last executing test programs: 11.10424651s ago: executing program 3 (id=369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x49, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x2, 0x0, 0xfffc, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote, 0x80}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2000}, {@multicast1}, {@local}, {@local}, {@multicast1}, {@loopback}]}]}}}}}}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000780)={0x2c, &(0x7f00000005c0)={0x20, 0x21, 0xdd, {0xdd, 0xd, "8458b4a32c2ca7f1770e2ca4f4b9303c18c814bc7f5b9a66e58c79a864b25b9a4fbe61f548076699cf92b40457f7bdaabfc303b6245d7db655b5b71e22b253dcdbf0e824b34ffcf3e10e3e4a2ac9ad356f546bd9080caa57c6ec88f1e50171efc8a8eb775a266f46505ba6c939065645a6f58655afd7d4ccec12c069256c7466451d04efb88a454f3c1e4839a3682744e97c9fe4e8cb20ac180200d1bd0acf67ce6af78f37616cadb1e312552121e579ff709219cf36f68b4e96b607babbea3bc90839bbefc30f1568b91021fd87099d7c6db89b15ab94f899e2d7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, &(0x7f00000006c0)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x3, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x15, 0x84, 0x2, 0xf06, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x2, 0x8}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x0, 0x6, "a9f240b7", "91281074"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x4, 0x2, 0xc, 0x6, 0xffb2, 0xfffc}}}, &(0x7f0000000c40)={0x84, &(0x7f00000007c0)={0x0, 0xa, 0xb9, "d54ace8da558fc23dec9c36880f5da288bd7a25d105e6c361383dfec0156c8a03c48a22471ab3d3005c0aa436a2597dab1243edaf381b25586a301649b2e555a45c0edb0696e1b474d4ad67a9c00ec75fd57fd9d2dc586f231031093925910104c0f70adc20809027bedd28fb9f3816e30e7816221be8850cb1ca127ab5bee58504570a87fbfdc770e13b353aece29b31f31990934bb44c9c95f53fbced4524d99a574d4719f060e76299b842648065e504d7e3ebe6944149f"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x2e}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0x200, 0x2, [0xfff]}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "f4b7"}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @random="54eacb52b44d"}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "33c3"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000b80)={0x40, 0x1c, 0x1}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0xe}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x201) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000a0b000/0x4000)=nil, 0x4000, 0x5, 0x10010, r4, 0x10000000) cachestat(r4, &(0x7f0000000040), &(0x7f000009de80), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x5, 0xff, 0x2}) 10.128605546s ago: executing program 4 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xdbaa2c84d9945a5a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1c, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r1], 0x0, 0xd9c9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x48042, 0x5f) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000900)={0x1, 0x1, &(0x7f0000000c00)=""/249, &(0x7f0000000880)=""/89, &(0x7f0000000800)=""/75, 0x80a0000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000ac0)={0x2, 0x0, [{0x1, 0xffb, &(0x7f0000001d80)=""/4091}, {0x0, 0x83, &(0x7f0000000a00)=""/131}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000380)={0x0, 0xba, 0x5}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = dup3(r3, r9, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 9.5536915s ago: executing program 2 (id=378): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffe", 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x9000000, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 9.236244129s ago: executing program 2 (id=379): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, r0}, 0x50) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x10601}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) 9.049465935s ago: executing program 4 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800682237b36630000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000063e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 8.568488174s ago: executing program 4 (id=381): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip_vs_stats_percpu\x00') sendmsg$sock(r6, &(0x7f0000000900)={&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x1, @local, 'netdevsim0\x00'}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000a00)="9c280a5aaca549d197b5b0c3131f84b54706d81179a41aafd6cf88bfddfd5d5d8cf44b6a565ccef21977e89eb700b23ec03c", 0x32}, {&(0x7f00000007c0)="7022e478f6ce4c35426d604272d37b6bc71528793d1732ea9896ef7c4aa6304b36ed3cfa494891bf97318cdce2a2", 0x2e}], 0x2, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xa3cc}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x78}, 0x40002) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x30000004}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc800, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.304855277s ago: executing program 2 (id=382): socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x48}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c0000000d0a010100000000000000000a0000010900020073797a31000100000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000845}, 0x8000) 7.682433782s ago: executing program 2 (id=383): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x600}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40080) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/82, 0xb000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 7.560785261s ago: executing program 1 (id=384): openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x188, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0x120, 0x188, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x3, 0x2, 0x4}, {{0x7}, 0x80}, {{}, 0x7}}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x50) r7 = socket(0x2b, 0x1, 0x0) bind$unix(r7, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, 0x0, 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x3, 0xde, 0xc, {0xc, 0x1, 0x0, 0x400, 0x0, 0x10000}, {0xd, 0x0, 0xb4, 0x7af1}, 0x401, 0xff, 0x5}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x94}}, 0x24040084) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7.052746093s ago: executing program 1 (id=386): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x844}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r7 = gettid() r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r8, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000055003d09000000f9b718810007000000", @ANYRES16, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES8], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x0) 6.849981867s ago: executing program 3 (id=387): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8000000000000001, 0xffffffffffffffff, 'id1\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x1, 0x5}) getpid() syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x14, 0x7f, 0xd4, 0x40, 0x8086, 0xb63, 0x3ee9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x0, 0x36, 0x22, 0x3b}}]}}]}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) gettid() 6.110527262s ago: executing program 4 (id=388): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000000)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0x1, @sdr={0x4f565559, 0x100}}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b2b, &(0x7f0000000100)={'wlan1\x00', @broadcast}) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sendmmsg$unix(r9, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 5.932194974s ago: executing program 1 (id=389): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x284942, 0x3a, 0x12}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1, 0x80000, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080)='ubifs\x00', 0x800004, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x4400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x109) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 5.637135609s ago: executing program 1 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000840)='./file0\x00', 0x150) copy_file_range(r2, 0x0, r1, 0x0, 0x6, 0x1000000) socket(0x400000000010, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0xffffffff, 0x6, 0x7, 0xfffffe0000000001, 0xfa11}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) mremap(&(0x7f00007e2000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00007e0000/0x4000)=nil) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x3ff) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0xdaf}}, './file0\x00'}) r9 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) 5.619650293s ago: executing program 2 (id=391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="50004b001000010400"/20, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=r2, @ANYRES16=0x0, @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 5.459778007s ago: executing program 2 (id=392): socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4ea4, 0x0, @empty, 0xd}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x2c}, 0x4c081) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f00006dbffc), 0x4) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, &(0x7f0000000040)=0x121) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000004400)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_CMDTEST(r6, 0x8050640a, &(0x7f00000000c0)={0x9, 0x0, 0xffffffff, 0x6, 0x100, 0xfd, 0x10, 0x0, 0xffffffff, 0xc190, 0x80, 0x8, 0x0, 0x0, 0x0}) 4.685882568s ago: executing program 0 (id=394): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000380)={0xf97cff8c, 0x8}, 0x10) 4.529743846s ago: executing program 4 (id=395): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x11, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x104, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$kvm(0xffffffffffffff9c, 0x0, 0x20280, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x0, 0x2, 0xfc}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000005340), &(0x7f00000053c0)=0x80) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x2e80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x200, @mcast2, 0x2}}}, 0x3a) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xa0000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0xb9, 0x2, 0xfffffffffffffffc}) 4.528173481s ago: executing program 0 (id=396): openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x188, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0x120, 0x188, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x3, 0x2, 0x4}, {{0x7}, 0x80}, {{}, 0x7}}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x50) r7 = socket(0x2b, 0x1, 0x0) bind$unix(r7, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, 0x0, 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x3, 0xde, 0xc, {0xc, 0x1, 0x0, 0x400, 0x0, 0x10000}, {0xd, 0x0, 0xb4, 0x7af1}, 0x401, 0xff, 0x5}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x94}}, 0x24040084) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4.472995494s ago: executing program 3 (id=397): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x2}, &(0x7f0000000100)=0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, &(0x7f00000001c0)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000003c0)={@val={0x0, 0x8848}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0x6}, {0xff}], @llc={@llc={0x0, 0x8e, "c6", "0cae94ede37518da673af88076604cbe85db3ce760edd8a8d16c0865d5d351f7d77fbc66e88425544dcd04002a2c63c9773bac9eac2b669230de6a5004c86588680d1c435cad59f1b00d79960bc9a13a1340f8e7bf6014d795f0ecbecc46ee9c98af7640f3f431e3d0236e927eaee6371b2b8a38aca83be162d55215e85d261202beceebd4cd3a2b97917e1516abe4d3c178305350ab65b443d7daf65e221bb46f5de95ca8e8cf3caff52b6af13aa92e59015501fbcfa08e307b57f55df303d4c45a3ebd9cc145a65f98e6e39588f82138f09dfde94dd355868594a5ca0ba1b4369c84124961be38b4f446b01cb0cb"}}}}}}}, 0x114) 3.94912829s ago: executing program 4 (id=398): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x28, 0x1b96, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x9, 0xd2, 0x1, {0x22, 0xb4b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x74, 0x62}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1f, 0xfe, 0x6}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0xe, 0x9, 0x2, 0x40}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x76, 0x1, 0x6a}]}, 0x9, [{0xab, &(0x7f0000000180)=@string={0xab, 0x3, "653c6e36cffe88b7faa6608b2f83d0651f722b8e9b3c3bd97e0bce9838ef223cdf438014a36f851a0094d158ac2da99d70f1be5af37073164c0b3f33271602b28bc96f528625437586d2258d65f5c1968f7ff030f1b6add8a76f9272a7fc9b2126209d4ff3bbb34594e10aa130c1b40fc42a83dd548b429036724592e9104bfeb3344caa2cfe82feb29e64554514f3304ad87d0eb0d908b4791c708644565d2111aab42093e9102630"}}, {0x47, &(0x7f0000000240)=@string={0x47, 0x3, "a2746aba6f7252dd6fb424517af11568639503d3a0f2b778a7a6d2b6cf370b95e9a9c56a31201edd66baef4e775ecad5c9edaf46dc7885cf07b357dfe9a6cf1f5f07b4b602"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x801}}, {0xfb, &(0x7f0000000300)=@string={0xfb, 0x3, "939b118d429db65170f9ddb778bab6e3b7dff8358674d8bd6879c206f110674e40a6c8b0668335ad13cd5ba0467a4e6038be5cc545c3f69a84323a5f4a5442a319a1326c05ec84f674955694d76215a2c8a2fac530462c0df10073e5611e07fc3e196aca7c240d8162ce0a699bc5f18d2f78005573e558780ee80cecc556009c634918156825ff8f234217400d9d989b31f9d89668f21d6b46dc3c0e502857c556f995f2eeac826116f87ec8e57ce022c3d3c66b278a48258eab14741451b099c6c06570b1c93c856846aba23cee316e328d31f511ed93dfc9f2d8a7c81de3127c83e221e1b2bf57ef4dc77925ec0846498912d45f468f725f"}}, {0x88, &(0x7f0000000400)=@string={0x88, 0x3, "d483078b121e0538dcbbd74836dead7dc7e61ebe5032be9ec77c3c4a32133fb2c3b9cd28134fbe9404dea44849a14aba036e3d07ed74e1e4c14abb334ec82182c3f148f3f614cf3c8ecbbe030e47491900dc64b808cdbb5aa4022ed6977b1092fc6b2c2ddf69fc0044b5c5eca7d47191a2d8615d8b95581761485be0dad801d3b413c90ebb81"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2414}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3409}}, {0xb8, &(0x7f0000000540)=@string={0xb8, 0x3, "c247e8ee1861e0ccae629bb61d185ce6798523e062303abe68103b8d797c44e9f363ba1b45fc6b228d1f15441365a98beae94e06557e169fb8f13425fe7c6de5c27ea03eeb15dd7c913cfc0d32d742c65c6030918cc70b696938ff6a4366675a34c7f5f3309f998fe87b08e02477f87145829157164b70fc99b0cfc2e62a7c2292f12475176e220e00024b4b47ad639292456fdc716b989397c0ff148fcd5cec4dc9ed66b4c9fd1312376ef1a223f8fca9f90664656f"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000c40)="bad330752181516b2b316f3a277f", 0xe, 0x2000041, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0xd8, 0x6, @link_local}, 0x14) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xb, 0x2, @SEQ_CONTROLLER=0x102, 0x2, 0xff, 0x8a}) 3.740556327s ago: executing program 3 (id=399): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010001008b6cfddbdf250900000005000500030000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000890) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) prctl$PR_GET_NO_NEW_PRIVS(0x27) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.656859978s ago: executing program 0 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x120, 0x130, 0x26010000, 0x0, 0x130, 0x210, 0x220, 0x220, 0x210, 0x225, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0xff, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000], 'ip6_vti0\x00', 'vxcan1\x00', {}, {0x589b843e1c2c028}, 0x2e, 0xd4, 0x6, 0xa}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x25e}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@state={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4, 0x2}}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) setrlimit(0xc, 0x0) 3.537098228s ago: executing program 1 (id=401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r2, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1ff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff090582020000000100090503"], 0x0) 2.776751024s ago: executing program 3 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) eventfd(0xffff) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x14, 0x30, 0x48b, 0x70bd26, 0x3ffffffc}, 0x14}}, 0x2000e994) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0x2841800, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d68aed7b2f592e4d60e09bb4e999d7eab3d8d0fc8a264426bf5fc23f80650a92017a4f6c850f89bfd11039f0fc6f80d98408d389e036ebb78683107000000000000004cf556afa6b108", @ANYRESHEX=r0, @ANYBLOB="2c63616368657461673d2b5d2b26272bd5002c646566636f6e746578743d73746166665f752c636f6e746578743d73797374656d5f752c00"]) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000140)='+]+&\'+\xd5\x00') sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="740471779fcf31053bdd22306709fe35", @ANYRES16=r7, @ANYBLOB="010028bd7000000000000100000014000200776730000000000000000000000000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x4c890) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000, 0xfffffffc}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.488705537s ago: executing program 0 (id=403): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x2}, &(0x7f0000000100)=0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, &(0x7f00000001c0)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000003c0)={@val={0x0, 0x8848}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0x6}, {0xff}], @llc={@llc={0x0, 0x8e, "c6", "0cae94ede37518da673af88076604cbe85db3ce760edd8a8d16c0865d5d351f7d77fbc66e88425544dcd04002a2c63c9773bac9eac2b669230de6a5004c86588680d1c435cad59f1b00d79960bc9a13a1340f8e7bf6014d795f0ecbecc46ee9c98af7640f3f431e3d0236e927eaee6371b2b8a38aca83be162d55215e85d261202beceebd4cd3a2b97917e1516abe4d3c178305350ab65b443d7daf65e221bb46f5de95ca8e8cf3caff52b6af13aa92e59015501fbcfa08e307b57f55df303d4c45a3ebd9cc145a65f98e6e39588f82138f09dfde94dd355868594a5ca0ba1b4369c84124961be38b4f446b01cb0cb"}}}}}}}, 0x114) 136.372946ms ago: executing program 0 (id=404): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000300000000000400000003080000100005000000c4ae02"], 0x24, 0x0) 55.376079ms ago: executing program 3 (id=405): mkdir(0x0, 0xa2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000040)={{@any, 0xf}, 0x0, 0x1, 0x9}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000140)={&(0x7f0000000780)=[0x447, 0x89b1, 0x9, 0x5, 0x7, 0x7, 0x5, 0x4, 0x990, 0x1000, 0x3, 0x8000, 0x7, 0x1, 0x0, 0x1, 0x46f4, 0x5, 0x5, 0x4, 0x5, 0x4b, 0x1, 0x1, 0xa6ff, 0xffffffff, 0x1ff, 0xcdf9, 0x9, 0x7, 0x2, 0x3, 0x1, 0x1, 0x3, 0x1000, 0xfffffffc, 0x7, 0xc96, 0xb92, 0x3, 0x9, 0x9, 0x5, 0x9, 0x2, 0x9, 0x9, 0x2, 0xcab, 0x7, 0xfffff111, 0x7, 0x9, 0x3ff, 0x2, 0x8001, 0x7, 0x8, 0x7, 0xb32, 0x3, 0x5, 0x0, 0x58b7, 0x2, 0x5, 0xe4, 0x5, 0x10000, 0xff, 0x0, 0x6, 0xbc4, 0x9, 0x2, 0x8000, 0x101, 0x8, 0xb714, 0x6, 0x8, 0x101, 0x92a, 0x4, 0x0, 0xfff, 0x32b, 0xfc1a, 0x9, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x5, 0x4000, 0x3, 0x7, 0x401, 0x4, 0x6, 0x8, 0x4, 0x38, 0x0, 0x4, 0xac0, 0xd3, 0xff, 0x0, 0xfff, 0x0, 0x2, 0x4f, 0x3, 0x3, 0x1, 0xffffffff, 0x6, 0x4, 0x755, 0x3, 0x40, 0x65f5, 0xfffff801, 0x4, 0x0, 0x3, 0xa, 0xd86, 0xffffffff, 0x7fffffff, 0xff, 0x0, 0xfffffffc, 0x3, 0x3, 0x8, 0x8, 0x8, 0x3d, 0x8, 0xf, 0x6, 0x7, 0xa1, 0x5, 0x5ef5, 0x5f0, 0x7, 0x6, 0x0, 0xe, 0x63, 0x0, 0x1, 0xa7, 0x3, 0x40, 0x2, 0x3, 0x1, 0xffff0001, 0x40800000, 0x95, 0x8000, 0x0, 0x4c0, 0x4, 0xdfd, 0x4, 0x5, 0x9, 0x51eb, 0x9, 0x7, 0x1e38, 0x8, 0xffff047c, 0xd, 0x0, 0x2, 0x7b, 0x6, 0xffff, 0x5, 0xfffffffe, 0x2, 0x9, 0x3d, 0x4, 0x8, 0xd, 0x7fffffff, 0x4, 0xffff, 0x22, 0x6, 0x8001, 0x6, 0x5, 0x0, 0x7, 0x400, 0x6, 0x5, 0x401, 0x8, 0x9, 0x7, 0x7, 0x9, 0x1, 0x9350, 0x66, 0x9, 0x4c3, 0x1, 0x2, 0x6, 0x5, 0x5, 0x4, 0x5, 0xffffffff, 0x174, 0x8e, 0x9, 0x9, 0x9fe3, 0xbc99, 0xcd3, 0xd700, 0x401, 0x7, 0x4, 0x9, 0xa, 0x101, 0x800, 0xfffffffc, 0x4f49, 0x2, 0x1, 0x6, 0x1, 0xb, 0x4, 0x5, 0x1000, 0x7, 0x400, 0x6, 0x100, 0x3ff, 0x0, 0x6, 0xffffffe6, 0x7, 0x7, 0x383, 0x40, 0x9, 0x6, 0x101, 0x9, 0x7, 0xf, 0x340000, 0x8c6, 0x62, 0x5483, 0x3, 0x5, 0x2, 0x9, 0x9, 0xfffffffc, 0x7fff, 0x0, 0x7, 0x5, 0xff, 0x4, 0x5, 0x2b, 0xb32d, 0xfffffdab, 0x8, 0x9, 0x80000000, 0xf, 0x0, 0x8, 0x8, 0x1, 0xe3, 0xbcf6, 0x7, 0x8b9, 0x6b6, 0x7, 0x5, 0x3, 0x6, 0x1, 0x4, 0x401, 0xa40, 0xb, 0xfffffc01, 0x6, 0x2, 0x80, 0x9, 0x5, 0x404, 0x3ff, 0x7fffffff, 0x4, 0x6, 0x80000000, 0xc58, 0xc, 0x3, 0x10000, 0x4, 0x2, 0x7, 0x2, 0x6, 0xffff, 0x7, 0x5, 0xd, 0x5, 0x379, 0x6e9f, 0xe0fa, 0x1000, 0x7, 0x5, 0x0, 0x4, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x3, 0xfffff100, 0x7, 0x80000000, 0x491, 0x3, 0xd, 0x4, 0x101, 0x1, 0x613d, 0x101, 0xd, 0x1, 0x3ff, 0x0, 0xc, 0xfffffffc, 0x4, 0x198, 0x61, 0x1, 0x5, 0x0, 0x9, 0xf911, 0xb, 0xffffffff, 0x6, 0x5, 0x8, 0x3, 0x4, 0xffffffb5, 0x91c9, 0x4, 0x1, 0x200, 0xff, 0x1, 0x7, 0x3ff, 0xcb2a, 0x8001, 0x3, 0x700000, 0x3, 0x8, 0x9, 0x7fffffff, 0x7d17, 0x400, 0x9, 0xfffffffa, 0x8, 0x9, 0x8, 0x2, 0x2, 0x5, 0x4, 0x595, 0x20000, 0x9, 0x6, 0xfffffffd, 0x6, 0x5, 0x8, 0xc1d, 0x3, 0x3000, 0x7, 0xffffffff, 0x1, 0x30000000, 0xfffffff3, 0x7, 0x804, 0x10000, 0xfffffffd, 0xfffff816, 0x401, 0x5, 0x3, 0x388, 0x2, 0x7, 0x1, 0xf, 0x0, 0x7, 0x4, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0x9, 0x9, 0x9, 0x747, 0xffffff65, 0x0, 0x8, 0x3, 0x2, 0x8, 0x1, 0xffffff11, 0x2, 0x1, 0x6, 0x9, 0x7ff, 0x2, 0x9, 0x4, 0x2, 0x8, 0x5, 0x2a8c, 0x3, 0x525d, 0x8, 0x4, 0x9, 0x2, 0xa, 0x2, 0x2, 0x15c, 0x1, 0xe34b, 0x7, 0x3, 0x150, 0x80000000, 0x101, 0x4, 0x0, 0x2c, 0xb, 0x4, 0x8, 0xfff, 0x56a, 0x4, 0xffffffff, 0xa4, 0x80000001, 0x8, 0x4, 0x1, 0x81, 0x7, 0x4, 0x1, 0x3, 0x1, 0x7, 0x0, 0x7, 0x100, 0x1, 0x4, 0xb, 0xf2, 0x0, 0x7, 0x80, 0xfffffff1, 0xfffff65b, 0x40, 0x400, 0x81, 0x5, 0x8000000, 0x3ff, 0x3ff, 0xe1, 0x7009, 0xfff, 0x0, 0xf0cf, 0xf8ab, 0x8, 0xb, 0x9, 0xfffffb54, 0x8, 0x8, 0x80000001, 0xfff, 0x7, 0x2, 0x7fffffff, 0xffffffff, 0x8, 0xfffffada, 0x40, 0x3, 0x5, 0x7, 0x7ff, 0x7ff, 0x5b5, 0x8, 0x1, 0x10000, 0x9, 0x3, 0x5, 0xfffffff8, 0x5, 0x3, 0x2, 0x3, 0x7, 0x5f3, 0x400, 0x1c00, 0x1, 0xfffffffb, 0x80200000, 0x9, 0x80, 0x3, 0x910, 0x8e8, 0x8, 0xf7b, 0x5, 0x79, 0x1, 0x7ff, 0x9, 0x8, 0x9, 0x10000401, 0x2, 0x7f, 0x2, 0x80000001, 0x1, 0x6, 0x200, 0xca, 0x2, 0x100, 0x9, 0x0, 0x9, 0x5c1fc33e, 0x4, 0x0, 0xe, 0x8, 0x80000001, 0x2a1, 0x0, 0x106, 0xfffffff9, 0x4, 0x6, 0x3, 0x0, 0x20003200, 0x5, 0x892, 0x80000001, 0x14, 0x4, 0x40, 0xffffffff, 0x9, 0x887, 0xffffffff, 0x1, 0x1, 0x8, 0x18b348da, 0x1, 0x8, 0x6, 0x1, 0x2, 0x9, 0x5f05d22c, 0x9, 0x0, 0x2, 0x6, 0x8fe, 0x7ff, 0x7, 0x843f, 0x2, 0x7, 0x8, 0x6, 0x8, 0x4, 0x6, 0x81, 0x7, 0x50000000, 0x6, 0x15, 0x8, 0xffd, 0x6, 0x10000, 0x3, 0x6, 0x749f4463, 0x4, 0x9, 0x2, 0x5, 0x4, 0xfffffffc, 0x5, 0x8, 0x2, 0x8, 0x7, 0x9, 0x8, 0x1, 0x8, 0x9, 0xfff, 0x1000, 0x8, 0x401, 0x1ecd, 0x4, 0x2, 0x3, 0x7b, 0x1, 0x4, 0x200, 0xff, 0x0, 0x3, 0x5, 0xa314, 0x3, 0x10001, 0x9, 0x3, 0x6, 0x7, 0x4, 0xbfb, 0x10000, 0x6, 0x6, 0x1ff, 0x3, 0x7, 0x0, 0x4, 0xff, 0x3, 0x80000000, 0x7, 0xff, 0xbe, 0x4, 0xfffffffe, 0xfffffffc, 0x9, 0x34, 0x3ff, 0x8, 0xe4, 0x8, 0x7, 0x10000, 0x0, 0x4, 0x3, 0x9, 0x7, 0x46, 0x9, 0xffff, 0x81, 0x7, 0x2, 0x0, 0x73d, 0xd485, 0xff, 0x9, 0x97, 0x9, 0x6, 0x2, 0xdc9, 0x5e9a, 0xffff, 0x2, 0x9, 0xfffffffd, 0x7, 0xf, 0xfff, 0x4, 0x8, 0x4, 0x3cb, 0x4, 0x418, 0x10000, 0x7, 0x3, 0xa, 0x3b, 0x6, 0x47a, 0x1, 0x7fffffff, 0x7, 0x40, 0x6, 0x81, 0x7, 0x1ff, 0x8, 0x10, 0x200, 0x80, 0x9c, 0xf, 0x6, 0x101, 0x3, 0x9, 0x6, 0x8, 0x7fff, 0x4, 0x8, 0x1, 0xffff7fff, 0x2001, 0x3, 0x8, 0xb2, 0x8, 0x2, 0x7, 0x2, 0x5, 0x166, 0x3, 0xe14a, 0x7, 0x4, 0x8, 0x7, 0x9, 0xffffffff, 0x6, 0x8, 0x2, 0xb6, 0x53c, 0x5, 0x5, 0xfffffff6, 0x3, 0x5, 0x8, 0x5, 0x1, 0x9, 0xffffff7f, 0x80000001, 0x5, 0x9, 0x2, 0x0, 0x9, 0x5, 0x4, 0xe4, 0x1, 0x0, 0x5, 0x0, 0xe7d7, 0x7f, 0x101, 0x10000, 0x5, 0xffffffff, 0x9, 0x8, 0xe44e, 0x2, 0x80000000, 0x4, 0x2, 0x1c0460d3, 0xfffffffe, 0x800, 0x8001, 0xfffffffd, 0x2, 0x9, 0xfffffff9, 0xa190, 0x81, 0x2, 0x8, 0x0, 0x86, 0x7, 0xb90, 0xcf, 0xf8e4, 0x0, 0xd, 0x7, 0x100, 0x8000, 0x478, 0x6, 0x1, 0xb57, 0x5, 0x7, 0x9655, 0x2, 0x0, 0xfffff5d7, 0x3, 0x9, 0xa, 0x6, 0x9, 0xe, 0x4, 0x7, 0x8000, 0x3, 0x2, 0x6, 0x6, 0xae86, 0x4, 0x7, 0x401, 0x8, 0xffffffff, 0x60b, 0x3, 0x2, 0xb, 0x1, 0x2aa, 0xffffbeff, 0x18, 0x3a7, 0x100, 0x7, 0xfffffffa, 0x6, 0x1, 0x4, 0x0, 0x3, 0x9, 0x401, 0x8, 0xffffffe0, 0x7fffffff, 0x0, 0x100, 0x8, 0x101, 0x10001, 0xfffffffc, 0x8, 0x7, 0x10001, 0x5a1, 0x4, 0x1, 0x7, 0x8, 0x7f, 0x3, 0x7, 0x7, 0xc8, 0xfff, 0x149, 0x0, 0x0, 0x717e17b5, 0x2, 0x5da47ea8, 0x1, 0x400, 0x6, 0x7, 0x25, 0xd, 0x788f, 0x6, 0x7f, 0x71, 0x1, 0x0, 0x6ccb, 0x6, 0x5, 0x9, 0xfffffa99, 0x1000, 0xffffffff, 0xb4, 0x9900000, 0xd, 0xfffffffb, 0x7, 0xc, 0xf55, 0x6d14e279, 0x6, 0x200005, 0x1, 0x3, 0x152358f9, 0x6, 0xf43, 0x81, 0x9da1, 0x0, 0x6, 0x7f, 0x8, 0x6, 0xa1f, 0x80000001, 0xfffffff7, 0x4, 0xf77f, 0x5, 0x3, 0xc2a, 0xffffffff, 0x6, 0x80c, 0x2, 0x13c, 0xae, 0x2, 0x3, 0xfffffff8, 0x7, 0x3, 0xffffffff, 0x7, 0x5e9, 0x6, 0x1b04e], 0x6, 0x400, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) 806.167µs ago: executing program 1 (id=406): syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/195, 0xc3}, {&(0x7f00000017c0)=""/114, 0x72}], 0x2}}, {{0x0, 0x0, &(0x7f0000001e40)}}], 0x3, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}, 0xd0010100}], 0x400000000000181, 0x9200000000000000) 0s ago: executing program 0 (id=407): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0x8) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000001c0)={0x20, 0x3, &(0x7f00000000c0)="35eb4f230a228b4f26eacda920362267867cbf258c72b31670c537989e4466aad667d3e865df87b616f4b9be44334d7f7a959be3e8da2c846996b9cbe7ed7d012e674dc60fa4cbc41ee122ba53fbc2", 0x1000, 0xff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_io_uring_setup(0x82b, 0x0, 0x0, &(0x7f0000000180)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x440c0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mmap$KVM_VCPU(&(0x7f000056b000/0x3000)=nil, 0x0, 0xe13844a15f278a7a, 0x50, r0, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000240)="d807b8aedfe8190fdb9aa29dfa32ed52da64679fc6ae7899", 0x0, 0x18) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000940)={0x34, r8, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) kernel console output (not intermixed with test programs): idge0: port 2(bridge_slave_1) entered blocking state [ 76.721596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.731325][ T30] audit: type=1400 audit(1768311611.450:85): avc: denied { sys_module } for pid=5825 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.761750][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.790549][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.797724][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.834215][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.841375][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.900735][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.981585][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.001585][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.020347][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.027427][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.053638][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.060839][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.081330][ T52] Bluetooth: hci0: command tx timeout [ 77.104497][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.159541][ T5824] Bluetooth: hci1: command tx timeout [ 77.165075][ T5820] Bluetooth: hci2: command tx timeout [ 77.209060][ T5825] veth0_vlan: entered promiscuous mode [ 77.238892][ T5820] Bluetooth: hci3: command tx timeout [ 77.285930][ T5825] veth1_vlan: entered promiscuous mode [ 77.324888][ T5816] veth0_vlan: entered promiscuous mode [ 77.349850][ T5816] veth1_vlan: entered promiscuous mode [ 77.398570][ T5820] Bluetooth: hci4: command tx timeout [ 77.432794][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.441801][ T5816] veth0_macvtap: entered promiscuous mode [ 77.464217][ T5816] veth1_macvtap: entered promiscuous mode [ 77.471727][ T5825] veth0_macvtap: entered promiscuous mode [ 77.486603][ T5825] veth1_macvtap: entered promiscuous mode [ 77.516454][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.526514][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.560800][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.574474][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.587162][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.615765][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.625966][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.653079][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.664589][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.683125][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.713618][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.725606][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.754009][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.764130][ T5830] veth0_vlan: entered promiscuous mode [ 77.773882][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.834122][ T5830] veth1_vlan: entered promiscuous mode [ 77.903082][ T5823] veth0_vlan: entered promiscuous mode [ 77.912956][ T5817] veth0_vlan: entered promiscuous mode [ 77.930406][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.940265][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.953320][ T5817] veth1_vlan: entered promiscuous mode [ 77.984213][ T5823] veth1_vlan: entered promiscuous mode [ 77.989818][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.997678][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.037591][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.041293][ T5830] veth0_macvtap: entered promiscuous mode [ 78.051909][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.078346][ T30] audit: type=1400 audit(1768311612.790:86): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.U2hHjO/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 78.095614][ T5823] veth0_macvtap: entered promiscuous mode [ 78.113227][ T30] audit: type=1400 audit(1768311612.800:87): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.137346][ T30] audit: type=1400 audit(1768311612.800:88): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.U2hHjO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.169835][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.179840][ T30] audit: type=1400 audit(1768311612.800:89): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.185982][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.208499][ T5830] veth1_macvtap: entered promiscuous mode [ 78.218804][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.227574][ T30] audit: type=1400 audit(1768311612.800:90): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.U2hHjO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.229470][ T5823] veth1_macvtap: entered promiscuous mode [ 78.259924][ T30] audit: type=1400 audit(1768311612.800:91): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.U2hHjO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.287953][ T30] audit: type=1400 audit(1768311612.820:92): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.323366][ T30] audit: type=1400 audit(1768311612.840:93): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.357099][ T30] audit: type=1400 audit(1768311612.840:94): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="gadgetfs" ino=7128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.375941][ T5933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.386225][ T5817] veth0_macvtap: entered promiscuous mode [ 78.423301][ T5817] veth1_macvtap: entered promiscuous mode [ 78.451868][ T30] audit: type=1400 audit(1768311612.840:95): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.453388][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.514476][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.533892][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.551913][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.572248][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.587584][ T3014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.709910][ T3014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.730531][ T3014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.184766][ T3014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.195551][ T5820] Bluetooth: hci0: command tx timeout [ 79.215123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.238424][ T5820] Bluetooth: hci2: command tx timeout [ 79.238442][ T52] Bluetooth: hci1: command tx timeout [ 79.260021][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.282169][ T3014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.296896][ T3014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.319670][ T5820] Bluetooth: hci3: command tx timeout [ 79.367319][ T3014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.400833][ T3014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.471415][ T3014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.488316][ T5820] Bluetooth: hci4: command tx timeout [ 79.499003][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.535019][ T3014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.557537][ T3014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.583475][ T5943] mmap: syz.2.6 (5943) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.615412][ T3014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.752742][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.768174][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.780613][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.800866][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.818293][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.826658][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.931308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.033703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.158488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.184276][ T5941] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.241542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.299926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.308616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.341388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.452053][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 80.462104][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.472422][ T5947] gre1: entered promiscuous mode [ 80.618321][ T2901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.626580][ T2901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.753063][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.763805][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.850653][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.868847][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.893788][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.939174][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.955830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.964594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.069344][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.087965][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.209830][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 81.224728][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 81.242509][ T5820] Bluetooth: hci0: command tx timeout [ 81.301308][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 81.312239][ T5953] ceph: No mds server is up or the cluster is laggy [ 81.322063][ T5820] Bluetooth: hci2: command tx timeout [ 81.330793][ T5820] Bluetooth: hci1: command tx timeout [ 81.398713][ T5820] Bluetooth: hci3: command tx timeout [ 81.438487][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 81.566227][ T5820] Bluetooth: hci4: command tx timeout [ 81.856779][ T89] cfg80211: failed to load regulatory.db [ 81.862589][ T5868] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.891331][ T5961] libceph: connect (1)[c::]:6789 error -101 [ 81.898955][ T5961] libceph: mon0 (1)[c::]:6789 connect error [ 82.048510][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 82.066340][ T5868] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.111977][ T5868] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.145930][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.190958][ T5887] usb 1-1: USB disconnect, device number 2 [ 82.203451][ T5960] ip6tnl1: entered promiscuous mode [ 82.220561][ T5868] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 82.248208][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.474471][ T5971] ubi31: attaching mtd0 [ 82.899128][ T5971] ubi31: scanning is finished [ 82.904443][ T5971] ubi31: empty MTD device detected [ 82.997320][ T5868] usb 3-1: config 0 descriptor?? [ 83.102138][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 83.179425][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8'. [ 83.447095][ T30] audit: type=1400 audit(1768311617.830:143): avc: denied { read } for pid=5973 comm="syz.0.8" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 83.497583][ T5977] tipc: Started in network mode [ 83.506970][ T5977] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 83.520197][ T5971] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 83.527876][ T5971] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 83.535648][ T5971] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 83.542751][ T5971] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 83.550219][ T5971] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 83.557043][ T5971] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 83.566065][ T5971] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 601348626 [ 83.576077][ T5971] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 83.590026][ T1206] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.602009][ T30] audit: type=1400 audit(1768311617.830:144): avc: denied { open } for pid=5973 comm="syz.0.8" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 83.620305][ T5980] ubi31: background thread "ubi_bgt31d" started, PID 5980 [ 83.626685][ T30] audit: type=1400 audit(1768311617.990:145): avc: denied { create } for pid=5973 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.652799][ T5977] tipc: Enabled bearer , priority 10 [ 83.800669][ T1206] usb 4-1: config 0 has no interfaces? [ 83.809474][ T1206] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 83.841925][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.868456][ T89] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 83.909775][ T1206] usb 4-1: Product: syz [ 83.944476][ T1206] usb 4-1: Manufacturer: syz [ 83.964717][ T1206] usb 4-1: SerialNumber: syz [ 84.019852][ T1206] usb 4-1: config 0 descriptor?? [ 84.196622][ T89] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 84.230729][ T89] usb 2-1: config 0 has no interface number 0 [ 84.242406][ T89] usb 2-1: config 0 interface 41 has no altsetting 0 [ 84.333485][ T30] audit: type=1400 audit(1768311619.060:146): avc: denied { create } for pid=5965 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.397383][ T30] audit: type=1400 audit(1768311619.090:147): avc: denied { write } for pid=5965 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.418751][ T89] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 84.432170][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.456190][ T89] usb 2-1: Product: syz [ 84.467996][ T89] usb 2-1: Manufacturer: syz [ 84.512442][ T89] usb 2-1: SerialNumber: syz [ 84.537105][ T89] usb 2-1: config 0 descriptor?? [ 84.728285][ T5928] tipc: Node number set to 10005162 [ 84.936015][ T5868] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 84.957822][ T5868] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 84.992199][ T5868] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 84.992779][ T30] audit: type=1400 audit(1768311619.720:148): avc: denied { read write } for pid=5983 comm="syz.0.10" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.002963][ T5868] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 85.035803][ T5868] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 85.063543][ T30] audit: type=1400 audit(1768311619.720:149): avc: denied { open } for pid=5983 comm="syz.0.10" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.171429][ T5868] playstation 0003:054C:09CC.0001: hidraw0: USB HID v0.00 Device [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 85.269366][ T5868] playstation 0003:054C:09CC.0001: Failed to retrieve feature with reportID 18: -71 [ 85.279493][ T5868] playstation 0003:054C:09CC.0001: Failed to retrieve DualShock4 pairing info: -71 [ 85.358063][ T5868] playstation 0003:054C:09CC.0001: Failed to get MAC address from DualShock4 [ 85.482631][ T5868] playstation 0003:054C:09CC.0001: Failed to create dualshock4. [ 85.498791][ T24] usb 4-1: USB disconnect, device number 2 [ 85.517642][ T89] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 85.678949][ T5868] playstation 0003:054C:09CC.0001: probe with driver playstation failed with error -71 [ 86.139589][ T30] audit: type=1400 audit(1768311620.820:150): avc: denied { mounton } for pid=5991 comm="syz.2.11" path="/3/file1" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.436753][ T5868] usb 3-1: USB disconnect, device number 2 [ 86.498885][ T30] audit: type=1400 audit(1768311621.230:151): avc: denied { setopt } for pid=5995 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.573241][ T30] audit: type=1400 audit(1768311621.300:152): avc: denied { allowed } for pid=5997 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.768372][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.986130][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 88.003710][ T10] usb 5-1: config 0 has an invalid interface number: 62 but max is 0 [ 88.016894][ T10] usb 5-1: config 0 has no interface number 0 [ 88.027884][ T10] usb 5-1: config 0 interface 62 altsetting 255 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 88.063561][ T10] usb 5-1: config 0 interface 62 altsetting 255 bulk endpoint 0xF has invalid maxpacket 1024 [ 88.168283][ T89] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 88.179190][ T10] usb 5-1: config 0 interface 62 has no altsetting 0 [ 88.186001][ T89] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 88.198224][ T89] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 88.207712][ T10] usb 5-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=68.06 [ 88.224886][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.235440][ T89] usb 2-1: USB disconnect, device number 2 [ 88.271451][ T10] usb 5-1: Product: syz [ 88.275696][ T10] usb 5-1: Manufacturer: syz [ 88.304265][ T10] usb 5-1: SerialNumber: syz [ 88.495753][ T10] usb 5-1: config 0 descriptor?? [ 88.501863][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 88.527495][ T30] audit: type=1400 audit(1768311623.230:156): avc: denied { create } for pid=6010 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 88.846645][ T5996] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 88.879786][ T30] audit: type=1400 audit(1768311623.240:157): avc: denied { read } for pid=6010 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 88.922243][ T30] audit: type=1400 audit(1768311623.490:158): avc: denied { create } for pid=6014 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.981222][ T30] audit: type=1400 audit(1768311623.510:159): avc: denied { accept } for pid=6014 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.985599][ T6025] SELinux: policydb version 1075480522 does not match my version range 15-35 [ 89.014671][ T6025] SELinux: failed to load policy [ 89.024051][ T30] audit: type=1400 audit(1768311623.710:160): avc: denied { load_policy } for pid=6024 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.090703][ T10] ti_usb_3410_5052 5-1:0.62: TI USB 3410 1 port adapter converter detected [ 89.214357][ T30] audit: type=1400 audit(1768311623.940:161): avc: denied { bind } for pid=6026 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.237206][ T10] ti_usb_3410_5052 5-1:0.62: missing endpoints [ 89.263261][ T10] usb 5-1: USB disconnect, device number 2 [ 89.274890][ T6029] netlink: 240 bytes leftover after parsing attributes in process `syz.3.21'. [ 89.347454][ T30] audit: type=1400 audit(1768311624.000:162): avc: denied { read write } for pid=6026 comm="syz.3.21" name="video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 89.386482][ T30] audit: type=1400 audit(1768311624.000:163): avc: denied { open } for pid=6026 comm="syz.3.21" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 89.530668][ T30] audit: type=1400 audit(1768311624.000:164): avc: denied { create } for pid=6026 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.645849][ T30] audit: type=1400 audit(1768311624.000:165): avc: denied { write } for pid=6026 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.339020][ T5894] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.498357][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 90.505821][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.529395][ T5894] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.558278][ T5894] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.595357][ T5894] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 90.657765][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.664513][ T5894] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 90.717488][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.905607][ T5894] usb 2-1: config 0 descriptor?? [ 92.194854][ T5894] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 92.204882][ T5894] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 92.231070][ T5894] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 92.239229][ T5894] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 92.335713][ T6072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.34'. [ 92.386452][ T6072] tipc: Started in network mode [ 92.391613][ T6072] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 92.404458][ T6072] tipc: Enabled bearer , priority 10 [ 92.599880][ T5894] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 92.622444][ T5894] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 92.646875][ T5894] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 92.658493][ C1] hid-thrustmaster 0003:044F:B65D.0002: Unknown packet type 0x0, unable to proceed further with wheel init [ 92.789772][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 93.232534][ T6073] tipc: Started in network mode [ 93.237483][ T6073] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 93.245783][ T6073] tipc: Enabled bearer , priority 10 [ 93.518248][ T5945] tipc: Node number set to 10005162 [ 93.783331][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 93.783368][ T30] audit: type=1400 audit(1768311628.510:264): avc: denied { getopt } for pid=6077 comm="syz.0.36" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.012239][ T5931] usb 2-1: USB disconnect, device number 3 [ 94.248195][ T5931] tipc: Node number set to 10005162 [ 94.440686][ T6099] syz.4.41 uses obsolete (PF_INET,SOCK_PACKET) [ 94.460922][ T6099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.41'. [ 94.469770][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 94.521334][ T30] audit: type=1400 audit(1768311629.250:265): avc: denied { ioctl } for pid=6098 comm="syz.4.41" path="socket:[9991]" dev="sockfs" ino=9991 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.186836][ T6111] Cannot find set identified by id 3 to match [ 96.194570][ T30] audit: type=1400 audit(1768311630.920:266): avc: denied { bind } for pid=6110 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.236195][ T6111] Zero length message leads to an empty skb [ 96.245147][ T24] kernel write not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 96.298626][ T30] audit: type=1400 audit(1768311630.960:267): avc: denied { bind } for pid=6110 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.406788][ T30] audit: type=1400 audit(1768311631.130:268): avc: denied { write } for pid=6112 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.665457][ T30] audit: type=1400 audit(1768311631.250:269): avc: denied { mount } for pid=6114 comm="syz.3.44" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 96.700938][ T30] audit: type=1400 audit(1768311631.430:270): avc: denied { create } for pid=6114 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.992753][ T30] audit: type=1400 audit(1768311631.700:271): avc: denied { execute } for pid=6116 comm="syz.1.46" path="/8/cpu.stat" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.021490][ T30] audit: type=1400 audit(1768311631.740:272): avc: denied { name_bind } for pid=6114 comm="syz.3.44" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 97.067213][ T30] audit: type=1400 audit(1768311631.740:273): avc: denied { node_bind } for pid=6114 comm="syz.3.44" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 98.636274][ T6150] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 98.929396][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 98.929414][ T30] audit: type=1400 audit(1768311633.590:286): avc: denied { read } for pid=6133 comm="syz.3.50" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.127064][ T30] audit: type=1400 audit(1768311633.590:287): avc: denied { open } for pid=6133 comm="syz.3.50" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.228735][ T30] audit: type=1400 audit(1768311633.590:288): avc: denied { ioctl } for pid=6133 comm="syz.3.50" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.239622][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 99.327283][ T30] audit: type=1400 audit(1768311633.960:289): avc: denied { create } for pid=6166 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 99.329671][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 99.378866][ T30] audit: type=1400 audit(1768311633.960:290): avc: denied { write } for pid=6166 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 99.406506][ T6170] 9p: Bad value for 'wfdno' [ 99.440629][ T30] audit: type=1400 audit(1768311634.050:291): avc: denied { ioctl } for pid=6168 comm="syz.0.61" path="socket:[10401]" dev="sockfs" ino=10401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.485963][ T30] audit: type=1400 audit(1768311634.130:292): avc: denied { setopt } for pid=6168 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.519364][ T6161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.520271][ T30] audit: type=1400 audit(1768311634.140:293): avc: denied { create } for pid=6168 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.550749][ T30] audit: type=1400 audit(1768311634.140:294): avc: denied { write } for pid=6168 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.574204][ T30] audit: type=1400 audit(1768311634.160:295): avc: denied { create } for pid=6171 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.565383][ T6186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.323484][ T6204] netlink: 68 bytes leftover after parsing attributes in process `syz.4.68'. [ 102.327867][ T5945] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.352050][ T6225] warning: `syz.4.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.464084][ T6225] gfs2: error -5 reading superblock [ 102.489005][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 102.495896][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.511261][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.539087][ T5945] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 102.613844][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.832992][ T5945] usb 3-1: config 0 descriptor?? [ 103.103202][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.123951][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.051700][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 104.051718][ T30] audit: type=1326 audit(1768311638.780:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.80" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0be618f749 code=0x0 [ 104.797904][ T6254] ubi: mtd0 is already attached to ubi31 [ 104.808428][ T30] audit: type=1400 audit(1768311639.540:318): avc: denied { setopt } for pid=6248 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.076244][ T5945] usbhid 3-1:0.0: can't add hid device: -71 [ 105.132826][ T5945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 105.306960][ T5961] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.554884][ T5945] usb 3-1: USB disconnect, device number 3 [ 105.603255][ T30] audit: type=1400 audit(1768311640.320:319): avc: denied { ioctl } for pid=6267 comm="syz.0.86" path="socket:[11365]" dev="sockfs" ino=11365 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.670239][ T30] audit: type=1400 audit(1768311640.320:320): avc: denied { bind } for pid=6267 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.709572][ T5961] usb 4-1: config 0 has no interfaces? [ 105.718394][ T5961] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 105.727919][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.738759][ T5961] usb 4-1: Product: syz [ 105.742958][ T5961] usb 4-1: Manufacturer: syz [ 105.757607][ T5961] usb 4-1: SerialNumber: syz [ 105.866019][ T5961] usb 4-1: config 0 descriptor?? [ 105.960902][ T6276] ubi: mtd0 is already attached to ubi31 [ 106.430601][ T5894] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.364824][ T5894] usb 3-1: config 0 has no interfaces? [ 107.369336][ T5894] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 107.369365][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.369382][ T5894] usb 3-1: Product: syz [ 107.369395][ T5894] usb 3-1: Manufacturer: syz [ 107.369408][ T5894] usb 3-1: SerialNumber: syz [ 107.373832][ T5894] usb 3-1: config 0 descriptor?? [ 107.378738][ T30] audit: type=1400 audit(1768311642.070:321): avc: denied { setopt } for pid=6281 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.443042][ T5961] usb 4-1: USB disconnect, device number 3 [ 107.466698][ T30] audit: type=1400 audit(1768311642.190:322): avc: denied { append } for pid=6290 comm="syz.0.91" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.082548][ T6302] fuse: Unknown parameter '' [ 108.135773][ T3468] Bluetooth: (null): Invalid header checksum [ 108.178441][ T30] audit: type=1400 audit(1768311642.810:323): avc: denied { mounton } for pid=6296 comm="syz.0.92" path="/20/file0" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.309811][ T3468] Bluetooth: (null): Invalid header checksum [ 108.370119][ T3468] Bluetooth: (null): Invalid header checksum [ 108.391841][ T6300] nft_compat: unsupported protocol 249 [ 108.416841][ T6307] gfs2: error -5 reading superblock [ 108.424690][ T4030] Bluetooth: (null): Invalid header checksum [ 108.447819][ T30] audit: type=1400 audit(1768311643.170:324): avc: denied { bind } for pid=6308 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.528669][ T3941] Bluetooth: (null): Invalid header checksum [ 108.560826][ T30] audit: type=1400 audit(1768311643.290:325): avc: denied { read } for pid=6310 comm="syz.1.97" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.592274][ T6311] binder: BINDER_SET_CONTEXT_MGR already set [ 108.673813][ T6311] binder: 6310:6311 ioctl 4018620d 200000000040 returned -16 [ 108.682187][ T30] audit: type=1400 audit(1768311643.310:326): avc: denied { open } for pid=6310 comm="syz.1.97" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.775709][ T1206] usb 3-1: USB disconnect, device number 4 [ 109.346277][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 109.346292][ T30] audit: type=1326 audit(1768311644.070:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.4.105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee09b8f749 code=0x0 [ 109.912293][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.106'. [ 109.955821][ T6341] tipc: Enabling of bearer rejected, already enabled [ 110.003938][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.487844][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.565335][ T6343] gfs2: error -5 reading superblock [ 110.578432][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.621860][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.654841][ T30] audit: type=1400 audit(1768311645.370:335): avc: denied { read } for pid=6344 comm="syz.2.107" lport=35595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.679619][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.929170][ T6330] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.995551][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.036573][ T30] audit: type=1400 audit(1768311645.760:336): avc: denied { setopt } for pid=6348 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.192231][ T30] audit: type=1400 audit(1768311645.920:337): avc: denied { mount } for pid=6352 comm="syz.2.111" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 111.441267][ T6366] syz.3.110 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.509812][ T6369] ªªªªªª: renamed from lo (while UP) [ 111.730417][ T30] audit: type=1326 audit(1768311646.460:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="syz.4.113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee09b8f749 code=0x0 [ 111.757506][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 111.948266][ T30] audit: type=1400 audit(1768311646.630:339): avc: denied { getopt } for pid=6368 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.996373][ T30] audit: type=1400 audit(1768311646.630:340): avc: denied { call } for pid=6368 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 112.017902][ T30] audit: type=1400 audit(1768311646.630:341): avc: denied { transfer } for pid=6368 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 112.050370][ T30] audit: type=1400 audit(1768311646.720:342): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 112.178166][ T5931] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 112.381298][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 112.393806][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.408209][ T89] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.428854][ T6380] ubi: mtd0 is already attached to ubi31 [ 112.464439][ T5931] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 112.478041][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.493834][ T5931] usb 5-1: Product: syz [ 112.504878][ T5931] usb 5-1: Manufacturer: syz [ 112.514043][ T5931] usb 5-1: SerialNumber: syz [ 112.530344][ T5931] usb 5-1: config 0 descriptor?? [ 112.541915][ T6376] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.555098][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 112.564716][ T5931] port100 5-1:0.0: NFC: Could not get supported command types [ 112.565217][ T89] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 112.588148][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.607537][ T89] usb 3-1: Product: syz [ 112.617681][ T89] usb 3-1: Manufacturer: syz [ 112.626519][ T89] usb 3-1: SerialNumber: syz [ 112.646052][ T89] usb 3-1: config 0 descriptor?? [ 112.668244][ T5945] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.820743][ T5945] usb 1-1: config 0 has no interfaces? [ 112.829867][ T5945] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 112.846124][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.856767][ T5945] usb 1-1: Product: syz [ 112.866973][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.875501][ T5945] usb 1-1: Manufacturer: syz [ 112.880479][ T5945] usb 1-1: SerialNumber: syz [ 112.898867][ T5945] usb 1-1: config 0 descriptor?? [ 112.912872][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.979909][ T89] usb 3-1: selecting invalid altsetting 1 [ 112.986853][ T89] comedi comedi5: could not switch to alternate setting 1 [ 112.995902][ T89] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 113.046596][ T89] usb 3-1: USB disconnect, device number 5 [ 113.081910][ T5931] usb 2-1: USB disconnect, device number 4 [ 113.635317][ T6393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.118'. [ 113.650725][ T6393] overlayfs: missing 'lowerdir' [ 113.978804][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'. [ 113.982690][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 114.023656][ T6397] ======================================================= [ 114.023656][ T6397] WARNING: The mand mount option has been deprecated and [ 114.023656][ T6397] and is ignored by this kernel. Remove the mand [ 114.023656][ T6397] option from the mount to silence this warning. [ 114.023656][ T6397] ======================================================= [ 114.128282][ T5931] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.170776][ T30] audit: type=1400 audit(1768311648.900:343): avc: denied { getopt } for pid=6402 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.299186][ T6407] netlink: 60 bytes leftover after parsing attributes in process `syz.3.122'. [ 114.311296][ T6407] netlink: 60 bytes leftover after parsing attributes in process `syz.3.122'. [ 114.329861][ T5931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.446602][ T5931] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.460288][ T30] audit: type=1400 audit(1768311649.070:344): avc: denied { read } for pid=6402 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.482755][ T5931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.492925][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.501410][ T5931] usb 2-1: Product: syz [ 114.506019][ T5931] usb 2-1: Manufacturer: syz [ 114.544850][ T5931] usb 2-1: SerialNumber: syz [ 114.566270][ T5931] usb 2-1: bad CDC descriptors [ 114.578183][ T89] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.603034][ T5945] usb 5-1: USB disconnect, device number 3 [ 114.728356][ T89] usb 3-1: Using ep0 maxpacket: 16 [ 114.734921][ T89] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 114.744207][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.763174][ T89] usb 3-1: config 0 descriptor?? [ 114.806102][ T89] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 114.859880][ T5931] usb 2-1: USB disconnect, device number 5 [ 115.187577][ T5945] usb 1-1: USB disconnect, device number 3 [ 115.530461][ T30] audit: type=1400 audit(1768311650.260:345): avc: denied { mount } for pid=6417 comm="syz.3.127" name="/" dev="pstore" ino=3446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 115.671477][ T5945] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.838256][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 115.868742][ T5945] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.965659][ T5945] usb 1-1: config 0 has no interface number 0 [ 116.091487][ T5945] usb 1-1: config 0 interface 184 has no altsetting 0 [ 116.159473][ T5945] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 116.168817][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.178345][ T5945] usb 1-1: Product: syz [ 116.184247][ T5945] usb 1-1: Manufacturer: syz [ 116.188993][ T5945] usb 1-1: SerialNumber: syz [ 116.201698][ T30] audit: type=1400 audit(1768311650.930:346): avc: denied { setopt } for pid=6428 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.222099][ T5945] usb 1-1: config 0 descriptor?? [ 116.232063][ T5945] smsc75xx v1.0.0 [ 116.469387][ T5945] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 116.480564][ T5945] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 116.492754][ T5945] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 116.507614][ T5945] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 116.517722][ T5945] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 116.557173][ T5945] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 116.592957][ T5945] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 116.659361][ T5945] usb 1-1: USB disconnect, device number 4 [ 117.008158][ T89] gspca_sonixj: i2c_w8 err -110 [ 117.028391][ T89] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 117.217126][ T6458] ubi: mtd0 is already attached to ubi31 [ 117.278553][ T5931] usb 3-1: USB disconnect, device number 6 [ 117.450215][ T5945] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.506996][ T5894] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.681028][ T5894] usb 5-1: config 0 has no interfaces? [ 117.698509][ T5894] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 117.716637][ T5945] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.731885][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.758447][ T5945] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.771188][ T5894] usb 5-1: Product: syz [ 117.783857][ T5894] usb 5-1: Manufacturer: syz [ 117.793026][ T5894] usb 5-1: SerialNumber: syz [ 117.800447][ T5945] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.817470][ T5894] usb 5-1: config 0 descriptor?? [ 117.828678][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.888119][ T6459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.927004][ T5945] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.879392][ T30] audit: type=1400 audit(1768311653.610:347): avc: denied { create } for pid=6475 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 118.941139][ T30] audit: type=1400 audit(1768311653.660:348): avc: denied { sys_admin } for pid=6475 comm="syz.3.141" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 119.301626][ T30] audit: type=1400 audit(1768311654.020:349): avc: denied { name_bind } for pid=6479 comm="syz.2.142" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 119.624389][ T30] audit: type=1400 audit(1768311654.020:350): avc: denied { write } for pid=6479 comm="syz.2.142" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.755324][ T5931] usb 1-1: USB disconnect, device number 5 [ 119.772964][ T30] audit: type=1400 audit(1768311654.490:351): avc: denied { setattr } for pid=6462 comm="syz.1.137" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 119.885314][ T30] audit: type=1400 audit(1768311654.590:352): avc: denied { create } for pid=6484 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 120.144556][ T30] audit: type=1400 audit(1768311654.730:353): avc: denied { write } for pid=6486 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.358934][ T6495] netlink: 48 bytes leftover after parsing attributes in process `syz.1.145'. [ 120.463443][ T89] usb 5-1: USB disconnect, device number 4 [ 120.613606][ T6492] sit1: entered promiscuous mode [ 120.746810][ T30] audit: type=1400 audit(1768311655.470:354): avc: denied { ioctl } for pid=6491 comm="syz.2.146" path="socket:[12315]" dev="sockfs" ino=12315 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.792217][ T6503] binder: BINDER_SET_CONTEXT_MGR already set [ 120.812763][ T6503] binder: 6489:6503 ioctl 4018620d 2000000002c0 returned -16 [ 121.013552][ T30] audit: type=1400 audit(1768311655.740:355): avc: denied { write } for pid=6507 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.140888][ T6509] tipc: Started in network mode [ 121.146434][ T6509] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 121.158478][ T6509] tipc: Enabled bearer , priority 10 [ 121.775231][ T5945] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.898850][ T30] audit: type=1400 audit(1768311656.630:356): avc: denied { getopt } for pid=6523 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.943000][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 121.954875][ T5945] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 121.975574][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 122.000146][ T30] audit: type=1400 audit(1768311656.730:357): avc: denied { setopt } for pid=6523 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.022905][ T5820] Bluetooth: hci4: Malformed LE Event: 0x1b [ 122.028283][ T89] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 122.037582][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 122.233644][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.282477][ T5945] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 122.387379][ T30] audit: type=1400 audit(1768311656.730:358): avc: denied { setopt } for pid=6523 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.419692][ T89] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 122.431664][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.441449][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.450508][ T5945] usb 3-1: Product: syz [ 122.454681][ T5945] usb 3-1: Manufacturer: syz [ 122.484624][ T5945] usb 3-1: SerialNumber: syz [ 122.500272][ T89] usb 5-1: config 0 descriptor?? [ 122.505921][ T5868] tipc: Node number set to 10005162 [ 122.524503][ T5945] usb 3-1: config 0 descriptor?? [ 122.559558][ T5928] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.706704][ T6534] netlink: 256 bytes leftover after parsing attributes in process `syz.1.157'. [ 122.716852][ T5928] usb 1-1: device descriptor read/64, error -71 [ 122.732920][ T6534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.735745][ T6520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.740470][ T6534] IPv6: NLM_F_CREATE should be set when creating new route [ 122.750888][ T6520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.845942][ T5868] usb 3-1: USB disconnect, device number 7 [ 122.929521][ T89] usbhid 5-1:0.0: can't add hid device: -71 [ 122.935547][ T89] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 123.089778][ T5928] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.101209][ T89] usb 5-1: USB disconnect, device number 5 [ 123.609281][ T5928] usb 1-1: device descriptor read/64, error -71 [ 123.718611][ T5928] usb usb1-port1: attempt power cycle [ 124.178788][ T5928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.198902][ T5928] usb 1-1: device descriptor read/8, error -71 [ 124.521764][ T5928] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.569720][ T5928] usb 1-1: device descriptor read/8, error -71 [ 124.694726][ T5928] usb usb1-port1: unable to enumerate USB device [ 125.791554][ T6571] QAT: failed to copy from user cfg_data. [ 126.183790][ T30] audit: type=1400 audit(1768311660.540:359): avc: denied { listen } for pid=6569 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.325174][ T30] audit: type=1400 audit(1768311660.890:360): avc: denied { accept } for pid=6569 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.432197][ T30] audit: type=1400 audit(1768311660.940:361): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.497752][ T30] audit: type=1400 audit(1768311660.940:362): avc: denied { search } for pid=5485 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.712338][ T30] audit: type=1400 audit(1768311660.940:363): avc: denied { search } for pid=5485 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.938015][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 126.948315][ T30] audit: type=1400 audit(1768311660.940:364): avc: denied { read } for pid=5485 comm="dhcpcd" name="n100" dev="tmpfs" ino=2748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.425999][ T30] audit: type=1400 audit(1768311660.940:365): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.517217][ T6600] xfrm1: entered promiscuous mode [ 127.590609][ T30] audit: type=1400 audit(1768311660.940:366): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.619968][ T6600] xfrm1: entered allmulticast mode [ 127.696908][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 127.718826][ T30] audit: type=1400 audit(1768311661.060:367): avc: denied { create } for pid=6575 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 127.749326][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.170'. [ 127.802648][ T30] audit: type=1400 audit(1768311661.180:368): avc: denied { write } for pid=6575 comm="syz.2.167" path="socket:[12219]" dev="sockfs" ino=12219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 128.583536][ T6623] tipc: Enabling of bearer rejected, already enabled [ 129.078280][ T1206] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.248299][ T1206] usb 3-1: Using ep0 maxpacket: 16 [ 129.256247][ T1206] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.285267][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.333776][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.384284][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.469427][ T1206] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 129.480183][ T1206] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 129.488478][ T1206] usb 3-1: Manufacturer: syz [ 129.499304][ T1206] usb 3-1: config 0 descriptor?? [ 129.653643][ T6644] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.183'. [ 130.118152][ T1206] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 130.525418][ T6653] gfs2: error -5 reading superblock [ 130.595843][ T1206] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 130.607870][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 130.642688][ T1206] usb 5-1: Product: syz [ 130.662744][ T1206] usb 5-1: Manufacturer: syz [ 130.680269][ T1206] usb 5-1: SerialNumber: syz [ 130.705955][ T1206] usb 5-1: config 0 descriptor?? [ 130.969862][ T1206] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 131.090472][ T1206] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 131.458702][ T1206] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 131.467725][ T1206] usb 5-1: media controller created [ 131.480536][ T6671] vlan2: entered promiscuous mode [ 131.603224][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.612033][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.622388][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 131.622405][ T30] audit: type=1400 audit(1768311666.270:394): avc: denied { shutdown } for pid=6639 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.663134][ T30] audit: type=1400 audit(1768311666.270:395): avc: denied { connect } for pid=6639 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.683180][ T6671] bridge0: entered promiscuous mode [ 131.703483][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.794725][ T1206] DVB: Unable to find symbol dib7000p_attach() [ 131.840499][ T1206] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 131.916145][ T1206] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 131.969964][ T1206] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 131.988661][ T1206] usb 5-1: media controller created [ 132.016084][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 132.028940][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.066424][ T1206] dib0700: the master dib7090 has to be initialized first [ 132.081460][ T1206] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 132.729295][ T1206] rc_core: IR keymap rc-dib0700-rc5 not found [ 132.809674][ T1206] Registered IR keymap rc-empty [ 132.815072][ T1206] dvb-usb: could not initialize remote control. [ 132.822298][ T1206] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 132.839016][ T1206] usb 5-1: USB disconnect, device number 6 [ 132.845279][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.854739][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.932411][ T1206] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 133.012970][ T5930] usb 3-1: USB disconnect, device number 8 [ 133.678457][ T1206] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 133.727259][ T30] audit: type=1400 audit(1768311668.450:396): avc: denied { audit_write } for pid=6698 comm="syz.0.194" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 133.999174][ T30] audit: type=1400 audit(1768311668.580:397): avc: denied { read } for pid=6698 comm="syz.0.194" laddr=fe80::f lport=37317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.660587][ T1206] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.677192][ T1206] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 134.708193][ T5930] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.713781][ T1206] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.731908][ T1206] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 134.741346][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 134.749549][ T1206] usb 5-1: Product: syz [ 134.753951][ T1206] usb 5-1: Manufacturer: syz [ 134.764131][ T1206] usb 5-1: SerialNumber: syz [ 134.792459][ T1206] usb 5-1: config 0 descriptor?? [ 134.804450][ T30] audit: type=1400 audit(1768311669.530:398): avc: denied { mounton } for pid=6690 comm="syz.2.192" path="/38/file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 134.868198][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 135.002564][ T5930] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.025324][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.030577][ T5930] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.308924][ T1206] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 135.427113][ T5930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.434757][ T5930] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 135.443896][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.459312][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.460795][ T5930] usb 4-1: config 0 descriptor?? [ 135.477726][ T1206] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 135.513467][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 135.544975][ T1206] usb 5-1: USB disconnect, device number 7 [ 135.971385][ T6728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=6728 comm=syz.0.200 [ 135.984495][ T30] audit: type=1400 audit(1768311670.700:399): avc: denied { write } for pid=6722 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.101482][ T5930] usbhid 4-1:0.0: can't add hid device: -71 [ 136.107476][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 136.118684][ T5930] usb 4-1: USB disconnect, device number 4 [ 137.332884][ T30] audit: type=1400 audit(1768311672.060:400): avc: denied { create } for pid=6737 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 137.391018][ T6742] Bluetooth: MGMT ver 1.23 [ 138.142498][ T30] audit: type=1400 audit(1768311672.120:401): avc: denied { write } for pid=6737 comm="syz.2.202" path="socket:[12894]" dev="sockfs" ino=12894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.355210][ T6744] FAULT_INJECTION: forcing a failure. [ 138.355210][ T6744] name failslab, interval 1, probability 0, space 0, times 1 [ 138.372246][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.4.204 Not tainted syzkaller #0 PREEMPT(full) [ 138.372272][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.372282][ T6744] Call Trace: [ 138.372288][ T6744] [ 138.372295][ T6744] dump_stack_lvl+0x16c/0x1f0 [ 138.372323][ T6744] should_fail_ex+0x512/0x640 [ 138.372348][ T6744] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 138.372370][ T6744] should_failslab+0xc2/0x120 [ 138.372393][ T6744] kmem_cache_alloc_node_noprof+0x86/0x800 [ 138.372410][ T6744] ? __alloc_skb+0x156/0x410 [ 138.372431][ T6744] ? __alloc_skb+0x156/0x410 [ 138.372445][ T6744] __alloc_skb+0x156/0x410 [ 138.372458][ T6744] ? __alloc_skb+0x35d/0x410 [ 138.372473][ T6744] ? __pfx___alloc_skb+0x10/0x10 [ 138.372490][ T6744] ? kasan_quarantine_put+0x10a/0x240 [ 138.372515][ T6744] mgmt_cmd_complete+0x4f/0x570 [ 138.372540][ T6744] set_def_system_config+0x93b/0x1520 [ 138.372565][ T6744] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 138.372587][ T6744] hci_sock_sendmsg+0x1556/0x26b0 [ 138.372614][ T6744] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 138.372643][ T6744] sock_write_iter+0x566/0x610 [ 138.372667][ T6744] ? __pfx_sock_write_iter+0x10/0x10 [ 138.372700][ T6744] ? bpf_lsm_file_permission+0x9/0x10 [ 138.372717][ T6744] ? security_file_permission+0x71/0x210 [ 138.372741][ T6744] ? rw_verify_area+0xcf/0x6c0 [ 138.372763][ T6744] vfs_write+0x7d3/0x11d0 [ 138.372784][ T6744] ? __pfx_sock_write_iter+0x10/0x10 [ 138.372807][ T6744] ? __pfx_vfs_write+0x10/0x10 [ 138.372824][ T6744] ? find_held_lock+0x2b/0x80 [ 138.372863][ T6744] ksys_write+0x1f8/0x250 [ 138.372884][ T6744] ? __pfx_ksys_write+0x10/0x10 [ 138.372908][ T6744] do_syscall_64+0xcd/0xf80 [ 138.372932][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.372948][ T6744] RIP: 0033:0x7fee09b8f749 [ 138.372962][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.372976][ T6744] RSP: 002b:00007fee0a946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.372993][ T6744] RAX: ffffffffffffffda RBX: 00007fee09de5fa0 RCX: 00007fee09b8f749 [ 138.373004][ T6744] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000019 [ 138.373014][ T6744] RBP: 00007fee0a946090 R08: 0000000000000000 R09: 0000000000000000 [ 138.373023][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.373032][ T6744] R13: 00007fee09de6038 R14: 00007fee09de5fa0 R15: 00007ffce88aea58 [ 138.373055][ T6744] [ 138.908128][ T30] audit: type=1326 audit(1768311673.630:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.4.208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee09b8f749 code=0x0 [ 139.357731][ T5901] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 139.848152][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 139.854907][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.867827][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.877745][ T5901] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 139.888461][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.898764][ T5901] usb 3-1: config 0 descriptor?? [ 140.188299][ T5930] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.358394][ T5929] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 60 sec [ 140.941349][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 140.956495][ T6768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.992740][ T5930] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 141.002742][ T6768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.018456][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.044607][ T5930] usb 1-1: config 0 descriptor?? [ 141.374215][ T5930] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 141.683738][ T6783] batadv_slave_1: entered promiscuous mode [ 141.697010][ T6783] batadv_slave_1: left promiscuous mode [ 141.748219][ T5928] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 142.118329][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 142.128208][ T5928] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.138645][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 142.147199][ T5928] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 142.162649][ T5901] usb 3-1: USB disconnect, device number 9 [ 142.170464][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.189138][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 142.202773][ T5928] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 142.219649][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 142.229111][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.237128][ T5928] usb 5-1: Product: syz [ 142.241573][ T5928] usb 5-1: Manufacturer: syz [ 142.246522][ T5928] usb 5-1: SerialNumber: syz [ 142.254226][ T6772] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 142.263067][ T5928] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 142.269553][ T5928] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 142.280474][ T5928] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 142.287322][ T5928] cdc_ncm 5-1:1.1: bind() failure [ 142.295647][ T5928] usbtest 5-1:1.1: couldn't get endpoints, -22 [ 142.302268][ T5928] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 142.527894][ T5929] usb 5-1: USB disconnect, device number 8 [ 143.258133][ T5930] gspca_sonixj: i2c_w8 err -110 [ 143.288220][ T5930] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 144.308246][ T30] audit: type=1400 audit(1768311678.990:403): avc: denied { watch } for pid=6804 comm="syz.3.220" path="/42/file0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.872482][ T5931] usb 1-1: USB disconnect, device number 10 [ 144.948762][ T89] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.100142][ T30] audit: type=1400 audit(1768311679.830:404): avc: denied { read write } for pid=6818 comm="syz.2.224" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 145.215092][ T89] usb 2-1: Using ep0 maxpacket: 8 [ 145.220484][ T30] audit: type=1400 audit(1768311679.860:405): avc: denied { open } for pid=6818 comm="syz.2.224" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 145.247740][ T89] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.261303][ T89] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.423681][ T5931] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.736022][ T89] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.745621][ T89] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 145.751424][ T30] audit: type=1400 audit(1768311680.090:406): avc: denied { create } for pid=6818 comm="syz.2.224" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.813048][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.836753][ T89] usb 2-1: config 0 descriptor?? [ 145.949458][ T5931] usb 1-1: config 8 has an invalid interface number: 130 but max is 1 [ 145.957684][ T5931] usb 1-1: config 8 has an invalid interface number: 130 but max is 1 [ 146.052970][ T5931] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 146.652263][ T5931] usb 1-1: config 8 has no interface number 0 [ 146.668474][ T5931] usb 1-1: config 8 interface 130 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 146.841021][ T30] audit: type=1400 audit(1768311681.570:407): avc: denied { unlink } for pid=5825 comm="syz-executor" name="file1" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.878189][ T5931] usb 1-1: config 8 interface 130 has no altsetting 1 [ 146.905547][ T5931] usb 1-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 146.947277][ T89] usb 2-1: can't set config #0, error -71 [ 146.951891][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.980291][ T89] usb 2-1: USB disconnect, device number 6 [ 147.060192][ T30] audit: type=1326 audit(1768311681.790:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.1.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6c478f749 code=0x0 [ 147.250328][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.225'. [ 147.284690][ T6820] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6820 comm=syz.0.225 [ 147.328514][ T30] audit: type=1400 audit(1768311682.010:409): avc: denied { mounton } for pid=6819 comm="syz.0.225" path="/43/file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.510925][ T5931] usb 1-1: string descriptor 0 read error: -71 [ 147.520437][ T5931] HFC-S_USB 1-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 147.523759][ T30] audit: type=1400 audit(1768311682.010:410): avc: denied { append } for pid=6819 comm="syz.0.225" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 147.531665][ T5931] usb 1-1: USB disconnect, device number 11 [ 147.922073][ T30] audit: type=1400 audit(1768311682.010:411): avc: denied { open } for pid=6819 comm="syz.0.225" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 148.180703][ T30] audit: type=1400 audit(1768311682.910:412): avc: denied { read write } for pid=6853 comm="syz.2.232" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 148.215016][ T89] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.826179][ T89] usb 4-1: Using ep0 maxpacket: 8 [ 148.844966][ T89] usb 4-1: config 7 interface 0 has no altsetting 0 [ 148.873270][ T89] usb 4-1: New USB device found, idVendor=0471, idProduct=0310, bcdDevice=58.70 [ 148.889297][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.897491][ T89] usb 4-1: Product: syz [ 148.902651][ T89] usb 4-1: Manufacturer: syz [ 148.907375][ T89] usb 4-1: SerialNumber: syz [ 149.155842][ T5931] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.184191][ T6875] netlink: 240 bytes leftover after parsing attributes in process `syz.2.237'. [ 149.226006][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.237'. [ 149.338263][ T5931] usb 1-1: device descriptor read/64, error -71 [ 149.612871][ T5931] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 150.163695][ T5931] usb 1-1: device descriptor read/64, error -71 [ 150.352892][ T5931] usb usb1-port1: attempt power cycle [ 150.368193][ T5887] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.393667][ T89] pwc: Philips PCVC730K (ToUCam Fun)/PCVC830 (ToUCam II) USB webcam detected. [ 150.430552][ T89] pwc: Failed to set LED on/off time (-71) [ 150.465244][ T89] pwc: send_video_command error -71 [ 150.479556][ T89] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 150.489505][ T89] Philips webcam 4-1:7.0: probe with driver Philips webcam failed with error -71 [ 150.517274][ T89] usb 4-1: USB disconnect, device number 5 [ 150.548161][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 150.562046][ T5887] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 150.571977][ T6887] IPv6: addrconf: prefix option has invalid lifetime [ 150.588044][ T5887] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 150.596526][ T5887] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 150.609389][ T5887] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 150.652953][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 150.670603][ T5887] usb 2-1: config 0 has no interface number 0 [ 150.678328][ T5887] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 150.690458][ T5887] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 150.702973][ T5887] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.715808][ T5887] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.729000][ T5931] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 150.748160][ T5887] usb 2-1: config 0 interface 125 has no altsetting 0 [ 150.754978][ T5887] usb 2-1: config 0 interface 125 has no altsetting 2 [ 150.765254][ T5931] usb 1-1: device descriptor read/8, error -71 [ 150.896643][ T5887] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 150.910221][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.919218][ T89] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.927090][ T5887] usb 2-1: Product: syz [ 150.931449][ T5887] usb 2-1: Manufacturer: syz [ 150.936041][ T5887] usb 2-1: SerialNumber: syz [ 150.943010][ T5887] usb 2-1: config 0 descriptor?? [ 150.959033][ T6891] netlink: 240 bytes leftover after parsing attributes in process `syz.4.242'. [ 150.971454][ T5887] usb 2-1: selecting invalid altsetting 2 [ 151.039141][ T6891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 151.048194][ T5931] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 151.073162][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 151.073173][ T30] audit: type=1400 audit(1768311685.800:416): avc: denied { write } for pid=6892 comm="syz.2.243" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 151.107902][ T5931] usb 1-1: device descriptor read/8, error -71 [ 151.158360][ T89] usb 4-1: Using ep0 maxpacket: 32 [ 151.165166][ T89] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 151.176805][ T89] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 151.197940][ T89] usb 4-1: config 0 has no interface number 0 [ 151.205749][ T89] usb 4-1: config 0 has no interface number 1 [ 151.212137][ T89] usb 4-1: config 0 interface 255 has no altsetting 0 [ 151.263749][ T5931] usb usb1-port1: unable to enumerate USB device [ 151.264310][ T89] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 151.281842][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.290081][ T89] usb 4-1: Product: syz [ 151.294296][ T89] usb 4-1: Manufacturer: syz [ 151.299017][ T89] usb 4-1: SerialNumber: syz [ 151.322674][ T89] usb 4-1: config 0 descriptor?? [ 151.465822][ T89] viperboard 4-1:0.61: version 0.00 found at bus 004 address 006 [ 151.501857][ T89] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 151.619898][ T89] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 151.639963][ T89] viperboard 4-1:0.255: version 0.00 found at bus 004 address 006 [ 151.691066][ T89] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 151.705542][ T89] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 151.774854][ T89] usb 4-1: USB disconnect, device number 6 [ 152.484797][ T6905] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 152.525279][ T6905] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 152.839146][ T6912] Cannot find set identified by id 3 to match [ 152.847203][ T6905] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 152.930258][ T5931] kernel write not supported for file /dsp (pid: 5931 comm: kworker/1:7) [ 152.946782][ T6906] syzkaller1: entered promiscuous mode [ 152.953543][ T6906] syzkaller1: entered allmulticast mode [ 152.987551][ T6913] bond1: (slave gretap1): making interface the new active one [ 153.041037][ T6913] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 154.325389][ T89] usb 2-1: USB disconnect, device number 7 [ 154.616612][ T6944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.255'. [ 154.747459][ T30] audit: type=1400 audit(1768311689.470:417): avc: denied { ioctl } for pid=6946 comm="syz.4.257" path="socket:[14130]" dev="sockfs" ino=14130 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 154.824115][ T30] audit: type=1400 audit(1768311689.500:418): avc: denied { connect } for pid=6946 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 155.109450][ T6957] syz.3.261 (6957): /proc/6956/oom_adj is deprecated, please use /proc/6956/oom_score_adj instead. [ 155.344628][ T6957] SELinux: failed to load policy [ 156.105090][ T6963] block device autoloading is deprecated and will be removed. [ 156.390240][ T10] IPVS: starting estimator thread 0... [ 156.498215][ T6972] IPVS: using max 76 ests per chain, 182400 per kthread [ 156.817480][ T30] audit: type=1400 audit(1768311691.540:419): avc: denied { getopt } for pid=6973 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.268265][ T5887] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.471448][ T5887] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 157.485678][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.494040][ T5887] usb 2-1: Product: syz [ 157.501080][ T5887] usb 2-1: Manufacturer: syz [ 157.505790][ T5887] usb 2-1: SerialNumber: syz [ 157.954023][ T7000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.270'. [ 158.015096][ T7000] tipc: Enabling of bearer rejected, already enabled [ 158.016184][ T5887] usb 2-1: config 0 descriptor?? [ 158.127669][ T5887] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 158.391895][ T30] audit: type=1400 audit(1768311693.120:420): avc: denied { checkpoint_restore } for pid=7001 comm="syz.2.273" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.525771][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.991179][ T30] audit: type=1400 audit(1768311693.390:421): avc: denied { mounton } for pid=7001 comm="syz.2.273" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 159.028522][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.085492][ T5887] usb 2-1: USB disconnect, device number 8 [ 159.111243][ T30] audit: type=1400 audit(1768311693.800:422): avc: denied { create } for pid=7011 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 159.184226][ T30] audit: type=1400 audit(1768311693.910:423): avc: denied { getopt } for pid=7014 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 159.249488][ T7018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.283617][ T30] audit: type=1400 audit(1768311694.010:424): avc: denied { connect } for pid=7016 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.306814][ T7019] netlink: 'syz.3.276': attribute type 4 has an invalid length. [ 159.793608][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'. [ 160.468148][ T30] audit: type=1400 audit(1768311694.400:425): avc: denied { bind } for pid=7024 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.488165][ T30] audit: type=1400 audit(1768311694.400:426): avc: denied { name_bind } for pid=7024 comm="syz.2.279" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 162.462473][ T30] audit: type=1400 audit(1768311694.400:427): avc: denied { node_bind } for pid=7024 comm="syz.2.279" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 163.328258][ T7044] netlink: 64 bytes leftover after parsing attributes in process `syz.4.282'. [ 163.418206][ T5887] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 163.438708][ T7044] block nbd0: not configured, cannot reconfigure [ 163.647368][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 163.673989][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 164.358237][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 164.760123][ T7057] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 164.773133][ T7057] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 164.791352][ T7057] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 164.806922][ T7057] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 164.823689][ T7057] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 164.833512][ T7057] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 164.843719][ T7057] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 164.853395][ T7057] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 164.862985][ T7057] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 164.991912][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 165.055762][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 165.093148][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.104773][ T5887] usb 4-1: config 0 descriptor?? [ 165.113022][ T5887] usb 4-1: can't set config #0, error -71 [ 165.116852][ T5887] usb 4-1: USB disconnect, device number 7 [ 165.120208][ T7062] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 165.289345][ T7068] netlink: 240 bytes leftover after parsing attributes in process `syz.1.289'. [ 165.338739][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'. [ 165.373119][ T7066] netlink: 348 bytes leftover after parsing attributes in process `syz.3.290'. [ 165.578569][ T30] audit: type=1400 audit(1768311700.270:428): avc: denied { setopt } for pid=7063 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.598183][ T30] audit: type=1400 audit(1768311700.270:429): avc: denied { setopt } for pid=7063 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.620034][ T30] audit: type=1400 audit(1768311700.350:430): avc: denied { create } for pid=7074 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.949068][ T30] audit: type=1400 audit(1768311700.460:431): avc: denied { create } for pid=7074 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.030293][ T30] audit: type=1400 audit(1768311700.460:432): avc: denied { setopt } for pid=7074 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.294583][ T7107] capability: warning: `syz.0.300' uses deprecated v2 capabilities in a way that may be insecure [ 167.346171][ T30] audit: type=1401 audit(1768311702.070:433): op=fscreate invalid_context="?" [ 168.194356][ T30] audit: type=1400 audit(1768311702.920:434): avc: denied { append } for pid=7114 comm="syz.4.305" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 168.204397][ T7115] netlink: 'syz.4.305': attribute type 12 has an invalid length. [ 168.298852][ T7117] FAULT_INJECTION: forcing a failure. [ 168.298852][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 168.363992][ T7117] CPU: 1 UID: 0 PID: 7117 Comm: syz.2.304 Not tainted syzkaller #0 PREEMPT(full) [ 168.364015][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.364024][ T7117] Call Trace: [ 168.364029][ T7117] [ 168.364035][ T7117] dump_stack_lvl+0x16c/0x1f0 [ 168.364063][ T7117] should_fail_ex+0x512/0x640 [ 168.364086][ T7117] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 168.364104][ T7117] should_failslab+0xc2/0x120 [ 168.364123][ T7117] kmem_cache_alloc_node_noprof+0x86/0x800 [ 168.364138][ T7117] ? __alloc_skb+0x156/0x410 [ 168.364156][ T7117] ? __alloc_skb+0x156/0x410 [ 168.364169][ T7117] __alloc_skb+0x156/0x410 [ 168.364180][ T7117] ? __alloc_skb+0x35d/0x410 [ 168.364192][ T7117] ? __pfx___alloc_skb+0x10/0x10 [ 168.364208][ T7117] ? netlink_autobind.isra.0+0x158/0x370 [ 168.364235][ T7117] netlink_alloc_large_skb+0x69/0x140 [ 168.364255][ T7117] netlink_sendmsg+0x698/0xdd0 [ 168.364278][ T7117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.364306][ T7117] ____sys_sendmsg+0xa5d/0xc30 [ 168.364329][ T7117] ? copy_msghdr_from_user+0x10a/0x160 [ 168.364347][ T7117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.364379][ T7117] ___sys_sendmsg+0x134/0x1d0 [ 168.364397][ T7117] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.364441][ T7117] __sys_sendmsg+0x16d/0x220 [ 168.364460][ T7117] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.364490][ T7117] do_syscall_64+0xcd/0xf80 [ 168.364515][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.364532][ T7117] RIP: 0033:0x7f0f4758f749 [ 168.364546][ T7117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.364562][ T7117] RSP: 002b:00007f0f4837c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.364579][ T7117] RAX: ffffffffffffffda RBX: 00007f0f477e5fa0 RCX: 00007f0f4758f749 [ 168.364590][ T7117] RDX: 0000000000044080 RSI: 0000200000000340 RDI: 0000000000000003 [ 168.364600][ T7117] RBP: 00007f0f4837c090 R08: 0000000000000000 R09: 0000000000000000 [ 168.364609][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.364619][ T7117] R13: 00007f0f477e6038 R14: 00007f0f477e5fa0 R15: 00007ffe840e6b18 [ 168.364643][ T7117] [ 168.708345][ T5931] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 168.858208][ T5901] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.885225][ T5931] usb 2-1: config 0 has no interfaces? [ 168.893981][ T5931] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 168.907360][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.078462][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 169.123835][ T5901] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.135240][ T5931] usb 2-1: config 0 descriptor?? [ 169.173964][ T5901] usb 5-1: config 0 has no interface number 0 [ 169.200467][ T5901] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 169.231811][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.262794][ T5901] usb 5-1: Product: syz [ 169.308287][ T5901] usb 5-1: Manufacturer: syz [ 169.319993][ T5901] usb 5-1: SerialNumber: syz [ 169.720477][ T5901] usb 5-1: config 0 descriptor?? [ 170.055693][ T30] audit: type=1400 audit(1768311704.780:435): avc: denied { ioctl } for pid=7136 comm="syz.2.311" path="socket:[14798]" dev="sockfs" ino=14798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.059595][ T5901] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 170.188119][ T5901] usb 5-1: selecting invalid altsetting 1 [ 170.204418][ T5901] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 170.245340][ T5901] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.408103][ T7147] overlayfs: failed to resolve './bus': -2 [ 170.589912][ T7148] input: syz1 as /devices/virtual/input/input9 [ 170.597355][ T7148] input: failed to attach handler leds to device input9, error: -6 [ 170.632479][ T30] audit: type=1400 audit(1768311705.360:436): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=2943 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.663833][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 170.685929][ T5901] usb 5-1: media controller created [ 170.693081][ T30] audit: type=1400 audit(1768311705.360:437): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2943 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.766233][ T30] audit: type=1400 audit(1768311705.360:438): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2943 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.793752][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.952729][ T5901] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 170.970395][ T5901] zl10353_read_register: readreg error (reg=127, ret==-71) [ 171.010590][ T5901] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 171.164684][ T7126] usb 2-1: USB disconnect, device number 9 [ 171.736037][ T5901] usb 5-1: USB disconnect, device number 9 [ 171.972950][ T30] audit: type=1400 audit(1768311706.580:439): avc: denied { create } for pid=7165 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.268130][ T7174] capability: warning: `syz.4.316' uses 32-bit capabilities (legacy support in use) [ 172.541461][ T7172] process 'syz.0.317' launched './file0' with NULL argv: empty string added [ 173.108128][ T30] audit: type=1400 audit(1768311707.280:440): avc: denied { execute_no_trans } for pid=7171 comm="syz.0.317" path="/57/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.198156][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.255532][ T7174] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 173.348252][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 173.365586][ T24] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.399179][ T24] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.491014][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.498153][ T5901] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 173.552671][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 173.602201][ T30] audit: type=1400 audit(1768311708.330:441): avc: denied { read } for pid=7186 comm="syz.4.324" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 173.631286][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.711204][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.744854][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.805499][ T30] audit: type=1400 audit(1768311708.330:442): avc: denied { open } for pid=7186 comm="syz.4.324" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 173.808270][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.829976][ T30] audit: type=1400 audit(1768311708.330:443): avc: denied { ioctl } for pid=7186 comm="syz.4.324" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x64a6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 177.655444][ T24] usb 3-1: config 0 descriptor?? [ 177.691893][ T5901] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.747292][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.764775][ T5901] usb 2-1: config 0 descriptor?? [ 177.981406][ T5901] usbhid 2-1:0.0: can't add hid device: -71 [ 178.009833][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 178.026339][ T5901] usb 2-1: USB disconnect, device number 10 [ 178.100640][ T7202] geneve2: entered promiscuous mode [ 178.126365][ T7202] geneve2: entered allmulticast mode [ 178.808349][ T7177] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.299998][ T7177] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.311226][ T7177] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.368499][ T7177] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.405669][ T7177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.068375][ T30] audit: type=1400 audit(1768311714.790:444): avc: denied { module_request } for pid=7214 comm="syz.0.330" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 180.116856][ T24] usb 3-1: can't set config #0, error -71 [ 180.131238][ T24] usb 3-1: USB disconnect, device number 10 [ 180.138938][ T7205] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 180.151212][ T7177] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.503944][ T30] audit: type=1400 audit(1768311715.230:445): avc: denied { create } for pid=7226 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 180.598752][ T7232] FAULT_INJECTION: forcing a failure. [ 180.598752][ T7232] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 180.854407][ T7232] CPU: 0 UID: 0 PID: 7232 Comm: syz.1.335 Not tainted syzkaller #0 PREEMPT(full) [ 180.854435][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.854445][ T7232] Call Trace: [ 180.854450][ T7232] [ 180.854456][ T7232] dump_stack_lvl+0x16c/0x1f0 [ 180.854478][ T7232] should_fail_ex+0x512/0x640 [ 180.854501][ T7232] _copy_to_user+0x32/0xd0 [ 180.854524][ T7232] simple_read_from_buffer+0xcb/0x170 [ 180.854542][ T7232] proc_fail_nth_read+0x197/0x240 [ 180.854555][ T7232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.854569][ T7232] ? rw_verify_area+0xcf/0x6c0 [ 180.854581][ T7232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.854593][ T7232] vfs_read+0x1e4/0xcf0 [ 180.854609][ T7232] ? __pfx___mutex_lock+0x10/0x10 [ 180.854627][ T7232] ? __pfx_vfs_read+0x10/0x10 [ 180.854646][ T7232] ? __fget_files+0x20e/0x3c0 [ 180.854667][ T7232] ksys_read+0x12a/0x250 [ 180.854681][ T7232] ? __pfx_ksys_read+0x10/0x10 [ 180.854696][ T7232] ? fdget+0x187/0x210 [ 180.854714][ T7232] do_syscall_64+0xcd/0xf80 [ 180.854732][ T7232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.854744][ T7232] RIP: 0033:0x7fd6c478e15c [ 180.854754][ T7232] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 180.854766][ T7232] RSP: 002b:00007fd6c56e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.854777][ T7232] RAX: ffffffffffffffda RBX: 00007fd6c49e6090 RCX: 00007fd6c478e15c [ 180.854785][ T7232] RDX: 000000000000000f RSI: 00007fd6c56e90a0 RDI: 0000000000000004 [ 180.854791][ T7232] RBP: 00007fd6c56e9090 R08: 0000000000000000 R09: 0000000000000000 [ 180.854798][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.854805][ T7232] R13: 00007fd6c49e6128 R14: 00007fd6c49e6090 R15: 00007ffcd5801c68 [ 180.854820][ T7232] [ 182.054788][ T30] audit: type=1400 audit(1768311716.780:446): avc: denied { bind } for pid=7242 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.123058][ T30] audit: type=1400 audit(1768311716.840:447): avc: denied { ioctl } for pid=7242 comm="syz.4.340" path="socket:[15041]" dev="sockfs" ino=15041 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.342679][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 183.023805][ T30] audit: type=1400 audit(1768311717.250:448): avc: denied { setopt } for pid=7246 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.029129][ T5819] usb 4-1: USB disconnect, device number 8 [ 183.212111][ T7256] x_tables: duplicate underflow at hook 2 [ 183.370911][ T30] audit: type=1326 audit(1768311718.100:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.0.346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0be618f749 code=0x0 [ 183.969206][ T5819] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 184.128570][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 184.136946][ T5819] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 184.153856][ T5819] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 184.163304][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 184.181834][ T5819] usb 4-1: Product: syz [ 184.190548][ T5819] usb 4-1: Manufacturer: syz [ 184.197291][ T5819] usb 4-1: SerialNumber: syz [ 184.212579][ T5819] usb 4-1: config 0 descriptor?? [ 184.223664][ T7260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.235168][ T5819] hub 4-1:0.0: bad descriptor, ignoring hub [ 184.248182][ T5819] hub 4-1:0.0: probe with driver hub failed with error -5 [ 184.423353][ T5930] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 184.435248][ T7275] overlayfs: missing 'lowerdir' [ 184.784557][ T7280] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.804914][ T5819] usb 4-1: USB disconnect, device number 9 [ 184.819649][ T7279] syzkaller0: entered promiscuous mode [ 184.825168][ T7279] syzkaller0: entered allmulticast mode [ 184.878323][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 184.897741][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.908767][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.917759][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 184.933689][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 184.951088][ T5930] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 184.964701][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.015412][ T5930] hub 2-1:1.0: bad descriptor, ignoring hub [ 185.122126][ T5930] hub 2-1:1.0: probe with driver hub failed with error -5 [ 185.167908][ T5930] cdc_wdm 2-1:1.0: skipping garbage [ 185.207273][ T5930] cdc_wdm 2-1:1.0: skipping garbage [ 185.256149][ T5930] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 185.268813][ T30] audit: type=1400 audit(1768311720.000:450): avc: denied { setopt } for pid=7285 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.315952][ T5930] cdc_wdm 2-1:1.0: Unknown control protocol [ 186.157001][ T5930] usb 2-1: USB disconnect, device number 11 [ 186.180116][ T30] audit: type=1400 audit(1768311720.360:451): avc: denied { connect } for pid=7284 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.161278][ T7302] FAULT_INJECTION: forcing a failure. [ 187.161278][ T7302] name failslab, interval 1, probability 0, space 0, times 0 [ 187.362553][ T30] audit: type=1400 audit(1768311722.020:452): avc: denied { mount } for pid=7297 comm="syz.3.357" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 187.548386][ T7302] CPU: 1 UID: 0 PID: 7302 Comm: syz.0.358 Not tainted syzkaller #0 PREEMPT(full) [ 187.548406][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.548413][ T7302] Call Trace: [ 187.548417][ T7302] [ 187.548422][ T7302] dump_stack_lvl+0x16c/0x1f0 [ 187.548441][ T7302] should_fail_ex+0x512/0x640 [ 187.548458][ T7302] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 187.548471][ T7302] should_failslab+0xc2/0x120 [ 187.548486][ T7302] kmem_cache_alloc_node_noprof+0x86/0x800 [ 187.548496][ T7302] ? __alloc_skb+0x156/0x410 [ 187.548509][ T7302] ? __alloc_skb+0x156/0x410 [ 187.548517][ T7302] __alloc_skb+0x156/0x410 [ 187.548525][ T7302] ? __alloc_skb+0x35d/0x410 [ 187.548533][ T7302] ? __pfx___alloc_skb+0x10/0x10 [ 187.548544][ T7302] ? __pfx_nf_tables_abort+0x10/0x10 [ 187.548560][ T7302] netlink_ack+0x15d/0xb80 [ 187.548574][ T7302] ? kasan_save_track+0x14/0x30 [ 187.548589][ T7302] nfnetlink_rcv_batch+0x154a/0x2350 [ 187.548606][ T7302] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 187.548624][ T7302] ? avc_has_perm_noaudit+0x149/0x3b0 [ 187.548647][ T7302] ? __nla_parse+0x40/0x60 [ 187.548660][ T7302] nfnetlink_rcv+0x3c1/0x430 [ 187.548670][ T7302] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 187.548683][ T7302] netlink_unicast+0x5aa/0x870 [ 187.548698][ T7302] ? __pfx_netlink_unicast+0x10/0x10 [ 187.548715][ T7302] netlink_sendmsg+0x8c8/0xdd0 [ 187.548731][ T7302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.548748][ T7302] ____sys_sendmsg+0xa5d/0xc30 [ 187.548764][ T7302] ? copy_msghdr_from_user+0x10a/0x160 [ 187.548775][ T7302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.548795][ T7302] ___sys_sendmsg+0x134/0x1d0 [ 187.548807][ T7302] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.548833][ T7302] __sys_sendmsg+0x16d/0x220 [ 187.548844][ T7302] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.548863][ T7302] do_syscall_64+0xcd/0xf80 [ 187.548878][ T7302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.548889][ T7302] RIP: 0033:0x7f0be618f749 [ 187.548898][ T7302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.548907][ T7302] RSP: 002b:00007f0be6fe1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.548918][ T7302] RAX: ffffffffffffffda RBX: 00007f0be63e5fa0 RCX: 00007f0be618f749 [ 187.548925][ T7302] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 187.548931][ T7302] RBP: 00007f0be6fe1090 R08: 0000000000000000 R09: 0000000000000000 [ 187.548942][ T7302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.548948][ T7302] R13: 00007f0be63e6038 R14: 00007f0be63e5fa0 R15: 00007ffd5283f738 [ 187.548961][ T7302] [ 187.817335][ T30] audit: type=1400 audit(1768311722.030:453): avc: denied { remount } for pid=7297 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 187.921406][ T30] audit: type=1400 audit(1768311722.650:454): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 189.957410][ T7318] wg1: entered promiscuous mode [ 189.963365][ T7318] wg1: entered allmulticast mode [ 190.223269][ T30] audit: type=1400 audit(1768311724.790:455): avc: denied { setopt } for pid=7314 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 190.261989][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 190.652792][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.677729][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.698279][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.707323][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.717721][ T48] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 190.746453][ T7311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.773092][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.858236][ T48] usb 3-1: device descriptor read/64, error -71 [ 191.056101][ T30] audit: type=1400 audit(1768311725.760:456): avc: denied { read } for pid=7329 comm="syz.1.365" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 191.152058][ T30] audit: type=1400 audit(1768311725.760:457): avc: denied { open } for pid=7329 comm="syz.1.365" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 191.595600][ T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 191.623252][ T30] audit: type=1400 audit(1768311725.760:458): avc: denied { ioctl } for pid=7329 comm="syz.1.365" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 191.677284][ T30] audit: type=1326 audit(1768311725.870:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be618f749 code=0x7ffc0000 [ 191.710990][ T30] audit: type=1326 audit(1768311725.870:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be618f749 code=0x7ffc0000 [ 191.739833][ T30] audit: type=1326 audit(1768311725.880:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f0be618f749 code=0x7ffc0000 [ 191.770202][ T48] usb 3-1: device descriptor read/64, error -71 [ 191.784376][ T30] audit: type=1326 audit(1768311725.880:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be618f749 code=0x7ffc0000 [ 191.888399][ T30] audit: type=1326 audit(1768311725.880:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0be618f749 code=0x7ffc0000 [ 191.912195][ T30] audit: type=1326 audit(1768311725.880:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be618f749 code=0x7ffc0000 [ 191.936848][ T30] audit: type=1326 audit(1768311725.910:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0be618f749 code=0x7ffc0000 [ 192.043563][ T5931] usb 5-1: USB disconnect, device number 10 [ 192.055324][ T48] usb usb3-port1: attempt power cycle [ 192.219607][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 192.309501][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 192.312999][ T7351] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 192.320090][ T5820] Bluetooth: hci4: link tx timeout [ 192.324920][ T7351] netlink: 228 bytes leftover after parsing attributes in process `syz.4.372'. [ 192.331176][ T5820] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.434634][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.445724][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 192.468379][ T48] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 192.480727][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 192.493809][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 192.507125][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 192.508704][ T48] usb 3-1: device descriptor read/8, error -71 [ 192.528752][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 192.543007][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 192.552357][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.588540][ T24] usb 4-1: config 0 descriptor?? [ 192.615281][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 192.655888][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 192.703551][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 192.721730][ T10] usb 1-1: Product: syz [ 192.729066][ T10] usb 1-1: Manufacturer: syz [ 192.744575][ T10] usb 1-1: SerialNumber: syz [ 192.757552][ T10] usb 1-1: config 0 descriptor?? [ 192.765420][ T7354] binder: 7353:7354 ioctl c0306201 200000000080 returned -14 [ 192.788481][ T48] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 192.820992][ T48] usb 3-1: device descriptor read/8, error -71 [ 192.939597][ T48] usb usb3-port1: unable to enumerate USB device [ 192.978220][ T10] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 192.997241][ T10] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 193.253091][ T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 193.289797][ T10] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 193.299846][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 193.339210][ T5928] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 193.380016][ T5928] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.582967][ T7368] Invalid logical block size (150994944) [ 194.224699][ T7375] netlink: 'syz.4.380': attribute type 2 has an invalid length. [ 194.264821][ T10] usb 1-1: USB disconnect, device number 16 [ 194.296379][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.302782][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.357334][ T7375] ‚#{6c: entered promiscuous mode [ 194.368466][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 194.898149][ T24] gspca_sonixj: i2c_w8 err -110 [ 195.098205][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 195.116879][ T5928] usb 4-1: USB disconnect, device number 10 [ 195.187052][ T7385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.381'. [ 195.600514][ T7394] Cannot find set identified by id 3 to match [ 195.641814][ T5928] kernel write not supported for file /dsp (pid: 5928 comm: kworker/0:6) [ 196.434933][ T7400] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.441243][ T7400] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 196.628334][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 196.635456][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 196.635959][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 196.659817][ T7400] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.665777][ T7400] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 196.680417][ T7400] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.686351][ T7400] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 196.694167][ T5887] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 196.705038][ T7400] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.711028][ T7400] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 196.725180][ T7400] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.731737][ T7400] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 196.902159][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 196.910643][ T5887] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 196.944849][ T5887] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 196.959481][ T5887] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 197.010489][ T48] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 197.029440][ T5887] usb 1-1: Product: syz [ 197.033704][ T5887] usb 1-1: Manufacturer: syz [ 197.049952][ T5887] r8152-cfgselector 1-1: Unknown version 0x0000 [ 197.054317][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 197.056240][ T5887] r8152-cfgselector 1-1: config 0 descriptor?? [ 197.072741][ T5887] cdc_acm 1-1:0.0: Zero length descriptor references [ 197.080948][ T5887] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 197.140405][ T7410] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 197.150056][ T7410] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 197.159643][ T7410] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 197.167206][ T7410] UDF-fs: Scanning with blocksize 512 failed [ 197.173684][ T7410] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 197.183788][ T7410] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 197.193270][ T7410] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 197.200858][ T7410] UDF-fs: Scanning with blocksize 1024 failed [ 197.207281][ T7410] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 197.216871][ T7410] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 197.226369][ T7410] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 197.233926][ T7410] UDF-fs: Scanning with blocksize 2048 failed [ 197.240335][ T7410] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 197.249932][ T7410] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 197.259399][ T7410] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 197.266921][ T7410] UDF-fs: Scanning with blocksize 4096 failed [ 197.272992][ T7410] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 197.282890][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 197.315939][ T48] usb 4-1: config 0 has an invalid interface number: 10 but max is 0 [ 197.345032][ T48] usb 4-1: config 0 has no interface number 0 [ 197.354851][ T48] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=3e.e9 [ 197.375537][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.380613][ T5928] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 197.398275][ T48] usb 4-1: Product: syz [ 197.402661][ T48] usb 4-1: Manufacturer: syz [ 197.407398][ T48] usb 4-1: SerialNumber: syz [ 197.421494][ T48] usb 4-1: config 0 descriptor?? [ 197.438649][ T48] ljca 4-1:0.10: bulk endpoints not found [ 197.480860][ T10] IPVS: starting estimator thread 0... [ 197.549691][ T10] libceph: connect (1)[c::]:6789 error -101 [ 197.555831][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 197.588158][ T7418] IPVS: using max 43 ests per chain, 103200 per kthread [ 197.666893][ T48] usb 4-1: USB disconnect, device number 11 [ 197.819562][ T7406] ceph: No mds server is up or the cluster is laggy [ 198.272685][ T7429] SELinux: failed to load policy [ 198.375613][ T7431] SELinux: failed to load policy [ 198.616783][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 198.616803][ T30] audit: type=1400 audit(1768311733.320:505): avc: denied { getopt } for pid=7433 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 199.222126][ T48] kernel write not supported for file /dsp (pid: 48 comm: kworker/1:1) [ 199.479708][ T48] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 199.798010][ T7455] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.812310][ T30] audit: type=1400 audit(1768311734.490:506): avc: denied { setopt } for pid=7447 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.910027][ T48] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.921120][ T48] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 199.940600][ T48] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.960668][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.983083][ T7445] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.004004][ T48] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.088282][ T5887] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.238165][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 200.254695][ T5887] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.262831][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.290618][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.294982][ T5887] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 200.359504][ T5887] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 200.370722][ T5887] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.380328][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 200.388627][ T5887] usb 2-1: SerialNumber: syz [ 200.685006][ T7459] syzkaller0: entered promiscuous mode [ 200.690580][ T7459] syzkaller0: entered allmulticast mode [ 201.399984][ T5887] cdc_acm 2-1:1.0: skipping garbage [ 201.497547][ T5887] usb 2-1: USB disconnect, device number 12 [ 312.048098][ C0] ------------[ cut here ]------------ [ 312.054308][ C0] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#0: swapper/0/0 [ 312.065667][ C0] Modules linked in: [ 312.069832][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 312.078741][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.088769][ C0] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 312.095685][ C0] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3c 85 00 b8 01 00 00 00 87 05 65 c4 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 ee 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 312.115276][ C0] RSP: 0000:ffffc90000007df0 EFLAGS: 00010046 [ 312.121314][ C0] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38e50 [ 312.129259][ C0] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 312.137202][ C0] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 312.145157][ C0] R10: 0000000000000003 R11: ffffffff8e098670 R12: 1ffffffff1c02250 [ 312.153105][ C0] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b843bc52 [ 312.161052][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 312.169957][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.176513][ C0] CR2: 0000200000021030 CR3: 0000000035d90000 CR4: 00000000003526f0 [ 312.184457][ C0] Call Trace: [ 312.187715][ C0] [ 312.190535][ C0] rcu_core+0x4cf/0x15f0 [ 312.194758][ C0] ? sched_clock+0x38/0x60 [ 312.199149][ C0] ? sched_clock_cpu+0x6c/0x530 [ 312.203973][ C0] ? clockevents_program_event+0x151/0x370 [ 312.209755][ C0] ? __pfx_rcu_core+0x10/0x10 [ 312.214403][ C0] ? read_tsc+0x9/0x20 [ 312.218447][ C0] ? ktime_get+0x1a7/0x310 [ 312.222833][ C0] ? find_held_lock+0x2b/0x80 [ 312.227489][ C0] handle_softirqs+0x219/0x950 [ 312.232231][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 312.237502][ C0] __irq_exit_rcu+0x109/0x170 [ 312.242154][ C0] irq_exit_rcu+0x9/0x30 [ 312.246371][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 312.251983][ C0] [ 312.254887][ C0] [ 312.257805][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.263758][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 312.269364][ C0] Code: 96 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 09 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 312.288945][ C0] RSP: 0000:ffffffff8e007df8 EFLAGS: 000002c6 [ 312.294983][ C0] RAX: 0000000001dc6c51 RBX: 0000000000000000 RCX: ffffffff8b7856d9 [ 312.302925][ C0] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b400 [ 312.310870][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 312.318815][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 312.326772][ C0] R13: ffffffff8e097b40 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 312.334719][ C0] ? ct_kernel_exit+0x139/0x190 [ 312.339549][ C0] default_idle+0x13/0x20 [ 312.343866][ C0] default_idle_call+0x6c/0xb0 [ 312.348605][ C0] do_idle+0x38d/0x510 [ 312.352668][ C0] ? __pfx_do_idle+0x10/0x10 [ 312.357237][ C0] cpu_startup_entry+0x4f/0x60 [ 312.361989][ C0] rest_init+0x16b/0x2b0 [ 312.366214][ C0] ? acpi_subsystem_init+0x133/0x180 [ 312.371472][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 312.377010][ C0] start_kernel+0x3ef/0x4d0 [ 312.381498][ C0] x86_64_start_reservations+0x18/0x30 [ 312.386938][ C0] x86_64_start_kernel+0x130/0x190 [ 312.392035][ C0] common_startup_64+0x13e/0x148 [ 312.396960][ C0] [ 312.399954][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 312.407203][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 312.416120][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.426149][ C0] Call Trace: [ 312.429412][ C0] [ 312.432230][ C0] dump_stack_lvl+0x3d/0x1f0 [ 312.436798][ C0] vpanic+0x640/0x6f0 [ 312.440756][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 312.447088][ C0] panic+0xca/0xd0 [ 312.450820][ C0] ? __pfx_panic+0x10/0x10 [ 312.455218][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 312.460302][ C0] check_panic_on_warn+0xab/0xb0 [ 312.465212][ C0] __warn+0x108/0x3c0 [ 312.469165][ C0] __report_bug+0x2a0/0x520 [ 312.473655][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 312.479965][ C0] ? __pfx___report_bug+0x10/0x10 [ 312.484963][ C0] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 312.490658][ C0] ? __lock_acquire+0x436/0x2890 [ 312.495582][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 312.501918][ C0] report_bug+0xb2/0x220 [ 312.506150][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 312.512464][ C0] handle_bug+0x127/0x260 [ 312.516775][ C0] exc_invalid_op+0x17/0x50 [ 312.521254][ C0] asm_exc_invalid_op+0x1a/0x20 [ 312.526074][ C0] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 312.532981][ C0] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3c 85 00 b8 01 00 00 00 87 05 65 c4 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 ee 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 312.552563][ C0] RSP: 0000:ffffc90000007df0 EFLAGS: 00010046 [ 312.558604][ C0] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38e50 [ 312.566545][ C0] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 312.574500][ C0] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 312.582457][ C0] R10: 0000000000000003 R11: ffffffff8e098670 R12: 1ffffffff1c02250 [ 312.590398][ C0] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b843bc52 [ 312.598364][ C0] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 312.604688][ C0] rcu_core+0x4cf/0x15f0 [ 312.608908][ C0] ? sched_clock+0x38/0x60 [ 312.613297][ C0] ? sched_clock_cpu+0x6c/0x530 [ 312.618120][ C0] ? clockevents_program_event+0x151/0x370 [ 312.623906][ C0] ? __pfx_rcu_core+0x10/0x10 [ 312.628562][ C0] ? read_tsc+0x9/0x20 [ 312.632607][ C0] ? ktime_get+0x1a7/0x310 [ 312.636995][ C0] ? find_held_lock+0x2b/0x80 [ 312.641650][ C0] handle_softirqs+0x219/0x950 [ 312.646391][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 312.651658][ C0] __irq_exit_rcu+0x109/0x170 [ 312.656315][ C0] irq_exit_rcu+0x9/0x30 [ 312.660531][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 312.666161][ C0] [ 312.669080][ C0] [ 312.671990][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.677945][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 312.683550][ C0] Code: 96 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 09 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 312.703131][ C0] RSP: 0000:ffffffff8e007df8 EFLAGS: 000002c6 [ 312.709174][ C0] RAX: 0000000001dc6c51 RBX: 0000000000000000 RCX: ffffffff8b7856d9 [ 312.717117][ C0] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b400 [ 312.725060][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 312.733002][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 312.740946][ C0] R13: ffffffff8e097b40 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 312.748905][ C0] ? ct_kernel_exit+0x139/0x190 [ 312.753736][ C0] default_idle+0x13/0x20 [ 312.758041][ C0] default_idle_call+0x6c/0xb0 [ 312.762779][ C0] do_idle+0x38d/0x510 [ 312.766823][ C0] ? __pfx_do_idle+0x10/0x10 [ 312.771390][ C0] cpu_startup_entry+0x4f/0x60 [ 312.776130][ C0] rest_init+0x16b/0x2b0 [ 312.780358][ C0] ? acpi_subsystem_init+0x133/0x180 [ 312.785616][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 312.791132][ C0] start_kernel+0x3ef/0x4d0 [ 312.795608][ C0] x86_64_start_reservations+0x18/0x30 [ 312.801038][ C0] x86_64_start_kernel+0x130/0x190 [ 312.806124][ C0] common_startup_64+0x13e/0x148 [ 312.811067][ C0] [ 313.872044][ C0] Shutting down cpus with NMI [ 313.877097][ C0] Kernel Offset: disabled [ 313.881414][ C0] Rebooting in 86400 seconds..