last executing test programs: 3m15.031984533s ago: executing program 2 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x180, '\x00', r1}, 0x50) 3m14.800035456s ago: executing program 2 (id=537): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_io_uring_complete(0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3m11.961107504s ago: executing program 2 (id=541): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) process_vm_readv(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f00000011c0)=""/195, 0xc3}, {&(0x7f00000000c0)=""/187, 0xbb}, {0x0}], 0x4, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) fcntl$setpipe(r2, 0x408, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) 3m10.682657448s ago: executing program 2 (id=549): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)="688080", 0x3}, {&(0x7f0000000680)="5c663896714207d95ec16ff550d4f6450bc2519c90ac51a58f33ffea9e2850a2e7494813c8bd51e60035ad636e50d58513ff790c622d261df221b7e0169be0ac", 0x40}], 0x2, 0x0, 0x0, 0x20000004}], 0x1, 0x4) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) splice(r6, 0x0, r8, 0x0, 0x80, 0x4) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 3m6.88395365s ago: executing program 2 (id=565): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000006) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800455c0034000000000006907864010101ac1414aa00004e2239a3ea631b379ad99d576b16f5290366685234b3a27db7712b06d344b1bb1499f39d28607e4ed74a2259d1ea0328d303cd4311ab23c85d628ef662ad1e6ac4578c1f41fe06505164ffba1a9a66759311615e07b915266b8266ab75c5c10dd7ddc7806e8beccfed4703296a86ca63bc97d1c48b1ff2ca9615c667ba9afbd2e771ba35965335", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c10000090781000080a00000003200000090000"], 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) 3m4.295131787s ago: executing program 2 (id=574): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x6}]}) r7 = socket(0x11, 0x3, 0x0) setsockopt(r7, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg(r7, &(0x7f0000000100)={&(0x7f00000003c0)=@xdp={0x2c, 0x8, r9, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000006c0)="000502000b00000000002d3922ff65b4355e953d23d254f09cd2893ffd966d3b07110a5fb45458ac3384f783ba19c9067555bde4f9ea32fe7d51103f1ee93a87f99eefefafbd19acd55e1abfbe5c299f", 0x50}], 0x1}, 0x818) syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x10000) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7bf24827ed91"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20004804) 2m47.970577881s ago: executing program 32 (id=574): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x6}]}) r7 = socket(0x11, 0x3, 0x0) setsockopt(r7, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg(r7, &(0x7f0000000100)={&(0x7f00000003c0)=@xdp={0x2c, 0x8, r9, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000006c0)="000502000b00000000002d3922ff65b4355e953d23d254f09cd2893ffd966d3b07110a5fb45458ac3384f783ba19c9067555bde4f9ea32fe7d51103f1ee93a87f99eefefafbd19acd55e1abfbe5c299f", 0x50}], 0x1}, 0x818) syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x10000) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7bf24827ed91"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20004804) 22.498867291s ago: executing program 4 (id=1060): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) 19.122909065s ago: executing program 4 (id=1067): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/103], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf251f00000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e300000000a0001007770616e310000000a0001007770616e30000000080002", @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000001}, 0x40) 17.86108183s ago: executing program 0 (id=1068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000003e00070127bd700000008008000600"/32, @ANYBLOB="09000280725eb862ce000000"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sched_setscheduler(0x0, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 17.822247266s ago: executing program 4 (id=1069): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0x200c17a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6(0xa, 0x3, 0x3c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r5, 0x4, 0x0, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xffc, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x7, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) io_destroy(r5) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045519, &(0x7f0000000480)=0x1) socket(0x0, 0x2, 0x10001) 16.42654599s ago: executing program 0 (id=1074): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x500, 0x0, 0xb5315241, 0x0, 0x0, [{0x0, 0x40}, {0x0, 0xfffffffe}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0xfffffffc}], 0x8, 0x0, 0x0, 0x0, 0x1}}) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x0, 0x30383653, 0x1, 0x800, 0x4, 0x5, 0x2, 0x0, 0x4, 0x1, 0x6}}) (fail_nth: 4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '%'}]}, 0x27) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16.283300704s ago: executing program 3 (id=1076): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 15.723737441s ago: executing program 0 (id=1078): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = open$dir(&(0x7f0000000400)='./file0\x00', 0x200000, 0x29) renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r6, &(0x7f0000000440)='./file0\x00', 0x1) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, &(0x7f0000000140)={0xdbf44310de0df19d, 0x0}) write(r9, &(0x7f0000000000)="fa", 0xfffffdef) socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f00000017c0)=[{0x6, 0xff, 0x0, 0x7ffffffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb827}, 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 15.723457354s ago: executing program 1 (id=1079): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80801) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ace91c040000f6f65e3b000000000000000000000000000000c537da5436f3f91092ed"], 0x24}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002040)) 15.570620541s ago: executing program 1 (id=1080): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = open$dir(&(0x7f0000000400)='./file0\x00', 0x200000, 0x29) renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r6, &(0x7f0000000440)='./file0\x00', 0x1) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, &(0x7f0000000140)={0xdbf44310de0df19d, 0x0}) write(r9, &(0x7f0000000000)="fa", 0xfffffdef) socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f00000017c0)=[{0x6, 0xff, 0x0, 0x7ffffffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb827}, 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 13.110433437s ago: executing program 4 (id=1081): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ace91c040000f6f65e3b000000000000000000000000000000c537da5436f3f91092ed"], 0x24}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002040)) 11.554785544s ago: executing program 1 (id=1082): socket$inet(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000500)={0xc, @pix={0xd3b, 0x3, 0x44495658, 0x0, 0x0, 0x9, 0x1, 0x2, 0x0, 0x1, 0x1, 0x3}}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="2705020029ff14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee", 0x24}, {&(0x7f0000002480)="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", 0xf11}], 0x2}, 0x20008010) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x6}) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r6) 8.664785629s ago: executing program 1 (id=1083): mkdir(&(0x7f00000001c0)='./bus\x00', 0x61) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0xff, @dev, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x100, 0x5}}}}}}, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='gfs2\x00', 0x400080, &(0x7f00000001c0)='discard') setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x3, {0x2, 0x0, 0x1}, {0x2, 0xf0}, 0x1, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x1}, {0x2, 0xf}, 0x0, 0xfe}, {0x3, 0x2, {0x0, 0xf0, 0x1}, {0x2, 0x0, 0x2}, 0xff, 0x2}], 0x60) 8.663982899s ago: executing program 5 (id=1084): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0xb, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000100)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) (fail_nth: 5) 8.591254654s ago: executing program 0 (id=1085): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000003e00070127bd700000008008000600"/32, @ANYBLOB="09000280725eb862ce000000"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sched_setscheduler(0x0, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 8.496988445s ago: executing program 3 (id=1086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) 8.48124961s ago: executing program 4 (id=1087): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0xffffffffffffff7b, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r1, 0x0) r7 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0x6f, 0xcf, 0x20, 0x13d8, 0x20, 0xf731, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xe4, 0xd5}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20010, r0, 0x0) syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x20, 0x5, 0x4a, {0x4a, 0x23, "9b84b18177a0a1a3f975e1d8bb2b0b985b6d209cf664dd8644abe788303a5531fa0bb39bdfade3d70c71b2570f58d610e3e09d5b728d684142ac828d5096b98bcfe15006e9303ceb"}}, &(0x7f0000000400)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "6acb9cad262c2da2a691715214c67a6688583bf806b54b8bb633b475"}}, &(0x7f0000000300)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x7fffffe, 0xf0f, 0x2, [0xcf, 0xff0000, 0xff0000]}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x64, 0x26, 0x1c, '\x00', "90135fcc"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x7, 0x8, 0x2d, 0x2081, 0x912}}}, &(0x7f0000000640)={0x84, &(0x7f0000000800)={0x40, 0x6, 0x6c, "02c82b0a4abb7eb8579cc6fa818fe6df701686d02215c779c621f9b4a5e0a9c76e34c9b6ed8ba0592f81cd37d071397ea11d7ae7f8395a7049e5048d158bea04bd5bc83efa912ef43004b13dc8be346da55861c5e90986b3830325d945272dd2df487ce4a006710328839d0b"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "0461"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000480)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000000500)={0x40, 0x19, 0x2, "a94f"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0xe}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x3}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x18}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x38}}, 0x200bc085) 8.035655842s ago: executing program 3 (id=1088): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, 0x0, 0x0) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf251f00000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e300000000a0001007770616e310000000a0001007770616e30000000080002", @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000001}, 0x40) 7.925254491s ago: executing program 5 (id=1089): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r4}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0x8a, 0x3, 0x6, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0xf0) io_submit(0x0, 0x1, &(0x7f0000000a40)=[0x0]) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000180a01020000000000000000020000031c0003801800037bf5e18014000100776732000000000000000000000000000900020073797a3000000000140000001100010000000000000000000300000a"], 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x57f2, &(0x7f0000000240)={0x0, 0x6d5e, 0x4020, 0x2, 0xde}, &(0x7f00000002c0), &(0x7f0000000300)) 7.923723576s ago: executing program 0 (id=1090): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80801) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ace91c040000f6f65e3b000000000000000000000000000000c537da5436f3f91092ed"], 0x24}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002040)) 6.76620088s ago: executing program 3 (id=1091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fbdbdf251f00000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e300000000a0001007770616e310000000a0001007770616e30000000080002", @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000001}, 0x40) 6.538549701s ago: executing program 1 (id=1092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d40)="cf", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4009811) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{}, "e000008260b72a6f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "ffff7709", "0cb42238c52f3b48"}, 0x38) 6.480710786s ago: executing program 5 (id=1093): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) connect$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x336, 0x40, 0xa1, 0x5, 0x9, @remote}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r6, 0x39) syz_open_dev$evdev(&(0x7f0000000100), 0x1000, 0x10800) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x4040815) 3.260606065s ago: executing program 3 (id=1094): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000a00)) 2.752211193s ago: executing program 1 (id=1095): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = open$dir(&(0x7f0000000400)='./file0\x00', 0x200000, 0x29) renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r6, &(0x7f0000000440)='./file0\x00', 0x1) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, &(0x7f0000000140)={0xdbf44310de0df19d, 0x0}) write(r9, &(0x7f0000000000)="fa", 0xfffffdef) socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f00000017c0)=[{0x6, 0xff, 0x0, 0x7ffffffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb827}, 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 2.726211024s ago: executing program 0 (id=1096): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 339.792365ms ago: executing program 5 (id=1097): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000006c40)=[{{&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000380)="c209a2c7972c75e916be0f7a61a27c58c15b2da7a9dac338b6ea7114390766bc50d01aaf515f68a3985f2275065d7099ae82a8d1a3cc8f14157e", 0x3a}, {&(0x7f00000003c0)="ad5109fc9850e80c03567abc11b5c69148247f980955ff95fa5f17227a3ff5678227c1044a1ab6adabe5a18b09fd16313939d6e6f3f611c592df3a0e82d585f685485bc210e2ac6482366f858d2cc0ae0f17a18248e55e93c254965b56bc547bd914bc5a4bc34842a4cb773c32", 0x6d}, {&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000600)="38f3e6e4ae1f51ce8d61784e4415bf4d160bfa1e06d7b2196e288fa0257730ddecee21616a457f40c992612390a955a56869368ee6d61f0a67929db6fe13f34e725eac7e4cc945650dca73d577557abbad10d803eec4be200c318fc1bdc9cbd4659062265b34624068aebbcdfb6a9d055ced056e2cbee4556f9ea26a7efab442375341f3ac1bae2a53d78699ae7750", 0x8f}, {&(0x7f0000000540)="3f787857e14424b0c5eab9095ebf0becf81d548d67f3586ee18187fbb15851254aa9fdf6028ee55c7be073a49b43d07537a8f490640c782c3da333c9facbbce048310d8c47fb1fb6365642e785991b5318b8f159e2d59cd831cc182c2d9135c2806ec6cb7fc793b204b48055dd89c6ee2cd7df77b5dec6e4ebbd", 0x7a}, {&(0x7f00000006c0)="e31260b4eb2fc8d6ff7972020458412bf18750e2e012fde977ac4d639e22fbfd2663354ae3724cf2e3c30002e7b1bc6904b57f0bb8d7cb35b2cdbc28f90cba676e28871a06c90f12870ad841af08d9d1772449b17a0c48bc2319483add13089b54abb77000d64deafe5f2cd231d730eaa5bee79fde18aad4074d96cc34a0b84229a5b23213f2f0d0d0f7b6fb66406123ad45e4c7299fae075a54893a88291af114fd0025b73282bf9b178299f17adb0333fbc16f196b4989cd99e20f31808dc39cd7a81272c51d5d33bb95e8aeed9db4", 0xd0}], 0x6, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd84}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x14, 0x1, 0x9, [{@private=0xa010101, 0x81}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x9}]}]}}}, @ip_tos_int={{0x14}}], 0xd0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x70, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xf6, [@remote, @local, @private=0xa010102, @private=0xa010101, @multicast2, @local]}, @timestamp_addr={0x44, 0x2c, 0x9d, 0x1, 0x5, [{@rand_addr=0x64010100, 0xa}, {@broadcast, 0x2ead}, {@empty, 0x4}, {@broadcast, 0xed}, {@loopback, 0xff}]}, @rr={0x7, 0x7, 0xa, [@multicast1]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xc5, [@broadcast]}, @noop, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x39}, @loopback}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x97, 0x0, 0xe, [0x2, 0xe, 0x4, 0xfffffe00]}]}}}], 0xe8}}], 0x2, 0x0) 277.127531ms ago: executing program 5 (id=1098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) 241.346606ms ago: executing program 3 (id=1099): truncate(&(0x7f0000000000)='./file0\x00', 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x109) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x1, r4, 0x4}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$afs(&(0x7f00000006c0)=@cell={0x23, '', 'syz0'}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x8003, &(0x7f00000005c0)=ANY=[@ANYBLOB='flock=strict,autocell,autocell,hash,subj_role=,uid<', @ANYRESDEC=0xee00, @ANYRES16=r1, @ANYRESDEC, @ANYBLOB="2ccba5b7d92406daf4ae891a62730000d2e3c79675f734540781c9f7576b4495802402bf5e93e6d1280764860799813ec96faab90f23e5d1aeec3a1a4dce3c2c3af816fe716019acbfd3eecef3fce8ad927c88a9ec997f76ecafb4d7b82572d4b9e20586459850853ad72221b73adfeef573b0bae5e4b49a7daaa98067b4"]) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r5], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea1, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) 235.467369ms ago: executing program 4 (id=1100): r0 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES8=0x0, @ANYRES16=r0, @ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESHEX=r1], 0x0, 0x42}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x10820000) r3 = gettid() recvfrom$packet(r2, 0x0, 0x0, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r6, &(0x7f0000001780)=""/122, 0x18) r7 = socket(0x62d91982c5c52e03, 0x7e112285fb197c2e, 0x4) sendto$inet6(r7, &(0x7f0000000400)="c10e000018001f06b9409b0dffff110d0207be0402050605fe100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c2912145499358ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe588055660b515ca73e00de6b40bd6f7eff5ad46a27f06b6597b1c7cca05e78bb5df0", 0x88, 0x4004808, 0x0, 0xffffffffffffff86) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='netfs_sreq_ref\x00', r6, 0x0, 0x20000000000000}, 0xfffffffffffffc35) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 5 (id=1101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r1, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getroute={0x14, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r7, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getpid() setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="3a3f5d2129ffc724bcebbf31c6bdac74", 0x10) kernel console output (not intermixed with test programs): 8] usb usb8: usbfs: process 8068 (syz.4.564) did not claim interface 0 before use [ 272.324156][ T52] Bluetooth: hci4: Malformed LE Event: 0x0d [ 272.356920][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 272.604078][ T8065] vlan2: entered promiscuous mode [ 272.609208][ T8065] bond0: entered promiscuous mode [ 272.617239][ T8065] bond_slave_0: entered promiscuous mode [ 272.747235][ T8065] bond_slave_1: entered promiscuous mode [ 272.963147][ T30] audit: type=1400 audit(1766816827.064:376): avc: denied { mount } for pid=8064 comm="syz.2.565" name="/" dev="autofs" ino=18990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 273.075907][ T30] audit: type=1400 audit(1766816827.167:377): avc: denied { mount } for pid=8078 comm="syz.3.568" name="/" dev="ramfs" ino=19536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 273.077344][ T8082] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 273.113176][ T8082] overlayfs: failed to set xattr on upper [ 273.118899][ T8082] overlayfs: ...falling back to redirect_dir=nofollow. [ 273.140767][ T8082] overlayfs: ...falling back to index=off. [ 273.147710][ T8082] overlayfs: ...falling back to uuid=null. [ 273.153859][ T8082] overlayfs: ...falling back to xino=off. [ 274.025975][ T30] audit: type=1400 audit(1766816827.167:378): avc: denied { setopt } for pid=8078 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.045740][ T30] audit: type=1400 audit(1766816827.167:379): avc: denied { mounton } for pid=8078 comm="syz.3.568" path="/file0" dev="ramfs" ino=19538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 274.072732][ T30] audit: type=1400 audit(1766816827.550:380): avc: denied { mounton } for pid=8064 comm="syz.2.565" path="/103/file1/file0" dev="autofs" ino=19544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 274.096327][ T30] audit: type=1400 audit(1766816828.018:381): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 274.117533][ T30] audit: type=1400 audit(1766816828.065:382): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 275.007395][ T8109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.579'. [ 275.775365][ T30] audit: type=1400 audit(1766816829.636:383): avc: denied { read } for pid=8117 comm="syz.3.581" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 276.435729][ T30] audit: type=1400 audit(1766816829.636:384): avc: denied { open } for pid=8117 comm="syz.3.581" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 276.611940][ T30] audit: type=1400 audit(1766816829.636:385): avc: denied { ioctl } for pid=8117 comm="syz.3.581" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 276.807346][ T30] audit: type=1400 audit(1766816829.683:386): avc: denied { write } for pid=8117 comm="syz.3.581" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 277.558970][ T7927] udevd[7927]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 277.573447][ T7799] udevd[7799]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 278.489899][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 278.588819][ T5817] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 279.255014][ T10] usb 5-1: device descriptor read/64, error -71 [ 280.280945][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 280.651155][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 280.750747][ T5817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.761248][ T5817] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 280.769430][ T5817] usb 4-1: config 8 has no interface number 0 [ 280.775597][ T5817] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 280.787968][ T5817] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 280.799244][ T5817] usb 4-1: config 8 interface 24 has no altsetting 0 [ 280.874047][ T10] usb 5-1: device descriptor read/64, error -71 [ 281.120683][ T10] usb usb5-port1: attempt power cycle [ 281.132471][ T5817] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 281.148109][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 281.168022][ T5817] usb 4-1: Product: syz [ 281.174540][ T5817] usb 4-1: Manufacturer: syz [ 281.182686][ T5817] usb 4-1: SerialNumber: syz [ 281.211163][ T8136] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.341019][ T52] Bluetooth: min 6 > max 0 [ 281.405171][ T8163] lo speed is unknown, defaulting to 1000 [ 281.473168][ T5817] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 281.490766][ T5817] usb 4-1: USB disconnect, device number 18 [ 281.515933][ T10] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 281.547750][ T10] usb 5-1: device descriptor read/8, error -71 [ 281.964776][ T10] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 282.031184][ T10] usb 5-1: device descriptor read/8, error -71 [ 282.314230][ T10] usb usb5-port1: unable to enumerate USB device [ 283.567913][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 284.329829][ T8184] No source specified [ 284.629399][ T30] audit: type=1400 audit(1766816837.980:387): avc: denied { setopt } for pid=8190 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.037097][ T30] audit: type=1400 audit(1766816838.008:388): avc: denied { write } for pid=8190 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.096960][ T30] audit: type=1326 audit(1766816838.345:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb4ed8f749 code=0x0 [ 285.183075][ T8205] netlink: 148 bytes leftover after parsing attributes in process `syz.3.598'. [ 285.269404][ T5955] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 285.547324][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 285.567030][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 285.584422][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.602'. [ 285.598981][ T8208] overlayfs: failed to clone upperpath [ 285.600823][ T5955] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 285.634584][ T30] audit: type=1400 audit(1766816838.925:390): avc: denied { write } for pid=8209 comm="syz.0.603" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 285.658131][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.671770][ T5955] usb 5-1: Product: syz [ 285.679483][ T5955] usb 5-1: Manufacturer: syz [ 285.702131][ T8212] netlink: 68 bytes leftover after parsing attributes in process `syz.3.604'. [ 285.702231][ T5955] usb 5-1: SerialNumber: syz [ 285.714552][ T8212] warning: `syz.3.604' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.734307][ T5955] usb 5-1: config 0 descriptor?? [ 286.959587][ T5955] usb 5-1: USB disconnect, device number 35 [ 287.126538][ T8231] comedi comedi0: Minor 3 specified more than once! [ 287.959067][ T7927] udevd[7927]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.996453][ T30] audit: type=1400 audit(1766816841.132:391): avc: denied { map } for pid=8236 comm="syz.4.611" path="socket:[19423]" dev="sockfs" ino=19423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 288.125814][ T30] audit: type=1400 audit(1766816841.151:392): avc: denied { read } for pid=8236 comm="syz.4.611" path="socket:[19423]" dev="sockfs" ino=19423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 288.750579][ T8244] tc_dump_action: action bad kind [ 289.544591][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 291.147977][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.169674][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.182390][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.195060][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.203712][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.836179][ T30] audit: type=1400 audit(1766816844.724:393): avc: denied { create } for pid=8282 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 291.938640][ T5955] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 291.988079][ T8275] lo speed is unknown, defaulting to 1000 [ 292.109808][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 292.118558][ T5955] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 292.131968][ T1107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.230181][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.261519][ T5955] usb 5-1: config 0 descriptor?? [ 292.279855][ T5955] as10x_usb: device has been detected [ 292.292215][ T5955] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 292.294391][ T1107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.335209][ T5955] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 292.371790][ T5955] as10x_usb: error during firmware upload part1 [ 292.393312][ T5955] Registered device nBox DVB-T Dongle [ 292.450542][ T1107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.666728][ T1107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.435729][ T5828] Bluetooth: hci5: command tx timeout [ 294.466152][ T30] audit: type=1400 audit(1766816847.184:394): avc: denied { create } for pid=8306 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 295.125720][ T6094] usb 5-1: USB disconnect, device number 36 [ 295.658987][ T5828] Bluetooth: hci5: command tx timeout [ 295.914911][ T6094] Unregistered device nBox DVB-T Dongle [ 295.962305][ T6094] as10x_usb: device has been disconnected [ 295.991390][ T1107] bridge_slave_1: left allmulticast mode [ 295.997197][ T1107] bridge_slave_1: left promiscuous mode [ 296.009516][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.043040][ T1107] bridge_slave_0: left allmulticast mode [ 296.061938][ T1107] bridge_slave_0: left promiscuous mode [ 296.073781][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.216873][ T1107] bond1 (unregistering): (slave gretap1): Releasing active interface [ 296.225010][ T1107] gretap1 (unregistering): left allmulticast mode [ 296.340587][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.350310][ T1107] bond_slave_0: left promiscuous mode [ 296.360728][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.372105][ T1107] bond_slave_1: left promiscuous mode [ 296.382262][ T1107] bond0 (unregistering): Released all slaves [ 296.399587][ T1107] bond1 (unregistering): Released all slaves [ 296.430776][ T8331] tipc: Started in network mode [ 296.446410][ T8331] tipc: Node identity 4, cluster identity 4711 [ 296.452922][ T8331] tipc: Node number set to 4 [ 296.460652][ T8327] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 296.783815][ T8344] netlink: 64 bytes leftover after parsing attributes in process `syz.0.633'. [ 297.148221][ T8275] chnl_net:caif_netlink_parms(): no params data found [ 297.232593][ T8352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 297.853621][ T5828] Bluetooth: hci5: command tx timeout [ 298.513357][ T30] audit: type=1400 audit(1766816850.963:395): avc: denied { mount } for pid=8363 comm="syz.0.636" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 298.713648][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.748617][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.765440][ T8275] bridge_slave_0: entered allmulticast mode [ 298.802853][ T8275] bridge_slave_0: entered promiscuous mode [ 298.822559][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.849900][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.865447][ T8275] bridge_slave_1: entered allmulticast mode [ 298.889655][ T8275] bridge_slave_1: entered promiscuous mode [ 299.062273][ T30] audit: type=1400 audit(1766816851.468:396): avc: denied { create } for pid=8379 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.293659][ T8275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.348981][ T8275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.588004][ T1107] hsr_slave_0: left promiscuous mode [ 299.626487][ T1107] hsr_slave_1: left promiscuous mode [ 299.665536][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.713951][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.716860][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.857187][ T1107] veth1_macvtap: left promiscuous mode [ 299.857856][ T1107] veth0_macvtap: left promiscuous mode [ 299.858551][ T1107] veth1_vlan: left promiscuous mode [ 299.859643][ T1107] veth0_vlan: left promiscuous mode [ 300.075312][ T5828] Bluetooth: hci5: command tx timeout [ 300.384623][ T6094] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 300.576694][ T6094] usb 1-1: Using ep0 maxpacket: 16 [ 300.583492][ T6094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 300.595444][ T6094] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.618527][ T6094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.632859][ T6313] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 300.649210][ T6094] usb 1-1: Product: syz [ 300.662371][ T6094] usb 1-1: Manufacturer: syz [ 300.677795][ T6094] usb 1-1: SerialNumber: syz [ 300.704672][ T6094] usb 1-1: config 0 descriptor?? [ 300.743493][ T6094] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 300.777847][ T6094] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 300.790546][ T6313] usb 5-1: device descriptor read/64, error -71 [ 301.389146][ T6313] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 301.955776][ T6313] usb 5-1: device descriptor read/64, error -71 [ 302.188988][ T6094] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 302.307237][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 302.353976][ T6094] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 302.373668][ T6094] em28xx 1-1:0.0: board has no eeprom [ 302.383783][ T6313] usb usb5-port1: attempt power cycle [ 302.397725][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 302.479339][ T6094] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.487783][ T6094] em28xx 1-1:0.0: dvb set to bulk mode. [ 302.497380][ T6078] em28xx 1-1:0.0: Binding DVB extension [ 302.560698][ T6094] usb 1-1: USB disconnect, device number 22 [ 302.572058][ T6094] em28xx 1-1:0.0: Disconnecting em28xx [ 302.633336][ T6078] em28xx 1-1:0.0: Registering input extension [ 302.639778][ T6094] em28xx 1-1:0.0: Closing input extension [ 302.669187][ T6094] em28xx 1-1:0.0: Freeing device [ 302.757670][ T6313] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 302.790075][ T6313] usb 5-1: device descriptor read/8, error -71 [ 302.913163][ T8275] team0: Port device team_slave_0 added [ 302.940444][ T8275] team0: Port device team_slave_1 added [ 303.054535][ T8275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.073233][ T6313] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 303.088982][ T8275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.115333][ T8275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.133650][ T6313] usb 5-1: device descriptor read/8, error -71 [ 303.150403][ T8275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.178085][ T8275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.209539][ T8275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.239795][ T30] audit: type=1400 audit(1766816855.388:397): avc: denied { ioctl } for pid=8414 comm="syz.3.648" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 303.273221][ T6313] usb usb5-port1: unable to enumerate USB device [ 303.308194][ T8275] hsr_slave_0: entered promiscuous mode [ 303.329672][ T8275] hsr_slave_1: entered promiscuous mode [ 303.337286][ T8275] debugfs: 'hsr0' already exists in 'hsr' [ 303.343095][ T8275] Cannot create hsr debugfs directory [ 303.450075][ T8424] usb usb8: usbfs: process 8424 (syz.3.649) did not claim interface 0 before use [ 303.609199][ T8427] usb usb8: usbfs: process 8427 (syz.4.650) did not claim interface 0 before use [ 304.637214][ T5828] Bluetooth: hci4: Malformed LE Event: 0x0d [ 305.009106][ T30] audit: type=1326 audit(1766816857.034:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb4ed8f749 code=0x0 [ 305.048362][ T8440] usb usb8: usbfs: process 8440 (syz.0.651) did not claim interface 0 before use [ 305.760519][ T8275] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 305.763458][ T5828] Bluetooth: hci2: Malformed LE Event: 0x0d [ 306.051391][ T8275] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.092519][ T8275] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.222758][ T8275] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.309809][ T30] audit: type=1400 audit(1766816858.259:399): avc: denied { ioctl } for pid=8451 comm="syz.3.655" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x540b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 306.719888][ T8275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.355165][ T8275] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.384626][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.391771][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.472653][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.479762][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.814363][ T6313] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 307.906639][ T30] audit: type=1400 audit(1766816860.751:400): avc: denied { write } for pid=8488 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 307.998962][ T6313] usb 1-1: device descriptor read/64, error -71 [ 308.263217][ T6313] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 308.423903][ T6313] usb 1-1: device descriptor read/64, error -71 [ 308.596008][ T6313] usb usb1-port1: attempt power cycle [ 308.690249][ T5828] Bluetooth: hci0: Malformed LE Event: 0x0d [ 308.783073][ T8275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.000906][ T6313] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 309.140533][ T6313] usb 1-1: device descriptor read/8, error -71 [ 309.166545][ T8510] netlink: 'syz.4.663': attribute type 21 has an invalid length. [ 309.182590][ T8510] netlink: 128 bytes leftover after parsing attributes in process `syz.4.663'. [ 309.191580][ T8510] netlink: 'syz.4.663': attribute type 5 has an invalid length. [ 309.235921][ T8510] netlink: 'syz.4.663': attribute type 6 has an invalid length. [ 309.257524][ T8510] netlink: 3 bytes leftover after parsing attributes in process `syz.4.663'. [ 309.428676][ T6313] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 309.483025][ T6313] usb 1-1: device descriptor read/8, error -71 [ 309.599954][ T6313] usb usb1-port1: unable to enumerate USB device [ 309.778197][ T8275] veth0_vlan: entered promiscuous mode [ 310.256491][ T8275] veth1_vlan: entered promiscuous mode [ 310.392946][ T8275] veth0_macvtap: entered promiscuous mode [ 310.422137][ T8275] veth1_macvtap: entered promiscuous mode [ 310.472772][ T8275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.501991][ T8275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.586748][ T5979] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.742739][ T8558] netlink: 35 bytes leftover after parsing attributes in process `syz.4.666'. [ 310.752277][ T5979] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.875460][ T8556] netlink: 'syz.4.666': attribute type 4 has an invalid length. [ 310.889832][ T5979] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.944505][ T5979] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.180063][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.200573][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.225113][ T6313] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 311.387807][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.837250][ T6313] usb 1-1: config 194 has too many interfaces: 180, using maximum allowed: 32 [ 311.846295][ T6313] usb 1-1: config 194 has an invalid descriptor of length 89, skipping remainder of the config [ 311.857568][ T6313] usb 1-1: config 194 has 0 interfaces, different from the descriptor's value: 180 [ 311.867208][ T6313] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 311.876246][ T6313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.923839][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.945819][ T30] audit: type=1400 audit(1766816864.530:401): avc: denied { mounton } for pid=8275 comm="syz-executor" path="/root/syzkaller.33G11W/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 311.972129][ T30] audit: type=1400 audit(1766816864.530:402): avc: denied { mounton } for pid=8275 comm="syz-executor" path="/root/syzkaller.33G11W/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 312.028696][ T30] audit: type=1400 audit(1766816864.530:403): avc: denied { mounton } for pid=8275 comm="syz-executor" path="/root/syzkaller.33G11W/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 312.057255][ T30] audit: type=1400 audit(1766816864.587:404): avc: denied { mounton } for pid=8275 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 312.402366][ T8581] IPv6: NLM_F_CREATE should be specified when creating new route [ 312.796283][ T5955] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 312.933575][ T8595] usb usb8: usbfs: process 8595 (syz.4.673) did not claim interface 0 before use [ 312.967357][ T5955] usb 6-1: device descriptor read/64, error -71 [ 313.209794][ T5828] Bluetooth: hci4: Malformed LE Event: 0x0d [ 313.843846][ T5955] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 314.057592][ T5955] usb 6-1: device descriptor read/64, error -71 [ 314.606736][ T5955] usb usb6-port1: attempt power cycle [ 315.019697][ T5955] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 315.084474][ T5955] usb 6-1: device descriptor read/8, error -71 [ 316.278669][ T5955] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 316.559125][ T5955] usb 6-1: device not accepting address 5, error -71 [ 317.412833][ T6313] usb 1-1: string descriptor 0 read error: -32 [ 317.576186][ T5955] usb usb6-port1: unable to enumerate USB device [ 317.667534][ T5920] usb 1-1: USB disconnect, device number 27 [ 317.937300][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 317.948132][ T8643] usb usb8: usbfs: process 8643 (syz.0.684) did not claim interface 0 before use [ 317.948610][ T8641] netlink: 13882 bytes leftover after parsing attributes in process `syz.5.685'. [ 318.242609][ T5828] Bluetooth: hci2: Malformed LE Event: 0x0d [ 319.752260][ T8635] lo speed is unknown, defaulting to 1000 [ 320.683814][ T5920] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 320.921140][ T5920] usb 5-1: device descriptor read/64, error -71 [ 321.100563][ T5955] IPVS: starting estimator thread 0... [ 321.177826][ T5920] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 321.223430][ T8677] IPVS: using max 82 ests per chain, 196800 per kthread [ 321.337847][ T5920] usb 5-1: device descriptor read/64, error -71 [ 321.466404][ T5920] usb usb5-port1: attempt power cycle [ 321.540947][ T5955] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 321.893727][ T5920] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 321.895532][ T5955] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 322.535726][ T5920] usb 5-1: device descriptor read/8, error -71 [ 322.595467][ T5955] usb 6-1: config 0 has no interface number 0 [ 322.605394][ T5955] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 322.617113][ T5955] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.627068][ T5955] usb 6-1: config 0 interface 113 has no altsetting 0 [ 322.636070][ T5955] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 322.645691][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.653706][ T5955] usb 6-1: Product: syz [ 322.658151][ T5955] usb 6-1: Manufacturer: syz [ 322.662738][ T5955] usb 6-1: SerialNumber: syz [ 322.731431][ T5955] usb 6-1: config 0 descriptor?? [ 322.740274][ C1] usb 6-1: NFC: Urb failure (status -71) [ 322.746130][ T5955] usb 6-1: NFC: Unable to get FW version [ 322.756781][ T5955] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 323.332438][ T5920] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 323.606249][ T5920] usb 5-1: device descriptor read/8, error -71 [ 323.722866][ T5920] usb usb5-port1: unable to enumerate USB device [ 323.801536][ T10] usb 6-1: USB disconnect, device number 6 [ 324.090613][ T7262] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 324.147208][ T8707] netlink: 64 bytes leftover after parsing attributes in process `syz.3.700'. [ 324.302357][ T7262] usb 1-1: Using ep0 maxpacket: 16 [ 324.336579][ T7262] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 324.366752][ T7262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.408451][ T7262] usb 1-1: Product: syz [ 324.412629][ T7262] usb 1-1: Manufacturer: syz [ 324.439941][ T30] audit: type=1400 audit(1766816877.215:405): avc: denied { create } for pid=8712 comm="syz.5.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 324.476130][ T7262] usb 1-1: SerialNumber: syz [ 324.497649][ T7262] r8152-cfgselector 1-1: Unknown version 0x0000 [ 324.510128][ T7262] r8152-cfgselector 1-1: config 0 descriptor?? [ 324.519171][ T30] audit: type=1400 audit(1766816877.243:406): avc: denied { getopt } for pid=8712 comm="syz.5.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 324.624443][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.631534][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.726841][ T6313] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 324.756827][ T8722] netlink: 64 bytes leftover after parsing attributes in process `syz.4.704'. [ 324.838302][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 325.166610][ T8729] overlayfs: failed to clone upperpath [ 325.662635][ T10] usb 6-1: device descriptor read/64, error -71 [ 325.715626][ T6313] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 325.749685][ T6313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.786649][ T6313] usb 4-1: Product: syz [ 325.790820][ T6313] usb 4-1: Manufacturer: syz [ 325.859002][ T6313] usb 4-1: SerialNumber: syz [ 325.875631][ T6313] usb 4-1: config 0 descriptor?? [ 325.886909][ T6313] hub 4-1:0.0: bad descriptor, ignoring hub [ 325.893003][ T6313] hub 4-1:0.0: probe with driver hub failed with error -5 [ 325.930683][ T7262] r8152-cfgselector 1-1: USB disconnect, device number 28 [ 325.937946][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 326.113849][ T8715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.122333][ T8715] batadv_slave_0: entered promiscuous mode [ 326.127203][ T10] usb 6-1: device descriptor read/64, error -71 [ 326.142063][ T6313] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 326.143687][ T8733] lo speed is unknown, defaulting to 1000 [ 326.174957][ T6313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.191021][ T6313] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 326.199903][ T6313] usb 4-1: media controller created [ 326.217382][ T6313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.256632][ T10] usb usb6-port1: attempt power cycle [ 326.313486][ T6313] DVB: Unable to find symbol dib7000p_attach() [ 326.332009][ T6313] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 326.437252][ T6313] rc_core: IR keymap rc-dib0700-rc5 not found [ 326.449215][ T6313] Registered IR keymap rc-empty [ 326.458792][ T6313] dvb-usb: could not initialize remote control. [ 326.473858][ T6313] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 326.652258][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 326.705218][ T10] usb 6-1: device descriptor read/8, error -71 [ 327.371430][ T8766] netlink: 64 bytes leftover after parsing attributes in process `syz.4.710'. [ 327.592582][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 327.651153][ T10] usb 6-1: device descriptor read/8, error -71 [ 327.908628][ T10] usb usb6-port1: unable to enumerate USB device [ 328.294529][ T8790] program syz.0.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.690960][ T8787] netlink: 'syz.4.714': attribute type 4 has an invalid length. [ 328.794627][ T8795] program syz.0.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.795220][ T8796] syz.0.716 (8796): /proc/8796/oom_adj is deprecated, please use /proc/8796/oom_score_adj instead. [ 328.911431][ T8795] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 328.973007][ T8790] lo: entered allmulticast mode [ 328.991561][ T8790] tunl0: entered allmulticast mode [ 329.037641][ T8790] gre0: entered allmulticast mode [ 329.111664][ T8790] gretap0: entered allmulticast mode [ 329.152114][ T8790] erspan0: entered allmulticast mode [ 329.187466][ T30] audit: type=1400 audit(1766816881.658:407): avc: denied { mounton } for pid=8802 comm="syz.1.717" path="/200/file0" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 329.300172][ T8790] ip_vti0: entered allmulticast mode [ 329.322597][ T8790] ip6_vti0: entered allmulticast mode [ 329.366199][ T8790] sit0: entered allmulticast mode [ 329.397551][ T8790] ip6tnl0: entered allmulticast mode [ 329.443417][ T8790] ip6gre0: entered allmulticast mode [ 329.506694][ T8790] syz_tun: entered allmulticast mode [ 329.710648][ T8790] ip6gretap0: entered allmulticast mode [ 329.733135][ T8790] vcan0: entered allmulticast mode [ 329.754322][ T8790] bond0: entered allmulticast mode [ 330.315509][ T8790] bond_slave_0: entered allmulticast mode [ 330.371410][ T8790] bond_slave_1: entered allmulticast mode [ 330.461583][ T8790] team0: entered allmulticast mode [ 330.466965][ T8790] team_slave_0: entered allmulticast mode [ 330.543446][ T8790] team_slave_1: entered allmulticast mode [ 330.647123][ T8790] dummy0: entered allmulticast mode [ 330.736275][ T8790] nlmon0: entered allmulticast mode [ 330.768595][ T8790] caif0: entered allmulticast mode [ 330.785850][ T8790] batadv0: entered allmulticast mode [ 330.804017][ T8790] vxcan0: entered allmulticast mode [ 330.820664][ T8790] vxcan1: entered allmulticast mode [ 330.827450][ T8790] veth0: entered allmulticast mode [ 330.835603][ T8790] veth1: entered allmulticast mode [ 330.845953][ T8790] wg0: entered allmulticast mode [ 330.855631][ T8790] wg1: entered allmulticast mode [ 330.866088][ T8827] netlink: 'syz.4.721': attribute type 1 has an invalid length. [ 330.875463][ T8790] wg2: entered allmulticast mode [ 330.883255][ T8790] veth0_to_bridge: entered allmulticast mode [ 330.893434][ T8790] bridge_slave_0: entered allmulticast mode [ 330.902018][ T8790] veth1_to_bridge: entered allmulticast mode [ 330.913087][ T8790] bridge_slave_1: entered allmulticast mode [ 330.921641][ T8790] veth0_to_bond: entered allmulticast mode [ 330.932677][ T8790] veth1_to_bond: entered allmulticast mode [ 330.943743][ T8790] veth0_to_team: entered allmulticast mode [ 330.948680][ T5922] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 330.955311][ T8790] veth1_to_team: entered allmulticast mode [ 330.971762][ T8790] veth0_to_batadv: entered allmulticast mode [ 330.981147][ T8790] batadv_slave_0: left promiscuous mode [ 330.986737][ T8790] batadv_slave_0: entered allmulticast mode [ 330.995244][ T8790] veth1_to_batadv: entered allmulticast mode [ 331.003056][ T8790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.010782][ T8790] batadv_slave_1: entered allmulticast mode [ 331.019737][ T8790] xfrm0: entered allmulticast mode [ 331.026909][ T8790] veth0_to_hsr: entered allmulticast mode [ 331.034062][ T8790] hsr_slave_0: entered allmulticast mode [ 331.041487][ T8790] veth1_to_hsr: entered allmulticast mode [ 331.050037][ T8790] hsr_slave_1: entered allmulticast mode [ 331.057938][ T8790] hsr0: entered allmulticast mode [ 331.064676][ T8790] veth1_virt_wifi: entered allmulticast mode [ 331.074056][ T8790] veth0_virt_wifi: entered allmulticast mode [ 331.081496][ T8790] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 331.089417][ T8790] veth1_vlan: entered allmulticast mode [ 331.096482][ T8790] veth0_vlan: entered allmulticast mode [ 331.107851][ T8790] vlan0: entered allmulticast mode [ 331.113881][ T8790] vlan1: entered allmulticast mode [ 331.119423][ T8790] macvlan0: entered allmulticast mode [ 331.130909][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 331.136188][ T8790] macvlan1: entered allmulticast mode [ 331.148337][ T8790] ipvlan0: entered allmulticast mode [ 331.151192][ T5922] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 331.153966][ T8790] ipvlan1: entered allmulticast mode [ 331.168457][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.176584][ T5922] usb 6-1: Product: syz [ 331.176647][ T8790] veth1_macvtap: entered allmulticast mode [ 331.188854][ T5922] usb 6-1: Manufacturer: syz [ 331.193587][ T5922] usb 6-1: SerialNumber: syz [ 331.199156][ T8790] veth0_macvtap: entered allmulticast mode [ 331.209673][ T8790] macvtap0: entered allmulticast mode [ 331.210319][ T5922] r8152-cfgselector 6-1: Unknown version 0x0000 [ 331.225279][ T5922] r8152-cfgselector 6-1: config 0 descriptor?? [ 331.227974][ T8790] macsec0: entered allmulticast mode [ 331.241621][ T8790] geneve0: entered allmulticast mode [ 331.250500][ T8790] geneve1: entered allmulticast mode [ 331.263934][ T8790] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 331.277258][ T8790] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 331.288033][ T8790] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 331.299029][ T8790] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 331.317015][ T8790] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 331.331500][ T8790] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 331.341069][ T8790] vxlan0: entered allmulticast mode [ 331.352145][ T8790] ip6gre1: left promiscuous mode [ 331.377132][ T6094] syz1: Port: 1 Link DOWN [ 331.462830][ T8827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.611267][ T8828] bond1: (slave veth3): Enslaving as an active interface with a down link [ 331.627597][ T8829] bond1: (slave veth0_to_bond): making interface the new active one [ 331.636894][ T8829] veth0_to_bond: entered promiscuous mode [ 331.642870][ T8829] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 332.137153][ T6094] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 332.150341][ T6196] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.170000][ T6196] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.193441][ T6196] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.207022][ T6196] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.228190][ T6196] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.273370][ T6196] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.294355][ T6196] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.317693][ T6196] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.504804][ T8843] netlink: 64 bytes leftover after parsing attributes in process `syz.1.724'. [ 333.117857][ T44] usb 4-1: USB disconnect, device number 19 [ 333.139197][ T30] audit: type=1400 audit(1766816885.353:408): avc: denied { setopt } for pid=8847 comm="syz.0.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 333.183635][ T8848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8848 comm=syz.0.725 [ 333.199537][ T5828] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 333.382307][ T44] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 333.821202][ T5922] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 333.856577][ T30] audit: type=1400 audit(1766816886.017:409): avc: denied { lock } for pid=8859 comm="syz.1.728" path="socket:[22842]" dev="sockfs" ino=22842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 334.145440][ T934] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 334.169037][ T5922] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 334.177040][ T5922] usb 1-1: config 0 has no interface number 0 [ 334.183182][ T5922] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.195415][ T5922] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 334.207107][ T5922] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 334.221570][ T5922] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 334.230613][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 334.244609][ T30] audit: type=1400 audit(1766816886.391:410): avc: denied { getopt } for pid=8859 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.251732][ T5922] usb 1-1: Product: syz [ 334.270038][ T5922] usb 1-1: SerialNumber: syz [ 334.294898][ T934] usb 5-1: device descriptor read/64, error -71 [ 334.301642][ T5922] usb 1-1: config 0 descriptor?? [ 334.321149][ T5922] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 334.340171][ T5922] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input14 [ 334.409603][ T30] audit: type=1400 audit(1766816886.541:411): avc: denied { read } for pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=3927 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.559574][ T8879] netlink: 35 bytes leftover after parsing attributes in process `syz.3.730'. [ 334.575282][ T30] audit: type=1400 audit(1766816886.541:412): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3927 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.641561][ T8879] netlink: 'syz.3.730': attribute type 4 has an invalid length. [ 334.677018][ T7262] lo speed is unknown, defaulting to 1000 [ 334.683365][ T7262] syz0: Port: 1 Link DOWN [ 334.684154][ T934] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 334.697090][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.702068][ T7262] usb 1-1: USB disconnect, device number 29 [ 334.704193][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 334.732331][ T7262] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 334.743872][ T30] audit: type=1400 audit(1766816886.541:413): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3927 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.850837][ T934] usb 5-1: device descriptor read/64, error -71 [ 334.980995][ T934] usb usb5-port1: attempt power cycle [ 335.256975][ T8884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.731'. [ 335.312263][ T8884] overlayfs: failed to clone upperpath [ 335.406829][ T934] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 335.670002][ T934] usb 5-1: device descriptor read/8, error -71 [ 336.552411][ T934] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 336.583986][ T934] usb 5-1: device descriptor read/8, error -71 [ 336.710675][ T934] usb usb5-port1: unable to enumerate USB device [ 337.230476][ T8909] macsec1: entered promiscuous mode [ 337.769161][ T30] audit: type=1400 audit(1766816889.684:414): avc: denied { ioctl } for pid=8911 comm="syz.0.741" path="socket:[23555]" dev="sockfs" ino=23555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 337.862798][ T30] audit: type=1400 audit(1766816889.721:415): avc: denied { read } for pid=8911 comm="syz.0.741" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 337.889093][ T30] audit: type=1400 audit(1766816889.721:416): avc: denied { open } for pid=8911 comm="syz.0.741" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 337.918338][ T8910] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 337.927812][ T8910] team0: Port device batadv1 added [ 338.459837][ T5947] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 338.507277][ T30] audit: type=1400 audit(1766816889.721:417): avc: denied { ioctl } for pid=8911 comm="syz.0.741" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 338.534670][ T30] audit: type=1400 audit(1766816889.768:418): avc: denied { ioctl } for pid=8913 comm="syz.0.742" path="socket:[23566]" dev="sockfs" ino=23566 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 338.679422][ T5947] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 338.690809][ T5947] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 338.770277][ T5947] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 338.793136][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.852605][ T8915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 338.868763][ T5947] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.201697][ T8928] netlink: 64 bytes leftover after parsing attributes in process `syz.3.744'. [ 339.593838][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.745'. [ 339.989737][ T5828] Bluetooth: hci5: unexpected event 0x09 length: 6 > 3 [ 340.260271][ T5947] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 340.447090][ T8915] netlink: 14 bytes leftover after parsing attributes in process `syz.0.742'. [ 340.485137][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 340.505491][ T5947] usb 4-1: no configurations [ 340.512867][ T5947] usb 4-1: can't read configurations, error -22 [ 340.679883][ T5947] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 340.869554][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 340.881073][ T5947] usb 4-1: no configurations [ 340.893450][ T5947] usb 4-1: can't read configurations, error -22 [ 340.912728][ T5947] usb usb4-port1: attempt power cycle [ 341.216637][ T8956] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 341.233030][ T30] audit: type=1400 audit(1766816892.921:419): avc: denied { create } for pid=8952 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 341.371074][ T5947] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 341.404848][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 341.410496][ T5947] usb 4-1: no configurations [ 341.416340][ T5947] usb 4-1: can't read configurations, error -22 [ 341.504140][ T30] audit: type=1400 audit(1766816893.182:420): avc: denied { read } for pid=8957 comm="syz.0.753" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 341.564507][ T5947] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 341.595404][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 341.601075][ T5947] usb 4-1: no configurations [ 341.612718][ T5947] usb 4-1: can't read configurations, error -22 [ 341.641650][ T5947] usb usb4-port1: unable to enumerate USB device [ 341.709812][ T8958] netlink: 'syz.0.753': attribute type 2 has an invalid length. [ 341.855525][ T8958] !9: entered promiscuous mode [ 343.048757][ T8970] block device autoloading is deprecated and will be removed. [ 343.766181][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.756'. [ 344.435247][ T30] audit: type=1400 audit(1766816895.923:421): avc: denied { append } for pid=8981 comm="syz.5.760" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 344.459533][ T30] audit: type=1400 audit(1766816895.923:422): avc: denied { bind } for pid=8981 comm="syz.5.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 344.798771][ T8983] netlink: 64 bytes leftover after parsing attributes in process `syz.0.758'. [ 344.999688][ T8988] binder: Bad value for 'max' [ 345.131672][ T30] audit: type=1400 audit(1766816896.559:423): avc: denied { ioctl } for pid=8987 comm="syz.3.761" path="socket:[23746]" dev="sockfs" ino=23746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.360633][ T30] audit: type=1400 audit(1766816896.559:424): avc: denied { connect } for pid=8987 comm="syz.3.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.997033][ T30] audit: type=1400 audit(1766816896.559:425): avc: denied { write } for pid=8987 comm="syz.3.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 346.079240][ T7262] usb 1-1: USB disconnect, device number 30 [ 346.343983][ T5947] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 346.728017][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 346.785457][ T5947] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 346.827996][ T5947] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.859934][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.899180][ T5947] usb 4-1: Product: syz [ 346.935940][ T5947] usb 4-1: Manufacturer: syz [ 346.940527][ T5947] usb 4-1: SerialNumber: syz [ 347.236519][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.297610][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.358197][ T5947] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 347.547303][ T5947] usb 4-1: USB disconnect, device number 24 [ 347.810168][ T7799] udevd[7799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.893167][ T30] audit: type=1400 audit(1766816899.150:426): avc: denied { connect } for pid=9008 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 348.720207][ T1107] veth0_to_bond: left promiscuous mode [ 348.785747][ T9014] Mount JFS Failure: -22 [ 348.790071][ T9014] jfs_mount failed w/return code = -22 [ 349.935972][ T9028] netlink: 64 bytes leftover after parsing attributes in process `syz.5.772'. [ 350.080687][ T9029] usb usb8: usbfs: process 9029 (syz.4.773) did not claim interface 0 before use [ 350.272512][ T5828] Bluetooth: hci4: Malformed LE Event: 0x0d [ 350.605509][ T9038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.771'. [ 350.636889][ T9038] overlayfs: failed to clone upperpath [ 351.006404][ T9040] netlink: zone id is out of range [ 351.015305][ T9040] netlink: zone id is out of range [ 351.026292][ T9040] netlink: zone id is out of range [ 351.461365][ T9040] netlink: zone id is out of range [ 351.473599][ T9040] netlink: zone id is out of range [ 351.484533][ T9040] netlink: zone id is out of range [ 351.489900][ T9040] netlink: zone id is out of range [ 351.496542][ T9040] netlink: zone id is out of range [ 351.501688][ T9040] netlink: zone id is out of range [ 351.507380][ T9040] netlink: zone id is out of range [ 351.541260][ T9042] netlink: 64 bytes leftover after parsing attributes in process `syz.3.776'. [ 352.322453][ T30] audit: type=1400 audit(1766816903.303:427): avc: denied { bind } for pid=9050 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.361863][ T9055] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 352.363258][ T9051] IPVS: stopping master sync thread 9055 ... [ 352.682823][ T44] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 352.797133][ T9064] netlink: 64 bytes leftover after parsing attributes in process `syz.5.782'. [ 353.111227][ T30] audit: type=1400 audit(1766816904.033:428): avc: denied { getopt } for pid=9066 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.146335][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 353.164912][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.219571][ T30] audit: type=1400 audit(1766816904.042:429): avc: denied { shutdown } for pid=9066 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.222483][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.308984][ T30] audit: type=1400 audit(1766816904.061:430): avc: denied { module_request } for pid=9065 comm="syz.0.785" kmod=7463705FB8FACE10D938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 353.400800][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.470297][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.497283][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.530689][ T44] usb 4-1: config 0 descriptor?? [ 353.773152][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.789'. [ 353.806181][ T9085] overlayfs: failed to clone upperpath [ 354.109431][ T30] audit: type=1400 audit(1766816904.968:431): avc: denied { read } for pid=9087 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 354.214174][ T9091] afs: Unknown parameter 'flo:ck' [ 354.300623][ T44] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 354.307924][ T44] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 354.315198][ T44] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 354.325348][ T44] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 354.333101][ T44] microsoft 0003:045E:07DA.0003: item fetching failed at offset 33/34 [ 354.342218][ T44] microsoft 0003:045E:07DA.0003: parse failed [ 354.348890][ T44] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 354.556037][ T5947] usb 4-1: USB disconnect, device number 25 [ 354.610504][ T9104] netlink: 64 bytes leftover after parsing attributes in process `syz.1.796'. [ 354.875630][ T9109] netlink: 64 bytes leftover after parsing attributes in process `syz.4.797'. [ 355.421327][ T30] audit: type=1400 audit(1766816906.203:432): avc: denied { setopt } for pid=9120 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 355.442435][ T9122] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 355.618761][ T44] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 355.743756][ T9130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.806'. [ 355.884789][ T44] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 356.112759][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 356.142680][ T44] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 356.156175][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 356.164499][ T44] usb 5-1: Product: syz [ 356.168979][ T44] usb 5-1: Manufacturer: syz [ 356.173816][ T44] usb 5-1: SerialNumber: syz [ 356.175624][ T9133] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 356.180960][ T44] usb 5-1: config 0 descriptor?? [ 356.225122][ T6076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.233802][ T6076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.881048][ T44] usb 5-1: Firmware version (0.0) predates our first public release. [ 356.906879][ T44] usb 5-1: Please update to version 0.2 or newer [ 356.934735][ T44] usb 5-1: Firmware: build [ 358.668214][ T44] usb 5-1: USB disconnect, device number 49 [ 359.293485][ T9178] netlink: 64 bytes leftover after parsing attributes in process `syz.1.820'. [ 359.342946][ T9180] netlink: 64 bytes leftover after parsing attributes in process `syz.1.822'. [ 359.657239][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.821'. [ 361.456624][ T9205] netlink: 'syz.1.828': attribute type 29 has an invalid length. [ 361.517211][ T9206] netlink: 'syz.1.828': attribute type 29 has an invalid length. [ 362.721006][ T9218] usb usb8: usbfs: process 9218 (syz.0.833) did not claim interface 0 before use [ 363.134626][ T5828] Bluetooth: hci2: Malformed LE Event: 0x0d [ 363.707947][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.5.837'. [ 364.877177][ T9252] syz1: rxe_newlink: already configured on syz_tun [ 367.600016][ T30] audit: type=1400 audit(1766816917.568:433): avc: denied { connect } for pid=9267 comm="syz.3.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 367.826734][ T30] audit: type=1400 audit(1766816917.802:434): avc: denied { create } for pid=9271 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 368.226844][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 368.996698][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 369.070473][ T9291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.851'. [ 369.344858][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 369.361150][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.369539][ T10] usb 4-1: Product: syz [ 369.376873][ T10] usb 4-1: Manufacturer: syz [ 369.390668][ T10] usb 4-1: SerialNumber: syz [ 369.403456][ T10] usb 4-1: config 0 descriptor?? [ 369.612119][ T9295] mkiss: ax0: crc mode is auto. [ 369.655548][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 369.666714][ T30] audit: type=1400 audit(1766816919.523:435): avc: denied { read } for pid=9267 comm="syz.3.845" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 369.702898][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 369.716400][ T30] audit: type=1400 audit(1766816919.551:436): avc: denied { open } for pid=9267 comm="syz.3.845" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 369.747761][ T10] usb 4-1: USB disconnect, device number 26 [ 369.755608][ T30] audit: type=1400 audit(1766816919.551:437): avc: denied { append } for pid=9267 comm="syz.3.845" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 371.005962][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 371.040244][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 371.476966][ T934] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 371.499561][ T9323] netlink: 64 bytes leftover after parsing attributes in process `syz.3.861'. [ 371.701553][ T934] usb 5-1: Using ep0 maxpacket: 8 [ 371.732488][ T934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.823816][ T934] usb 5-1: config 0 has no interfaces? [ 371.919844][ T934] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 371.941759][ T934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.972179][ T934] usb 5-1: config 0 descriptor?? [ 372.396219][ T6078] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 372.458573][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.866'. [ 372.907676][ T6078] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 373.010799][ T6078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.022417][ T6078] usb 4-1: Product: syz [ 373.026738][ T9342] serio: Serial port ttyS3 [ 373.031484][ T6078] usb 4-1: Manufacturer: syz [ 373.036130][ T6078] usb 4-1: SerialNumber: syz [ 373.047689][ T6078] usb 4-1: config 0 descriptor?? [ 373.057806][ T6078] hub 4-1:0.0: bad descriptor, ignoring hub [ 373.067089][ T6078] hub 4-1:0.0: probe with driver hub failed with error -5 [ 373.484741][ T9348] Can't find ip_set type h [ 373.489842][ T9346] Can't find ip_set type h [ 373.658088][ T9354] netlink: 64 bytes leftover after parsing attributes in process `syz.1.870'. [ 373.683581][ T6078] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 373.741628][ T6078] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 373.776508][ T6078] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 373.784961][ T6078] usb 4-1: media controller created [ 373.812696][ T6078] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.914689][ T9362] netlink: 64 bytes leftover after parsing attributes in process `syz.1.873'. [ 374.379920][ T30] audit: type=1400 audit(1766816923.611:438): avc: denied { create } for pid=9359 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 374.423052][ T30] audit: type=1400 audit(1766816923.620:439): avc: denied { setopt } for pid=9359 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 374.443276][ T9369] i2c i2c-1: Invalid block size returned: 239 [ 374.505125][ T6078] DVB: Unable to find symbol dib7000p_attach() [ 374.511269][ T6078] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 374.986874][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 375.019371][ T934] usb 5-1: USB disconnect, device number 50 [ 375.060372][ T9378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.875'. [ 375.079701][ T6078] rc_core: IR keymap rc-dib0700-rc5 not found [ 375.085777][ T6078] Registered IR keymap rc-empty [ 375.105747][ T6078] dvb-usb: could not initialize remote control. [ 375.122087][ T9380] netlink: 48 bytes leftover after parsing attributes in process `syz.4.877'. [ 375.127153][ T6078] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 375.175983][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 375.198957][ T6078] usb 4-1: USB disconnect, device number 27 [ 375.205770][ T10] usb 1-1: config 222 has an invalid interface number: 80 but max is 0 [ 375.227362][ T10] usb 1-1: config 222 has no interface number 0 [ 375.238873][ T10] usb 1-1: too many endpoints for config 222 interface 80 altsetting 75: 92, using maximum allowed: 30 [ 375.252257][ T10] usb 1-1: config 222 interface 80 altsetting 75 has 0 endpoint descriptors, different from the interface descriptor's value: 92 [ 375.269314][ T10] usb 1-1: config 222 interface 80 has no altsetting 0 [ 375.269892][ T6078] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 375.322083][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 375.393916][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.405692][ T10] usb 1-1: Product: syz [ 375.496590][ T10] usb 1-1: Manufacturer: syz [ 375.503041][ T10] usb 1-1: SerialNumber: syz [ 375.521497][ T30] audit: type=1400 audit(1766816925.005:440): avc: denied { read } for pid=9385 comm="syz.4.879" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 375.623304][ T30] audit: type=1400 audit(1766816925.005:441): avc: denied { ioctl } for pid=9359 comm="syz.0.871" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.822747][ T30] audit: type=1400 audit(1766816925.005:442): avc: denied { open } for pid=9385 comm="syz.4.879" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 375.853371][ T30] audit: type=1400 audit(1766816925.042:443): avc: denied { ioctl } for pid=9385 comm="syz.4.879" path="/dev/sg0" dev="devtmpfs" ino=753 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 375.879442][ T30] audit: type=1400 audit(1766816925.052:444): avc: denied { ioctl } for pid=9385 comm="syz.4.879" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25045 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 376.152651][ T30] audit: type=1400 audit(1766816925.070:445): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.652970][ T30] audit: type=1400 audit(1766816925.070:446): avc: denied { open } for pid=5810 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.727763][ T30] audit: type=1400 audit(1766816925.070:447): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.739294][ T9397] Can't find ip_set type h [ 377.012234][ T10] usb 1-1: USB disconnect, device number 31 [ 377.241020][ T9424] netlink: 'syz.5.885': attribute type 4 has an invalid length. [ 377.982451][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 378.832399][ T7262] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 379.644076][ T7262] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 379.686023][ T7262] usb 1-1: config 0 has no interface number 0 [ 379.717491][ T7262] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 379.749784][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 379.749798][ T30] audit: type=1400 audit(1766816928.952:509): avc: denied { mount } for pid=9442 comm="syz.1.892" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 379.796337][ T7262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.826309][ T7262] usb 1-1: config 0 descriptor?? [ 379.847515][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 379.867414][ T7262] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 380.045668][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 380.076540][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.125063][ T10] usb 4-1: Product: syz [ 380.151926][ T10] usb 4-1: Manufacturer: syz [ 380.180989][ T10] usb 4-1: SerialNumber: syz [ 380.230461][ T10] usb 4-1: config 0 descriptor?? [ 380.275050][ T30] audit: type=1400 audit(1766816929.420:510): avc: denied { mount } for pid=9447 comm="syz.1.895" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 380.335646][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 380.360262][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 380.426497][ T30] audit: type=1400 audit(1766816929.579:511): avc: denied { create } for pid=9450 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 380.822497][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 380.878326][ T30] audit: type=1400 audit(1766816929.579:512): avc: denied { setopt } for pid=9450 comm="syz.1.896" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 380.899842][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.930422][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 380.946065][ T10] usb 4-1: media controller created [ 380.953583][ T30] audit: type=1400 audit(1766816929.990:513): avc: denied { allowed } for pid=9432 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 381.076873][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.101360][ T30] audit: type=1400 audit(1766816930.084:514): avc: denied { sqpoll } for pid=9432 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 381.135958][ T30] audit: type=1400 audit(1766816930.112:515): avc: denied { map } for pid=9432 comm="syz.0.889" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 381.243513][ T30] audit: type=1400 audit(1766816930.112:516): avc: denied { read write } for pid=9432 comm="syz.0.889" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 381.429810][ T30] audit: type=1400 audit(1766816930.318:517): avc: denied { append } for pid=9441 comm="syz.3.893" name="i2c-1" dev="devtmpfs" ino=4112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 381.452703][ T30] audit: type=1400 audit(1766816930.337:518): avc: denied { create } for pid=9464 comm="syz.5.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 381.742641][ T10] DVB: Unable to find symbol dib7000p_attach() [ 381.748936][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 381.943004][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 381.962438][ T10] Registered IR keymap rc-empty [ 382.266671][ T5828] Bluetooth: hci0: Malformed LE Event: 0x0d [ 382.357768][ T7262] usb 1-1: USB disconnect, device number 32 [ 382.446486][ T9478] netlink: 68 bytes leftover after parsing attributes in process `syz.4.899'. [ 383.537015][ T9486] netlink: 64 bytes leftover after parsing attributes in process `syz.1.904'. [ 386.701011][ T10] dvb-usb: could not initialize remote control. [ 386.734251][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 387.063519][ T10] usb 4-1: USB disconnect, device number 28 [ 387.234176][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 387.911705][ T9517] netlink: 64 bytes leftover after parsing attributes in process `syz.5.909'. [ 387.972518][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 387.972556][ T30] audit: type=1400 audit(1766816936.613:532): avc: denied { write } for pid=9514 comm="syz.5.909" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 388.323670][ T30] audit: type=1400 audit(1766816936.969:533): avc: denied { read write } for pid=9522 comm="syz.3.912" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 388.459383][ T9525] netlink: 68 bytes leftover after parsing attributes in process `syz.0.910'. [ 388.802571][ T30] audit: type=1400 audit(1766816937.015:534): avc: denied { open } for pid=9522 comm="syz.3.912" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 388.906380][ T30] audit: type=1400 audit(1766816937.520:535): avc: denied { write } for pid=9522 comm="syz.3.912" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 389.534333][ T9534] netlink: 'syz.5.914': attribute type 1 has an invalid length. [ 389.881542][ T30] audit: type=1400 audit(1766816938.428:536): avc: denied { getopt } for pid=9520 comm="syz.1.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 389.901482][ T30] audit: type=1400 audit(1766816938.456:537): avc: denied { write } for pid=9520 comm="syz.1.911" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 390.093918][ T9540] netlink: 64 bytes leftover after parsing attributes in process `syz.4.915'. [ 390.300127][ T30] audit: type=1400 audit(1766816938.821:538): avc: denied { ioctl } for pid=9529 comm="syz.0.913" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 390.328555][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.334852][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.399980][ T30] audit: type=1400 audit(1766816938.914:539): avc: denied { map } for pid=9542 comm="syz.3.916" path="socket:[25269]" dev="sockfs" ino=25269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 390.741772][ T30] audit: type=1400 audit(1766816938.914:540): avc: denied { read accept } for pid=9542 comm="syz.3.916" path="socket:[25269]" dev="sockfs" ino=25269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 390.803699][ T30] audit: type=1400 audit(1766816938.961:541): avc: denied { create } for pid=9544 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 391.023359][ T9558] usb usb8: usbfs: process 9558 (syz.3.921) did not claim interface 0 before use [ 391.422397][ T9570] netlink: 68 bytes leftover after parsing attributes in process `syz.1.922'. [ 391.594174][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 392.323475][ T934] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 393.377500][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 393.377518][ T30] audit: type=1326 audit(1766816941.692:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f844f12b829 code=0x7ffc0000 [ 393.692058][ T30] audit: type=1326 audit(1766816941.692:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f844f12b829 code=0x7ffc0000 [ 394.732508][ T9605] FAULT_INJECTION: forcing a failure. [ 394.732508][ T9605] name failslab, interval 1, probability 0, space 0, times 0 [ 394.793186][ T9605] CPU: 0 UID: 0 PID: 9605 Comm: syz.5.933 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.793216][ T9605] Tainted: [L]=SOFTLOCKUP [ 394.793223][ T9605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.793233][ T9605] Call Trace: [ 394.793239][ T9605] [ 394.793247][ T9605] dump_stack_lvl+0x16c/0x1f0 [ 394.793275][ T9605] should_fail_ex+0x512/0x640 [ 394.793303][ T9605] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 394.793328][ T9605] should_failslab+0xc2/0x120 [ 394.793352][ T9605] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 394.793376][ T9605] ? __kthread_create_on_node+0x186/0x3f0 [ 394.793401][ T9605] ? kvasprintf+0xbc/0x150 [ 394.793427][ T9605] kvasprintf+0xbc/0x150 [ 394.793454][ T9605] ? __pfx_kvasprintf+0x10/0x10 [ 394.793488][ T9605] ? __pfx_batadv_tp_send+0x10/0x10 [ 394.793514][ T9605] __kthread_create_on_node+0x186/0x3f0 [ 394.793535][ T9605] ? __pfx___kthread_create_on_node+0x10/0x10 [ 394.793559][ T9605] ? perf_trace_local_sdata_chanctx+0x9f0/0x1410 [ 394.793584][ T9605] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 394.793606][ T9605] ? __debug_object_init+0x2de/0x3d0 [ 394.793626][ T9605] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 394.793649][ T9605] ? __pfx_batadv_tp_send+0x10/0x10 [ 394.793676][ T9605] kthread_create_on_node+0xc7/0x100 [ 394.793695][ T9605] ? __pfx_kthread_create_on_node+0x10/0x10 [ 394.793722][ T9605] ? lockdep_init_map_type+0x5c/0x270 [ 394.793750][ T9605] batadv_tp_start+0xb87/0xfc0 [ 394.793777][ T9605] ? __pfx_batadv_tp_start+0x10/0x10 [ 394.793803][ T9605] ? __nlmsg_put+0x152/0x1c0 [ 394.793824][ T9605] ? genlmsg_put+0x258/0x2d0 [ 394.793850][ T9605] batadv_netlink_tp_meter_start+0x20d/0x4b0 [ 394.793871][ T9605] ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10 [ 394.793892][ T9605] ? dev_get_by_index+0x186/0x380 [ 394.793910][ T9605] ? batadv_meshif_is_valid+0xd/0x70 [ 394.793936][ T9605] ? batadv_pre_doit+0x119/0x6a0 [ 394.793956][ T9605] genl_family_rcv_msg_doit+0x209/0x2f0 [ 394.793984][ T9605] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 394.794018][ T9605] ? bpf_lsm_capable+0x9/0x10 [ 394.794038][ T9605] ? security_capable+0x7e/0x260 [ 394.794057][ T9605] ? ns_capable+0xd7/0x110 [ 394.794084][ T9605] genl_rcv_msg+0x55c/0x800 [ 394.794117][ T9605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.794142][ T9605] ? __pfx_batadv_pre_doit+0x10/0x10 [ 394.794158][ T9605] ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10 [ 394.794176][ T9605] ? __pfx_batadv_post_doit+0x10/0x10 [ 394.794201][ T9605] netlink_rcv_skb+0x158/0x420 [ 394.794222][ T9605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.794249][ T9605] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.794283][ T9605] ? netlink_deliver_tap+0x1ae/0xd30 [ 394.794308][ T9605] genl_rcv+0x28/0x40 [ 394.794329][ T9605] netlink_unicast+0x5aa/0x870 [ 394.794353][ T9605] ? __pfx_netlink_unicast+0x10/0x10 [ 394.794385][ T9605] netlink_sendmsg+0x8c8/0xdd0 [ 394.794412][ T9605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.794444][ T9605] ____sys_sendmsg+0xa5d/0xc30 [ 394.794469][ T9605] ? copy_msghdr_from_user+0x10a/0x160 [ 394.794486][ T9605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.794521][ T9605] ___sys_sendmsg+0x134/0x1d0 [ 394.794541][ T9605] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.794592][ T9605] __sys_sendmsg+0x16d/0x220 [ 394.794610][ T9605] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.794643][ T9605] do_syscall_64+0xcd/0xf80 [ 394.794669][ T9605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.794687][ T9605] RIP: 0033:0x7f9959b8f749 [ 394.794702][ T9605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.794719][ T9605] RSP: 002b:00007f995aa6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.794736][ T9605] RAX: ffffffffffffffda RBX: 00007f9959de5fa0 RCX: 00007f9959b8f749 [ 394.794748][ T9605] RDX: 0000000020000884 RSI: 0000200000003140 RDI: 0000000000000005 [ 394.794759][ T9605] RBP: 00007f995aa6f090 R08: 0000000000000000 R09: 0000000000000000 [ 394.794769][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.794779][ T9605] R13: 00007f9959de6038 R14: 00007f9959de5fa0 R15: 00007ffe76e53678 [ 394.794804][ T9605] [ 394.794826][ T9605] batman_adv: batadv: cannot create tp meter kthread [ 394.878553][ T30] audit: type=1326 audit(1766816941.739:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f844f12b829 code=0x7ffc0000 [ 395.378147][ T30] audit: type=1326 audit(1766816941.739:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844f18f749 code=0x7ffc0000 [ 395.401590][ T30] audit: type=1326 audit(1766816941.776:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f844f12b829 code=0x7ffc0000 [ 395.521391][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 395.623699][ T30] audit: type=1326 audit(1766816941.776:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844f18f749 code=0x7ffc0000 [ 395.662319][ T30] audit: type=1400 audit(1766816941.776:664): avc: denied { connect } for pid=9590 comm="syz.4.931" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 396.200785][ T30] audit: type=1326 audit(1766816941.814:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f844f12b829 code=0x7ffc0000 [ 396.311971][ T30] audit: type=1326 audit(1766816941.814:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844f18f749 code=0x7ffc0000 [ 396.685352][ T30] audit: type=1326 audit(1766816941.823:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f844f12b829 code=0x7ffc0000 [ 397.726168][ T9631] comedi comedi0: Minor 3 specified more than once! [ 398.062857][ T9642] overlayfs: failed to clone upperpath [ 399.222214][ T9624] lo speed is unknown, defaulting to 1000 [ 399.327291][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 399.327323][ T30] audit: type=1400 audit(1766816947.258:684): avc: denied { getopt } for pid=9653 comm="syz.1.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 399.805713][ T9662] netlink: 64 bytes leftover after parsing attributes in process `syz.5.948'. [ 400.190223][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.198094][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.205222][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.211807][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.218400][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.225028][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.231635][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.238219][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.244786][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.252815][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.260024][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.266660][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.273213][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.279796][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.286344][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.292906][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.299497][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.306040][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.312632][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.319423][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.326013][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.332583][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.339143][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.345756][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.352491][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.360215][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.367321][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.373894][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.380432][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.387006][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.393545][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.400449][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 400.407035][ T5828] Bluetooth: hci0: Invalid handle: 0x4d00 > 0x0eff [ 401.221976][ T9678] netlink: 64 bytes leftover after parsing attributes in process `syz.5.951'. [ 403.867779][ T6094] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 403.952475][ T30] audit: type=1400 audit(1766816951.514:685): avc: denied { create } for pid=9700 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.091295][ T30] audit: type=1400 audit(1766816951.561:686): avc: denied { read } for pid=9700 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.192925][ T6094] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 404.395339][ T30] audit: type=1400 audit(1766816951.804:687): avc: denied { watch } for pid=9705 comm="syz.3.961" path="/proc/673/task" dev="proc" ino=26273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 404.430876][ T9708] netlink: 48 bytes leftover after parsing attributes in process `syz.3.961'. [ 404.439781][ T6094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.451065][ T6094] usb 1-1: Product: syz [ 404.455207][ T6094] usb 1-1: Manufacturer: syz [ 404.472622][ T30] audit: type=1400 audit(1766816952.075:688): avc: denied { create } for pid=9705 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 404.493126][ T6094] usb 1-1: SerialNumber: syz [ 404.506784][ T6094] usb 1-1: config 0 descriptor?? [ 404.511947][ T30] audit: type=1400 audit(1766816952.075:689): avc: denied { setopt } for pid=9705 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 404.559645][ T30] audit: type=1400 audit(1766816952.085:690): avc: denied { mounton } for pid=9706 comm="syz.4.963" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 404.633633][ T30] audit: type=1400 audit(1766816952.085:691): avc: denied { read } for pid=9706 comm="syz.4.963" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 404.655494][ T30] audit: type=1400 audit(1766816952.085:692): avc: denied { map } for pid=9705 comm="syz.3.961" path="socket:[26278]" dev="sockfs" ino=26278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 404.679897][ T30] audit: type=1400 audit(1766816952.085:693): avc: denied { read write } for pid=9705 comm="syz.3.961" path="socket:[26278]" dev="sockfs" ino=26278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 404.709989][ T30] audit: type=1400 audit(1766816952.150:694): avc: denied { write } for pid=9711 comm="syz.1.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 404.781571][ T30] audit: type=1400 audit(1766816952.375:695): avc: denied { bind } for pid=9696 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 404.805261][ T9699] rdma_op ffff8880771671f0 conn xmit_rdma 0000000000000000 [ 404.806881][ T30] audit: type=1400 audit(1766816952.393:696): avc: denied { bind } for pid=9696 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 404.834147][ T30] audit: type=1400 audit(1766816952.393:697): avc: denied { write } for pid=9696 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 404.867127][ T30] audit: type=1400 audit(1766816952.449:698): avc: denied { write } for pid=9696 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 404.916195][ T30] audit: type=1400 audit(1766816952.487:699): avc: denied { shutdown } for pid=9696 comm="syz.0.958" lport=47828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 404.957232][ T44] usb 1-1: USB disconnect, device number 34 [ 405.003346][ T6094] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 405.371103][ T6094] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 405.387400][ T6094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.398359][ T6094] usb 4-1: Product: syz [ 405.408786][ T6094] usb 4-1: Manufacturer: syz [ 405.424161][ T6094] usb 4-1: SerialNumber: syz [ 405.430773][ T6094] usb 4-1: config 0 descriptor?? [ 405.443109][ T6094] hub 4-1:0.0: bad descriptor, ignoring hub [ 405.449088][ T6094] hub 4-1:0.0: probe with driver hub failed with error -5 [ 405.476280][ T9723] netlink: 64 bytes leftover after parsing attributes in process `syz.4.966'. [ 405.832774][ T9731] comedi comedi0: Minor 3 specified more than once! [ 406.303052][ T6094] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 406.313770][ T6094] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 406.337001][ T6094] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 406.350879][ T6094] usb 4-1: media controller created [ 406.363610][ T6094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.441725][ T6094] DVB: Unable to find symbol dib7000p_attach() [ 406.449324][ T6094] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 406.478562][ T30] audit: type=1400 audit(1766816953.937:700): avc: denied { setopt } for pid=9733 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 406.606164][ T30] audit: type=1400 audit(1766816953.937:701): avc: denied { write } for pid=9733 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 406.643659][ T6094] rc_core: IR keymap rc-dib0700-rc5 not found [ 406.656716][ T6094] Registered IR keymap rc-empty [ 406.662052][ T6094] dvb-usb: could not initialize remote control. [ 406.672703][ T6094] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 406.880779][ T9754] netlink: 64 bytes leftover after parsing attributes in process `syz.5.972'. [ 407.026053][ T9753] tipc: Enabling of bearer rejected, failed to enable media [ 407.145327][ T9758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9758 comm=syz.1.973 [ 407.145327][ T9753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9753 comm=syz.1.973 [ 408.731549][ T30] audit: type=1400 audit(1766816955.836:702): avc: denied { connect } for pid=9767 comm="syz.1.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 410.662849][ T9787] netlink: 14 bytes leftover after parsing attributes in process `syz.4.979'. [ 411.242600][ T30] audit: type=1400 audit(1766816957.865:703): avc: denied { setopt } for pid=9777 comm="syz.4.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 411.434585][ T9787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.445016][ T9787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.454982][ T9787] bond0 (unregistering): Released all slaves [ 411.472674][ T9356] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 411.484235][ T9356] bond1: now running without any active interface! [ 412.328566][ T30] audit: type=1400 audit(1766816959.427:704): avc: denied { ioctl } for pid=9800 comm="syz.0.988" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 412.337131][ T9802] netlink: 64 bytes leftover after parsing attributes in process `syz.5.987'. [ 412.423841][ T30] audit: type=1400 audit(1766816959.521:705): avc: denied { append } for pid=9800 comm="syz.0.988" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 412.475758][ T30] audit: type=1400 audit(1766816959.540:706): avc: denied { mount } for pid=9800 comm="syz.0.988" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 412.799458][ T7262] usb 4-1: USB disconnect, device number 29 [ 412.922430][ T7262] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 412.951549][ T9811] usb usb8: usbfs: process 9811 (syz.3.991) did not claim interface 0 before use [ 413.095627][ T6094] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 413.626783][ T6078] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 413.664935][ T6094] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 413.721087][ T6094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.741323][ T6094] usb 1-1: Product: syz [ 413.757080][ T6094] usb 1-1: Manufacturer: syz [ 413.764869][ T6094] usb 1-1: SerialNumber: syz [ 413.776749][ T9823] rdma_rxe: rxe_newlink: failed to add syz_tun [ 413.886416][ T6078] usb 6-1: Using ep0 maxpacket: 8 [ 413.929647][ T30] audit: type=1400 audit(1766816960.784:707): avc: denied { create } for pid=9822 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 413.950987][ T6094] usb 1-1: config 0 descriptor?? [ 413.957633][ T6094] hub 1-1:0.0: bad descriptor, ignoring hub [ 413.965066][ T30] audit: type=1400 audit(1766816960.784:708): avc: denied { write } for pid=9822 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 413.985385][ T6078] usb 6-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 413.994624][ T6078] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 414.004384][ T6094] hub 1-1:0.0: probe with driver hub failed with error -5 [ 414.012588][ T6078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.026826][ T30] audit: type=1400 audit(1766816960.962:709): avc: denied { read write } for pid=9822 comm="syz.3.993" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 414.053100][ T30] audit: type=1400 audit(1766816960.962:710): avc: denied { open } for pid=9822 comm="syz.3.993" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 414.188311][ T9807] batadv_slave_0: entered promiscuous mode [ 414.197373][ T9807] batadv_slave_0: left allmulticast mode [ 414.205240][ T6094] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 414.229137][ T6094] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 414.240926][ T6094] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 414.250463][ T6094] usb 1-1: media controller created [ 414.260387][ T6094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.291537][ T6094] DVB: Unable to find symbol dib7000p_attach() [ 414.298307][ T6094] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 414.368752][ T6094] rc_core: IR keymap rc-dib0700-rc5 not found [ 414.385840][ T6094] Registered IR keymap rc-empty [ 414.391191][ T6094] dvb-usb: could not initialize remote control. [ 414.404539][ T6094] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 414.431768][ T6078] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 414.592460][ T6078] usb 4-1: Using ep0 maxpacket: 32 [ 414.604820][ T6078] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 414.616720][ T6078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 414.628187][ T6078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 414.797408][ T6078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 414.847564][ T6078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 415.012876][ T6078] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 415.028638][ T6078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.040054][ T6078] usb 4-1: Product: syz [ 415.046585][ T6078] usb 4-1: Manufacturer: syz [ 415.053449][ T6078] usb 4-1: SerialNumber: syz [ 415.062766][ T6078] usb 4-1: config 0 descriptor?? [ 415.083977][ T9842] serio: Serial port ttyS3 [ 415.399267][ T30] audit: type=1400 audit(1766816962.299:711): avc: denied { write } for pid=9845 comm="syz.4.997" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 415.428681][ T30] audit: type=1400 audit(1766816962.299:712): avc: denied { ioctl } for pid=9845 comm="syz.4.997" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 415.514393][ T9825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.531303][ T9825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.562511][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.569042][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.575465][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.582397][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.590459][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.597075][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.603583][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.612393][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.619835][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.626279][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.633322][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.643446][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.649729][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.656340][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.662664][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.669100][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.675540][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.681862][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.688278][ T6078] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 415.695376][ T6078] input input19: Timeout waiting for response from device. [ 415.707488][ T6078] usb 4-1: USB disconnect, device number 30 [ 416.235704][ T9854] FAULT_INJECTION: forcing a failure. [ 416.235704][ T9854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.250338][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.3.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.250365][ T9854] Tainted: [L]=SOFTLOCKUP [ 416.250371][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.250381][ T9854] Call Trace: [ 416.250388][ T9854] [ 416.250394][ T9854] dump_stack_lvl+0x16c/0x1f0 [ 416.250421][ T9854] should_fail_ex+0x512/0x640 [ 416.250452][ T9854] _copy_from_user+0x2e/0xd0 [ 416.250479][ T9854] do_devconfig_ioctl+0x11c/0x710 [ 416.250498][ T9854] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 416.250522][ T9854] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 416.250555][ T9854] ? find_held_lock+0x2b/0x80 [ 416.250585][ T9854] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 416.250615][ T9854] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 416.250644][ T9854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 416.250667][ T9854] ? do_vfs_ioctl+0x128/0x14f0 [ 416.250688][ T9854] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 416.250707][ T9854] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 416.250739][ T9854] ? hook_file_ioctl_common+0x144/0x410 [ 416.250771][ T9854] ? selinux_file_ioctl+0x180/0x270 [ 416.250792][ T9854] ? selinux_file_ioctl+0xb4/0x270 [ 416.250815][ T9854] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 416.250839][ T9854] __x64_sys_ioctl+0x18e/0x210 [ 416.250859][ T9854] do_syscall_64+0xcd/0xf80 [ 416.250883][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.250901][ T9854] RIP: 0033:0x7fdb4ed8f749 [ 416.250914][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.250929][ T9854] RSP: 002b:00007fdb4cff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.250945][ T9854] RAX: ffffffffffffffda RBX: 00007fdb4efe6090 RCX: 00007fdb4ed8f749 [ 416.250956][ T9854] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000008 [ 416.250967][ T9854] RBP: 00007fdb4cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 416.250977][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.250987][ T9854] R13: 00007fdb4efe6128 R14: 00007fdb4efe6090 R15: 00007ffe5fe15468 [ 416.251017][ T9854] [ 416.368125][ T9856] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000007' [ 416.705674][ T9860] comedi comedi0: Minor 3 specified more than once! [ 417.133377][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 417.133392][ T30] audit: type=1400 audit(1766816963.917:714): avc: denied { mount } for pid=9863 comm="syz.1.1003" name="/" dev="autofs" ino=27030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 417.177078][ T30] audit: type=1400 audit(1766816963.927:715): avc: denied { mount } for pid=9865 comm="syz.3.1004" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 417.219857][ T30] audit: type=1400 audit(1766816964.002:716): avc: denied { mount } for pid=9868 comm="syz.1.1005" name="/" dev="ramfs" ino=27036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 417.282098][ T30] audit: type=1804 audit(1766816964.030:717): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1005" name="file0" dev="ramfs" ino=27037 res=1 errno=0 [ 418.057545][ T9877] netlink: 'syz.4.1007': attribute type 4 has an invalid length. [ 418.079782][ T6078] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 418.397867][ T6078] usb 4-1: Using ep0 maxpacket: 16 [ 418.406793][ T6078] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 418.420236][ T6078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.429401][ T6078] usb 4-1: Product: syz [ 418.435486][ T6078] usb 4-1: Manufacturer: syz [ 418.440203][ T6078] usb 4-1: SerialNumber: syz [ 418.451854][ T6078] r8152-cfgselector 4-1: Unknown version 0x0000 [ 418.458137][ T6078] r8152-cfgselector 4-1: config 0 descriptor?? [ 418.897893][ T6078] r8152-cfgselector 4-1: USB disconnect, device number 31 [ 419.057047][ T30] audit: type=1400 audit(1766816965.723:718): avc: denied { create } for pid=9887 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 419.077089][ T30] audit: type=1400 audit(1766816965.723:719): avc: denied { write } for pid=9887 comm="syz.1.1010" path="socket:[27073]" dev="sockfs" ino=27073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 419.500440][ T30] audit: type=1400 audit(1766816966.144:720): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 420.245952][ T9902] atomic_op ffff88807963e198 conn xmit_atomic 0000000000000000 [ 420.527411][ T6094] usb 1-1: USB disconnect, device number 35 [ 420.570167][ T5947] usb 6-1: USB disconnect, device number 12 [ 420.603754][ T6094] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 420.616055][ T30] audit: type=1400 audit(1766816967.182:721): avc: denied { mounton } for pid=9904 comm="syz.0.1015" path="/168/file0" dev="tmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 421.669887][ T5947] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 422.045702][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.078047][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.566014][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 422.581524][ T5947] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 422.895733][ T9934] comedi comedi0: Minor 3 specified more than once! [ 424.164622][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.175154][ T5947] usb 6-1: config 0 descriptor?? [ 424.258467][ T5947] usb 6-1: can't set config #0, error -71 [ 424.273364][ T5947] usb 6-1: USB disconnect, device number 13 [ 424.463651][ T30] audit: type=1400 audit(1766816970.774:722): avc: denied { ioctl } for pid=9943 comm="syz.0.1026" path="socket:[27660]" dev="sockfs" ino=27660 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 424.547442][ T9945] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1025'. [ 424.823058][ T5955] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 424.903933][ T30] audit: type=1400 audit(1766816971.195:723): avc: denied { name_bind } for pid=9947 comm="syz.5.1027" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 425.073153][ T5955] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 425.081614][ T5955] usb 1-1: config 0 has no interface number 0 [ 425.090281][ T5955] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 425.099625][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.109044][ T5955] usb 1-1: Product: syz [ 425.113587][ T5955] usb 1-1: Manufacturer: syz [ 425.118509][ T5955] usb 1-1: SerialNumber: syz [ 425.535244][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 425.592270][ T5955] usb 1-1: config 0 descriptor?? [ 425.615288][ T5955] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 426.412562][ T5955] usb 1-1: USB disconnect, device number 36 [ 426.478649][ T5955] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 426.513287][ T9960] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1031'. [ 426.606330][ T30] audit: type=1400 audit(1766816972.785:724): avc: denied { watch_reads } for pid=9962 comm="syz.3.1032" path="/proc/710/map_files" dev="proc" ino=27680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 427.259446][ T9977] overlayfs: failed to clone upperpath [ 427.287040][ T9977] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1036'. [ 427.298644][ T9977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9977 comm=syz.1.1036 [ 427.313948][ T30] audit: type=1400 audit(1766816973.449:725): avc: denied { create } for pid=9976 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 427.335927][ T30] audit: type=1400 audit(1766816973.468:726): avc: denied { getopt } for pid=9976 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 427.937621][ T9985] comedi comedi0: Minor 3 specified more than once! [ 429.635637][T10000] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1040'. [ 429.845677][T10001] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1039'. [ 430.221301][T10008] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 431.116745][ T30] audit: type=1400 audit(1766816976.639:727): avc: denied { write } for pid=10006 comm="syz.5.1046" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 431.163799][ T30] audit: type=1400 audit(1766816977.050:728): avc: denied { remount } for pid=10007 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 431.177206][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 431.185515][ T30] audit: type=1400 audit(1766816977.060:729): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 431.318414][T10017] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1047'. [ 431.411507][T10019] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1045'. [ 431.537512][ T30] audit: type=1400 audit(1766816977.078:730): avc: denied { accept } for pid=10012 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 431.650333][ T30] audit: type=1400 audit(1766816977.078:731): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.682362][ T30] audit: type=1400 audit(1766816977.078:732): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.707756][ T6078] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 431.715461][ T10] usb 5-1: device descriptor read/64, error -71 [ 431.775064][ T30] audit: type=1400 audit(1766816977.078:733): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.853850][ T30] audit: type=1400 audit(1766816977.078:734): avc: denied { read } for pid=5481 comm="dhcpcd" name="n108" dev="tmpfs" ino=5771 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 431.878778][ T6078] usb 6-1: device descriptor read/64, error -71 [ 431.962484][ T30] audit: type=1400 audit(1766816977.078:735): avc: denied { open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n108" dev="tmpfs" ino=5771 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 431.985787][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 431.985913][ T30] audit: type=1400 audit(1766816977.078:736): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n108" dev="tmpfs" ino=5771 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 432.907411][ T6078] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 432.918504][ T10] usb 5-1: device descriptor read/64, error -71 [ 433.142643][ T10] usb usb5-port1: attempt power cycle [ 433.148321][ T6078] usb 6-1: device descriptor read/64, error -71 [ 433.693979][ T6078] usb usb6-port1: attempt power cycle [ 433.764675][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 433.803552][ T10] usb 5-1: device descriptor read/8, error -71 [ 434.751093][T10070] binder: Bad value for 'max' [ 435.482076][T10082] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1059'. [ 436.051525][T10095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 436.304646][ T5947] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 436.478536][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 436.488119][ T5947] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 436.498304][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.517820][ T5947] usb 1-1: config 0 descriptor?? [ 436.542405][ T5947] as10x_usb: device has been detected [ 436.551478][ T5947] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 436.568522][ T5947] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 436.589923][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 436.589936][ T30] audit: type=1400 audit(1766816982.120:747): avc: denied { firmware_load } for pid=5947 comm="kworker/1:9" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 436.622281][ T5947] as10x_usb: error during firmware upload part1 [ 436.634289][ T5947] Registered device nBox DVB-T Dongle [ 436.881891][ T30] audit: type=1400 audit(1766816982.392:748): avc: denied { connect } for pid=10106 comm="syz.5.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.977773][ T5955] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 439.290279][ T5955] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 439.305955][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.416417][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1066'. [ 439.483007][T10128] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1067'. [ 440.217619][ T30] audit: type=1400 audit(1766816984.758:749): avc: denied { ioctl } for pid=10117 comm="syz.1.1066" path="socket:[27499]" dev="sockfs" ino=27499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 440.326919][T10130] overlayfs: failed to clone upperpath [ 440.466405][ T5955] usb 6-1: config 0 descriptor?? [ 440.656903][ T10] usb 1-1: USB disconnect, device number 37 [ 440.663697][ T30] audit: type=1400 audit(1766816985.450:750): avc: denied { map } for pid=10106 comm="syz.5.1063" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 440.731209][ T10] Unregistered device nBox DVB-T Dongle [ 440.888836][ T10] as10x_usb: device has been disconnected [ 440.906041][T10135] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1070'. [ 440.920568][ T5955] usb 6-1: selecting invalid altsetting 3 [ 440.927574][T10140] usb usb8: usbfs: process 10140 (syz.3.1071) did not claim interface 0 before use [ 441.402977][ T5955] comedi comedi5: could not set alternate setting 3 in high speed [ 441.411849][ T5955] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 441.430720][ T5955] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 441.581594][T10144] overlayfs: failed to clone upperpath [ 441.900461][ T10] usb 6-1: USB disconnect, device number 17 [ 441.984994][ T30] audit: type=1400 audit(1766816987.171:751): avc: denied { getopt } for pid=10149 comm="syz.0.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 442.105610][T10153] FAULT_INJECTION: forcing a failure. [ 442.105610][T10153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.120370][T10153] CPU: 0 UID: 0 PID: 10153 Comm: syz.0.1074 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.120398][T10153] Tainted: [L]=SOFTLOCKUP [ 442.120404][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.120415][T10153] Call Trace: [ 442.120421][T10153] [ 442.120428][T10153] dump_stack_lvl+0x16c/0x1f0 [ 442.120455][T10153] should_fail_ex+0x512/0x640 [ 442.120486][T10153] _copy_from_user+0x2e/0xd0 [ 442.120514][T10153] video_usercopy+0xee2/0x16c0 [ 442.120537][T10153] ? __pfx___video_do_ioctl+0x10/0x10 [ 442.120557][T10153] ? irqentry_exit+0xe0/0x8c0 [ 442.120581][T10153] ? __pfx_video_usercopy+0x10/0x10 [ 442.120613][T10153] ? __x64_sys_ioctl+0x123/0x210 [ 442.120638][T10153] v4l2_ioctl+0x1bd/0x250 [ 442.120657][T10153] ? __pfx_v4l2_ioctl+0x10/0x10 [ 442.120678][T10153] __x64_sys_ioctl+0x18e/0x210 [ 442.120701][T10153] do_syscall_64+0xcd/0xf80 [ 442.120726][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.120745][T10153] RIP: 0033:0x7f844f18f749 [ 442.120760][T10153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.120777][T10153] RSP: 002b:00007f844d3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.120794][T10153] RAX: ffffffffffffffda RBX: 00007f844f3e6090 RCX: 00007f844f18f749 [ 442.120806][T10153] RDX: 00002000000002c0 RSI: 00000000c0d05605 RDI: 0000000000000009 [ 442.120817][T10153] RBP: 00007f844d3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 442.120828][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.120839][T10153] R13: 00007f844f3e6128 R14: 00007f844f3e6090 R15: 00007fffeb2f04e8 [ 442.120864][T10153] [ 442.783161][ T5955] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 442.858039][ T6313] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 444.132177][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.143079][ T5955] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 444.153695][ T6313] usb 1-1: Using ep0 maxpacket: 32 [ 444.159281][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.169487][ T6313] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 444.179232][ T6313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.822214][ T5955] usb 6-1: config 0 descriptor?? [ 444.828839][ T6313] usb 1-1: config 0 descriptor?? [ 444.844694][ T6313] as10x_usb: device has been detected [ 444.851918][ T6313] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 444.899578][ T6313] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 444.915468][ T6313] as10x_usb: error during firmware upload part1 [ 444.926025][ T6313] Registered device nBox DVB-T Dongle [ 446.762226][ T5955] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 446.902784][ T5955] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0004/input/input20 [ 447.881166][ T30] audit: type=1400 audit(1766816992.185:752): avc: denied { write } for pid=10191 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 449.704984][ T934] usb 1-1: USB disconnect, device number 38 [ 449.762543][ T934] Unregistered device nBox DVB-T Dongle [ 449.773792][ T934] as10x_usb: device has been disconnected [ 449.874174][T10206] xt_hashlimit: size too large, truncated to 1048576 [ 449.884718][ T30] audit: type=1400 audit(1766816994.561:753): avc: denied { set_context_mgr } for pid=10197 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 449.907656][T10205] FAULT_INJECTION: forcing a failure. [ 449.907656][T10205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.010085][T10205] CPU: 1 UID: 0 PID: 10205 Comm: syz.5.1084 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.010118][T10205] Tainted: [L]=SOFTLOCKUP [ 450.010124][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.010135][T10205] Call Trace: [ 450.010142][T10205] [ 450.010149][T10205] dump_stack_lvl+0x16c/0x1f0 [ 450.010177][T10205] should_fail_ex+0x512/0x640 [ 450.010208][T10205] _copy_to_user+0x32/0xd0 [ 450.010238][T10205] binder_ioctl+0x28cf/0x7360 [ 450.010271][T10205] ? tomoyo_path_number_perm+0x18d/0x580 [ 450.010302][T10205] ? __pfx_binder_ioctl+0x10/0x10 [ 450.010327][T10205] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 450.010349][T10205] ? do_vfs_ioctl+0x128/0x14f0 [ 450.010371][T10205] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 450.010392][T10205] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 450.010424][T10205] ? hook_file_ioctl_common+0x144/0x410 [ 450.010459][T10205] ? selinux_file_ioctl+0x180/0x270 [ 450.010481][T10205] ? selinux_file_ioctl+0xb4/0x270 [ 450.010505][T10205] ? __pfx_binder_ioctl+0x10/0x10 [ 450.010528][T10205] __x64_sys_ioctl+0x18e/0x210 [ 450.010551][T10205] do_syscall_64+0xcd/0xf80 [ 450.010576][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.010595][T10205] RIP: 0033:0x7f9959b8f749 [ 450.010610][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.010627][T10205] RSP: 002b:00007f995aa6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.010644][T10205] RAX: ffffffffffffffda RBX: 00007f9959de5fa0 RCX: 00007f9959b8f749 [ 450.010655][T10205] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 450.010666][T10205] RBP: 00007f995aa6f090 R08: 0000000000000000 R09: 0000000000000000 [ 450.010676][T10205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.010686][T10205] R13: 00007f9959de6038 R14: 00007f9959de5fa0 R15: 00007ffe76e53678 [ 450.010711][T10205] [ 450.010718][T10205] binder: 10197:10205 ioctl c0306201 2000000001c0 returned -14 [ 450.129193][T10208] /dev/nullb0: Can't lookup blockdev [ 450.240524][ T30] audit: type=1400 audit(1766816994.888:754): avc: denied { read } for pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=4191 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.278517][ T5955] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 450.400193][ T30] audit: type=1400 audit(1766816994.888:755): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4191 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.579889][ T30] audit: type=1400 audit(1766816994.888:756): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4191 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.604763][ T10] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 451.235839][ T30] audit: type=1400 audit(1766816995.777:757): avc: denied { bind } for pid=10215 comm="syz.5.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 451.267432][ T10] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 451.278186][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.288935][ T10] usb 5-1: config 0 descriptor?? [ 451.365524][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1089'. [ 451.374626][ T30] audit: type=1400 audit(1766816995.777:758): avc: denied { name_bind } for pid=10215 comm="syz.5.1089" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 451.549283][ T30] audit: type=1400 audit(1766816995.777:759): avc: denied { node_bind } for pid=10215 comm="syz.5.1089" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 451.679098][ T30] audit: type=1400 audit(1766816995.815:760): avc: denied { name_connect } for pid=10215 comm="syz.5.1089" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 452.458027][ T10] usb 5-1: selecting invalid altsetting 3 [ 453.563383][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 454.386482][ T10] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 454.397859][ T10] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 454.449837][ T5955] usb 6-1: USB disconnect, device number 18 [ 455.512140][ T10] usb 5-1: USB disconnect, device number 55 [ 455.735038][ T30] audit: type=1400 audit(1766817000.024:761): avc: denied { append } for pid=10237 comm="syz.3.1094" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 456.890570][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.896940][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.920628][ T30] audit: type=1400 audit(1766817002.072:762): avc: denied { create } for pid=10237 comm="syz.3.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 458.519278][T10267] afs: Unknown parameter 'hash' [ 458.525678][T10267] 9pnet_virtio: no channels available for device syz [ 462.321367][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1101'. [ 521.672951][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 521.679259][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.415802][ C0] ------------[ cut here ]------------ [ 576.421937][ C0] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#0: swapper/0/0 [ 576.433289][ C0] Modules linked in: [ 576.437451][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.447932][ C0] Tainted: [L]=SOFTLOCKUP [ 576.452225][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.462249][ C0] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 576.469170][ C0] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3a 85 00 b8 01 00 00 00 87 05 25 c5 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e5 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 576.488745][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00010046 [ 576.494779][ C0] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38d90 [ 576.502720][ C0] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 576.510659][ C0] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 576.518598][ C0] R10: 0000000000000003 R11: ffffffff8e098670 R12: 1ffffffff1c02250 [ 576.526538][ C0] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b843bc52 [ 576.534476][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 576.543376][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.549930][ C0] CR2: 0000001b320e2ff8 CR3: 000000003630c000 CR4: 00000000003526f0 [ 576.557873][ C0] Call Trace: [ 576.561126][ C0] [ 576.563943][ C0] rcu_core+0x4cf/0x15f0 [ 576.568172][ C0] ? sched_clock+0x38/0x60 [ 576.572556][ C0] ? sched_clock_cpu+0x6c/0x530 [ 576.577374][ C0] ? clockevents_program_event+0x151/0x370 [ 576.583157][ C0] ? __pfx_rcu_core+0x10/0x10 [ 576.587819][ C0] ? read_tsc+0x9/0x20 [ 576.591860][ C0] ? ktime_get+0x1a7/0x310 [ 576.596245][ C0] ? find_held_lock+0x2b/0x80 [ 576.600900][ C0] handle_softirqs+0x219/0x950 [ 576.605640][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 576.610914][ C0] __irq_exit_rcu+0x109/0x170 [ 576.615563][ C0] irq_exit_rcu+0x9/0x30 [ 576.619778][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 576.625382][ C0] [ 576.628287][ C0] [ 576.631200][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.637163][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 576.642779][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 576.662354][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 576.668390][ C0] RAX: 00000000021a80a9 RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 576.676331][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 576.684272][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 576.692213][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 576.700154][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 576.708109][ C0] ? ct_kernel_exit+0x139/0x190 [ 576.712936][ C0] default_idle+0x13/0x20 [ 576.717241][ C0] default_idle_call+0x6c/0xb0 [ 576.721977][ C0] do_idle+0x38d/0x510 [ 576.726022][ C0] ? __pfx_do_idle+0x10/0x10 [ 576.730590][ C0] cpu_startup_entry+0x4f/0x60 [ 576.735327][ C0] rest_init+0x16b/0x2b0 [ 576.739536][ C0] ? acpi_subsystem_init+0x133/0x180 [ 576.744791][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 576.750307][ C0] start_kernel+0x3ef/0x4d0 [ 576.754785][ C0] x86_64_start_reservations+0x18/0x30 [ 576.760218][ C0] x86_64_start_kernel+0x130/0x190 [ 576.765306][ C0] common_startup_64+0x13e/0x148 [ 576.770221][ C0] [ 576.773213][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 576.780462][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.790938][ C0] Tainted: [L]=SOFTLOCKUP [ 576.795240][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.805273][ C0] Call Trace: [ 576.808522][ C0] [ 576.811338][ C0] dump_stack_lvl+0x3d/0x1f0 [ 576.815903][ C0] vpanic+0x640/0x6f0 [ 576.819856][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 576.826154][ C0] panic+0xca/0xd0 [ 576.829845][ C0] ? __pfx_panic+0x10/0x10 [ 576.834234][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 576.839317][ C0] check_panic_on_warn+0xab/0xb0 [ 576.844226][ C0] __warn+0x108/0x3c0 [ 576.848179][ C0] __report_bug+0x2a0/0x520 [ 576.852653][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 576.858953][ C0] ? __pfx___report_bug+0x10/0x10 [ 576.863948][ C0] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 576.869642][ C0] ? __lock_acquire+0x436/0x2890 [ 576.874563][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 576.880862][ C0] report_bug+0xb2/0x220 [ 576.885082][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 576.891380][ C0] handle_bug+0x127/0x260 [ 576.895684][ C0] exc_invalid_op+0x17/0x50 [ 576.900172][ C0] asm_exc_invalid_op+0x1a/0x20 [ 576.904993][ C0] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 576.911900][ C0] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3a 85 00 b8 01 00 00 00 87 05 25 c5 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e5 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 576.931475][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00010046 [ 576.937509][ C0] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38d90 [ 576.945452][ C0] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 576.953391][ C0] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 576.961343][ C0] R10: 0000000000000003 R11: ffffffff8e098670 R12: 1ffffffff1c02250 [ 576.969282][ C0] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b843bc52 [ 576.977228][ C0] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 576.983530][ C0] rcu_core+0x4cf/0x15f0 [ 576.987747][ C0] ? sched_clock+0x38/0x60 [ 576.992132][ C0] ? sched_clock_cpu+0x6c/0x530 [ 576.996950][ C0] ? clockevents_program_event+0x151/0x370 [ 577.002733][ C0] ? __pfx_rcu_core+0x10/0x10 [ 577.007384][ C0] ? read_tsc+0x9/0x20 [ 577.011437][ C0] ? ktime_get+0x1a7/0x310 [ 577.015826][ C0] ? find_held_lock+0x2b/0x80 [ 577.020482][ C0] handle_softirqs+0x219/0x950 [ 577.025233][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 577.030494][ C0] __irq_exit_rcu+0x109/0x170 [ 577.035145][ C0] irq_exit_rcu+0x9/0x30 [ 577.039357][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 577.044962][ C0] [ 577.047874][ C0] [ 577.050776][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 577.056739][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 577.062354][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 577.081931][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 577.087964][ C0] RAX: 00000000021a80a9 RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 577.095904][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 577.103845][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 577.111786][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 577.119727][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 577.127671][ C0] ? ct_kernel_exit+0x139/0x190 [ 577.132508][ C0] default_idle+0x13/0x20 [ 577.136810][ C0] default_idle_call+0x6c/0xb0 [ 577.141557][ C0] do_idle+0x38d/0x510 [ 577.145600][ C0] ? __pfx_do_idle+0x10/0x10 [ 577.150168][ C0] cpu_startup_entry+0x4f/0x60 [ 577.154917][ C0] rest_init+0x16b/0x2b0 [ 577.159129][ C0] ? acpi_subsystem_init+0x133/0x180 [ 577.164393][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 577.169909][ C0] start_kernel+0x3ef/0x4d0 [ 577.174387][ C0] x86_64_start_reservations+0x18/0x30 [ 577.179823][ C0] x86_64_start_kernel+0x130/0x190 [ 577.184910][ C0] common_startup_64+0x13e/0x148 [ 577.189836][ C0] [ 578.248198][ C0] Shutting down cpus with NMI [ 578.253147][ C0] Kernel Offset: disabled [ 578.257449][ C0] Rebooting in 86400 seconds..