last executing test programs: 14.936609498s ago: executing program 0 (id=4974): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x203) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='time\x00', &(0x7f0000000300)='veth1_virt_wifi\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0xb, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x4, 0x6, 'syz1\x00', &(0x7f00000000c0)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10', ',\x00'], 0x17}) 12.661896502s ago: executing program 1 (id=4980): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="630000004ec6"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 11.387707865s ago: executing program 1 (id=4981): socket$nl_netfilter(0x10, 0x3, 0xc) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000000b8980100000000000000002268cf060900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x44894}, 0x4000080) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) r5 = getpid() sched_setattr(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r2, 0x0, r3) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x240048c0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x1, 0xffffff79, 0x5}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280f000002030102000000000000000003000008090002000000000603001d57080001000100001f"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x118, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60}, 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) 11.157283859s ago: executing program 0 (id=4983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='svcrdma_send_pullup\x00', r1, 0x0, 0xe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000032680)=""/102376, 0x18fe8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r3) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sync() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11.070185683s ago: executing program 4 (id=4984): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000180)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000660f5cd966bac0000f3066b808008ed0660f38806f008ee0", 0x3b}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1000000000000112, 0x2000, 0x0, 0x3) 10.440851044s ago: executing program 4 (id=4986): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f00000191c0)) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0), 0x0, 0x1) close(r5) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@broadcast, @multicast1}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002e9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006c0000/0xd000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="4000b00408000100e0"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x80c0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000002e00090027bd7000000000000400000008000c00", @ANYRES64=r0], 0xb8}}, 0x0) 9.520690818s ago: executing program 0 (id=4988): socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect(0x5, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe61}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(0x0, 0x0) (async) r5 = openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) (async) sched_setscheduler(r1, 0x0, &(0x7f0000000040)=0xc0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x10, r4, 0x101000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9.237226682s ago: executing program 4 (id=4989): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xf0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 8.397970021s ago: executing program 4 (id=4992): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000000)) write$usbip_server(r5, &(0x7f0000000680)=@ret_submit={{0x3, 0x5, 0x0, 0x1, 0xa6}, 0x9, 0x6f, 0x1, 0x104, 0x9, 0x0, "a357c2e46ffcbec2d206cdd54806550258cef605671bc3ea198400be60f95006bdd11181883bb0b07693a0e2505f93412ab3714b724998ab9a7d53ba0886b2b2af1caaaafa563bf7007484bb3c8e52d4a443ba245bb811e2688152e8c7b3a47f48d0b46478f5c5966a4c98259c2aad", [{0x7, 0x5, 0x72, 0x8}, {0x5, 0x4, 0x2c6d, 0x1}, {0x0, 0x8a24, 0x0, 0xa05e}, {0x280, 0xffffffff, 0x4}, {0x10000, 0x1, 0x7}, {0x3, 0x0, 0x83d4, 0x4}, {0x2, 0x1000, 0x10, 0x628}, {0x8, 0x6, 0x5, 0xf}, {0x0, 0x360, 0x4, 0x7}, {0x5, 0x8, 0x5754, 0xff}, {0xfffff800, 0x9, 0x3, 0x4}, {0x3, 0xff, 0x72, 0x67450}, {0x7ff, 0x322, 0xb, 0x3ff}, {0x54b, 0x8, 0x9, 0xc79}, {0x9, 0x4, 0xc, 0x200}, {0x7fff, 0x4, 0x7, 0xfffffffb}, {0x4, 0xffff, 0x2, 0x1ff}, {0xfffffffd, 0x4, 0x5, 0x9}, {0x6, 0x7f, 0x9, 0xffff0001}, {0x3, 0x0, 0x96, 0x5}, {0x1, 0x1, 0x8b71}, {0xe, 0x4, 0x7ff, 0xfffffffe}, {0xa6b, 0xffffffff, 0x5725ada9, 0x5}, {0x8, 0x3, 0x1, 0x101}, {0x1, 0xb, 0x8, 0x9}, {0x8, 0x2, 0x5, 0x3ff}, {0x4, 0x10, 0x7, 0x10}, {0x6, 0x8001, 0x9}, {0x6, 0xb, 0xfe6, 0x800}, {0x41b8, 0xfffffffb, 0x4, 0x1}, {0x4, 0x27, 0x1, 0x6}, {0x0, 0x0, 0x9, 0x3}, {0x4, 0xe, 0xffffffff}, {0x40, 0x0, 0x6, 0x1}, {0x55, 0x4, 0x2}, {0x7f, 0x8, 0x10, 0x8000}, {0xab5, 0x1000, 0x7, 0xb}, {0xd00f, 0x5, 0x800, 0x66c3}, {0x8, 0x5, 0x26e, 0x1}, {0x100, 0x4, 0x4, 0x81}, {0x6, 0xb8ac, 0x8, 0x9}, {0x2, 0x401, 0x0, 0x9}, {0x2, 0x100, 0x0, 0xfffffd28}, {0x2, 0xb631, 0x1}, {0x6, 0x80, 0x8001, 0x1}, {0x5, 0x2, 0x5, 0xd70}, {0x3, 0x3ff, 0x6, 0xff}, {0x3, 0x3, 0x800, 0x8}, {0xd4, 0x6, 0x2, 0x4c3}, {0x2, 0x1, 0x3, 0x9}, {0x2408, 0x3, 0x5bc, 0x80010}, {0x81, 0x976, 0x1, 0x8}, {0x4, 0x0, 0x0, 0x5}, {0x10000, 0x400, 0x94, 0x8000}, {0x5, 0x1, 0x4}, {0x9, 0x4, 0x1, 0x8}, {0x2, 0x0, 0xfffffff9, 0x9}, {0x7ff, 0xb, 0x4, 0x3}, {0x7, 0xfffffffe, 0x9, 0x9}, {0xeb, 0xdd01, 0x1, 0x5}, {0x5, 0xfffffff7, 0xa0, 0x7}, {0x40, 0xb, 0x1, 0x1}, {0x1, 0x2, 0x8}, {0x8001, 0x401, 0xe, 0x4}, {0x6, 0x2800, 0x7ff, 0xd}, {0x0, 0x6, 0x8000, 0x5}, {0x81, 0x18, 0x7, 0x3}, {0x3, 0xa, 0x9f6, 0x7}, {0x3, 0x3a9ef7aa, 0xe, 0x2}, {0x9, 0x7, 0x3, 0x5}, {0x2, 0xffff9c7f, 0x7fffffff, 0x5}, {0x5, 0xa0e7, 0x5, 0xb}, {0x3, 0x1, 0x3}, {0x400, 0x0, 0x8000, 0x1ff}, {0x9, 0x5, 0x8, 0xd1}, {0x8, 0x10001, 0x4a, 0xfffffffe}, {0x4, 0x6, 0x40, 0x4}, {0x68c, 0x6, 0x0, 0xb}, {0x6, 0x2, 0x3, 0x4}, {0x4, 0x800, 0x4, 0x73}, {0x3, 0x8, 0x4, 0x2}, {0x6, 0x4, 0x1, 0x3}, {0x8001, 0x2, 0x9, 0x8001}, {0x83e5, 0x2, 0x6, 0x698}, {0x5c4, 0x8, 0x3, 0x7}, {0x7f, 0x10001, 0x2, 0x3}, {0x9, 0x24b, 0xfffffffc, 0x80}, {0x9, 0x3, 0x3ff, 0x80}, {0x1, 0x8e74, 0x8000, 0x447}, {0x8, 0x919c, 0xbc23, 0xff}, {0xa1bd, 0xfffffffb, 0x4d1c, 0xc}, {0xf, 0x80000001, 0x8, 0x1}, {0x5, 0x2, 0xfffffff7, 0x8001}, {0x1, 0x9, 0x8001}, {0xc, 0x4, 0x5d, 0x1}, {0x2, 0x3, 0x752, 0x7e73}, {0x100, 0x0, 0x400, 0x3}, {0x5, 0x1, 0x5, 0xaca}, {0x0, 0x10000, 0x4, 0x1a9c}, {0x7f, 0x3, 0xffffffff, 0xfffffff7}, {0x1800, 0x4, 0x4, 0x7}, {0x1, 0x16, 0x1, 0x101}, {0x6, 0x5, 0x6, 0x9}, {0x1, 0xb, 0x9, 0x1000}, {0x5, 0x1, 0x7, 0x1}, {0x101, 0x9, 0x6, 0x7}, {0x9, 0x7fff, 0x9, 0x40}, {0x1, 0x2, 0x9, 0xf41}, {0x1, 0x14082b17, 0x7, 0x9}, {0x6, 0x8, 0x5, 0x8}, {0x200, 0x3, 0x5}, {0x9, 0x5, 0x3ff, 0x5}, {0x9, 0xffffff7f, 0x9, 0x9}, {0x80000000, 0x6, 0x7, 0xa}, {0x9, 0xfffffffd, 0x0, 0x200}, {0x200, 0x4, 0xc, 0x9}, {0x6, 0x9, 0x81}, {0x3, 0x3, 0xffffff7b, 0xa}, {0x0, 0x6, 0xae, 0x8}, {0x7fffffff, 0x9, 0x8, 0x5}, {0x7, 0x4, 0x6, 0x3ff}, {0xffff, 0x1, 0x3, 0x1ff}, {0x1, 0x6, 0x8, 0x1}, {0x7, 0x751, 0x6, 0x2}, {0x2, 0x3, 0x3, 0x8001}, {0x9, 0x0, 0xb8, 0x9}, {0xd7b, 0x401, 0x2, 0x8}, {0x7, 0xf, 0x8, 0x1}, {0x6, 0x1, 0x7, 0x5}, {0x81, 0x7, 0x7, 0x3}, {0xb, 0x8, 0x4, 0xaf}, {0x5, 0x2, 0x7fff, 0x6}, {0xb120, 0x7, 0x1, 0x9}, {0x3, 0xf521, 0x6, 0xfffffffc}, {0x5, 0x7f, 0x8, 0x8}, {0x20000000, 0xd0, 0x9, 0x2}, {0x0, 0x1, 0x3ff, 0x2}, {0x3, 0x6}, {0x1, 0xe, 0x401, 0x1b0}, {0xa5, 0x3, 0x2, 0x10001}, {0x4, 0x4, 0xe8e, 0x400}, {0x1, 0x5, 0x6, 0x5}, {0xfffffff6, 0x7f, 0x3, 0xd}, {0x9, 0x5, 0x8, 0x1cb}, {0x2e68, 0x4, 0x200, 0x8}, {0xffffffff, 0x8, 0x7fff, 0x42}, {0x7, 0x0, 0x6, 0x22}, {0x0, 0x7, 0x8, 0x6}, {0x0, 0x4, 0x400, 0x101}, {0x800, 0x100, 0x8, 0x5}, {0xfffff001, 0x8, 0x40, 0x8000}, {0x101, 0x4, 0x7, 0x8}, {0xe, 0x3, 0x7, 0x7fffffff}, {0x8, 0x100, 0x3, 0x80}, {0x68, 0x2, 0x0, 0x2}, {0x3, 0x6, 0xf, 0x8001}, {0x10, 0x0, 0x1, 0x929e}, {0x9, 0x0, 0x7, 0x4}, {0xfffffffa, 0x3, 0xfffffffb, 0xffffffff}, {0x80000001, 0x9, 0x6, 0x8000}, {0x9, 0x80000001, 0x2, 0x4}, {0x2fe4, 0x5, 0x6, 0xa}, {0x101, 0x7, 0x4, 0x1ff}, {0xff, 0x4, 0x4, 0x5}, {0x2, 0x75, 0x2, 0x5}, {0x1, 0x7ff, 0xcc4, 0x7fff}, {0xffffffff, 0x5, 0x400, 0x8}, {0x5f60, 0x81, 0x9, 0x2}, {0x4, 0x4, 0xfffffffa, 0x9}, {0x8001, 0x3, 0x9, 0xb}, {0x8, 0x7fff, 0x7fff, 0x7}, {0x4d5a, 0xf, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x4}, {0x3, 0x39, 0x7}, {0x8, 0x9, 0x6, 0x101}, {0x0, 0x8, 0x5}, {0x4, 0xd38d, 0xfffffff8, 0x80}, {0x40, 0x3, 0x0, 0x1000}, {0x67e, 0x6, 0xf, 0x1}, {0x3, 0xb, 0x77, 0x5}, {0x3ff, 0x81, 0x4, 0x2}, {0x38, 0xb, 0x3}, {0x9, 0x3, 0x40, 0xffff}, {0x6, 0x6, 0x6c, 0x200}, {0x7, 0x4, 0x7, 0xfffffffd}, {0x800, 0x7, 0x7, 0x4}, {0x3, 0x6, 0x5, 0x4}, {0x2, 0x200, 0xfffff167, 0x8000}, {0x1000, 0xf, 0x5ad, 0xfffffff0}, {0xfff, 0x6, 0x9}, {0xb, 0x3c000, 0xe3, 0xe}, {0x7, 0x8, 0x9, 0xff}, {0x1, 0x3, 0x714, 0x7fff}, {0x6, 0x5, 0x2, 0x4}, {0x200, 0xe0, 0x8000, 0x6e}, {0x40, 0x1, 0xfffffff4, 0x9}, {0x5, 0x80, 0x9, 0x7}, {0x6, 0x5, 0x8, 0xf20}, {0x4, 0x8, 0xd4, 0x40}, {0x3, 0x10, 0x525, 0x6}, {0x2, 0x7286, 0x401, 0x80}, {0xb, 0x2, 0x5, 0x6}, {0x5, 0x80000000, 0x8, 0xf}, {0x6, 0x6, 0xa, 0xffffffff}, {0x401, 0x9, 0x4009af1c}, {0x2, 0x400000, 0x8, 0x9}, {0x3, 0x3a, 0x2, 0x80000001}, {0xa276, 0x6, 0x604, 0x9}, {0x7, 0x7, 0x7, 0x32b3}, {0x2, 0x8000, 0x400, 0x100}, {0x40, 0x6, 0x0, 0x8}, {0xffffff7f, 0x9, 0xffff, 0x6}, {0x4, 0xe7, 0xffff3bf6, 0x1}, {0x8, 0x800, 0x2, 0xfffffff8}, {0x8, 0xe, 0x4, 0x3}, {0x6, 0x6, 0x8, 0x6b4}, {0x9840, 0x8, 0x6, 0xb}, {0x100, 0x8, 0xa, 0x3}, {0x1, 0x8001, 0x10001, 0xf25}, {0x1, 0x6, 0x6, 0x8}, {0x890, 0xd084, 0xec0d, 0x4}, {0x10001, 0x7, 0x6984, 0x7ff}, {0x800, 0x1, 0x8, 0xffffffff}, {0x8, 0x9, 0x2, 0x8}, {0x8, 0x3, 0xfbae, 0x7f}, {0x5, 0x8, 0x4000, 0x1}, {0x0, 0x7, 0xf0, 0x1}, {0x5, 0x0, 0x75f42709, 0x6e}, {0x7f, 0x80000000, 0x6, 0x1}, {0x0, 0xfffffffe, 0x9, 0x8}, {0x8, 0xd6ba, 0xbda, 0xfffffffc}, {0x1, 0x9, 0x3, 0x2}, {0x80000000, 0xffff4b82, 0x6, 0x2}, {0x0, 0x3ff, 0xc9, 0x4}, {0x8, 0x10, 0x5, 0x1}, {0xe, 0x2, 0x7, 0x3}, {0x6, 0x10001, 0x10000, 0xd401}, {0x967, 0x5, 0xff, 0x3}, {0x7f, 0x3, 0x1ff, 0x4}, {0x80, 0x1, 0x4, 0x4}, {0x5, 0x8001, 0x3, 0x4}, {0x3ff, 0xfffffff7, 0x3ff, 0x7}, {0x1, 0x2f, 0x2, 0x6b}, {0x2, 0x70be5cae, 0xff, 0x66f5}, {0x2, 0x6c6, 0x100}, {0x8, 0x9, 0x7, 0x7}, {0x3, 0x9, 0x2, 0x6}, {0x4, 0xfffffffa, 0x0, 0x6}, {0xe, 0xe000, 0x0, 0x2}, {0x6, 0x8, 0x9, 0x6cba2158}, {0x7ff, 0x3, 0x3, 0x3}, {0xffffcfb6, 0x4, 0x1, 0x7}, {0x3, 0x1, 0x0, 0x1}, {0x4, 0x7, 0x9, 0x3}, {0x5, 0x1, 0x12ef10c7, 0x4}, {0xf2, 0x40000, 0x2a4a7edb, 0x8}, {0x3, 0xfffffff5, 0x37}, {0x4, 0x91, 0x10001, 0x7}, {0x5, 0x9, 0x1}, {0x7f, 0x1, 0x8, 0x33}]}, 0x10df) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000091}, 0x40000) syz_usb_connect(0xf400, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x26}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @local}, 0x14) 8.178921286s ago: executing program 3 (id=4993): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/220) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x84, &(0x7f0000000200)=ANY=[@ANYBLOB='grpquotaHinode_hadlimit=e,\x00\x00']) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0xa) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000900)={0x1d, r6, 0x1}, 0x18) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000240)=@ll={0x11, 0x17, r6, 0x1, 0x3, 0x6, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="eb40561dcf5036f67b484c57900bfd00fb7b9a27cadf5fbc5f59c74b5f038fe1b9ad05685aecde7da32bee74a8622f9b989189b30180ed3687e258b95153f65bc634bb313c7772104117f55dbb5957a328f3e4049ee3e7a0153c0cdedf7797", 0x5f}, {&(0x7f0000000340)="c7ca6c903b649d4dc9", 0x9}, {&(0x7f0000000480)="c0ab395a540802e31315871c6e6f7d5f702a686ff98867810966d58caa23cd09ed29a6e58ac5ff19ad429d85b688c027ece64ab318e44b40b7ac8be8733ca23816cd56f65c329b99371da49d243b6cefab96e3d01612f7660501da144b", 0x5d}], 0x3}, 0x24008004) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r3, 0x0, 0x4, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040d0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0274206000400ff9782062f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.768325648s ago: executing program 1 (id=4995): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="4000b00408000100e0"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x80c0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 7.504944539s ago: executing program 0 (id=4996): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x20, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x20}}, 0x20000010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xa, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket(0x5, 0x800, 0x200000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0xf9}, @void, @eth={@broadcast, @broadcast, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@x25={0x805, {0x0, 0x0, 0x1f, "637c6cfd823d8b35a830f137a4a4a084835539839243bd579cf35214bb4f69"}}}}}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.295545336s ago: executing program 1 (id=4997): socket$inet6_sctp(0xa, 0x3fb0e80e8ade3743, 0x84) socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpgrp(0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r3, 0x0, 0x0) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 5.834570261s ago: executing program 3 (id=4999): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500bf7612d5be21b291ed825fb7000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18) ioperm(0x9, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x1f0, 0x0, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0xc, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x6) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20a, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 5.811993166s ago: executing program 1 (id=5000): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x28, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x3329, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$phonet_pipe(0x23, 0x5, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) 4.731182533s ago: executing program 2 (id=5001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000000)='host1x_cdma_push_gather\x00', r1}, 0x18) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffffff0}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x12, 0x2004, @fd_index=0x3, 0x101, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[], 0x217) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x8000, 0x8000, {0xffffffffffffffff}, {0xee00}, 0x9, 0x100000000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r0, 0x32, 0x1, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) getpgid(r10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r11, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000000300)) r13 = dup(r12) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000000000)={0x1, r13}) 4.681482044s ago: executing program 4 (id=5002): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0xa4ff, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0xd3}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @remote}}}], 0x20}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r6, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 3.671248838s ago: executing program 3 (id=5003): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = open(0x0, 0x280140, 0x11e) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, &(0x7f00000191c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0), 0x0, 0x1) close(r9) splice(r8, 0x0, r9, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@broadcast, @multicast1}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002e9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006c0000/0xd000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="4000b00408000100e0"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x80c0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000002e00090027bd7000000000000400000008000c00", @ANYRES64=r0], 0xb8}}, 0x0) 3.644854597s ago: executing program 4 (id=5004): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0x6e33, 0x4, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x1f, 0x58, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @local, @local, @multicast2]}]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_delroute={0x3c, 0x19, 0x10, 0x70bd27, 0x25dfdbfb, {0xa, 0x14, 0x10, 0x2, 0xfe, 0x2, 0x0, 0xb, 0x1800}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_IIF={0x8, 0x3, r9}, @RTA_UID={0x8, 0x19, r10}, @RTA_PREF={0x5, 0x14, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x80) ptrace$pokeuser(0x6, r0, 0x7, 0x6) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) pipe(&(0x7f0000000500)) 3.554220695s ago: executing program 2 (id=5005): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x2000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) 2.545367501s ago: executing program 2 (id=5006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000595000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000ce000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0xf00) 2.539580435s ago: executing program 3 (id=5007): r0 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000300), 0x910000, &(0x7f0000000540)=ANY=[@ANYBLOB='grpquota_inode_hardlimit=%,huge=advise,size=%8pt6707k,gid=', @ANYRESHEX=0x0, @ANYBLOB=',usrquota_block_hardlimit=tJ3-x,grpquota_inode_hardlimit=337\"g9t06,quota,quota,huge=within_size,uid>', @ANYRESDEC=r1, @ANYBLOB="2c6d6561737572652c6673757569643d31643063323664362d643366382d333064382d373278352d306349dbfadd0cdcbbbc34ef039270727f6338613038312c000ab061a314e79eabf9984cdc9d237a68e21aad16eb803e3959f69c0b6630af11440da197a0709865965479b8a23c8465b6be8d735f9ecbb4bb4e0e9c30224b83f2476281300250f773c03ae8c46ccdedf0ed9197370f9f4462f8dfb9c6557bc3acfcc0e1fc9c"]) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x8, 0x4e23, 0x3, 0x2, 0xa0, 0x30, 0x67, 0x0, r1}, {0x10000, 0x1, 0x6, 0x4, 0x7, 0x16, 0x2, 0x10001}, {0x3, 0xd1, 0x9, 0x101}, 0x8001, 0x6e6bb4, 0x0, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x2b}, 0x2, @in6=@local, 0x3507, 0x4, 0x3, 0x8, 0x9, 0x7fffffff, 0x7fffffff}}, 0xe8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000200)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x7}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0xffe0}, {0x1, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) unlink(&(0x7f00000001c0)='./file0/file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000000340)) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e20, 0x8, @remote, 0xffffffff}, 0x1c) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000780)=r9, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)="8e41f8bc555d", 0x6}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c) 2.351648134s ago: executing program 2 (id=5008): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r4, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r5, 0x32dc, 0x0, 0xe, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4089, 0xff9, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.241317083s ago: executing program 3 (id=5009): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r4, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r5, 0x32dc, 0x0, 0xe, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4089, 0xff9, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.235870476s ago: executing program 0 (id=5010): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, r1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x8000000, 0x0, 0x0, 0xfffffdcf) 1.351892408s ago: executing program 2 (id=5011): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x2000809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040004}, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x65, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.141513085s ago: executing program 3 (id=5012): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='svcrdma_send_pullup\x00', r1, 0x0, 0xe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000032680)=""/102376, 0x18fe8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r3) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sync() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 861.162675ms ago: executing program 1 (id=5013): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) membarrier(0x10, 0x0) membarrier(0x8, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010102, 0x4e23, 0x7, 0x4e21, 0x10, 0xa, 0x80, 0x20, 0x2b}, {0x4, 0x2, 0x9, 0x3, 0x6, 0x5c8, 0x9, 0x80000001}, {0x1, 0x2, 0x3, 0x4}, 0x5, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d5, 0x33}, 0xa, @in6=@mcast2, 0x40000, 0x2, 0x2, 0x5, 0x7ae8, 0xe46, 0xfffff800}}, 0xe8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) 174.590355ms ago: executing program 0 (id=5014): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500bf7612d5be21b291ed825fb7000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18) ioperm(0x9, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x1f0, 0x0, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0xc, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x6) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20a, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 0s ago: executing program 2 (id=5015): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181100, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10138, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x1, 0x8, 0x1f9, 0x1, {{0x6, 0x4, 0x3, 0xc, 0x18, 0x68, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', r6, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x10b}, 0x14}}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x3}, 0x94) socket$kcm(0x2c, 0x3, 0x0) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000a40)='\xb9\x9b\xf2:\a\xac\xc9=itch\x000\xeb\x89\x02\xb8\x86u8\x8b1\xcc\xb1\xb7\xd0\xd58z\xf4\x13\x8bn\x1f\xfa\xdb\xd8\xbd\xf2\xc6\x84N\x8e\xa8\xc3\xb5m\x96\x8d\xcf\x89O\xde\tw{\xf5\xfb\xa4?\xc8\x02\x00\x00\x00s\xb0=\xc0\xb9\xc4\xa1&\x19\xb6\xd4\x1d\xb4\xa3W\x8f@t\xa0X\x1e\t\x92B\xa2\x91\x04\x94>]hb\x90\xd1\xee\x83\xd7pD\xfc\xd1 }\xdd\xab\x1fj\xf0\xd6K:\xe2\'\xfb-cv\x89\xd0\x87\x82=\xcd\xaa\xad_\xdd\xa2\xb2^\x14\xff2P\r$\x8d\xb6w\xcfS+\xe8b:\x18\xc3\b\xb3\xc0\x1b\xaa\x94\x9e\xf4\n\x1b\x11.\xc4FU\xff\x14\xbc\x82\xce\xb5\x03\xc5', 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x8, 0x2, 0x0, 0x10, 0x4, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f0000000080)=[0x4], 0x1, 0x0}) kernel console output (not intermixed with test programs): 1: Manufacturer: syz [ 1709.218285][T13827] usb 1-1: SerialNumber: syz [ 1709.227216][T13827] usb 1-1: config 0 descriptor?? [ 1709.461386][T13827] usb 1-1: USB disconnect, device number 59 [ 1710.852718][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 1710.852729][ T30] audit: type=1400 audit(1768082808.485:42698): avc: denied { read write } for pid=17357 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1711.119761][ T30] audit: type=1400 audit(1768082808.545:42699): avc: denied { open } for pid=17357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1711.255788][ T30] audit: type=1400 audit(1768082808.545:42700): avc: denied { ioctl } for pid=17357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1712.043653][ T30] audit: type=1400 audit(1768082808.565:42701): avc: denied { read write } for pid=18549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1712.213797][T14165] usb 42-1: device descriptor read/8, error -110 [ 1712.234454][T23798] netlink: 'syz.2.4546': attribute type 13 has an invalid length. [ 1712.242519][ T30] audit: type=1400 audit(1768082808.565:42702): avc: denied { read write open } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1712.298560][ T30] audit: type=1400 audit(1768082808.565:42703): avc: denied { ioctl } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1712.500077][ T30] audit: type=1400 audit(1768082808.575:42704): avc: denied { create } for pid=23787 comm="syz.4.4544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1712.521018][ T30] audit: type=1400 audit(1768082808.575:42705): avc: denied { setopt } for pid=23787 comm="syz.4.4544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1712.543122][ T30] audit: type=1400 audit(1768082808.585:42706): avc: denied { create } for pid=23787 comm="syz.4.4544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1712.570598][ T30] audit: type=1400 audit(1768082808.585:42707): avc: denied { read } for pid=23787 comm="syz.4.4544" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1713.168160][T14165] usb usb42-port1: attempt power cycle [ 1713.489848][T23810] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1713.496389][T23810] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1713.506055][T23810] vhci_hcd vhci_hcd.0: Device attached [ 1713.866784][T14165] usb usb42-port1: unable to enumerate USB device [ 1714.422216][T19814] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1714.543254][T14165] usb 40-1: SetAddress Request (7) to port 0 [ 1714.559888][T14165] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 1714.576220][T23811] vhci_hcd: connection closed [ 1714.576410][ T6006] vhci_hcd vhci_hcd.3: stop threads [ 1714.600204][ T6006] vhci_hcd vhci_hcd.3: release socket [ 1714.623447][ T6006] vhci_hcd vhci_hcd.3: disconnect device [ 1714.832639][T19814] usb 1-1: Using ep0 maxpacket: 16 [ 1714.986322][T19814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.007564][T19814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.019801][T19814] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1715.033068][T19814] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1715.042264][T19814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.170258][T19814] usb 1-1: config 0 descriptor?? [ 1715.423592][T23839] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1715.430125][T23839] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1715.530849][T23839] vhci_hcd vhci_hcd.0: Device attached [ 1715.731247][T19814] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 1715.815411][T19814] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 1715.827085][T19814] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1715.833973][T13827] usb 38-1: SetAddress Request (10) to port 0 [ 1715.860542][ T30] kauditd_printk_skb: 220 callbacks suppressed [ 1715.860559][ T30] audit: type=1400 audit(1768082813.485:42928): avc: denied { accept } for pid=23831 comm="syz.3.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1715.902914][T13827] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1715.925832][ T30] audit: type=1400 audit(1768082813.525:42929): avc: denied { accept } for pid=23831 comm="syz.3.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1715.926556][T23815] random: crng reseeded on system resumption [ 1715.990008][ T30] audit: type=1400 audit(1768082813.525:42930): avc: denied { accept } for pid=23831 comm="syz.3.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1716.016415][T23846] netlink: 'syz.1.4558': attribute type 13 has an invalid length. [ 1716.045792][ T30] audit: type=1400 audit(1768082813.535:42931): avc: denied { accept } for pid=23831 comm="syz.3.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1716.161083][T23840] vhci_hcd: connection reset by peer [ 1716.168443][ T5934] vhci_hcd vhci_hcd.2: stop threads [ 1716.170424][ T30] audit: type=1400 audit(1768082813.555:42932): avc: denied { accept } for pid=23831 comm="syz.3.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1716.180130][ T5934] vhci_hcd vhci_hcd.2: release socket [ 1716.239451][ T5934] vhci_hcd vhci_hcd.2: disconnect device [ 1716.271836][T19078] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1716.272026][T16697] usb 1-1: USB disconnect, device number 60 [ 1716.333206][ T30] audit: type=1400 audit(1768082813.555:42933): avc: denied { read write } for pid=23809 comm="syz.0.4550" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1716.379494][ T30] audit: type=1400 audit(1768082813.555:42934): avc: denied { ioctl open } for pid=23809 comm="syz.0.4550" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1716.381492][T19078] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1716.505471][T19078] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1716.523293][ T30] audit: type=1400 audit(1768082813.585:42935): avc: denied { accept } for pid=23831 comm="syz.3.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1716.548455][ T30] audit: type=1400 audit(1768082813.605:42936): avc: denied { accept } for pid=23831 comm="syz.3.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1716.570916][T19078] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1716.893035][ T30] audit: type=1400 audit(1768082813.615:42938): avc: denied { create } for pid=23845 comm="syz.1.4558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1718.371159][T23868] tipc: Enabling of bearer rejected, failed to enable media [ 1718.683249][T23876] lo speed is unknown, defaulting to 1000 [ 1718.695269][T23876] lo speed is unknown, defaulting to 1000 [ 1719.134612][T23875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4568'. [ 1719.150792][T23876] lo speed is unknown, defaulting to 1000 [ 1719.150874][T23875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4568'. [ 1719.187807][ T8141] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1719.212549][ T8141] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1719.271883][ T8141] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1719.345684][ T8141] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 syzkaller syzkaller login: [ 1719.705272][T23881] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1719.711784][T23881] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1719.795497][T14165] usb 40-1: device descriptor read/8, error -110 [ 1720.005312][T23881] vhci_hcd vhci_hcd.0: Device attached [ 1720.511297][T14165] usb usb40-port1: attempt power cycle [ 1720.525146][T23885] vhci_hcd: connection closed [ 1720.535300][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1720.557851][ T12] vhci_hcd vhci_hcd.2: release socket [ 1720.582041][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1720.893643][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 1720.893683][ T30] audit: type=1400 audit(1768082818.515:43116): avc: denied { prog_load } for pid=23899 comm="syz.4.4562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1721.016258][T13827] usb 38-1: device descriptor read/8, error -110 [ 1721.180627][T14165] usb usb40-port1: unable to enumerate USB device [ 1721.189858][ T30] audit: type=1400 audit(1768082818.525:43117): avc: denied { bpf } for pid=23899 comm="syz.4.4562" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1721.215329][ T30] audit: type=1400 audit(1768082818.555:43118): avc: denied { perfmon } for pid=23899 comm="syz.4.4562" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1721.245468][ T30] audit: type=1400 audit(1768082818.615:43119): avc: denied { read write } for pid=18549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1721.319794][ T30] audit: type=1400 audit(1768082818.615:43120): avc: denied { open } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1721.446205][ T30] audit: type=1400 audit(1768082818.615:43121): avc: denied { ioctl } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1721.480512][T13827] usb usb38-port1: attempt power cycle [ 1721.506060][T23913] netlink: 'syz.3.4575': attribute type 1 has an invalid length. [ 1721.507182][ T30] audit: type=1400 audit(1768082818.675:43122): avc: denied { bpf } for pid=23899 comm="syz.4.4562" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1721.540136][ T30] audit: type=1400 audit(1768082818.685:43123): avc: denied { create } for pid=23906 comm="syz.2.4574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1721.571663][ T30] audit: type=1400 audit(1768082818.685:43124): avc: denied { read } for pid=23906 comm="syz.2.4574" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1721.766985][ T30] audit: type=1400 audit(1768082818.685:43125): avc: denied { open } for pid=23906 comm="syz.2.4574" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1721.849754][ T5953] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1722.227361][T13827] usb usb38-port1: unable to enumerate USB device [ 1722.260281][ T5953] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1722.268546][ T5953] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1722.278599][ T5953] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.592172][T23928] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4580'. [ 1722.636515][T23927] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1722.661032][ T5953] usb 4-1: config 220 has no interface number 2 [ 1722.742158][ T5953] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1722.775750][ T5953] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1722.788422][ T5953] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1722.801121][ T5953] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1722.826985][ T5953] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1722.846538][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.857322][ T5953] usb 4-1: Product: syz [ 1722.861671][ T5953] usb 4-1: Manufacturer: syz [ 1722.866356][ T5953] usb 4-1: SerialNumber: syz [ 1723.223645][T23946] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1723.230190][T23946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1723.244557][ T5953] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1723.286212][T23946] vhci_hcd vhci_hcd.0: Device attached [ 1723.356538][ T5953] uvcvideo 4-1:220.0: No valid video chain found. [ 1723.363116][ T5953] usb 4-1: selecting invalid altsetting 0 [ 1723.374337][ T5953] usb 4-1: selecting invalid altsetting 0 [ 1723.381177][ T5953] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1723.391842][ T5953] usb 4-1: USB disconnect, device number 61 [ 1723.517030][T23953] netlink: 'syz.1.4586': attribute type 13 has an invalid length. [ 1723.589789][T13827] usb 34-1: SetAddress Request (14) to port 0 [ 1723.596036][T13827] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1724.150165][T23947] vhci_hcd: connection reset by peer [ 1724.155721][ T8141] vhci_hcd vhci_hcd.0: stop threads [ 1724.162493][ T8141] vhci_hcd vhci_hcd.0: release socket [ 1724.167955][ T8141] vhci_hcd vhci_hcd.0: disconnect device [ 1724.199636][T23958] dummy0: Device is already in use. [ 1725.949718][ T30] kauditd_printk_skb: 268 callbacks suppressed [ 1725.949734][ T30] audit: type=1400 audit(1768082823.515:43382): avc: denied { mounton } for pid=23977 comm="syz.0.4595" path="/282/file0" dev="tmpfs" ino=1497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1726.060399][ T30] audit: type=1400 audit(1768082823.575:43383): avc: denied { block_suspend } for pid=23975 comm="syz.1.4594" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1726.117893][ T30] audit: type=1400 audit(1768082823.575:43384): avc: denied { ioctl } for pid=23977 comm="syz.0.4595" path="socket:[80883]" dev="sockfs" ino=80883 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1726.181757][ T30] audit: type=1400 audit(1768082823.575:43385): avc: denied { read write } for pid=18549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1726.329102][ T30] audit: type=1400 audit(1768082823.575:43387): avc: denied { create } for pid=23975 comm="syz.1.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1726.488217][ T30] audit: type=1400 audit(1768082823.575:43386): avc: denied { open } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1726.630331][ T30] audit: type=1400 audit(1768082823.575:43388): avc: denied { ioctl } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1726.656748][ T30] audit: type=1400 audit(1768082823.575:43389): avc: denied { write } for pid=23975 comm="syz.1.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1726.677687][ T30] audit: type=1400 audit(1768082823.575:43390): avc: denied { read } for pid=23975 comm="syz.1.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1726.732406][T19078] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1726.759818][ T30] audit: type=1400 audit(1768082823.625:43391): avc: denied { read write } for pid=18162 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1727.029789][T19078] usb 4-1: Using ep0 maxpacket: 32 [ 1727.096749][T19078] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1727.107425][T19078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.141341][T19078] usb 4-1: config 0 descriptor?? [ 1727.165495][T19078] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1728.150301][T24022] netlink: 'syz.2.4607': attribute type 13 has an invalid length. [ 1728.706387][T13827] usb 34-1: device descriptor read/8, error -110 [ 1728.982573][T19078] gspca_sunplus: reg_w_riv err -110 [ 1728.987813][T19078] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1729.250083][T24033] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1729.256626][T24033] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1729.311386][T24033] vhci_hcd vhci_hcd.0: Device attached [ 1729.320000][T13827] usb 34-1: SetAddress Request (15) to port 0 [ 1729.410511][T13827] usb 34-1: new SuperSpeed USB device number 15 using vhci_hcd [ 1729.558326][T24038] vhci_hcd: connection reset by peer [ 1729.573811][ T182] vhci_hcd vhci_hcd.0: stop threads [ 1729.586962][ T182] vhci_hcd vhci_hcd.0: release socket [ 1729.616629][ T182] vhci_hcd vhci_hcd.0: disconnect device [ 1729.814769][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.903078][T24048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1730.671730][ T5953] usb 4-1: USB disconnect, device number 62 [ 1731.108385][ T30] kauditd_printk_skb: 222 callbacks suppressed [ 1731.108403][ T30] audit: type=1400 audit(1768082828.605:43614): avc: denied { create } for pid=24061 comm="syz.3.4615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1731.140133][ T30] audit: type=1400 audit(1768082828.605:43615): avc: denied { execmem } for pid=24061 comm="syz.3.4615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1731.187097][ T30] audit: type=1400 audit(1768082828.625:43616): avc: denied { read write } for pid=17357 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1732.004710][ T30] audit: type=1400 audit(1768082828.625:43617): avc: denied { open } for pid=17357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1732.040734][ T30] audit: type=1400 audit(1768082828.625:43618): avc: denied { ioctl } for pid=17357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1732.068235][ T30] audit: type=1400 audit(1768082828.645:43619): avc: denied { create } for pid=24063 comm="syz.1.4616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1732.209570][ T30] audit: type=1400 audit(1768082828.665:43620): avc: denied { create } for pid=24063 comm="syz.1.4616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1732.265220][ T30] audit: type=1400 audit(1768082828.665:43621): avc: denied { create } for pid=24063 comm="syz.1.4616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1732.325158][ T30] audit: type=1400 audit(1768082828.665:43622): avc: denied { map_create } for pid=24063 comm="syz.1.4616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1732.392544][ T30] audit: type=1400 audit(1768082828.665:43623): avc: denied { bpf } for pid=24063 comm="syz.1.4616" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1733.049097][T24096] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4627'. [ 1733.709785][ T5953] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 1733.849916][ T5953] usb 3-1: device descriptor read/64, error -71 [ 1734.339977][ T5953] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 1734.539797][T13827] usb 34-1: device descriptor read/8, error -110 [ 1734.579744][ T5953] usb 3-1: device descriptor read/64, error -71 [ 1734.660047][T13827] usb usb34-port1: attempt power cycle [ 1734.691829][ T5953] usb usb3-port1: attempt power cycle [ 1735.010013][T24136] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1735.420680][ T5953] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 1735.472064][ T5953] usb 3-1: device descriptor read/8, error -71 [ 1735.660231][T13827] usb usb34-port1: unable to enumerate USB device [ 1735.739737][ T5953] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 1735.795919][T24144] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4639'. [ 1735.891673][T24150] netlink: 'syz.4.4640': attribute type 13 has an invalid length. [ 1736.004687][ T5953] usb 3-1: device descriptor read/8, error -71 [ 1736.111460][ T30] kauditd_printk_skb: 324 callbacks suppressed [ 1736.111476][ T30] audit: type=1400 audit(1768082833.735:43948): avc: denied { prog_load } for pid=24155 comm="syz.0.4643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1736.166306][ T30] audit: type=1400 audit(1768082833.735:43949): avc: denied { bpf } for pid=24155 comm="syz.0.4643" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1736.353839][ T5953] usb usb3-port1: unable to enumerate USB device [ 1736.397675][ T30] audit: type=1400 audit(1768082833.735:43950): avc: denied { perfmon } for pid=24155 comm="syz.0.4643" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1736.471032][ T30] audit: type=1400 audit(1768082833.745:43951): avc: denied { bpf } for pid=24155 comm="syz.0.4643" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1736.554200][ T30] audit: type=1400 audit(1768082833.855:43952): avc: denied { create } for pid=24153 comm="syz.4.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1736.725665][ T30] audit: type=1400 audit(1768082833.895:43953): avc: denied { create } for pid=24153 comm="syz.4.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1736.826683][ T30] audit: type=1400 audit(1768082833.895:43954): avc: denied { setopt } for pid=24153 comm="syz.4.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1736.874989][T24173] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1737.201680][ T30] audit: type=1400 audit(1768082833.895:43955): avc: denied { setopt } for pid=24153 comm="syz.4.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1737.221502][ T30] audit: type=1400 audit(1768082833.955:43956): avc: denied { read write } for pid=24151 comm="syz.3.4642" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1737.280449][ T30] audit: type=1400 audit(1768082833.955:43957): avc: denied { open } for pid=24151 comm="syz.3.4642" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1737.970027][T19078] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1738.178198][T19078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1738.210041][T19078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1738.312189][T19078] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1738.321488][T19078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.329613][T19078] usb 4-1: Product: syz [ 1738.381329][T19078] usb 4-1: Manufacturer: syz [ 1738.404417][T19078] usb 4-1: SerialNumber: syz [ 1738.422431][T19078] usb 4-1: config 0 descriptor?? [ 1738.446211][T19078] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1738.588707][T24198] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4653'. [ 1738.688479][T19078] usb 4-1: USB disconnect, device number 63 [ 1738.777460][T23731] udevd[23731]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1739.299768][ T5953] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1739.388561][T24208] sp0: Synchronizing with TNC [ 1739.420173][T19078] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1739.464363][ T5953] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1739.473328][ T5953] usb 1-1: not running at top speed; connect to a high speed hub [ 1739.485938][ T5953] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 1739.494458][ T5953] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.504908][ T5953] usb 1-1: config 1 has no interface number 0 [ 1739.526594][ T5953] usb 1-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 1739.555595][ T5953] usb 1-1: config 1 interface 138 has no altsetting 0 [ 1739.564783][ T5953] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1739.577265][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.581729][T24214] netlink: 'syz.1.4659': attribute type 13 has an invalid length. [ 1739.585511][ T5953] usb 1-1: Product: syz [ 1739.598160][ T5953] usb 1-1: Manufacturer: syz [ 1739.600344][T19078] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1739.603025][ T5953] usb 1-1: SerialNumber: syz [ 1739.625075][T19078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.644024][T19078] usb 4-1: Product: syz [ 1739.653781][T19078] usb 4-1: Manufacturer: syz [ 1739.660501][T19078] usb 4-1: SerialNumber: syz [ 1739.672613][T19078] usb 4-1: config 0 descriptor?? [ 1739.852239][ T5953] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1739.907844][T24206] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4656'. [ 1739.944571][ T5953] usb 1-1: USB disconnect, device number 61 [ 1740.030435][T24222] netlink: 'syz.3.4656': attribute type 74 has an invalid length. [ 1740.417609][T24224] udevd[24224]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1741.179995][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 1741.180013][ T30] audit: type=1400 audit(1768082838.805:44204): avc: denied { read write } for pid=18162 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1741.254607][ T30] audit: type=1400 audit(1768082838.805:44205): avc: denied { open } for pid=18162 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1741.297985][ T30] audit: type=1400 audit(1768082838.805:44206): avc: denied { ioctl } for pid=18162 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1741.308292][T19078] usb 4-1: selecting invalid altsetting 1 [ 1741.334253][T19078] comedi comedi4: could not switch to alternate setting 1 [ 1741.349861][T19078] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1741.416620][T19078] usb 4-1: USB disconnect, device number 64 [ 1741.462097][ T30] audit: type=1400 audit(1768082838.865:44207): avc: denied { read write } for pid=17357 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1741.487095][ T30] audit: type=1400 audit(1768082838.865:44208): avc: denied { read write open } for pid=17357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1741.529739][ T30] audit: type=1400 audit(1768082838.865:44209): avc: denied { ioctl } for pid=17357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1742.108680][ T30] audit: type=1400 audit(1768082838.915:44210): avc: denied { create } for pid=24227 comm="syz.1.4665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1742.275977][ T30] audit: type=1400 audit(1768082838.915:44211): avc: denied { write } for pid=24227 comm="syz.1.4665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1742.318497][ T30] audit: type=1400 audit(1768082838.915:44212): avc: denied { read } for pid=24227 comm="syz.1.4665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1742.340911][ T30] audit: type=1400 audit(1768082838.925:44213): avc: denied { read } for pid=24228 comm="syz.2.4664" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1746.189893][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 1746.189910][ T30] audit: type=1400 audit(1768082843.815:44380): avc: denied { execute } for pid=24271 comm="syz.3.4673" path="/261/hugetlb.1GB.usage_in_bytes" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1746.389491][ T30] audit: type=1400 audit(1768082844.015:44381): avc: denied { read write } for pid=17357 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1746.431806][T24287] FAULT_INJECTION: forcing a failure. [ 1746.431806][T24287] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.455467][T24287] CPU: 0 UID: 0 PID: 24287 Comm: syz.2.4680 Tainted: G L syzkaller #0 PREEMPT(full) [ 1746.455499][T24287] Tainted: [L]=SOFTLOCKUP [ 1746.455506][T24287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1746.455529][T24287] Call Trace: [ 1746.455535][T24287] [ 1746.455543][T24287] dump_stack_lvl+0x16c/0x1f0 [ 1746.455574][T24287] should_fail_ex+0x512/0x640 [ 1746.455603][T24287] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1746.455636][T24287] should_failslab+0xc2/0x120 [ 1746.455662][T24287] __kmalloc_cache_noprof+0x80/0x800 [ 1746.455693][T24287] ? fuse_lookup_name+0x19f/0x780 [ 1746.455726][T24287] ? fuse_lookup_name+0x19f/0x780 [ 1746.455755][T24287] fuse_lookup_name+0x19f/0x780 [ 1746.455785][T24287] ? fuse_lock_inode+0xd2/0x110 [ 1746.455802][T24287] ? kasan_save_stack+0x33/0x60 [ 1746.455823][T24287] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1746.455850][T24287] ? __d_alloc+0x628/0xa80 [ 1746.455868][T24287] ? __pfx___mutex_lock+0x10/0x10 [ 1746.455893][T24287] ? do_syscall_64+0xcd/0xf80 [ 1746.455940][T24287] fuse_lookup+0x26a/0x560 [ 1746.455971][T24287] ? __pfx_fuse_lookup+0x10/0x10 [ 1746.456014][T24287] ? do_raw_spin_unlock+0x172/0x230 [ 1746.456042][T24287] ? _raw_spin_unlock+0x28/0x50 [ 1746.456067][T24287] lookup_one_qstr_excl+0x1d1/0x250 [ 1746.456087][T24287] ? mnt_want_write+0x161/0x450 [ 1746.456113][T24287] filename_create+0x1cf/0x400 [ 1746.456136][T24287] ? __pfx_filename_create+0x10/0x10 [ 1746.456162][T24287] ? find_held_lock+0x2b/0x80 [ 1746.456189][T24287] ? __might_fault+0xe3/0x190 [ 1746.456210][T24287] do_mknodat+0x19c/0x6f0 [ 1746.456236][T24287] ? __pfx_do_mknodat+0x10/0x10 [ 1746.456261][T24287] ? getname_flags.part.0+0x1c5/0x550 [ 1746.456285][T24287] __x64_sys_mknod+0x87/0xb0 [ 1746.456312][T24287] do_syscall_64+0xcd/0xf80 [ 1746.456338][T24287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.456357][T24287] RIP: 0033:0x7fda4a38f749 [ 1746.456373][T24287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1746.456390][T24287] RSP: 002b:00007fda4b174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1746.456408][T24287] RAX: ffffffffffffffda RBX: 00007fda4a5e5fa0 RCX: 00007fda4a38f749 [ 1746.456420][T24287] RDX: 0000000000000704 RSI: 0000000000008000 RDI: 00002000000002c0 [ 1746.456431][T24287] RBP: 00007fda4b174090 R08: 0000000000000000 R09: 0000000000000000 [ 1746.456442][T24287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1746.456452][T24287] R13: 00007fda4a5e6038 R14: 00007fda4a5e5fa0 R15: 00007ffd4897db78 [ 1746.456479][T24287] [ 1747.257207][ T30] audit: type=1400 audit(1768082844.015:44382): avc: denied { open } for pid=17357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1747.281558][ T30] audit: type=1400 audit(1768082844.025:44383): avc: denied { ioctl } for pid=17357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1747.307339][ T30] audit: type=1400 audit(1768082844.055:44384): avc: denied { prog_load } for pid=24285 comm="syz.0.4679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1747.379869][ T30] audit: type=1400 audit(1768082844.055:44385): avc: denied { bpf } for pid=24285 comm="syz.0.4679" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1747.400767][ T30] audit: type=1400 audit(1768082844.055:44386): avc: denied { read write } for pid=24286 comm="syz.2.4680" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1747.424649][ T30] audit: type=1400 audit(1768082844.055:44387): avc: denied { open } for pid=24286 comm="syz.2.4680" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1747.448368][ T30] audit: type=1400 audit(1768082844.055:44388): avc: denied { mounton } for pid=24286 comm="syz.2.4680" path="/274/file0" dev="tmpfs" ino=1468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1747.690502][ T30] audit: type=1400 audit(1768082844.055:44389): avc: denied { mount } for pid=24286 comm="syz.2.4680" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1748.192326][T24311] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4687'. [ 1749.268876][T24325] netlink: 'syz.2.4691': attribute type 8 has an invalid length. [ 1749.299884][ T5953] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1749.972439][ T5953] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1749.982484][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.990515][ T5953] usb 1-1: Product: syz [ 1749.994740][ T5953] usb 1-1: Manufacturer: syz [ 1749.999342][ T5953] usb 1-1: SerialNumber: syz [ 1750.491010][ T5953] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1750.621758][T13827] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1750.653456][ T5953] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1750.697486][T24332] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4694'. [ 1751.240127][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 1751.240158][ T30] audit: type=1400 audit(1768082848.865:44567): avc: denied { create } for pid=24334 comm="syz.3.4695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1751.335277][T13827] usb 3-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 1751.346399][T13827] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1751.407826][T13827] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1751.418211][T13827] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1751.495773][ T30] audit: type=1400 audit(1768082848.915:44568): avc: denied { ioctl } for pid=24321 comm="syz.2.4691" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1751.506092][T13827] usb 3-1: Product: syz [ 1751.655173][T13827] usb 3-1: Manufacturer: syz [ 1751.683873][T13827] usb 3-1: SerialNumber: syz [ 1751.685434][ T30] audit: type=1400 audit(1768082848.925:44569): avc: denied { create } for pid=24335 comm="syz.4.4696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1751.768508][T13827] usb 3-1: config 0 descriptor?? [ 1752.712454][T24344] cgroup: No subsys list or none specified [ 1752.846204][ T5953] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1752.881877][ T30] audit: type=1400 audit(1768082848.925:44570): avc: denied { connect } for pid=24335 comm="syz.4.4696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1752.905136][ T5953] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1752.919388][ T5953] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1752.948077][T19078] usb 3-1: USB disconnect, device number 65 [ 1752.986606][ T5953] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1753.017256][ T30] audit: type=1400 audit(1768082848.935:44571): avc: denied { ioctl } for pid=24335 comm="syz.4.4696" path="socket:[84301]" dev="sockfs" ino=84301 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1753.033969][ T5953] usb 1-1: USB disconnect, device number 62 [ 1753.263499][ T30] audit: type=1400 audit(1768082848.935:44572): avc: denied { write } for pid=24334 comm="syz.3.4695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1753.328861][ T30] audit: type=1400 audit(1768082848.935:44573): avc: denied { read } for pid=24335 comm="syz.4.4696" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1753.389810][ T30] audit: type=1400 audit(1768082848.935:44574): avc: denied { read } for pid=24334 comm="syz.3.4695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1753.445177][ T30] audit: type=1400 audit(1768082848.935:44575): avc: denied { open } for pid=24335 comm="syz.4.4696" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1753.519739][ T30] audit: type=1400 audit(1768082848.935:44576): avc: denied { create } for pid=24334 comm="syz.3.4695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1755.258197][T24382] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1756.270599][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 1756.270616][ T30] audit: type=1400 audit(1768082853.895:44759): avc: denied { prog_load } for pid=24377 comm="syz.4.4710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1756.820549][ T30] audit: type=1400 audit(1768082853.895:44760): avc: denied { bpf } for pid=24377 comm="syz.4.4710" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1756.841378][ T30] audit: type=1400 audit(1768082853.905:44761): avc: denied { perfmon } for pid=24377 comm="syz.4.4710" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1756.862608][ T30] audit: type=1400 audit(1768082853.905:44762): avc: denied { bpf } for pid=24377 comm="syz.4.4710" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1756.911274][ T30] audit: type=1400 audit(1768082853.905:44763): avc: denied { prog_run } for pid=24377 comm="syz.4.4710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1756.956493][ T30] audit: type=1400 audit(1768082853.905:44764): avc: denied { read } for pid=24386 comm="syz.2.4711" name="cec2" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1756.998169][ T30] audit: type=1400 audit(1768082853.905:44765): avc: denied { open } for pid=24386 comm="syz.2.4711" path="/dev/cec2" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1757.024987][ T30] audit: type=1400 audit(1768082853.915:44766): avc: denied { create } for pid=24386 comm="syz.2.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1757.062048][T24393] ptrace attach of "./syz-executor exec"[18162] was attempted by "./syz-executor exec"[24393] [ 1757.111526][ T30] audit: type=1400 audit(1768082853.915:44767): avc: denied { setopt } for pid=24386 comm="syz.2.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1757.149473][ T30] audit: type=1400 audit(1768082853.915:44768): avc: denied { bind } for pid=24386 comm="syz.2.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1757.174950][T24396] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4713'. [ 1758.524182][T24409] netlink: 'syz.2.4718': attribute type 15 has an invalid length. [ 1758.539839][T24409] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4718'. [ 1759.203280][T24423] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1759.209819][T24423] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1759.340224][T24423] vhci_hcd vhci_hcd.0: Device attached [ 1760.089746][T14165] usb 34-1: SetAddress Request (18) to port 0 [ 1760.180504][T14165] usb 34-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1760.297521][T24426] vhci_hcd: connection reset by peer [ 1760.336035][ T8132] vhci_hcd vhci_hcd.0: stop threads [ 1760.359720][ T8132] vhci_hcd vhci_hcd.0: release socket [ 1760.376618][ T8132] vhci_hcd vhci_hcd.0: disconnect device [ 1761.582540][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 1761.582552][ T30] audit: type=1400 audit(1768082859.215:44924): avc: denied { read write } for pid=18549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1761.669257][ T30] audit: type=1400 audit(1768082859.245:44925): avc: denied { open } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1761.781834][ T30] audit: type=1400 audit(1768082859.245:44926): avc: denied { ioctl } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1761.850017][ T30] audit: type=1400 audit(1768082859.275:44927): avc: denied { create } for pid=24443 comm="syz.3.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1761.895116][ T30] audit: type=1400 audit(1768082859.275:44928): avc: denied { write } for pid=24443 comm="syz.3.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1761.924560][T24441] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1761.931103][T24441] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1761.965320][ T30] audit: type=1400 audit(1768082859.365:44929): avc: denied { read } for pid=24434 comm="syz.2.4726" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1762.017891][ T30] audit: type=1400 audit(1768082859.365:44930): avc: denied { open } for pid=24434 comm="syz.2.4726" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1762.042687][T24441] vhci_hcd vhci_hcd.0: Device attached [ 1762.082986][ T30] audit: type=1400 audit(1768082859.365:44931): avc: denied { ioctl } for pid=24434 comm="syz.2.4726" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1762.337290][ T30] audit: type=1400 audit(1768082859.365:44932): avc: denied { create } for pid=24434 comm="syz.2.4726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1762.357143][T19078] usb 42-1: SetAddress Request (18) to port 0 [ 1762.600028][T19078] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1762.625837][ T30] audit: type=1400 audit(1768082859.365:44933): avc: denied { ioctl } for pid=24434 comm="syz.2.4726" path="socket:[85251]" dev="sockfs" ino=85251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1762.974106][T24446] vhci_hcd: connection reset by peer [ 1762.996521][ T8132] vhci_hcd vhci_hcd.4: stop threads [ 1763.002253][ T8132] vhci_hcd vhci_hcd.4: release socket [ 1763.009800][ T8132] vhci_hcd vhci_hcd.4: disconnect device [ 1763.595604][T24474] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4731'. [ 1765.329771][T14165] usb 34-1: device descriptor read/8, error -110 [ 1765.344494][T24497] xt_time: unknown flags 0xc [ 1765.731369][T14165] usb usb34-port1: attempt power cycle [ 1766.300616][T14165] usb usb34-port1: unable to enumerate USB device [ 1766.592883][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 1766.592895][ T30] audit: type=1400 audit(1768082864.225:45153): avc: denied { create } for pid=24522 comm="syz.0.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1766.667828][ T30] audit: type=1400 audit(1768082864.255:45154): avc: denied { ioctl } for pid=24522 comm="syz.0.4749" path="socket:[85481]" dev="sockfs" ino=85481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1766.728637][ T30] audit: type=1400 audit(1768082864.255:45155): avc: denied { allowed } for pid=24522 comm="syz.0.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1766.755022][T24523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24523 comm=syz.0.4749 [ 1766.855871][ T30] audit: type=1400 audit(1768082864.255:45156): avc: denied { create } for pid=24522 comm="syz.0.4749" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1766.879205][ T30] audit: type=1400 audit(1768082864.255:45157): avc: denied { map } for pid=24522 comm="syz.0.4749" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1767.143564][ T30] audit: type=1400 audit(1768082864.255:45158): avc: denied { read write } for pid=24522 comm="syz.0.4749" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1767.215155][ T30] audit: type=1400 audit(1768082864.365:45159): avc: denied { read write } for pid=17357 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1767.251084][ T30] audit: type=1400 audit(1768082864.365:45160): avc: denied { open } for pid=17357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1767.276828][ T30] audit: type=1400 audit(1768082864.385:45161): avc: denied { create } for pid=24522 comm="syz.0.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1767.290094][T24538] team_slave_1: entered allmulticast mode [ 1767.299215][ T30] audit: type=1400 audit(1768082864.385:45162): avc: denied { write } for pid=24522 comm="syz.0.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1767.739020][T19078] usb 42-1: device descriptor read/8, error -110 [ 1768.664412][T19078] usb usb42-port1: attempt power cycle [ 1769.237237][T24538] team_slave_1: left allmulticast mode [ 1769.263249][T24570] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4758'. [ 1769.273998][T19078] usb usb42-port1: unable to enumerate USB device [ 1771.652115][ T30] kauditd_printk_skb: 271 callbacks suppressed [ 1771.652134][ T30] audit: type=1400 audit(1768082868.675:45434): avc: denied { bpf } for pid=24595 comm="syz.0.4765" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1771.794170][ T30] audit: type=1400 audit(1768082868.675:45435): avc: denied { ioctl } for pid=24595 comm="syz.0.4765" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1771.906417][ T30] audit: type=1400 audit(1768082868.735:45436): avc: denied { map_create } for pid=24590 comm="syz.1.4763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1771.992259][ T30] audit: type=1400 audit(1768082868.745:45437): avc: denied { create } for pid=24590 comm="syz.1.4763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1772.037316][ T30] audit: type=1400 audit(1768082868.745:45438): avc: denied { write } for pid=24590 comm="syz.1.4763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1772.083695][T24605] IPVS: Error connecting to the multicast addr [ 1772.141923][ T30] audit: type=1400 audit(1768082869.275:45439): avc: denied { search } for pid=24594 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.211306][T18549] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1772.238834][T18549] audit: audit_lost=586 audit_rate_limit=0 audit_backlog_limit=64 [ 1772.243197][T24605] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1772.246881][ T30] audit: type=1400 audit(1768082869.275:45440): avc: denied { read } for pid=24594 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1774.029745][ T5953] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1774.169936][T14165] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1774.193688][ T5953] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1774.203128][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.250028][ T5953] usb 4-1: Product: syz [ 1774.259937][ T5953] usb 4-1: Manufacturer: syz [ 1774.264912][ T5953] usb 4-1: SerialNumber: syz [ 1774.324484][T14165] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1774.334876][T14165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.347196][T14165] usb 5-1: Product: syz [ 1774.358658][ T5953] usb 4-1: config 0 descriptor?? [ 1774.360417][T14165] usb 5-1: Manufacturer: syz [ 1774.381893][T14165] usb 5-1: SerialNumber: syz [ 1774.396256][T14165] usb 5-1: config 0 descriptor?? [ 1774.634455][T14165] usb 5-1: USB disconnect, device number 52 [ 1774.705113][ T5953] usb 4-1: USB disconnect, device number 65 [ 1774.711896][T24646] udevd[24646]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1775.369858][T24663] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1775.376396][T24663] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1775.406769][T24665] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4781'. [ 1775.420011][T24663] vhci_hcd vhci_hcd.0: Device attached [ 1775.642367][T24670] tmpfs: Unknown parameter 'Eeaɵ6' [ 1775.699860][T14165] usb 34-1: SetAddress Request (22) to port 0 [ 1775.713065][T14165] usb 34-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1775.930960][ T5953] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1775.943617][T24664] vhci_hcd: connection reset by peer [ 1775.965236][ T8157] vhci_hcd vhci_hcd.0: stop threads [ 1775.987762][ T8157] vhci_hcd vhci_hcd.0: release socket [ 1776.003569][ T8157] vhci_hcd vhci_hcd.0: disconnect device [ 1776.423217][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1776.431539][ T5953] usb 5-1: not running at top speed; connect to a high speed hub [ 1776.440743][ T5953] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 1776.449013][ T5953] usb 5-1: config 129 has no interface number 0 [ 1776.455569][ T5953] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1776.523067][T24683] netlink: 'syz.3.4789': attribute type 13 has an invalid length. [ 1776.738541][ T30] kauditd_printk_skb: 321 callbacks suppressed [ 1776.738558][ T30] audit: type=1400 audit(1768082874.365:45750): avc: denied { read write } for pid=18549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1776.867269][ T30] audit: type=1400 audit(1768082874.405:45751): avc: denied { open } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1776.963144][ T30] audit: type=1400 audit(1768082874.405:45752): avc: denied { ioctl } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1777.055975][ T5953] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1777.067499][ T5953] usb 5-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1777.078639][ T30] audit: type=1400 audit(1768082874.565:45753): avc: denied { create } for pid=24685 comm="syz.3.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1777.085480][ T5953] usb 5-1: config 129 interface 28 has no altsetting 0 [ 1777.149452][ T5953] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1777.166699][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.170009][ T30] audit: type=1400 audit(1768082874.645:45754): avc: denied { write } for pid=24685 comm="syz.3.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1777.197115][ T5953] usb 5-1: Product: syz [ 1777.212683][ T5953] usb 5-1: Manufacturer: syz [ 1777.217309][ T5953] usb 5-1: SerialNumber: syz [ 1777.237096][T24670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1777.260060][T24670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1777.299703][ T30] audit: type=1400 audit(1768082874.745:45755): avc: denied { read write } for pid=18549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1777.444451][ T30] audit: type=1400 audit(1768082874.745:45756): avc: denied { open } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1777.580142][ T30] audit: type=1400 audit(1768082874.745:45757): avc: denied { ioctl } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1777.640030][T19078] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1777.689909][ T30] audit: type=1400 audit(1768082874.755:45758): avc: denied { ioctl } for pid=24669 comm="syz.4.4784" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1777.764229][ T30] audit: type=1400 audit(1768082874.755:45759): avc: denied { ioctl } for pid=24669 comm="syz.4.4784" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1777.829766][T19078] usb 3-1: Using ep0 maxpacket: 32 [ 1777.924067][T19078] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1777.947929][T19078] usb 3-1: config 0 has no interface number 0 [ 1777.957595][T19078] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1777.966963][T19078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.109741][T19078] usb 3-1: Product: syz [ 1778.113942][T19078] usb 3-1: Manufacturer: syz [ 1778.118700][T19078] usb 3-1: SerialNumber: syz [ 1778.923283][T19078] usb 3-1: config 0 descriptor?? [ 1779.016053][T19078] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1779.073848][T19078] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1779.475889][T13827] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1779.484787][T19078] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1779.530322][T19078] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 1779.552822][T19078] usb 3-1: USB disconnect, device number 66 [ 1779.706311][T13827] usb 4-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=fb.88 [ 1779.749721][T13827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.809915][T13827] usb 4-1: Product: syz [ 1779.829737][T13827] usb 4-1: Manufacturer: syz [ 1779.834395][T13827] usb 4-1: SerialNumber: syz [ 1779.937183][T13827] usb 4-1: config 0 descriptor?? [ 1780.668578][T24718] netlink: 'syz.3.4797': attribute type 4 has an invalid length. [ 1780.729768][T24718] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4797'. [ 1780.779750][T14165] usb 34-1: device descriptor read/8, error -110 [ 1780.854014][T24721] delete_channel: no stack [ 1780.939049][T13827] kaweth 4-1:0.0: Firmware present in device. [ 1780.967326][T13827] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 1781.013669][T13827] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 1781.054899][T13827] usb 4-1: USB disconnect, device number 66 [ 1781.175646][T14165] usb usb34-port1: attempt power cycle [ 1781.748477][T14165] usb usb34-port1: unable to enumerate USB device [ 1781.840042][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 1781.840059][ T30] audit: type=1400 audit(1768082879.475:45896): avc: denied { execmem } for pid=24729 comm="syz.1.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1782.813227][ T30] audit: type=1400 audit(1768082879.855:45897): avc: denied { map_create } for pid=24729 comm="syz.1.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1782.832659][ T30] audit: type=1400 audit(1768082879.855:45898): avc: denied { map_read map_write } for pid=24729 comm="syz.1.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1782.853601][ T30] audit: type=1400 audit(1768082879.855:45899): avc: denied { prog_load } for pid=24729 comm="syz.1.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1782.855980][ T5953] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz) [ 1782.873497][ T30] audit: type=1400 audit(1768082879.855:45900): avc: denied { bpf } for pid=24729 comm="syz.1.4803" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1782.901503][ T30] audit: type=1400 audit(1768082879.855:45901): avc: denied { perfmon } for pid=24729 comm="syz.1.4803" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1782.931989][ T30] audit: type=1400 audit(1768082879.855:45902): avc: denied { prog_run } for pid=24729 comm="syz.1.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1783.023129][ T5953] etas_es58x 5-1:129.28: could not retrieve the product info string [ 1783.027796][ T30] audit: type=1400 audit(1768082879.915:45903): avc: denied { block_suspend } for pid=24729 comm="syz.1.4803" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1783.116359][ T30] audit: type=1400 audit(1768082880.585:45904): avc: denied { read write } for pid=18162 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1783.179172][ T30] audit: type=1400 audit(1768082880.585:45905): avc: denied { open } for pid=18162 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1784.861827][ T5953] usb 5-1: USB disconnect, device number 53 [ 1784.871478][ T5953] etas_es58x 5-1:129.28: Disconnecting syz syz [ 1784.947693][T24747] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 24747 comm: syz.0.4807) [ 1785.397291][T14165] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1785.579731][T14165] usb 1-1: Using ep0 maxpacket: 16 [ 1785.586786][T14165] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.601937][T14165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1785.613017][T14165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1785.623776][T14165] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1785.809302][T14165] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1786.446017][T14165] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1786.468732][T14165] usb 1-1: Manufacturer: syz [ 1786.495356][T14165] usb 1-1: config 0 descriptor?? [ 1786.669149][T24768] team_slave_1: entered allmulticast mode [ 1787.052501][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 1787.059834][ T30] audit: type=1400 audit(1768082884.405:46039): avc: denied { read } for pid=24767 comm="syz.2.4814" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1787.652241][T24768] team_slave_1: left allmulticast mode [ 1787.730434][ T30] audit: type=1400 audit(1768082884.405:46040): avc: denied { open } for pid=24767 comm="syz.2.4814" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1787.763761][ T30] audit: type=1400 audit(1768082884.465:46041): avc: denied { create } for pid=24769 comm="syz.4.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1787.810590][ T30] audit: type=1400 audit(1768082884.465:46042): avc: denied { execmem } for pid=24769 comm="syz.4.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1787.847983][ T30] audit: type=1400 audit(1768082884.575:46043): avc: denied { map_create } for pid=24767 comm="syz.2.4814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1788.099743][ T30] audit: type=1400 audit(1768082884.575:46044): avc: denied { create } for pid=24767 comm="syz.2.4814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1788.120463][ T30] audit: type=1400 audit(1768082885.275:46045): avc: denied { read write } for pid=24769 comm="syz.4.4816" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1788.193819][ T30] audit: type=1400 audit(1768082885.275:46046): avc: denied { open } for pid=24769 comm="syz.4.4816" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1788.249751][ T30] audit: type=1400 audit(1768082885.275:46047): avc: denied { ioctl } for pid=24769 comm="syz.4.4816" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1788.569846][ T30] audit: type=1400 audit(1768082885.275:46048): avc: denied { create } for pid=24769 comm="syz.4.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1789.339786][T14165] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1789.789468][T14165] usb 5-1: Using ep0 maxpacket: 8 [ 1789.812667][T14165] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 1789.828864][T14165] usb 5-1: config 0 has no interface number 0 [ 1789.837894][T19078] usb 1-1: USB disconnect, device number 63 [ 1789.843868][T14165] usb 5-1: config 0 interface 84 altsetting 246 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 1789.858660][T14165] usb 5-1: config 0 interface 84 altsetting 246 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1789.886327][T14165] usb 5-1: config 0 interface 84 altsetting 246 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 1789.923395][T14165] usb 5-1: config 0 interface 84 altsetting 246 endpoint 0xE has invalid wMaxPacketSize 0 [ 1789.950067][T14165] usb 5-1: config 0 interface 84 has no altsetting 0 [ 1789.972418][T14165] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 1789.996580][T14165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.023862][T14165] usb 5-1: Product: syz [ 1790.038597][T14165] usb 5-1: Manufacturer: syz [ 1790.076738][T14165] usb 5-1: SerialNumber: syz [ 1790.097869][T14165] usb 5-1: config 0 descriptor?? [ 1790.430528][T14165] comedi comedi4: Endpoint has wrong direction [ 1790.586631][T14165] dt9812 5-1:0.84: driver 'dt9812' failed to auto-configure device. [ 1790.601100][T14165] usb 5-1: USB disconnect, device number 54 [ 1791.292854][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.445666][T24823] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4825'. [ 1792.067932][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 1792.067948][ T30] audit: type=1400 audit(1768082889.695:46229): avc: denied { prog_load } for pid=24826 comm="syz.3.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1792.330345][ T30] audit: type=1400 audit(1768082889.735:46230): avc: denied { create } for pid=24826 comm="syz.3.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1792.499359][ T30] audit: type=1400 audit(1768082889.735:46231): avc: denied { write } for pid=24826 comm="syz.3.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1792.593330][ T30] audit: type=1400 audit(1768082889.735:46232): avc: denied { nlmsg_write } for pid=24826 comm="syz.3.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1792.854906][ T30] audit: type=1400 audit(1768082889.735:46233): avc: denied { create } for pid=24826 comm="syz.3.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1792.912620][ T30] audit: type=1400 audit(1768082889.735:46234): avc: denied { ioctl } for pid=24826 comm="syz.3.4828" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1792.967115][ T30] audit: type=1400 audit(1768082889.735:46235): avc: denied { setopt } for pid=24826 comm="syz.3.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1793.051250][ T30] audit: type=1400 audit(1768082889.735:46236): avc: denied { shutdown } for pid=24826 comm="syz.3.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1793.169943][T24832] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1793.176678][T24832] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1793.253769][ T30] audit: type=1400 audit(1768082890.735:46237): avc: denied { read write } for pid=18549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1793.602572][T24832] vhci_hcd vhci_hcd.0: Device attached [ 1793.612960][T24839] netlink: 'syz.3.4829': attribute type 13 has an invalid length. [ 1793.633193][ T30] audit: type=1400 audit(1768082890.735:46238): avc: denied { read write open } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1793.761469][T24846] FAULT_INJECTION: forcing a failure. [ 1793.761469][T24846] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.774246][T24846] CPU: 0 UID: 0 PID: 24846 Comm: syz.4.4831 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.774274][T24846] Tainted: [L]=SOFTLOCKUP [ 1793.774281][T24846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1793.774292][T24846] Call Trace: [ 1793.774299][T24846] [ 1793.774307][T24846] dump_stack_lvl+0x16c/0x1f0 [ 1793.774336][T24846] should_fail_ex+0x512/0x640 [ 1793.774364][T24846] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1793.774397][T24846] should_failslab+0xc2/0x120 [ 1793.774421][T24846] __kmalloc_cache_noprof+0x80/0x800 [ 1793.774451][T24846] ? tcf_ife_init+0x215/0x14e0 [ 1793.774472][T24846] ? __nla_parse+0x40/0x60 [ 1793.774495][T24846] ? tcf_ife_init+0x215/0x14e0 [ 1793.774515][T24846] tcf_ife_init+0x215/0x14e0 [ 1793.774543][T24846] ? __pfx_tcf_ife_init+0x10/0x10 [ 1793.774581][T24846] ? __asan_memcpy+0x3c/0x60 [ 1793.774603][T24846] tcf_action_init_1+0x460/0x6c0 [ 1793.774634][T24846] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1793.774677][T24846] ? __nla_parse+0x40/0x60 [ 1793.774699][T24846] tcf_action_init+0x432/0xa50 [ 1793.774737][T24846] ? __pfx_tcf_action_init+0x10/0x10 [ 1793.774784][T24846] ? is_bpf_text_address+0x8a/0x1a0 [ 1793.774806][T24846] ? bpf_ksym_find+0x127/0x1c0 [ 1793.774858][T24846] ? __lock_acquire+0x436/0x2890 [ 1793.774884][T24846] tcf_action_add+0xee/0x5c0 [ 1793.774917][T24846] ? __pfx_tcf_action_add+0x10/0x10 [ 1793.774990][T24846] ? __nla_parse+0x40/0x60 [ 1793.775014][T24846] tc_ctl_action+0x35b/0x470 [ 1793.775043][T24846] ? __pfx_tc_ctl_action+0x10/0x10 [ 1793.775080][T24846] ? __pfx_tc_ctl_action+0x10/0x10 [ 1793.775108][T24846] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1793.775133][T24846] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1793.775161][T24846] ? __lock_acquire+0x436/0x2890 [ 1793.775188][T24846] netlink_rcv_skb+0x158/0x420 [ 1793.775212][T24846] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1793.775236][T24846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1793.775270][T24846] ? netlink_deliver_tap+0x1ae/0xd30 [ 1793.775298][T24846] netlink_unicast+0x5aa/0x870 [ 1793.775325][T24846] ? __pfx_netlink_unicast+0x10/0x10 [ 1793.775360][T24846] netlink_sendmsg+0x8c8/0xdd0 [ 1793.775388][T24846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.775422][T24846] ____sys_sendmsg+0xa5d/0xc30 [ 1793.775449][T24846] ? copy_msghdr_from_user+0x10a/0x160 [ 1793.775476][T24846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1793.775505][T24846] ? __pfx__kstrtoull+0x10/0x10 [ 1793.775532][T24846] ___sys_sendmsg+0x134/0x1d0 [ 1793.775554][T24846] ? __pfx____sys_sendmsg+0x10/0x10 [ 1793.775587][T24846] ? find_held_lock+0x2b/0x80 [ 1793.775631][T24846] __sys_sendmmsg+0x200/0x420 [ 1793.775655][T24846] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1793.775684][T24846] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1793.775721][T24846] ? fput+0x70/0xf0 [ 1793.775738][T24846] ? ksys_write+0x1ac/0x250 [ 1793.775760][T24846] ? __pfx_ksys_write+0x10/0x10 [ 1793.775788][T24846] __x64_sys_sendmmsg+0x9c/0x100 [ 1793.775807][T24846] ? lockdep_hardirqs_on+0x7c/0x110 [ 1793.775831][T24846] do_syscall_64+0xcd/0xf80 [ 1793.775859][T24846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.775878][T24846] RIP: 0033:0x7f9ddc78f749 [ 1793.775893][T24846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1793.775911][T24846] RSP: 002b:00007f9ddd556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1793.775931][T24846] RAX: ffffffffffffffda RBX: 00007f9ddc9e6090 RCX: 00007f9ddc78f749 [ 1793.775949][T24846] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 1793.775960][T24846] RBP: 00007f9ddd556090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.775971][T24846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.775982][T24846] R13: 00007f9ddc9e6128 R14: 00007f9ddc9e6090 R15: 00007fff25b61b08 [ 1793.776008][T24846] [ 1793.869710][ T5953] usb 38-1: SetAddress Request (14) to port 0 [ 1794.690228][ T5953] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1795.955271][T24833] vhci_hcd: connection reset by peer [ 1795.962461][T24142] vhci_hcd vhci_hcd.2: stop threads [ 1795.983049][T24142] vhci_hcd vhci_hcd.2: release socket [ 1795.989139][T24142] vhci_hcd vhci_hcd.2: disconnect device [ 1796.799811][T14165] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 1796.960670][T14165] usb 5-1: LPM exit latency is zeroed, disabling LPM. [ 1797.068802][T14165] usb 5-1: config 0 has no interfaces? [ 1797.093541][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 1797.093557][ T30] audit: type=1400 audit(1768082894.725:46395): avc: denied { ioctl } for pid=24866 comm="syz.4.4838" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1797.096380][T14165] usb 5-1: string descriptor 0 read error: -22 [ 1797.136222][ T30] audit: type=1400 audit(1768082894.765:46396): avc: denied { create } for pid=24877 comm="syz.2.4841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1797.157400][ T30] audit: type=1400 audit(1768082894.765:46397): avc: denied { create } for pid=24868 comm="syz.3.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1797.185264][T14165] usb 5-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice= 7.1c [ 1797.201742][ T30] audit: type=1400 audit(1768082894.765:46398): avc: denied { write } for pid=24868 comm="syz.3.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1797.209516][T24881] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4842'. [ 1797.242244][T14165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.257268][ T30] audit: type=1400 audit(1768082894.765:46399): avc: denied { read } for pid=24868 comm="syz.3.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1797.300501][T14165] usb 5-1: config 0 descriptor?? [ 1797.342686][ T30] audit: type=1400 audit(1768082894.795:46400): avc: denied { setopt } for pid=24877 comm="syz.2.4841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1797.421186][ T30] audit: type=1400 audit(1768082894.795:46401): avc: denied { create } for pid=24877 comm="syz.2.4841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1797.449806][T19078] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1797.464916][ T30] audit: type=1400 audit(1768082894.795:46402): avc: denied { ioctl } for pid=24877 comm="syz.2.4841" path="socket:[86803]" dev="sockfs" ino=86803 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1797.531418][ T30] audit: type=1400 audit(1768082894.795:46403): avc: denied { read write } for pid=24877 comm="syz.2.4841" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1797.570285][T14165] usb 5-1: USB disconnect, device number 55 [ 1797.603980][ T30] audit: type=1400 audit(1768082894.795:46404): avc: denied { open } for pid=24877 comm="syz.2.4841" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1797.632129][T19078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.663763][T19078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1797.685213][T19078] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1797.695583][T19078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.024954][T19078] usb 3-1: config 0 descriptor?? [ 1798.107002][T24889] netlink: 'syz.0.4844': attribute type 1 has an invalid length. [ 1798.120373][T24889] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4844'. [ 1798.315905][T24890] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1798.337932][T24890] ALSA: mixer_oss: invalid index 1374389 [ 1798.529267][T24892] netlink: 'syz.4.4845': attribute type 1 has an invalid length. [ 1798.548725][T24892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4845'. [ 1798.585695][T24879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.610539][T24879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.649785][T24894] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4846'. [ 1798.727368][T19078] usbhid 3-1:0.0: can't add hid device: -71 [ 1798.813458][T19078] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1798.848449][T19078] usb 3-1: USB disconnect, device number 67 [ 1798.918701][T24899] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4847'. [ 1798.932477][T24897] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1798.941164][T24897] ALSA: mixer_oss: invalid index 1374389 [ 1799.249749][T19078] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1799.412044][T19078] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 1799.424163][T19078] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.434514][T19078] usb 4-1: config 0 has no interface number 0 [ 1799.441218][T19078] usb 4-1: config 0 interface 108 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1799.454691][T19078] usb 4-1: config 0 interface 108 has no altsetting 0 [ 1799.461567][T19078] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= e.b7 [ 1799.470827][T19078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.484316][T19078] usb 4-1: config 0 descriptor?? [ 1799.495173][T19078] usbserial_generic 4-1:0.108: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1799.508502][T19078] usbserial_generic 4-1:0.108: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1799.520550][T19078] usbserial_generic 4-1:0.108: device has no bulk endpoints [ 1799.530510][T19078] safe_serial 4-1:0.108: safe_serial converter detected [ 1799.537597][T19078] safe_serial 4-1:0.108: probe with driver safe_serial failed with error -22 [ 1799.900160][ T5953] usb 38-1: device descriptor read/8, error -110 [ 1800.204033][T19078] usb 4-1: USB disconnect, device number 67 [ 1800.332206][ T5953] usb usb38-port1: attempt power cycle [ 1800.437902][T24921] team_slave_1: entered allmulticast mode [ 1800.751617][T24923] ntfs3(loop2): try to read out of volume at offset 0x0 [ 1801.023581][T24921] team_slave_1: left allmulticast mode [ 1801.037195][ T5953] usb usb38-port1: unable to enumerate USB device [ 1801.334893][T24929] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4854'. [ 1802.110060][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 1802.110074][ T30] audit: type=1400 audit(1768082899.725:46613): avc: denied { create } for pid=24925 comm="syz.3.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1802.239869][ T30] audit: type=1400 audit(1768082899.725:46614): avc: denied { getopt } for pid=24925 comm="syz.3.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1802.322989][T24934] Bluetooth: hci0: invalid len left 7, exp >= 49 [ 1802.332784][ T30] audit: type=1400 audit(1768082899.735:46615): avc: denied { create } for pid=24925 comm="syz.3.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1802.381188][ T30] audit: type=1400 audit(1768082899.735:46616): avc: denied { setopt } for pid=24925 comm="syz.3.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1802.401411][ T30] audit: type=1400 audit(1768082899.765:46617): avc: denied { read } for pid=24936 comm="syz.4.4858" dev="nsfs" ino=4026533930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1802.466272][ T30] audit: type=1400 audit(1768082899.765:46618): avc: denied { open } for pid=24936 comm="syz.4.4858" path="net:[4026533930]" dev="nsfs" ino=4026533930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1802.581893][ T30] audit: type=1400 audit(1768082899.765:46619): avc: denied { create } for pid=24936 comm="syz.4.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1802.611490][ T30] audit: type=1400 audit(1768082899.775:46620): avc: denied { write } for pid=24936 comm="syz.4.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1802.637801][ T30] audit: type=1400 audit(1768082899.775:46621): avc: denied { read } for pid=24936 comm="syz.4.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1802.660225][ T30] audit: type=1400 audit(1768082899.775:46622): avc: denied { create } for pid=24932 comm="syz.1.4856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1802.702960][T19078] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1802.951428][T19078] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1802.969741][T19078] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1802.993066][T19078] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1803.014671][T19078] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x42, changing to 0x2 [ 1803.646634][T19078] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1803.661941][T19078] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 49643, setting to 1024 [ 1803.681209][T19078] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1803.714887][T19078] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1803.759734][T19078] usb 1-1: Product: syz [ 1803.764167][T19078] usb 1-1: Manufacturer: syz [ 1803.795450][T19078] cdc_wdm 1-1:1.0: skipping garbage [ 1803.811880][T19078] cdc_wdm 1-1:1.0: skipping garbage [ 1803.879916][T19078] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1804.009350][T24934] x_tables: duplicate underflow at hook 1 [ 1805.243151][T24959] team_slave_1: entered allmulticast mode [ 1805.281640][T24959] team_slave_1: left allmulticast mode [ 1805.314385][ T5953] usb 1-1: USB disconnect, device number 64 [ 1806.768467][T24986] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1806.775009][T24986] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1806.820144][T24986] vhci_hcd vhci_hcd.0: Device attached [ 1807.135634][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 1807.135672][ T30] audit: type=1400 audit(1768082904.765:46788): avc: denied { map_create } for pid=24991 comm="syz.3.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1807.193793][T19078] usb 42-1: SetAddress Request (22) to port 0 [ 1807.299007][ T30] audit: type=1400 audit(1768082904.765:46789): avc: denied { prog_load } for pid=24991 comm="syz.3.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1807.299026][T24987] vhci_hcd: connection closed [ 1807.299087][ T30] audit: type=1400 audit(1768082904.765:46790): avc: denied { bpf } for pid=24991 comm="syz.3.4867" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1807.318756][T19078] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1807.324052][ T30] audit: type=1400 audit(1768082904.765:46791): avc: denied { setopt } for pid=24991 comm="syz.3.4867" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1807.391467][T24140] vhci_hcd vhci_hcd.4: stop threads [ 1807.509081][T24140] vhci_hcd vhci_hcd.4: release socket [ 1807.515382][T24140] vhci_hcd vhci_hcd.4: disconnect device [ 1807.667589][ T5953] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1807.722400][ T30] audit: type=1400 audit(1768082904.765:46792): avc: denied { read write } for pid=24991 comm="syz.3.4867" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1808.431999][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.443552][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1808.471712][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1808.503657][ T30] audit: type=1400 audit(1768082904.765:46793): avc: denied { open } for pid=24991 comm="syz.3.4867" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1808.572063][ T5953] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1808.622546][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.622591][ T30] audit: type=1400 audit(1768082904.765:46794): avc: denied { ioctl } for pid=24991 comm="syz.3.4867" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1808.947172][ T30] audit: type=1400 audit(1768082905.045:46795): avc: denied { create } for pid=24994 comm="syz.1.4872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1808.970188][ T5953] usb 4-1: Product: syz [ 1808.974376][ T5953] usb 4-1: Manufacturer: syz [ 1808.978966][ T5953] usb 4-1: SerialNumber: syz [ 1809.039279][ T5953] usb 4-1: config 0 descriptor?? [ 1809.044291][ T30] audit: type=1400 audit(1768082905.055:46796): avc: denied { setopt } for pid=24994 comm="syz.1.4872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1809.110523][ T30] audit: type=1400 audit(1768082905.125:46797): avc: denied { ioctl } for pid=24991 comm="syz.3.4867" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1809.236996][T25009] overlayfs: failed to get index nlink (index/00fb210001e25f11d667874ce9a06d929f250da12059033363c406000000000000, err=0) [ 1809.266128][T25009] overlayfs: orphan index entry (index/00fb210001e25f11d667874ce9a06d929f250da12059033363c406000000000000, ftype=2000, nlink=1) [ 1809.491334][ T5953] usb 4-1: USB disconnect, device number 68 [ 1811.769743][T14165] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1811.985196][T14165] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1811.993691][T14165] usb 1-1: config 1 has no interface number 0 [ 1812.490240][T14165] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1812.501815][T14165] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1812.511684][T14165] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.537188][T19078] usb 42-1: device descriptor read/8, error -110 [ 1812.578039][T14165] usb 1-1: string descriptor 0 read error: -71 [ 1812.597505][T14165] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1812.631717][T14165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.645740][ T30] kauditd_printk_skb: 181 callbacks suppressed [ 1812.645756][ T30] audit: type=1400 audit(1768082910.275:46979): avc: denied { read write } for pid=18549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1812.770952][T14165] usb 1-1: can't set config #1, error -71 [ 1812.775475][ T30] audit: type=1400 audit(1768082910.275:46980): avc: denied { open } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1812.788543][T14165] usb 1-1: USB disconnect, device number 65 [ 1812.899013][ T30] audit: type=1400 audit(1768082910.275:46981): avc: denied { ioctl } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1812.968724][ T30] audit: type=1400 audit(1768082910.315:46982): avc: denied { read } for pid=25059 comm="syz.3.4892" dev="nsfs" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1813.410091][ T8132] wlan0: Trigger new scan to find an IBSS to join [ 1813.476264][T19078] usb usb42-port1: attempt power cycle [ 1813.512589][ T30] audit: type=1400 audit(1768082910.315:46983): avc: denied { open } for pid=25059 comm="syz.3.4892" path="net:[4026532822]" dev="nsfs" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1813.538709][ T30] audit: type=1400 audit(1768082910.315:46984): avc: denied { create } for pid=25059 comm="syz.3.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1813.560416][ T30] audit: type=1400 audit(1768082910.315:46985): avc: denied { write } for pid=25059 comm="syz.3.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1813.582736][ T30] audit: type=1400 audit(1768082910.315:46986): avc: denied { read } for pid=25059 comm="syz.3.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1813.583840][T25068] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1813.685145][ T30] audit: type=1400 audit(1768082910.405:46987): avc: denied { map_create } for pid=25061 comm="syz.1.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1813.787023][T25077] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4898'. [ 1813.827671][ T30] audit: type=1400 audit(1768082910.405:46988): avc: denied { prog_load } for pid=25061 comm="syz.1.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1813.859730][ T5953] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1813.859730][T14165] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1814.029716][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 1814.036741][ T5953] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1814.046107][ T5953] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1814.050455][T19078] usb usb42-port1: unable to enumerate USB device [ 1814.061984][ T5953] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1814.076912][ T5953] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1814.270407][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1814.321547][ T5953] usb 5-1: config 0 has no interface number 0 [ 1814.352311][ T5953] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1814.398225][ T5953] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1814.423376][T14165] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1814.434119][T14165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.442166][T14165] usb 1-1: Product: syz [ 1814.446363][T14165] usb 1-1: Manufacturer: syz [ 1814.458881][T14165] usb 1-1: SerialNumber: syz [ 1814.465378][T14165] usb 1-1: config 0 descriptor?? [ 1814.490800][ T5953] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1814.510425][ T5953] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1814.674740][ T5953] usb 5-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 1814.799727][ T5953] usb 5-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1814.831934][ T5953] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1815.174479][ T5953] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1815.223405][T14165] usb 1-1: USB disconnect, device number 66 [ 1815.251804][ T5953] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1815.287962][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.315158][ T5953] usb 5-1: Product: syz [ 1815.322705][ T5953] usb 5-1: Manufacturer: syz [ 1815.344447][ T5953] usb 5-1: SerialNumber: syz [ 1815.355110][ T5953] usb 5-1: config 0 descriptor?? [ 1815.366273][ T5953] usb 5-1: selecting invalid altsetting 2 [ 1815.759727][T13827] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1815.919756][T13827] usb 3-1: Using ep0 maxpacket: 32 [ 1815.926395][T13827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.936939][T13827] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.948295][T13827] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1815.958505][T13827] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1815.971997][T13827] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1815.974120][T25068] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4896'. [ 1815.978655][T13827] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1815.997190][T13827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.008593][T13827] usb 3-1: config 0 descriptor?? [ 1816.018313][T25068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4896'. [ 1816.106666][T25095] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4903'. [ 1816.115933][T25095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4903'. [ 1816.449786][ T5953] get_1284_register timeout [ 1816.986958][ C1] usb 5-1: async_complete: urb error -71 [ 1816.992728][ C1] usb 5-1: async_complete: urb error -71 [ 1817.070090][ T5953] uss720 5-1:0.125: probe with driver uss720 failed with error -5 [ 1817.099954][ T5953] usb 5-1: USB disconnect, device number 56 [ 1817.271196][T25100] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4904'. [ 1817.318899][T25101] hub 9-0:1.0: USB hub found [ 1817.324507][T25101] hub 9-0:1.0: 1 port detected [ 1817.723548][ T30] kauditd_printk_skb: 222 callbacks suppressed [ 1817.731518][ T30] audit: type=1400 audit(1768082915.265:47211): avc: denied { prog_load } for pid=25104 comm="syz.0.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1818.038386][ T30] audit: type=1400 audit(1768082915.275:47212): avc: denied { bpf } for pid=25104 comm="syz.0.4907" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1818.061933][ T30] audit: type=1400 audit(1768082915.285:47213): avc: denied { perfmon } for pid=25104 comm="syz.0.4907" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1818.084792][ T30] audit: type=1400 audit(1768082915.285:47214): avc: denied { bpf } for pid=25104 comm="syz.0.4907" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1818.084836][ T30] audit: type=1400 audit(1768082915.695:47215): avc: denied { read write } for pid=25110 comm="syz.3.4909" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1818.084873][ T30] audit: type=1400 audit(1768082915.695:47216): avc: denied { open } for pid=25110 comm="syz.3.4909" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1818.084936][ T30] audit: type=1400 audit(1768082915.695:47217): avc: denied { ioctl } for pid=25110 comm="syz.3.4909" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1818.150067][ T30] audit: type=1400 audit(1768082915.785:47218): avc: denied { allowed } for pid=25114 comm="syz.1.4910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1818.150948][T13827] usbhid 3-1:0.0: can't add hid device: -71 [ 1818.151044][T13827] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1818.154897][T13827] usb 3-1: USB disconnect, device number 68 [ 1818.272132][ T30] audit: type=1400 audit(1768082915.895:47219): avc: denied { read write } for pid=17772 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1818.272188][ T30] audit: type=1400 audit(1768082915.895:47220): avc: denied { read write open } for pid=17772 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1818.457157][ T8145] wlan0: Trigger new scan to find an IBSS to join [ 1819.253508][T25131] FAULT_INJECTION: forcing a failure. [ 1819.253508][T25131] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.266232][T25131] CPU: 1 UID: 0 PID: 25131 Comm: syz.4.4916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1819.266254][T25131] Tainted: [L]=SOFTLOCKUP [ 1819.266258][T25131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1819.266265][T25131] Call Trace: [ 1819.266271][T25131] [ 1819.266278][T25131] dump_stack_lvl+0x16c/0x1f0 [ 1819.266299][T25131] should_fail_ex+0x512/0x640 [ 1819.266316][T25131] ? fs_reclaim_acquire+0xae/0x150 [ 1819.266334][T25131] should_failslab+0xc2/0x120 [ 1819.266350][T25131] __kmalloc_noprof+0xeb/0x910 [ 1819.266373][T25131] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1819.266392][T25131] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1819.266407][T25131] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1819.266425][T25131] ? tomoyo_profile+0x47/0x60 [ 1819.266443][T25131] tomoyo_path_number_perm+0x245/0x580 [ 1819.266456][T25131] ? tomoyo_path_number_perm+0x237/0x580 [ 1819.266471][T25131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1819.266485][T25131] ? find_held_lock+0x2b/0x80 [ 1819.266515][T25131] ? find_held_lock+0x2b/0x80 [ 1819.266531][T25131] ? hook_file_ioctl_common+0x144/0x410 [ 1819.266552][T25131] ? __fget_files+0x20e/0x3c0 [ 1819.266571][T25131] security_file_ioctl+0x9b/0x240 [ 1819.266587][T25131] __x64_sys_ioctl+0xb7/0x210 [ 1819.266602][T25131] do_syscall_64+0xcd/0xf80 [ 1819.266618][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.266630][T25131] RIP: 0033:0x7f9ddc78f749 [ 1819.266647][T25131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1819.266658][T25131] RSP: 002b:00007f9ddd577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1819.266669][T25131] RAX: ffffffffffffffda RBX: 00007f9ddc9e5fa0 RCX: 00007f9ddc78f749 [ 1819.266676][T25131] RDX: 0000200000000000 RSI: 0000000000004b4b RDI: 0000000000000006 [ 1819.266682][T25131] RBP: 00007f9ddd577090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.266688][T25131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.266695][T25131] R13: 00007f9ddc9e6038 R14: 00007f9ddc9e5fa0 R15: 00007fff25b61b08 [ 1819.266709][T25131] [ 1819.266715][T25131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1819.848946][T25142] bridge1: entered promiscuous mode [ 1819.854238][T25142] bridge1: entered allmulticast mode [ 1820.313929][T25153] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4921'. [ 1820.558586][ T8157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.158219][T25175] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4926'. [ 1822.620189][T25182] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4924'. [ 1822.849763][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 1822.849776][ T30] audit: type=1400 audit(1768082920.475:47432): avc: denied { read write } for pid=17772 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1822.907790][ T30] audit: type=1400 audit(1768082920.475:47433): avc: denied { open } for pid=17772 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1822.939017][ T30] audit: type=1400 audit(1768082920.475:47434): avc: denied { ioctl } for pid=17772 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1823.159051][ T30] audit: type=1400 audit(1768082920.525:47435): avc: denied { create } for pid=25184 comm="syz.0.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1823.338763][ T30] audit: type=1400 audit(1768082920.525:47436): avc: denied { write } for pid=25184 comm="syz.0.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1823.369834][ T30] audit: type=1400 audit(1768082920.565:47437): avc: denied { read write } for pid=18162 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1823.399775][ T30] audit: type=1400 audit(1768082920.565:47438): avc: denied { read write open } for pid=18162 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1823.442037][ T30] audit: type=1400 audit(1768082920.565:47439): avc: denied { ioctl } for pid=18162 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1823.467902][ T30] audit: type=1400 audit(1768082920.625:47440): avc: denied { create } for pid=25184 comm="syz.0.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1823.499140][ T30] audit: type=1400 audit(1768082920.635:47441): avc: denied { create } for pid=25184 comm="syz.0.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1826.859702][T14165] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1827.029730][T14165] usb 5-1: Using ep0 maxpacket: 16 [ 1827.036945][T14165] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1827.055787][T14165] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1827.092950][T14165] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1827.107058][T14165] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1827.497138][T14165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.563682][T14165] usb 5-1: Product: syz [ 1827.570322][T14165] usb 5-1: Manufacturer: syz [ 1827.575057][T14165] usb 5-1: SerialNumber: syz [ 1827.581738][T14165] usb 5-1: config 0 descriptor?? [ 1827.726307][T25243] netlink: 'syz.0.4944': attribute type 12 has an invalid length. [ 1827.734545][T25243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4944'. [ 1827.744481][T25244] netlink: zone id is out of range [ 1827.750668][T25244] netlink: zone id is out of range [ 1827.860416][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 1827.860448][ T30] audit: type=1400 audit(1768082925.495:47612): avc: denied { read write } for pid=25219 comm="syz.4.4941" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1827.861535][T25248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.866691][ T30] audit: type=1400 audit(1768082925.495:47613): avc: denied { open } for pid=25219 comm="syz.4.4941" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1827.954828][T25244] netlink: del zone limit has 8 unknown bytes [ 1828.010153][T25248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.031409][T14165] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1828.121733][T14165] imon 5-1:0.0: unable to initialize intf0, err -90 [ 1828.216517][ T30] audit: type=1400 audit(1768082925.495:47614): avc: denied { ioctl } for pid=25219 comm="syz.4.4941" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1828.262215][T14165] imon:imon_probe: failed to initialize context! [ 1828.268567][T14165] imon 5-1:0.0: unable to register, err -19 [ 1828.299444][ T30] audit: type=1400 audit(1768082925.555:47615): avc: denied { setopt } for pid=25238 comm="syz.0.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1828.354660][ T30] audit: type=1400 audit(1768082925.565:47616): avc: denied { setopt } for pid=25238 comm="syz.0.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1828.371143][T14165] usb 5-1: USB disconnect, device number 57 [ 1828.383742][ T30] audit: type=1400 audit(1768082925.565:47617): avc: denied { create } for pid=25238 comm="syz.0.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1828.478687][ T30] audit: type=1400 audit(1768082925.575:47618): avc: denied { write } for pid=25238 comm="syz.0.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1828.533274][T25262] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1828.539809][T25262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1828.549807][T25262] vhci_hcd vhci_hcd.0: Device attached [ 1829.051227][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4950'. [ 1829.518918][T25263] vhci_hcd: connection closed [ 1829.523470][ T8132] vhci_hcd vhci_hcd.2: stop threads [ 1829.545302][ T8132] vhci_hcd vhci_hcd.2: release socket [ 1829.559543][ T8132] vhci_hcd vhci_hcd.2: disconnect device [ 1829.569441][ T30] audit: type=1400 audit(1768082925.575:47619): avc: denied { read write } for pid=25238 comm="syz.0.4944" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1829.659954][T13827] usb 38-1: enqueue for inactive port 0 [ 1829.679017][ T30] audit: type=1400 audit(1768082925.575:47620): avc: denied { open } for pid=25238 comm="syz.0.4944" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1829.704909][T25273] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1829.722109][T25274] fuse: Bad value for 'fd' [ 1829.868894][T25281] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4954'. [ 1830.009410][T25283] netlink: 'syz.1.4955': attribute type 13 has an invalid length. [ 1830.160522][T13827] usb usb38-port1: attempt power cycle [ 1830.767511][ T5953] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1830.777838][T13827] usb usb38-port1: unable to enumerate USB device [ 1830.976540][ T5953] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1831.240045][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1831.296614][T25302] team_slave_1: entered allmulticast mode [ 1831.432923][ T5953] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1831.483453][ T5953] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1831.591939][T25305] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 25305 comm: syz.1.4963) [ 1831.605205][ T5953] usb 3-1: Manufacturer: syz [ 1831.616607][ T5953] usb 3-1: config 0 descriptor?? [ 1831.684445][T25302] team_slave_1: left allmulticast mode [ 1831.738786][T25308] Invalid source name [ 1831.755949][T25308] UBIFS error (pid: 25308): cannot open "/dev/sg0", error -22 [ 1831.759684][ T5953] rc_core: IR keymap rc-hauppauge not found [ 1831.807782][ T5953] Registered IR keymap rc-empty [ 1831.847274][ T5953] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1831.879368][ T5953] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 1832.059791][T14165] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1832.061128][ T5953] usb 3-1: USB disconnect, device number 69 [ 1832.172498][T25315] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4965'. [ 1832.621510][T25317] netlink: 'syz.4.4966': attribute type 13 has an invalid length. [ 1832.703960][T14165] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.718407][T14165] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1832.734929][T14165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.775366][T14165] usb 4-1: config 0 descriptor?? [ 1832.902283][ T30] kauditd_printk_skb: 229 callbacks suppressed [ 1832.902300][ T30] audit: type=1400 audit(1768082930.535:47845): avc: denied { read write } for pid=18162 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1832.953018][T25320] sp0: Synchronizing with TNC [ 1832.969731][ T30] audit: type=1400 audit(1768082930.565:47846): avc: denied { read write open } for pid=18162 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1833.107842][ T30] audit: type=1400 audit(1768082930.565:47847): avc: denied { ioctl } for pid=18162 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1833.135043][ T30] audit: type=1400 audit(1768082930.595:47848): avc: denied { read } for pid=25319 comm="syz.0.4968" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1833.176831][T25320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4967'. [ 1833.189733][ T30] audit: type=1400 audit(1768082930.595:47849): avc: denied { open } for pid=25319 comm="syz.0.4968" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1833.891061][ T30] audit: type=1400 audit(1768082930.605:47850): avc: denied { ioctl } for pid=25319 comm="syz.0.4968" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1834.048099][ T30] audit: type=1400 audit(1768082930.635:47851): avc: denied { prog_load } for pid=25322 comm="syz.2.4969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1834.100266][ T30] audit: type=1400 audit(1768082930.635:47852): avc: denied { bpf } for pid=25322 comm="syz.2.4969" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1834.286465][ T30] audit: type=1400 audit(1768082930.635:47853): avc: denied { prog_load } for pid=25322 comm="syz.2.4969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1834.444986][ T30] audit: type=1400 audit(1768082930.635:47854): avc: denied { bpf } for pid=25322 comm="syz.2.4969" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1834.466570][T14165] usb 4-1: USB disconnect, device number 69 [ 1835.820056][T25344] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1835.828392][T25344] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1837.363302][T25370] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4979'. [ 1837.867327][T25368] tipc: Enabling of bearer rejected, failed to enable media [ 1838.014984][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 1838.014999][ T30] audit: type=1400 audit(1768082935.645:47987): avc: denied { read write } for pid=18549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1838.077300][ T30] audit: type=1400 audit(1768082935.685:47988): avc: denied { read write open } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1838.184526][ T30] audit: type=1400 audit(1768082935.685:47989): avc: denied { ioctl } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1838.294341][ T30] audit: type=1400 audit(1768082935.795:47990): avc: denied { create } for pid=25372 comm="syz.3.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1838.355985][ T30] audit: type=1400 audit(1768082935.795:47991): avc: denied { listen } for pid=25372 comm="syz.3.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1838.669352][ T30] audit: type=1400 audit(1768082935.795:47992): avc: denied { accept } for pid=25372 comm="syz.3.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1838.713177][ T30] audit: type=1400 audit(1768082935.815:47993): avc: denied { unmount } for pid=17772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1839.019023][ T30] audit: type=1400 audit(1768082935.845:47994): avc: denied { create } for pid=25371 comm="syz.1.4981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1839.061239][ T30] audit: type=1400 audit(1768082935.885:47995): avc: denied { unmount } for pid=17772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1839.246165][ T30] audit: type=1400 audit(1768082935.885:47996): avc: denied { read write } for pid=17772 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1839.371212][T25395] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4986'. [ 1840.634727][T25412] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1841.362140][T14165] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1841.410191][ T8132] wlan0: Trigger new scan to find an IBSS to join [ 1841.842120][T14165] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1841.851474][T14165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.859496][T14165] usb 5-1: Product: syz [ 1841.864657][T14165] usb 5-1: Manufacturer: syz [ 1841.870966][T14165] usb 5-1: SerialNumber: syz [ 1841.878206][T14165] usb 5-1: config 0 descriptor?? [ 1841.930985][T16435] Bluetooth: hci4: urb ffff88807626fd00 submission failed (2) [ 1843.146215][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 1843.146255][ T30] audit: type=1400 audit(1768082940.775:48150): avc: denied { create } for pid=25433 comm="syz.1.4997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1843.308524][T14165] usb 5-1: USB disconnect, device number 58 [ 1843.381748][ T30] audit: type=1400 audit(1768082940.805:48151): avc: denied { write } for pid=25414 comm="syz.4.4992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1843.409393][ T30] audit: type=1400 audit(1768082940.925:48152): avc: denied { read write } for pid=25424 comm="syz.2.4994" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1843.522787][ T30] audit: type=1400 audit(1768082940.925:48153): avc: denied { open } for pid=25424 comm="syz.2.4994" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1843.916200][ T30] audit: type=1400 audit(1768082940.925:48154): avc: denied { ioctl } for pid=25424 comm="syz.2.4994" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1843.959227][ T30] audit: type=1400 audit(1768082940.935:48155): avc: denied { create } for pid=25424 comm="syz.2.4994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1844.626567][ T30] audit: type=1400 audit(1768082940.935:48156): avc: denied { write } for pid=25424 comm="syz.2.4994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1844.675315][ T30] audit: type=1400 audit(1768082940.935:48157): avc: denied { read } for pid=25417 comm="syz.3.4993" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1844.711033][T25454] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1844.717671][T25454] audit: audit_lost=606 audit_rate_limit=0 audit_backlog_limit=64 [ 1846.202892][T25469] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5003'. [ 1846.716480][ T8132] wlan0: Trigger new scan to find an IBSS to join [ 1846.942231][T25476] overlayfs: orphan index entry (index/00fb21000127845a2238d941e0b2712971d52ad7a64e66805f1607000000000000, ftype=2000, nlink=1) [ 1848.351354][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 1848.351371][ T30] audit: type=1400 audit(1768082945.985:48326): avc: denied { read write } for pid=18549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1848.609895][ T8132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.756300][ T30] audit: type=1400 audit(1768082945.985:48327): avc: denied { open } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1848.780915][ T30] audit: type=1400 audit(1768082945.985:48328): avc: denied { ioctl } for pid=18549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1848.806841][ T30] audit: type=1400 audit(1768082945.985:48329): avc: denied { read } for pid=25486 comm="syz.2.5011" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1848.830143][ T30] audit: type=1400 audit(1768082945.985:48330): avc: denied { open } for pid=25486 comm="syz.2.5011" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1848.854038][ T30] audit: type=1400 audit(1768082945.985:48331): avc: denied { ioctl } for pid=25486 comm="syz.2.5011" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1848.879892][ T30] audit: type=1400 audit(1768082946.385:48332): avc: denied { create } for pid=25492 comm="syz.3.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1848.899666][ T30] audit: type=1400 audit(1768082946.415:48333): avc: denied { setopt } for pid=25492 comm="syz.3.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1848.928198][ T30] audit: type=1400 audit(1768082946.445:48334): avc: denied { create } for pid=25492 comm="syz.3.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1849.179725][ T30] audit: type=1400 audit(1768082946.465:48335): avc: denied { execmem } for pid=25495 comm="syz.1.5013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1955.529577][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1955.536535][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25505/3:b..l P24142/1:b..l P25496/3:b..l [ 1955.547449][ C0] rcu: (detected by 0, t=10502 jiffies, g=121233, q=138 ncpus=2) [ 1955.555222][ C0] task:syz.1.5013 state:R running task stack:25800 pid:25496 tgid:25495 ppid:16430 task_flags:0x400040 flags:0x00080000 [ 1955.569457][ C0] Call Trace: [ 1955.572727][ C0] [ 1955.575638][ C0] ? __schedule+0x10b9/0x6150 [ 1955.580290][ C0] __schedule+0x1139/0x6150 [ 1955.584769][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 1955.589515][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 1955.594266][ C0] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 1955.600317][ C0] ? __pfx___schedule+0x10/0x10 [ 1955.605142][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1955.610491][ C0] preempt_schedule_common+0x44/0xc0 [ 1955.615747][ C0] preempt_schedule_thunk+0x16/0x30 [ 1955.620917][ C0] _raw_spin_unlock+0x3e/0x50 [ 1955.625568][ C0] filemap_map_pages+0x1194/0x1e00 [ 1955.630657][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1955.636088][ C0] ? __lock_acquire+0x436/0x2890 [ 1955.641008][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1955.646442][ C0] do_fault+0x9cd/0x1ad0 [ 1955.650657][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1955.656089][ C0] __handle_mm_fault+0x1919/0x2bb0 [ 1955.661177][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1955.666610][ C0] ? __pte_offset_map_lock+0x174/0x310 [ 1955.672050][ C0] ? find_held_lock+0x2b/0x80 [ 1955.676704][ C0] ? follow_page_pte+0x5cf/0x1390 [ 1955.681705][ C0] handle_mm_fault+0x3fe/0xad0 [ 1955.686458][ C0] __get_user_pages+0x54e/0x3590 [ 1955.691392][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 1955.696749][ C0] populate_vma_page_range+0x267/0x3f0 [ 1955.702206][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1955.708158][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 1955.713937][ C0] ? do_mmap+0x69c/0x1210 [ 1955.718240][ C0] __mm_populate+0x1d8/0x380 [ 1955.722803][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1955.727889][ C0] ? up_write+0x282/0x4e0 [ 1955.732192][ C0] vm_mmap_pgoff+0x37f/0x470 [ 1955.736755][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1955.741855][ C0] ? fd_install+0x223/0x570 [ 1955.746354][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 1955.751275][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 1955.756194][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 1955.760845][ C0] ? xfd_validate_state+0x61/0x180 [ 1955.765927][ C0] ? __task_pid_nr_ns+0x1f5/0x500 [ 1955.770949][ C0] __x64_sys_mmap+0x125/0x190 [ 1955.775610][ C0] do_syscall_64+0xcd/0xf80 [ 1955.780087][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.785962][ C0] RIP: 0033:0x7f149818f749 [ 1955.790346][ C0] RSP: 002b:00007f1498fc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1955.798726][ C0] RAX: ffffffffffffffda RBX: 00007f14983e5fa0 RCX: 00007f149818f749 [ 1955.806665][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1955.814615][ C0] RBP: 00007f1498213f91 R08: ffffffffffffffff R09: 0000000000000000 [ 1955.822556][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1955.830497][ C0] R13: 00007f14983e6038 R14: 00007f14983e5fa0 R15: 00007ffdd2335d28 [ 1955.838445][ C0] [ 1955.841436][ C0] task:kworker/u8:29 state:R running task stack:24088 pid:24142 tgid:24142 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1955.854967][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1955.862747][ C0] Call Trace: [ 1955.866009][ C0] [ 1955.868912][ C0] ? __schedule+0x10b9/0x6150 [ 1955.873563][ C0] __schedule+0x1139/0x6150 [ 1955.878045][ C0] ? __pfx___schedule+0x10/0x10 [ 1955.882864][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 1955.887606][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1955.893644][ C0] preempt_schedule_notrace+0x62/0xe0 [ 1955.898988][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 1955.904863][ C0] ? batadv_iv_ogm_schedule_buff+0x761/0x14c0 [ 1955.910906][ C0] rcu_is_watching+0x8e/0xc0 [ 1955.915465][ C0] batadv_iv_ogm_schedule_buff+0xa79/0x14c0 [ 1955.921328][ C0] ? ww_mutex_lock+0x81/0x160 [ 1955.925986][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 1955.932285][ C0] ? __pfx___schedule+0x10/0x10 [ 1955.937109][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 1955.944101][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1955.949442][ C0] process_one_work+0x9ba/0x1b20 [ 1955.954366][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1955.961882][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1955.967226][ C0] ? assign_work+0x1a0/0x250 [ 1955.971787][ C0] worker_thread+0x6c8/0xf10 [ 1955.976352][ C0] ? __kthread_parkme+0x19e/0x250 [ 1955.981344][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1955.986430][ C0] kthread+0x3c5/0x780 [ 1955.990470][ C0] ? __pfx_kthread+0x10/0x10 [ 1955.995035][ C0] ? rcu_is_watching+0x12/0xc0 [ 1955.999855][ C0] ? __pfx_kthread+0x10/0x10 [ 1956.004419][ C0] ret_from_fork+0x983/0xb10 [ 1956.008984][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1956.014064][ C0] ? __switch_to+0x7af/0x10d0 [ 1956.018711][ C0] ? __pfx_kthread+0x10/0x10 [ 1956.023270][ C0] ret_from_fork_asm+0x1a/0x30 [ 1956.028118][ C0] [ 1956.031132][ C0] task:syz.2.5015 state:R running task stack:27848 pid:25505 tgid:25504 ppid:18162 task_flags:0x400140 flags:0x00080000 [ 1956.044590][ C0] Call Trace: [ 1956.047872][ C0] [ 1956.050792][ C0] ? __schedule+0x10b9/0x6150 [ 1956.055453][ C0] __schedule+0x1139/0x6150 [ 1956.059935][ C0] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1956.065730][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1956.071618][ C0] ? __schedule+0x114c/0x6150 [ 1956.076269][ C0] ? __pfx___schedule+0x10/0x10 [ 1956.081105][ C0] preempt_schedule_irq+0x51/0x90 [ 1956.086105][ C0] irqentry_exit+0x1d8/0x8c0 [ 1956.090670][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1956.096621][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 1956.101792][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 22 be ee 0e 0f 82 74 02 00 00 8b 35 ba ee ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1956.121367][ C0] RSP: 0018:ffffc9000bd2f160 EFLAGS: 00000206 [ 1956.127401][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 000000009e246e69 [ 1956.135344][ C0] RDX: 0000000000000000 RSI: ffffffff8daa8998 RDI: ffffffff8bf2b400 [ 1956.143296][ C0] RBP: 0000000000000002 R08: 00000000501fefef R09: 00000000f501fefe [ 1956.151237][ C0] R10: 0000000000000002 R11: ffff888057bc54b0 R12: 0000000000000000 [ 1956.159177][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1956.167126][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 1956.172299][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1956.178511][ C0] unwind_next_frame+0xd1/0x20b0 [ 1956.183422][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 1956.188505][ C0] ? __sys_bpf+0x3d9d/0x4980 [ 1956.193069][ C0] ? unwind_get_return_address+0x59/0xa0 [ 1956.198672][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1956.204797][ C0] arch_stack_walk+0x94/0x100 [ 1956.209447][ C0] ? __sys_bpf+0x3d9d/0x4980 [ 1956.214011][ C0] stack_trace_save+0x8e/0xc0 [ 1956.218668][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1956.224028][ C0] ? put_dec_trunc8+0x28b/0x370 [ 1956.228856][ C0] kasan_save_stack+0x33/0x60 [ 1956.233504][ C0] ? kasan_save_stack+0x33/0x60 [ 1956.238324][ C0] ? kasan_save_track+0x14/0x30 [ 1956.243142][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1956.247875][ C0] ? __kmalloc_node_track_caller_noprof+0x353/0x930 [ 1956.254436][ C0] ? kmemdup_noprof+0x29/0x60 [ 1956.259080][ C0] ? sidtab_sid2str_get+0x17a/0x680 [ 1956.264250][ C0] ? sidtab_entry_to_string+0x33/0x110 [ 1956.269685][ C0] ? security_sid_to_context_core+0x35c/0x640 [ 1956.275723][ C0] ? avc_audit_post_callback+0x109/0x8c0 [ 1956.281333][ C0] ? common_lsm_audit+0x24e/0x300 [ 1956.286328][ C0] ? slow_avc_audit+0x186/0x210 [ 1956.291153][ C0] ? avc_has_perm+0x1b5/0x1f0 [ 1956.295798][ C0] ? security_bpf_map+0x1e3/0x210 [ 1956.300792][ C0] ? map_create+0x1710/0x2a10 [ 1956.305440][ C0] ? __sys_bpf+0x3d9d/0x4980 [ 1956.310016][ C0] kasan_save_track+0x14/0x30 [ 1956.314662][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1956.319224][ C0] __kmalloc_node_track_caller_noprof+0x353/0x930 [ 1956.325609][ C0] ? sidtab_sid2str_get+0x17a/0x680 [ 1956.330789][ C0] ? kmemdup_noprof+0x29/0x60 [ 1956.335434][ C0] kmemdup_noprof+0x29/0x60 [ 1956.339912][ C0] sidtab_sid2str_get+0x17a/0x680 [ 1956.344920][ C0] sidtab_entry_to_string+0x33/0x110 [ 1956.350354][ C0] security_sid_to_context_core+0x35c/0x640 [ 1956.356232][ C0] avc_audit_post_callback+0x109/0x8c0 [ 1956.361687][ C0] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 1956.367481][ C0] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1956.373449][ C0] ? skb_put+0x138/0x1b0 [ 1956.377665][ C0] ? audit_log_n_string+0x253/0x550 [ 1956.382838][ C0] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1956.388792][ C0] common_lsm_audit+0x24e/0x300 [ 1956.393621][ C0] ? __pfx_common_lsm_audit+0x10/0x10 [ 1956.398966][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1956.404755][ C0] ? avc_update_node.isra.0+0x522/0xbc0 [ 1956.410278][ C0] slow_avc_audit+0x186/0x210 [ 1956.414929][ C0] ? __pfx_slow_avc_audit+0x10/0x10 [ 1956.420102][ C0] ? avc_denied+0x14a/0x190 [ 1956.424582][ C0] ? avc_has_perm_noaudit+0x306/0x3b0 [ 1956.429927][ C0] avc_has_perm+0x1b5/0x1f0 [ 1956.434399][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 1956.439398][ C0] ? find_held_lock+0x2b/0x80 [ 1956.444053][ C0] security_bpf_map+0x1e3/0x210 [ 1956.448875][ C0] map_create+0x1710/0x2a10 [ 1956.453356][ C0] ? __pfx_map_create+0x10/0x10 [ 1956.458184][ C0] ? __might_fault+0xe3/0x190 [ 1956.462879][ C0] ? __might_fault+0xe3/0x190 [ 1956.467540][ C0] ? __might_fault+0x13b/0x190 [ 1956.472294][ C0] ? selinux_bpf+0xdd/0x130 [ 1956.476778][ C0] __sys_bpf+0x3d9d/0x4980 [ 1956.481180][ C0] ? futex_private_hash_put+0x160/0x1b0 [ 1956.486706][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1956.491448][ C0] ? __pfx_futex_wait+0x10/0x10 [ 1956.496271][ C0] ? putname+0xf5/0x1a0 [ 1956.500404][ C0] ? do_futex+0x122/0x350 [ 1956.504716][ C0] ? __x64_sys_openat+0x174/0x210 [ 1956.509712][ C0] ? xfd_validate_state+0x61/0x180 [ 1956.514796][ C0] __x64_sys_bpf+0x78/0xc0 [ 1956.519188][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1956.524363][ C0] do_syscall_64+0xcd/0xf80 [ 1956.528839][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.534715][ C0] RIP: 0033:0x7fda4a38f749 [ 1956.539099][ C0] RSP: 002b:00007fda4b174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1956.547532][ C0] RAX: ffffffffffffffda RBX: 00007fda4a5e5fa0 RCX: 00007fda4a38f749 [ 1956.555477][ C0] RDX: 0000000000000048 RSI: 0000200000001780 RDI: 0000000000000000 [ 1956.563416][ C0] RBP: 00007fda4a413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1956.571355][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1956.579295][ C0] R13: 00007fda4a5e6038 R14: 00007fda4a5e5fa0 R15: 00007ffd4897db78 [ 1956.587244][ C0] [ 1956.590248][ C0] rcu: rcu_preempt kthread starved for 10607 jiffies! g121233 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1956.601494][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1956.611431][ C0] rcu: RCU grace-period kthread stack dump: [ 1956.617286][ C0] task:rcu_preempt state:R running task stack:28128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1956.630726][ C0] Call Trace: [ 1956.633977][ C0] [ 1956.636883][ C0] ? __schedule+0x10b9/0x6150 [ 1956.641533][ C0] __schedule+0x1139/0x6150 [ 1956.646011][ C0] ? __lock_acquire+0x436/0x2890 [ 1956.650925][ C0] ? __mod_timer+0x8f2/0xd30 [ 1956.655492][ C0] ? __pfx___schedule+0x10/0x10 [ 1956.660314][ C0] ? find_held_lock+0x2b/0x80 [ 1956.664968][ C0] ? schedule+0x2d7/0x3a0 [ 1956.669271][ C0] schedule+0xe7/0x3a0 [ 1956.673310][ C0] schedule_timeout+0x123/0x290 [ 1956.678131][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1956.683479][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1956.688736][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1956.694518][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1956.699952][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1956.704702][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1956.709976][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1956.715148][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1956.720055][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1956.724891][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1956.730682][ C0] rcu_gp_kthread+0x26d/0x380 [ 1956.735335][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1956.740504][ C0] ? rcu_is_watching+0x12/0xc0 [ 1956.745238][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1956.750409][ C0] ? __kthread_parkme+0x19e/0x250 [ 1956.755407][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1956.760580][ C0] kthread+0x3c5/0x780 [ 1956.764708][ C0] ? __pfx_kthread+0x10/0x10 [ 1956.769286][ C0] ? rcu_is_watching+0x12/0xc0 [ 1956.774017][ C0] ? __pfx_kthread+0x10/0x10 [ 1956.778578][ C0] ret_from_fork+0x983/0xb10 [ 1956.783138][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1956.788223][ C0] ? __switch_to+0x7af/0x10d0 [ 1956.792874][ C0] ? __pfx_kthread+0x10/0x10 [ 1956.797435][ C0] ret_from_fork_asm+0x1a/0x30 [ 1956.802197][ C0] [ 1956.805192][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1956.811481][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1956.816661][ C1] NMI backtrace for cpu 1 [ 1956.816673][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1956.816692][ C1] Tainted: [L]=SOFTLOCKUP [ 1956.816698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1956.816706][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1956.816725][ C1] Code: a6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 19 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1956.816738][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1956.816750][ C1] RAX: 000000000584f581 RBX: 0000000000000001 RCX: ffffffff8b7846d9 [ 1956.816760][ C1] RDX: 0000000000000000 RSI: ffffffff8dacea2d RDI: ffffffff8bf2b400 [ 1956.816768][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 1956.816777][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 1956.816785][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 1956.816794][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1956.816809][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1956.816818][ C1] CR2: 00007f8f18f26648 CR3: 00000000359a9000 CR4: 00000000003526f0 [ 1956.816827][ C1] Call Trace: [ 1956.816833][ C1] [ 1956.816837][ C1] default_idle+0x13/0x20 [ 1956.816857][ C1] default_idle_call+0x6c/0xb0 [ 1956.816876][ C1] do_idle+0x38d/0x510 [ 1956.816896][ C1] ? __pfx_do_idle+0x10/0x10 [ 1956.816927][ C1] cpu_startup_entry+0x4f/0x60 [ 1956.816946][ C1] start_secondary+0x21d/0x2d0 [ 1956.816959][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1956.816974][ C1] common_startup_64+0x13e/0x148 [ 1956.816996][ C1]