last executing test programs: 3m12.433701688s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) stat(0x0, &(0x7f0000002440)) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef00000018001280080001ef677470000c00028008000700ac1414bb"], 0x38}}, 0x0) syslog(0x2, 0xfffffffffffffffe, 0x587c) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000440)=[{r1, 0xe7d4c009da6c1d8d}], 0x1, 0x2000000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) syslog(0x3, &(0x7f0000000340)=""/255, 0xff) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r7, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r6], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400000000000000000200ffff09004825b4917a32000000000900010073797a30000000002400048020000180080001006c6f67001400028006000140001000000800064004000002140000001100000000000000000a000000000000"], 0x78}}, 0x0) 3m11.477879001s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(0x0, 0x9) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) 3m11.10692263s ago: executing program 3 (id=15): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x2}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) gettid() socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 3m9.791703165s ago: executing program 3 (id=19): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f00000003c0)={0x0, 0x14, 0x1, "e3"}, 0x0, 0x0}) 3m7.644451825s ago: executing program 32 (id=19): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f00000003c0)={0x0, 0x14, 0x1, "e3"}, 0x0, 0x0}) 14.64907634s ago: executing program 0 (id=571): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe9, 0xae, 0xdf, 0x40, 0x403, 0xbdc8, 0xa9d7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x0, 0x1, 0xf2, 0xc1}}]}}]}}, 0x0) 12.350711205s ago: executing program 4 (id=575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b0"], 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 12.128414061s ago: executing program 2 (id=576): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = epoll_create1(0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) close(0x3) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000004}) close(0x3) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) r5 = semget$private(0x0, 0x0, 0x0) semtimedop(r5, &(0x7f0000000140)=[{0x4, 0x7, 0x800}], 0x1, &(0x7f00000001c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe"], 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 11.673797714s ago: executing program 0 (id=578): preadv(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='start_task_reaping\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) close_range(r0, r0, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c", @ANYRESHEX=r0, @ANYBLOB="db75bb0579d3e8c9b029a67dbfe47192ff7979f0af5e010097884d5daf8ad6a3ce2626f1611f91005cc129637a9270c2ee5e17ca2f1060a678180f3095653ec32ea60ff6039465eecd85960222f0b08be8c073d3cacf175437c2ce0a189eeac6670dc3f152a3a255647da02619f3f1c268a0"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2) write$bt_hci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="011a02007de57c25575ef00bf38bde71ad801a"], 0x16) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r5, &(0x7f0000001000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x0, 0x4000080, 0x6, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1}}, 0x50) syz_usb_connect$uac1(0x2, 0x94, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c2402000000080000000000090401000001020002092401000000000905010900040000fff0cd59c3b0b23b170402000001020000090402010101ff0f00092402020000000000172401000001100905820000000a1ceacbff6f6cfecb1279645fbb000000000000", @ANYRES16=r5], 0x0) 10.908303274s ago: executing program 4 (id=580): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x10001, 0x0, 0x201, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x100000001, 0xffffffff, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000f000000000000000000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000f80)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01160700000000000025020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) syz_open_dev$video4linux(&(0x7f0000000180), 0xae, 0x20000) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000300)="a829") sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0) 9.514572396s ago: executing program 1 (id=583): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}}}}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x38, 0x301, 0x70bd25, 0x25dbdbfa, {0x4}}, 0x14}}, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) time(0xfffffffffffffffc) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(r3, 0xb) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) accept4(r6, 0x0, 0x0, 0x0) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x34, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40881) getsockname$inet(r7, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) (async) getsockname$inet(r7, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[]) (async) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[]) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x47ec, &(0x7f0000e68000)={0x2, 0x4e03, @local}, 0x10) 8.944385963s ago: executing program 0 (id=585): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5cdb) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@favordynmods}], [{@pcr={'pcr', 0x3d, 0x3}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, ':(+]'}}, {@subj_user={'subj_user', 0x3d, 'T\x89'}}]}) 8.246608132s ago: executing program 1 (id=586): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20000800) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000003000), 0x201, 0x0) ioctl$TUNSETNOCSUM(r9, 0x400454c8, 0x1) 7.994353415s ago: executing program 2 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0xfff, 0x5, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001200010a00000000fedbcd34ca8e2c5ca6cd0db4d4e72f6dd788aa716a7c00"], 0x14}}, 0x0) flock(r2, 0x1) flock(0xffffffffffffffff, 0x1) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x800840, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default'}}}]}) 7.188464889s ago: executing program 5 (id=588): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040084}, 0x48804) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x0, &(0x7f0000000000)) 6.501950104s ago: executing program 0 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000300)=@userptr={0x8, 0x8, 0x4, 0x20, 0x80000000, {}, {0x1, 0x2, 0x5, 0x4, 0x3, 0x8, "73e6c0e6"}, 0x8, 0x2, {0x0}, 0x5}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7e, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0xffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @broadcast}, 0x10) close_range(r9, r9, 0x0) 6.403757039s ago: executing program 1 (id=590): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) sendfile(r0, r1, 0x0, 0x4) (async) cachestat(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x2}, &(0x7f00000000c0), 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='swiotlb_bounced\x00', r0, 0x0, 0x4}, 0x18) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x40480, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x1, 0x332, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=@setneightbl={0x118, 0x43, 0x2, 0x70bd2d, 0x25dfdbfc, {0x1c}, [@NDTA_NAME={0x19, 0x1, '/dev/dma_heap/system\x00'}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_UCAST_PROBES={0x8, 0xa, 0x1}]}, @NDTA_PARMS={0x70, 0x6, 0x0, 0x1, [@NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x8}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x9}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x5}, @NDTPA_GC_STALETIME={0xc, 0x6, 0xfffffffffffffffd}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x5b}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x8}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x585294a5}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x6}, @NDTPA_LOCKTIME={0xc, 0xf, 0x8}, @NDTPA_IFINDEX={0x8, 0x1, r3}]}, @NDTA_PARMS={0x44, 0x6, 0x0, 0x1, [@NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x1060000000}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0xffffffffffffffff}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x75}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x3}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x5}, @NDTPA_APP_PROBES={0x8, 0x9, 0x62e}]}, @NDTA_NAME={0xd, 0x1, 'rpfilter\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x800}, @NDTA_THRESH1={0x8, 0x2, 0x7}, @NDTA_THRESH1={0x8, 0x2, 0x1e}]}, 0x118}, 0x1, 0x0, 0x0, 0x44}, 0x48c0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f00000007c0)={{@host, 0x8}, 0x6, 0x40, 0x8, 0x3}) memfd_create(&(0x7f0000000800)='-%[\x00', 0x4) syz_io_uring_setup(0x2a02, &(0x7f0000000840)={0x0, 0x1c45, 0x800, 0x2, 0x22c}, &(0x7f00000008c0), &(0x7f0000000900)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x101, 0x0, 0x20}, 0x18) r5 = openat(r4, &(0x7f00000009c0)='./file0\x00', 0x60000, 0x3) r6 = socket$tipc(0x1e, 0xec93aec665cb7f7f, 0x0) getsockname$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f0000000a80)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000b00)={0x1ff, 0x0, 0xdddd1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) (async) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000b40)={0x1, 0x3, {0xffffffffffffffff}, {0xee00}, 0xffff}) fcntl$setownex(r6, 0xf, &(0x7f0000000b80)={0x0, r7}) inotify_init() (async) fcntl$setown(r2, 0x8, r7) userfaultfd(0x80000) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x60, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008041) 5.918705607s ago: executing program 2 (id=591): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000701, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40000001500000426bd7000fddbdf2520010000000000000000000000000002640101020000000000000000000000004e2300004e230007020020803b000000239651dae16e44e8261c884035ca8933fd7b9c74a000d3c0a1d97418efca9ddd8aba98ba583b1cc0c94569a512aab00886765678dbdb96547e256fd7d5c83274fb331f7a6bdeebcb49c3cdf5290d4e6af7ab068e3d2d040ff19f12f3e3909afe80c40fa6a96237de74fd76d2067cb785df834d1a44331aa43676e265cf3f634c9a58a5fccdfd8349a0c2e4929c59146f3aa25e6351992ec0148e4994b099f391c3f845065f3bd9e0f56783f2da34d4934bf2fac33af2c442994a0a0fb35ae27c156bb2adda33a1c08b1a12c0fd021f488068318f1ca184b3d8d47a15", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000080018000400000008001d0008000000520003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000097a288a05878f5da4a530000"], 0xb4}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.739026013s ago: executing program 4 (id=592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0x2040400) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f00000001c0)='0', 0x1) syz_io_uring_setup(0x10a1, &(0x7f00000000c0)={0x0, 0xde05, 0x40, 0xffffffff, 0x135}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x20, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) 5.571869305s ago: executing program 5 (id=593): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18efffffff00100020000000000200009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18efffffff00100020000000000200009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0xb551, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7ffffffd, 0x4, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xc, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x7, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0x17c, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x0, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0xfffffffe, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x7, 0x3, 0x3c, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="4d6bde9aecc7955e497ac0d6834d6a35f38c20dd9d1b6fc9bf16ca130b0220132080b1e697d5b5bf83deb694c9e051cbe38440916cd8f55ffc2eec31a4b8c31b6dbfcd0a55b855bc", 0x48}, {&(0x7f00000000c0)="d3", 0x1}], 0x2) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) (async) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) timerfd_create(0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) request_key(&(0x7f00000005c0)='trusted\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='f2fs\x00', 0xfffffffffffffffc) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'ip6gretap0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) 5.49861262s ago: executing program 1 (id=594): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfd, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000002340)={0x20, 0x9, 0x18, {0x18, 0x1, "46ff4482859651c93f5b5b3ca2db0bdbe054d8d0e705"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x40, 0x0, 0x0) capset(0x0, 0x0) 4.842469833s ago: executing program 0 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xba99}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f0000001f40)}, 0x9) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) prlimit64(r5, 0x2, 0x0, 0x0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x400) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x80044940, &(0x7f00000006c0)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'pcl818\x00', [0xfffffffb, 0x2167, 0x2, 0x100000, 0x88d7, 0x8f, 0xfffffffd, 0x1000010, 0x3, 0xffffffff, 0x200, 0xfff, 0x344, 0x1, 0x0, 0xffffffff, 0x6, 0x3, 0x81, 0xe, 0x0, 0x0, 0x80, 0x7ff, 0x5, 0x0, 0xb0c4, 0x7df, 0x8, 0x1, 0x1]}) migrate_pages(r1, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) 3.878250496s ago: executing program 4 (id=596): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f00006d0000/0x4000)=nil, 0x4000}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000007e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000007f80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0xfffffffffffffec6, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x0, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) eventfd2(0x0, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000001b1000020d602d0af2f0c1d17d5e4582417f7b415", @ANYRES32=r5, @ANYBLOB="0000000000000000000000000080000000000000"]) lseek(r7, 0x0, 0x2) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000040)=']\x00') r8 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x80000) recvfrom$llc(r8, &(0x7f0000000240)=""/235, 0xeb, 0x10002, &(0x7f0000000100)={0x1a, 0x311, 0x69, 0x8, 0x9, 0xd, @local}, 0x10) 3.798726403s ago: executing program 5 (id=597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) 3.625567724s ago: executing program 2 (id=598): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x38}, @nop, @timestamp={0x8, 0xa, 0x4, 0x6}, @md5sig={0x13, 0x12, "8eae271f5629cd5429a965552dc907eb"}, @timestamp={0x8, 0xa, 0x6, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0xd, 0x0, 0x80000000000001}]}}}}}}}, 0x0) 3.069805267s ago: executing program 5 (id=599): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x10001, 0x0, 0x201, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x100000001, 0xffffffff, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000f000000000000000000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000f80)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01160700000000000025020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) syz_open_dev$video4linux(&(0x7f0000000180), 0xae, 0x20000) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000300)="a829") sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0) 2.69450236s ago: executing program 4 (id=600): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x10001, 0x0, 0x201, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x100000001, 0xffffffff, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000f000000000000000000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000f80)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01160700000000000025020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) syz_open_dev$video4linux(&(0x7f0000000180), 0xae, 0x20000) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000300)="a829") sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0) 2.052356748s ago: executing program 2 (id=601): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x20000328) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) socket$netlink(0x10, 0x3, 0x2b) mkdirat(0xffffffffffffffff, 0x0, 0x44) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x23, &(0x7f0000000e00)=ANY=[@ANYBLOB="0000000000000000b7080000c70700007b8af8ff00000000bfa2", @ANYRES64], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff8001}, 0x94) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 2.019955418s ago: executing program 1 (id=602): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x5602, &(0x7f0000000000)={0x0, "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"}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800114000000000050004000000000012000300686173683a6e6574"], 0x60}}, 0x4080) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000022c0)={0x50, 0x0, r3, {0x7, 0x2b, 0x9, 0x12, 0x80, 0xc, 0x5, 0xeb, 0x0, 0x0, 0x2, 0x7}}, 0x50) 1.678028518s ago: executing program 0 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) read$fb(r4, &(0x7f0000000040)=""/48, 0x30) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="010226bd7000fedbdf2564000000080001004000000008000300", @ANYRES32=r3, @ANYBLOB="3781e60a0a7cbe95d59a726422b00495caf2fc81601bb4e72f23e3965a116c720d4a9d5a167b1a0ef45ba198c8d656febee4944d1d8ec4af045a97fb2ec7e0171b81554f335bdfeb803e2fd0baf30d36f3392ad32a2a98e6dbbb7b4a21cd8b302771dc668557c0f814eef9878ca58bd12378a8e53dbdf968035c17d0367012ed522eb5a5059a551c93389c976e1be3ca80d900c562d82135386c22921bd2451cae0c837b9500d007142acb93df253063a5d1ac9721497851a8402aaa31a89316b1cf87c154"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r1}) keyctl$link(0x8, r1, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000331000/0x1000)=nil, 0x1000) r6 = accept4$rose(r4, &(0x7f00000000c0)=@full={0xb, @remote, @default, 0x0, [@netrom, @null, @netrom, @bcast, @bcast, @rose]}, &(0x7f0000000240)=0x40, 0x80800) write(r6, &(0x7f0000000280)="83696c3065345ec5277cabc0dc077268c777", 0x12) r7 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000580)='#]\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r9, 0x0) setresuid(0x0, 0x0, r9) 1.64306593s ago: executing program 1 (id=604): ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3f6f, 0x55f8, 0x3d, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000f060300000000000000000005000000050001"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') 1.242306708s ago: executing program 5 (id=605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) close(r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e0000000000000000000006000004000000", @ANYRES32=0x0, @ANYRES64=r0], 0x48) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {0x3}, {0xf4ef, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x33, 0x0, 0x0) 766.592467ms ago: executing program 2 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000004000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="000088a8", 0x4, 0x20044880, &(0x7f0000000340)={0x11, 0x8100, r9, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x1) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = dup2(r10, r10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r11, 0x84, 0x23, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x80}}, 0x0) 112.458553ms ago: executing program 5 (id=607): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000100)=0x9, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102386, 0x18ff2) r5 = userfaultfd(0x80000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c90000/0x4000)=nil, 0x1000}) tkill(r3, 0xb) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1652, &(0x7f0000000380)={0x0, 0x455d, 0x10, 0x3, 0x24d}, &(0x7f0000000080), &(0x7f00000001c0)) 0s ago: executing program 4 (id=608): rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): =1 [ 138.254985][ T7181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.234'. [ 138.337179][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.236'. [ 138.634427][ T5895] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 138.642620][ T5895] usb 2-1: config 0 has no interface number 0 [ 138.642670][ T5895] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 138.642693][ T5895] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 84, setting to 64 [ 138.642712][ T5895] usb 2-1: config 0 interface 113 has no altsetting 0 [ 138.864033][ T5895] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 138.934054][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.955770][ T5895] usb 2-1: Product: syz [ 138.972841][ T5895] usb 2-1: Manufacturer: syz [ 138.992324][ T5895] usb 2-1: SerialNumber: syz [ 139.014810][ T30] audit: type=1400 audit(1751915518.814:372): avc: denied { connect } for pid=7195 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.058053][ T5895] usb 2-1: config 0 descriptor?? [ 139.065207][ T7164] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 139.082604][ C0] usb 2-1: NFC: Urb failure (status -71) [ 139.090871][ T30] audit: type=1400 audit(1751915518.814:373): avc: denied { shutdown } for pid=7195 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.119754][ C0] usb 2-1: NFC: Urb failure (status -71) [ 139.133403][ T5895] usb 2-1: NFC: Unable to get FW version [ 139.146699][ T5895] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -71 [ 139.299199][ T7208] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20003 [ 139.484424][ T30] audit: type=1400 audit(1751915519.274:374): avc: denied { lock } for pid=7205 comm="syz.2.243" path="socket:[12533]" dev="sockfs" ino=12533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.524047][ T7164] netlink: 504 bytes leftover after parsing attributes in process `syz.1.233'. [ 139.629628][ T7214] syzkaller0: entered promiscuous mode [ 139.650385][ T7214] syzkaller0: entered allmulticast mode [ 139.764069][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 139.773273][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 139.927350][ T30] audit: type=1400 audit(1751915519.714:375): avc: denied { execute } for pid=7223 comm="syz.0.246" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 139.987595][ T7224] netlink: 'syz.0.246': attribute type 15 has an invalid length. [ 140.001200][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.013302][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.259487][ T30] audit: type=1400 audit(1751915520.054:376): avc: denied { read write } for pid=7199 comm="syz.5.241" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 140.514912][ T30] audit: type=1400 audit(1751915520.054:377): avc: denied { open } for pid=7199 comm="syz.5.241" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 140.708148][ T3090] usb 2-1: USB disconnect, device number 7 [ 140.821835][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.249'. [ 141.766753][ T30] audit: type=1400 audit(1751915521.554:378): avc: denied { read } for pid=7244 comm="syz.2.252" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 141.873542][ T30] audit: type=1400 audit(1751915521.554:379): avc: denied { open } for pid=7244 comm="syz.2.252" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 141.903831][ T7251] 8021q: VLANs not supported on nlmon0 [ 141.940301][ T30] audit: type=1400 audit(1751915521.554:380): avc: denied { mounton } for pid=7244 comm="syz.2.252" path="/proc/212/cgroup" dev="proc" ino=12610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 142.228828][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.246394][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.427069][ T7270] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.256'. [ 142.452144][ T7270] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 142.507809][ T7270] openvswitch: netlink: Duplicate key (type 0). [ 142.675383][ T7275] netlink: 'syz.1.257': attribute type 2 has an invalid length. [ 143.448558][ T7303] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 143.459787][ T7303] batman_adv: batadv0: Adding interface: gretap1 [ 143.466188][ T7303] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.491939][ T7303] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 143.589210][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 143.589227][ T30] audit: type=1400 audit(1751915523.224:384): avc: denied { map } for pid=7300 comm="syz.4.262" path="pipe:[12661]" dev="pipefs" ino=12661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 143.640047][ T30] audit: type=1400 audit(1751915523.224:385): avc: denied { connect } for pid=7300 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.901505][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.5.263'. [ 144.443109][ T30] audit: type=1400 audit(1751915524.234:386): avc: denied { ioctl } for pid=7312 comm="syz.1.264" path="socket:[12224]" dev="sockfs" ino=12224 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 144.614259][ T30] audit: type=1400 audit(1751915524.234:387): avc: denied { relabelfrom } for pid=7312 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 144.643888][ T30] audit: type=1400 audit(1751915524.234:388): avc: denied { relabelto } for pid=7312 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 145.532388][ T7359] warning: `syz.5.272' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 145.879660][ T7372] netlink: 'syz.4.274': attribute type 21 has an invalid length. [ 145.888064][ T7372] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.897783][ T30] audit: type=1400 audit(1751915525.654:389): avc: denied { rename } for pid=7369 comm="syz.2.275" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 146.037106][ T30] audit: type=1400 audit(1751915525.724:390): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 146.308482][ T7384] fuse: Unknown parameter '0xffffffffffffffff' [ 146.316051][ T30] audit: type=1400 audit(1751915526.094:391): avc: denied { watch watch_reads } for pid=7381 comm="syz.2.277" path="/63" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.814397][ T30] audit: type=1400 audit(1751915526.094:392): avc: denied { watch watch_reads } for pid=7381 comm="syz.2.277" path="/63/file0" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.840451][ T30] audit: type=1400 audit(1751915526.634:393): avc: denied { connect } for pid=7385 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 148.277413][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.282'. [ 149.178836][ T30] audit: type=1400 audit(1751915528.964:394): avc: denied { accept } for pid=7410 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 149.939985][ T973] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 150.004572][ T5895] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 150.094281][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 150.101084][ T973] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 150.113258][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.128386][ T973] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.137637][ T30] audit: type=1400 audit(1751915529.924:395): avc: denied { read } for pid=7436 comm="syz.2.291" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 150.159432][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.166151][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.175071][ T973] usb 5-1: Product: syz [ 150.179248][ T973] usb 5-1: Manufacturer: syz [ 150.184438][ T973] usb 5-1: SerialNumber: syz [ 150.189709][ T30] audit: type=1400 audit(1751915529.924:396): avc: denied { open } for pid=7436 comm="syz.2.291" path="/67/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 150.223808][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 150.231973][ T30] audit: type=1400 audit(1751915529.944:397): avc: denied { ioctl } for pid=7436 comm="syz.2.291" path="/67/file0/file0" dev="fuse" ino=0 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 150.256170][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.263235][ T5895] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 150.271025][ T5895] usb 6-1: can't read configurations, error -71 [ 150.281858][ T973] usb 5-1: config 0 descriptor?? [ 150.322496][ T973] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.322526][ T973] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 151.018586][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.027800][ T30] audit: type=1400 audit(1751915530.814:398): avc: denied { setopt } for pid=7448 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.063747][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.082291][ T973] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 151.094918][ T973] em28xx 5-1:0.0: Config register raw data: 0xe8 [ 151.175270][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.5.294'. [ 151.555646][ T5913] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 151.565183][ T973] em28xx 5-1:0.0: I2S Audio (1 sample rate(s)) [ 151.571395][ T973] em28xx 5-1:0.0: No AC97 audio processor [ 151.577208][ T30] audit: type=1400 audit(1751915530.874:399): avc: denied { setopt } for pid=7420 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.705252][ T5826] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 151.733690][ T5913] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 151.741888][ T5913] usb 1-1: config 0 has no interface number 0 [ 151.762824][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.777454][ T5913] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 151.788648][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.819801][ T5913] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 151.855673][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.871422][ T5913] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 151.882097][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.894957][ T973] usb 5-1: USB disconnect, device number 10 [ 151.903690][ T7457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.908269][ T5826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.910992][ T7457] IPv6: NLM_F_CREATE should be set when creating new route [ 151.922824][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.983108][ T5913] usb 1-1: config 0 descriptor?? [ 151.992992][ T30] audit: type=1400 audit(1751915531.794:400): avc: denied { map } for pid=7458 comm="syz.5.299" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.030538][ T7445] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 152.055433][ T7457] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 152.076758][ T7445] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 152.094058][ T5913] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 152.138650][ T5826] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=2a.00 [ 152.158514][ T5826] usb 2-1: New USB device strings: Mfr=62, Product=197, SerialNumber=36 [ 152.181740][ T5826] usb 2-1: Product: syz [ 152.191103][ T5826] usb 2-1: Manufacturer: syz [ 152.202539][ T7465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.211793][ T5826] usb 2-1: SerialNumber: syz [ 152.222029][ T7465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.235404][ T5826] usb 2-1: config 0 descriptor?? [ 152.246349][ T5826] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 152.461093][ T7467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.958776][ T973] usb 1-1: USB disconnect, device number 9 [ 153.969820][ T973] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 154.052572][ T30] audit: type=1400 audit(1751915533.844:401): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.072784][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.120044][ T5826] usb 2-1: USB disconnect, device number 8 [ 154.164696][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.194143][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.262746][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.381360][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.493622][ T30] audit: type=1400 audit(1751915534.293:402): avc: denied { setopt } for pid=7484 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.058559][ T30] audit: type=1400 audit(1751915534.853:403): avc: denied { mounton } for pid=7487 comm="syz.1.307" path="/61/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 155.403174][ T7508] netlink: 1304 bytes leftover after parsing attributes in process `syz.2.310'. [ 155.457627][ T30] audit: type=1400 audit(1751915534.863:404): avc: denied { listen } for pid=7487 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 155.587696][ T30] audit: type=1400 audit(1751915535.363:405): avc: denied { write } for pid=7512 comm="syz.4.312" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 155.886719][ T30] audit: type=1400 audit(1751915535.383:406): avc: denied { read } for pid=7512 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.905802][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.934280][ T973] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 156.053833][ T30] audit: type=1400 audit(1751915535.853:407): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 156.085826][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.126619][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.171892][ T973] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 156.224115][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.237449][ T973] usb 5-1: config 0 descriptor?? [ 156.327341][ T30] audit: type=1400 audit(1751915536.133:408): avc: denied { setopt } for pid=7524 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.413093][ T30] audit: type=1400 audit(1751915536.213:409): avc: denied { bind } for pid=7524 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.439428][ T30] audit: type=1400 audit(1751915536.243:410): avc: denied { getopt } for pid=7524 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.996457][ T7541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.062097][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.319'. [ 157.125559][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.136317][ T973] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -32 [ 157.202424][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.537583][ T5913] usb 5-1: USB disconnect, device number 11 [ 157.855574][ T30] audit: type=1400 audit(1751915537.653:411): avc: denied { create } for pid=7572 comm="syz.0.327" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 158.154278][ T5913] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 158.724001][ T7585] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 158.730580][ T7585] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.765893][ T7585] vhci_hcd vhci_hcd.0: Device attached [ 158.787061][ T5913] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.798333][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.819898][ T5913] usb 6-1: config 0 descriptor?? [ 158.856288][ T5913] cp210x 6-1:0.0: cp210x converter detected [ 158.964336][ T5895] vhci_hcd: vhci_device speed not set [ 158.975641][ T973] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 159.025546][ T5895] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 159.057765][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.066549][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.135816][ T973] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.150048][ T973] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.167327][ T973] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.178533][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.204336][ T5826] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 159.249737][ T7606] netlink: 'syz.2.336': attribute type 13 has an invalid length. [ 159.272086][ T7606] gretap0: refused to change device tx_queue_len [ 159.279407][ T7606] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 159.359454][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.367979][ T5826] usb 5-1: device descriptor read/64, error -71 [ 159.377936][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.400062][ T973] usb 1-1: usb_control_msg returned -32 [ 159.405896][ T973] usbtmc 1-1:16.0: can't read capabilities [ 159.512880][ T7586] vhci_hcd: connection reset by peer [ 159.542173][ T973] usb 1-1: USB disconnect, device number 10 [ 159.577127][ T59] vhci_hcd: stop threads [ 159.592582][ T5913] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 159.614557][ T5826] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 159.626310][ T59] vhci_hcd: release socket [ 159.666837][ T59] vhci_hcd: disconnect device [ 159.676874][ T5913] cp210x 6-1:0.0: querying part number failed [ 160.200465][ T5913] usb 6-1: cp210x converter now attached to ttyUSB0 [ 160.343140][ T5913] usb 6-1: USB disconnect, device number 5 [ 160.435667][ T973] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.534510][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 160.643631][ T5913] cp210x 6-1:0.0: device disconnected [ 160.696557][ T973] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 213 [ 160.899161][ T973] usb 1-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 161.035059][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 161.284496][ T5826] usb 5-1: device descriptor read/64, error -71 [ 161.315040][ T973] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 161.465311][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.573855][ T973] usb 1-1: Product: syz [ 161.623406][ T973] usb 1-1: Manufacturer: syz [ 161.685226][ T5826] usb usb5-port1: attempt power cycle [ 161.690263][ T973] usb 1-1: SerialNumber: syz [ 161.849533][ T973] usb 1-1: config 0 descriptor?? [ 161.873527][ T973] usb 1-1: can't set config #0, error -71 [ 162.675386][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.5.341'. [ 162.774186][ T5826] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 162.840785][ T973] usb 1-1: USB disconnect, device number 11 [ 163.011816][ T5826] usb 5-1: device descriptor read/8, error -71 [ 163.045667][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 163.045686][ T30] audit: type=1400 audit(1751915542.813:416): avc: denied { ioctl } for pid=7632 comm="syz.0.344" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 163.140373][ T30] audit: type=1400 audit(1751915542.883:417): avc: denied { read } for pid=7636 comm="syz.4.345" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.163637][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.197448][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'. [ 163.304521][ T30] audit: type=1400 audit(1751915542.883:418): avc: denied { open } for pid=7636 comm="syz.4.345" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.384746][ T30] audit: type=1400 audit(1751915542.933:419): avc: denied { ioctl } for pid=7636 comm="syz.4.345" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.439206][ T30] audit: type=1400 audit(1751915543.033:420): avc: denied { create } for pid=7643 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 163.625114][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.346'. [ 163.634097][ T7657] netlink: 'syz.5.346': attribute type 15 has an invalid length. [ 163.670607][ T7657] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.679561][ T7657] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.688281][ T7657] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.697023][ T7657] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.708578][ T7657] vxlan0: entered promiscuous mode [ 163.922150][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.935325][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.138138][ T5895] vhci_hcd: vhci_device speed not set [ 164.157081][ T30] audit: type=1400 audit(1751915543.963:421): avc: denied { setopt } for pid=7659 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.217301][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 164.237832][ T30] audit: type=1326 audit(1751915544.043:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f124fb8e929 code=0x0 [ 164.264650][ T5826] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 164.287339][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.325887][ T7679] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.410099][ T5826] usb 5-1: Using ep0 maxpacket: 32 [ 164.452176][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.465081][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 164.504356][ T973] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 164.594113][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.642812][ T5826] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 164.666373][ T973] usb 6-1: too many configurations: 70, using maximum allowed: 8 [ 164.691929][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.711419][ T973] usb 6-1: config index 0 descriptor too short (expected 65505, got 72) [ 164.741041][ T5826] usb 5-1: config 0 descriptor?? [ 164.757124][ T973] usb 6-1: config index 1 descriptor too short (expected 65505, got 72) [ 165.316790][ T973] usb 6-1: config index 2 descriptor too short (expected 65505, got 72) [ 165.324466][ T5826] kye 0003:0458:0087.0003: unknown main item tag 0x0 [ 165.335028][ T973] usb 6-1: config index 3 descriptor too short (expected 65505, got 72) [ 165.367676][ T5826] kye 0003:0458:0087.0003: unknown main item tag 0x0 [ 165.399332][ T973] usb 6-1: config index 4 descriptor too short (expected 65505, got 72) [ 165.413450][ T973] usb 6-1: config index 5 descriptor too short (expected 65505, got 72) [ 165.432510][ T5826] kye 0003:0458:0087.0003: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 165.456352][ T973] usb 6-1: config index 6 descriptor too short (expected 65505, got 72) [ 165.486355][ T973] usb 6-1: config index 7 descriptor too short (expected 65505, got 72) [ 165.506512][ T973] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.530691][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.549170][ T973] usb 6-1: Product: syz [ 165.559292][ T973] usb 6-1: Manufacturer: syz [ 165.567396][ T973] usb 6-1: SerialNumber: syz [ 166.148737][ T973] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 166.171383][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.850339][ T5826] usb 6-1: USB disconnect, device number 6 [ 167.115026][ T30] audit: type=1400 audit(1751915546.923:423): avc: denied { connect } for pid=7711 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.150936][ T30] audit: type=1400 audit(1751915546.943:424): avc: denied { write } for pid=7711 comm="syz.1.360" path="socket:[14422]" dev="sockfs" ino=14422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 167.258368][ T24] usb 5-1: USB disconnect, device number 15 [ 167.315507][ T30] audit: type=1400 audit(1751915547.103:425): avc: denied { mount } for pid=7715 comm="syz.4.362" name="/" dev="rpc_pipefs" ino=14429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 167.430805][ T10] usb 6-1: Service connection timeout for: 256 [ 167.438040][ T973] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 167.457803][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 167.473452][ T10] ath9k_htc: Failed to initialize the device [ 167.503335][ T5826] usb 6-1: ath9k_htc: USB layer deinitialized [ 167.637201][ T973] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 167.785735][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.944884][ T973] usb 1-1: config 0 descriptor?? [ 168.073445][ T7730] syzkaller0: entered promiscuous mode [ 168.115034][ T7730] syzkaller0: entered allmulticast mode [ 168.344527][ T5895] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.368806][ T7743] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 168.412772][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.424134][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.438816][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.449397][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.507768][ T5895] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.519786][ T5895] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.532399][ T5895] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.553125][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.560118][ T5895] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 168.569564][ T973] ath6kl: mismatched byte count 5694853 vs. expected 12 [ 168.580260][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.599466][ T973] ath6kl: Failed to init ath6kl core: -22 [ 168.608302][ T5895] usb 2-1: config 0 descriptor?? [ 168.616442][ T973] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 168.729160][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 168.729174][ T30] audit: type=1400 audit(1751915548.533:429): avc: denied { create } for pid=7755 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 168.777743][ T3090] usb 1-1: USB disconnect, device number 12 [ 169.050804][ T5895] uclogic 0003:28BD:0042.0004: interface is invalid, ignoring [ 169.253231][ T5895] usb 2-1: USB disconnect, device number 9 [ 169.500782][ T7766] netlink: 'syz.0.374': attribute type 10 has an invalid length. [ 169.935540][ T7766] batman_adv: batadv0: Adding interface: team0 [ 169.946185][ T7766] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.992166][ T7766] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 170.098254][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.124509][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.183773][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.193329][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.310179][ T30] audit: type=1400 audit(1751915550.113:430): avc: denied { read } for pid=7788 comm="syz.4.382" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 170.474593][ T3090] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.672333][ T30] audit: type=1400 audit(1751915550.113:431): avc: denied { open } for pid=7788 comm="syz.4.382" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 171.723793][ T30] audit: type=1400 audit(1751915551.523:432): avc: denied { connect } for pid=7790 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.859507][ T3090] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 171.874431][ T3090] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.885344][ T30] audit: type=1400 audit(1751915551.523:433): avc: denied { bind } for pid=7790 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.906664][ T3090] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 171.921098][ T30] audit: type=1400 audit(1751915551.523:434): avc: denied { write } for pid=7790 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.103847][ T3090] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 172.256352][ T3090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.264289][ T30] audit: type=1400 audit(1751915551.623:435): avc: denied { ioctl } for pid=7786 comm="syz.0.380" path="socket:[15421]" dev="sockfs" ino=15421 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.301898][ T30] audit: type=1400 audit(1751915552.083:436): avc: denied { getopt } for pid=7799 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 172.548823][ T3090] usb 2-1: Product: syz [ 172.553098][ T3090] usb 2-1: Manufacturer: syz [ 172.557804][ T3090] usb 2-1: SerialNumber: syz [ 172.563767][ T30] audit: type=1400 audit(1751915552.103:437): avc: denied { ioctl } for pid=7803 comm="syz.4.383" path="socket:[15437]" dev="sockfs" ino=15437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 172.588296][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.595104][ T3090] usb 2-1: config 0 descriptor?? [ 172.605493][ T30] audit: type=1400 audit(1751915552.103:438): avc: granted { setsecparam } for pid=7803 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 172.625502][ T3090] usb-storage 2-1:0.0: USB Mass Storage device detected [ 172.695223][ T3090] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 173.745750][ T7812] syzkaller0: entered promiscuous mode [ 173.751289][ T7812] syzkaller0: entered allmulticast mode [ 173.813899][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 173.813914][ T30] audit: type=1400 audit(1751915553.603:441): avc: denied { read write } for pid=5836 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.883613][ T3090] usb 2-1: USB disconnect, device number 10 [ 173.896288][ T30] audit: type=1400 audit(1751915553.613:442): avc: denied { open } for pid=5836 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.920275][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.986627][ T7815] binder: Bad value for 'max' [ 174.117832][ T30] audit: type=1400 audit(1751915553.613:443): avc: denied { ioctl } for pid=5836 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.148065][ T30] audit: type=1400 audit(1751915553.703:444): avc: denied { map_create } for pid=7814 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.167008][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.204728][ T30] audit: type=1400 audit(1751915553.703:445): avc: denied { map_read map_write } for pid=7814 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.189589][ T30] audit: type=1400 audit(1751915553.773:446): avc: denied { prog_load } for pid=7816 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.209137][ T30] audit: type=1400 audit(1751915553.773:447): avc: denied { bpf } for pid=7816 comm="syz.0.387" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.231577][ T30] audit: type=1400 audit(1751915553.773:448): avc: denied { perfmon } for pid=7816 comm="syz.0.387" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.260934][ T30] audit: type=1400 audit(1751915553.773:449): avc: denied { perfmon } for pid=7816 comm="syz.0.387" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.297066][ T30] audit: type=1400 audit(1751915553.773:450): avc: denied { perfmon } for pid=7816 comm="syz.0.387" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.628719][ T7821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.160808][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.189128][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.477469][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.496553][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.597950][ T7842] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 178.509840][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.534587][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.814281][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 178.814298][ T30] audit: type=1400 audit(1751915558.613:700): avc: denied { create } for pid=7863 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.843843][ T7865] overlay: Unknown parameter 'obj_user' [ 178.927016][ T30] audit: type=1400 audit(1751915558.613:701): avc: denied { write } for pid=7863 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.314248][ T30] audit: type=1400 audit(1751915558.613:702): avc: denied { read } for pid=7863 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.396922][ T30] audit: type=1400 audit(1751915558.623:703): avc: denied { read } for pid=7863 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.441825][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.497449][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.508889][ T30] audit: type=1400 audit(1751915558.623:704): avc: denied { write } for pid=7863 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.606390][ T30] audit: type=1400 audit(1751915558.633:705): avc: denied { write } for pid=7863 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.684546][ T3090] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 179.716933][ T30] audit: type=1400 audit(1751915558.633:706): avc: denied { setopt } for pid=7863 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.723203][ T7877] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.768827][ T7869] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.778723][ T7878] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.854732][ T3090] usb 6-1: Using ep0 maxpacket: 16 [ 179.877601][ T3090] usb 6-1: config 2 has an invalid interface number: 142 but max is 0 [ 179.897906][ T3090] usb 6-1: config 2 has no interface number 0 [ 179.934965][ T3090] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 179.953885][ T3090] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.968427][ T3090] usb 6-1: Product: syz [ 179.981485][ T3090] usb 6-1: Manufacturer: syz [ 180.313956][ T3090] usb 6-1: SerialNumber: syz [ 180.370163][ T3090] usb 6-1: NFC: intf ffff88806280a000 id ffffffff8f564fa0 [ 180.571640][ T3090] usb 6-1: USB disconnect, device number 7 [ 180.894725][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 180.996507][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 181.013403][ T7894] : entered promiscuous mode [ 181.118971][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 181.181645][ T24] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 181.215771][ T24] usb 1-1: config 0 has no interface number 0 [ 181.241547][ T24] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.322223][ T24] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 181.357551][ T5913] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 181.380729][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.414092][ T24] usb 1-1: Product: syz [ 181.432826][ T24] usb 1-1: Manufacturer: syz [ 181.451124][ T24] usb 1-1: SerialNumber: syz [ 181.579478][ T24] usb 1-1: config 0 descriptor?? [ 181.605445][ T24] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 181.624221][ T24] em28xx 1-1:0.132: Video interface 132 found: [ 181.632795][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 182.097131][ T5913] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 182.122861][ T5913] usb 5-1: config 0 has no interface number 0 [ 182.190363][ T5913] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=9f.8c [ 182.203757][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.214030][ T5913] usb 5-1: Product: syz [ 182.229747][ T5913] usb 5-1: Manufacturer: syz [ 182.238135][ T5913] usb 5-1: SerialNumber: syz [ 182.258225][ T5913] usb 5-1: config 0 descriptor?? [ 182.280656][ T5913] flexcop_usb: set interface failed. [ 182.293012][ T5913] b2c2_flexcop_usb 5-1:0.204: probe with driver b2c2_flexcop_usb failed with error -22 [ 182.323360][ T24] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 182.673548][ T7903] 9pnet_fd: Insufficient options for proto=fd [ 182.734362][ T5913] usb 5-1: USB disconnect, device number 16 [ 183.498941][ T7909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.410'. [ 183.512340][ T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 183.535757][ T24] em28xx 1-1:0.132: board has no eeprom [ 183.608993][ T24] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 183.629287][ T24] em28xx 1-1:0.132: analog set to bulk mode. [ 183.684134][ T5881] em28xx 1-1:0.132: Registering V4L2 extension [ 183.828108][ T30] kauditd_printk_skb: 729 callbacks suppressed [ 183.828144][ T30] audit: type=1400 audit(1751915563.633:1421): avc: denied { create } for pid=7910 comm="syz.5.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.943683][ T24] usb 1-1: USB disconnect, device number 13 [ 184.093851][ T7885] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.115790][ T24] em28xx 1-1:0.132: Disconnecting em28xx [ 184.121997][ T5824] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.130795][ T7914] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.138256][ T7885] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 184.155495][ T30] audit: type=1400 audit(1751915563.633:1422): avc: denied { create } for pid=7910 comm="syz.5.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.179260][ T7885] audit: backlog limit exceeded [ 184.195663][ T7914] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 184.207397][ T7885] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.213903][ T7885] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 185.471532][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.415'. [ 185.480917][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.415'. [ 185.564284][ T5881] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 185.577181][ T5881] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 185.607778][ T5881] em28xx 1-1:0.132: No AC97 audio processor [ 185.664646][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 185.671744][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 185.679209][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 185.700823][ T5881] usb 1-1: Decoder not found [ 185.721793][ T5881] em28xx 1-1:0.132: failed to create media graph [ 185.733832][ T5881] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 185.862321][ T5881] em28xx 1-1:0.132: Remote control support is not available for this card. [ 186.169080][ T24] em28xx 1-1:0.132: Closing input extension [ 186.223058][ T24] em28xx 1-1:0.132: Freeing device [ 186.574473][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 186.797127][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.888783][ T7952] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.225331][ T5895] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 187.484337][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 187.606174][ T5895] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.782674][ T5895] usb 6-1: config 1 has no interface number 1 [ 187.919106][ T5895] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 188.051218][ T24] usb 1-1: config 0 has no interface number 0 [ 188.219665][ T5895] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 80, changing to 7 [ 188.549304][ T5895] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.723454][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.881335][ T30] kauditd_printk_skb: 403 callbacks suppressed [ 188.881353][ T30] audit: type=1400 audit(1751915568.683:1747): avc: denied { ioctl } for pid=7958 comm="syz.1.422" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.916095][ T5895] usb 6-1: Product: ࠧ [ 189.018593][ T5895] usb 6-1: Manufacturer: А [ 189.064464][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 189.127580][ T5895] usb 6-1: SerialNumber: ခ [ 189.208200][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.219247][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.229392][ T24] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.242356][ T30] audit: type=1400 audit(1751915568.683:1748): avc: denied { ioctl } for pid=7958 comm="syz.1.422" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.267756][ T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 189.276934][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.286501][ T30] audit: type=1400 audit(1751915568.743:1749): avc: denied { ioctl } for pid=7958 comm="syz.1.422" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.312901][ T30] audit: type=1400 audit(1751915568.843:1750): avc: denied { ioctl } for pid=7958 comm="syz.1.422" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.347968][ T30] audit: type=1400 audit(1751915568.993:1751): avc: denied { ioctl } for pid=7958 comm="syz.1.422" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.403931][ T24] usb 1-1: config 0 descriptor?? [ 189.427069][ T24] usb 1-1: can't set config #0, error -71 [ 189.448413][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.455695][ T24] usb 1-1: USB disconnect, device number 14 [ 189.474490][ T30] audit: type=1400 audit(1751915569.013:1752): avc: denied { ioctl } for pid=7958 comm="syz.1.422" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.494198][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 189.550528][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.585167][ T30] audit: type=1400 audit(1751915569.043:1753): avc: denied { ioctl } for pid=7958 comm="syz.1.422" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.625124][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.683019][ T30] audit: type=1400 audit(1751915569.043:1754): avc: denied { ioctl } for pid=7947 comm="syz.5.418" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.725807][ T7961] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 189.775892][ T30] audit: type=1400 audit(1751915569.043:1755): avc: denied { ioctl } for pid=7947 comm="syz.5.418" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.855452][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.880660][ T30] audit: type=1400 audit(1751915569.093:1756): avc: denied { ioctl } for pid=7947 comm="syz.5.418" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.939135][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.974712][ T5895] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 190.041986][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.064668][ T5895] usb 6-1: USB disconnect, device number 8 [ 190.188168][ T10] usb 2-1: USB disconnect, device number 11 [ 190.274459][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 190.393449][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.426733][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 190.444624][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 190.516703][ T24] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 190.560860][ T24] usb 5-1: config 0 has no interface number 0 [ 190.641246][ T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 190.652451][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.672535][ T24] usb 5-1: Product: syz [ 190.692759][ T24] usb 5-1: Manufacturer: syz [ 190.722205][ T24] usb 5-1: SerialNumber: syz [ 190.753806][ T24] usb 5-1: config 0 descriptor?? [ 190.812199][ T24] kobil_sct 5-1:0.148: KOBIL USB smart card terminal converter detected [ 190.951871][ T24] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 191.291340][ T10] usb 5-1: USB disconnect, device number 17 [ 191.676809][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.5.425'. [ 191.910409][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 191.966020][ T10] kobil_sct 5-1:0.148: device disconnected [ 192.793882][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.5.428'. [ 193.833363][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.841395][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.894550][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 193.904689][ T30] kauditd_printk_skb: 245 callbacks suppressed [ 193.904704][ T30] audit: type=1400 audit(1751915573.713:2002): avc: denied { ioctl } for pid=8005 comm="syz.0.432" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.934274][ T30] audit: type=1400 audit(1751915573.763:2003): avc: denied { read write } for pid=8009 comm="syz.5.433" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 194.962565][ T30] audit: type=1400 audit(1751915573.763:2004): avc: denied { read write open } for pid=8009 comm="syz.5.433" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 194.989461][ T30] audit: type=1400 audit(1751915573.773:2005): avc: denied { ioctl } for pid=8009 comm="syz.5.433" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.017734][ T30] audit: type=1400 audit(1751915573.783:2006): avc: denied { ioctl } for pid=8009 comm="syz.5.433" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.045188][ T30] audit: type=1400 audit(1751915573.783:2007): avc: denied { ioctl } for pid=8009 comm="syz.5.433" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.070876][ T30] audit: type=1400 audit(1751915573.793:2008): avc: denied { ioctl } for pid=8009 comm="syz.5.433" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.108867][ T30] audit: type=1400 audit(1751915573.793:2009): avc: denied { read } for pid=8009 comm="syz.5.433" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.133438][ T8014] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.140221][ T30] audit: type=1400 audit(1751915573.803:2010): avc: denied { read open } for pid=8009 comm="syz.5.433" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.140457][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 195.164533][ T30] audit: type=1400 audit(1751915573.863:2011): avc: denied { read } for pid=8009 comm="syz.5.433" dev="nsfs" ino=4026533903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 195.309401][ T8014] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.340656][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 195.351643][ T10] usb 1-1: config 0 has no interface number 0 [ 195.358056][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 195.872539][ T8014] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.904835][ T8014] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.919912][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 195.938168][ T8014] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.946258][ T8014] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 195.975812][ T8014] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.993161][ T10] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 196.018869][ T8014] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.024888][ T10] usb 1-1: Product: syz [ 196.029060][ T10] usb 1-1: Manufacturer: syz [ 196.033924][ T10] usb 1-1: SerialNumber: syz [ 196.055248][ T8014] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.105428][ T10] usb 1-1: config 0 descriptor?? [ 196.133094][ T10] smsc75xx v1.0.0 [ 196.315387][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 196.554242][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 196.575761][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 196.698394][ T24] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 196.714353][ T24] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 196.723261][ T24] usb 2-1: config 4 has no interface number 0 [ 196.758138][ T24] usb 2-1: string descriptor 0 read error: -22 [ 196.777591][ T24] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 196.807887][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.875623][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 196.891523][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 196.895659][ T24] usb 2-1: can't set config #4, error -71 [ 196.923426][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 197.027028][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 197.051888][ T24] usb 2-1: USB disconnect, device number 12 [ 197.184308][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 197.904574][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 198.018097][ T5152] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.024227][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 198.237330][ T10] usb 1-1: USB disconnect, device number 15 [ 198.682363][ T8047] 9pnet_fd: Insufficient options for proto=fd [ 198.923728][ T30] kauditd_printk_skb: 279 callbacks suppressed [ 198.923744][ T30] audit: type=1400 audit(1751915578.723:2291): avc: denied { read } for pid=8033 comm="syz.1.439" dev="nsfs" ino=4026532849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.111735][ T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 199.314610][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 199.435589][ T30] audit: type=1400 audit(1751915578.773:2292): avc: denied { ioctl } for pid=8049 comm="syz.5.443" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.557057][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.567415][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.578672][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 199.595637][ T30] audit: type=1400 audit(1751915578.793:2293): avc: denied { read open } for pid=8033 comm="syz.1.439" path="net:[4026532849]" dev="nsfs" ino=4026532849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.694644][ T30] audit: type=1400 audit(1751915578.853:2294): avc: denied { ioctl } for pid=8049 comm="syz.5.443" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.724270][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=4d.40 [ 199.733335][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.767930][ T24] usb 6-1: Product: syz [ 199.772130][ T24] usb 6-1: Manufacturer: syz [ 199.784819][ T24] usb 6-1: SerialNumber: syz [ 199.816461][ T30] audit: type=1400 audit(1751915578.893:2295): avc: denied { create } for pid=8044 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.877581][ T8051] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 199.904287][ T30] audit: type=1400 audit(1751915578.893:2296): avc: denied { write } for pid=8044 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.978712][ T30] audit: type=1400 audit(1751915578.903:2297): avc: denied { read } for pid=8044 comm="syz.0.442" path="socket:[15020]" dev="sockfs" ino=15020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.007055][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 200.020360][ T30] audit: type=1400 audit(1751915578.913:2298): avc: denied { read } for pid=8044 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.088691][ T5152] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.093522][ T30] audit: type=1400 audit(1751915578.933:2299): avc: denied { ioctl } for pid=8049 comm="syz.5.443" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.094869][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 200.191495][ T30] audit: type=1400 audit(1751915578.943:2300): avc: denied { ioctl } for pid=8049 comm="syz.5.443" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.360252][ T8064] netlink: 44 bytes leftover after parsing attributes in process `syz.5.443'. [ 201.230222][ T8075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8075 comm=syz.1.447 [ 201.295069][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 201.354619][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.447'. [ 201.870323][ T24] cdc_ncm 6-1:1.0: bind() failure [ 201.889691][ T24] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 201.955079][ T24] usb 6-1: USB disconnect, device number 9 [ 202.164221][ T5152] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.491180][ T8091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8091 comm=syz.5.451 [ 202.529664][ T8091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8091 comm=syz.5.451 [ 203.414242][ T5895] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 203.497143][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'. [ 203.545855][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 203.563649][ T8104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 65280 - 0 [ 203.589316][ T8104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 65280 - 0 [ 203.604230][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 203.650539][ T5895] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.659050][ T8104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 65280 - 0 [ 203.683477][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.704087][ T5895] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 203.731590][ T8104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 65280 - 0 [ 203.745423][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.778769][ T8104] geneve2: entered promiscuous mode [ 203.867157][ T8104] geneve2: entered allmulticast mode [ 203.927729][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 203.927748][ T30] audit: type=1400 audit(1751915583.733:2543): avc: denied { setopt } for pid=8106 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.063268][ T5895] usb 1-1: config 0 descriptor?? [ 204.287286][ T30] audit: type=1400 audit(1751915583.983:2544): avc: denied { ioctl } for pid=8106 comm="syz.2.456" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16050 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.854582][ T30] audit: type=1400 audit(1751915583.993:2545): avc: denied { append } for pid=8106 comm="syz.2.456" name="media5" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.877540][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.906826][ T30] audit: type=1400 audit(1751915584.003:2546): avc: denied { append open } for pid=8106 comm="syz.2.456" path="/dev/media5" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.930434][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.033207][ T30] audit: type=1400 audit(1751915584.023:2547): avc: denied { ioctl } for pid=8106 comm="syz.2.456" path="/dev/media5" dev="devtmpfs" ino=973 ioctlcmd=0x7c05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.184236][ T30] audit: type=1400 audit(1751915584.223:2548): avc: denied { ioctl } for pid=8096 comm="syz.0.453" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.255857][ T30] audit: type=1400 audit(1751915584.243:2549): avc: denied { mount } for pid=8102 comm="syz.5.455" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 205.266186][ T8098] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 205.277339][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.280970][ T30] audit: type=1400 audit(1751915584.593:2550): avc: denied { ioctl } for pid=8096 comm="syz.0.453" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.316204][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.328535][ T30] audit: type=1400 audit(1751915584.593:2551): avc: denied { ioctl } for pid=8096 comm="syz.0.453" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.354072][ T8098] netlink: 244 bytes leftover after parsing attributes in process `syz.0.453'. [ 205.394679][ T30] audit: type=1400 audit(1751915584.593:2552): avc: denied { ioctl } for pid=8096 comm="syz.0.453" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.946772][ T5895] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 206.499199][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.458'. [ 206.508351][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.458'. [ 207.247442][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.296749][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.644571][ T3090] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 207.683607][ T24] usb 1-1: USB disconnect, device number 16 [ 208.090778][ T8139] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 208.674250][ T24] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 208.872073][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 208.906637][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 208.915551][ T8151] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 208.940369][ T30] kauditd_printk_skb: 629 callbacks suppressed [ 208.940383][ T30] audit: type=1400 audit(1751915588.743:3182): avc: denied { write } for pid=8120 comm="syz.1.460" laddr=::1 lport=8 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.954181][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 209.001534][ T30] audit: type=1400 audit(1751915588.743:3183): avc: denied { write } for pid=8120 comm="syz.1.460" laddr=::1 lport=8 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.004998][ T8151] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 209.095367][ T30] audit: type=1400 audit(1751915588.743:3184): avc: denied { write } for pid=8120 comm="syz.1.460" laddr=::1 lport=8 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.134242][ T24] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 209.146980][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.174172][ T24] usb 1-1: Product: syz [ 209.194686][ T24] usb 1-1: Manufacturer: syz [ 209.211695][ T30] audit: type=1400 audit(1751915588.743:3185): avc: denied { write } for pid=8120 comm="syz.1.460" laddr=::1 lport=8 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.218495][ T24] usb 1-1: SerialNumber: syz [ 209.247276][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.290682][ T8122] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.291318][ T30] audit: type=1400 audit(1751915588.753:3186): avc: denied { write } for pid=8120 comm="syz.1.460" laddr=::1 lport=8 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.308299][ T24] usb 1-1: config 0 descriptor?? [ 209.334557][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.350173][ T8122] audit: audit_lost=36 audit_rate_limit=0 audit_backlog_limit=64 [ 209.366363][ T8122] audit: backlog limit exceeded [ 209.373021][ T8147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.391066][ T8122] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.398024][ T8147] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.398882][ T8147] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.446435][ T24] usb 1-1: ucan: probing device on interface #0 [ 209.906667][ T8162] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 210.306442][ T24] usb 1-1: ucan: device reported invalid device info [ 210.333557][ T24] usb 1-1: ucan: probe failed; try to update the device firmware [ 210.794508][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 211.076933][ T24] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 211.105130][ T24] usb 5-1: config 160 has no interface number 0 [ 211.111555][ T24] usb 5-1: config 160 interface 200 has no altsetting 0 [ 211.160382][ T24] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 211.193096][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.204829][ T24] usb 5-1: Product: syz [ 211.209043][ T24] usb 5-1: Manufacturer: syz [ 211.215650][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.221914][ T24] usb 5-1: SerialNumber: syz [ 211.254560][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.399305][ T8179] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 211.560456][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.583738][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 211.711551][ T24] usb 5-1: USB disconnect, device number 18 [ 212.079152][ T6024] udevd[6024]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.514241][ T3090] usb 1-1: USB disconnect, device number 17 [ 213.296448][ T8207] netlink: 'syz.2.482': attribute type 25 has an invalid length. [ 213.397125][ T8207] netlink: 'syz.2.482': attribute type 7 has an invalid length. [ 213.409978][ T8207] netlink: 164 bytes leftover after parsing attributes in process `syz.2.482'. [ 214.204346][ T30] kauditd_printk_skb: 1002 callbacks suppressed [ 214.204386][ T30] audit: type=1400 audit(1751915593.693:4167): avc: denied { create } for pid=8215 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.240951][ T30] audit: type=1400 audit(1751915593.723:4168): avc: denied { read } for pid=8215 comm="syz.2.485" dev="nsfs" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.261991][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.268707][ T30] audit: type=1400 audit(1751915593.733:4169): avc: denied { write } for pid=8202 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.682504][ T30] audit: type=1400 audit(1751915593.733:4170): avc: denied { read open } for pid=8215 comm="syz.2.485" path="net:[4026532819]" dev="nsfs" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.755983][ T30] audit: type=1400 audit(1751915593.743:4171): avc: denied { create } for pid=8215 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.779877][ T5836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.792855][ T8204] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.797448][ T8209] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 214.815079][ T8204] audit: audit_lost=45 audit_rate_limit=0 audit_backlog_limit=64 [ 214.817888][ T5836] audit: audit_lost=46 audit_rate_limit=0 audit_backlog_limit=64 [ 214.834399][ T30] audit: type=1400 audit(1751915593.773:4172): avc: denied { read } for pid=8215 comm="syz.2.485" dev="nsfs" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.858467][ T8209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.899813][ T8209] team0: Port device bond0 added [ 215.367515][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 215.535023][ T3090] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 215.704780][ T3090] usb 5-1: Using ep0 maxpacket: 16 [ 215.743192][ T3090] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.771636][ T3090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.808075][ T3090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.820742][ T3090] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 215.840066][ T3090] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.869249][ T3090] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.890573][ T3090] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.908679][ T3090] usb 5-1: Manufacturer: syz [ 215.925308][ T3090] usb 5-1: config 0 descriptor?? [ 216.004540][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 216.172489][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 216.218409][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 216.260036][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 216.301535][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.411632][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 216.468598][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.535992][ T24] usb 2-1: Product: syz [ 216.573306][ T24] usb 2-1: Manufacturer: syz [ 216.609136][ T24] usb 2-1: SerialNumber: syz [ 216.657843][ T24] usb 2-1: config 0 descriptor?? [ 216.689608][ T8249] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 216.771426][ T24] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 216.854672][ T3090] rc_core: IR keymap rc-hauppauge not found [ 216.860733][ T3090] Registered IR keymap rc-empty [ 216.887671][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 216.935087][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 216.998977][ T3090] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 217.036001][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.036666][ T3090] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 217.078520][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.121384][ T5895] usb 2-1: USB disconnect, device number 13 [ 217.128007][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 217.184672][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 217.214310][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 217.267027][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 217.354288][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 217.394348][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 217.415669][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 217.434661][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 217.455026][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 217.475322][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 217.496445][ T3090] mceusb 5-1:0.0: Registered ￲ with mce emulator interface version 1 [ 217.524180][ T3090] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 217.563144][ T3090] usb 5-1: USB disconnect, device number 19 [ 218.166146][ T8277] syzkaller1: entered promiscuous mode [ 218.192719][ T8277] syzkaller1: entered allmulticast mode [ 218.328397][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 218.534813][ T5881] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 218.793524][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.837034][ T5881] usb 2-1: not running at top speed; connect to a high speed hub [ 218.863534][ T5881] usb 2-1: config 13 has an invalid interface number: 101 but max is 0 [ 218.892430][ T5881] usb 2-1: config 13 has no interface number 0 [ 218.922624][ T5881] usb 2-1: config 13 interface 101 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 218.989220][ T5881] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f4.ee [ 219.015872][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.154410][ T5881] usb 2-1: Product: syz [ 219.162199][ T5881] usb 2-1: Manufacturer: syz [ 219.176348][ T5881] usb 2-1: SerialNumber: syz [ 219.223679][ T30] kauditd_printk_skb: 402 callbacks suppressed [ 219.223694][ T30] audit: type=1400 audit(1751915599.023:4567): avc: denied { mounton } for pid=8288 comm="syz.0.500" path="/104/file0" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 219.256972][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 219.372014][ T8293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.617632][ T30] audit: type=1400 audit(1751915599.023:4568): avc: denied { mount } for pid=8288 comm="syz.0.500" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 219.641849][ T30] audit: type=1400 audit(1751915599.053:4569): avc: denied { create } for pid=8288 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 219.671341][ T30] audit: type=1400 audit(1751915599.063:4570): avc: denied { write } for pid=8288 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 219.698613][ T30] audit: type=1400 audit(1751915599.073:4571): avc: denied { read write } for pid=8288 comm="syz.0.500" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.741180][ T30] audit: type=1400 audit(1751915599.073:4572): avc: denied { read write open } for pid=8288 comm="syz.0.500" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.769010][ T30] audit: type=1400 audit(1751915599.073:4573): avc: denied { ioctl } for pid=8288 comm="syz.0.500" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.937197][ T30] audit: type=1400 audit(1751915599.083:4574): avc: denied { ioctl } for pid=8288 comm="syz.0.500" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.986526][ T5881] usb 2-1: USB disconnect, device number 14 [ 220.066968][ T30] audit: type=1400 audit(1751915599.083:4575): avc: denied { ioctl } for pid=8288 comm="syz.0.500" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.191138][ T30] audit: type=1400 audit(1751915599.113:4576): avc: denied { create } for pid=8289 comm="syz.5.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.417300][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 220.485550][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 222.879163][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.914569][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.194389][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 223.374216][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 223.389244][ T10] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 223.400361][ T10] usb 5-1: config 254 has no interface number 0 [ 223.414795][ T10] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 223.435311][ T10] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.457465][ T10] usb 5-1: config 254 interface 235 has no altsetting 0 [ 223.513215][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 223.538040][ T10] usb 5-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 223.568847][ T10] usb 5-1: Product: syz [ 223.586938][ T10] usb 5-1: Manufacturer: syz [ 223.612496][ T10] usb 5-1: SerialNumber: syz [ 223.706397][ T8322] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 223.765707][ T10] usbtest 5-1:254.235: couldn't get endpoints, -22 [ 223.772302][ T10] usbtest 5-1:254.235: probe with driver usbtest failed with error -22 [ 224.034360][ T5881] usb 5-1: USB disconnect, device number 20 [ 224.352262][ T8345] netlink: 'syz.5.512': attribute type 4 has an invalid length. [ 224.358630][ T30] kauditd_printk_skb: 256 callbacks suppressed [ 224.358644][ T30] audit: type=1400 audit(1751915604.153:4833): avc: denied { read write } for pid=5837 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.524445][ T30] audit: type=1400 audit(1751915604.233:4834): avc: denied { read write open } for pid=5837 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.668298][ T30] audit: type=1400 audit(1751915604.253:4835): avc: denied { ioctl } for pid=5837 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.892411][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.512'. [ 224.901317][ T8334] openvswitch: netlink: Flow key attr not present in new flow. [ 224.923396][ T30] audit: type=1400 audit(1751915604.453:4836): avc: denied { create } for pid=8333 comm="syz.5.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.946477][ T30] audit: type=1400 audit(1751915604.463:4837): avc: denied { read } for pid=8333 comm="syz.5.512" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.017100][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 225.039952][ T30] audit: type=1400 audit(1751915604.463:4838): avc: denied { read open } for pid=8333 comm="syz.5.512" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.042948][ T8357] syz.1.514: attempt to access beyond end of device [ 225.042948][ T8357] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 225.063336][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.066108][ T30] audit: type=1400 audit(1751915604.503:4839): avc: denied { ioctl } for pid=8333 comm="syz.5.512" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.077155][ T8357] SQUASHFS error: Failed to read block 0x0: -5 [ 225.082984][ T30] audit: type=1400 audit(1751915604.543:4840): avc: denied { read write } for pid=8333 comm="syz.5.512" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.108779][ T8357] unable to read squashfs_super_block [ 225.113500][ T30] audit: type=1400 audit(1751915604.543:4841): avc: denied { read write open } for pid=8333 comm="syz.5.512" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.151534][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 225.166284][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.189676][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.515'. [ 225.679329][ T30] audit: type=1400 audit(1751915604.543:4842): avc: denied { ioctl } for pid=8333 comm="syz.5.512" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 227.744258][ T3090] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 228.024293][ T3090] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 228.033373][ T3090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.103006][ T3090] usb 5-1: Product: syz [ 228.127214][ T3090] usb 5-1: Manufacturer: syz [ 228.131864][ T3090] usb 5-1: SerialNumber: syz [ 228.188359][ T3090] usb 5-1: config 0 descriptor?? [ 228.466809][ T8398] can0: slcan on ttyS3. [ 228.896995][ T8403] openvswitch: netlink: Flow key attr not present in new flow. [ 229.029663][ T3090] airspy 5-1:0.0: Board ID: 00 [ 229.034945][ T3090] airspy 5-1:0.0: Firmware version: [ 229.035101][ T8398] can0 (unregistered): slcan off ttyS3. [ 229.453173][ T30] kauditd_printk_skb: 205 callbacks suppressed [ 229.453188][ T30] audit: type=1400 audit(1751915609.253:5048): avc: denied { sys_module } for pid=8374 comm="syz.4.520" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 229.515881][ T30] audit: type=1400 audit(1751915609.253:5049): avc: denied { module_request } for pid=8374 comm="syz.4.520" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 229.609938][ T30] audit: type=1400 audit(1751915609.413:5050): avc: denied { create } for pid=8388 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.642305][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.678544][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.689793][ T30] audit: type=1400 audit(1751915609.433:5051): avc: denied { write } for pid=8388 comm="syz.2.523" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.729241][ T30] audit: type=1400 audit(1751915609.443:5052): avc: denied { read write } for pid=8388 comm="syz.2.523" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.798036][ T30] audit: type=1400 audit(1751915609.443:5053): avc: denied { read write open } for pid=8388 comm="syz.2.523" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.828133][ T3090] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 229.845295][ T30] audit: type=1400 audit(1751915609.443:5054): avc: denied { ioctl } for pid=8388 comm="syz.2.523" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.908073][ T30] audit: type=1400 audit(1751915609.443:5055): avc: denied { ioctl } for pid=8388 comm="syz.2.523" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.908678][ T3090] airspy 5-1:0.0: Registered as swradio24 [ 230.034208][ T30] audit: type=1400 audit(1751915609.633:5056): avc: denied { read } for pid=8411 comm="syz.5.527" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.046603][ T3090] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 230.096335][ T30] audit: type=1400 audit(1751915609.633:5057): avc: denied { read open } for pid=8411 comm="syz.5.527" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.170042][ T3090] usb 5-1: USB disconnect, device number 21 [ 232.005007][ T8442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'. [ 232.167528][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 232.215577][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 232.574341][ T3090] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 232.755657][ T3090] usb 2-1: Using ep0 maxpacket: 8 [ 232.798691][ T3090] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.827193][ T3090] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.857455][ T3090] usb 2-1: config 1 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 232.906611][ T3090] usb 2-1: config 1 interface 1 has no altsetting 0 [ 232.940434][ T3090] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.954227][ T3090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.962418][ T3090] usb 2-1: Product: 〉 [ 232.967974][ T3090] usb 2-1: Manufacturer: 蠾汘ℌㄲ모譸쌡栈牊䧻왪秽➆⏴瘳羗ꑆ䶝壿断㳐Ⴕ樁쩠쑦ꎑ휊誐䚢듎쁘䅴ꖀⶽ罴詜랕冑آ╍ᰁ჉ [ 233.041693][ T3090] usb 2-1: SerialNumber: ⪢궨쩛䤁漇䧈ѵߠꕉ⬵ሐᐦ沧敐锲肦촨㆞밑觻븏ௗ䀙ꧽַ⦵海뾖䪊곰曧潙왷‡뱤ᘢ对 [ 233.076592][ T5895] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 233.178343][ T8465] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 233.266479][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 233.278923][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.536'. [ 233.329888][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.397054][ T5895] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 233.411426][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.420479][ T5895] usb 1-1: Product: syz [ 233.426644][ T5895] usb 1-1: Manufacturer: syz [ 233.431812][ T5895] usb 1-1: SerialNumber: syz [ 233.442181][ T8446] XFS (nullb0): Invalid superblock magic number [ 233.456298][ T5895] usb 1-1: config 0 descriptor?? [ 233.532956][ T8465] team0: Port device geneve0 added [ 233.550324][ T5895] usb 1-1: bad CDC descriptors [ 233.579678][ T5895] usb 1-1: unsupported MDLM descriptors [ 233.583378][ T3090] usb 2-1: 0:2 : does not exist [ 233.682977][ T3090] usb 2-1: USB disconnect, device number 15 [ 233.734391][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 233.878478][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.928884][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.993813][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.996030][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.010217][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.073412][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.157046][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.184973][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.207832][ T10] usb 5-1: Product: syz [ 234.212032][ T10] usb 5-1: Manufacturer: syz [ 234.249392][ T10] usb 5-1: SerialNumber: syz [ 234.411553][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.458850][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.487205][ T30] kauditd_printk_skb: 317 callbacks suppressed [ 234.487215][ T30] audit: type=1400 audit(1751915614.293:5375): avc: denied { ioctl } for pid=8466 comm="syz.4.538" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.529918][ T5895] usb 1-1: USB disconnect, device number 18 [ 234.576577][ T30] audit: type=1400 audit(1751915614.303:5376): avc: denied { ioctl } for pid=8466 comm="syz.4.538" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.628813][ T30] audit: type=1400 audit(1751915614.303:5377): avc: denied { ioctl } for pid=8466 comm="syz.4.538" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.679496][ T30] audit: type=1400 audit(1751915614.303:5378): avc: denied { ioctl } for pid=8466 comm="syz.4.538" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.742668][ T30] audit: type=1400 audit(1751915614.303:5379): avc: denied { ioctl } for pid=8466 comm="syz.4.538" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.785528][ T8469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.854696][ T8469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.888413][ T30] audit: type=1400 audit(1751915614.303:5380): avc: denied { ioctl } for pid=8466 comm="syz.4.538" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.978467][ T30] audit: type=1400 audit(1751915614.333:5381): avc: denied { read write } for pid=8461 comm="syz.0.537" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.087204][ T30] audit: type=1400 audit(1751915614.333:5382): avc: denied { read write open } for pid=8461 comm="syz.0.537" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.214532][ T30] audit: type=1400 audit(1751915614.333:5383): avc: denied { ioctl } for pid=8461 comm="syz.0.537" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.295610][ T30] audit: type=1400 audit(1751915614.343:5384): avc: denied { ioctl } for pid=8466 comm="syz.4.538" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.874220][ T3090] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 236.231268][ T3090] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.259224][ T3090] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 236.278686][ T3090] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 236.325293][ T3090] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.349010][ T3090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.395628][ T8493] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 236.433299][ T3090] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.841665][ T8503] syzkaller0: entered promiscuous mode [ 236.859295][ T8503] syzkaller0: entered allmulticast mode [ 237.929418][ T8521] netlink: 'syz.0.548': attribute type 3 has an invalid length. [ 237.937128][ T8521] netlink: 'syz.0.548': attribute type 3 has an invalid length. [ 237.945374][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 238.059653][ T3090] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 238.258521][ T3090] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 238.272596][ T3090] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.299424][ T3090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.310828][ T3090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 238.322108][ T3090] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.335361][ T3090] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.344864][ T3090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.383578][ T3090] usb 2-1: config 0 descriptor?? [ 238.405151][ T8520] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 238.539639][ T8529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.550'. [ 238.679536][ T5913] usb 6-1: USB disconnect, device number 11 [ 238.701895][ T3090] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 238.761517][ T3090] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 238.794507][ T3090] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 238.834347][ T3090] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 238.856385][ T3090] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 238.884831][ T3090] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 238.987915][ T3090] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 239.044504][ T3090] usb 2-1: USB disconnect, device number 16 [ 239.550383][ T30] kauditd_printk_skb: 322 callbacks suppressed [ 239.550400][ T30] audit: type=1400 audit(1751915619.353:5707): avc: denied { create } for pid=8547 comm="syz.5.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.590774][ T8546] fido_id[8546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 239.605786][ T30] audit: type=1400 audit(1751915619.403:5708): avc: denied { read write } for pid=8547 comm="syz.5.553" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.663475][ T30] audit: type=1400 audit(1751915619.403:5709): avc: denied { read write open } for pid=8547 comm="syz.5.553" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.725452][ T30] audit: type=1400 audit(1751915619.403:5710): avc: denied { ioctl } for pid=8547 comm="syz.5.553" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.779743][ T30] audit: type=1400 audit(1751915619.403:5711): avc: denied { ioctl } for pid=8547 comm="syz.5.553" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.850648][ T30] audit: type=1400 audit(1751915619.433:5712): avc: denied { ioctl } for pid=8547 comm="syz.5.553" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.901741][ T30] audit: type=1400 audit(1751915619.433:5713): avc: denied { ioctl } for pid=8547 comm="syz.5.553" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.987008][ T10] cdc_ncm 5-1:1.0: failed to get mac address [ 240.007399][ T10] cdc_ncm 5-1:1.0: bind() failure [ 240.019915][ T10] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -32 [ 240.039035][ T10] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -32 [ 240.056262][ T10] usbtest 5-1:1.1: probe with driver usbtest failed with error -32 [ 240.238261][ T30] audit: type=1400 audit(1751915620.043:5714): avc: denied { read write } for pid=6044 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.306064][ T30] audit: type=1400 audit(1751915620.043:5715): avc: denied { read write open } for pid=6044 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.363660][ T30] audit: type=1400 audit(1751915620.073:5716): avc: denied { ioctl } for pid=6044 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.423635][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.5.554'. [ 240.496369][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.5.554'. [ 240.755601][ T8529] netlink: 'syz.0.550': attribute type 2 has an invalid length. [ 240.763281][ T8529] netlink: 1 bytes leftover after parsing attributes in process `syz.0.550'. [ 241.093634][ T5913] usb 5-1: USB disconnect, device number 22 [ 241.301522][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.314287][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 241.347254][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.390847][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.556'. [ 241.569306][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 241.623075][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.652680][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.719046][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 241.760603][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.834835][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.897419][ T3090] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 242.336926][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 242.362371][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.888507][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.911903][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 242.935259][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.960715][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.053342][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 243.079078][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.143116][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.184085][ T8569] netlink: 'syz.0.560': attribute type 2 has an invalid length. [ 243.209636][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 243.239189][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.265286][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.298055][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 243.345475][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.371361][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.408067][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 243.430416][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.564323][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.579671][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 244.180659][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 244.212641][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 244.366906][ T10] usb 2-1: Product: syz [ 244.372170][ T10] usb 2-1: Manufacturer: syz [ 244.397488][ T10] usb 2-1: SerialNumber: syz [ 244.419076][ T10] usb 2-1: config 0 descriptor?? [ 244.573176][ T8582] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 244.587177][ T8582] Error validating options; rc = [-22] [ 244.610560][ T8582] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 244.618287][ T8582] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.563'. [ 244.668323][ T30] kauditd_printk_skb: 201 callbacks suppressed [ 244.668353][ T30] audit: type=1400 audit(1751915624.283:5918): avc: denied { mounton } for pid=8574 comm="syz.0.563" path="/122/bus" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 244.736797][ T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 244.779056][ T30] audit: type=1400 audit(1751915624.303:5919): avc: denied { unlink } for pid=8574 comm="syz.0.563" name="#9" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 244.852232][ T30] audit: type=1400 audit(1751915624.333:5920): avc: denied { mount } for pid=8574 comm="syz.0.563" name="/" dev="overlay" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 244.990496][ T30] audit: type=1400 audit(1751915624.363:5921): avc: denied { prog_load } for pid=8574 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 245.144166][ T30] audit: type=1400 audit(1751915624.363:5922): avc: denied { bpf } for pid=8574 comm="syz.0.563" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 245.188188][ T3090] usb 2-1: USB disconnect, device number 17 [ 245.193219][ T8591] netlink: 60 bytes leftover after parsing attributes in process `syz.4.566'. [ 245.208601][ T3090] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 245.257310][ T8591] unsupported nlmsg_type 40 [ 245.274343][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 245.285059][ T30] audit: type=1400 audit(1751915624.373:5923): avc: denied { mounton } for pid=8574 comm="syz.0.563" path="/122/bus" dev="overlay" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 245.303283][ T8592] netlink: 14 bytes leftover after parsing attributes in process `syz.4.566'. [ 245.366857][ T8591] netlink: 60 bytes leftover after parsing attributes in process `syz.4.566'. [ 245.370419][ T30] audit: type=1400 audit(1751915624.403:5924): avc: denied { create } for pid=8574 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.433622][ T8593] netlink: 14 bytes leftover after parsing attributes in process `syz.4.566'. [ 245.457908][ T30] audit: type=1400 audit(1751915624.413:5925): avc: denied { write } for pid=8574 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.478250][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 245.495821][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.520084][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.545841][ T30] audit: type=1400 audit(1751915624.443:5926): avc: denied { create } for pid=8574 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 245.549586][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 245.578830][ T8596] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.597169][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.616291][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.658990][ T10] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 245.683517][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.707018][ T10] usb 6-1: config 0 descriptor?? [ 245.756864][ T8601] netlink: 116 bytes leftover after parsing attributes in process `syz.2.568'. [ 245.799430][ T8592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.838506][ T8592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.879127][ T8592] bond0 (unregistering): Released all slaves [ 246.969418][ T5826] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 247.529493][ T5826] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.634850][ T5826] usb 1-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=a9.d7 [ 247.830948][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.320510][ T5826] usb 1-1: config 0 descriptor?? [ 248.344238][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 248.367484][ T5826] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 248.378420][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 248.440096][ T10] usb 6-1: USB disconnect, device number 12 [ 248.724801][ T10] usb 1-1: USB disconnect, device number 19 [ 249.527453][ T8628] syz.2.576: attempt to access beyond end of device [ 249.527453][ T8628] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 249.588619][ T8628] syz.2.576: attempt to access beyond end of device [ 249.588619][ T8628] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 249.676008][ T8628] Mount JFS Failure: -5 [ 249.724344][ T30] kauditd_printk_skb: 278 callbacks suppressed [ 249.724385][ T30] audit: type=1400 audit(1751915629.523:6188): avc: denied { create } for pid=8627 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 249.750060][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.036551][ T30] audit: type=1400 audit(1751915629.653:6189): avc: denied { read } for pid=8627 comm="syz.1.577" dev="nsfs" ino=4026532849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 250.159351][ T30] audit: type=1400 audit(1751915629.673:6190): avc: denied { read open } for pid=8627 comm="syz.1.577" path="net:[4026532849]" dev="nsfs" ino=4026532849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 250.183070][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.291615][ T30] audit: type=1400 audit(1751915629.693:6191): avc: denied { create } for pid=8627 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.344594][ T5826] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 250.365573][ T30] audit: type=1400 audit(1751915629.753:6192): avc: denied { create } for pid=8626 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.408226][ T30] audit: type=1400 audit(1751915629.873:6193): avc: denied { read write } for pid=8630 comm="syz.0.578" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 250.491955][ T30] audit: type=1400 audit(1751915629.873:6194): avc: denied { read write open } for pid=8630 comm="syz.0.578" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 250.516166][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.550250][ T5826] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 250.562893][ T5826] usb 1-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 250.562917][ T5826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.577163][ T5826] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.625130][ T30] audit: type=1400 audit(1751915629.883:6195): avc: denied { create } for pid=8626 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.657485][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.704556][ T5826] usb 1-1: Product: syz [ 250.710646][ T30] audit: type=1400 audit(1751915629.883:6196): avc: denied { read write } for pid=8630 comm="syz.0.578" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.734052][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.740718][ T5826] usb 1-1: Manufacturer: syz [ 250.757183][ T5826] usb 1-1: SerialNumber: syz [ 250.844395][ T30] audit: type=1400 audit(1751915629.893:6197): avc: denied { read write open } for pid=8630 comm="syz.0.578" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.868690][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.577232][ T8652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.990953][ T5826] usb 1-1: 0:2 : does not exist [ 252.006480][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 252.034064][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 252.080849][ T5826] usb 1-1: USB disconnect, device number 20 [ 252.624014][ T8655] syz.1.583 (8655): drop_caches: 2 [ 252.952512][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.354078][ T8666] cgroup: Unknown subsys name 'pcr' [ 254.734865][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 254.734882][ T30] audit: type=1400 audit(1751915634.543:6361): avc: denied { bpf } for pid=8669 comm="syz.2.587" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.766916][ T8675] tmpfs: Bad value for 'mpol' [ 254.918400][ T30] audit: type=1400 audit(1751915634.573:6362): avc: denied { mounton } for pid=8669 comm="syz.2.587" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 254.997783][ T30] audit: type=1400 audit(1751915634.623:6363): avc: denied { create } for pid=8670 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.034063][ T30] audit: type=1400 audit(1751915634.623:6364): avc: denied { connect } for pid=8670 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.061464][ T30] audit: type=1400 audit(1751915634.623:6365): avc: denied { write } for pid=8670 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.132516][ T30] audit: type=1400 audit(1751915634.633:6366): avc: denied { perfmon } for pid=8669 comm="syz.2.587" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.270310][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.284177][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.293123][ T30] audit: type=1400 audit(1751915634.633:6367): avc: denied { bpf } for pid=8669 comm="syz.2.587" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.343546][ T30] audit: type=1400 audit(1751915634.633:6368): avc: denied { perfmon } for pid=8669 comm="syz.2.587" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.392922][ T30] audit: type=1400 audit(1751915634.633:6369): avc: denied { bpf } for pid=8669 comm="syz.2.587" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.530109][ T6044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.775200][ T8691] netlink: 92 bytes leftover after parsing attributes in process `syz.0.589'. [ 256.070731][ T8692] macsec0: entered promiscuous mode [ 256.711134][ T8697] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 256.785983][ T8697] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 256.803780][ T8697] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 256.816059][ T8697] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 256.855151][ T8699] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 256.864813][ T8699] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 257.052963][ T8699] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 257.068660][ T8699] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 257.094745][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 257.330481][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 257.364914][ T10] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 257.416858][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.449109][ T10] usb 2-1: config 0 descriptor?? [ 257.539875][ T8706] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 258.135712][ T10] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 258.163060][ T10] zeroplus 0003:0C12:0030.0007: item fetching failed at offset 3/5 [ 258.197418][ T10] zeroplus 0003:0C12:0030.0007: parse failed [ 258.218891][ T10] zeroplus 0003:0C12:0030.0007: probe with driver zeroplus failed with error -22 [ 258.417425][ T5881] usb 2-1: USB disconnect, device number 18 [ 258.487776][ T8723] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.595'. [ 258.704347][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.599'. [ 258.713659][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'. [ 259.844402][ T30] kauditd_printk_skb: 299 callbacks suppressed [ 259.844420][ T30] audit: type=1400 audit(1751915639.583:6661): avc: denied { read write } for pid=6044 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.901146][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 259.922076][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 260.119650][ T8749] netlink: 44 bytes leftover after parsing attributes in process `syz.1.604'. [ 260.233881][ T30] audit: type=1400 audit(1751915639.583:6662): avc: denied { read write open } for pid=6044 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.600544][ T8751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.899188][ T3090] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 260.917261][ T30] audit: type=1400 audit(1751915639.583:6663): avc: denied { ioctl } for pid=6044 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.951154][ T6044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 260.968773][ T8749] audit: audit_backlog=65 > audit_backlog_limit=64 [ 260.975534][ T8749] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 261.019702][ T6044] audit: audit_lost=60 audit_rate_limit=0 audit_backlog_limit=64 [ 261.035714][ T8749] audit: backlog limit exceeded [ 261.047945][ T5836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 261.064153][ T6044] audit: backlog limit exceeded [ 261.364170][ T3090] usb 2-1: Using ep0 maxpacket: 8 [ 261.416592][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 261.449697][ T3090] usb 2-1: config 0 has no interfaces? [ 261.517132][ T3090] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 261.529702][ T3090] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 261.540380][ T3090] usb 2-1: Product: syz [ 261.544739][ T3090] usb 2-1: Manufacturer: syz [ 261.549569][ T3090] usb 2-1: SerialNumber: syz [ 261.611211][ T3090] usb 2-1: config 0 descriptor?? [ 261.664952][ T31] INFO: task kworker/1:5:5940 blocked for more than 142 seconds. [ 261.740448][ T31] Not tainted 6.16.0-rc5-syzkaller #0 [ 261.765425][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 261.824569][ T31] task:kworker/1:5 state:D stack:22696 pid:5940 tgid:5940 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 261.880530][ T31] Workqueue: usb_hub_wq hub_event [ 261.926574][ T10] libceph: connect (1)[c::]:6789 error -101 [ 261.933815][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 261.955186][ T8759] ceph: No mds server is up or the cluster is laggy [ 261.972394][ T31] Call Trace: [ 262.003352][ T31] [ 262.022258][ T31] __schedule+0x116a/0x5de0 [ 262.035957][ T31] ? __lock_acquire+0x622/0x1c90 [ 262.041174][ T31] ? __pfx___schedule+0x10/0x10 [ 262.054449][ T31] ? find_held_lock+0x2b/0x80 [ 262.061352][ T31] ? schedule+0x2d7/0x3a0 [ 262.065819][ T31] schedule+0xe7/0x3a0 [ 262.069944][ T31] schedule_timeout+0x257/0x290 [ 262.239911][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 262.288665][ T31] ? _raw_spin_unlock_irq+0x29/0x50 [ 262.330454][ T31] __wait_for_common+0x2ff/0x4e0 [ 262.341192][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 262.354549][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 262.382498][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 262.384263][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 262.489574][ T31] ? __pfx_device_del+0x10/0x10 [ 262.508036][ T31] ? kobject_put+0xab/0x5a0 [ 262.527714][ T31] i2c_del_adapter+0x546/0x6f0 [ 262.538870][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 262.549990][ T31] ? kfree+0x2b4/0x4d0 [ 262.560323][ T31] ? media_device_cleanup+0x53/0x80 [ 262.570390][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 262.576794][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 262.582183][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 262.588149][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 262.593890][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 262.600310][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 262.606744][ T31] usb_probe_interface+0x303/0x9c0 [ 262.611946][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 262.618163][ T31] really_probe+0x23e/0xa90 [ 262.622789][ T31] __driver_probe_device+0x1de/0x440 [ 262.628381][ T31] driver_probe_device+0x4c/0x1b0 [ 262.633507][ T31] __device_attach_driver+0x1df/0x310 [ 262.639205][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 262.645278][ T31] bus_for_each_drv+0x156/0x1e0 [ 262.650203][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 262.656031][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.661320][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 262.667275][ T31] __device_attach+0x1e4/0x4b0 [ 262.672115][ T31] ? __pfx___device_attach+0x10/0x10 [ 262.679125][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 262.684956][ T31] bus_probe_device+0x17f/0x1c0 [ 262.689849][ T31] device_add+0x1148/0x1a70 [ 262.694863][ T31] ? __pfx_device_add+0x10/0x10 [ 262.699739][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 262.706567][ T31] usb_set_configuration+0x1187/0x1e20 [ 262.712432][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 262.718975][ T31] usb_generic_driver_probe+0xb1/0x110 [ 262.725160][ T31] usb_probe_device+0xef/0x3e0 [ 262.730369][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 262.736038][ T31] really_probe+0x23e/0xa90 [ 262.740945][ T31] __driver_probe_device+0x1de/0x440 [ 262.746649][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 262.752230][ T31] driver_probe_device+0x4c/0x1b0 [ 262.757616][ T31] __device_attach_driver+0x1df/0x310 [ 262.763506][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 262.770020][ T31] bus_for_each_drv+0x156/0x1e0 [ 262.776934][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 262.782682][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.788539][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 262.796668][ T31] __device_attach+0x1e4/0x4b0 [ 262.801819][ T31] ? __pfx___device_attach+0x10/0x10 [ 262.807499][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 262.813068][ T31] bus_probe_device+0x17f/0x1c0 [ 262.822061][ T31] device_add+0x1148/0x1a70 [ 262.827212][ T31] ? __pfx_device_add+0x10/0x10 [ 262.832395][ T31] ? add_device_randomness+0xb7/0xf0 [ 262.839752][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 262.846024][ T31] usb_new_device+0xd07/0x1a20 [ 262.850869][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 262.859498][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 262.867285][ T31] ? mark_held_locks+0x49/0x80 [ 262.872119][ T31] hub_event+0x2eb7/0x4fa0 [ 262.877055][ T31] ? __pfx_hub_event+0x10/0x10 [ 262.882252][ T31] ? ioread32_rep+0xe0/0x100 [ 262.888066][ T31] ? rcu_is_watching+0x12/0xc0 [ 262.892960][ T31] process_one_work+0x9cf/0x1b70 [ 262.898265][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 262.903970][ T31] ? __pfx_process_one_work+0x10/0x10 [ 262.909465][ T31] ? assign_work+0x1a0/0x250 [ 262.917948][ T31] worker_thread+0x6c8/0xf10 [ 262.922599][ T31] ? __kthread_parkme+0x19e/0x250 [ 262.931268][ T31] ? __pfx_worker_thread+0x10/0x10 [ 262.938444][ T31] kthread+0x3c5/0x780 [ 262.942852][ T31] ? __pfx_kthread+0x10/0x10 [ 262.947900][ T31] ? rcu_is_watching+0x12/0xc0 [ 262.953081][ T31] ? __pfx_kthread+0x10/0x10 [ 262.958034][ T31] ret_from_fork+0x5d4/0x6f0 [ 262.967899][ T31] ? __pfx_kthread+0x10/0x10 [ 262.972503][ T31] ret_from_fork_asm+0x1a/0x30 [ 262.977890][ T31] [ 262.981703][ T31] [ 262.981703][ T31] Showing all locks held in the system: [ 262.990574][ T31] 1 lock held by khungtaskd/31: [ 262.996538][ T10] libceph: connect (1)[c::]:6789 error -101 [ 263.002605][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 263.098287][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 263.145334][ T31] 4 locks held by kworker/1:2/3090: [ 263.153418][ T31] #0: ffff888022aefd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 263.199650][ T31] #1: ffffc9000c3c7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 263.224449][ T31] #2: ffff888029ed1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 263.242895][ T31] #3: ffff8880359eb198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 263.272614][ T31] 2 locks held by getty/5588: [ 263.277493][ T31] #0: ffff88814cd0c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 263.305352][ T31] #1: ffffc9000363c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 263.321671][ T31] 4 locks held by udevd/5834: [ 263.326784][ T31] #0: ffff8880338171c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 263.336001][ T31] #1: ffff888035aab888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 263.345914][ T31] #2: ffff8880368d85a8 (kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 263.355505][ T31] #3: ffff8880359eb198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 263.365198][ T31] 5 locks held by kworker/1:5/5940: [ 263.370420][ T31] #0: ffff888022aefd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 263.381331][ T31] #1: ffffc900045afd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 263.392973][ T31] #2: ffff888144b51198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 263.401939][ T31] #3: ffff888032496198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 263.411757][ T31] #4: ffff8880283ee160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 263.422028][ T31] 4 locks held by udevd/6251: [ 263.427578][ T31] #0: ffff88807ba29b08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 263.436733][ T31] #1: ffff888056ec3c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 263.448542][ T31] #2: ffff88807aa7d008 (kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 263.458741][ T31] #3: ffff888032496198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 263.469835][ T31] 2 locks held by kworker/u8:15/6896: [ 263.475334][ T31] #0: ffff888146287948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 263.486436][ T31] #1: ffffc90003257d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 263.498222][ T31] [ 263.500594][ T31] ============================================= [ 263.500594][ T31] [ 263.516178][ T31] NMI backtrace for cpu 1 [ 263.516193][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 263.516218][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.516228][ T31] Call Trace: [ 263.516234][ T31] [ 263.516241][ T31] dump_stack_lvl+0x116/0x1f0 [ 263.516270][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 263.516287][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 263.516310][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.516336][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 263.516357][ T31] watchdog+0xf70/0x12c0 [ 263.516382][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.516399][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.516423][ T31] ? __kthread_parkme+0x19e/0x250 [ 263.516448][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.516467][ T31] kthread+0x3c5/0x780 [ 263.516485][ T31] ? __pfx_kthread+0x10/0x10 [ 263.516503][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.516525][ T31] ? __pfx_kthread+0x10/0x10 [ 263.516542][ T31] ret_from_fork+0x5d4/0x6f0 [ 263.516566][ T31] ? __pfx_kthread+0x10/0x10 [ 263.516589][ T31] ret_from_fork_asm+0x1a/0x30 [ 263.516620][ T31] [ 263.516641][ T31] Sending NMI from CPU 1 to CPUs 0: [ 263.639963][ C0] NMI backtrace for cpu 0 [ 263.639978][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 263.639993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.640002][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 263.640024][ C0] Code: eb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f0 21 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 263.640037][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 263.640051][ C0] RAX: 000000000093b31f RBX: 0000000000000000 RCX: ffffffff8b881c69 [ 263.640060][ C0] RDX: 0000000000000000 RSI: ffffffff8de3106c RDI: ffffffff8c158660 [ 263.640069][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 263.640078][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 263.640086][ C0] R13: ffffffff8e297780 R14: ffffffff90a97350 R15: 0000000000000000 [ 263.640094][ C0] FS: 0000000000000000(0000) GS:ffff888124718000(0000) knlGS:0000000000000000 [ 263.640109][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.640117][ C0] CR2: 00007f30ea784338 CR3: 0000000059dcc000 CR4: 00000000003526f0 [ 263.640126][ C0] Call Trace: [ 263.640133][ C0] [ 263.640138][ C0] default_idle+0x13/0x20 [ 263.640158][ C0] default_idle_call+0x6d/0xb0 [ 263.640176][ C0] do_idle+0x391/0x510 [ 263.640198][ C0] ? __pfx_do_idle+0x10/0x10 [ 263.640214][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 263.640235][ C0] cpu_startup_entry+0x4f/0x60 [ 263.640251][ C0] rest_init+0x16b/0x2b0 [ 263.640263][ C0] ? acpi_subsystem_init+0x133/0x180 [ 263.640280][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 263.640300][ C0] start_kernel+0x3ee/0x4d0 [ 263.640319][ C0] x86_64_start_reservations+0x18/0x30 [ 263.640338][ C0] x86_64_start_kernel+0x130/0x190 [ 263.640356][ C0] common_startup_64+0x13e/0x148 [ 263.640375][ C0] [ 263.835681][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.864857][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 263.871743][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 263.881806][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.891877][ T31] Call Trace: [ 263.895156][ T31] [ 263.898089][ T31] dump_stack_lvl+0x3d/0x1f0 [ 263.902696][ T31] panic+0x71c/0x800 [ 263.906606][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 263.912513][ T31] ? __pfx_panic+0x10/0x10 [ 263.916925][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 263.922292][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.928264][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 263.933627][ T31] ? watchdog+0xdda/0x12c0 [ 263.938041][ T31] ? watchdog+0xdcd/0x12c0 [ 263.942446][ T31] watchdog+0xdeb/0x12c0 [ 263.946685][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.951349][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.956546][ T31] ? __kthread_parkme+0x19e/0x250 [ 263.961566][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.966234][ T31] kthread+0x3c5/0x780 [ 263.970290][ T31] ? __pfx_kthread+0x10/0x10 [ 263.974866][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.979623][ T31] ? __pfx_kthread+0x10/0x10 [ 263.984197][ T31] ret_from_fork+0x5d4/0x6f0 [ 263.988778][ T31] ? __pfx_kthread+0x10/0x10 [ 263.993352][ T31] ret_from_fork_asm+0x1a/0x30 [ 263.998109][ T31] [ 264.001299][ T31] Kernel Offset: disabled [ 264.005601][ T31] Rebooting in 86400 seconds..