473395][T31285] ksys_read+0x12a/0x250 [ 917.473418][T31285] ? __pfx_ksys_read+0x10/0x10 [ 917.473447][T31285] do_syscall_64+0x115/0x870 [ 917.473470][T31285] ? clear_bhb_loop+0x40/0x90 [ 917.473490][T31285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.473506][T31285] RIP: 0033:0x7fecb299de59 [ 917.473522][T31285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.473539][T31285] RSP: 002b:00007fecb380d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 917.473556][T31285] RAX: ffffffffffffffda RBX: 00007fecb2c25fa0 RCX: 00007fecb299de59 [ 917.473567][T31285] RDX: 0000000000002020 RSI: 0000200000000040 RDI: 0000000000000004 [ 917.473578][T31285] RBP: 00007fecb380d090 R08: 0000000000000000 R09: 0000000000000000 [ 917.473588][T31285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.473598][T31285] R13: 00007fecb2c26038 R14: 00007fecb2c25fa0 R15: 00007fff675d36c8 [ 917.473623][T31285] [ 917.853874][ T29] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 917.884929][ T29] usb 4-1: no configurations [ 917.889585][ T29] usb 4-1: can't read configurations, error -22 [ 918.034522][ T29] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 918.069263][ T29] usb 4-1: no configurations [ 918.131090][ T29] usb 4-1: can't read configurations, error -22 [ 918.229588][ T29] usb usb4-port1: unable to enumerate USB device [ 918.967693][T31308] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9042'. [ 919.083844][T31311] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 919.681037][T31313] tmpfs: Unknown parameter 'fd' [ 919.715617][ T30] audit: type=1400 audit(1783087795.506:18094): avc: denied { sqpoll } for pid=31312 comm="syz.6.9044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 920.268709][T31332] FAULT_INJECTION: forcing a failure. [ 920.268709][T31332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.282891][T31332] CPU: 0 UID: 0 PID: 31332 Comm: syz.2.9049 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.282920][T31332] Tainted: [L]=SOFTLOCKUP [ 920.282926][T31332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 920.282937][T31332] Call Trace: [ 920.282944][T31332] [ 920.282950][T31332] dump_stack_lvl+0x100/0x190 [ 920.282979][T31332] should_fail_ex.cold+0x5/0xa [ 920.283002][T31332] strncpy_from_user+0x3b/0x2d0 [ 920.283025][T31332] do_getname+0x78/0x390 [ 920.283049][T31332] do_sys_openat2+0xc7/0x1e0 [ 920.283069][T31332] ? __pfx_do_sys_openat2+0x10/0x10 [ 920.283091][T31332] ? __fget_files+0x21f/0x3d0 [ 920.283118][T31332] __x64_sys_open+0xfe/0x1d0 [ 920.283136][T31332] ? __pfx___x64_sys_open+0x10/0x10 [ 920.283154][T31332] ? ksys_write+0x1ac/0x250 [ 920.283186][T31332] do_syscall_64+0x115/0x870 [ 920.283209][T31332] ? clear_bhb_loop+0x40/0x90 [ 920.283231][T31332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.283249][T31332] RIP: 0033:0x7f199e99de59 [ 920.283264][T31332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.283280][T31332] RSP: 002b:00007f199f926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 920.283297][T31332] RAX: ffffffffffffffda RBX: 00007f199ec25fa0 RCX: 00007f199e99de59 [ 920.283308][T31332] RDX: 78e22799f4a46ffe RSI: 00000000001607c0 RDI: 0000200000000000 [ 920.283322][T31332] RBP: 00007f199f926090 R08: 0000000000000000 R09: 0000000000000000 [ 920.283331][T31332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.283340][T31332] R13: 00007f199ec26038 R14: 00007f199ec25fa0 R15: 00007ffeabe64888 [ 920.283361][T31332] [ 920.717677][ T30] audit: type=1400 audit(1783087796.448:18095): avc: denied { name_bind } for pid=31329 comm="syz.3.9047" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 921.773569][T31346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9052'. [ 921.897794][T31346] vlan1: entered allmulticast mode [ 921.923151][T31346] dummy0: entered allmulticast mode [ 921.937127][T31346] bridge0: port 3(vlan1) entered blocking state [ 921.962161][T31346] bridge0: port 3(vlan1) entered disabled state [ 922.001044][T31346] vlan1: entered promiscuous mode [ 922.017731][T31346] dummy0: entered promiscuous mode [ 922.096581][ T993] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 922.211874][T31356] netlink: 'syz.1.9057': attribute type 1 has an invalid length. [ 922.280203][ T993] usb 3-1: Using ep0 maxpacket: 16 [ 922.290219][ T993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.303970][ T993] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 922.314260][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.365063][ T993] usb 3-1: Product: syz [ 922.376475][ T993] usb 3-1: Manufacturer: syz [ 922.389492][ T993] usb 3-1: SerialNumber: syz [ 922.404844][ T993] usb 3-1: config 0 descriptor?? [ 922.460010][ T993] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 922.483940][ T5614] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 922.637715][ T5727] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 922.717949][T31356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.751333][T31371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.771232][T31371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.812601][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.844400][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.875097][ T5727] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 922.904854][ T5727] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.924815][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.955785][ T5727] usb 6-1: config 0 descriptor?? [ 923.569258][T20612] usb 3-1: Failed to submit usb control message: -110 [ 923.577924][T20612] usb 3-1: unable to send the bmi data to the device: -110 [ 923.585219][T20612] usb 3-1: unable to get target info from device [ 923.591614][T20612] usb 3-1: could not get target info (-110) [ 923.597503][T20612] usb 3-1: could not probe fw (-110) [ 923.681127][ T5727] usbhid 6-1:0.0: can't add hid device: -71 [ 923.687178][ T5727] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 923.697219][ T5727] usb 6-1: USB disconnect, device number 44 [ 923.720853][ T993] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 923.884001][ T993] usb 7-1: Using ep0 maxpacket: 8 [ 923.890869][ T993] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 923.901624][ T993] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 923.913959][ T993] usb 7-1: config 8 has no interface number 0 [ 923.933025][ T993] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 923.942400][ T993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.950631][ T993] usb 7-1: Product: syz [ 923.954951][ T993] usb 7-1: Manufacturer: syz [ 923.959734][ T993] usb 7-1: SerialNumber: syz [ 923.988386][T31384] 9p: Bad value for 'trans' [ 924.021442][T31386] netlink: 388 bytes leftover after parsing attributes in process `syz.1.9063'. [ 924.222961][T31394] netlink: 23 bytes leftover after parsing attributes in process `syz.5.9064'. [ 924.241513][ T30] audit: type=1400 audit(1783087799.679:18096): avc: denied { create } for pid=31387 comm="syz.5.9064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 924.481886][ T30] audit: type=1400 audit(1783087799.688:18097): avc: denied { write } for pid=31387 comm="syz.5.9064" path="socket:[209211]" dev="sockfs" ino=209211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 924.518928][ T993] vmk80xx 7-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 924.702739][ T993] usb 7-1: USB disconnect, device number 58 [ 925.341721][ T8324] usb 3-1: USB disconnect, device number 66 [ 925.658809][ T30] audit: type=1400 audit(1783087800.861:18098): avc: denied { map } for pid=31406 comm="syz.5.9070" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 925.807295][ T30] audit: type=1400 audit(1783087801.147:18099): avc: denied { ioctl } for pid=31412 comm="syz.6.9073" path="socket:[210083]" dev="sockfs" ino=210083 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 925.863047][T31413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9073'. [ 927.146346][ T29] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 927.281775][T31433] netlink: 400 bytes leftover after parsing attributes in process `syz.3.9079'. [ 927.468136][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 927.548334][ T29] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 928.286621][ T29] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 928.695498][ T29] usb 7-1: config 8 has no interface number 0 [ 928.703867][ T29] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 928.712958][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.721139][ T29] usb 7-1: Product: syz [ 928.725500][ T29] usb 7-1: Manufacturer: syz [ 928.730107][ T29] usb 7-1: SerialNumber: syz [ 928.888596][ T30] audit: type=1400 audit(1783087803.999:18100): avc: denied { read write } for pid=31440 comm="syz.2.9082" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 928.925695][T31444] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9079'. [ 928.935722][ T30] audit: type=1400 audit(1783087803.999:18101): avc: denied { open } for pid=31440 comm="syz.2.9082" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 929.089015][ T29] vmk80xx 7-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 929.100299][ T29] usb 7-1: USB disconnect, device number 59 [ 929.646599][ T30] audit: type=1400 audit(1783087804.692:18102): avc: denied { mount } for pid=31454 comm="syz.5.9086" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 930.256897][ T30] audit: type=1400 audit(1783087804.692:18103): avc: denied { search } for pid=31454 comm="syz.5.9086" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 930.306356][ T30] audit: type=1400 audit(1783087804.692:18104): avc: denied { search } for pid=31454 comm="syz.5.9086" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 930.344684][ T30] audit: type=1400 audit(1783087804.692:18105): avc: denied { read } for pid=31454 comm="syz.5.9086" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 930.644616][T31475] sysfs: Unknown parameter 'tra' [ 930.654784][T31475] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 930.666469][T31475] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 931.125682][ T30] audit: type=1400 audit(1783087804.692:18106): avc: denied { read open } for pid=31454 comm="syz.5.9086" path="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 931.271375][ T30] audit: type=1400 audit(1783087805.606:18107): avc: denied { mount } for pid=31470 comm="syz.2.9089" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 931.299417][ T30] audit: type=1400 audit(1783087805.615:18108): avc: denied { remount } for pid=31470 comm="syz.2.9089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 931.391205][ T30] audit: type=1400 audit(1783087806.307:18109): avc: denied { unmount } for pid=22195 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 931.942242][ T11] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 931.969513][ T30] audit: type=1400 audit(1783087806.843:18110): avc: denied { bind } for pid=31461 comm="syz.1.9087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 931.996672][T31467] netlink: 'syz.1.9087': attribute type 1 has an invalid length. [ 932.115503][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 932.136368][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.170471][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.194619][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 932.235927][ T11] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 932.271215][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.291170][ T11] usb 3-1: config 0 descriptor?? [ 932.307173][T31486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9092'. [ 933.180058][ T11] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001A/input/input37 [ 933.265832][ T11] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 933.289922][T31481] kvm: apic: phys broadcast and lowest prio [ 933.303984][ T30] audit: type=1326 audit(1783087807.978:18111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.1.9094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a2559de59 code=0x0 [ 933.788230][ T30] audit: type=1400 audit(1783087808.523:18112): avc: denied { getopt } for pid=31503 comm="syz.6.9096" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 934.043783][ T5734] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 934.130283][ T29] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 934.245825][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.291358][T31518] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9100'. [ 934.556414][T31514] netlink: 'syz.1.9100': attribute type 4 has an invalid length. [ 934.639891][T31518] netlink: 'syz.1.9100': attribute type 4 has an invalid length. [ 935.092842][ T5727] usb 3-1: USB disconnect, device number 67 [ 935.222008][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.254074][ T5734] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 935.269900][ T5734] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 935.281459][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.301453][ T5734] usb 4-1: config 0 descriptor?? [ 935.363993][T31523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9101'. [ 935.373443][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 935.394957][ T29] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 935.404693][ T29] usb 7-1: config 179 has no interface number 0 [ 935.413873][ T30] audit: type=1400 audit(1783087810.019:18113): avc: denied { map } for pid=31520 comm="syz.2.9102" path="/522" dev="tmpfs" ino=2757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 935.414429][ T29] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 935.453883][ T29] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 935.466067][ T29] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 935.478831][ T29] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 935.490987][ T29] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 935.512153][ T29] usb 7-1: config 179 interface 65 has no altsetting 0 [ 935.519473][ T29] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 935.533333][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.602947][ T29] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input38 [ 935.656091][ T30] audit: type=1400 audit(1783087810.240:18114): avc: denied { map } for pid=31530 comm="syz.5.9106" path="socket:[209724]" dev="sockfs" ino=209724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 935.694626][ T4962] input input38: unable to receive magic message: -110 [ 935.742831][ T4962] input input38: unable to receive magic message: -32 [ 935.765098][ T4962] input input38: unable to receive magic message: -32 [ 935.824253][ T4962] input input38: unable to receive magic message: -32 [ 935.976419][ T4962] input input38: unable to receive magic message: -32 [ 936.338498][ T30] audit: type=1400 audit(1783087810.850:18115): avc: denied { shutdown } for pid=31507 comm="syz.6.9098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 936.382022][ T5734] usbhid 4-1:0.0: can't add hid device: -71 [ 936.407614][ T5734] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 936.446707][ T5734] usb 4-1: USB disconnect, device number 73 [ 936.652738][ T29] usb 7-1: USB disconnect, device number 60 [ 936.659106][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 936.670157][T31554] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 936.779976][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 936.779991][ T30] audit: type=1400 audit(1783087811.274:18118): avc: denied { shutdown } for pid=31556 comm="syz.1.9112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 936.844872][ T30] audit: type=1400 audit(1783087811.293:18119): avc: denied { read } for pid=31558 comm="syz.2.9113" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 936.914423][T31563] FAULT_INJECTION: forcing a failure. [ 936.914423][T31563] name failslab, interval 1, probability 0, space 0, times 0 [ 936.938880][ T30] audit: type=1400 audit(1783087811.293:18120): avc: denied { open } for pid=31558 comm="syz.2.9113" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 936.976406][T31563] CPU: 1 UID: 0 PID: 31563 Comm: syz.3.9115 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.976435][T31563] Tainted: [L]=SOFTLOCKUP [ 936.976442][T31563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 936.976452][T31563] Call Trace: [ 936.976459][T31563] [ 936.976465][T31563] dump_stack_lvl+0x100/0x190 [ 936.976491][T31563] should_fail_ex.cold+0x5/0xa [ 936.976510][T31563] should_failslab+0xc2/0x120 [ 936.976523][T31563] __kmalloc_noprof+0xfc/0x820 [ 936.976535][T31563] ? alloc_pipe_info+0x1ec/0x590 [ 936.976554][T31563] alloc_pipe_info+0x1ec/0x590 [ 936.976573][T31563] splice_direct_to_actor+0x78f/0xa30 [ 936.976585][T31563] ? __pfx_direct_splice_actor+0x10/0x10 [ 936.976598][T31563] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 936.976614][T31563] do_splice_direct+0x174/0x240 [ 936.976625][T31563] ? __pfx_do_splice_direct+0x10/0x10 [ 936.976635][T31563] ? avc_policy_seqno+0x9/0x20 [ 936.976652][T31563] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 936.976672][T31563] ? rw_verify_area+0xce/0x6d0 [ 936.976687][T31563] do_sendfile+0xadc/0xe20 [ 936.976705][T31563] ? __pfx_do_sendfile+0x10/0x10 [ 936.976724][T31563] __x64_sys_sendfile64+0x154/0x220 [ 936.976735][T31563] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 936.976750][T31563] do_syscall_64+0x115/0x870 [ 936.976765][T31563] ? clear_bhb_loop+0x40/0x90 [ 936.976779][T31563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.976791][T31563] RIP: 0033:0x7fb83df9de59 [ 936.976801][T31563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.976812][T31563] RSP: 002b:00007fb83eeec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 936.976824][T31563] RAX: ffffffffffffffda RBX: 00007fb83e225fa0 RCX: 00007fb83df9de59 [ 936.976831][T31563] RDX: 00002000000000c0 RSI: 0000000000000005 RDI: 0000000000000005 [ 936.976838][T31563] RBP: 00007fb83eeec090 R08: 0000000000000000 R09: 0000000000000000 [ 936.976844][T31563] R10: 00000000000085b5 R11: 0000000000000246 R12: 0000000000000001 [ 936.976851][T31563] R13: 00007fb83e226038 R14: 00007fb83e225fa0 R15: 00007ffe174a5c18 [ 936.976865][T31563] [ 937.235636][ T30] audit: type=1400 audit(1783087811.293:18121): avc: denied { ioctl } for pid=31558 comm="syz.2.9113" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 937.427530][ T29] bridge0: entered promiscuous mode [ 937.553103][ T30] audit: type=1400 audit(1783087811.985:18122): avc: denied { map } for pid=31560 comm="syz.2.9114" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 937.578106][ T30] audit: type=1400 audit(1783087811.985:18123): avc: denied { execute } for pid=31560 comm="syz.2.9114" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 937.623158][T31566] fuse: Bad value for 'fd' [ 938.734313][T31585] netlink: 'syz.5.9120': attribute type 1 has an invalid length. [ 938.734313][T31584] netlink: 'syz.5.9120': attribute type 1 has an invalid length. [ 938.755513][ T30] audit: type=1400 audit(1783087812.973:18124): avc: denied { read } for pid=31580 comm="syz.6.9118" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 938.779130][ T30] audit: type=1400 audit(1783087812.991:18125): avc: denied { open } for pid=31580 comm="syz.6.9118" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 938.853324][T31585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 938.875787][ T30] audit: type=1400 audit(1783087813.019:18126): avc: denied { ioctl } for pid=31580 comm="syz.6.9118" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 939.397068][T31598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9123'. [ 939.628238][ T30] audit: type=1400 audit(1783087813.675:18127): avc: denied { listen } for pid=31593 comm="syz.3.9123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 940.354267][ T1182] Bluetooth: hci2: Frame reassembly failed (-84) [ 940.918637][T27770] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 940.997891][ T5734] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 941.143294][T27770] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.179858][T27770] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 941.246769][T27770] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 941.326497][T27770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.372949][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.460196][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.474233][T27770] usb 4-1: config 0 descriptor?? [ 941.570723][ T5734] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 941.699343][ T5734] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 941.799512][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.967853][ T5734] usb 6-1: config 0 descriptor?? [ 942.546965][T30977] Bluetooth: hci2: command 0x1003 tx timeout [ 942.555584][ T5614] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 942.810347][ T5734] usbhid 6-1:0.0: can't add hid device: -71 [ 942.823006][ T5734] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 942.843758][ T5734] usb 6-1: USB disconnect, device number 45 [ 943.198213][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 943.198231][ T30] audit: type=1400 audit(1783087817.201:18129): avc: denied { getattr } for pid=31628 comm="syz.5.9133" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 943.539668][T31632] ISOFS: Unable to identify CD-ROM format. [ 944.037388][T31620] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 944.044315][T31620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 944.070868][ T5727] usb 4-1: USB disconnect, device number 74 [ 944.105643][T31620] vhci_hcd vhci_hcd.0: Device attached [ 944.241032][T31643] FAULT_INJECTION: forcing a failure. [ 944.241032][T31643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.259913][T31643] CPU: 0 UID: 0 PID: 31643 Comm: syz.5.9137 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.259941][T31643] Tainted: [L]=SOFTLOCKUP [ 944.259947][T31643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 944.259957][T31643] Call Trace: [ 944.259963][T31643] [ 944.259970][T31643] dump_stack_lvl+0x100/0x190 [ 944.259999][T31643] should_fail_ex.cold+0x5/0xa [ 944.260023][T31643] _copy_from_user+0x2e/0xd0 [ 944.260046][T31643] msr_io+0x93/0x480 [ 944.260070][T31643] ? __pfx_do_get_msr+0x10/0x10 [ 944.260100][T31643] ? __pfx_msr_io+0x10/0x10 [ 944.260125][T31643] ? __pfx_widen_string+0x10/0x10 [ 944.260144][T31643] ? __kernel_text_address+0xd/0x30 [ 944.260164][T31643] kvm_arch_vcpu_ioctl+0x1922/0x5730 [ 944.260189][T31643] ? kvm_arch_vcpu_ioctl+0x18fa/0x5730 [ 944.260220][T31643] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 944.260246][T31643] ? __pfx_stack_trace_save+0x10/0x10 [ 944.260273][T31643] ? stack_depot_save_flags+0x27/0x9d0 [ 944.260301][T31643] ? __lock_acquire+0x49f/0x1a40 [ 944.260320][T31643] ? tomoyo_path_number_perm+0x46d/0x580 [ 944.260340][T31643] ? kasan_save_stack+0x30/0x50 [ 944.260361][T31643] ? __lock_acquire+0x49f/0x1a40 [ 944.260389][T31643] ? lock_acquire+0x1b9/0x370 [ 944.260411][T31643] ? rcu_is_watching+0x12/0xc0 [ 944.260435][T31643] ? trace_contention_end+0x126/0x160 [ 944.260457][T31643] ? __mutex_lock+0x26d/0x1bd0 [ 944.260481][T31643] ? kvm_vcpu_ioctl+0x322/0x1700 [ 944.260506][T31643] ? __pfx___mutex_lock+0x10/0x10 [ 944.260529][T31643] ? kasan_quarantine_put+0x104/0x240 [ 944.260550][T31643] ? tomoyo_path_number_perm+0x28f/0x580 [ 944.260575][T31643] ? tomoyo_path_number_perm+0x188/0x580 [ 944.260599][T31643] ? kvm_vcpu_ioctl+0x8a0/0x1700 [ 944.260617][T31643] kvm_vcpu_ioctl+0x8a0/0x1700 [ 944.260638][T31643] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 944.260662][T31643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 944.260681][T31643] ? do_vfs_ioctl+0x226/0x13e0 [ 944.260703][T31643] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 944.260725][T31643] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 944.260756][T31643] ? __fget_files+0x215/0x3d0 [ 944.260779][T31643] ? hook_file_ioctl_common+0x140/0x440 [ 944.260809][T31643] ? selinux_file_ioctl+0x13b/0x290 [ 944.260831][T31643] ? selinux_file_ioctl+0xb6/0x290 [ 944.260855][T31643] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 944.260876][T31643] __x64_sys_ioctl+0x18e/0x210 [ 944.260902][T31643] do_syscall_64+0x115/0x870 [ 944.260924][T31643] ? clear_bhb_loop+0x40/0x90 [ 944.260946][T31643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.260964][T31643] RIP: 0033:0x7fa20679de59 [ 944.260980][T31643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.260997][T31643] RSP: 002b:00007fa2075bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.261029][T31643] RAX: ffffffffffffffda RBX: 00007fa206a25fa0 RCX: 00007fa20679de59 [ 944.261041][T31643] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 944.261051][T31643] RBP: 00007fa2075bc090 R08: 0000000000000000 R09: 0000000000000000 [ 944.261060][T31643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.261070][T31643] R13: 00007fa206a26038 R14: 00007fa206a25fa0 R15: 00007ffeeeb4de38 [ 944.261094][T31643] [ 944.372152][T31647] netlink: 'syz.1.9135': attribute type 8 has an invalid length. [ 944.598707][T27770] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 944.640560][ T5727] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 944.810499][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 944.824693][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.842464][ T5727] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.863373][ T5727] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.874533][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.883813][ T5727] usb 4-1: Product: syz [ 944.890169][ T5727] usb 4-1: Manufacturer: syz [ 944.894816][ T5727] usb 4-1: SerialNumber: syz [ 944.995042][ T11] usb 7-1: new low-speed USB device number 61 using dummy_hcd [ 945.017889][ T5727] usb 4-1: 0:2 : does not exist [ 945.210411][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 945.281884][ T11] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 945.365595][ T11] usb 7-1: string descriptor 0 read error: -22 [ 945.375412][ T5727] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 945.383128][ T11] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=92.6a [ 945.399052][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.512191][ T11] lan78xx 7-1:9.0 (unnamed net_device) (uninitialized): USB bus speed not supported [ 945.571640][ T11] lan78xx 7-1:9.0: probe with driver lan78xx failed with error -5 [ 945.715960][ T5727] usb 4-1: USB disconnect, device number 75 [ 945.771023][T28870] udevd[28870]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.906740][T31634] vhci_hcd: connection reset by peer [ 945.916402][T20563] vhci_hcd vhci_hcd.2: stop threads [ 945.922452][T20563] vhci_hcd vhci_hcd.2: release socket [ 945.935119][T20563] vhci_hcd vhci_hcd.2: disconnect device [ 946.023735][ T5734] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 946.133954][T31666] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 946.152123][T31666] bond1: (slave lo): Enslaving as an active interface with an up link [ 946.163532][T31666] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 946.185676][T31666] syzkaller1: entered promiscuous mode [ 946.192868][T31666] syzkaller1: entered allmulticast mode [ 946.204793][ T30] audit: type=1400 audit(1783087819.980:18130): avc: denied { read write } for pid=31653 comm="syz.6.9139" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 946.207838][ T5734] usb 6-1: Using ep0 maxpacket: 8 [ 946.234774][ T29] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 946.235292][ T30] audit: type=1400 audit(1783087819.980:18131): avc: denied { open } for pid=31653 comm="syz.6.9139" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 946.244144][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 946.267267][ T5727] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 946.279271][ T5734] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 946.298642][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.307986][ T5734] usb 6-1: config 0 descriptor?? [ 946.427983][ T29] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 946.437144][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.445186][ T29] usb 3-1: Product: syz [ 946.449943][ T29] usb 3-1: Manufacturer: syz [ 946.454558][ T29] usb 3-1: SerialNumber: syz [ 946.460476][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.471592][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.481480][ T5727] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 946.490644][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.500586][ T5727] usb 4-1: config 0 descriptor?? [ 946.536642][ T5734] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 946.763045][ C0] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 946.772216][T27760] usb 6-1: USB disconnect, device number 46 [ 946.909978][T31665] xt_hashlimit: max too large, truncated to 1048576 [ 946.945766][ T5727] hid_parser_main: 30 callbacks suppressed [ 946.945793][ T5727] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 946.960252][ T5727] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 946.968293][ T5727] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 946.975548][ T5727] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 946.987097][ T5727] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 946.994024][ T5727] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 947.001086][ T5727] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 947.012717][ T5727] pyra 0003:1E7D:2CF6.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 947.017866][ T29] rtl8150 3-1:1.0: couldn't reset the device [ 947.036841][ T29] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 947.052197][ T29] usb 3-1: USB disconnect, device number 68 [ 947.162446][ T30] audit: type=1400 audit(1783087820.866:18132): avc: denied { ioctl } for pid=31661 comm="syz.3.9142" path="socket:[211081]" dev="sockfs" ino=211081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 947.391542][ T5727] pyra 0003:1E7D:2CF6.001B: couldn't init struct pyra_device [ 947.404490][ T5727] pyra 0003:1E7D:2CF6.001B: couldn't install mouse [ 947.445119][ T5727] pyra 0003:1E7D:2CF6.001B: probe with driver pyra failed with error -71 [ 947.467347][ T5727] usb 4-1: USB disconnect, device number 76 [ 947.804309][T31686] netlink: 'syz.1.9150': attribute type 10 has an invalid length. [ 947.825130][T31686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 947.835065][T31686] team0: Port device netdevsim1 added [ 947.850455][T31686] netlink: 'syz.1.9150': attribute type 10 has an invalid length. [ 947.862106][T31686] team0: Port device netdevsim1 removed [ 947.871330][T31686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 947.881707][T31686] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 947.919409][ T29] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 948.025780][T30977] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 948.025830][ T30] audit: type=1400 audit(1783087821.660:18133): avc: denied { read } for pid=31685 comm="syz.1.9150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 948.149424][ T5734] usb 7-1: USB disconnect, device number 61 [ 948.158746][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 948.170842][ T29] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 948.187519][ T29] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 948.228154][ T30] audit: type=1400 audit(1783087821.845:18134): avc: denied { accept } for pid=31692 comm="syz.6.9153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 948.235125][ T29] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 948.268401][ T29] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 948.273499][T31693] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9153'. [ 948.296217][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 948.310807][ T29] usb 6-1: config 0 has no interface number 0 [ 948.310844][ T29] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 948.310868][ T29] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 948.310887][ T29] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 948.310911][ T29] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 948.310931][ T29] usb 6-1: config 0 interface 125 has no altsetting 0 [ 948.310945][ T29] usb 6-1: config 0 interface 125 has no altsetting 2 [ 948.314116][ T29] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 948.314143][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.314161][ T29] usb 6-1: Product: syz [ 948.314174][ T29] usb 6-1: Manufacturer: syz [ 948.314185][ T29] usb 6-1: SerialNumber: syz [ 948.315345][ T30] audit: type=1400 audit(1783087821.928:18135): avc: granted { setsecparam } for pid=31692 comm="syz.6.9153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 948.315546][ T30] audit: type=1400 audit(1783087821.928:18136): avc: granted { setsecparam } for pid=31692 comm="syz.6.9153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 948.316254][ T29] usb 6-1: config 0 descriptor?? [ 948.324125][ T29] usb 6-1: selecting invalid altsetting 2 [ 948.461661][ T5727] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 948.660495][ T5727] usb 4-1: Using ep0 maxpacket: 8 [ 948.737722][ T5727] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 948.813521][ T5727] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 948.846807][ T5727] usb 4-1: config 8 has no interface number 0 [ 948.878187][ T5727] usb 4-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 948.933238][ T5727] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 948.945805][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.958861][ T5727] usb 4-1: Product: syz [ 948.971537][ T5727] usb 4-1: Manufacturer: syz [ 948.981585][ T5727] usb 4-1: SerialNumber: syz [ 949.129384][ T30] audit: type=1400 audit(1783087822.676:18137): avc: denied { ioctl } for pid=31704 comm="syz.6.9158" path="socket:[211124]" dev="sockfs" ino=211124 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 949.290121][ T30] audit: type=1400 audit(1783087822.814:18138): avc: denied { read write } for pid=28899 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 949.351908][ T5727] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 949.401429][ T5727] usb 4-1: USB disconnect, device number 77 [ 949.413391][ T30] audit: type=1400 audit(1783087822.860:18139): avc: denied { open } for pid=28899 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 949.484818][ T30] audit: type=1400 audit(1783087822.860:18140): avc: denied { ioctl } for pid=28899 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 949.499831][ T29] usb 6-1: USB disconnect, device number 47 [ 949.566573][ T30] audit: type=1400 audit(1783087822.944:18141): avc: denied { create } for pid=31713 comm="syz.6.9161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 949.657737][ T30] audit: type=1400 audit(1783087822.944:18142): avc: denied { shutdown } for pid=31713 comm="syz.6.9161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 949.753529][ T30] audit: type=1400 audit(1783087822.971:18143): avc: denied { getopt } for pid=31713 comm="syz.6.9161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 949.823787][ T30] audit: type=1400 audit(1783087822.971:18144): avc: denied { connect } for pid=31713 comm="syz.6.9161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 949.863939][T31722] FAULT_INJECTION: forcing a failure. [ 949.863939][T31722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.897829][ T30] audit: type=1400 audit(1783087822.971:18145): avc: denied { name_connect } for pid=31713 comm="syz.6.9161" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 949.927977][T31722] CPU: 0 UID: 0 PID: 31722 Comm: syz.6.9164 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.928007][T31722] Tainted: [L]=SOFTLOCKUP [ 949.928014][T31722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 949.928025][T31722] Call Trace: [ 949.928031][T31722] [ 949.928040][T31722] dump_stack_lvl+0x100/0x190 [ 949.928067][T31722] should_fail_ex.cold+0x5/0xa [ 949.928090][T31722] _copy_to_user+0x32/0xd0 [ 949.928113][T31722] sctp_getsockopt+0xd59/0x7110 [ 949.928139][T31722] ? find_held_lock+0x2b/0x80 [ 949.928164][T31722] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 949.928193][T31722] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 949.928223][T31722] ? __pfx_sctp_getsockopt+0x10/0x10 [ 949.928243][T31722] ? avc_has_perm_noaudit+0x145/0x3b0 [ 949.928272][T31722] ? __lock_acquire+0x49f/0x1a40 [ 949.928293][T31722] ? __pfx_avc_has_perm+0x10/0x10 [ 949.928327][T31722] ? find_held_lock+0x2b/0x80 [ 949.928350][T31722] ? __might_fault+0xc5/0x140 [ 949.928375][T31722] ? __might_fault+0xc5/0x140 [ 949.928406][T31722] ? _copy_from_user+0x59/0xd0 [ 949.928425][T31722] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 949.928448][T31722] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 949.928474][T31722] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 949.928494][T31722] do_sock_getsockopt+0x50a/0x6e0 [ 949.928513][T31722] ? __lock_acquire+0x49f/0x1a40 [ 949.928535][T31722] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 949.928555][T31722] ? rcu_read_lock_any_held+0x6a/0xa0 [ 949.928586][T31722] ? find_held_lock+0x2b/0x80 [ 949.928616][T31722] ? __fget_files+0x21f/0x3d0 [ 949.928649][T31722] __sys_getsockopt+0x148/0x260 [ 949.928682][T31722] ? __x64_sys_getsockopt+0xbd/0x160 [ 949.928706][T31722] __x64_sys_getsockopt+0xbd/0x160 [ 949.928736][T31722] ? do_syscall_64+0x90/0x870 [ 949.928759][T31722] ? lockdep_hardirqs_on+0x78/0x100 [ 949.928782][T31722] do_syscall_64+0x115/0x870 [ 949.928803][T31722] ? clear_bhb_loop+0x40/0x90 [ 949.928825][T31722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.928842][T31722] RIP: 0033:0x7fecb299de59 [ 949.928857][T31722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.928873][T31722] RSP: 002b:00007fecb380d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 949.928890][T31722] RAX: ffffffffffffffda RBX: 00007fecb2c25fa0 RCX: 00007fecb299de59 [ 949.928902][T31722] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000003 [ 949.928912][T31722] RBP: 00007fecb380d090 R08: 00002000000000c0 R09: 0000000000000000 [ 949.928923][T31722] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.928933][T31722] R13: 00007fecb2c26038 R14: 00007fecb2c25fa0 R15: 00007fff675d36c8 [ 949.928961][T31722] [ 950.317369][T27770] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 950.336997][ T30] audit: type=1400 audit(1783087822.990:18147): avc: denied { setopt } for pid=31713 comm="syz.6.9161" lport=45983 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 950.409849][T31729] FAULT_INJECTION: forcing a failure. [ 950.409849][T31729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.508167][T31729] CPU: 1 UID: 0 PID: 31729 Comm: syz.3.9165 Tainted: G L syzkaller #0 PREEMPT(full) [ 950.508196][T31729] Tainted: [L]=SOFTLOCKUP [ 950.508202][T31729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 950.508212][T31729] Call Trace: [ 950.508218][T31729] [ 950.508224][T31729] dump_stack_lvl+0x100/0x190 [ 950.508259][T31729] should_fail_ex.cold+0x5/0xa [ 950.508283][T31729] _copy_to_user+0x32/0xd0 [ 950.508306][T31729] simple_read_from_buffer+0xcb/0x170 [ 950.508336][T31729] proc_fail_nth_read+0x1af/0x230 [ 950.508361][T31729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 950.508388][T31729] ? rw_verify_area+0xce/0x6d0 [ 950.508410][T31729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 950.508434][T31729] vfs_read+0x1e4/0xb40 [ 950.508462][T31729] ? __pfx_vfs_read+0x10/0x10 [ 950.508487][T31729] ? __fget_files+0x215/0x3d0 [ 950.508520][T31729] ? __fget_files+0x21f/0x3d0 [ 950.508554][T31729] ksys_read+0x12a/0x250 [ 950.508577][T31729] ? __pfx_ksys_read+0x10/0x10 [ 950.508609][T31729] do_syscall_64+0x115/0x870 [ 950.508633][T31729] ? clear_bhb_loop+0x40/0x90 [ 950.508655][T31729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.508673][T31729] RIP: 0033:0x7fb83df5e68e [ 950.508689][T31729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 950.508705][T31729] RSP: 002b:00007fb83eeebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 950.508723][T31729] RAX: ffffffffffffffda RBX: 00007fb83eeec6c0 RCX: 00007fb83df5e68e [ 950.508734][T31729] RDX: 000000000000000f RSI: 00007fb83eeec0a0 RDI: 0000000000000004 [ 950.508744][T31729] RBP: 00007fb83eeec090 R08: 0000000000000000 R09: 0000000000000000 [ 950.508755][T31729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.508765][T31729] R13: 00007fb83e226038 R14: 00007fb83e225fa0 R15: 00007ffe174a5c18 [ 950.508791][T31729] [ 951.089860][T31719] 9pnet_virtio: no channels available for device syz [ 951.478520][ T29] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 952.037995][ T29] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 952.068278][ T29] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 952.107343][ T29] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 952.203678][ T29] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.219767][ T29] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 952.236272][ T29] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 952.247664][ T29] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 952.261732][ T29] usb 4-1: config 168 interface 0 has no altsetting 0 [ 952.274905][ T29] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 952.295312][ T29] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 952.313166][ T29] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 952.360167][ T29] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.416466][ T29] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 952.452661][ T29] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 952.470058][T27760] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 952.479409][ T29] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 952.512767][ T29] usb 4-1: config 168 interface 0 has no altsetting 0 [ 952.552516][ T29] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 952.572562][ T29] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 952.660555][ T29] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 952.720639][ T29] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.743743][ T29] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 952.822017][ T29] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 952.911354][ T29] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 952.923712][T27760] usb 3-1: Using ep0 maxpacket: 8 [ 952.932051][T27760] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 952.940437][T27760] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 952.967088][T27760] usb 3-1: config 8 has no interface number 0 [ 952.973733][ T29] usb 4-1: config 168 interface 0 has no altsetting 0 [ 952.982048][T27760] usb 3-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.993500][ T29] usb 4-1: string descriptor 0 read error: -22 [ 953.002957][ T29] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 953.029108][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.042183][T27760] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 953.055832][ T29] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 953.081257][T27760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.106110][T27760] usb 3-1: Product: syz [ 953.126626][T27760] usb 3-1: Manufacturer: syz [ 953.139345][T27760] usb 3-1: SerialNumber: syz [ 953.840222][T27760] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 953.856823][T27760] usb 3-1: USB disconnect, device number 69 [ 954.111625][ T29] usb 4-1: USB disconnect, device number 78 [ 954.548476][ T30] kauditd_printk_skb: 458 callbacks suppressed [ 954.548490][ T30] audit: type=1400 audit(1783087827.689:18605): avc: denied { bpf } for pid=31778 comm="syz.1.9184" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 954.612349][T31743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9172'. [ 954.693136][ T30] audit: type=1400 audit(1783087827.689:18606): avc: denied { prog_load } for pid=31778 comm="syz.1.9184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 954.812437][ T30] audit: type=1400 audit(1783087827.689:18607): avc: denied { perfmon } for pid=31778 comm="syz.1.9184" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 954.880877][ T30] audit: type=1400 audit(1783087827.689:18608): avc: denied { perfmon } for pid=31778 comm="syz.1.9184" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 954.894460][T31792] FAULT_INJECTION: forcing a failure. [ 954.894460][T31792] name failslab, interval 1, probability 0, space 0, times 0 [ 954.937296][T31792] CPU: 0 UID: 0 PID: 31792 Comm: syz.2.9185 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.937326][T31792] Tainted: [L]=SOFTLOCKUP [ 954.937332][T31792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 954.937343][T31792] Call Trace: [ 954.937350][T31792] [ 954.937357][T31792] dump_stack_lvl+0x100/0x190 [ 954.937384][T31792] should_fail_ex.cold+0x5/0xa [ 954.937408][T31792] should_failslab+0xc2/0x120 [ 954.937429][T31792] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 954.937449][T31792] ? __alloc_skb+0x5b7/0x710 [ 954.937473][T31792] ? __alloc_skb+0x140/0x710 [ 954.937502][T31792] __alloc_skb+0x140/0x710 [ 954.937524][T31792] ? __alloc_skb+0x5b7/0x710 [ 954.937549][T31792] ? __pfx___alloc_skb+0x10/0x10 [ 954.937579][T31792] netlink_alloc_large_skb+0x69/0x150 [ 954.937605][T31792] netlink_sendmsg+0x680/0xda0 [ 954.937630][T31792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.937652][T31792] ? __might_fault+0x80/0x140 [ 954.937686][T31792] ____sys_sendmsg+0xa4d/0xbe0 [ 954.937706][T31792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.937739][T31792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.937771][T31792] ___sys_sendmsg+0x190/0x1e0 [ 954.937794][T31792] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.937814][T31792] ? __lock_acquire+0x49f/0x1a40 [ 954.937834][T31792] ? get_pid_task+0x106/0x250 [ 954.937884][T31792] __sys_sendmsg+0x160/0x210 [ 954.937913][T31792] ? __pfx___sys_sendmsg+0x10/0x10 [ 954.937951][T31792] do_syscall_64+0x115/0x870 [ 954.937973][T31792] ? clear_bhb_loop+0x40/0x90 [ 954.937995][T31792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.938011][T31792] RIP: 0033:0x7f199e99de59 [ 954.938025][T31792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.938041][T31792] RSP: 002b:00007f199f905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.938058][T31792] RAX: ffffffffffffffda RBX: 00007f199ec26090 RCX: 00007f199e99de59 [ 954.938069][T31792] RDX: 0000000000001000 RSI: 0000200000000200 RDI: 0000000000000003 [ 954.938079][T31792] RBP: 00007f199f905090 R08: 0000000000000000 R09: 0000000000000000 [ 954.938088][T31792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.938097][T31792] R13: 00007f199ec26128 R14: 00007f199ec26090 R15: 00007ffeabe64888 [ 954.938120][T31792] [ 955.166768][ T30] audit: type=1400 audit(1783087827.689:18609): avc: denied { read write } for pid=22195 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 955.207961][ T30] audit: type=1400 audit(1783087827.689:18610): avc: denied { open } for pid=22195 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 955.263253][T27760] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 955.271989][ T30] audit: type=1400 audit(1783087827.689:18611): avc: denied { ioctl } for pid=22195 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 955.275203][T31795] netlink: 'syz.5.9188': attribute type 1 has an invalid length. [ 955.298769][ T30] audit: type=1400 audit(1783087827.726:18612): avc: denied { read } for pid=31741 comm="syz.3.9172" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 955.331850][ T30] audit: type=1400 audit(1783087827.726:18613): avc: denied { open } for pid=31741 comm="syz.3.9172" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 955.333376][T31799] audit: audit_backlog=65 > audit_backlog_limit=64 [ 955.385214][T31799] loop6: detected capacity change from 0 to 2640 [ 955.438537][T27760] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 955.538234][T27760] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 955.706127][T31799] buffer_io_error: 137 callbacks suppressed [ 955.706536][T31799] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.805166][T28870] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.854735][T31799] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.884132][T31799] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.937329][T28870] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.980153][T31799] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.055724][T31799] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.106302][T31799] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.150097][T28870] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.193884][T31799] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.238901][T31799] ldm_validate_partition_table(): Disk read failed. [ 956.276837][T31799] Dev loop6: unable to read RDB block 0 [ 956.303314][T27760] usb 7-1: config 1 interface 0 has no altsetting 0 [ 956.306641][T31799] loop6: unable to read partition table [ 956.311996][T27760] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 956.327435][T27760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.335460][T27760] usb 7-1: Product: syz [ 956.339705][T27760] usb 7-1: Manufacturer: syz [ 956.344299][T27760] usb 7-1: SerialNumber: syz [ 956.358345][T31799] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 956.359838][T31788] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 956.374737][T31788] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 956.631628][T31788] input: syz0 as /devices/virtual/input/input39 [ 956.700437][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9193'. [ 956.954076][T27760] rtl8150 7-1:1.0: couldn't reset the device [ 956.966429][T27760] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 956.994606][T27760] usb 7-1: USB disconnect, device number 62 [ 957.408337][ T8324] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 957.646324][ T8324] usb 6-1: Using ep0 maxpacket: 8 [ 957.654083][ T8324] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 957.677229][ T8324] usb 6-1: config 8 has no interface number 0 [ 957.693220][ T8324] usb 6-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 957.765049][T31844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9203'. [ 957.774911][ T8324] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 958.451415][ T8324] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 958.461078][ T8324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.469166][ T8324] usb 6-1: Product: syz [ 958.473431][ T8324] usb 6-1: Manufacturer: syz [ 958.478297][ T8324] usb 6-1: SerialNumber: syz [ 958.756389][ T8324] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 958.793587][ T8324] usb 6-1: USB disconnect, device number 48 [ 959.029282][T31868] vlan1: entered allmulticast mode [ 959.045191][T31868] veth0_vlan: entered allmulticast mode [ 959.184960][T27771] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 959.442680][T27771] usb 3-1: Using ep0 maxpacket: 8 [ 959.470745][T27771] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 959.485914][T27771] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 959.512484][T27771] usb 3-1: config 8 has no interface number 0 [ 959.528931][T27771] usb 3-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.564707][T31877] netlink: 'syz.1.9213': attribute type 1 has an invalid length. [ 959.570064][T27771] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 959.601506][T27771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.617408][T27771] usb 3-1: Product: syz [ 959.644799][T27771] usb 3-1: Manufacturer: syz [ 959.675705][T27771] usb 3-1: SerialNumber: syz [ 959.683503][T31877] bond2: entered promiscuous mode [ 959.717719][T31877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 959.959263][T31896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9218'. [ 959.990145][ T30] kauditd_printk_skb: 430 callbacks suppressed [ 959.990161][ T30] audit: type=1400 audit(1783087832.711:19039): avc: denied { read write } for pid=28899 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 960.015452][T31897] netlink: 'syz.5.9218': attribute type 1 has an invalid length. [ 960.036387][T31896] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9218'. [ 960.047177][T27771] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 960.089796][T27771] usb 3-1: USB disconnect, device number 70 [ 960.101351][ T30] audit: type=1400 audit(1783087832.739:19040): avc: denied { read write open } for pid=28899 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 960.154704][T31901] kAFS: unable to lookup cell 'ÿ' [ 960.187851][ T30] audit: type=1400 audit(1783087832.739:19041): avc: denied { ioctl } for pid=28899 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 960.294048][ T30] audit: type=1400 audit(1783087832.822:19042): avc: denied { module_request } for pid=31898 comm="syz.6.9219" kmod="ipt_CLUSTERIP" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 960.327605][ T30] audit: type=1400 audit(1783087832.840:19043): avc: denied { create } for pid=31898 comm="syz.6.9219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 960.348647][ T30] audit: type=1400 audit(1783087832.849:19044): avc: denied { setopt } for pid=31898 comm="syz.6.9219" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 960.370277][ T30] audit: type=1400 audit(1783087832.859:19045): avc: denied { setopt } for pid=31898 comm="syz.6.9219" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 960.406592][T31905] FAULT_INJECTION: forcing a failure. [ 960.406592][T31905] name failslab, interval 1, probability 0, space 0, times 0 [ 960.430776][ T30] audit: type=1400 audit(1783087832.868:19046): avc: denied { write } for pid=31898 comm="syz.6.9219" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 960.457293][T31905] CPU: 1 UID: 0 PID: 31905 Comm: syz.5.9220 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.457312][T31905] Tainted: [L]=SOFTLOCKUP [ 960.457316][T31905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 960.457323][T31905] Call Trace: [ 960.457327][T31905] [ 960.457332][T31905] dump_stack_lvl+0x100/0x190 [ 960.457349][T31905] should_fail_ex.cold+0x5/0xa [ 960.457363][T31905] should_failslab+0xc2/0x120 [ 960.457376][T31905] __kmalloc_cache_noprof+0x91/0x6c0 [ 960.457393][T31905] ? copy_mount_options+0x55/0x190 [ 960.457411][T31905] copy_mount_options+0x55/0x190 [ 960.457425][T31905] __x64_sys_mount+0x1ab/0x310 [ 960.457438][T31905] ? __pfx___x64_sys_mount+0x10/0x10 [ 960.457454][T31905] do_syscall_64+0x115/0x870 [ 960.457469][T31905] ? clear_bhb_loop+0x40/0x90 [ 960.457482][T31905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.457494][T31905] RIP: 0033:0x7fa20679de59 [ 960.457505][T31905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.457516][T31905] RSP: 002b:00007fa2075bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.457527][T31905] RAX: ffffffffffffffda RBX: 00007fa206a25fa0 RCX: 00007fa20679de59 [ 960.457534][T31905] RDX: 0000200000000140 RSI: 0000200000000240 RDI: 0000000000000000 [ 960.457541][T31905] RBP: 00007fa2075bc090 R08: 0000200000000180 R09: 0000000000000000 [ 960.457547][T31905] R10: 0000000000010808 R11: 0000000000000246 R12: 0000000000000001 [ 960.457553][T31905] R13: 00007fa206a26038 R14: 00007fa206a25fa0 R15: 00007ffeeeb4de38 [ 960.457567][T31905] [ 960.667940][ T30] audit: type=1400 audit(1783087832.960:19047): avc: denied { read write } for pid=28527 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 960.809214][ T30] audit: type=1400 audit(1783087832.960:19048): avc: denied { open } for pid=28527 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 961.276094][T30977] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 962.228198][ T5727] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 962.390810][ T5727] usb 4-1: Using ep0 maxpacket: 8 [ 962.398204][ T5727] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 962.406604][ T5727] usb 4-1: config 8 has no interface number 0 [ 962.412762][ T5727] usb 4-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 962.427097][ T5727] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 962.509762][T31919] comedi comedi2: comedi_config --init_data is deprecated [ 962.532349][T31919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9225'. [ 962.585005][ T5727] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 962.633242][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.692145][ T5727] usb 4-1: Product: syz [ 962.711549][ T5727] usb 4-1: Manufacturer: syz [ 962.731412][ T5727] usb 4-1: SerialNumber: syz [ 962.917150][T31926] syzkaller1: entered promiscuous mode [ 962.950608][T31926] syzkaller1: entered allmulticast mode [ 963.015694][ T5727] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 963.085461][ T5727] usb 4-1: USB disconnect, device number 79 [ 963.893901][T31943] netlink: 'syz.1.9231': attribute type 3 has an invalid length. [ 965.322161][T31972] fuse: Bad value for 'fd' [ 965.800492][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 965.800507][ T30] audit: type=1400 audit(1783087838.066:19249): avc: denied { read open } for pid=31970 comm="syz.6.9238" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 965.904677][ T30] audit: type=1400 audit(1783087838.112:19250): avc: denied { read write } for pid=28527 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 965.981922][T31979] FAULT_INJECTION: forcing a failure. [ 965.981922][T31979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.083050][ T30] audit: type=1400 audit(1783087838.121:19251): avc: denied { create } for pid=31970 comm="syz.6.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 966.113560][ T30] audit: type=1400 audit(1783087838.121:19252): avc: denied { read write open } for pid=28527 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 966.171211][T31979] CPU: 0 UID: 0 PID: 31979 Comm: syz.2.9241 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.171244][T31979] Tainted: [L]=SOFTLOCKUP [ 966.171251][T31979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 966.171262][T31979] Call Trace: [ 966.171269][T31979] [ 966.171276][T31979] dump_stack_lvl+0x100/0x190 [ 966.171303][T31979] should_fail_ex.cold+0x5/0xa [ 966.171327][T31979] _copy_to_user+0x32/0xd0 [ 966.171350][T31979] simple_read_from_buffer+0xcb/0x170 [ 966.171379][T31979] proc_fail_nth_read+0x1af/0x230 [ 966.171405][T31979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 966.171430][T31979] ? rw_verify_area+0xce/0x6d0 [ 966.171453][T31979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 966.171476][T31979] vfs_read+0x1e4/0xb40 [ 966.171504][T31979] ? __pfx_vfs_read+0x10/0x10 [ 966.171527][T31979] ? __fget_files+0x215/0x3d0 [ 966.171559][T31979] ? __fget_files+0x21f/0x3d0 [ 966.171593][T31979] ksys_read+0x12a/0x250 [ 966.171617][T31979] ? __pfx_ksys_read+0x10/0x10 [ 966.171662][T31979] do_syscall_64+0x115/0x870 [ 966.171689][T31979] ? clear_bhb_loop+0x40/0x90 [ 966.171712][T31979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.171731][T31979] RIP: 0033:0x7f199e95e68e [ 966.171747][T31979] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 966.171765][T31979] RSP: 002b:00007f199f925fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 966.171784][T31979] RAX: ffffffffffffffda RBX: 00007f199f9266c0 RCX: 00007f199e95e68e [ 966.171796][T31979] RDX: 000000000000000f RSI: 00007f199f9260a0 RDI: 0000000000000005 [ 966.171807][T31979] RBP: 00007f199f926090 R08: 0000000000000000 R09: 0000000000000000 [ 966.171818][T31979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.171828][T31979] R13: 00007f199ec26038 R14: 00007f199ec25fa0 R15: 00007ffeabe64888 [ 966.171854][T31979] [ 966.410394][ T30] audit: type=1400 audit(1783087838.121:19253): avc: denied { write } for pid=31970 comm="syz.6.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 966.431454][ T30] audit: type=1400 audit(1783087838.121:19254): avc: denied { ioctl } for pid=28527 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 966.457832][ T30] audit: type=1400 audit(1783087838.121:19255): avc: denied { read } for pid=31970 comm="syz.6.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 966.478373][ T30] audit: type=1400 audit(1783087838.121:19256): avc: denied { map_create } for pid=31970 comm="syz.6.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 966.502192][ T30] audit: type=1400 audit(1783087838.121:19257): avc: denied { prog_load } for pid=31970 comm="syz.6.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 966.522449][ T30] audit: type=1400 audit(1783087838.121:19258): avc: denied { bpf } for pid=31970 comm="syz.6.9238" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 966.632694][T31984] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9243'. [ 968.275683][T32020] FAULT_INJECTION: forcing a failure. [ 968.275683][T32020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.316812][T32020] CPU: 1 UID: 0 PID: 32020 Comm: syz.2.9252 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.316841][T32020] Tainted: [L]=SOFTLOCKUP [ 968.316848][T32020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 968.316857][T32020] Call Trace: [ 968.316864][T32020] [ 968.316871][T32020] dump_stack_lvl+0x100/0x190 [ 968.316896][T32020] should_fail_ex.cold+0x5/0xa [ 968.316918][T32020] _copy_to_user+0x32/0xd0 [ 968.316939][T32020] simple_read_from_buffer+0xcb/0x170 [ 968.316968][T32020] proc_fail_nth_read+0x1af/0x230 [ 968.316991][T32020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.317015][T32020] ? rw_verify_area+0xce/0x6d0 [ 968.317035][T32020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.317059][T32020] vfs_read+0x1e4/0xb40 [ 968.317090][T32020] ? __pfx_vfs_read+0x10/0x10 [ 968.317113][T32020] ? __fget_files+0x215/0x3d0 [ 968.317151][T32020] ? __fget_files+0x21f/0x3d0 [ 968.317185][T32020] ksys_read+0x12a/0x250 [ 968.317209][T32020] ? __pfx_ksys_read+0x10/0x10 [ 968.317241][T32020] do_syscall_64+0x115/0x870 [ 968.317265][T32020] ? clear_bhb_loop+0x40/0x90 [ 968.317288][T32020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.317306][T32020] RIP: 0033:0x7f199e95e68e [ 968.317322][T32020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 968.317339][T32020] RSP: 002b:00007f199f925fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 968.317357][T32020] RAX: ffffffffffffffda RBX: 00007f199f9266c0 RCX: 00007f199e95e68e [ 968.317368][T32020] RDX: 000000000000000f RSI: 00007f199f9260a0 RDI: 0000000000000005 [ 968.317379][T32020] RBP: 00007f199f926090 R08: 0000000000000000 R09: 0000000000000000 [ 968.317389][T32020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.317400][T32020] R13: 00007f199ec26038 R14: 00007f199ec25fa0 R15: 00007ffeabe64888 [ 968.317425][T32020] [ 968.763041][T20601] Bluetooth: hci2: Frame reassembly failed (-84) [ 968.938659][T32033] netlink: 'syz.1.9256': attribute type 1 has an invalid length. [ 968.960523][T32033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 969.000193][T32033] bond3: (slave veth0_to_bond): making interface the new active one [ 969.012615][T32033] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 969.078509][T32033] bond3: entered promiscuous mode [ 969.090004][T32033] veth0_to_bond: entered promiscuous mode [ 969.096724][T32033] bond3: entered allmulticast mode [ 969.101949][T32033] veth0_to_bond: entered allmulticast mode [ 969.131156][T32033] macvlan2: entered promiscuous mode [ 969.136589][T32033] macvlan2: entered allmulticast mode [ 969.167283][T32033] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 969.205268][T32033] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 969.767315][T27771] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 969.804218][T32057] fuse: Bad value for 'group_id' [ 969.809302][T32057] fuse: Bad value for 'group_id' [ 969.962452][T27771] usb 4-1: Using ep0 maxpacket: 16 [ 969.975324][T27771] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.996663][T27771] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.016306][T27771] usb 4-1: config 0 interface 0 has no altsetting 0 [ 970.034535][T27771] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 970.048727][T27771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.071163][T27771] usb 4-1: config 0 descriptor?? [ 970.563920][T27771] hid (null): unknown global tag 0xd [ 970.578543][T27771] hid (null): unknown global tag 0xd [ 970.664204][T27771] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 970.704752][T27771] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 970.731579][T27771] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 970.741221][T27771] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 970.748822][T27771] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 970.756379][T27771] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 970.765685][T27771] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 970.783381][T27771] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 970.909714][T27771] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 970.969616][ T5614] Bluetooth: hci2: command 0x1003 tx timeout [ 970.969887][T30977] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 971.041406][T27771] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 971.162770][T27771] cougar 0003:060B:500A.001C: unexpected long global item [ 971.230733][T27771] cougar 0003:060B:500A.001C: parse failed [ 971.275605][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 971.275629][ T30] audit: type=1400 audit(1783087843.125:19474): avc: denied { write } for pid=32046 comm="syz.3.9260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 971.308723][T27771] cougar 0003:060B:500A.001C: probe with driver cougar failed with error -22 [ 971.499573][T27771] hid-sensor-hub 0003:060B:500A.001C: unexpected long global item [ 971.532862][ T30] audit: type=1400 audit(1783087843.346:19475): avc: denied { open } for pid=32046 comm="syz.3.9260" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 971.568550][T27771] hid-sensor-hub 0003:060B:500A.001C: parse failed [ 971.579814][T32047] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 971.586350][T32047] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 971.616026][T27771] hid-sensor-hub 0003:060B:500A.001C: probe with driver hid-sensor-hub failed with error -22 [ 971.681110][ T30] audit: type=1400 audit(1783087843.365:19476): avc: denied { create } for pid=32046 comm="syz.3.9260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 971.716159][T32047] vhci_hcd vhci_hcd.0: Device attached [ 971.751939][ T30] audit: type=1400 audit(1783087843.429:19477): avc: denied { read write } for pid=22195 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 971.865862][T32069] vhci_hcd: connection closed [ 971.869115][T28806] vhci_hcd vhci_hcd.3: stop threads [ 971.869170][T27770] usb 4-1: USB disconnect, device number 80 [ 971.875113][T28806] vhci_hcd vhci_hcd.3: release socket [ 971.892578][T28806] vhci_hcd vhci_hcd.3: disconnect device [ 971.913423][T27771] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 971.930262][ T30] audit: type=1400 audit(1783087843.429:19478): avc: denied { open } for pid=22195 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 972.039882][ T30] audit: type=1400 audit(1783087843.429:19479): avc: denied { ioctl } for pid=22195 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 972.047646][T32085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9268'. [ 972.115614][ T30] audit: type=1400 audit(1783087843.485:19480): avc: denied { read write } for pid=28899 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 972.165969][ T30] audit: type=1400 audit(1783087843.485:19481): avc: denied { open } for pid=28899 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 972.203920][ T30] audit: type=1400 audit(1783087843.485:19482): avc: denied { ioctl } for pid=28899 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 972.218522][T32092] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9267'. [ 972.234157][ T30] audit: type=1400 audit(1783087843.503:19483): avc: denied { create } for pid=32071 comm="syz.2.9268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 972.432878][ T5727] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 972.607310][ T5727] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.639311][ T5727] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 972.659098][ T5727] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 972.681768][T32075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 972.682125][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.717707][ T5727] usb 7-1: Product: syz [ 972.722152][ T5727] usb 7-1: Manufacturer: syz [ 972.750684][ T5727] usb 7-1: SerialNumber: syz [ 972.886730][ T8324] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 973.060039][ T8324] usb 4-1: Using ep0 maxpacket: 16 [ 973.089736][ T8324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 973.114592][ T8324] usb 4-1: config 1 has an invalid interface number: 237 but max is 0 [ 973.124650][ T8324] usb 4-1: config 1 has no interface number 0 [ 973.131055][ T8324] usb 4-1: config 1 interface 237 has no altsetting 0 [ 973.143765][ T8324] usb 4-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 973.153498][ T8324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.162383][ T8324] usb 4-1: Product: syz [ 973.167110][ T8324] usb 4-1: Manufacturer: syz [ 973.172100][ T8324] usb 4-1: SerialNumber: syz [ 973.217746][T32087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.249765][T32087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.273251][ T5727] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 973.292044][ T5727] usb 7-1: USB disconnect, device number 63 [ 973.785836][T27760] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 973.948685][T27760] usb 7-1: Using ep0 maxpacket: 8 [ 973.962555][T27760] usb 7-1: config index 0 descriptor too short (expected 301, got 72) [ 973.972830][T27760] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 973.984909][T27760] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 973.995068][T27760] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 974.006355][T27760] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 974.017579][T32112] IPv6: addrconf: prefix option has invalid lifetime [ 974.025050][T27760] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 974.036156][T27760] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.050114][T27760] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 974.059490][T27760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.073914][T27760] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 974.315372][T27771] usb 7-1: USB disconnect, device number 64 [ 974.583054][T32116] FAULT_INJECTION: forcing a failure. [ 974.583054][T32116] name failslab, interval 1, probability 0, space 0, times 0 [ 974.597070][T32116] CPU: 1 UID: 0 PID: 32116 Comm: syz.5.9279 Tainted: G L syzkaller #0 PREEMPT(full) [ 974.597089][T32116] Tainted: [L]=SOFTLOCKUP [ 974.597093][T32116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 974.597100][T32116] Call Trace: [ 974.597104][T32116] [ 974.597109][T32116] dump_stack_lvl+0x100/0x190 [ 974.597135][T32116] should_fail_ex.cold+0x5/0xa [ 974.597156][T32116] should_failslab+0xc2/0x120 [ 974.597176][T32116] __kmalloc_flags_noprof+0x115/0x890 [ 974.597198][T32116] ? alloc_slab_obj_exts+0xb2/0x250 [ 974.597217][T32116] alloc_slab_obj_exts+0xb2/0x250 [ 974.597235][T32116] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 974.597255][T32116] ? kasan_save_track+0x14/0x30 [ 974.597272][T32116] kmem_cache_alloc_node_noprof+0x4fe/0x6b0 [ 974.597291][T32116] ? __alloc_skb+0x5b7/0x710 [ 974.597314][T32116] ? __alloc_skb+0x140/0x710 [ 974.597340][T32116] __alloc_skb+0x140/0x710 [ 974.597355][T32116] ? __alloc_skb+0x5b7/0x710 [ 974.597371][T32116] ? __pfx___alloc_skb+0x10/0x10 [ 974.597390][T32116] alloc_skb_with_frags+0xdd/0x760 [ 974.597403][T32116] ? find_held_lock+0x2b/0x80 [ 974.597427][T32116] sock_alloc_send_pskb+0x801/0x980 [ 974.597459][T32116] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 974.597481][T32116] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 974.597502][T32116] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 974.597527][T32116] ? kernel_text_address+0x8d/0x100 [ 974.597545][T32116] ? __kernel_text_address+0xd/0x30 [ 974.597571][T32116] unix_dgram_sendmsg+0x3c7/0x1810 [ 974.597602][T32116] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 974.597626][T32116] ? iovec_from_user+0xda/0x140 [ 974.597644][T32116] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 974.597661][T32116] ? __might_fault+0x80/0x140 [ 974.597682][T32116] ____sys_sendmsg+0xa4d/0xbe0 [ 974.597694][T32116] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 974.597711][T32116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.597741][T32116] ___sys_sendmsg+0x190/0x1e0 [ 974.597763][T32116] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.597781][T32116] ? __lock_acquire+0x49f/0x1a40 [ 974.597800][T32116] ? get_pid_task+0x106/0x250 [ 974.597830][T32116] __sys_sendmsg+0x160/0x210 [ 974.597847][T32116] ? __pfx___sys_sendmsg+0x10/0x10 [ 974.597877][T32116] do_syscall_64+0x115/0x870 [ 974.597900][T32116] ? clear_bhb_loop+0x40/0x90 [ 974.597919][T32116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.597936][T32116] RIP: 0033:0x7fa20679de59 [ 974.597951][T32116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.597967][T32116] RSP: 002b:00007fa2075bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.597985][T32116] RAX: ffffffffffffffda RBX: 00007fa206a25fa0 RCX: 00007fa20679de59 [ 974.597995][T32116] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 974.598005][T32116] RBP: 00007fa2075bc090 R08: 0000000000000000 R09: 0000000000000000 [ 974.598015][T32116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.598025][T32116] R13: 00007fa206a26038 R14: 00007fa206a25fa0 R15: 00007ffeeeb4de38 [ 974.598049][T32116] [ 975.099107][T32122] FAULT_INJECTION: forcing a failure. [ 975.099107][T32122] name failslab, interval 1, probability 0, space 0, times 0 [ 975.145940][T32122] CPU: 0 UID: 0 PID: 32122 Comm: syz.6.9282 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.145968][T32122] Tainted: [L]=SOFTLOCKUP [ 975.145974][T32122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 975.145984][T32122] Call Trace: [ 975.145990][T32122] [ 975.145997][T32122] dump_stack_lvl+0x100/0x190 [ 975.146023][T32122] should_fail_ex.cold+0x5/0xa [ 975.146044][T32122] should_failslab+0xc2/0x120 [ 975.146068][T32122] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 975.146086][T32122] ? __alloc_skb+0x5b7/0x710 [ 975.146111][T32122] ? __alloc_skb+0x140/0x710 [ 975.146139][T32122] __alloc_skb+0x140/0x710 [ 975.146163][T32122] ? __alloc_skb+0x5b7/0x710 [ 975.146187][T32122] ? __pfx___alloc_skb+0x10/0x10 [ 975.146219][T32122] netlink_alloc_large_skb+0x69/0x150 [ 975.146244][T32122] netlink_sendmsg+0x680/0xda0 [ 975.146272][T32122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.146292][T32122] ? __might_fault+0x80/0x140 [ 975.146327][T32122] ____sys_sendmsg+0xa4d/0xbe0 [ 975.146347][T32122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.146372][T32122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 975.146405][T32122] ___sys_sendmsg+0x190/0x1e0 [ 975.146429][T32122] ? __pfx____sys_sendmsg+0x10/0x10 [ 975.146450][T32122] ? __lock_acquire+0x49f/0x1a40 [ 975.146470][T32122] ? get_pid_task+0x106/0x250 [ 975.146522][T32122] __sys_sendmsg+0x160/0x210 [ 975.146551][T32122] ? __pfx___sys_sendmsg+0x10/0x10 [ 975.146592][T32122] do_syscall_64+0x115/0x870 [ 975.146615][T32122] ? clear_bhb_loop+0x40/0x90 [ 975.146637][T32122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.146655][T32122] RIP: 0033:0x7fecb299de59 [ 975.146670][T32122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.146693][T32122] RSP: 002b:00007fecb380d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.146710][T32122] RAX: ffffffffffffffda RBX: 00007fecb2c25fa0 RCX: 00007fecb299de59 [ 975.146722][T32122] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 975.146733][T32122] RBP: 00007fecb380d090 R08: 0000000000000000 R09: 0000000000000000 [ 975.146743][T32122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.146754][T32122] R13: 00007fecb2c26038 R14: 00007fecb2c25fa0 R15: 00007fff675d36c8 [ 975.146779][T32122] [ 975.429050][T32129] kvm: apic: phys broadcast and lowest prio [ 975.590777][T32137] FAULT_INJECTION: forcing a failure. [ 975.590777][T32137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.605945][T32137] CPU: 0 UID: 0 PID: 32137 Comm: syz.2.9289 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.605977][T32137] Tainted: [L]=SOFTLOCKUP [ 975.605984][T32137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 975.605993][T32137] Call Trace: [ 975.605999][T32137] [ 975.606006][T32137] dump_stack_lvl+0x100/0x190 [ 975.606032][T32137] should_fail_ex.cold+0x5/0xa [ 975.606054][T32137] _copy_from_user+0x2e/0xd0 [ 975.606074][T32137] arp_ioctl+0x184/0xcb0 [ 975.606103][T32137] ? __pfx_arp_ioctl+0x10/0x10 [ 975.606131][T32137] ? find_held_lock+0x2b/0x80 [ 975.606165][T32137] ? avc_has_extended_perms+0x484/0x1080 [ 975.606197][T32137] inet_ioctl+0x1a4/0x3f0 [ 975.606222][T32137] ? __pfx_inet_ioctl+0x10/0x10 [ 975.606260][T32137] ? tomoyo_path_number_perm+0x188/0x580 [ 975.606288][T32137] sock_do_ioctl+0x118/0x280 [ 975.606309][T32137] ? __pfx_sock_do_ioctl+0x10/0x10 [ 975.606335][T32137] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 975.606359][T32137] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 975.606387][T32137] sock_ioctl+0x599/0x6b0 [ 975.606410][T32137] ? __pfx_sock_ioctl+0x10/0x10 [ 975.606430][T32137] ? hook_file_ioctl_common+0x140/0x440 [ 975.606464][T32137] ? selinux_file_ioctl+0x13b/0x290 [ 975.606487][T32137] ? selinux_file_ioctl+0xb6/0x290 [ 975.606512][T32137] ? __pfx_sock_ioctl+0x10/0x10 [ 975.606535][T32137] __x64_sys_ioctl+0x18e/0x210 [ 975.606560][T32137] do_syscall_64+0x115/0x870 [ 975.606587][T32137] ? clear_bhb_loop+0x40/0x90 [ 975.606608][T32137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.606625][T32137] RIP: 0033:0x7f199e99de59 [ 975.606641][T32137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.606656][T32137] RSP: 002b:00007f199f926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 975.606673][T32137] RAX: ffffffffffffffda RBX: 00007f199ec25fa0 RCX: 00007f199e99de59 [ 975.606684][T32137] RDX: 0000200000000400 RSI: 0000000000008953 RDI: 0000000000000005 [ 975.606695][T32137] RBP: 00007f199f926090 R08: 0000000000000000 R09: 0000000000000000 [ 975.606706][T32137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.606716][T32137] R13: 00007f199ec26038 R14: 00007f199ec25fa0 R15: 00007ffeabe64888 [ 975.606741][T32137] [ 975.897635][ T8324] ipaq 4-1:1.237: PocketPC PDA converter detected [ 975.905679][ T8324] ipaq 4-1:1.237: probe with driver ipaq failed with error -71 [ 975.925138][ T8324] usb 4-1: USB disconnect, device number 81 [ 976.353720][T32148] geneve4: entered promiscuous mode [ 976.359124][T32148] geneve4: entered allmulticast mode [ 976.855240][ T30] kauditd_printk_skb: 316 callbacks suppressed [ 976.855260][ T30] audit: type=1400 audit(1783087848.248:19800): avc: denied { ioctl } for pid=32154 comm="syz.6.9294" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 976.896719][ T30] audit: type=1400 audit(1783087848.322:19801): avc: denied { ioctl } for pid=32154 comm="syz.6.9294" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 976.959649][ T8324] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 976.971991][ T30] audit: type=1400 audit(1783087848.378:19802): avc: denied { read write } for pid=28527 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 977.013115][ T30] audit: type=1400 audit(1783087848.378:19803): avc: denied { read write open } for pid=28527 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 977.066882][ T30] audit: type=1400 audit(1783087848.378:19804): avc: denied { ioctl } for pid=28527 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 977.097603][ T30] audit: type=1400 audit(1783087848.378:19805): avc: denied { ioctl } for pid=32154 comm="syz.6.9294" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 977.144678][ T8324] usb 7-1: Using ep0 maxpacket: 8 [ 977.183822][ T8324] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 977.193775][ T8324] usb 7-1: config 8 has no interface number 0 [ 977.213333][ T8324] usb 7-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 977.230324][ T30] audit: type=1400 audit(1783087848.452:19806): avc: denied { ioctl } for pid=32154 comm="syz.6.9294" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 977.257872][ T8324] usb 7-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 977.269521][ T30] audit: type=1400 audit(1783087848.461:19807): avc: denied { read write } for pid=32160 comm="syz.5.9296" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 977.299318][ T30] audit: type=1400 audit(1783087848.461:19808): avc: denied { open } for pid=32160 comm="syz.5.9296" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 977.323130][T27760] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 977.332663][ T8324] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 977.348937][ T8324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.357569][ T30] audit: type=1400 audit(1783087848.461:19809): avc: denied { ioctl } for pid=32160 comm="syz.5.9296" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 977.382851][ T8324] usb 7-1: Product: syz [ 977.387203][ T8324] usb 7-1: Manufacturer: syz [ 977.391856][ T8324] usb 7-1: SerialNumber: syz [ 977.451186][T32170] netlink: 'syz.1.9299': attribute type 2 has an invalid length. [ 977.459874][T32170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9299'. [ 977.506621][T27760] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 977.534480][T27760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 977.557524][T27760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 977.568201][T27760] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 977.581604][T27760] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 977.591084][T27760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.604079][T27760] usb 6-1: config 0 descriptor?? [ 977.672322][T32179] overlayfs: failed to clone lowerpath [ 977.704466][ T8324] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 977.716025][T32178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9303'. [ 977.734172][ T8324] usb 7-1: USB disconnect, device number 65 [ 977.852114][T32183] gfs2: error -5 reading superblock [ 978.264675][T27760] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 978.354024][T32178] nvme_fabrics: missing parameter 'transport=%s' [ 978.362615][T32178] nvme_fabrics: missing parameter 'nqn=%s' [ 978.557949][T32196] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 978.568720][T32196] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 979.169254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 980.018485][ T8324] usb 6-1: USB disconnect, device number 49 [ 980.636010][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 980.642919][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 980.679219][T32230] netlink: 'syz.5.9315': attribute type 1 has an invalid length. [ 980.713235][T32231] FAULT_INJECTION: forcing a failure. [ 980.713235][T32231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.727965][T32231] CPU: 0 UID: 0 PID: 32231 Comm: syz.3.9316 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.727994][T32231] Tainted: [L]=SOFTLOCKUP [ 980.728001][T32231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 980.728010][T32231] Call Trace: [ 980.728017][T32231] [ 980.728023][T32231] dump_stack_lvl+0x100/0x190 [ 980.728050][T32231] should_fail_ex.cold+0x5/0xa [ 980.728071][T32231] _copy_to_user+0x32/0xd0 [ 980.728092][T32231] simple_read_from_buffer+0xcb/0x170 [ 980.728123][T32231] proc_fail_nth_read+0x1af/0x230 [ 980.728148][T32231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.728173][T32231] ? rw_verify_area+0xce/0x6d0 [ 980.728194][T32231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.728218][T32231] vfs_read+0x1e4/0xb40 [ 980.728245][T32231] ? __pfx_vfs_read+0x10/0x10 [ 980.728267][T32231] ? __fget_files+0x215/0x3d0 [ 980.728299][T32231] ? __fget_files+0x21f/0x3d0 [ 980.728329][T32231] ksys_read+0x12a/0x250 [ 980.728350][T32231] ? __pfx_ksys_read+0x10/0x10 [ 980.728379][T32231] do_syscall_64+0x115/0x870 [ 980.728401][T32231] ? clear_bhb_loop+0x40/0x90 [ 980.728423][T32231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.728440][T32231] RIP: 0033:0x7fb83df5e68e [ 980.728456][T32231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 980.728471][T32231] RSP: 002b:00007fb83eeebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 980.728490][T32231] RAX: ffffffffffffffda RBX: 00007fb83eeec6c0 RCX: 00007fb83df5e68e [ 980.728502][T32231] RDX: 000000000000000f RSI: 00007fb83eeec0a0 RDI: 0000000000000005 [ 980.728514][T32231] RBP: 00007fb83eeec090 R08: 0000000000000000 R09: 0000000000000000 [ 980.728525][T32231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.728535][T32231] R13: 00007fb83e226038 R14: 00007fb83e225fa0 R15: 00007ffe174a5c18 [ 980.728561][T32231] [ 980.971690][T32227] overlayfs: failed to clone upperpath [ 980.986384][T32230] bond2: entered promiscuous mode [ 980.991645][T32230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 981.019179][T32230] FAULT_INJECTION: forcing a failure. [ 981.019179][T32230] name failslab, interval 1, probability 0, space 0, times 0 [ 981.066691][T32230] CPU: 1 UID: 0 PID: 32230 Comm: syz.5.9315 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.066721][T32230] Tainted: [L]=SOFTLOCKUP [ 981.066728][T32230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 981.066739][T32230] Call Trace: [ 981.066745][T32230] [ 981.066752][T32230] dump_stack_lvl+0x100/0x190 [ 981.066779][T32230] should_fail_ex.cold+0x5/0xa [ 981.066801][T32230] should_failslab+0xc2/0x120 [ 981.066822][T32230] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 981.066840][T32230] ? __alloc_skb+0x5b7/0x710 [ 981.066863][T32230] ? __alloc_skb+0x140/0x710 [ 981.066890][T32230] __alloc_skb+0x140/0x710 [ 981.066912][T32230] ? __alloc_skb+0x5b7/0x710 [ 981.066935][T32230] ? __pfx___alloc_skb+0x10/0x10 [ 981.066958][T32230] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 981.066988][T32230] netlink_alloc_large_skb+0x69/0x150 [ 981.067014][T32230] netlink_sendmsg+0x680/0xda0 [ 981.067045][T32230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.067066][T32230] ? __might_fault+0x80/0x140 [ 981.067101][T32230] ____sys_sendmsg+0xa4d/0xbe0 [ 981.067120][T32230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.067145][T32230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.067178][T32230] ___sys_sendmsg+0x190/0x1e0 [ 981.067202][T32230] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.067223][T32230] ? __lock_acquire+0x49f/0x1a40 [ 981.067244][T32230] ? get_pid_task+0x106/0x250 [ 981.067297][T32230] __sys_sendmsg+0x160/0x210 [ 981.067329][T32230] ? __pfx___sys_sendmsg+0x10/0x10 [ 981.067371][T32230] do_syscall_64+0x115/0x870 [ 981.067396][T32230] ? clear_bhb_loop+0x40/0x90 [ 981.067419][T32230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.067437][T32230] RIP: 0033:0x7fa20679de59 [ 981.067454][T32230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.067473][T32230] RSP: 002b:00007fa2075bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.067492][T32230] RAX: ffffffffffffffda RBX: 00007fa206a25fa0 RCX: 00007fa20679de59 [ 981.067504][T32230] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000004 [ 981.067515][T32230] RBP: 00007fa2075bc090 R08: 0000000000000000 R09: 0000000000000000 [ 981.067527][T32230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.067537][T32230] R13: 00007fa206a26038 R14: 00007fa206a25fa0 R15: 00007ffeeeb4de38 [ 981.067562][T32230] [ 981.723402][T32257] fuse: fd is not a fuse device [ 981.847982][T27771] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 982.028951][T27771] usb 4-1: Using ep0 maxpacket: 16 [ 982.035464][T27771] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 982.046848][T27771] usb 4-1: config 0 interface 0 has no altsetting 0 [ 982.056768][T27771] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 982.066635][T27771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.075102][T27771] usb 4-1: Product: syz [ 982.079280][T27771] usb 4-1: Manufacturer: syz [ 982.083944][T27771] usb 4-1: SerialNumber: syz [ 982.090522][T27771] usb 4-1: config 0 descriptor?? [ 982.137712][T27770] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 982.299972][ T30] kauditd_printk_skb: 292 callbacks suppressed [ 982.299989][ T30] audit: type=1400 audit(1783087853.308:20102): avc: denied { read write } for pid=32267 comm="syz.6.9332" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 982.330143][T27770] usb 3-1: Using ep0 maxpacket: 32 [ 982.337880][ T30] audit: type=1400 audit(1783087853.308:20103): avc: denied { open } for pid=32267 comm="syz.6.9332" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 982.380767][T27771] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 982.398055][ T30] audit: type=1400 audit(1783087853.308:20104): avc: denied { ioctl } for pid=32267 comm="syz.6.9332" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 982.430753][T27770] usb 3-1: unable to get BOS descriptor or descriptor too short [ 982.457324][ T30] audit: type=1400 audit(1783087853.335:20105): avc: denied { read write } for pid=32267 comm="syz.6.9332" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 982.484445][T27770] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 982.502985][T27770] usb 3-1: can't read configurations, error -71 [ 982.519694][ T30] audit: type=1400 audit(1783087853.335:20106): avc: denied { open } for pid=32267 comm="syz.6.9332" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 982.562730][ T30] audit: type=1400 audit(1783087853.335:20107): avc: denied { ioctl } for pid=32267 comm="syz.6.9332" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 982.598378][ T30] audit: type=1400 audit(1783087853.372:20108): avc: denied { ioctl } for pid=32243 comm="syz.3.9321" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 982.658524][ T30] audit: type=1400 audit(1783087853.381:20109): avc: denied { ioctl } for pid=32263 comm="syz.2.9330" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 982.691316][ T30] audit: type=1400 audit(1783087853.400:20110): avc: denied { create } for pid=32263 comm="syz.2.9330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 982.862340][ T30] audit: type=1400 audit(1783087853.400:20111): avc: denied { read write } for pid=28527 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 983.089754][T32275] syzkaller0: entered promiscuous mode [ 983.109525][T32275] syzkaller0: entered allmulticast mode [ 983.131243][T32275] tipc: Started in network mode [ 983.146402][T32275] tipc: Node identity f6b30dd938ed, cluster identity 4711 [ 983.170874][T32275] tipc: Enabled bearer , priority 0 [ 983.207967][T32277] tipc: Resetting bearer [ 983.254696][T32273] tipc: Resetting bearer [ 983.338038][T32273] tipc: Disabling bearer [ 983.538011][T30977] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 983.639196][T32297] comedi comedi2: comedi_config --init_data is deprecated [ 983.670433][T32297] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9340'. [ 983.686232][T27770] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 983.817899][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 983.830249][T27771] imon:send_packet: packet tx failed (-71) [ 983.848589][T27771] imon 4-1:0.0: panel buttons/knobs setup failed [ 984.267719][T27770] usb 3-1: device descriptor read/64, error -71 [ 984.498726][T27770] usb usb3-port1: attempt power cycle [ 984.520364][T27771] rc_core: IR keymap rc-imon-pad not found [ 984.531439][T27771] Registered IR keymap rc-empty [ 984.612832][T32307] fuse: Bad value for 'fd' [ 985.042889][T27771] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 985.079648][T27771] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 985.441618][T27770] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 985.460107][T27771] imon:send_packet: packet tx failed (-71) [ 985.485141][T27771] imon 4-1:0.0: remote input dev register failed [ 985.498937][T27770] usb 3-1: device descriptor read/8, error -71 [ 985.508302][T27771] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 985.639837][T27771] imon 4-1:0.0: unable to initialize intf0, err 0 [ 985.646361][T27771] imon:imon_probe: failed to initialize context! [ 985.653154][T27771] imon 4-1:0.0: unable to register, err -19 [ 985.664915][T27771] usb 4-1: USB disconnect, device number 82 [ 985.707443][T32320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9348'. [ 985.970435][T27770] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 986.835327][T27770] usb 3-1: device descriptor read/8, error -71 [ 986.959902][T27770] usb usb3-port1: unable to enumerate USB device [ 987.229423][T32334] block device autoloading is deprecated and will be removed. [ 987.339152][T27770] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 987.516771][T32359] netlink: 'syz.1.9360': attribute type 3 has an invalid length. [ 987.542587][T32362] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 987.548164][T27770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 987.575115][T27770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.607657][T27770] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 987.629013][T27770] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 987.646814][T27770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.658796][T27770] usb 3-1: config 0 descriptor?? [ 987.747912][ T30] kauditd_printk_skb: 336 callbacks suppressed [ 987.747928][ T30] audit: type=1400 audit(1783087858.330:20448): avc: denied { allowed } for pid=32366 comm="syz.5.9363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 987.817511][ T30] audit: type=1400 audit(1783087858.357:20449): avc: denied { create } for pid=32366 comm="syz.5.9363" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 987.862194][ T30] audit: type=1400 audit(1783087858.357:20450): avc: denied { create } for pid=32370 comm="syz.6.9364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 988.172135][ T30] audit: type=1400 audit(1783087858.357:20451): avc: denied { module_request } for pid=32370 comm="syz.6.9364" kmod="net-pf-10-proto-132-type-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 988.214258][T27768] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 988.739141][ T30] audit: type=1400 audit(1783087858.376:20452): avc: denied { module_request } for pid=32366 comm="syz.5.9363" kmod="net-pf-10-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 988.792460][T27768] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 988.806266][ T30] audit: type=1400 audit(1783087858.487:20453): avc: denied { read write } for pid=32366 comm="syz.5.9363" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 988.834143][ T30] audit: type=1400 audit(1783087858.487:20454): avc: denied { open } for pid=32366 comm="syz.5.9363" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 988.857874][ T30] audit: type=1400 audit(1783087858.496:20455): avc: denied { ioctl } for pid=32366 comm="syz.5.9363" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 988.883055][T27768] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.883074][ T30] audit: type=1400 audit(1783087858.561:20456): avc: denied { ioctl } for pid=32366 comm="syz.5.9363" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 988.937103][T27768] usb 6-1: Product: syz [ 988.973655][T27768] usb 6-1: Manufacturer: syz [ 989.001204][T27768] usb 6-1: SerialNumber: syz [ 989.513567][ T30] audit: type=1400 audit(1783087858.561:20457): avc: denied { ioctl } for pid=32366 comm="syz.5.9363" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 989.544432][T27768] usb 6-1: config 0 descriptor?? [ 989.654128][T32344] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9355'. [ 989.698759][T32344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9355'. [ 989.824820][T32367] fuse: Unknown parameter 'roo’mode' [ 989.856976][T27770] usbhid 3-1:0.0: can't add hid device: -71 [ 989.876246][T27770] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 989.914046][T27770] usb 3-1: USB disconnect, device number 75 [ 989.937105][T27768] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 989.984059][T27768] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 990.062021][T27768] usb 6-1: USB disconnect, device number 50 [ 990.111813][T32392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9368'. [ 990.184493][T32394] futex_wake_op: syz.1.9369 tries to shift op by 144; fix this program [ 990.890496][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 990.904731][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 990.913708][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 990.924264][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 990.952086][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 991.014232][T32409] [ 991.016583][T32409] ====================================================== [ 991.023591][T32409] WARNING: possible circular locking dependency detected [ 991.030599][T32409] syzkaller #0 Tainted: G L [ 991.036552][T32409] ------------------------------------------------------ [ 991.043546][T32409] syz.5.9374/32409 is trying to acquire lock: [ 991.049589][T32409] ffff88807b14f080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 991.058880][T32409] [ 991.058880][T32409] but task is already holding lock: [ 991.066223][T32409] ffff8880566b1060 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 991.074475][T32409] [ 991.074475][T32409] which lock already depends on the new lock. [ 991.074475][T32409] [ 991.084852][T32409] [ 991.084852][T32409] the existing dependency chain (in reverse order) is: [ 991.093841][T32409] [ 991.093841][T32409] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 991.101206][T32409] lock_acquire+0x1b9/0x370 [ 991.106219][T32409] __mutex_lock+0x1a4/0x1bd0 [ 991.111313][T32409] pipe_lock+0x69/0x80 [ 991.115886][T32409] iter_file_splice_write+0x1fd/0x10b0 [ 991.121845][T32409] backing_file_splice_write+0x27b/0x820 [ 991.127986][T32409] ovl_splice_write+0x328/0x610 [ 991.133349][T32409] do_splice+0x109c/0x1f90 [ 991.138264][T32409] __do_splice+0x33b/0x370 [ 991.143178][T32409] __x64_sys_splice+0x187/0x250 [ 991.148546][T32409] do_syscall_64+0x115/0x870 [ 991.153646][T32409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.160043][T32409] [ 991.160043][T32409] -> #2 (sb_writers#6){.+.+}-{0:0}: [ 991.167424][T32409] lock_acquire+0x1b9/0x370 [ 991.172446][T32409] mnt_want_write+0x6f/0x410 [ 991.177548][T32409] ovl_create_object+0x12b/0x3b0 [ 991.182990][T32409] path_openat+0x341f/0x4280 [ 991.188093][T32409] do_file_open+0x20e/0x430 [ 991.193105][T32409] do_sys_openat2+0x10f/0x1e0 [ 991.198288][T32409] __x64_sys_open+0xfe/0x1d0 [ 991.203378][T32409] do_syscall_64+0x115/0x870 [ 991.208477][T32409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.214869][T32409] [ 991.214869][T32409] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 991.223969][T32409] lock_acquire+0x1b9/0x370 [ 991.228974][T32409] down_read+0x99/0x4c0 [ 991.233638][T32409] lookup_slow+0x42/0x70 [ 991.238382][T32409] path_lookupat+0x5e8/0xc40 [ 991.243477][T32409] filename_lookup+0x202/0x590 [ 991.248746][T32409] kern_path+0x37/0x50 [ 991.253316][T32409] lookup_bdev+0xd8/0x280 [ 991.258144][T32409] resume_store+0x1d6/0x460 [ 991.263154][T32409] kobj_attr_store+0x58/0x80 [ 991.268250][T32409] sysfs_kf_write+0xf2/0x150 [ 991.273342][T32409] kernfs_fop_write_iter+0x3e0/0x5f0 [ 991.279145][T32409] vfs_write+0x6ac/0x1050 [ 991.283978][T32409] ksys_write+0x12a/0x250 [ 991.288810][T32409] do_syscall_64+0x115/0x870 [ 991.293903][T32409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.300308][T32409] [ 991.300308][T32409] -> #0 (&of->mutex){+.+.}-{4:4}: [ 991.307494][T32409] check_prev_add+0xeb/0xe60 [ 991.312596][T32409] __lock_acquire+0x136c/0x1a40 [ 991.317944][T32409] lock_acquire+0x1b9/0x370 [ 991.322947][T32409] __mutex_lock+0x1a4/0x1bd0 [ 991.328042][T32409] kernfs_fop_write_iter+0x2c2/0x5f0 [ 991.333827][T32409] iter_file_splice_write+0x830/0x10b0 [ 991.339784][T32409] do_splice+0x109c/0x1f90 [ 991.344969][T32409] __do_splice+0x33b/0x370 [ 991.349884][T32409] __x64_sys_splice+0x187/0x250 [ 991.355230][T32409] do_syscall_64+0x115/0x870 [ 991.360320][T32409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.366710][T32409] [ 991.366710][T32409] other info that might help us debug this: [ 991.366710][T32409] [ 991.376916][T32409] Chain exists of: [ 991.376916][T32409] &of->mutex --> sb_writers#6 --> &pipe->mutex [ 991.376916][T32409] [ 991.388974][T32409] Possible unsafe locking scenario: [ 991.388974][T32409] [ 991.396394][T32409] CPU0 CPU1 [ 991.401731][T32409] ---- ---- [ 991.407067][T32409] lock(&pipe->mutex); [ 991.411201][T32409] lock(sb_writers#6); [ 991.417857][T32409] lock(&pipe->mutex); [ 991.424507][T32409] lock(&of->mutex); [ 991.428466][T32409] [ 991.428466][T32409] *** DEADLOCK *** [ 991.428466][T32409] [ 991.436600][T32409] 2 locks held by syz.5.9374/32409: [ 991.441774][T32409] #0: ffff888035990450 (sb_writers#8){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 991.450802][T32409] #1: ffff8880566b1060 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 991.459480][T32409] [ 991.459480][T32409] stack backtrace: [ 991.465344][T32409] CPU: 1 UID: 0 PID: 32409 Comm: syz.5.9374 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.465365][T32409] Tainted: [L]=SOFTLOCKUP [ 991.465371][T32409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 991.465379][T32409] Call Trace: [ 991.465384][T32409] [ 991.465390][T32409] dump_stack_lvl+0x100/0x190 [ 991.465408][T32409] print_circular_bug.cold+0x178/0x1c7 [ 991.465430][T32409] check_noncircular+0x146/0x160 [ 991.465448][T32409] check_prev_add+0xeb/0xe60 [ 991.465468][T32409] __lock_acquire+0x136c/0x1a40 [ 991.465486][T32409] lock_acquire+0x1b9/0x370 [ 991.465499][T32409] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 991.465516][T32409] ? __pfx___might_resched+0x10/0x10 [ 991.465533][T32409] __mutex_lock+0x1a4/0x1bd0 [ 991.465553][T32409] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 991.465568][T32409] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 991.465583][T32409] ? __asan_memcpy+0x3c/0x60 [ 991.465605][T32409] ? __pfx___mutex_lock+0x10/0x10 [ 991.465624][T32409] ? __pfx__copy_from_iter+0x10/0x10 [ 991.465640][T32409] ? trace_kmalloc+0xeb/0x110 [ 991.465656][T32409] ? __kmalloc_noprof+0x343/0x820 [ 991.465669][T32409] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 991.465685][T32409] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 991.465700][T32409] kernfs_fop_write_iter+0x2c2/0x5f0 [ 991.465716][T32409] iter_file_splice_write+0x830/0x10b0 [ 991.465734][T32409] ? __pfx_iter_file_splice_write+0x10/0x10 [ 991.465749][T32409] ? find_held_lock+0x2b/0x80 [ 991.465774][T32409] ? __pfx_iter_file_splice_write+0x10/0x10 [ 991.465788][T32409] do_splice+0x109c/0x1f90 [ 991.465802][T32409] ? __lock_acquire+0x49f/0x1a40 [ 991.465816][T32409] ? __lock_acquire+0x49f/0x1a40 [ 991.465832][T32409] ? __pfx_do_splice+0x10/0x10 [ 991.465845][T32409] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 991.465867][T32409] ? find_held_lock+0x2b/0x80 [ 991.465887][T32409] __do_splice+0x33b/0x370 [ 991.465901][T32409] ? __pfx___do_splice+0x10/0x10 [ 991.465916][T32409] __x64_sys_splice+0x187/0x250 [ 991.465931][T32409] do_syscall_64+0x115/0x870 [ 991.465950][T32409] ? clear_bhb_loop+0x40/0x90 [ 991.465966][T32409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.465980][T32409] RIP: 0033:0x7fa20679de59 [ 991.465992][T32409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.466006][T32409] RSP: 002b:00007fa2049f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 991.466019][T32409] RAX: ffffffffffffffda RBX: 00007fa206a26180 RCX: 00007fa20679de59 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 991.466029][T32409] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 991.466038][T32409] RBP: 00007fa206833e6f R08: 000000000000bfd1 R09: 0000000000000000 [ 991.466046][T32409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.466055][T32409] R13: 00007fa206a26218 R14: 00007fa206a26180 R15: 00007ffeeeb4de38 [ 991.466069][T32409] [ 992.013251][T21686] bond0: (slave syz_tun): Releasing backup interface [ 992.212841][T20616] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.323133][T31058] bridge0: port 3(syz_tun) entered disabled state [ 992.344762][T31058] syz_tun (unregistering): left allmulticast mode [ 992.353832][T31058] syz_tun (unregistering): left promiscuous mode [ 992.373000][T31058] bridge0: port 3(syz_tun) entered disabled state [ 992.413671][T20616] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.491386][T20616] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.571893][T20616] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.699134][T20616] vlan1: left promiscuous mode [ 992.711366][T20616] dummy0: left promiscuous mode [ 992.716490][T20616] bridge0: port 3(vlan1) entered disabled state [ 992.725984][T20616] bridge_slave_1: left allmulticast mode [ 992.731742][T20616] bridge_slave_1: left promiscuous mode [ 992.737394][T20616] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.746194][T20616] bridge_slave_0: left allmulticast mode [ 992.753578][T20616] bridge_slave_0: left promiscuous mode [ 992.763024][T20616] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.060896][T20616] team0: Port device geneve1 removed [ 993.088705][T20616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.098134][T20616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.109031][T20616] bond0 (unregistering): Released all slaves [ 993.117679][T20616] bond1 (unregistering): Released all slaves [ 993.127697][T20616] bond2 (unregistering): Released all slaves [ 993.139084][T20616] bond3 (unregistering): Released all slaves [ 993.148982][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 993.173421][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 993.173435][ T30] audit: type=1400 audit(1783087863.343:20672): avc: denied { search } for pid=32431 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.214504][ T30] audit: type=1400 audit(1783087863.370:20673): avc: denied { search } for pid=32432 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.241970][ T30] audit: type=1400 audit(1783087863.370:20674): avc: denied { search } for pid=32432 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.286334][ T30] audit: type=1400 audit(1783087863.370:20675): avc: denied { search } for pid=32432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.323597][ T30] audit: type=1400 audit(1783087863.370:20676): avc: denied { search } for pid=32432 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.348044][ T30] audit: type=1400 audit(1783087863.370:20677): avc: denied { search } for pid=32433 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.371098][ T30] audit: type=1400 audit(1783087863.370:20678): avc: denied { search } for pid=32433 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.394560][ T30] audit: type=1400 audit(1783087863.370:20679): avc: denied { search } for pid=32433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.419613][ T30] audit: type=1400 audit(1783087863.370:20680): avc: denied { read } for pid=32433 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.443403][ T30] audit: type=1400 audit(1783087863.370:20681): avc: denied { read open } for pid=32433 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.526244][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 993.568056][T20616] hsr_slave_0: left promiscuous mode [ 993.574311][T20616] hsr_slave_1: left promiscuous mode [ 993.579967][T20616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.590733][T20616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.599511][T20616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.606990][T20616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.616939][T20616] veth1_macvtap: left promiscuous mode [ 993.622470][T20616] veth0_macvtap: left promiscuous mode [ 993.704879][T20616] team0 (unregistering): Port device team_slave_1 removed [ 993.722012][T20616] team0 (unregistering): Port device team_slave_0 removed [ 993.809063][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 994.011501][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 994.113585][T20616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.185214][T20616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.250444][T20616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.304150][T20616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.391897][T20616] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.474686][T20616] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.538877][T20616] bond0: (slave netdevsim1): Releasing backup interface [ 994.546993][T20616] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.588456][T20616] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.601118][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 994.668458][T20616] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.744195][T20616] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.783258][T20616] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.814960][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 994.825755][T20616] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.940784][T20616] bridge_slave_1: left allmulticast mode [ 994.954296][T20616] bridge_slave_1: left promiscuous mode [ 994.959980][T20616] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.969323][T20616] bridge_slave_0: left allmulticast mode [ 994.976617][T20616] bridge_slave_0: left promiscuous mode [ 994.982259][T20616] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.995183][T20616] dummy0: left allmulticast mode [ 995.000188][T20616] dummy0: left promiscuous mode [ 995.005163][T20616] bridge0: port 3(dummy0) entered disabled state [ 995.013364][T20616] bridge_slave_1: left allmulticast mode [ 995.019063][T20616] bridge_slave_1: left promiscuous mode [ 995.024693][T20616] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.042618][T20616] bridge_slave_0: left promiscuous mode [ 995.048286][T20616] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.111846][T20616] team0: Port device geneve1 removed [ 995.123587][T20616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.133325][T20616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.143051][T20616] bond0 (unregistering): Released all slaves [ 995.151088][T20616] bond1 (unregistering): Released all slaves [ 995.176693][T20616] team0: Port device geneve1 removed [ 995.186556][T20616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.196177][T20616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.205727][T20616] bond0 (unregistering): Released all slaves [ 995.213091][T20616] bond1 (unregistering): Released all slaves [ 995.221079][T20616] bond2 (unregistering): Released all slaves [ 995.230988][T20616] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 995.239670][T20616] veth0_to_bond: left promiscuous mode [ 995.245386][T20616] veth0_to_bond: left allmulticast mode [ 995.251539][T20616] bond3 (unregistering): Released all slaves [ 995.274682][T20616] bond0 (unregistering): Released all slaves [ 995.283527][T20616] bond1 (unregistering): (slave lo): Releasing backup interface [ 995.291467][T20616] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 995.302745][T20616] bond1 (unregistering): Released all slaves [ 995.311388][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 995.423230][T20616] IPVS: stopping master sync thread 30839 ... [ 995.589842][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 995.746946][T20616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.755977][T20616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.763510][T20616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.771179][T20616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.786387][T20616] hsr_slave_0: left promiscuous mode [ 995.792158][T20616] hsr_slave_1: left promiscuous mode [ 995.797807][T20616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.805180][T20616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.813235][T20616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.823308][T20616] hsr_slave_0: left promiscuous mode [ 995.828868][T20616] hsr_slave_1: left promiscuous mode [ 995.838509][T20616] veth1_macvtap: left promiscuous mode [ 995.846105][T20616] veth0_macvtap: left promiscuous mode [ 995.851754][T20616] veth1_vlan: left promiscuous mode [ 995.856962][T20616] veth0_vlan: left promiscuous mode [ 995.862976][T20616] veth1_macvtap: left promiscuous mode [ 995.868418][T20616] veth0_macvtap: left promiscuous mode [ 995.874085][T20616] veth1_vlan: left promiscuous mode [ 995.879307][T20616] veth0_vlan: left promiscuous mode [ 995.885004][T20616] veth1_macvtap: left promiscuous mode [ 995.890471][T20616] veth0_macvtap: left promiscuous mode [ 995.896112][T20616] veth1_vlan: left promiscuous mode [ 995.901325][T20616] veth0_vlan: left promiscuous mode [ 995.957995][T20616] team0 (unregistering): Port device vlan2 removed [ 996.006692][T20616] team0 (unregistering): Port device team_slave_1 removed [ 996.016266][T20616] team0 (unregistering): Port device team_slave_0 removed [ 996.083325][T20616] team0 (unregistering): Port device team_slave_1 removed [ 996.092939][T20616] team0 (unregistering): Port device team_slave_0 removed [ 996.189597][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 996.421116][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 996.672239][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 996.823106][T20616] IPVS: stop unused estimator thread 0... [ 996.895581][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 997.055563][ T5272] 8021q: adding VLAN 0 to HW filter on device eth21 [ 997.236345][ T5272] 8021q: adding VLAN 0 to HW filter on device eth22 [ 997.395752][ T5272] 8021q: adding VLAN 0 to HW filter on device eth23 [ 997.562607][ T5272] 8021q: adding VLAN 0 to HW filter on device eth24