last executing test programs: 3m2.722971634s ago: executing program 0 (id=353): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x0, &(0x7f00000005c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x0, 0xe}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0x12, 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000040)={0x9, 0x5, 0x128c, 0x1, 'syz0\x00', 0x1}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x80047441, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 3m2.425010731s ago: executing program 0 (id=355): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = timerfd_create(0x8, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) socket$inet_mptcp(0x2, 0x1, 0x106) timerfd_settime(r5, 0x3, &(0x7f0000000140), 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0xb8ba, 0x448181) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) epoll_create1(0x0) 3m0.927757962s ago: executing program 0 (id=360): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)='o', 0x1}], 0x1}}], 0x1, 0x4000045) recvfrom$inet(r2, &(0x7f00000003c0)=""/253, 0xfd, 0x40002043, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) fcntl$notify(r1, 0x402, 0x8000002d) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000000) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) 2m59.790206159s ago: executing program 0 (id=364): mkdir(&(0x7f0000000280)='./file0\x00', 0x51) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x5, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800003a3) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f00001fa000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2752ad}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x90, 0x0, 0x54, {0x1, 0x2, 0x7, 0xfffffffffffffff7, 0x8, 0x7e3, {0x0, 0x8001, 0x7ff, 0x7ff, 0x653, 0xd9c, 0x0, 0x1d3, 0xfffffff7, 0x6000, 0x8, 0x0, 0x0, 0x5, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r9, 0x0, 0x0) 2m56.474354949s ago: executing program 0 (id=375): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203dbf40212000100000000090400000002060000"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x5, &(0x7f0000000700)=ANY=[@ANYRES64=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$kcm(r2, &(0x7f0000000cc0)={&(0x7f0000000300)=@nfc={0x27, r3, 0x0, 0x3}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000400)="6b5450fab9c145e859441757b34405c06a394c740147551d900c881152d8b0a65887648ab1a7b0c7723dff43dd6e16ccb0b9d6b02bea09077ba6d68c24220e7ae35cee974c68760e2f0a747b61cebe921574e8ab0b19c3ba5a399d0aee8a2469e2c8f9e738840200e9720cff27f826972c78980b808960a3a8343275363addfe7019962205afd4da96a9ada8a1c91e9038a6a44afcf86e3aa7a1883e55d9b67fe5473840543b2113afe4d0e6eb06d47636dc67eb5156dae2775a58bfac6eadb589920ea319e94b068ebe3cdef901b73bde862aaf", 0xd4}, {&(0x7f0000000500)="939f113ab629fddc35104317623994cacdfb3a229f3b47deec6feaa09f5552484113f9914c4d46863757ab77b4b0d4c3618917df77b84bbdbe1ef8bb542866ae847267abe5e165853c6591fe36da41a2039a7cca441442394abb7a8abb8b84d65d643d9927f674e64a842a80755457678fbf90c1c5ad67c0c3424ab9519e692f81e3f5f436ec7172346fb44125b11879d8828d26a36a3935b5d153e515191ec98ad18b39ae621e64e55044b4327cad76a7f9930f149478bf21ae95e2a1c4", 0xbe}, {&(0x7f0000000740)="114bc41170fee7998169ef66d97d6dab93f0d0f2397017c49336bd2533beb08459426e064eb112100671f19c71e7cbe4ae9a1db669758ae89cbad795237c983c4cfc6b579ff0232187503c5e141b011add429fa3ffb8027cc65d866ed7c5a3d677da9cfa6dec1dfa85a3e7c7767cd86934fcb186bc446a7eb36064fd4dd902fa4153e69de864f1a5f1b276ae2bf16334be90a5dcf99581", 0x97}, {&(0x7f0000000800)="9fac6e2a7c42f61a8ab2df1df0b5bcb4a70ec28fa05876abbb0cdccf1a50a69076a297433d4a59bbdf9fac303b2c1892447313e45188c5fa4ca87bf131dd6ebb28436d063609e50a9f797b1bdf8e3c35dd97bdcae63cc8d0ce161c79eb149e26f4df1d85b4f24ecf203337a3f3a27d9d2d2e093aa699a185c626df2f91fd0e6a14fa809c37c8e531fabf7d5dd9fa8c8d1ef5aa36bf99f7664296fe75493f899f7d7226d18a7319e01054f14773fa0233dcdd44f7572ee5f9a50c21bd805cc82b9a39578255a9bb6581f47cb538e8c3fe9ddaa9f9d952bb47c18701426254", 0xde}, {&(0x7f0000000900)="391e505e4fc48cbb5ef56afaf411c1037ee798df91b87d31df9f9fa0d02c1c62dbc8ea850245f847cfd9d5ca918c8341d84139f8777d19b9c6fabd09609f5c54fc600ad0b45107f80952620772fb1d4427765ba4c762393298ea69ef5a24d4e76dd9c169c4f070df2e0d012d976f6cf103841009d086af4fb3bbb5669b08c7f1691c94274b7a62f8c58a02c4703e1f", 0x8f}, {&(0x7f00000005c0)="841573820f94cd9bf76635ec37eecc9738bb898e96bcb297526400b1508fc513f974b9560cd565f9b312ab4d72a2371474c090243014a5", 0x37}, {&(0x7f00000009c0)="99833dd2f91f9c78840728f5a5ccb0692290e4d4a174ae8f697aa90b160b095701c5b79273b6c52ee9998c58ba659379cb1f8024d199597e32952a4d1039145269c6c7890021e9350ceae14225d47f5297aee85727fb7fd42c8e", 0x5a}, {&(0x7f0000000b00)="d0c3c12720697b76f6c9046245e49b4687dc5190ee12f1189de4106f52191326b217b78f038723ca78387304b0038eb44ebde1bad3601a91017955e61b49d71afcdb0fe00d9a82135f3df52755964cd9c38f4a99750e19602e015200ea11622ed1ab6b2250b0d5b3f8bdec9df7356ed494a5526a00b5c2338d75cf6e2f62ae40fed7237ec731aa01b0e9c18184db3e38a4c92fd2bbda93fdcc4a0359c4f5855181d9414fe02b0a5f01fbb08961f346311ea077f9c0781def7ed48ec653275c2c48bf53e7bfbd12dedb1b4831ef41d0ea", 0xd0}, {&(0x7f0000000680)="656bdab2120f", 0x6}], 0x9, &(0x7f0000000a40)=[{0x50, 0x84, 0x9, "76ce0858f37598d7c04c858253dc084339b0d1ac5d4eecfa35336d487a55ca8bc69c1f52aeba263430f78e511f8953baa2d2f94b72c0c8c6d918fcbfc4"}], 0x50}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r6, &(0x7f00000026c0)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0xc0000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0xff80}], 0x1}, 0x20000000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m52.997245819s ago: executing program 0 (id=387): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000040), 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201575022ba5f20"], 0x0) r4 = gettid() r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x13, 0x1, 0x0, 0x2, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 2m36.462684433s ago: executing program 32 (id=387): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000040), 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201575022ba5f20"], 0x0) r4 = gettid() r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x13, 0x1, 0x0, 0x2, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 11.622467279s ago: executing program 5 (id=924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0, 0x0, 0x203}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20000) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) chdir(0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64000100}}, 0x1e) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000040}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5], 0x48) getpid() r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0xd) 11.517090936s ago: executing program 2 (id=926): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() clock_adjtime(0x3, &(0x7f00000000c0)={0x0, 0x50e8, 0x315, 0x7f7, 0x19, 0x0, 0x8000000000000000, 0x1, 0x7fffffff, 0x3, 0x2, 0x6, 0x3, 0x5, 0xf83, 0xf, 0x80000000, 0x1, 0x4, 0x1, 0x2, 0x18a, 0x10001, 0xb085, 0x5, 0x2}) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a001fffff", @ANYRESHEX=r2], 0x24}}, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) dup3(r2, r6, 0x80000) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r9) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10.930445522s ago: executing program 5 (id=927): socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x88, 0x8d, 0x22, 0x8, 0x64b, 0x7825, 0x1a98, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x6, 0x40, 0x56, [{{0x9, 0x4, 0x91, 0xa, 0x0, 0xe1, 0x2f, 0xed, 0x6}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 10.773517541s ago: executing program 1 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc", 0x29}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000002740)=[{&(0x7f0000000700)="0ea13e", 0x3}, {&(0x7f0000000740)="344265ee69d6bcd3877443bcd5a574f6f4fc44fe3b7ee8bd503fe23fec6a389cdad6b3", 0x23}], 0x2}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000380)={{0xc, @empty, 0x4e22, 0x3, 'nq\x00', 0x4, 0x9, 0x46}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4e21, 0x2, 0x2, 0x81, 0x9}}, 0x44) io_uring_enter(r3, 0x3516, 0x700, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') 9.601149308s ago: executing program 1 (id=931): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) 9.580480188s ago: executing program 3 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x2000000, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0xc, 0x9, 0x1}) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a2081a, 0x0) 8.604675683s ago: executing program 1 (id=933): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.445262575s ago: executing program 3 (id=935): openat$nvram(0xffffffffffffff9c, 0x0, 0x101200, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f000001fcc0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x2}}, 0x120) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xbf2d) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 8.133501062s ago: executing program 2 (id=936): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r0, 0x0, 0x0) sendto$ax25(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 7.854877741s ago: executing program 2 (id=937): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) chmod(&(0x7f0000000140)='./file0\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 7.569213318s ago: executing program 2 (id=938): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x129100, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() write$P9_RWALK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x30) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xffff, 0x0, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 7.568890519s ago: executing program 5 (id=939): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0), 0x0, 0x4000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) prlimit64(0x0, 0xe, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) 7.468638738s ago: executing program 3 (id=940): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0), 0x0, 0x4000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) prlimit64(0x0, 0xe, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) 6.994699812s ago: executing program 2 (id=941): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x80884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) (async) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000900)={0x6, "11a0c02a8e2a"}) r9 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0x48}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r10}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) 6.635501389s ago: executing program 4 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc", 0x29}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000002740)=[{&(0x7f0000000700)="0ea13e", 0x3}, {&(0x7f0000000740)="344265ee69d6bcd3877443bcd5a574f6f4fc44fe3b7ee8bd503fe23fec6a389cdad6b3", 0x23}], 0x2}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000380)={{0xc, @empty, 0x4e22, 0x3, 'nq\x00', 0x4, 0x9, 0x46}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4e21, 0x2, 0x2, 0x81, 0x9}}, 0x44) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') 5.765121078s ago: executing program 5 (id=944): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000000000032) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000441000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0x1, 0x1, "b0", '1)\n', 0x8809}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.550589191s ago: executing program 4 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @multicast, @loopback, @local, @empty}}}}, 0x0) 5.524360294s ago: executing program 3 (id=946): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() clock_adjtime(0x3, &(0x7f00000000c0)={0x0, 0x50e8, 0x315, 0x7f7, 0x19, 0x0, 0x8000000000000000, 0x1, 0x7fffffff, 0x3, 0x2, 0x6, 0x3, 0x5, 0xf83, 0xf, 0x80000000, 0x1, 0x4, 0x1, 0x2, 0x18a, 0x10001, 0xb085, 0x5, 0x2}) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a001fffff", @ANYRESHEX=r2], 0x24}}, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) dup3(r2, r6, 0x80000) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r9) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.960677726s ago: executing program 4 (id=947): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r0, 0x0, 0x0) sendto$ax25(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 4.833150997s ago: executing program 4 (id=948): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) chmod(&(0x7f0000000140)='./file0\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 4.707911598s ago: executing program 5 (id=949): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) chdir(0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002c00), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000002c40)={0x1, 0x0, [0x1, 0xc5, 0x4d0, 0x7fff, 0x3, 0x2, 0x3, 0xfffffffa]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000180)) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x8a7f00a8e5337e98) io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x8d5f, 0x1046, 0x0, 0x264}) socket$alg(0x26, 0x5, 0x0) 4.707526619s ago: executing program 4 (id=950): socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x88, 0x8d, 0x22, 0x8, 0x64b, 0x7825, 0x1a98, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x6, 0x40, 0x56, [{{0x9, 0x4, 0x91, 0xa, 0x0, 0xe1, 0x2f, 0xed, 0x6}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 4.141995609s ago: executing program 1 (id=951): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) chdir(0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002c00), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000002c40)={0x1, 0x0, [0x1, 0xc5, 0x4d0, 0x7fff, 0x3, 0x2, 0x3, 0xfffffffa]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x8a7f00a8e5337e98) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000020c0), 0x0, 0x82c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x8d5f, 0x1046, 0x0, 0x264}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) 3.299369481s ago: executing program 5 (id=952): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000002700)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000003c0)="3f17c58a9b85808bc829a1de0404c0dc63e91a306d7e45cb236052c83fc7079fa2d4c8aa2ac456a9bbb4e1ccb246cbb0bc362196f39e6508f4173377d389ba1ad57e79762360ce7d9f42ab221e8385d4b44dd74d376e75ca4fd73bb45197baf445440747cfcf5393733abd9ef3730535", 0x70}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000000880)="53fe72b86741b936c1f49164b612dcc3f8713fdca9d790adad28c72bf0504b4cbfee140fd48f4d8f984cd6930763f582bc95cce7a8fd84db073db940be64f567f53d5ab6e18d2d296514148d8442859881a88664882d827baa6052091741dceba4604ee7214caacaa468717854b7f38b56d106873d0bdb95fbe2e1c12d7e56a6e6172453b70e3f03ba155dd64eb060ff105f9116f01ec1503b0870f747685518db8826e5e8cc4115c76969918b79dde5348662885ae54d2af7a00ca795ea90d97417e9b6a04e", 0xc6}, {&(0x7f0000000500)="2008bb00a2e7a1adcbb71b9d107f8f4f1771c35c5ce51e71566f3f70da6c057c7bd0f0b2959eb11f073d7c85a19404d6cf2153a45de4e0861e7a9b699a4ac68a0b6cc55a8644a0049c8d284d5c89124750525f93827966f96c7f10db4cd454b46a37768b60e712f03a760b7191feee839e9e257e49fd5bf930ca1294fa7d55d1496e6a1eb186f0f3dd9603d40051e97461", 0x91}, {&(0x7f00000005c0)="321b3979abebb2c0f05f77e12e40da038f9f8de31f33fd917ae57f6a8f4a8d2344139206a7a258c7ab351b3b7f6660953b582b08d3ed1769a5cf24e005727022471ca83cc846d03347d1af2ef0bc8d4309cbb2b9540a86c5f564f5d739ea9470c7ede12507fd50727d3178c5e526b16a0af8b99a6fdc4d07ce3c194b7fd4d9d78dd94bf114fc3d08bcd5cdb87f347c5ce86886741e3a6526a5f1e26b9744e868bd8c976898b824e5cc98b9da9aac379ceaec137e37165aea265f0021e86e1f7bc3967aee7df06deaaa454ca39bb194143252aa6e8cd2dbc4be459aae1ea10c0299abc228322a3d915c", 0xe9}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r1, r1, r0, r1, 0xffffffffffffffff]}}], 0x58, 0x40}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000024c0)="350ff8e18a02038b0c63a5644c9eb6a1ccbd292ff2fceb3f6e41250724c8853a04d8084e9704912b3d4af0c7112d69de84dd20f0c4d004dfca4abad1dc3a37618f867a717e6cb55bd7425b5ce39b97f18af6bb50281ff51adb5a95ea223e4269ac130235837fc5ad5b990eddb673f69dd1e10fdc698c0e41dffe66afb7af26c0f799ce8f42119ef4d9c3f7f77cb9f35d54828a70a8104d9691e754ca05ebf96df489c946e557", 0xa6}, {&(0x7f0000002580)="ebb27d9bacdbc5d10f89932c73e677a94b7b94b34b6f84b5eefe4c05e6ee7bd5cfb7612edb00f4e9546d8e06f7601b10c48a71bc4c60f6a73b1cc909552d6656eb75ae223133e5c50bce524cab5534fdcf7465", 0x53}, {&(0x7f0000003880)="069a47329cae8a04cb2366ab9268a97fae98a94a4afad661e9995ac0fb4fb5bc259a18993ddbdb1b84661a6be29f0d5ba969d7e4c261dd4dfea61f587781ba3a01b0234ae626483df8917d8f311046542fb988b01c7c306840b825ca27452e60cb765ecf4bb685486ef3a26346d095778e5669c64e857ea286ee159d6912e22c576331993977001ecc95bceab05d210e4413d13de59a584dff5f9ecb5098e75ee77dac918d7377067f1f9e212f58588531a3603c745ff3b16864ed2174d362cffeb0ef74ea609982faaf6bbe5c71abbb40f70a82b47e49bf66ca7626c8696c8394a08bd136c63b89672bd4e5a234ff23c4e610e95d4f45cccb9a5a503d5b4d97f6e993b2dade44ed730d23ac0a34439bf2d49b93e59eef24a516e4cbbb384ce4820080cb773560484f8524dfd433eb168f57a08f4b116185683ee79338c7281e997fb7afb2d9abf5fad97ad03b755b3c2dd9682934d22fd189b14d13fa5783ec893eb2693b1e80bc74a45d8916c5fcd02d889f8dc247a1c4b6af18aa870f55d07c665fb75e5216aae0d1dfdcae967bc0b13483225d0a7cdfe917508ec6eb94829eca8d43bb5150b32541bbfbaeeb30d8e9de39fcbaac6891e2d9b588446e9bc13244a695bff324a10d0172cad7e8c9ffa0dfbfccdd776eda62f8161b760c986bb3d9c599c5c61c3e9929c16da2825ccad7172afc7a4714d21a4e7f9eeb8e2e6d184daf57ceb52d2b20b64cd8ebe9361269057326df4ec4bc97bf88b76056a4c750e1d3e799cb8d6bfa75ce45fa963840cdd66e0ed26e967c59140f969c2094e2becb736a98a03ec7db53b495b66afa0ee3a44d0afc5d2ee0f2c94de0cde81b61d7740b04d8bed6fbf4ef5cdf7ca4d631843289fc6412806a55cf6559d9cc82216a4621dd699d63252bd11bfb4a956aff39534b21193c9f1551ff29565e68d17c70d47e6a48a648747166a6819e0d3fc33b267ba9c0ebb9906c4b0ce340dd4cfb4e48ae84b23ff4d684853dfb59d9e629189b0bf51a3e96ab8f229fdbdcb9142162d279f944de963b701ee3c679971bdc7e8516ab341d141c9d37f5110689e1444884a9b76ff24e93f2b970aff743135f10788924b6c26795900dd8c0ab4eb835c259795e8679d1bf6b037ee5290b12e5be5a648765e28af335709b96af661acde159a8a4d50ef7fda72dfab2cb9b4458c9ceb5d1b9dd6c0a6136a3f1f10302f0f7765728e8414aa2ed1576581511830e367208f0a3c7e37c12d8bb1817c888593105fe0031c45ad0ef79ae398cc5e212780bd56ceeca23cb64126553c272b3047ef103fdfbc53199eecbcf65ccb9a5fe55d9feb23c7877d126be7aa0d921fac902ee90b7c840a72e35cad522a93cad7a83eed570cb5403ab859d2fc40aaea9629077536a4731e9767d6ffe4d72577ac555e6f4d603c0be7f52c1acaab20d1ab9a70cc9d1fc84d13a5e5933a4fd3762cb2281806364d783306da741b41e920545a4b70d4917db63749702d7afa8754e5915822557d5f55433b8811ef4f1c177c6be84f4294e8220231df7de3e190c30f2e50b5523ece9e0114b27cce640f9085ca579258487e7098dc1ad0f8fda28166bf56a9d3776adfde26276ccd6aebad8d4ef095aa1bc3032ddf1e01eb5ae5009552fa013d16fc740b4e4ff0f4b5a21a7a0ddec756e0d2d91ff1e18a81bbebc8097a9ccfbff5b2aa523633cab9d4de71b7c7261ddd67113746cc1839ef645b0537ffc8beaf5c948aafdfd9a23aeee2b5d17c0a5cb3e0d2e7a2e7da098795a75ade2b6db996ca6e7463a76a7c55db643d4eb99d4513d7c4b352fe5f8434bb7f2d156e022b589bdb6143d856a3c73814a32b013d10533a359ad08b6aaa29b8e04bc1de1b0ac2887ad87f39636deb469bc96b12c8e7b69356c30c4529b48978c0d9ef64cd42f2847629ebe5b1209e5c8fa5078768ec3c4153a7dd2cabbd7c42a545919d42f9ddc46ee7c999a996ebadd935dd8c46fc924b0476c69e5e05bf5e2c19f962e5491c0844724684e8c77cd1cc91eeaafd744e9df66c5e8e1dfb1dae79f79706f93bd2f4c7938f336c10a991ec0ad780e00f4e440a6cd9339d995c1aed1f651ef7b52809d548f86457d9bb6becd098584fb8c1cba23189977acd4af74d13dd6239611ba0931f9de41e2f45aec0e792cd3b9d99531d8813505460c91165c412ac497878eb6f41c5bee5f991c6db2bbd34471da7eca64e449085b8ce5b02fc4b69fe841d188a70433a5e56fad4937674c95341af459712405629584510ce482eb9720657e2af3eb8286ff46fba5a6c6460215a62cac199cfc178eb7061c2ac573faf7f2279c996bea7a0c70f5572f9afdd1e278b4b8aa62149c7249162f2bed725beac69f19047a25ea03d54db759875d1b237edf42a46b415f2ccb90d94cbb03f504fb30d3c0781010aec5f2d4f0fb1fe9951745165507f9a04551e5c1342ba3e3ac376a913d882f0906b0447b87a5e65b4a1c0fb1d032816663324906c823382598ccfbe4fbd7fd9887f72ed01b721bc298051ee89b3118f7e9feb2176da623f8cfb834c0d7fce572b1e4597932d9b48ca26ef8a12a61dede8c56dfccc131b85f2f66a3c67461e2e42b0a7b100d46855b6b274f0002d682d33e5fca22f71a1d282ea1c1dba0ab9aac28f23b94e0cf1cc0e95ee1ca5f23d17bc94afeed77fca768b89f63e2c1572266530238504edbd844ff2b95804aa121951ca8fef9134d7bae7d0a0062409ef94b7a26b2d3c6dc1a00d654fc0b49c8ccc1339b615a564fd3324a4cc542e063c7546811938b2ac53191b8c9106b509343cce773ef462d09d04e87725e3393efa2930e002e781f0def12acd0e8b1fea66d1065fc93051a1dd43aec0aa156d538800dde314f1324b2d2106a81ac61a9e3b9dc4a62dece4a8ce1af80c85198208e68da01831d72c4e5b524ecb3f9da8d6a35bf0772932a6f84c92fde230b4d31b0a65b794214acd646b5b4ec4b20c7df0ed98eb8db7e4d4ee46a1b6d253080fae11765c8984cd89c24eed601c4d3995dd5b1e1b8ba0997d60b93b3477714d6e7ba113115e5b8b0a94b4118433669c8c70b5f7ef338b26715057ac186d1b33d857d470705caf2356160e2b0c97164718745018ed0cb329655b1743a65557ef0f7cc4fcb072e4108219c52e9d976f9dfdedc7a550b6f2dbd509ebf2984e066aad63b0e4f3cddca1fe02bdab3c73b2a0996a88c14dc25305a669169d9d94be9ec2b239171e5b2b4ec8c7838f7b8cb4d45c11798acd86e0b9bce28a8d70c9b546ddab9f468a23c36ceca6a7677c6c5dea6a01a2fad2be645529d67c9615c57443762bd743c6f4bee1ad055df134cedd4dc7fb2170a8ec349dccf0f6c4d81e72f1b9edda76086e6ac99bf6aa603208c0ecbb212d801637ab0b97fbf1cbd8f3584aa96424763c511333b718a9736223f183e37c5999e87f4b279e161aa707ee6fdde2aa9ef8a886e49c0ae9a60e5e8d5d2b61307518566cfede9507e8810518a4d041c21f12a800b60136672725d99471fdd13c9471816051cb804c8050a883c58bb360143ce5844bf7c9829e3bf541960b04bf7d02af83ad7dd6c5cd958bec79e6ba78ff3063b8ef8f63680923f2dd65733b5f8e4c50d470d0a3c60aa83447d0d2ea9886b00be6cf9356100b961a01c06a5011d86dbdb918363d89bb9fde924f9729642ad3dae595f64608d7a7631440843ddd0ced93802500838a48fcb1eed44aa14ffc0f53cddd66e8fa11fd6cf2e49d8ff58b9f2c265b5f626a11927cb72252f5a1aecd98481ed749f34e4097189101215cc014fd5583ca3bf3aba76592d8d4aefde2113e19ca089c0971597bb9faddded0338a76606bb98a418b6ce0b1956cc972a6d191eb2a8890e3e5589d52424abdacd03a9e48aa3361efa26b9d4ad1e079725fa5dfeceb6c50346e14841f10420c6957f36060aacd48212ea69910857e62d93ffd5f5ea70383d4f0ca2ca233825b0a91ec3d26e254ea8abbbf795abc64fff04c3ecf44e4f2ea68e4983f93d5dec0b23de776fec294ad421293e4107c6dde00f6dc2b8a5b1648eb34e8039142e8f1a22578963deb4c5f5c96754c11b3034676f41b38cecefdd80719c48976b3305c1adac99644779a59637782c71249c2392f3c15b2ef8347f619c18e0edaa18c54989c817c0c9d38bdc68954060b6c073cf8908719ac4730df99e4d06632d0a0cfc06e8afd72a796f982ce4977eebba4cba9563be8e12a07b034b1bd75a1ae408de6f2bd093ce6c27492afce4bf59cfbbed2230c8bb18c514c1b53048f9edec56cd31c38251b1479726aeb6602e3fd02fc9b62008a550ca5a6fe3f8d23f63be6aed7e1865a5e2d4c0b6c5605e2d18275547a1d39fcf33818bc01a08543fb589d918471cd9f2100754f7ab99d1c052f893ee4ef136bb2f69c173b7e07d58a2b712d5b13a65fd8f831ec0680c0d48d87fd51f0d2992185bd4eb468708942a194fe52c4b354efb9af72b3d2bf4e1c5a599dc8e2dad6b055e7ddaa55098194878c99d4119cf9cedb25c0c1a1a9a0105e61caf07f7c776711f2d331857dec78468f99e439e634174ebccabb1886a6bf4a8d81f0cbcfc248dad990811b802b4c5c8c4baa4748725234409c61c1c72e74980493f23cb49b05180430b5b2e346d6dcf6be487ef710621f7bc854e7b2b89768637db34ee44a41ef23a072f3c4572ffdc1dbd32015e860e60e96e7325b104eb952f55945a9837184d6ce2ff0b4f358352c302234a4bb829726aa085e6d4dd025ebc20fe12a41aa8a8d50b9ad8f4dbc3c572bf296e84f8406704ebd45d217285af88e5a6d487304f6dc8c16dcd0ad63080fe2f7f3dd1fc003eaa7c96017f9e40f0684ee9ef38299d4ac99dba86afed1e2292a5006da41d572ea851fbce8ed9200f55aaadaedb87429f16ebc0699bd415337636d15e812a5425e523fd7faba0e3b49c600d8452ef2e64c84d1c4ed002d728ad99ccb856616c0653303f8ae474d861ec57ad66d0b51e57c36a6334fd6091614592c8ebe3097a250c2073f16e94232e423b6d8f600bca9404b5249c828fb7809234e21d9e1bcf9762d23313d3c45dba28d75295c0ed99aedbecb98ffc0c1ed09e0ec4c02b2b058474b60dfbf00e8e530db124541306d0ee872b56b52ecdcbeeb48952c294f5ccf040fcb95038221a94f43c76497629490bc273cecd3060d543197564bf3a2c12232e7e87cd2c38ef58d645d152dca02f82ca6b979f56bf53c9ca809506c92a3aa49fc0495457704017b681f3f1a3604dc1f01c09dc4ce67bd8222a5be813d917c5bdd753cc76e3ac95099644fbf1998628102bab0614d5b9329ac9ac42d34d8925900579102f96a871043cc67a235bbfe9e1f880d8a32deca1fe2d707c02bd687a64de85fe360247ad114d8a8f615428a859247752b8f3fd1dcc85d9d1d0d5f7973fb63e8f0877378f9f9ff0de422bc968a0738b36c8988d2174cd4cd9bbe331a375f7092c76458c670fc1da0d707dac498fd0e441695eddf93794a0955a35fe8c74d6a7823fa45402c9e9779666b3e806f86f38ffc238fe3751263ed5d0858a327936997fd11cf60599add0fcf652797f062d8ad602b08ab25af9901c0a051399234f526b7c581d0feac9933a2171d30faf39993d2f1b35b2d7dfef78eae4c852acc5792b4ed19504bdc9ffe2186346e0862aa45ea3a764aac488d316f7f2d831a5a72d2ba454c5228184b9e46c709853c34a8c29fe4eb93a1604a96b987b8a673bdcc60fb2c43d414cacdc4c04445d7e66244720d2", 0x1000}, {&(0x7f0000002600)="e4e2ab0bb9b67a0dcb56a422f29ca89a7ed90a2bc0fe39bfe55c050e91e09fe5286b57473faf311c98e0fd6faaa0fa7a7921331c8fd93af50dd82c068c08a7d1fad7adbd16eaa3b86903c153d68d8c2035a52301a125c9034198722911f625e737ab0616b2354b4ad92b830cc420f2270fa4bcfec36a33661f33c5958cf0ec94135d6efc28fcd7ee3513297be4900397647e4da422dbf49ac5790581384846d1993c8b2830ed62130b6989d26049af29ef4e2966a233ef8bc67b93aa8c23", 0xbe}], 0x4, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r0]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r2, r1, r0, r0, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x2, 0x44) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, 0x0, 0x68) mkdir(0x0, 0x0) timer_gettime(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0xeffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8000000000000}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) 3.175361168s ago: executing program 1 (id=953): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x80, 0x2, 0x9}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') 3.098305112s ago: executing program 3 (id=954): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @multicast, @loopback, @local, @empty}}}}, 0x0) 2.701082606s ago: executing program 2 (id=955): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 597.63832ms ago: executing program 4 (id=956): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000e80)="1300000032001f00320300f9002304000a04d6", 0x13) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0xa, 0x0, 0xe}, {0x1, 0x9, 0x2, 0x1}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0xffffffffffffffff) 285.398819ms ago: executing program 1 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) socket$inet6(0xa, 0x3, 0x3c) lsm_get_self_attr(0x65, 0x0, 0x0, 0x1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@host, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) 0s ago: executing program 3 (id=958): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x0, 0x9, 0xffffffff}}}}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 3.362:348): avc: denied { listen } for pid=7776 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.717000][ T30] audit: type=1400 audit(1754801123.362:349): avc: denied { accept } for pid=7776 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.746289][ T30] audit: type=1400 audit(1754801124.257:350): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 195.813749][ T7802] block nbd2: Unsupported socket: shutdown callout must be supported. [ 197.981273][ T5928] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 198.167329][ T7828] netlink: 'syz.3.343': attribute type 12 has an invalid length. [ 198.223060][ T7814] netlink: 76 bytes leftover after parsing attributes in process `syz.3.343'. [ 198.322009][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 198.342159][ T5928] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 198.383915][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.400941][ T5928] usb 2-1: Product: syz [ 198.421135][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 198.421148][ T30] audit: type=1400 audit(1754801127.017:352): avc: denied { create } for pid=7833 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 198.440645][ T5928] usb 2-1: Manufacturer: syz [ 198.508179][ T5928] usb 2-1: SerialNumber: syz [ 198.529025][ T5928] usb 2-1: config 0 descriptor?? [ 198.585201][ T5928] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 198.909088][ T7843] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 198.935120][ T30] audit: type=1400 audit(1754801127.479:353): avc: denied { create } for pid=7841 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 199.318513][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.325446][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.352193][ T7845] netlink: 'syz.2.349': attribute type 4 has an invalid length. [ 199.417227][ T30] audit: type=1400 audit(1754801127.894:354): avc: denied { connect } for pid=7816 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.441079][ T7848] netlink: 'syz.2.349': attribute type 4 has an invalid length. [ 199.592080][ T30] audit: type=1400 audit(1754801128.097:355): avc: denied { setattr } for pid=7851 comm="syz.3.350" name="[io_uring]" dev="anon_inodefs" ino=13660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 199.791181][ T30] audit: type=1400 audit(1754801128.180:356): avc: denied { read } for pid=7851 comm="syz.3.350" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 199.813752][ T30] audit: type=1400 audit(1754801128.180:357): avc: denied { open } for pid=7851 comm="syz.3.350" path="/75/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 199.830412][ T7865] SELinux: Context Z; is not valid (left unmapped). [ 200.176561][ T5928] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 200.201704][ T30] audit: type=1400 audit(1754801128.642:358): avc: denied { ioctl } for pid=7868 comm="syz.0.353" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.227154][ T5928] visor 2-1:0.0: probe with driver visor failed with error -71 [ 200.248536][ T5928] usb 2-1: USB disconnect, device number 18 [ 200.852029][ T7853] orangefs_mount: mount request failed with -4 [ 200.921969][ T30] audit: type=1400 audit(1754801129.325:359): avc: denied { relabelfrom } for pid=7890 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 200.943305][ T30] audit: type=1400 audit(1754801129.325:360): avc: denied { relabelto } for pid=7890 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 201.975758][ T7899] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 202.063681][ T30] audit: type=1400 audit(1754801130.377:361): avc: denied { create } for pid=7915 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 202.159700][ T7922] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 202.989571][ T7922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.065127][ T7925] vlan2: entered promiscuous mode [ 203.077162][ T7925] bond1: entered promiscuous mode [ 203.122830][ T7925] vlan2: entered allmulticast mode [ 203.133498][ T7925] bond1: entered allmulticast mode [ 203.258317][ T7935] bond1: (slave gretap0): making interface the new active one [ 203.265946][ T7935] gretap0: entered promiscuous mode [ 203.272663][ T7935] gretap0: entered allmulticast mode [ 203.287111][ T7935] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 203.787148][ T7980] netlink: 'syz.4.363': attribute type 2 has an invalid length. [ 204.833727][ T8003] 9pnet_fd: Insufficient options for proto=fd [ 204.845778][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 204.845792][ T30] audit: type=1326 audit(1754801132.943:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6858ebe9 code=0x7ffc0000 [ 205.335883][ T30] audit: type=1326 audit(1754801133.395:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f6858ebe9 code=0x7ffc0000 [ 205.371624][ T30] audit: type=1326 audit(1754801133.395:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6858ebe9 code=0x7ffc0000 [ 205.412994][ T30] audit: type=1326 audit(1754801133.395:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7f6858ebe9 code=0x7ffc0000 [ 205.483344][ T30] audit: type=1326 audit(1754801133.395:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6858ebe9 code=0x7ffc0000 [ 205.573970][ T30] audit: type=1326 audit(1754801133.524:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7f6858ebe9 code=0x7ffc0000 [ 205.598829][ T30] audit: type=1326 audit(1754801133.524:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6858ebe9 code=0x7ffc0000 [ 205.623313][ T30] audit: type=1326 audit(1754801133.524:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6858ebe9 code=0x7ffc0000 [ 205.649548][ T30] audit: type=1326 audit(1754801133.524:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7f6858ebe9 code=0x7ffc0000 [ 205.673466][ T30] audit: type=1326 audit(1754801133.524:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6858ebe9 code=0x7ffc0000 [ 205.911423][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 205.920524][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 205.929608][ T8018] netlink: 'syz.3.373': attribute type 5 has an invalid length. [ 205.954010][ T6264] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.969382][ T6264] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.980534][ T6264] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.992053][ T6264] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.772657][ T918] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 206.773901][ T8038] block nbd4: Unsupported socket: shutdown callout must be supported. [ 207.355801][ T918] usb 1-1: Using ep0 maxpacket: 16 [ 207.368400][ T918] usb 1-1: too many configurations: 219, using maximum allowed: 8 [ 207.485929][ T918] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 244 [ 207.497114][ T918] usb 1-1: can't read configurations, error -22 [ 207.633195][ T8048] netlink: 'syz.2.378': attribute type 2 has an invalid length. [ 207.842009][ T918] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 208.198506][ T918] usb 1-1: Using ep0 maxpacket: 16 [ 208.213618][ T918] usb 1-1: too many configurations: 219, using maximum allowed: 8 [ 208.244152][ T918] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 244 [ 208.297285][ T918] usb 1-1: can't read configurations, error -22 [ 208.523273][ T918] usb usb1-port1: attempt power cycle [ 209.302011][ T918] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 209.833668][ T918] usb 1-1: device descriptor read/8, error -71 [ 210.107515][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.386'. [ 210.116752][ T8090] netem: invalid attributes len -4 [ 210.121893][ T8090] netem: change failed [ 210.364933][ T918] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.485533][ T918] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.500788][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 210.500802][ T30] audit: type=1400 audit(1754801138.167:400): avc: denied { getopt } for pid=8093 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.511734][ T918] usb 1-1: config 0 has no interface number 0 [ 210.665934][ T918] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 210.679642][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.687706][ T918] usb 1-1: Product: syz [ 210.691927][ T918] usb 1-1: Manufacturer: syz [ 210.696557][ T918] usb 1-1: SerialNumber: syz [ 210.703472][ T918] usb 1-1: config 0 descriptor?? [ 210.708688][ T30] audit: type=1400 audit(1754801138.222:401): avc: denied { write } for pid=8093 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 211.337026][ T918] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 211.348731][ T918] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 211.359302][ T918] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 211.377566][ T918] usb 1-1: media controller created [ 211.599131][ T30] audit: type=1400 audit(1754801139.173:402): avc: denied { append } for pid=8081 comm="syz.0.387" name="i2c-1" dev="devtmpfs" ino=2818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.655071][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.695120][ T918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.710105][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.179879][ T918] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 215.088616][ T30] audit: type=1400 audit(1754801140.650:403): avc: denied { getopt } for pid=8143 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.121042][ T30] audit: type=1400 audit(1754801140.714:404): avc: denied { setopt } for pid=8143 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.298869][ T30] audit: type=1400 audit(1754801140.742:405): avc: denied { getopt } for pid=8145 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.752082][ T8174] netlink: 'syz.4.398': attribute type 2 has an invalid length. [ 217.479515][ T5881] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 218.675610][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 219.079362][ T5881] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 219.102289][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.110871][ T5881] usb 4-1: Product: syz [ 219.115062][ T5881] usb 4-1: Manufacturer: syz [ 219.129614][ T5881] usb 4-1: SerialNumber: syz [ 219.143580][ T5881] usb 4-1: config 0 descriptor?? [ 220.370052][ T8221] block nbd1: Unsupported socket: shutdown callout must be supported. [ 220.415891][ T5881] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 220.509178][ T5881] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 220.601178][ T5881] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 220.632689][ T30] audit: type=1400 audit(1754801147.517:406): avc: denied { read } for pid=8176 comm="syz.3.401" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 220.700086][ T30] audit: type=1400 audit(1754801147.517:407): avc: denied { open } for pid=8176 comm="syz.3.401" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 220.725440][ T30] audit: type=1400 audit(1754801147.517:408): avc: denied { ioctl } for pid=8176 comm="syz.3.401" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 220.809860][ T5881] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 221.040545][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 221.163737][ T5881] usb 4-1: USB disconnect, device number 18 [ 221.277813][ T8240] debugfs: 'ttyS3' already exists in 'caif_serial' [ 221.285789][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 221.308697][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 221.330663][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.343717][ T24] usb 2-1: Product: syz [ 221.347915][ T24] usb 2-1: Manufacturer: syz [ 221.352890][ T24] usb 2-1: SerialNumber: syz [ 221.362447][ T24] usb 2-1: config 0 descriptor?? [ 221.838699][ T24] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 221.857725][ T30] audit: type=1400 audit(1754801148.606:409): avc: denied { ioctl } for pid=8226 comm="syz.1.410" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.156467][ T8283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.345184][ T5928] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 223.501591][ T30] audit: type=1400 audit(1754801150.166:410): avc: denied { remount } for pid=8280 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 223.670337][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 223.800451][ T8299] netlink: 'syz.4.419': attribute type 2 has an invalid length. [ 223.964360][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 223.983796][ T5928] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 223.992055][ T5928] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.003355][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 224.010185][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.022523][ T24] usb 2-1: media controller created [ 224.028291][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.043766][ T5928] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.059536][ T24] usb read operation failed. (-32) [ 224.066948][ T24] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 224.077407][ T5928] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.087184][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.217287][ T8309] block nbd2: Unsupported socket: shutdown callout must be supported. [ 224.459755][ T5928] usb 4-1: GET_CAPABILITIES returned 0 [ 224.475417][ T5928] usbtmc 4-1:16.0: can't read capabilities [ 224.721527][ T5881] usb 4-1: USB disconnect, device number 19 [ 224.996482][ T30] audit: type=1400 audit(1754801151.329:411): avc: denied { setopt } for pid=8313 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.462412][ T30] audit: type=1400 audit(1754801151.624:412): avc: denied { write } for pid=8313 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 225.583260][ T24] usb 2-1: USB disconnect, device number 19 [ 225.944878][ T8343] debugfs: 'ttyS3' already exists in 'caif_serial' [ 227.218409][ T8380] process 'syz.1.430' launched '/dev/fd/8' with NULL argv: empty string added [ 227.551539][ T30] audit: type=1400 audit(1754801153.590:413): avc: denied { execute } for pid=8376 comm="syz.1.430" dev="hugetlbfs" ino=14961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 227.701466][ T30] audit: type=1400 audit(1754801153.600:414): avc: denied { execute_no_trans } for pid=8376 comm="syz.1.430" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=14961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 227.765179][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.782991][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.794526][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.804643][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.813663][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.857616][ T30] audit: type=1400 audit(1754801154.153:415): avc: denied { mounton } for pid=8384 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 228.304965][ T8399] netlink: 'syz.1.432': attribute type 2 has an invalid length. [ 228.945437][ T5881] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 228.945437][ T57] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 229.109758][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 229.121295][ T8384] chnl_net:caif_netlink_parms(): no params data found [ 229.121567][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 229.143323][ T57] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 229.172105][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.177178][ T57] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 229.240085][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.251866][ T57] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.262872][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 229.303112][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 229.307433][ T57] usb 2-1: SerialNumber: syz [ 229.344194][ T5881] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 229.378233][ T8427] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 229.388308][ T8427] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 229.395760][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.417280][ T5881] usb 5-1: config 0 descriptor?? [ 229.629660][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.641139][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.660401][ T8384] bridge_slave_0: entered allmulticast mode [ 229.673648][ T8384] bridge_slave_0: entered promiscuous mode [ 229.697225][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 229.705563][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.712836][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.721326][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.731989][ T8384] bridge_slave_1: entered allmulticast mode [ 229.741496][ T5881] usb 5-1: USB disconnect, device number 12 [ 229.748927][ T8384] bridge_slave_1: entered promiscuous mode [ 229.794485][ T8588] tipc: Enabled bearer , priority 0 [ 229.868163][ T8591] syzkaller0: entered promiscuous mode [ 229.875143][ T8591] syzkaller0: entered allmulticast mode [ 229.943978][ T8594] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.438'. [ 229.957411][ T8561] tipc: Resetting bearer [ 229.996485][ T5168] Bluetooth: hci5: command tx timeout [ 230.027200][ T8561] tipc: Disabling bearer [ 230.049797][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.065828][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.171917][ T8384] team0: Port device team_slave_0 added [ 230.326901][ T8384] team0: Port device team_slave_1 added [ 231.321068][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.328700][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.561797][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.615189][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.629762][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.655696][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.780790][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.315367][ T5168] Bluetooth: hci5: command tx timeout [ 232.330907][ T8689] netlink: 'syz.4.443': attribute type 2 has an invalid length. [ 232.710291][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 232.932658][ T8720] netlink: 'syz.2.444': attribute type 2 has an invalid length. [ 232.967120][ T9] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 233.268747][ T9] usb 3-1: USB disconnect, device number 7 [ 233.298079][ T8384] hsr_slave_0: entered promiscuous mode [ 233.298653][ T57] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 233.308651][ T8384] hsr_slave_1: entered promiscuous mode [ 233.480284][ T8384] debugfs: 'hsr0' already exists in 'hsr' [ 233.488897][ T8384] Cannot create hsr debugfs directory [ 233.516223][ T57] usb 2-1: USB disconnect, device number 20 [ 233.615058][ T5928] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 233.709149][ T8776] FAULT_INJECTION: forcing a failure. [ 233.709149][ T8776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.770243][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.4.448 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 233.770272][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.770283][ T8776] Call Trace: [ 233.770289][ T8776] [ 233.770296][ T8776] dump_stack_lvl+0x16c/0x1f0 [ 233.770320][ T8776] should_fail_ex+0x512/0x640 [ 233.770343][ T8776] _copy_from_user+0x2e/0xd0 [ 233.770366][ T8776] copy_msghdr_from_user+0x98/0x160 [ 233.770385][ T8776] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 233.770407][ T8776] ? __pfx__kstrtoull+0x10/0x10 [ 233.770440][ T8776] ___sys_sendmsg+0xfe/0x1d0 [ 233.770458][ T8776] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.770488][ T8776] ? find_held_lock+0x2b/0x80 [ 233.770527][ T8776] __sys_sendmmsg+0x200/0x420 [ 233.770547][ T8776] ? __pfx___sys_sendmmsg+0x10/0x10 [ 233.770574][ T8776] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.770603][ T8776] ? fput+0x9b/0xd0 [ 233.770626][ T8776] ? ksys_write+0x1ac/0x250 [ 233.770644][ T8776] ? __pfx_ksys_write+0x10/0x10 [ 233.770666][ T8776] __x64_sys_sendmmsg+0x9c/0x100 [ 233.770688][ T8776] ? lockdep_hardirqs_on+0x7c/0x110 [ 233.770706][ T8776] do_syscall_64+0xcd/0x4c0 [ 233.770726][ T8776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.770744][ T8776] RIP: 0033:0x7efe6b58ebe9 [ 233.770759][ T8776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.770776][ T8776] RSP: 002b:00007efe6c471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 233.770792][ T8776] RAX: ffffffffffffffda RBX: 00007efe6b7b5fa0 RCX: 00007efe6b58ebe9 [ 233.770803][ T8776] RDX: 0000000000000001 RSI: 0000200000000d40 RDI: 0000000000000004 [ 233.770814][ T8776] RBP: 00007efe6c471090 R08: 0000000000000000 R09: 0000000000000000 [ 233.770824][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.770834][ T8776] R13: 00007efe6b7b6038 R14: 00007efe6b7b5fa0 R15: 00007ffdccd01868 [ 233.770857][ T8776] [ 233.966973][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.025548][ T8763] debugfs: 'ttyS3' already exists in 'caif_serial' [ 234.075227][ T5928] usb 4-1: config 1 interface 0 has no altsetting 0 [ 234.099161][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 234.130265][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.150130][ T5928] usb 4-1: Product: syz [ 234.156853][ T5928] usb 4-1: Manufacturer: syz [ 234.163554][ T5928] usb 4-1: SerialNumber: syz [ 234.507900][ T5168] Bluetooth: hci5: command tx timeout [ 234.764701][ T30] audit: type=1400 audit(1754801160.467:416): avc: denied { write } for pid=8838 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.786901][ T8707] netlink: 'syz.3.446': attribute type 2 has an invalid length. [ 234.794705][ T8707] netlink: 'syz.3.446': attribute type 1 has an invalid length. [ 235.811465][ T5928] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 236.059418][ T8858] can0: slcan on ptm0. [ 236.064691][ T8384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.911071][ T5168] Bluetooth: hci5: command tx timeout [ 236.949709][ T8384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.223090][ T8384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.261434][ T8384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.360420][ T8849] can0 (unregistered): slcan off ptm0. [ 237.686404][ T30] audit: type=1400 audit(1754801163.254:417): avc: denied { read } for pid=8895 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.725680][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.752940][ T30] audit: type=1400 audit(1754801163.300:418): avc: denied { ioctl } for pid=8897 comm="syz.2.459" path="socket:[15203]" dev="sockfs" ino=15203 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 237.777376][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.809929][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.888188][ T8384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.910617][ T8384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.923871][ T30] audit: type=1400 audit(1754801163.300:419): avc: denied { connect } for pid=8897 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 237.940722][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.950336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.970456][ T5881] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 239.003244][ T30] audit: type=1400 audit(1754801163.300:420): avc: denied { bind } for pid=8897 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 239.039485][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.047634][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.055464][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 239.089196][ T5881] usb 2-1: config 0 has an invalid interface number: 51 but max is 5 [ 239.455724][ T5881] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 239.617238][ T5881] usb 2-1: config 0 has no interface number 0 [ 239.624368][ T9] usb 4-1: USB disconnect, device number 20 [ 239.661371][ T5881] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 239.670516][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.680578][ T9] usblp0: removed [ 239.688829][ T5881] usb 2-1: Product: syz [ 239.702552][ T5881] usb 2-1: Manufacturer: syz [ 239.713394][ T5881] usb 2-1: SerialNumber: syz [ 240.353844][ T8946] debugfs: 'ttyS3' already exists in 'caif_serial' [ 241.258026][ T5881] usb 2-1: config 0 descriptor?? [ 241.375474][ T5881] usb 2-1: can't set config #0, error -71 [ 241.419625][ T5881] usb 2-1: USB disconnect, device number 21 [ 241.666450][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.470'. [ 241.672186][ T30] audit: type=1400 audit(1754801166.937:421): avc: denied { ioctl } for pid=8964 comm="syz.4.467" path="socket:[15829]" dev="sockfs" ino=15829 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.838930][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.470'. [ 242.288907][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.283257][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.477'. [ 244.528187][ T8384] veth0_vlan: entered promiscuous mode [ 244.539839][ T8384] veth1_vlan: entered promiscuous mode [ 244.571718][ T8384] veth0_macvtap: entered promiscuous mode [ 244.584577][ T8384] veth1_macvtap: entered promiscuous mode [ 244.604838][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.620421][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.642159][ T5020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.658579][ T5020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.668138][ T5020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.681008][ T5020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.758321][ T7485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.770054][ T7485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.804080][ T9011] ALSA: mixer_oss: invalid OSS volume '' [ 244.825616][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.834440][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.975632][ T30] audit: type=1400 audit(1754801169.983:422): avc: denied { mounton } for pid=8384 comm="syz-executor" path="/root/syzkaller.BDuzFz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 245.385061][ T30] audit: type=1400 audit(1754801170.020:423): avc: denied { mount } for pid=8384 comm="syz-executor" name="/" dev="gadgetfs" ino=5914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 245.504435][ T9066] block nbd3: Unsupported socket: shutdown callout must be supported. [ 245.772289][ T30] audit: type=1400 audit(1754801170.426:424): avc: denied { create } for pid=9056 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.794642][ T5907] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 245.833080][ T30] audit: type=1400 audit(1754801170.426:425): avc: denied { bind } for pid=9056 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.291111][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 246.303008][ T5907] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 246.311151][ T5907] usb 6-1: config 0 has no interface number 0 [ 246.331365][ T5907] usb 6-1: config 0 interface 89 has no altsetting 0 [ 246.373604][ T5168] Bluetooth: hci4: adv larger than maximum supported [ 246.373629][ T5168] Bluetooth: hci4: Malformed LE Event: 0x0d [ 246.414581][ T5907] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 246.423858][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.434164][ T5907] usb 6-1: Product: syz [ 246.715200][ T5907] usb 6-1: Manufacturer: syz [ 246.719881][ T5907] usb 6-1: SerialNumber: syz [ 246.760139][ T5907] usb 6-1: config 0 descriptor?? [ 246.953925][ T5907] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 247.442838][ T5907] em28xx 6-1:0.89: Video interface 89 found: bulk [ 247.962904][ T30] audit: type=1400 audit(1754801172.743:426): avc: denied { ioctl } for pid=9094 comm="syz.2.492" path="socket:[16584]" dev="sockfs" ino=16584 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 248.015472][ T30] audit: type=1400 audit(1754801172.770:427): avc: denied { ioctl } for pid=9094 comm="syz.2.492" path="socket:[16583]" dev="sockfs" ino=16583 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 248.106183][ T5907] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 248.171002][ T30] audit: type=1400 audit(1754801172.936:428): avc: denied { execute_no_trans } for pid=9110 comm="syz.2.497" path="/105/file0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 248.194233][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.201434][ T30] audit: type=1400 audit(1754801172.936:429): avc: denied { mount } for pid=9110 comm="syz.2.497" name="/" dev="hugetlbfs" ino=16214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 248.837252][ T5881] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 249.240130][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 249.254665][ T5881] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 249.265148][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.300727][ T5881] usb 4-1: Product: syz [ 249.317569][ T30] audit: type=1400 audit(1754801173.989:430): avc: denied { connect } for pid=9110 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.329038][ T5881] usb 4-1: Manufacturer: syz [ 249.408242][ T5881] usb 4-1: SerialNumber: syz [ 249.423031][ T5881] usb 4-1: config 0 descriptor?? [ 249.438967][ T5881] gspca_main: se401-2.14.0 probing 047d:5003 [ 250.068778][ T5907] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 250.078568][ T5907] em28xx 6-1:0.89: board has no eeprom [ 250.084976][ T5881] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 250.099139][ T5881] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 250.114020][ T5881] usb 4-1: USB disconnect, device number 21 [ 250.279223][ T5907] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 250.396505][ T5907] em28xx 6-1:0.89: analog set to bulk mode. [ 250.416439][ T92] em28xx 6-1:0.89: Registering V4L2 extension [ 250.441882][ T5907] usb 6-1: USB disconnect, device number 2 [ 250.466543][ T5907] em28xx 6-1:0.89: Disconnecting em28xx [ 250.522816][ T92] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 250.541261][ T92] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 250.548422][ T92] em28xx 6-1:0.89: No AC97 audio processor [ 250.581905][ T92] usb 6-1: Decoder not found [ 250.604967][ T92] em28xx 6-1:0.89: failed to create media graph [ 250.611274][ T92] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 251.712999][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.721199][ T9173] batadv_slave_0: entered promiscuous mode [ 251.960418][ T92] em28xx 6-1:0.89: Registering snapshot button... [ 252.013492][ T92] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input22 [ 252.102937][ T9174] usb usb8: usbfs: process 9174 (syz.4.501) did not claim interface 0 before use [ 252.132662][ T92] em28xx 6-1:0.89: Remote control support is not available for this card. [ 252.141875][ T30] audit: type=1400 audit(1754801176.582:431): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 252.804467][ T5907] em28xx 6-1:0.89: Closing input extension [ 252.827633][ T5907] em28xx 6-1:0.89: Deregistering snapshot button [ 252.899698][ T30] audit: type=1400 audit(1754801177.293:432): avc: denied { write } for pid=9198 comm="syz.2.507" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 253.045270][ T5907] em28xx 6-1:0.89: Freeing device [ 253.322708][ T30] audit: type=1326 audit(1754801177.662:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 253.565413][ T9218] netlink: 'syz.1.508': attribute type 9 has an invalid length. [ 254.669167][ T30] audit: type=1326 audit(1754801177.662:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 254.698707][ T30] audit: type=1326 audit(1754801177.662:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 254.735667][ T30] audit: type=1326 audit(1754801177.810:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 254.759264][ T30] audit: type=1326 audit(1754801177.810:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 254.783623][ T30] audit: type=1326 audit(1754801177.911:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 254.936545][ T30] audit: type=1326 audit(1754801177.911:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 255.027222][ T30] audit: type=1326 audit(1754801177.911:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 255.072439][ T30] audit: type=1326 audit(1754801177.911:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 255.122216][ T30] audit: type=1326 audit(1754801178.050:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 255.145439][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.152283][ T30] audit: type=1326 audit(1754801178.050:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbf18ebe9 code=0x7ffc0000 [ 255.752052][ T9244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.522952][ T5851] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 258.826287][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 258.832895][ T5851] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.842743][ T5851] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 258.853103][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.861426][ T5851] usb 5-1: Product: syz [ 258.865720][ T5851] usb 5-1: Manufacturer: syz [ 258.874949][ T5851] usb 5-1: SerialNumber: syz [ 258.888383][ T5851] usb 5-1: config 0 descriptor?? [ 258.909261][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 258.922748][ T9303] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 258.940580][ T6264] bond0: (slave bond_slave_0): interface is now down [ 258.962806][ T6264] bond0: (slave bond_slave_1): interface is now down [ 258.998383][ T6264] bond0: now running without any active interface! [ 259.336241][ T5851] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 259.433296][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 260.148018][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 260.190679][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 260.246269][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.279484][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 260.288951][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.727124][ T24] usb 6-1: config 0 descriptor?? [ 260.773143][ T5851] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 260.840064][ T5851] usb 5-1: USB disconnect, device number 13 [ 260.993109][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 261.345834][ T9311] program syz.5.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.119840][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 262.125660][ T9] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 262.148466][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 262.156242][ T9] usb 3-1: can't read configurations, error -61 [ 262.184361][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 262.499889][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 262.513736][ T24] usb 6-1: USB disconnect, device number 3 [ 262.574889][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 263.670628][ T9379] usb usb8: usbfs: process 9379 (syz.1.532) did not claim interface 0 before use [ 263.875293][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 263.885076][ T9] usb 3-1: device descriptor read/all, error -71 [ 263.896905][ T9] usb usb3-port1: attempt power cycle [ 264.282151][ T9395] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.293295][ T9395] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 264.704510][ T9397] tipc: Enabled bearer , priority 0 [ 264.771810][ T9397] syzkaller0: entered promiscuous mode [ 264.945322][ T9400] usb usb8: usbfs: process 9400 (syz.5.535) did not claim interface 0 before use [ 264.983047][ T9397] syzkaller0: entered allmulticast mode [ 265.300980][ T9391] tipc: Resetting bearer [ 265.736835][ T9391] tipc: Disabling bearer [ 265.896381][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.902739][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.848742][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 266.848760][ T30] audit: type=1400 audit(1754801190.123:448): avc: denied { append } for pid=9410 comm="syz.1.538" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 267.435662][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 271.340459][ T9469] usb usb8: usbfs: process 9469 (syz.4.550) did not claim interface 0 before use [ 271.924961][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 272.242883][ T9482] debugfs: 'ttyS3' already exists in 'caif_serial' [ 272.305498][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 272.497429][ T9493] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.509747][ T9493] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 273.037407][ T24] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 273.045689][ T24] usb 2-1: config 0 has no interface number 0 [ 273.052045][ T24] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.156771][ T24] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 273.183006][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.213249][ T24] usb 2-1: Product: syz [ 273.224418][ T30] audit: type=1400 audit(1754801196.058:449): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 273.258889][ T24] usb 2-1: Manufacturer: syz [ 273.266596][ T24] usb 2-1: SerialNumber: syz [ 273.316614][ T30] audit: type=1400 audit(1754801196.058:450): avc: denied { read write } for pid=8384 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.345271][ T24] usb 2-1: config 0 descriptor?? [ 273.369057][ T24] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 273.485203][ T30] audit: type=1400 audit(1754801196.058:451): avc: denied { open } for pid=8384 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.047670][ T24] em28xx 2-1:0.132: Video interface 132 found: [ 274.356996][ T30] audit: type=1400 audit(1754801196.058:452): avc: denied { ioctl } for pid=8384 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.458838][ T30] audit: type=1400 audit(1754801196.168:453): avc: denied { prog_load } for pid=9501 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 274.518882][ T30] audit: type=1400 audit(1754801196.168:454): avc: denied { bpf } for pid=9501 comm="syz.5.557" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.539701][ T30] audit: type=1400 audit(1754801196.168:455): avc: denied { perfmon } for pid=9501 comm="syz.5.557" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.564421][ T30] audit: type=1400 audit(1754801196.187:456): avc: denied { allowed } for pid=9505 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 274.612196][ T30] audit: type=1400 audit(1754801196.187:457): avc: denied { create } for pid=9505 comm="syz.3.558" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 274.635529][ T30] audit: type=1400 audit(1754801196.187:458): avc: denied { map } for pid=9505 comm="syz.3.558" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 274.690273][ T24] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 275.978672][ T24] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 276.181758][ T24] em28xx 2-1:0.132: board has no eeprom [ 276.249292][ T24] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 276.257450][ T24] em28xx 2-1:0.132: analog set to bulk mode. [ 276.273426][ T5851] em28xx 2-1:0.132: Registering V4L2 extension [ 276.302385][ T24] usb 2-1: USB disconnect, device number 22 [ 276.316352][ T24] em28xx 2-1:0.132: Disconnecting em28xx [ 276.572898][ T5928] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 276.794614][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.912689][ T5928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.927434][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.111683][ T5928] usb 3-1: Product: syz [ 277.122544][ T5851] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 277.141136][ T5928] usb 3-1: Manufacturer: syz [ 277.151023][ T5851] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 277.193703][ T5928] usb 3-1: SerialNumber: syz [ 277.220282][ T5851] em28xx 2-1:0.132: No AC97 audio processor [ 277.249284][ T5851] usb 2-1: Decoder not found [ 277.269414][ T5851] em28xx 2-1:0.132: failed to create media graph [ 277.284546][ T5851] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 277.310567][ T5851] em28xx 2-1:0.132: Remote control support is not available for this card. [ 277.344284][ T24] em28xx 2-1:0.132: Closing input extension [ 277.403977][ T24] em28xx 2-1:0.132: Freeing device [ 278.720166][ T9607] block device autoloading is deprecated and will be removed. [ 278.871475][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 278.877685][ T30] audit: type=1400 audit(1754801201.153:494): avc: denied { create } for pid=9604 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.181138][ T30] audit: type=1400 audit(1754801201.153:495): avc: denied { bind } for pid=9604 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.203515][ T30] audit: type=1400 audit(1754801201.153:496): avc: denied { setopt } for pid=9604 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.224213][ T30] audit: type=1400 audit(1754801201.162:497): avc: denied { accept } for pid=9604 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.244465][ T30] audit: type=1400 audit(1754801201.162:498): avc: denied { read } for pid=9604 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.501452][ T30] audit: type=1400 audit(1754801201.845:499): avc: denied { ioctl } for pid=9546 comm="syz.2.562" path="socket:[17264]" dev="sockfs" ino=17264 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.871675][ T30] audit: type=1400 audit(1754801202.195:500): avc: denied { write } for pid=9645 comm="syz.5.573" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 280.917384][ T30] audit: type=1400 audit(1754801202.971:501): avc: denied { create } for pid=9645 comm="syz.5.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 281.060572][ T9657] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 281.072495][ T9657] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 281.643743][ T30] audit: type=1400 audit(1754801203.054:502): avc: denied { read write } for pid=9653 comm="syz.1.575" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 281.982622][ T30] audit: type=1400 audit(1754801203.054:503): avc: denied { open } for pid=9653 comm="syz.1.575" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 282.218681][ T5928] cdc_ncm 3-1:1.0: bind() failure [ 282.235128][ T5928] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 282.251865][ T5928] cdc_ncm 3-1:1.1: bind() failure [ 282.291824][ T5928] usb 3-1: USB disconnect, device number 11 [ 283.777201][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 284.015907][ T9] usb 4-1: device descriptor read/64, error -71 [ 284.511065][ T9716] debugfs: 'ttyS3' already exists in 'caif_serial' [ 284.537651][ T9718] netlink: 'syz.1.584': attribute type 2 has an invalid length. [ 284.947012][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 285.083821][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 285.083851][ T30] audit: type=1400 audit(1754801207.004:523): avc: denied { create } for pid=9735 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.226281][ T9] usb 4-1: device descriptor read/64, error -71 [ 285.274198][ T9738] block nbd1: Unsupported socket: shutdown callout must be supported. [ 285.328919][ T30] audit: type=1400 audit(1754801207.050:524): avc: denied { ioctl } for pid=9735 comm="syz.2.588" path="socket:[18014]" dev="sockfs" ino=18014 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.378456][ T30] audit: type=1400 audit(1754801207.097:525): avc: denied { read } for pid=9735 comm="syz.2.588" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.414449][ T30] audit: type=1400 audit(1754801207.097:526): avc: denied { open } for pid=9735 comm="syz.2.588" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.539520][ T9] usb usb4-port1: attempt power cycle [ 285.546005][ T30] audit: type=1400 audit(1754801207.207:527): avc: denied { create } for pid=9732 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.566149][ T30] audit: type=1400 audit(1754801207.217:528): avc: denied { bind } for pid=9732 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.585413][ T30] audit: type=1400 audit(1754801207.217:529): avc: denied { connect } for pid=9732 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.727717][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 285.756238][ T9744] bond0: (slave rose0): Enslaving as an active interface with an up link [ 285.821600][ T30] audit: type=1400 audit(1754801207.226:530): avc: denied { write } for pid=9732 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 286.058821][ T30] audit: type=1400 audit(1754801207.272:531): avc: denied { append } for pid=9742 comm="syz.4.589" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 286.120677][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.124374][ T30] audit: type=1400 audit(1754801207.586:532): avc: denied { execute } for pid=9742 comm="syz.4.589" dev="hugetlbfs" ino=18026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 286.153295][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.153669][ T24] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 286.153753][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.172874][ T24] usb 3-1: config 0 descriptor?? [ 286.291195][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 286.482188][ T9758] ======================================================= [ 286.482188][ T9758] WARNING: The mand mount option has been deprecated and [ 286.482188][ T9758] and is ignored by this kernel. Remove the mand [ 286.482188][ T9758] option from the mount to silence this warning. [ 286.482188][ T9758] ======================================================= [ 286.558541][ T9] usb 4-1: device descriptor read/8, error -71 [ 287.006730][ T24] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 287.085260][ T24] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 287.161524][ T24] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 287.218879][ T24] usb 3-1: USB disconnect, device number 12 [ 287.239939][ T24] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 287.385629][ T92] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 287.571737][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.654913][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 287.664904][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.683748][ T92] usb 6-1: config 0 descriptor?? [ 287.938525][ T5851] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 288.203033][ T5851] usb 2-1: device descriptor read/64, error -71 [ 288.339512][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 288.480149][ T5851] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 288.642077][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 288.656834][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 288.689619][ T9] usb 5-1: config 0 has no interface number 0 [ 288.704705][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 288.735955][ T92] usbhid 6-1:0.0: can't add hid device: -71 [ 288.746283][ T92] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 288.762715][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.798844][ T92] usb 6-1: USB disconnect, device number 4 [ 288.810078][ T9] usb 5-1: Product: syz [ 288.814304][ T9] usb 5-1: Manufacturer: syz [ 288.833488][ T9] usb 5-1: SerialNumber: syz [ 288.926603][ T5851] usb 2-1: device descriptor read/64, error -71 [ 288.928028][ T9] usb 5-1: config 0 descriptor?? [ 288.951024][ T9] smsc95xx v2.0.0 [ 289.057613][ T5851] usb usb2-port1: attempt power cycle [ 289.862317][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 289.885740][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 290.810584][ T5851] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 290.933746][ T5851] usb 2-1: device descriptor read/8, error -71 [ 291.524154][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 291.524170][ T30] audit: type=1400 audit(1754801212.939:562): avc: denied { mount } for pid=9812 comm="syz.4.598" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.720113][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 291.742421][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 292.179691][ T9] usb 5-1: USB disconnect, device number 14 [ 292.678920][ T30] audit: type=1400 audit(1754801213.991:563): avc: denied { read write } for pid=5843 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.004420][ T30] audit: type=1400 audit(1754801214.038:564): avc: denied { open } for pid=5843 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.194610][ T30] audit: type=1400 audit(1754801214.038:565): avc: denied { ioctl } for pid=5843 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.354941][ T30] audit: type=1400 audit(1754801214.102:566): avc: denied { create } for pid=9887 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.441857][ T30] audit: type=1400 audit(1754801214.167:567): avc: denied { mounton } for pid=9887 comm="syz.2.610" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 293.532465][ T30] audit: type=1400 audit(1754801214.176:568): avc: denied { create } for pid=9887 comm="syz.2.610" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 293.638533][ T30] audit: type=1400 audit(1754801214.176:569): avc: denied { ioctl } for pid=9887 comm="syz.2.610" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18179 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 293.671676][ T30] audit: type=1400 audit(1754801214.176:570): avc: denied { wake_alarm } for pid=9887 comm="syz.2.610" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 293.692936][ T30] audit: type=1400 audit(1754801214.259:571): avc: denied { execmem } for pid=9897 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 294.921882][ T9957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 295.032716][ T9957] vxlan0: entered promiscuous mode [ 295.060600][ T1322] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.081371][ T1322] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.099547][ T1322] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.120938][ T1322] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.244964][ T9945] infiniband syz1: set active [ 295.256578][ T9945] infiniband syz1: added syz_tun [ 295.271510][ T9945] syz1: rxe_create_cq: returned err = -12 [ 295.281612][ T9945] infiniband syz1: Couldn't create ib_mad CQ [ 295.292353][ T9945] infiniband syz1: Couldn't open port 1 [ 295.381547][ T9945] RDS/IB: syz1: added [ 295.450866][ T9945] smc: adding ib device syz1 with port count 1 [ 295.467805][ T9945] smc: ib device syz1 port 1 has pnetid [ 295.797558][ T9992] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 295.808614][ T9992] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 296.523844][ T9986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.619274][ T9986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.658858][ T9986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.665389][ T9986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.671645][ T9986] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 296.679189][ T9986] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 296.793055][ T9998] debugfs: 'ttyS3' already exists in 'caif_serial' [ 296.808422][ T9986] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 296.962633][T10016] netem: change failed [ 297.018822][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 297.018837][ T30] audit: type=1400 audit(1754801218.025:631): avc: denied { name_bind } for pid=10015 comm="syz.2.647" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 297.098969][ T30] audit: type=1400 audit(1754801218.025:632): avc: denied { node_bind } for pid=10015 comm="syz.2.647" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 297.132211][ T30] audit: type=1400 audit(1754801218.053:633): avc: denied { create } for pid=10017 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.328108][T10022] usb usb8: usbfs: process 10022 (syz.3.648) did not claim interface 0 before use [ 297.420108][ T30] audit: type=1400 audit(1754801218.062:634): avc: denied { bind } for pid=10017 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.677521][ T30] audit: type=1400 audit(1754801218.071:635): avc: denied { listen } for pid=10017 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.853826][ T30] audit: type=1400 audit(1754801218.071:636): avc: denied { read write } for pid=10017 comm="syz.3.648" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 297.905818][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.950735][ T30] audit: type=1400 audit(1754801218.071:637): avc: denied { open } for pid=10017 comm="syz.3.648" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 297.974046][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.980716][ T30] audit: type=1400 audit(1754801218.071:638): avc: denied { ioctl } for pid=10017 comm="syz.3.648" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x564d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 298.005509][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.218911][T10031] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 298.241009][ T30] audit: type=1400 audit(1754801218.117:639): avc: denied { read } for pid=10017 comm="syz.3.648" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 298.445225][ T30] audit: type=1400 audit(1754801218.117:640): avc: denied { open } for pid=10017 comm="syz.3.648" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 298.815791][ T5168] Bluetooth: hci4: command 0x0c1a tx timeout [ 298.912993][ T5168] Bluetooth: hci5: command 0x0c1a tx timeout [ 298.919278][ T5168] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.926436][ T5857] Bluetooth: hci1: command 0x0c1a tx timeout [ 299.075440][T10043] block nbd2: Unsupported socket: shutdown callout must be supported. [ 301.481159][ T5168] Bluetooth: hci5: command 0x0c1a tx timeout [ 302.347497][T10084] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 302.358597][T10084] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 302.544299][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 302.544315][ T30] audit: type=1400 audit(1754801223.111:666): avc: denied { read } for pid=10086 comm="syz.2.664" dev="nsfs" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 302.643558][ T30] audit: type=1400 audit(1754801223.138:667): avc: denied { open } for pid=10086 comm="syz.2.664" path="net:[4026532897]" dev="nsfs" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 302.759506][ T30] audit: type=1400 audit(1754801223.138:668): avc: denied { create } for pid=10086 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 302.780208][ T30] audit: type=1400 audit(1754801223.157:669): avc: denied { bind } for pid=10086 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 302.808296][ T30] audit: type=1400 audit(1754801223.157:670): avc: denied { write } for pid=10086 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 302.830124][ T30] audit: type=1400 audit(1754801223.305:671): avc: denied { read } for pid=10088 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.852455][ T30] audit: type=1400 audit(1754801223.360:672): avc: denied { create } for pid=10092 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 302.875491][T10093] netlink: 'syz.2.666': attribute type 1 has an invalid length. [ 302.919547][ T30] audit: type=1400 audit(1754801223.452:673): avc: denied { read write } for pid=10092 comm="syz.3.667" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 302.920270][T10129] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 302.943274][ T30] audit: type=1400 audit(1754801223.452:674): avc: denied { open } for pid=10092 comm="syz.3.667" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 302.943317][ T30] audit: type=1400 audit(1754801223.461:675): avc: denied { bind } for pid=10092 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 303.035219][T10129] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 303.087561][ T5858] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 303.104989][T10129] bond1: (slave vcan1): making interface the new active one [ 303.126425][T10129] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 303.172297][T10093] bond1: entered promiscuous mode [ 303.193116][T10093] vcan1: entered promiscuous mode [ 303.669503][ T5858] Bluetooth: hci5: command 0x0c1a tx timeout [ 304.275498][T10159] tipc: Started in network mode [ 304.284437][T10159] tipc: Node identity c6b3b2cb5ff7, cluster identity 4711 [ 304.304679][T10159] tipc: Enabled bearer , priority 0 [ 304.347322][T10163] syzkaller0: entered promiscuous mode [ 304.352898][T10163] syzkaller0: entered allmulticast mode [ 304.595464][T10158] tipc: Resetting bearer [ 304.647950][T10158] tipc: Disabling bearer [ 304.937582][T10170] netlink: 'syz.5.678': attribute type 10 has an invalid length. [ 304.978537][T10170] syz_tun: entered promiscuous mode [ 304.997685][T10170] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 305.023446][ T6089] bond0: (slave syz_tun): interface is now down [ 305.056617][ T1322] bond0: (slave syz_tun): interface is now down [ 305.064042][ T1322] bond0: now running without any active interface! [ 305.358787][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 305.525725][T10181] netem: change failed [ 306.713707][ T5858] Bluetooth: hci5: command 0x0c1a tx timeout [ 306.803170][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 307.508903][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 307.523937][T10220] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.694506][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.705541][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.713701][ T24] usb 3-1: Product: syz [ 307.744707][ T24] usb 3-1: Manufacturer: syz [ 307.756599][ T24] usb 3-1: SerialNumber: syz [ 307.838501][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.888431][ T5851] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 307.912229][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.5.692'. [ 308.163825][ T10] usb 3-1: USB disconnect, device number 13 [ 308.328811][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 308.328827][ T30] audit: type=1400 audit(1754801228.464:713): avc: denied { perfmon } for pid=10240 comm="syz.3.694" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.366412][T10241] debugfs: 'ttyS3' already exists in 'caif_serial' [ 308.696351][ T30] audit: type=1400 audit(1754801228.492:714): avc: denied { prog_run } for pid=10240 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 308.717882][ T30] audit: type=1400 audit(1754801228.547:715): avc: denied { read } for pid=10197 comm="syz.2.687" dev="nsfs" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 308.754098][ T30] audit: type=1400 audit(1754801228.547:716): avc: denied { open } for pid=10197 comm="syz.2.687" path="net:[4026532897]" dev="nsfs" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 308.805018][ T30] audit: type=1400 audit(1754801228.547:717): avc: denied { read write } for pid=10197 comm="syz.2.687" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.834596][ T30] audit: type=1400 audit(1754801228.547:718): avc: denied { open } for pid=10197 comm="syz.2.687" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.862159][ T30] audit: type=1400 audit(1754801228.852:719): avc: denied { name_bind } for pid=10245 comm="syz.5.695" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 308.891091][ T30] audit: type=1400 audit(1754801228.852:720): avc: denied { node_bind } for pid=10245 comm="syz.5.695" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 308.918634][ T30] audit: type=1400 audit(1754801228.870:721): avc: denied { map_create } for pid=10253 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 308.941704][ T30] audit: type=1400 audit(1754801228.870:722): avc: denied { map_read map_write } for pid=10253 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 309.138176][ T5851] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 309.361885][ T5851] ath9k_htc: Failed to initialize the device [ 309.385409][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 312.127157][T10306] block nbd5: Unsupported socket: shutdown callout must be supported. [ 312.152601][ T5927] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 312.574936][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 312.591725][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short [ 312.601356][ T5927] usb 5-1: config 247 has an invalid interface number: 145 but max is 0 [ 312.611006][ T5927] usb 5-1: config 247 has no interface number 0 [ 312.617577][ T5927] usb 5-1: config 247 interface 145 has no altsetting 0 [ 312.632426][ T5927] usb 5-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 312.641684][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.649783][ T5927] usb 5-1: Product: syz [ 312.660093][ T5927] usb 5-1: Manufacturer: syz [ 312.664770][ T5927] usb 5-1: SerialNumber: syz [ 312.759838][T10312] lo speed is unknown, defaulting to 1000 [ 312.765847][T10312] lo speed is unknown, defaulting to 1000 [ 312.774361][T10312] lo speed is unknown, defaulting to 1000 [ 312.786647][T10312] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 312.819032][T10312] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 312.860334][T10312] lo speed is unknown, defaulting to 1000 [ 312.868261][T10312] lo speed is unknown, defaulting to 1000 [ 312.875959][T10312] lo speed is unknown, defaulting to 1000 [ 312.884714][T10312] lo speed is unknown, defaulting to 1000 [ 312.893034][T10312] lo speed is unknown, defaulting to 1000 [ 312.907694][T10312] lo speed is unknown, defaulting to 1000 [ 312.919106][T10312] lo speed is unknown, defaulting to 1000 [ 312.975874][T10315] smc: removing ib device syz1 [ 313.852517][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 313.852533][ T30] audit: type=1400 audit(1754801233.550:764): avc: denied { name_bind } for pid=10330 comm="syz.3.713" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 313.892763][ T30] audit: type=1400 audit(1754801233.587:765): avc: denied { create } for pid=10331 comm="syz.5.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.913215][ T30] audit: type=1400 audit(1754801233.596:766): avc: denied { connect } for pid=10331 comm="syz.5.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.948128][T10334] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 313.983713][T10334] audit: out of memory in audit_log_start [ 314.060176][ T30] audit: type=1400 audit(1754801233.744:767): avc: denied { write } for pid=10335 comm="syz.3.714" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 314.121350][ T30] audit: type=1400 audit(1754801233.771:768): avc: denied { map } for pid=10335 comm="syz.3.714" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 314.400522][ T30] audit: type=1400 audit(1754801234.067:769): avc: denied { create } for pid=10342 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.551640][ T30] audit: type=1400 audit(1754801234.094:770): avc: denied { module_request } for pid=10342 comm="syz.3.717" kmod="bt-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 314.580777][ T5927] upd78f0730 5-1:247.145: upd78f0730 converter detected [ 314.644210][ T30] audit: type=1400 audit(1754801234.279:771): avc: denied { create } for pid=10342 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 314.722870][T10343] lo speed is unknown, defaulting to 1000 [ 314.766056][ T5927] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 314.837784][ T5927] usb 5-1: USB disconnect, device number 15 [ 314.918495][ T5927] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 314.940304][ T5927] upd78f0730 5-1:247.145: device disconnected [ 315.209200][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.721'. [ 317.336238][T10427] block nbd4: Unsupported socket: shutdown callout must be supported. [ 317.857112][T10440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 317.868155][T10440] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 318.068925][ T92] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 318.317051][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 318.423780][ T92] usb 3-1: unable to get BOS descriptor or descriptor too short [ 318.437172][ T92] usb 3-1: config 247 has an invalid interface number: 145 but max is 0 [ 318.446494][ T92] usb 3-1: config 247 has no interface number 0 [ 318.453073][ T92] usb 3-1: config 247 interface 145 has no altsetting 0 [ 318.466196][ T92] usb 3-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 318.475530][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.904948][ T92] usb 3-1: Product: syz [ 318.909396][ T92] usb 3-1: Manufacturer: syz [ 318.915176][ T92] usb 3-1: SerialNumber: syz [ 319.632861][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 319.632876][ T30] audit: type=1400 audit(1754801238.894:805): avc: denied { read write } for pid=10459 comm="syz.5.734" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 319.640120][ T92] upd78f0730 3-1:247.145: upd78f0730 converter detected [ 319.664172][ T30] audit: type=1400 audit(1754801238.894:806): avc: denied { open } for pid=10456 comm="syz.1.735" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 319.702780][ T92] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 319.726135][ T92] usb 3-1: USB disconnect, device number 14 [ 319.735690][ T30] audit: type=1400 audit(1754801238.894:807): avc: denied { open } for pid=10459 comm="syz.5.734" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 319.738022][ T92] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 319.805980][ T30] audit: type=1400 audit(1754801238.959:808): avc: denied { connect } for pid=10459 comm="syz.5.734" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.810034][ T92] upd78f0730 3-1:247.145: device disconnected [ 320.884567][T10498] netem: change failed [ 320.902679][ T30] audit: type=1400 audit(1754801240.066:809): avc: denied { name_bind } for pid=10497 comm="syz.4.741" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 320.947816][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 321.000755][ T30] audit: type=1400 audit(1754801240.131:810): avc: denied { create } for pid=10494 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.138608][T10504] netlink: 'syz.5.742': attribute type 2 has an invalid length. [ 321.290738][ T30] audit: type=1400 audit(1754801240.131:811): avc: denied { write } for pid=10494 comm="syz.2.740" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 321.313668][T10505] tmpfs: Unknown parameter '0x0000000000000008' [ 321.415940][ T30] audit: type=1400 audit(1754801240.149:812): avc: denied { shutdown } for pid=10501 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.438223][ T30] audit: type=1400 audit(1754801240.149:813): avc: denied { getopt } for pid=10501 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.521208][ T30] audit: type=1400 audit(1754801240.149:814): avc: denied { create } for pid=10501 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 321.886106][T10516] netlink: 558 bytes leftover after parsing attributes in process `syz.4.748'. [ 323.429847][T10535] capability: warning: `syz.5.752' uses 32-bit capabilities (legacy support in use) [ 324.959545][T10565] netlink: 'syz.5.758': attribute type 2 has an invalid length. [ 325.034688][T10571] tmpfs: Unknown parameter '0x0000000000000008' [ 325.111675][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 325.111708][ T30] audit: type=1400 audit(1754801243.952:834): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 325.445169][ T30] audit: type=1400 audit(1754801244.164:835): avc: denied { read } for pid=10564 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 325.484728][ T30] audit: type=1400 audit(1754801244.229:836): avc: denied { setopt } for pid=10564 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.545565][ T30] audit: type=1400 audit(1754801244.229:837): avc: denied { bind } for pid=10564 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.655159][ T30] audit: type=1400 audit(1754801244.229:838): avc: denied { name_bind } for pid=10564 comm="syz.3.759" src=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 325.816211][T10580] netlink: 'syz.2.760': attribute type 2 has an invalid length. [ 326.019521][ T30] audit: type=1400 audit(1754801244.229:839): avc: denied { node_bind } for pid=10564 comm="syz.3.759" saddr=172.20.20.18 src=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 326.503372][T10590] usb usb8: usbfs: process 10590 (syz.4.762) did not claim interface 0 before use [ 328.175517][ T30] audit: type=1400 audit(1754801246.776:840): avc: denied { create } for pid=10599 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 328.213454][ T30] audit: type=1400 audit(1754801246.795:841): avc: denied { setopt } for pid=10599 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 328.500660][T10603] Unsupported ieee802154 address type: 0 [ 328.542158][ T30] audit: type=1400 audit(1754801246.795:842): avc: denied { connect } for pid=10599 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 328.604709][ T30] audit: type=1400 audit(1754801247.072:843): avc: denied { bind } for pid=10602 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 328.805363][ T57] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 328.917209][T10622] libceph: resolve 'c=' (ret=-3): failed [ 329.163813][T10623] tmpfs: Unknown parameter '0x0000000000000008' [ 329.402177][ T57] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 329.433070][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.483423][ T57] usb 2-1: config 0 has no interface number 0 [ 329.512602][ T57] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 329.531596][ T57] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 329.566797][ T57] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.579812][ T57] usb 2-1: config 0 interface 52 has no altsetting 0 [ 329.591926][ T5020] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.612126][ T57] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 329.686369][ T57] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 329.765283][ T57] usb 2-1: Product: syz [ 329.804853][ T57] usb 2-1: Manufacturer: syz [ 329.928322][ T57] usb 2-1: SerialNumber: syz [ 330.026458][T10633] netlink: 'syz.4.776': attribute type 2 has an invalid length. [ 330.419384][ T57] usb 2-1: config 0 descriptor?? [ 330.739555][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 330.813300][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 330.813314][ T30] audit: type=1400 audit(1754801249.213:854): avc: denied { write } for pid=10602 comm="syz.1.767" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.288689][ T30] audit: type=1400 audit(1754801249.250:855): avc: denied { open } for pid=10602 comm="syz.1.767" path="/156/bus" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.362987][T10603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.620478][T10603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.401620][T10603] SELinux: Context system_u:object_r:urandom_device_t:s0 is not valid (left unmapped). [ 332.465411][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.472494][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.473423][ T30] audit: type=1400 audit(1754801250.745:856): avc: denied { relabelto } for pid=10602 comm="syz.1.767" name="bus" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:urandom_device_t:s0" [ 332.482508][ T57] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 332.782509][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 332.788476][ T6089] bond0: (slave bond_slave_0): interface is now down [ 332.790801][ T30] audit: type=1400 audit(1754801250.745:857): avc: denied { associate } for pid=10602 comm="syz.1.767" name="bus" dev="tmpfs" ino=858 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:urandom_device_t:s0" [ 332.798395][ T6089] bond0: (slave bond_slave_1): interface is now down [ 332.825126][ T30] audit: type=1400 audit(1754801250.782:858): avc: denied { ioctl } for pid=10660 comm="syz.4.783" path="socket:[20175]" dev="sockfs" ino=20175 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.832139][ T57] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 332.870859][ T6089] bond0: now running without any active interface! [ 332.934560][ T57] usb 2-1: USB disconnect, device number 27 [ 332.986689][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 332.994248][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 334.252200][ T30] audit: type=1400 audit(1754801250.801:859): avc: denied { write } for pid=10660 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 334.272074][ T10] usb 3-1: config 247 has an invalid interface number: 145 but max is 0 [ 334.280530][ T10] usb 3-1: config 247 has no interface number 0 [ 334.290697][ T10] usb 3-1: config 247 interface 145 has no altsetting 0 [ 334.298373][ T30] audit: type=1400 audit(1754801250.801:860): avc: denied { connect } for pid=10660 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 334.318436][ T30] audit: type=1400 audit(1754801250.801:861): avc: denied { name_connect } for pid=10660 comm="syz.4.783" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 334.341735][ T10] usb 3-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 334.350770][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.358874][ T10] usb 3-1: Product: syz [ 334.363590][ T10] usb 3-1: Manufacturer: syz [ 334.368488][ T10] usb 3-1: SerialNumber: syz [ 334.607375][ T10] upd78f0730 3-1:247.145: upd78f0730 converter detected [ 334.620635][ T30] audit: type=1400 audit(1754801252.711:862): avc: denied { unlink } for pid=5845 comm="syz-executor" name="bus" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:urandom_device_t:s0" [ 334.658946][ T10] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 334.678975][ T10] usb 3-1: USB disconnect, device number 15 [ 334.689836][ T10] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 334.877532][ T10] upd78f0730 3-1:247.145: device disconnected [ 334.926091][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 335.096654][ T30] audit: type=1400 audit(1754801253.080:863): avc: denied { ioctl } for pid=10706 comm="syz.1.789" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20208 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 335.188629][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 335.207221][ T24] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 335.215616][ T24] usb 6-1: config 0 has no interface number 0 [ 335.224515][ T24] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 335.240076][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.259941][ T24] usb 6-1: Product: syz [ 335.270727][ T24] usb 6-1: Manufacturer: syz [ 335.281672][ T24] usb 6-1: SerialNumber: syz [ 335.294174][ T24] usb 6-1: config 0 descriptor?? [ 335.341711][ T24] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 335.456816][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 335.621149][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.810037][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.847840][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 335.944910][ T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 335.983400][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.983975][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 336.046447][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 336.048273][ T92] usb 6-1: USB disconnect, device number 5 [ 336.068405][ T92] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 336.140102][ T10] usb 5-1: config 0 descriptor?? [ 336.195633][ T92] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 336.259995][ T92] quatech2 6-1:0.51: device disconnected [ 337.460436][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 337.577441][ T10] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 337.742812][ T10] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 337.791440][ T10] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 337.851497][ T10] usb 5-1: USB disconnect, device number 16 [ 337.876184][ T10] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 338.298135][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 338.649632][ T48] bond0: (slave bond_slave_0): interface is now down [ 338.674543][ T48] bond0: (slave bond_slave_1): interface is now down [ 338.692588][ T48] bond0: now running without any active interface! [ 338.754123][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 338.764393][ T24] usb 6-1: config 0 has an invalid interface number: 195 but max is 2 [ 338.804717][ T24] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 338.813433][ T24] usb 6-1: config 0 has an invalid interface number: 126 but max is 2 [ 339.097849][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 339.097865][ T30] audit: type=1400 audit(1754801256.865:865): avc: denied { create } for pid=10823 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 339.134779][ T24] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 339.181397][ T24] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 339.190788][ T24] usb 6-1: config 0 has no interface number 0 [ 339.197714][ T30] audit: type=1400 audit(1754801256.911:866): avc: denied { ioctl } for pid=10823 comm="syz.2.806" path="socket:[20750]" dev="sockfs" ino=20750 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 339.227320][ T24] usb 6-1: config 0 has no interface number 1 [ 339.244780][ T24] usb 6-1: config 0 interface 195 altsetting 113 has an invalid descriptor for endpoint zero, skipping [ 339.408723][ T24] usb 6-1: config 0 interface 195 altsetting 113 has an invalid descriptor for endpoint zero, skipping [ 339.408723][ T30] audit: type=1400 audit(1754801256.911:867): avc: denied { connect } for pid=10823 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 339.408754][ T24] usb 6-1: config 0 interface 195 altsetting 113 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 339.419990][ T30] audit: type=1400 audit(1754801256.911:868): avc: denied { write } for pid=10823 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 339.904885][ T24] usb 6-1: config 0 interface 195 altsetting 113 has a duplicate endpoint with address 0xC, skipping [ 339.916094][ T24] usb 6-1: config 0 interface 126 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.961975][ T24] usb 6-1: config 0 interface 195 has no altsetting 0 [ 339.969816][ T24] usb 6-1: config 0 interface 126 has no altsetting 0 [ 339.979343][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=93.84 [ 339.989605][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.997716][ T24] usb 6-1: Product: syz [ 340.002103][ T24] usb 6-1: Manufacturer: ఁ [ 340.006761][ T24] usb 6-1: SerialNumber: syz [ 340.015863][ T24] usb 6-1: config 0 descriptor?? [ 340.255140][ T24] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 340.796932][ T24] usb 6-1: selecting invalid altsetting 0 [ 340.806173][ T2337] pvrusb2: Invalid write control endpoint [ 340.812782][ T24] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 340.836179][ T24] usb 6-1: selecting invalid altsetting 0 [ 340.858520][ T24] usb 6-1: USB disconnect, device number 6 [ 340.859531][ T2337] usb 6-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 341.258925][ T2337] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 341.277066][ T30] audit: type=1400 audit(1754801258.849:869): avc: denied { firmware_load } for pid=2337 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 341.669374][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 341.765501][ T30] audit: type=1400 audit(1754801259.311:870): avc: denied { read write } for pid=10880 comm="syz.2.816" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 341.818132][ T30] audit: type=1400 audit(1754801259.311:871): avc: denied { open } for pid=10880 comm="syz.2.816" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 341.852010][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.865578][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.878405][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 341.889123][ T30] audit: type=1400 audit(1754801259.320:872): avc: denied { mount } for pid=10880 comm="syz.2.816" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 341.915510][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.938286][ T9] usb 5-1: config 0 descriptor?? [ 341.953270][ T30] audit: type=1400 audit(1754801259.495:873): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 342.396915][ T9] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 342.488329][ T9] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 342.504833][ T9] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 342.651260][ T5927] usb 5-1: USB disconnect, device number 17 [ 342.662790][ T5927] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 342.874312][T10925] binder: 10924:10925 ioctl c0306201 200000000240 returned -11 [ 342.914534][ T30] audit: type=1400 audit(1754801260.381:874): avc: denied { read write } for pid=10926 comm="syz.1.821" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 344.681632][T10942] lo speed is unknown, defaulting to 1000 [ 344.943645][T11004] netlink: 'syz.2.829': attribute type 10 has an invalid length. [ 344.956628][T11004] syz_tun: entered promiscuous mode [ 344.974637][T11004] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 345.455153][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 345.455198][ T30] audit: type=1400 audit(1754801262.726:877): avc: denied { name_bind } for pid=11000 comm="syz.4.828" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 345.807407][T11021] netlink: 'syz.2.832': attribute type 2 has an invalid length. [ 346.011837][T11022] debugfs: 'ttyS3' already exists in 'caif_serial' [ 346.227191][ T30] audit: type=1400 audit(1754801263.437:878): avc: denied { mounton } for pid=11039 comm="syz.4.836" path="/proc/603/task" dev="proc" ino=21561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 346.500495][T11054] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 346.511989][T11054] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 346.884593][ T30] audit: type=1400 audit(1754801263.464:879): avc: denied { mount } for pid=11039 comm="syz.4.836" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 347.617934][T11063] netlink: 'syz.3.840': attribute type 2 has an invalid length. [ 347.806066][ T30] audit: type=1400 audit(1754801264.895:880): avc: denied { create } for pid=11039 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 348.217301][ T30] audit: type=1400 audit(1754801265.264:881): avc: denied { append } for pid=11068 comm="syz.5.842" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 348.299268][T11072] ubi31: attaching mtd0 [ 348.314430][T11072] ubi31: scanning is finished [ 348.319226][T11072] ubi31: empty MTD device detected [ 348.736712][T11072] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 348.745112][T11072] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 348.752545][T11072] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 348.760010][T11072] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 348.767480][T11072] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 348.774363][T11072] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 348.782406][T11072] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1563207251 [ 348.792462][T11072] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 348.803474][T11073] ubi31: background thread "ubi_bgt31d" started, PID 11073 [ 350.230188][ T30] audit: type=1400 audit(1754801267.129:882): avc: denied { read } for pid=11109 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 350.258339][ T5851] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 350.285216][ T30] audit: type=1400 audit(1754801267.184:883): avc: denied { setopt } for pid=11109 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 350.430069][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 350.498575][ T5851] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.554191][ T5851] usb 4-1: config 247 has an invalid interface number: 145 but max is 0 [ 350.618851][ T5851] usb 4-1: config 247 has no interface number 0 [ 350.642620][ T5851] usb 4-1: config 247 interface 145 has no altsetting 0 [ 350.710470][ T5851] usb 4-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 350.762218][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.781711][ T5851] usb 4-1: Product: syz [ 350.786158][ T5851] usb 4-1: Manufacturer: syz [ 350.802177][ T5851] usb 4-1: SerialNumber: syz [ 351.596112][ T5858] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 351.668008][ T30] audit: type=1400 audit(1754801268.467:884): avc: denied { ioctl } for pid=11128 comm="syz.5.854" path="socket:[21644]" dev="sockfs" ino=21644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 351.767638][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.854'. [ 351.791690][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.799629][T11132] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.811495][T11131] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 352.244935][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 352.398551][T11148] FAULT_INJECTION: forcing a failure. [ 352.398551][T11148] name failslab, interval 1, probability 0, space 0, times 0 [ 352.412166][T11148] CPU: 1 UID: 0 PID: 11148 Comm: syz.2.860 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 352.412193][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.412203][T11148] Call Trace: [ 352.412209][T11148] [ 352.412216][T11148] dump_stack_lvl+0x16c/0x1f0 [ 352.412240][T11148] should_fail_ex+0x512/0x640 [ 352.412258][T11148] ? fs_reclaim_acquire+0xae/0x150 [ 352.412281][T11148] ? tomoyo_encode2+0x100/0x3e0 [ 352.412303][T11148] should_failslab+0xc2/0x120 [ 352.412322][T11148] __kmalloc_noprof+0xd2/0x510 [ 352.412346][T11148] tomoyo_encode2+0x100/0x3e0 [ 352.412374][T11148] tomoyo_encode+0x29/0x50 [ 352.412396][T11148] tomoyo_realpath_from_path+0x18f/0x6e0 [ 352.412421][T11148] ? tomoyo_profile+0x47/0x60 [ 352.412439][T11148] tomoyo_path_number_perm+0x245/0x580 [ 352.412458][T11148] ? tomoyo_path_number_perm+0x237/0x580 [ 352.412480][T11148] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 352.412503][T11148] ? find_held_lock+0x2b/0x80 [ 352.412546][T11148] ? find_held_lock+0x2b/0x80 [ 352.412565][T11148] ? hook_file_ioctl_common+0x145/0x410 [ 352.412588][T11148] ? __fget_files+0x20e/0x3c0 [ 352.412611][T11148] security_file_ioctl+0x9b/0x240 [ 352.412636][T11148] __x64_sys_ioctl+0xb7/0x210 [ 352.412664][T11148] do_syscall_64+0xcd/0x4c0 [ 352.412683][T11148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.412701][T11148] RIP: 0033:0x7fefdb78ebe9 [ 352.412715][T11148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.412732][T11148] RSP: 002b:00007fefd99d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.412748][T11148] RAX: ffffffffffffffda RBX: 00007fefdb9b6090 RCX: 00007fefdb78ebe9 [ 352.412759][T11148] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 352.412770][T11148] RBP: 00007fefd99d5090 R08: 0000000000000000 R09: 0000000000000000 [ 352.412780][T11148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.412789][T11148] R13: 00007fefdb9b6128 R14: 00007fefdb9b6090 R15: 00007fffeb25e038 [ 352.412813][T11148] [ 352.722998][T11148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 352.866275][ T5858] Bluetooth: hci6: command 0x1003 tx timeout [ 352.871036][ T5168] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 352.890159][ T30] audit: type=1400 audit(1754801269.427:885): avc: denied { read } for pid=11141 comm="syz.5.859" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 352.913455][ T30] audit: type=1400 audit(1754801269.427:886): avc: denied { open } for pid=11141 comm="syz.5.859" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 352.936991][ T30] audit: type=1400 audit(1754801269.427:887): avc: denied { ioctl } for pid=11141 comm="syz.5.859" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 352.975155][ T5851] upd78f0730 4-1:247.145: upd78f0730 converter detected [ 353.004601][ T5851] usb 4-1: upd78f0730 converter now attached to ttyUSB0 [ 353.021754][ T5851] usb 4-1: USB disconnect, device number 26 [ 353.077488][ T5851] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 353.156180][ T5851] upd78f0730 4-1:247.145: device disconnected [ 353.307956][T11174] debugfs: 'ttyS3' already exists in 'caif_serial' [ 354.641769][ T30] audit: type=1400 audit(1754801271.199:888): avc: denied { bind } for pid=11211 comm="syz.5.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 354.948721][ T30] audit: type=1400 audit(1754801271.264:889): avc: denied { setopt } for pid=11211 comm="syz.5.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 355.004546][ T30] audit: type=1400 audit(1754801271.264:890): avc: denied { create } for pid=11211 comm="syz.5.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.685786][T11224] lo speed is unknown, defaulting to 1000 [ 357.007533][T11272] block nbd4: Unsupported socket: shutdown callout must be supported. [ 357.368880][ T30] audit: type=1400 audit(1754801273.719:891): avc: denied { audit_write } for pid=11279 comm="syz.4.879" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 357.443927][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.475642][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.901306][ T30] audit: type=1400 audit(1754801274.217:892): avc: denied { create } for pid=11284 comm="syz.4.880" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 357.929244][ T30] audit: type=1400 audit(1754801274.245:893): avc: denied { write } for pid=11284 comm="syz.4.880" name="file0" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 357.956820][ T30] audit: type=1400 audit(1754801274.245:894): avc: denied { open } for pid=11284 comm="syz.4.880" path="/178/file0" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 358.139458][ T5168] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 360.082607][ T30] audit: type=1400 audit(1754801276.220:895): avc: denied { unlink } for pid=5842 comm="syz-executor" name="file0" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 362.661547][ T5851] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 363.810053][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 363.816817][ T5851] usb 3-1: unable to get BOS descriptor or descriptor too short [ 363.827248][ T5851] usb 3-1: config 247 has an invalid interface number: 145 but max is 0 [ 363.836077][ T5851] usb 3-1: config 247 has no interface number 0 [ 363.842507][ T5851] usb 3-1: config 247 interface 145 has no altsetting 0 [ 363.851328][ T5851] usb 3-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 363.874096][T11345] lo speed is unknown, defaulting to 1000 [ 363.947312][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.969507][ T5851] usb 3-1: Product: syz [ 363.973775][ T5851] usb 3-1: Manufacturer: syz [ 363.980019][ T5851] usb 3-1: SerialNumber: syz [ 364.540616][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.897'. [ 365.597118][ T5851] upd78f0730 3-1:247.145: upd78f0730 converter detected [ 366.116857][ T5851] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 366.125564][ T5851] usb 3-1: USB disconnect, device number 16 [ 366.133739][ T5851] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 366.165519][ T5851] upd78f0730 3-1:247.145: device disconnected [ 366.247700][T11447] tmpfs: Unknown parameter '0x0000000000000008' [ 366.711486][ T30] audit: type=1326 audit(1754801282.312:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb78ebe9 code=0x7ffc0000 [ 366.802307][ T30] audit: type=1326 audit(1754801282.312:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb78ebe9 code=0x7ffc0000 [ 366.966245][ T30] audit: type=1326 audit(1754801282.312:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fefdb78ebe9 code=0x7ffc0000 [ 367.017048][ T30] audit: type=1326 audit(1754801282.321:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb78ebe9 code=0x7ffc0000 [ 367.062134][ T30] audit: type=1326 audit(1754801282.321:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb78ebe9 code=0x7ffc0000 [ 367.095984][T11463] debugfs: 'ttyS3' already exists in 'caif_serial' [ 367.140502][ T30] audit: type=1326 audit(1754801282.321:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fefdb78ebe9 code=0x7ffc0000 [ 367.165222][ T30] audit: type=1326 audit(1754801282.321:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb78ebe9 code=0x7ffc0000 [ 367.190335][ T30] audit: type=1326 audit(1754801282.321:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb78ebe9 code=0x7ffc0000 [ 367.497567][T11479] usb usb8: usbfs: process 11479 (syz.3.906) did not claim interface 0 before use [ 368.213489][T11496] binder: BINDER_SET_CONTEXT_MGR already set [ 368.221799][T11496] binder: 11495:11496 ioctl 4018620d 2000000002c0 returned -16 [ 368.238620][T11496] binder: 11495:11496 ioctl c0306201 200000000240 returned -11 [ 368.678648][ T6888] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.916708][T11507] netlink: 'syz.4.914': attribute type 2 has an invalid length. [ 369.161401][T11514] tmpfs: Unknown parameter '0x0000000000000008' [ 370.216613][ T5851] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 371.392334][T11545] block nbd5: Unsupported socket: shutdown callout must be supported. [ 371.416156][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 371.438470][ T5851] usb 4-1: unable to get BOS descriptor or descriptor too short [ 371.585423][ T5851] usb 4-1: config 247 has an invalid interface number: 145 but max is 0 [ 371.597735][ T5851] usb 4-1: config 247 has no interface number 0 [ 371.604403][ T5851] usb 4-1: config 247 interface 145 has no altsetting 0 [ 371.660359][ T5851] usb 4-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 371.671651][T11548] usb usb8: usbfs: process 11548 (syz.1.925) did not claim interface 0 before use [ 371.680990][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.681048][ T5851] usb 4-1: Product: syz [ 371.681062][ T5851] usb 4-1: Manufacturer: syz [ 371.681076][ T5851] usb 4-1: SerialNumber: syz [ 372.746747][T11557] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 373.171971][ T5851] upd78f0730 4-1:247.145: upd78f0730 converter detected [ 373.201015][ T5851] usb 4-1: upd78f0730 converter now attached to ttyUSB0 [ 373.228560][ T5851] usb 4-1: USB disconnect, device number 27 [ 373.266068][ T5851] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 373.296605][ T5851] upd78f0730 4-1:247.145: device disconnected [ 373.917242][ T30] audit: type=1400 audit(1754801288.579:904): avc: denied { create } for pid=11582 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 373.920789][T11591] overlayfs: overlapping lowerdir path [ 373.997517][T11584] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 374.005352][ T30] audit: type=1400 audit(1754801288.588:905): avc: denied { bind } for pid=11582 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 374.055583][ T30] audit: type=1400 audit(1754801289.022:906): avc: denied { read } for pid=11582 comm="syz.3.932" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 374.089691][ T30] audit: type=1400 audit(1754801289.022:907): avc: denied { open } for pid=11582 comm="syz.3.932" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 374.600999][ T5907] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 375.611442][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.623198][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.768010][ T5907] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 375.901995][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.935421][ T5955] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 375.948774][ T5955] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 376.047528][ T30] audit: type=1400 audit(1754801290.850:908): avc: denied { read write } for pid=11639 comm="syz.2.941" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 376.163829][ T5907] usb 2-1: config 0 descriptor?? [ 376.169093][ T30] audit: type=1400 audit(1754801290.850:909): avc: denied { open } for pid=11639 comm="syz.2.941" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 376.437434][T11653] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 376.455613][T11653] FAULT_INJECTION: forcing a failure. [ 376.455613][T11653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.469965][T11653] CPU: 0 UID: 0 PID: 11653 Comm: syz.4.943 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 376.469991][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.469997][T11653] Call Trace: [ 376.470001][T11653] [ 376.470006][T11653] dump_stack_lvl+0x16c/0x1f0 [ 376.470022][T11653] should_fail_ex+0x512/0x640 [ 376.470036][T11653] should_fail_alloc_page+0xe7/0x130 [ 376.470053][T11653] prepare_alloc_pages+0x3c2/0x610 [ 376.470070][T11653] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 376.470084][T11653] ? __lock_acquire+0xb97/0x1ce0 [ 376.470103][T11653] ? anon_pipe_write+0x15d/0x1a90 [ 376.470115][T11653] ? __bpf_trace_contention_end+0xc9/0x110 [ 376.470133][T11653] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 376.470146][T11653] ? __pfx___mutex_trylock_common+0x10/0x10 [ 376.470165][T11653] ? rcu_is_watching+0x12/0xc0 [ 376.470178][T11653] ? trace_contention_end+0xdd/0x130 [ 376.470194][T11653] ? __mutex_lock+0x1c4/0x10b0 [ 376.470205][T11653] ? avc_has_perm_noaudit+0x149/0x3b0 [ 376.470216][T11653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 376.470229][T11653] ? policy_nodemask+0xea/0x4e0 [ 376.470243][T11653] alloc_pages_mpol+0x1fb/0x550 [ 376.470256][T11653] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 376.470271][T11653] alloc_pages_noprof+0x131/0x390 [ 376.470284][T11653] anon_pipe_write+0xbc2/0x1a90 [ 376.470302][T11653] ? __pfx_anon_pipe_write+0x10/0x10 [ 376.470314][T11653] ? selinux_file_permission+0x126/0x660 [ 376.470331][T11653] ? bpf_lsm_file_permission+0x9/0x10 [ 376.470344][T11653] ? security_file_permission+0x71/0x210 [ 376.470360][T11653] ? rw_verify_area+0xcf/0x6c0 [ 376.470377][T11653] ? __pfx_anon_pipe_write+0x10/0x10 [ 376.470389][T11653] io_write+0x6b8/0x1660 [ 376.470406][T11653] ? __fget_files+0x20e/0x3c0 [ 376.470419][T11653] __io_issue_sqe+0xe8/0x7c0 [ 376.470434][T11653] io_issue_sqe+0x86/0xe50 [ 376.470452][T11653] io_submit_sqes+0x92d/0x2590 [ 376.470476][T11653] __do_sys_io_uring_enter+0xd6a/0x1630 [ 376.470496][T11653] ? __fget_files+0x20e/0x3c0 [ 376.470506][T11653] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 376.470525][T11653] ? fput+0x9b/0xd0 [ 376.470538][T11653] ? ksys_write+0x1ac/0x250 [ 376.470549][T11653] ? __pfx_ksys_write+0x10/0x10 [ 376.470563][T11653] do_syscall_64+0xcd/0x4c0 [ 376.470576][T11653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.470587][T11653] RIP: 0033:0x7efe6b58ebe9 [ 376.470596][T11653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.470606][T11653] RSP: 002b:00007efe6c450038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 376.470616][T11653] RAX: ffffffffffffffda RBX: 00007efe6b7b6090 RCX: 00007efe6b58ebe9 [ 376.470623][T11653] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000005 [ 376.470629][T11653] RBP: 00007efe6c450090 R08: 0000000000000000 R09: 0000000000000000 [ 376.470635][T11653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.470640][T11653] R13: 00007efe6b7b6128 R14: 00007efe6b7b6090 R15: 00007ffdccd01868 [ 376.470654][T11653] [ 377.086629][ T5907] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 377.157755][ T5907] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 377.179213][ T5907] hid-steam 0003:28DE:1142.000B: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 377.570864][ T5907] usb 2-1: USB disconnect, device number 28 [ 377.814279][ T5907] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 377.834829][T11670] netlink: 'syz.4.945': attribute type 10 has an invalid length. [ 377.847392][T11670] syz_tun: entered promiscuous mode [ 377.864422][T11670] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 378.474558][T11695] usb usb8: usbfs: process 11695 (syz.5.949) did not claim interface 0 before use [ 379.714959][ T5927] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 379.953184][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 380.009231][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short [ 380.114822][ T5927] usb 5-1: config 247 has an invalid interface number: 145 but max is 0 [ 380.228645][ T5927] usb 5-1: config 247 has no interface number 0 [ 380.306778][ T5927] usb 5-1: config 247 interface 145 has no altsetting 0 [ 380.362208][T11725] netlink: 'syz.3.954': attribute type 10 has an invalid length. [ 382.288773][ T5927] usb 5-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 382.298830][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.702235][ T5927] usb 5-1: can't set config #247, error -71 [ 382.732662][ T5927] usb 5-1: USB disconnect, device number 18 [ 383.062741][ T31] INFO: task kworker/1:2:918 blocked for more than 143 seconds. [ 383.084529][ T31] Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 [ 383.301172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.309897][ T31] task:kworker/1:2 state:D stack:22376 pid:918 tgid:918 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 383.330931][ T31] Workqueue: usb_hub_wq hub_event [ 383.336048][ T31] Call Trace: [ 383.339329][ T31] [ 383.342314][ T31] __schedule+0x1190/0x5de0 [ 383.346996][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 383.352041][ T31] ? __pfx___schedule+0x10/0x10 [ 383.356972][ T31] ? find_held_lock+0x2b/0x80 [ 383.361664][ T31] ? schedule+0x2d7/0x3a0 [ 383.366060][ T31] schedule+0xe7/0x3a0 [ 383.374755][ T31] schedule_timeout+0x257/0x290 [ 383.387663][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 383.407238][ T31] ? mark_held_locks+0x49/0x80 [ 383.422013][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 383.440128][ T31] __wait_for_common+0x2fc/0x4e0 [ 383.459683][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 383.465301][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 383.470811][ T31] ? __pfx_device_del+0x10/0x10 [ 383.475723][ T31] ? kobject_put+0xab/0x5a0 [ 383.480304][ T31] i2c_del_adapter+0x546/0x6f0 [ 383.485146][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 383.490528][ T31] ? kfree+0x2b4/0x4d0 [ 383.494667][ T31] ? media_device_cleanup+0x53/0x80 [ 383.500525][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 383.529621][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 383.535120][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 383.581114][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 383.597724][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 383.603638][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 383.609607][ T31] usb_probe_interface+0x303/0xa40 [ 383.614747][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 383.655753][ T31] really_probe+0x241/0xa90 [ 383.668429][ T31] __driver_probe_device+0x1de/0x440 [ 383.674229][ T31] driver_probe_device+0x4c/0x1b0 [ 383.685014][ T31] __device_attach_driver+0x1df/0x310 [ 383.698100][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 383.704218][ T31] bus_for_each_drv+0x159/0x1e0 [ 383.709109][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 383.714532][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 383.719998][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 383.725893][ T31] __device_attach+0x1e4/0x4b0 [ 383.731640][ T31] ? __pfx___device_attach+0x10/0x10 [ 383.737028][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 383.742533][ T31] bus_probe_device+0x17f/0x1c0 [ 383.747616][ T31] device_add+0x1148/0x1aa0 [ 383.752167][ T31] ? __pfx_device_add+0x10/0x10 [ 383.757250][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 383.763319][ T31] usb_set_configuration+0x1187/0x1e20 [ 383.769346][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 383.775464][ T31] usb_generic_driver_probe+0xb1/0x110 [ 383.781540][ T31] usb_probe_device+0xec/0x3e0 [ 383.786403][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 383.791864][ T31] really_probe+0x241/0xa90 [ 383.796901][ T31] __driver_probe_device+0x1de/0x440 [ 383.802704][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 383.808306][ T31] driver_probe_device+0x4c/0x1b0 [ 383.813471][ T31] __device_attach_driver+0x1df/0x310 [ 383.818950][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 383.825158][ T31] bus_for_each_drv+0x159/0x1e0 [ 383.830219][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 383.836544][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 383.843499][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 383.868850][ T31] __device_attach+0x1e4/0x4b0 [ 383.873705][ T31] ? __pfx___device_attach+0x10/0x10 [ 383.882891][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 383.888276][ T31] bus_probe_device+0x17f/0x1c0 [ 383.893261][ T31] device_add+0x1148/0x1aa0 [ 383.897848][ T31] ? __pfx_device_add+0x10/0x10 [ 383.905118][ T31] ? add_device_randomness+0xb7/0xf0 [ 383.910610][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 383.916668][ T31] usb_new_device+0xd07/0x1a60 [ 383.925396][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 383.931090][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 383.936358][ T31] ? mark_held_locks+0x49/0x80 [ 383.941262][ T31] hub_event+0x2f34/0x4fe0 [ 383.945786][ T31] ? __pfx_hub_event+0x10/0x10 [ 383.950604][ T31] ? interval_tree_remove+0x390/0xee0 [ 383.956096][ T31] ? rcu_is_watching+0x12/0xc0 [ 383.960954][ T31] process_one_work+0x9cc/0x1b70 [ 383.965989][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 383.971300][ T31] ? __pfx_process_one_work+0x10/0x10 [ 383.976769][ T31] ? assign_work+0x1a0/0x250 [ 383.981366][ T31] worker_thread+0x6c8/0xf10 [ 383.986137][ T31] ? __kthread_parkme+0x19e/0x250 [ 383.991180][ T31] ? __pfx_worker_thread+0x10/0x10 [ 383.996462][ T31] kthread+0x3c5/0x780 [ 384.000526][ T31] ? __pfx_kthread+0x10/0x10 [ 384.005129][ T31] ? rcu_is_watching+0x12/0xc0 [ 384.009873][ T31] ? __pfx_kthread+0x10/0x10 [ 384.014439][ T31] ret_from_fork+0x5d4/0x6f0 [ 384.019443][ T31] ? __pfx_kthread+0x10/0x10 [ 384.024033][ T31] ret_from_fork_asm+0x1a/0x30 [ 384.028854][ T31] [ 384.032030][ T31] INFO: task syz.0.387:8082 blocked for more than 144 seconds. [ 384.043631][ T31] Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 [ 384.050992][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.062837][ T31] task:syz.0.387 state:D stack:26088 pid:8082 tgid:8081 ppid:5840 task_flags:0x400140 flags:0x00004004 [ 384.074895][ T31] Call Trace: [ 384.078172][ T31] [ 384.084274][ T31] __schedule+0x1190/0x5de0 [ 384.088806][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 384.093886][ T31] ? __pfx___schedule+0x10/0x10 [ 384.098750][ T31] ? find_held_lock+0x2b/0x80 [ 384.106682][ T31] ? schedule+0x2d7/0x3a0 [ 384.111040][ T31] ? usbdev_open+0x1b6/0x8b0 [ 384.116399][ T31] schedule+0xe7/0x3a0 [ 384.120496][ T31] schedule_preempt_disabled+0x13/0x30 [ 384.126212][ T31] __mutex_lock+0x82a/0x10b0 [ 384.131352][ T31] ? klist_put+0xc7/0x1b0 [ 384.135757][ T31] ? usbdev_open+0x1b6/0x8b0 [ 384.140373][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 384.145386][ T31] ? kobject_put+0xab/0x5a0 [ 384.149980][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 384.155449][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 384.160812][ T31] ? usbdev_open+0x1b6/0x8b0 [ 384.165392][ T31] usbdev_open+0x1b6/0x8b0 [ 384.169841][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 384.174854][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 384.179846][ T31] ? chrdev_open+0x58c/0x6a0 [ 384.184438][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 384.189617][ T31] chrdev_open+0x231/0x6a0 [ 384.194027][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 384.198947][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 384.205310][ T31] do_dentry_open+0x982/0x1530 [ 384.210052][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 384.214998][ T31] vfs_open+0x82/0x3f0 [ 384.219048][ T31] path_openat+0x1de4/0x2cb0 [ 384.223659][ T31] ? __pfx_path_openat+0x10/0x10 [ 384.228585][ T31] do_filp_open+0x20b/0x470 [ 384.234400][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 384.239568][ T31] ? alloc_fd+0x471/0x7d0 [ 384.244136][ T31] do_sys_openat2+0x11b/0x1d0 [ 384.248820][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.254029][ T31] __x64_sys_openat+0x174/0x210 [ 384.258954][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 384.264330][ T31] do_syscall_64+0xcd/0x4c0 [ 384.268850][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.274729][ T31] RIP: 0033:0x7fa11638d550 [ 384.279137][ T31] RSP: 002b:00007fa11718ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 384.287573][ T31] RAX: ffffffffffffffda RBX: 0000000000000402 RCX: 00007fa11638d550 [ 384.295550][ T31] RDX: 0000000000000402 RSI: 00007fa11718ac10 RDI: 00000000ffffff9c [ 384.303522][ T31] RBP: 00007fa11718ac10 R08: 0000000000000000 R09: 0000000000000000 [ 384.311530][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 384.319546][ T31] R13: 00007fa1165b6038 R14: 00007fa1165b5fa0 R15: 00007fffcf1163b8 [ 384.327530][ T31] [ 384.330588][ T31] [ 384.330588][ T31] Showing all locks held in the system: [ 384.338284][ T31] 2 locks held by kworker/u8:0/12: [ 384.344746][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 384.356038][ T31] #1: ffffc90000117d10 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 384.368383][ T31] 6 locks held by kworker/1:0/24: [ 384.373531][ T31] #0: ffff888021ed3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 384.384397][ T31] #1: ffffc900001e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 384.395661][ T31] #2: ffff888029697198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 384.404542][ T31] #3: ffff888058e02198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9c0 [ 384.413778][ T31] #4: ffff88801f6f1160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 384.424323][ T31] #5: ffff88807a11c188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x8a/0x630 [ 384.434685][ T31] 1 lock held by khungtaskd/31: [ 384.439551][ T31] #0: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 384.449831][ T31] 2 locks held by kworker/u8:3/48: [ 384.454942][ T31] 5 locks held by kworker/1:2/918: [ 384.460163][ T31] #0: ffff888021ed3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 384.471082][ T31] #1: ffffc900037e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 384.482373][ T31] #2: ffff888029562198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 384.491268][ T31] #3: ffff888059d3d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 384.500570][ T31] #4: ffff888075cfb160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 384.509809][ T31] 2 locks held by pvrusb2-context/2337: [ 384.515365][ T31] #0: ffff88807a11c188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xb6/0x4510 [ 384.525852][ T31] #1: ffffffff8e4752b0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xa9/0x250 [ 384.536254][ T31] 2 locks held by getty/5607: [ 384.540914][ T31] #0: ffff8880361c90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 384.550698][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 384.560838][ T31] 2 locks held by kworker/u8:11/7485: [ 384.566186][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 384.577445][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 384.586221][ T31] 1 lock held by syz.0.387/8082: [ 384.591178][ T31] #0: ffff888029562198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 384.600178][ T31] [ 384.602542][ T31] ============================================= [ 384.602542][ T31] [ 384.610954][ T31] NMI backtrace for cpu 0 [ 384.610971][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 384.610992][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.611002][ T31] Call Trace: [ 384.611008][ T31] [ 384.611016][ T31] dump_stack_lvl+0x116/0x1f0 [ 384.611038][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 384.611062][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 384.611090][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 384.611116][ T31] watchdog+0xf0e/0x1260 [ 384.611140][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.611158][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.611176][ T31] ? __kthread_parkme+0x19e/0x250 [ 384.611202][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.611219][ T31] kthread+0x3c5/0x780 [ 384.611236][ T31] ? __pfx_kthread+0x10/0x10 [ 384.611254][ T31] ? rcu_is_watching+0x12/0xc0 [ 384.611275][ T31] ? __pfx_kthread+0x10/0x10 [ 384.611293][ T31] ret_from_fork+0x5d4/0x6f0 [ 384.611309][ T31] ? __pfx_kthread+0x10/0x10 [ 384.611327][ T31] ret_from_fork_asm+0x1a/0x30 [ 384.611359][ T31] [ 384.611365][ T31] Sending NMI from CPU 0 to CPUs 1: [ 384.731186][ C1] NMI backtrace for cpu 1 [ 384.731199][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 384.731216][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.731224][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 384.731250][ C1] Code: ac 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 384.731262][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 384.731274][ C1] RAX: 00000000020ce153 RBX: 0000000000000001 RCX: ffffffff8b934c29 [ 384.731282][ C1] RDX: 0000000000000000 RSI: ffffffff8de4f125 RDI: ffffffff8c162500 [ 384.731291][ C1] RBP: ffffed1003c5c488 R08: 0000000000000001 R09: ffffed10170a6655 [ 384.731299][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 384.731307][ C1] R13: ffff88801e2e2440 R14: ffffffff90ab3590 R15: 0000000000000000 [ 384.731315][ C1] FS: 0000000000000000(0000) GS:ffff8881247bd000(0000) knlGS:0000000000000000 [ 384.731329][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.731338][ C1] CR2: 000055555cdb15c8 CR3: 0000000073f65000 CR4: 00000000003526f0 [ 384.731346][ C1] Call Trace: [ 384.731351][ C1] [ 384.731355][ C1] default_idle+0x13/0x20 [ 384.731370][ C1] default_idle_call+0x6d/0xb0 [ 384.731384][ C1] do_idle+0x391/0x510 [ 384.731402][ C1] ? __pfx_do_idle+0x10/0x10 [ 384.731417][ C1] ? do_idle+0x1c/0x510 [ 384.731432][ C1] cpu_startup_entry+0x4f/0x60 [ 384.731447][ C1] start_secondary+0x21d/0x2b0 [ 384.731466][ C1] ? __pfx_start_secondary+0x10/0x10 [ 384.731486][ C1] common_startup_64+0x13e/0x148 [ 384.731505][ C1] [ 384.732328][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 384.909480][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 384.920904][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.930933][ T31] Call Trace: [ 384.934184][ T31] [ 384.937090][ T31] dump_stack_lvl+0x3d/0x1f0 [ 384.941657][ T31] vpanic+0x6e8/0x7a0 [ 384.945617][ T31] ? __pfx_vpanic+0x10/0x10 [ 384.950098][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 384.955967][ T31] panic+0xca/0xd0 [ 384.959664][ T31] ? __pfx_panic+0x10/0x10 [ 384.964068][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 384.969426][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 384.975568][ T31] ? watchdog+0xd78/0x1260 [ 384.979961][ T31] ? watchdog+0xd6b/0x1260 [ 384.984367][ T31] watchdog+0xd89/0x1260 [ 384.988602][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.993272][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.998478][ T31] ? __kthread_parkme+0x19e/0x250 [ 385.003494][ T31] ? __pfx_watchdog+0x10/0x10 [ 385.008151][ T31] kthread+0x3c5/0x780 [ 385.012199][ T31] ? __pfx_kthread+0x10/0x10 [ 385.016766][ T31] ? rcu_is_watching+0x12/0xc0 [ 385.021507][ T31] ? __pfx_kthread+0x10/0x10 [ 385.026077][ T31] ret_from_fork+0x5d4/0x6f0 [ 385.030639][ T31] ? __pfx_kthread+0x10/0x10 [ 385.035199][ T31] ret_from_fork_asm+0x1a/0x30 [ 385.039941][ T31] [ 385.043139][ T31] Kernel Offset: disabled [ 385.047439][ T31] Rebooting in 86400 seconds..