last executing test programs: 12.54326213s ago: executing program 3 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000f800030000000000fb950405e837282efe0868327a31a705ec978547"], 0xd31600) 10.841038458s ago: executing program 3 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010024bd2402fbdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x24000000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000b00)={0x1, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x5, 0x10, 0x4e, 0x8, 0x4}, 0x0, 0x0, 0x14}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x8639}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010024bd2402fbdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x24000000) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000b00)={0x1, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x5, 0x10, 0x4e, 0x8, 0x4}, 0x0, 0x0, 0x14}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x8639}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 10.774236815s ago: executing program 0 (id=904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x34, r1, 0x303, 0x0, 0x25dfdbfe, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48045}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/3, 0x3}], 0x1, 0x77f, 0x5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}]}, 0x34}}, 0x4044890) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000000c0)=0x1) 9.963863902s ago: executing program 0 (id=905): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (rerun: 64) write$tcp_congestion(r2, &(0x7f00000001c0)='cdg\x00', 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x9d64ddec3c6bedba, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000480)=0x10002) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x6027c3, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) (async, rerun: 32) r6 = getpid() (rerun: 32) sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) (async) rt_tgsigqueueinfo(0x0, r6, 0x3a, &(0x7f0000000280)={0x17, 0x8, 0x404}) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000080)={[0xf000, 0x1000, 0xeeee8000, 0x100000], 0x4, 0x2, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xece32000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r10 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, 0x0, &(0x7f0000000040)) 9.257679505s ago: executing program 0 (id=908): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe8000000000000003", 0x35}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd287100000000000001090224000100"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x9, 0x80) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) io_destroy(0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="610508c20d0380040502074bc30f52df74b508a1ec4511f013c218ff26e969ca5ec4d0d9c4e1a3bd95f0b7c55291ea8b331990a2abdcc443ae49b8a221da4b66530dac64402940d50668463398dffd5a588cff6bc04fac65454ab3419b2c7731e1", @ANYRES8=r2], 0x32) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 8.317443764s ago: executing program 2 (id=913): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0xd, [0x7ffe, 0x100c95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x21d, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0xffff8be8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0xffff8000, 0x7ff, 0xfffffff9, 0xb8b, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x100009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0xbd9, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x7, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x8, 0xfffff000, 0xfffd, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000100ffff000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000caffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xc2c00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r4}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) 7.69004283s ago: executing program 2 (id=914): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r4 = syz_clone(0x400, &(0x7f0000000200)="1b5bbc21597eec5921e11abc64a04f8196d4f356af0311b35d1cf3e8a0b429d221652bf71ca2eb7715115fbde882364c4fe78f501f2f5afc10e8a004924462eb015cbcab8234d4b21ae8a4793fa06c6098b1365989ca06fa08cb5d5078fff91b5fcf61808ac69e44dbe797ea84699b8184ef1d4c4c7fff2bef194d5f5303976752a0b690c4747f1a332d168a367a1d9d", 0x90, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000340)="01c39dbfa84bbfc4cffa7ef9e2b261a4640c6f9295769a2a94dd411d06263044f11623d306d0b73177761012310dd47f8d7e0927a937cd66620056781d52a622f48e860ecb8f5e5d6f77aa9f24320adf7979a4a15e4ed931c18e512620c7c4090b144892197df2544fbaca81630935b0b5a9870040b774c05060a2db5b48eae9ecaf2ed9142d139d14c50e28ab0ec7ef90909efa2705a4ec72a489c2c0c234537d13bd53855866ca8dabd9ff11") ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r4, 0x0, 0x4004) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 7.407589778s ago: executing program 1 (id=915): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002abd7000fedbdf2517000000340030801400040008bf82512fb889bb6cd63abc18c74d4114000406643c2192b26e4170f2065883d0420200070000000c00f2ff0200000002000004"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/rcu_stall_count', 0x2, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096}, {&(0x7f00000014c0)=""/155}, {&(0x7f00000024c0)=""/170}], 0x1}}], 0x40000000000013e, 0x2, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000015c0)=ANY=[@ANYBLOB="0400190000dcc1a8e4622ffbd908e8e997529922e43511b600a7e30b468a0d856a998fa2514a80f7c3cd6eca1f95de36e08ec6d8d43e9e9a790d92e7e463c1fa594f005e", @ANYRES16=r3, @ANYBLOB="050328bd7000fedbdf251c00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="0000000000000000000000006ca0d6e1a7f303fdc657c1ba44e9c2d0eb237f9949efc828c7961f605b95ce855597d10600c8d850ccff6c178d727e7f9fed95c35eec45968f17641a1107bff0db49d31f5fbf3d42252f53"], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x8814) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002abd7000fedbdf2517000000340030801400040008bf82512fb889bb6cd63abc18c74d4114000406643c2192b26e4170f2065883d0420200070000000c00f2ff0200000002000004"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x80) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000940)={'wpan0\x00'}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/rcu_stall_count', 0x2, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (async) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096}, {&(0x7f00000014c0)=""/155}, {&(0x7f00000024c0)=""/170}], 0x1}}], 0x40000000000013e, 0x2, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000015c0)=ANY=[@ANYBLOB="0400190000dcc1a8e4622ffbd908e8e997529922e43511b600a7e30b468a0d856a998fa2514a80f7c3cd6eca1f95de36e08ec6d8d43e9e9a790d92e7e463c1fa594f005e", @ANYRES16=r3, @ANYBLOB="050328bd7000fedbdf251c00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="0000000000000000000000006ca0d6e1a7f303fdc657c1ba44e9c2d0eb237f9949efc828c7961f605b95ce855597d10600c8d850ccff6c178d727e7f9fed95c35eec45968f17641a1107bff0db49d31f5fbf3d42252f53"], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x8814) (async) 6.54913231s ago: executing program 1 (id=917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x1, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 6.548392996s ago: executing program 3 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) fcntl$addseals(r0, 0x409, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x80000000, 0x1, {{0x9, 0x4, 0x2, 0x10, 0x24, 0x64, 0x0, 0x6a, 0x29, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0xf, 0x9e, [@multicast1, @private=0xa010101, @local]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r10 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x3) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000200000000000800a0009409000008002600940900000800270000000000"], 0x48}}, 0x0) 6.257873965s ago: executing program 4 (id=919): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x2, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'bond_slave_0\x00'}) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 5.329409978s ago: executing program 0 (id=920): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x1a64, 0x4808, 0xffffffff, 0x298}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) writev(r4, &(0x7f0000001780), 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, &(0x7f00000000c0)="a5f1c62e333f75555623fb95e8aec107ee32c33179f07c6c915ba7ac6f", 0x1d, 0x2, 0x1}) io_uring_enter(r6, 0x687c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)='Y') ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x2c0}, 0x8040) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100"/107], 0x5000) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000a0b000/0x4000)=nil, 0x4000, 0x5, 0x10010, r9, 0x10000000) cachestat(0xffffffffffffffff, 0x0, &(0x7f000009de80), 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$FBIOPUTCMAP(r9, 0x4605, &(0x7f0000000240)={0xd1, 0x9, &(0x7f0000000300)=[0x3, 0x4, 0xe, 0xf379, 0x8, 0x3, 0x2, 0xcfb, 0x5], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x8, 0x9, 0x1], 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES8=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000006605964d08000000000000"], 0x50) syz_usb_control_io(r0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000001c0)) 5.327300756s ago: executing program 4 (id=921): syz_clone(0x20900, &(0x7f0000000040)="f9b388ab623cba59799a5a35bbc8dadcfd37831a62adba37b792afbe61b70e7fc33b8a2201db088cbdda283652fd983b2f4b01394232ce506b7c2891f75ad2fc9511de7111225f246c0e57857e3de7558e1fe0d82d6dda6057e05379d6c81c21e9a5d86fc6e2375585a3f065c5e07d38ebd62aa16f60b5332b319c0f4642b2a631a4a6e76842b524733e3b0e0e60b78dc2a3d91b725295eab87855473c8235", 0x9f, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)="e6651d6028739622167b0df9bdec460edb4f01c11761c07e2ee8340df14be1c614421665201af0d83e6aec0a12e24d77a805e3c1ca327cab194c3397dcfcc92dcdf7826bae286ed76e81a448f06e58cb2e2e579df89c47e692614292fbc491acf2c2505ffbbf913c9271fe4e4b916a71c58063afa6ced4419318a69ea3f6718bde509771b4a4a133afa3d3d5f65b6322041dce1c1590440b83b3fce50be4257021e4e7870a4afcec0a02bfc76db984cf1299f892501c3793d9a77cfa89b34a0a6023c63a167e6b8b5598fecc32467f92da1d5f2979a85fec892f7595c3a086fc441e") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x4, 0x4, 0xfffe}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340), 0x20200, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.002010407s ago: executing program 3 (id=922): socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f00006b5000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0xb7b, 0x18440) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@bcast, @remote, @default, @null, @bcast, @netrom, @remote, @bcast]}, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) 4.825311998s ago: executing program 2 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prlimit64(r0, 0x12313e1060d443dc, 0x0, &(0x7f0000000080)) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/69, 0x0, 0x70000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000600)=""/79, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) 3.698614768s ago: executing program 4 (id=924): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="21097a9318780f232a0b801a0d4a21e7a9389c7d8f6a324e86bfd4e6a3a9697e0a0c628fe27800d5e611759540caf9ab4910dc5217ca6c9bab69857548c3b0c58019df1d7ed80169de427daec419c64f54df6a8db07d916e15893ae93fb57e5c1309a667560d38c84fed8d290bf46bc0bf23919e98ae3c183e6b3b86f5e69a53e3761d5435e7e9b042c8a794ccd22fea"], 0x12c}}, 0x49851) 3.621951355s ago: executing program 2 (id=925): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201}, &(0x7f0000000080), &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180), 0x4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x800, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002000010000000000000000000a00050000000007010000001400110076657462305f746f5f627269646765001400030076657468315f766c616e00000000000014000200fe800000000000000000000000000017"], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x0, 'ip6_vti0\x00', 0x1}, 0x18) 3.551416468s ago: executing program 4 (id=926): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket(0x18, 0xa, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(r4) syz_usb_control_io$uac1(r4, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x8, 0x4f, {0x4f, 0x2, "75ef97a6dc117411de20253486dabe43c1ef54bd400406c0c44e90816757dd6118a35e9428f9d27a8005fb1c3c44cf8915ed9c9fd6343f32955125fb189518c010bd79db93d4b8ac27115a4dfc"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x40, 0x17, 0xa7, "039dd3d5f5f20051dbd24eae8ab609e75300fd6318f2e8ded867624fb5f965af4ddb2633586a71ec68a0aeaca845b0666a856d7e7556544e9d524e10d44bca5d95116a2576c7632f63bd877cd43615166783793a57ad5f6888a91bc7debc90cc5c88cfdd865e690380faa72a4e2c9060a493d18655f7af678ee9e13d9d6a45b7628ccd488e2c7818b77b681b6f4bc61bc10e64d7c3ea3aa90fcdb6b1a603dca07b7588186790a7"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x55}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x81, 0x2, "66f8"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "86"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "5b9c"}, &(0x7f0000000480)={0x20, 0x84, 0x2, "88d4"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "b94f0f"}}) syz_open_procfs(r2, &(0x7f0000000580)='net/sctp\x00') setresuid(0x0, r3, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r3, 0x0) 3.445421283s ago: executing program 1 (id=927): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x3d, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000001480)=[{0x9, 0x8001, 0x0, 0x0}], 0x1}) 2.281036018s ago: executing program 0 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000040)=""/172) fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0xc890) syz_io_uring_setup(0x23c, 0x0, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$netlink(0x10, 0x3, 0x0) futex(&(0x7f0000000040), 0x6, 0x0, &(0x7f0000000240), &(0x7f0000000380)=0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1ff, 0x6, 0xffffffffffffffff, 0x0, 0x0}) r5 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 2.275241737s ago: executing program 2 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) chmod(0x0, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf252001000000000000000000000000000100000000000200000000000000000001000000004e2300000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0xb8}}, 0x0) 1.449308817s ago: executing program 4 (id=930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) setreuid(0xee01, 0xee01) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) eventfd2(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$isdn(0x22, 0x2, 0x25) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x1, @val=@netfilter={0x3, 0x4, 0x600, 0x1}}, 0x20) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000001217000002ffe2fcbb38035cfd1b6fa27e203131c3401567ac922c0c40c9aa3f1bc4b535ebd19b434500391a6dad7791c59de3000000006e0000"], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000003920adae00140000a234c6deed9aa299669f0006000200000001000000002e612e2000"], 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x400c010) accept4(r4, &(0x7f00000002c0)=@ethernet={0x0, @remote}, &(0x7f0000000380)=0x80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c002200020101020000000000000000000000071800028014000180082001000000000008000200ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000067636d5f6261736528637472286165732d6165736e69292c67686173682d67656e657269632900"/86], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_crypto(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 1.389774388s ago: executing program 1 (id=931): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc, 0x20000000}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$usbfs(0x0, 0xe, 0x101301) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) fsopen(0x0, 0x0) (async) unshare(0x2000400) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[], 0x40000) (async) r5 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/240, 0xf0}], 0x1}, 0x1ff}], 0x1, 0x20022, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3400d1ab40000100f8ff0700040000000100000004004880100001800c00108008000b00", @ANYRES32=r0, @ANYBLOB="0c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.237646285s ago: executing program 2 (id=932): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) r0 = userfaultfd(0x80801) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) read(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x30, 0x0, @void}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r2], 0x2b) sendfile(r4, r2, 0x0, 0x4000000053d2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1.165262282s ago: executing program 3 (id=933): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x10601}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 1.073337788s ago: executing program 1 (id=934): r0 = syz_io_uring_setup(0x35fb, &(0x7f0000000480)={0x0, 0x7734, 0x2, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) socket$inet(0xa, 0x801, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x35fb, &(0x7f0000000480)={0x0, 0x7734, 0x2, 0x0, 0x34f}, &(0x7f0000000000), &(0x7f0000000080)) (async) socket$inet(0xa, 0x801, 0x84) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) (async) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) 953.866985ms ago: executing program 4 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prlimit64(r0, 0x12313e1060d443dc, 0x0, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/69, 0x0, 0x70000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000600)=""/79, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) 724.120414ms ago: executing program 0 (id=936): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0, 0x48}, 0x28) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x2, 0x441, 0x814, 0x2, 0x9, 0x3, 0x9, 0xffffff01, 0x6, 0x1, 0x6, 0x80ff}}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0xff0}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x300, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x6, &(0x7f00000004c0)=0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 53.214682ms ago: executing program 1 (id=937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x1, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 0s ago: executing program 3 (id=938): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1300000005000000100000005f740000880000", @ANYBLOB='{C\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b400100000020000107c00000008000000950000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = semget$private(0x0, 0x2, 0x2) mount$9p_unix(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000500), 0xa0040, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d756e69782c706f73697861636c2c616669643d307830303030303030303030303b666666662c64656275673d3078303030303030303030303030303030312c6d6d61702c006bc1df51e469b20b461e7a0ebf05002bd8b7acc95699665ec915efa0a51392a6ba0bbec6f0f74eaac6faa1af3b8dd1a9a72dc7376183ce9a4fce33544e15d54e5cf1e601852287a0b1e9db1266e747f7cad189a63722104922b7a8d017a4ce1b21e52521c3d7ac0641963508ca44cfd8887521adc089b5c64f2afc5a5829469bda907c5908b45903e11cc07b95caa5d7713f2a1fe150f94549606d55629f57ae0c40c565102f1a0400fffadea9d0bd2080"]) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)) shmat(0x0, &(0x7f000091b000/0x3000)=nil, 0xffffffffffffcfff) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000002c0)='hfsplus\x00', 0xc4, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r6 = memfd_secret(0x0) ftruncate(r6, 0x581) kernel console output (not intermixed with test programs): 693239.285:2278): avc: denied { ioctl } for pid=8267 comm="syz.2.582" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 224.708237][ T30] audit: type=1400 audit(1766693239.415:2279): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 224.738191][ T5822] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 224.756071][ T5822] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 224.768296][ T5822] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.780279][ T5822] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.791900][ T5822] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 224.886999][ T8275] netlink: 64 bytes leftover after parsing attributes in process `syz.3.584'. [ 225.291321][ T5822] usb 2-1: string descriptor 0 read error: -22 [ 225.304907][ T5822] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 225.349701][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.386897][ T5822] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 226.893378][ T8297] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 227.203392][ T5982] usb 2-1: USB disconnect, device number 25 [ 228.442213][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 228.442224][ T30] audit: type=1400 audit(1766693243.195:2291): avc: denied { shutdown } for pid=8306 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.632920][ T30] audit: type=1400 audit(1766693243.385:2292): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 228.905867][ T30] audit: type=1400 audit(1766693243.655:2293): avc: denied { bind } for pid=8315 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.970014][ T30] audit: type=1400 audit(1766693243.655:2294): avc: denied { write } for pid=8315 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 229.088848][ T5822] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 229.097019][ T8330] cgroup: Unexpected value for 'xattr' [ 229.125853][ T30] audit: type=1400 audit(1766693243.875:2295): avc: denied { write } for pid=8325 comm="syz.2.598" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 229.161066][ T8319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.189543][ T5982] libceph: connect (1)[c::]:6789 error -101 [ 229.189767][ T5982] libceph: mon0 (1)[c::]:6789 connect error [ 229.228168][ T30] audit: type=1400 audit(1766693243.875:2296): avc: denied { open } for pid=8325 comm="syz.2.598" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 229.259010][ T30] audit: type=1400 audit(1766693243.905:2297): avc: denied { ioctl } for pid=8325 comm="syz.2.598" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 229.291215][ T30] audit: type=1400 audit(1766693244.015:2298): avc: denied { create } for pid=8315 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.292192][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 229.321302][ T8329] ceph: No mds server is up or the cluster is laggy [ 229.383358][ T30] audit: type=1400 audit(1766693244.135:2299): avc: denied { ioctl } for pid=8316 comm="syz.0.596" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.383554][ T5822] usb 1-1: too many configurations: 190, using maximum allowed: 8 [ 229.491122][ T5822] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 229.498920][ T5822] usb 1-1: can't read configurations, error -61 [ 229.562345][ T30] audit: type=1400 audit(1766693244.305:2300): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.638753][ T5822] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 229.818635][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 229.851829][ T5822] usb 1-1: too many configurations: 190, using maximum allowed: 8 [ 229.932654][ T5822] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 229.942306][ T5822] usb 1-1: can't read configurations, error -61 [ 230.083078][ T5827] Bluetooth: hci0: unexpected event for opcode 0x200b [ 230.084327][ T8345] netlink: 'syz.3.600': attribute type 5 has an invalid length. [ 230.117571][ T5822] usb usb1-port1: attempt power cycle [ 230.236427][ T8353] tmpfs: Bad value for 'mpol' [ 230.479019][ T5822] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 230.503899][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 230.525354][ T5822] usb 1-1: too many configurations: 190, using maximum allowed: 8 [ 230.538729][ T7751] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 230.569849][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 230.577944][ T8360] team0: Port device batadv1 added [ 230.635854][ T5822] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 230.661624][ T5822] usb 1-1: can't read configurations, error -61 [ 230.701414][ T7751] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 230.738569][ T7751] usb 5-1: config 0 has no interface number 0 [ 230.797649][ T7751] usb 5-1: too many endpoints for config 0 interface 52 altsetting 33: 219, using maximum allowed: 30 [ 230.888994][ T5822] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 231.023262][ T7751] usb 5-1: config 0 interface 52 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 231.037019][ T7751] usb 5-1: config 0 interface 52 has no altsetting 0 [ 231.047467][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 231.070751][ T5822] usb 1-1: too many configurations: 190, using maximum allowed: 8 [ 231.108820][ T5822] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 231.116399][ T5822] usb 1-1: can't read configurations, error -61 [ 231.137990][ T5822] usb usb1-port1: unable to enumerate USB device [ 231.145746][ T7751] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 231.945939][ T7751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.950894][ T8368] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.606'. [ 232.019539][ T7751] usb 5-1: Product: syz [ 232.023711][ T7751] usb 5-1: Manufacturer: syz [ 232.081781][ T7751] usb 5-1: SerialNumber: syz [ 232.096825][ T7751] usb 5-1: config 0 descriptor?? [ 232.261032][ T8374] syzkaller0: entered promiscuous mode [ 232.277339][ T8374] syzkaller0: entered allmulticast mode [ 232.529321][ T8380] CUSE: info not properly terminated [ 232.604300][ T8380] netlink: 128 bytes leftover after parsing attributes in process `syz.2.609'. [ 232.630246][ T8380] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 232.838662][ T7751] usb 5-1: USB disconnect, device number 28 [ 233.041499][ T8390] cgroup: Unexpected value for 'xattr' [ 233.358967][ T7751] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 233.517096][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 233.517110][ T30] audit: type=1400 audit(1766693248.265:2393): avc: denied { mount } for pid=8382 comm="syz.1.610" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 233.571159][ T7751] usb 4-1: Using ep0 maxpacket: 16 [ 233.572942][ T8410] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 233.585229][ T30] audit: type=1400 audit(1766693248.325:2394): avc: denied { mounton } for pid=8382 comm="syz.1.610" path="/117/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 234.311963][ T30] audit: type=1400 audit(1766693248.365:2395): avc: denied { allowed } for pid=8406 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 234.355775][ T5827] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 234.367470][ T5827] Bluetooth: hci0: Injecting HCI hardware error event [ 234.375767][ T5827] Bluetooth: hci0: hardware error 0x00 [ 234.427777][ T7751] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 234.437101][ T7751] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 234.446639][ T7751] usb 4-1: Product: syz [ 234.465353][ T7751] usb 4-1: Manufacturer: syz [ 234.474083][ T7751] usb 4-1: SerialNumber: syz [ 234.497518][ T7751] usb 4-1: config 0 descriptor?? [ 234.550912][ T30] audit: type=1400 audit(1766693248.375:2396): avc: denied { create } for pid=8406 comm="syz.4.615" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 234.727064][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.613'. [ 234.753307][ T847] usb 4-1: USB disconnect, device number 29 [ 234.766856][ T30] audit: type=1400 audit(1766693248.375:2397): avc: denied { map } for pid=8406 comm="syz.4.615" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 234.814692][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.909175][ T30] audit: type=1400 audit(1766693248.375:2398): avc: denied { read write } for pid=8406 comm="syz.4.615" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 234.952062][ T30] audit: type=1400 audit(1766693248.375:2399): avc: denied { mount } for pid=8382 comm="syz.1.610" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 234.975665][ T5943] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 235.072001][ T30] audit: type=1400 audit(1766693249.295:2400): avc: denied { read } for pid=8382 comm="syz.1.610" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 235.131505][ T30] audit: type=1400 audit(1766693249.295:2401): avc: denied { read } for pid=8382 comm="syz.1.610" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 235.187687][ T30] audit: type=1400 audit(1766693249.325:2402): avc: denied { open } for pid=8382 comm="syz.1.610" path="/117/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 235.658560][ T973] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 235.695611][ T8447] syzkaller0: entered promiscuous mode [ 235.708760][ T8447] syzkaller0: entered allmulticast mode [ 235.850999][ T973] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 235.882112][ T973] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 235.906516][ T973] usb 4-1: config 0 interface 0 has no altsetting 0 [ 236.036116][ T973] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 236.072506][ T973] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 236.115344][ T973] usb 4-1: Product: syz [ 236.162091][ T973] usb 4-1: Manufacturer: syz [ 236.191390][ T973] usb 4-1: SerialNumber: syz [ 236.241776][ T973] usb 4-1: config 0 descriptor?? [ 236.283670][ T973] usb 4-1: selecting invalid altsetting 0 [ 236.398662][ T5827] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 236.458568][ T6015] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 236.529778][ T8454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.574821][ T973] usb 4-1: USB disconnect, device number 30 [ 236.622130][ T6015] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 236.631503][ T6015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.671735][ T6015] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 236.688530][ T6015] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 236.696756][ T6015] usb 2-1: Manufacturer: syz [ 236.799713][ T6015] usb 2-1: config 0 descriptor?? [ 237.055673][ T6015] rc_core: IR keymap rc-hauppauge not found [ 237.086228][ T6015] Registered IR keymap rc-empty [ 237.119602][ T6015] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 237.177473][ T6015] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 237.354739][ T6015] usb 2-1: USB disconnect, device number 26 [ 237.422684][ T8469] bridge0: port 3(gretap0) entered blocking state [ 237.429894][ T8469] bridge0: port 3(gretap0) entered disabled state [ 237.436405][ T8469] gretap0: entered allmulticast mode [ 237.442648][ T8469] gretap0: entered promiscuous mode [ 237.448242][ T8469] bridge0: port 3(gretap0) entered blocking state [ 237.454880][ T8469] bridge0: port 3(gretap0) entered forwarding state [ 237.469052][ T8470] cgroup: Unexpected value for 'xattr' [ 238.151137][ T8481] netlink: 32 bytes leftover after parsing attributes in process `syz.2.630'. [ 238.554482][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 238.554493][ T30] audit: type=1400 audit(1766693253.305:2481): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 238.597839][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 238.624736][ T30] audit: type=1400 audit(1766693253.375:2482): avc: denied { create } for pid=8488 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.648711][ T5943] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 238.663727][ T8489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.635'. [ 238.673516][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 238.682390][ T30] audit: type=1400 audit(1766693253.415:2483): avc: denied { write } for pid=8488 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.704718][ T8487] netlink: 'syz.2.634': attribute type 11 has an invalid length. [ 238.714513][ T30] audit: type=1400 audit(1766693253.415:2484): avc: denied { read } for pid=8488 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.735165][ T8489] overlayfs: failed to resolve './file1': -2 [ 238.748601][ T30] audit: type=1400 audit(1766693253.495:2485): avc: denied { mounton } for pid=8488 comm="syz.4.635" path="/111/bus" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 238.797243][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 238.806121][ T5943] usb 4-1: device descriptor read/64, error -71 [ 238.823293][ T30] audit: type=1400 audit(1766693253.495:2486): avc: denied { read } for pid=8486 comm="syz.2.634" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 238.845566][ T30] audit: type=1400 audit(1766693253.495:2487): avc: denied { open } for pid=8486 comm="syz.2.634" path="net:[4026532801]" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 238.877251][ T30] audit: type=1400 audit(1766693253.495:2488): avc: denied { create } for pid=8486 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.888541][ T8487] netlink: 'syz.2.634': attribute type 7 has an invalid length. [ 238.897892][ T30] audit: type=1400 audit(1766693253.495:2489): avc: denied { setopt } for pid=8486 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.078570][ T5943] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 239.116951][ T30] audit: type=1400 audit(1766693253.495:2490): avc: denied { bind } for pid=8486 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.208572][ T5943] usb 4-1: device descriptor read/64, error -71 [ 239.356730][ T5943] usb usb4-port1: attempt power cycle [ 239.658680][ T847] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 239.797019][ T8507] mmap: syz.1.639 (8507) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 239.840133][ T6244] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 239.848147][ T5943] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 239.861984][ T847] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.871103][ T847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.879624][ T5943] usb 4-1: device descriptor read/8, error -71 [ 239.886976][ T8508] loop9: detected capacity change from 0 to 7 [ 239.889837][ T847] usb 1-1: config 0 descriptor?? [ 239.956301][ T8508] Dev loop9: unable to read RDB block 7 [ 239.960067][ T847] cp210x 1-1:0.0: cp210x converter detected [ 239.974361][ T8508] loop9: AHDI p1 p2 [ 239.981039][ T8508] loop9: partition table partially beyond EOD, truncated [ 239.998612][ T6244] usb 5-1: Using ep0 maxpacket: 32 [ 240.033271][ T6244] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 240.042828][ T6244] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.078216][ T6244] usb 5-1: config 0 has no interface number 0 [ 240.087638][ T6244] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.143224][ T8508] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 240.153418][ T6244] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 240.162672][ T6244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.172633][ T6244] usb 5-1: Product: syz [ 240.176902][ T6244] usb 5-1: Manufacturer: syz [ 240.181646][ T5943] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 240.198800][ T6244] usb 5-1: SerialNumber: syz [ 240.205191][ T6244] usb 5-1: config 0 descriptor?? [ 240.213850][ T6244] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 240.221851][ T6244] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 240.237230][ T5943] usb 4-1: device descriptor read/8, error -71 [ 240.330840][ T847] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 240.378851][ T5943] usb usb4-port1: unable to enumerate USB device [ 240.456138][ T6244] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 240.475991][ T847] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 240.497067][ T847] usb 1-1: cp210x converter now attached to ttyUSB0 [ 240.537761][ T847] usb 1-1: USB disconnect, device number 34 [ 240.551570][ T847] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.595314][ T847] cp210x 1-1:0.0: device disconnected [ 240.662941][ T6244] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 240.881491][ T6015] usb 5-1: USB disconnect, device number 29 [ 240.887881][ T6015] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 240.975492][ T8525] batadv_slave_1: entered promiscuous mode [ 240.996199][ T8526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.643'. [ 242.133268][ T8544] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 242.152628][ T8544] overlayfs: missing 'lowerdir' [ 242.225943][ T8510] batadv_slave_1: left promiscuous mode [ 242.318566][ T847] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 242.427634][ T8550] kAFS: unable to lookup cell 'Þ({^ú@' [ 242.868639][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 243.169990][ T847] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.181410][ T847] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 243.194586][ T847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.211584][ T847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.220106][ T847] usb 2-1: Product: syz [ 243.226748][ T847] usb 2-1: Manufacturer: syz [ 243.231563][ T847] usb 2-1: SerialNumber: syz [ 243.308599][ T973] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 243.316707][ T6015] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 243.441183][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.451024][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.458536][ T6015] usb 3-1: device descriptor read/64, error -71 [ 243.482279][ T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.492844][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.504046][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.514480][ T973] usb 1-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 243.523556][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.533758][ T973] usb 1-1: config 0 descriptor?? [ 243.660872][ T8540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.678568][ T6244] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 243.718669][ T6015] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 243.838570][ T6244] usb 5-1: Using ep0 maxpacket: 8 [ 243.845159][ T6244] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 243.848592][ T6015] usb 3-1: device descriptor read/64, error -71 [ 243.853474][ T6244] usb 5-1: config 0 has no interface number 0 [ 243.865871][ T6244] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.876897][ T6244] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 243.888835][ T6244] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.899942][ T6244] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 243.909858][ T6244] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.922943][ T6244] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 243.932059][ T6244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.943218][ T6244] usb 5-1: config 0 descriptor?? [ 243.953975][ T6244] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 243.971588][ T6015] usb usb3-port1: attempt power cycle [ 244.042482][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 244.042518][ T30] audit: type=1400 audit(1766693258.795:2550): avc: denied { ioctl } for pid=8566 comm="syz.3.655" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 244.089183][ T847] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 244.090255][ T8540] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 244.095335][ T847] cdc_ncm 2-1:1.0: bind() failure [ 244.112110][ T847] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 244.119567][ T847] cdc_ncm 2-1:1.1: bind() failure [ 244.145990][ T973] usbhid 1-1:0.0: can't add hid device: -71 [ 244.159518][ T8565] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 244.165619][ T973] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 244.180444][ T973] usb 1-1: USB disconnect, device number 35 [ 244.224280][ T30] audit: type=1400 audit(1766693258.975:2551): avc: denied { create } for pid=8564 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.245142][ T30] audit: type=1400 audit(1766693258.995:2552): avc: denied { write } for pid=8564 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.267872][ T30] audit: type=1400 audit(1766693259.015:2553): avc: denied { setopt } for pid=8564 comm="syz.4.654" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.313659][ T5943] usb 2-1: USB disconnect, device number 27 [ 244.318562][ T6015] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 244.319652][ T847] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 244.349498][ T6015] usb 3-1: device descriptor read/8, error -71 [ 244.488573][ T847] usb 4-1: Using ep0 maxpacket: 16 [ 244.494967][ T847] usb 4-1: config 10 has an invalid interface number: 93 but max is 0 [ 244.504457][ T847] usb 4-1: config 10 has no interface number 0 [ 244.512703][ T847] usb 4-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08 [ 244.521982][ T847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.530032][ T847] usb 4-1: Product: syz [ 244.534374][ T847] usb 4-1: Manufacturer: syz [ 244.539036][ T847] usb 4-1: SerialNumber: syz [ 244.548031][ T847] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 244.558412][ T847] dvb-usb: bulk message failed: -22 (2/0) [ 244.564318][ T847] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 244.573248][ T847] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 244.583929][ T847] usb 4-1: media controller created [ 244.590056][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.601131][ T847] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 244.610161][ T847] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 244.618658][ T6015] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 244.659254][ T6015] usb 3-1: device descriptor read/8, error -71 [ 244.668544][ T847] rc_core: IR keymap rc-dtt200u not found [ 244.674490][ T847] Registered IR keymap rc-empty [ 244.682474][ T847] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 244.696987][ T847] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input27 [ 244.722687][ T30] audit: type=1400 audit(1766693259.475:2554): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3374 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.747266][ T847] dvb-usb: schedule remote query interval to 300 msecs. [ 244.754545][ T847] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 244.770343][ T30] audit: type=1400 audit(1766693259.505:2555): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3374 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.797629][ T6015] usb usb3-port1: unable to enumerate USB device [ 244.797728][ T847] usb 4-1: USB disconnect, device number 35 [ 244.816571][ T30] audit: type=1400 audit(1766693259.505:2556): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3374 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.861731][ T30] audit: type=1400 audit(1766693259.595:2557): avc: denied { read write } for pid=8571 comm="syz.0.656" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 244.965549][ T847] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 245.003409][ T30] audit: type=1400 audit(1766693259.595:2558): avc: denied { open } for pid=8571 comm="syz.0.656" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.028737][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 245.057481][ T30] audit: type=1400 audit(1766693259.665:2559): avc: denied { ioctl } for pid=8576 comm="syz.1.657" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 245.145790][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 245.640623][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 246.027972][ T8598] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 246.208630][ T5958] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 246.671124][ T24] usb 5-1: USB disconnect, device number 30 [ 246.701252][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 246.712388][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 246.730316][ T8605] netlink: 'syz.3.664': attribute type 3 has an invalid length. [ 246.788661][ T5958] usb 1-1: device descriptor read/64, error -71 [ 247.228749][ T5958] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 247.408570][ T24] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 247.416787][ T5958] usb 1-1: device descriptor read/64, error -71 [ 247.965902][ T5958] usb usb1-port1: attempt power cycle [ 248.006192][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.017281][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.050506][ T24] usb 3-1: config 0 descriptor?? [ 248.087588][ T24] cp210x 3-1:0.0: cp210x converter detected [ 248.326472][ T8623] netlink: 104 bytes leftover after parsing attributes in process `syz.1.670'. [ 248.365604][ T5958] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 248.697249][ T5958] usb 1-1: device descriptor read/8, error -71 [ 248.748740][ T24] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 248.756364][ T24] cp210x 3-1:0.0: querying part number failed [ 248.821180][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 248.928678][ T847] usb 3-1: USB disconnect, device number 37 [ 248.995344][ T5958] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 249.101748][ T847] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.112527][ T847] cp210x 3-1:0.0: device disconnected [ 249.437123][ T5958] usb 1-1: device not accepting address 39, error -71 [ 249.454209][ T5958] usb usb1-port1: unable to enumerate USB device [ 250.205639][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 250.358402][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 250.358417][ T30] audit: type=1400 audit(1766693265.105:2603): avc: denied { getopt } for pid=8641 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.478173][ T30] audit: type=1400 audit(1766693265.155:2604): avc: denied { write } for pid=8644 comm="syz.1.676" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 251.510722][ T30] audit: type=1400 audit(1766693265.685:2605): avc: denied { shutdown } for pid=8641 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.900964][ T8651] ceph: No mds server is up or the cluster is laggy [ 251.917002][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 251.924306][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 252.128519][ T30] audit: type=1400 audit(1766693266.815:2606): avc: denied { create } for pid=8661 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 252.158668][ T30] audit: type=1400 audit(1766693266.815:2607): avc: denied { ioctl } for pid=8661 comm="syz.3.680" path="socket:[21664]" dev="sockfs" ino=21664 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 252.210002][ T30] audit: type=1400 audit(1766693266.825:2608): avc: denied { bind } for pid=8661 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 252.451385][ T30] audit: type=1400 audit(1766693266.955:2609): avc: denied { mount } for pid=8657 comm="syz.2.679" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 252.818340][ T30] audit: type=1400 audit(1766693266.955:2610): avc: denied { mounton } for pid=8657 comm="syz.2.679" path="/129/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 252.844246][ T8663] Bluetooth: MGMT ver 1.23 [ 252.927395][ T8678] netlink: 104 bytes leftover after parsing attributes in process `syz.3.683'. [ 253.343401][ T30] audit: type=1400 audit(1766693266.965:2611): avc: denied { mount } for pid=8657 comm="syz.2.679" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 253.425943][ T30] audit: type=1400 audit(1766693267.065:2612): avc: denied { read write } for pid=8666 comm="syz.1.681" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 253.764267][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 254.878728][ T5958] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 255.323018][ T8709] netlink: 'syz.0.691': attribute type 19 has an invalid length. [ 255.333577][ T8710] usb usb1: usbfs: process 8710 (syz.3.690) did not claim interface 0 before use [ 255.334567][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 255.351598][ T8709] netlink: 'syz.0.691': attribute type 19 has an invalid length. [ 255.361606][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.368234][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.374851][ T3510] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.377596][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 255.397131][ T3510] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.407491][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 255.445210][ T5958] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 255.473287][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.538843][ T3510] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.555696][ T3510] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.568627][ T5958] usb 5-1: Product: syz [ 255.573758][ T5958] usb 5-1: Manufacturer: syz [ 255.621991][ T5958] usb 5-1: SerialNumber: syz [ 255.644420][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 255.644431][ T30] audit: type=1400 audit(1766693270.395:2628): avc: denied { bind } for pid=8722 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.687196][ T5958] usb 5-1: config 0 descriptor?? [ 255.695920][ T5958] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 255.703596][ T5958] dvb-usb: bulk message failed: -22 (2/0) [ 255.718432][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.743448][ T5958] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 255.762569][ T5958] usb 5-1: media controller created [ 255.785290][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.834362][ T5958] usb 5-1: selecting invalid altsetting 7 [ 255.844300][ T5958] cxusb: set interface failed [ 255.856434][ T5958] dvb-usb: bulk message failed: -22 (1/0) [ 255.860415][ T30] audit: type=1400 audit(1766693270.615:2629): avc: denied { read } for pid=8729 comm="syz.0.697" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.890784][ T30] audit: type=1400 audit(1766693270.645:2630): avc: denied { open } for pid=8729 comm="syz.0.697" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.918734][ T6244] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 255.935195][ T30] audit: type=1400 audit(1766693270.645:2631): avc: denied { ioctl } for pid=8729 comm="syz.0.697" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.935388][ T5958] DVB: Unable to find symbol lgdt330x_attach() [ 255.935401][ T5958] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 256.109148][ T5958] rc_core: IR keymap rc-dvico-portable not found [ 256.109167][ T5958] Registered IR keymap rc-empty [ 256.109969][ T5958] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 256.118259][ T5958] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input28 [ 256.121894][ T5958] dvb-usb: schedule remote query interval to 100 msecs. [ 256.121916][ T5958] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 256.128564][ T6244] usb 4-1: Using ep0 maxpacket: 16 [ 256.130477][ T6244] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 256.130519][ T6244] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.130544][ T6244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.130569][ T6244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 256.130589][ T6244] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.130623][ T6244] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 256.130643][ T6244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.155750][ T6244] usb 4-1: config 0 descriptor?? [ 256.250193][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 256.428587][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 256.452961][ T30] audit: type=1400 audit(1766693271.175:2632): avc: denied { read } for pid=8737 comm="syz.1.698" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 256.494415][ T6244] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input29 [ 256.514954][ T30] audit: type=1400 audit(1766693271.175:2633): avc: denied { open } for pid=8737 comm="syz.1.698" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 256.543031][ T5169] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 256.551058][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 256.571311][ T5169] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 256.580377][ T5169] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 256.642110][ T30] audit: type=1400 audit(1766693271.185:2634): avc: denied { ioctl } for pid=8737 comm="syz.1.698" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 256.642702][ T5830] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 256.685889][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 256.741574][ T6244] usb 4-1: USB disconnect, device number 36 [ 256.755429][ T30] audit: type=1400 audit(1766693271.185:2635): avc: denied { set_context_mgr } for pid=8737 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 256.775540][ T30] audit: type=1400 audit(1766693271.485:2636): avc: denied { read } for pid=8716 comm="syz.3.692" name="event4" dev="devtmpfs" ino=3392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 256.800440][ T30] audit: type=1400 audit(1766693271.485:2637): avc: denied { create } for pid=8716 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.859174][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 257.344377][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 257.405087][ T8735] dvb-usb: bulk message failed: -22 (4/0) [ 257.454142][ T8735] cxusb: i2c read failed [ 257.468680][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 257.482914][ T8738] binder: 8737:8738 ioctl c0306201 200000000300 returned -22 [ 257.593863][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 257.709236][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 257.908740][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 257.972336][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.704'. [ 258.031098][ T5958] dvb-usb: bulk message failed: -22 (1/0) [ 258.137707][ T8765] cgroup: Unexpected value for 'xattr' [ 258.176397][ T7751] dvb-usb: bulk message failed: -22 (1/0) [ 258.249841][ T5958] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 258.298557][ T7751] dvb-usb: bulk message failed: -22 (1/0) [ 258.418613][ T7751] dvb-usb: bulk message failed: -22 (1/0) [ 258.428566][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 258.437501][ T5958] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 258.466764][ T5958] usb 3-1: config 0 has no interface number 0 [ 258.482580][ T5958] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 258.494111][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.502995][ T5958] usb 3-1: Product: syz [ 258.546124][ T6244] usb 5-1: USB disconnect, device number 31 [ 258.638207][ T5958] usb 3-1: Manufacturer: syz [ 258.645876][ T6244] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 258.746387][ T5958] usb 3-1: SerialNumber: syz [ 258.761966][ T5958] usb 3-1: config 0 descriptor?? [ 258.779941][ T5958] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 259.310542][ T5958] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 259.342770][ T5958] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 260.028672][ T6244] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 260.704142][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 260.704157][ T30] audit: type=1400 audit(1766693275.455:2719): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 260.773862][ T8794] cgroup: Unexpected value for 'xattr' [ 260.788623][ T6244] usb 5-1: device descriptor read/64, error -71 [ 260.819837][ T30] audit: type=1400 audit(1766693275.495:2720): avc: denied { read } for pid=8790 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.883739][ T8799] [U] [ 260.917678][ T8799] [U] D [ 260.920469][ T8799] [U]  [ 260.935360][ T30] audit: type=1400 audit(1766693275.495:2721): avc: denied { open } for pid=8790 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.969092][ T8799] [U] @ [ 260.971910][ T8799] [U] [ 260.974594][ T8799] [U] [ 260.977289][ T8799] [U] [ 260.979991][ T8799] [U] [ 261.007109][ T8799] [U] [ 261.009847][ T8799] [U] [ 261.012554][ T8799] [U] [ 261.015256][ T8799] [U] [ 261.025939][ T30] audit: type=1400 audit(1766693275.665:2722): avc: denied { execmem } for pid=8797 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 261.104004][ T30] audit: type=1400 audit(1766693275.685:2723): avc: denied { create } for pid=8800 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.124812][ T6244] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 261.133713][ T8799] [U] [ 261.136433][ T8799] [U] [ 261.139131][ T8799] [U] [ 261.198149][ T30] audit: type=1400 audit(1766693275.685:2724): avc: denied { write } for pid=8800 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.298648][ T6244] usb 5-1: device descriptor read/64, error -71 [ 261.379407][ T30] audit: type=1400 audit(1766693275.685:2725): avc: denied { read } for pid=8800 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.404141][ T8818] netlink: 32 bytes leftover after parsing attributes in process `syz.0.716'. [ 261.431886][ T6244] usb usb5-port1: attempt power cycle [ 261.488138][ T30] audit: type=1400 audit(1766693275.725:2726): avc: denied { search } for pid=8796 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.591031][ T30] audit: type=1400 audit(1766693275.725:2727): avc: denied { read } for pid=8796 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.659442][ T30] audit: type=1400 audit(1766693275.725:2728): avc: denied { open } for pid=8796 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.875091][ T6244] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 261.899263][ T6244] usb 5-1: device descriptor read/8, error -71 [ 262.048524][ T8830] evm: overlay not supported [ 262.428583][ T6244] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 262.480337][ T6244] usb 5-1: device descriptor read/8, error -71 [ 262.662780][ T6244] usb usb5-port1: unable to enumerate USB device [ 263.330608][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.723'. [ 263.347109][ T8846] overlayfs: failed to resolve './file1': -2 [ 263.358738][ T5827] Bluetooth: hci4: command 0x2016 tx timeout [ 263.488570][ T5958] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 263.648582][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 263.655230][ T5958] usb 4-1: config 1 has an invalid interface number: 133 but max is 0 [ 263.663838][ T5958] usb 4-1: config 1 has no interface number 0 [ 263.670321][ T5958] usb 4-1: config 1 interface 133 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 263.686852][ T5958] usb 4-1: config 1 interface 133 has no altsetting 0 [ 263.698413][ T5958] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=40.f3 [ 263.707670][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.715905][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 263.888571][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 263.902293][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 263.912747][ T24] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.922951][ T5822] usb 3-1: USB disconnect, device number 38 [ 263.929825][ T8757] [U] [ 263.933047][ T24] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 263.951041][ T8860] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 263.957500][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 263.973676][ T5822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 263.991823][ T8839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.004766][ T8839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.007847][ T24] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 264.027402][ T5822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 264.066213][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.085350][ T5958] usb 4-1: string descriptor 0 read error: -71 [ 264.092312][ T8862] F2FS-fs: Conflicting test_dummy_encryption options [ 264.099915][ T5822] quatech2 3-1:0.51: device disconnected [ 264.132566][ T5958] usb 4-1: USB disconnect, device number 37 [ 264.149275][ T24] usb 2-1: config 0 descriptor?? [ 264.341236][ T8871] vivid-007: disconnect [ 264.520357][ T8873] cgroup: Unexpected value for 'xattr' [ 264.590396][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 264.642221][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 264.677413][ T24] usb 2-1: USB disconnect, device number 28 [ 264.909832][ T8878] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 264.916603][ T8878] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 264.967338][ T8878] vhci_hcd vhci_hcd.0: Device attached [ 264.979738][ T8883] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 264.986354][ T8883] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.019127][ T8883] vhci_hcd vhci_hcd.0: Device attached [ 265.031332][ T8878] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 265.037934][ T8878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.067164][ T8878] vhci_hcd vhci_hcd.0: Device attached [ 265.110246][ T8883] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 265.114500][ T8868] vivid-007: reconnect [ 265.116864][ T8883] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.128803][ T5943] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 265.171756][ T8878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.187905][ T8883] vhci_hcd vhci_hcd.0: Device attached [ 265.197811][ T6244] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 265.209459][ T5943] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 265.311264][ T8893] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(24) [ 265.317903][ T8893] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.355262][ T8883] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.410219][ T8893] vhci_hcd vhci_hcd.0: Device attached [ 265.430864][ T5825] Bluetooth: hci4: command 0x2016 tx timeout [ 265.473119][ T8905] ocfs2: Bad value for 'barrier' [ 265.490447][ T6244] usb 5-1: device descriptor read/64, error -71 [ 265.900321][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 265.900338][ T30] audit: type=1400 audit(1766693280.385:2874): avc: denied { ioctl } for pid=8903 comm="syz.2.738" path="socket:[22347]" dev="sockfs" ino=22347 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 265.939642][ T30] audit: type=1400 audit(1766693280.395:2875): avc: denied { create } for pid=8903 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 265.959673][ T30] audit: type=1400 audit(1766693280.685:2876): avc: denied { read } for pid=8903 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 265.963383][ T5866] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 265.986878][ T6244] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 266.007039][ T30] audit: type=1400 audit(1766693280.695:2877): avc: denied { create } for pid=8903 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.088830][ T8886] vhci_hcd: connection closed [ 266.090596][ T8888] vhci_hcd: connection closed [ 266.095853][ T8896] vhci_hcd: connection closed [ 266.109321][ T3804] vhci_hcd vhci_hcd.3: stop threads [ 266.123657][ T8884] vhci_hcd: connection closed [ 266.135562][ T8879] vhci_hcd: connection reset by peer [ 266.151950][ T3804] vhci_hcd vhci_hcd.3: release socket [ 266.157895][ T30] audit: type=1400 audit(1766693280.695:2878): avc: denied { write } for pid=8903 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.184856][ T3804] vhci_hcd vhci_hcd.3: disconnect device [ 266.195605][ T30] audit: type=1400 audit(1766693280.695:2879): avc: denied { nlmsg_write } for pid=8903 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.195636][ T3804] vhci_hcd vhci_hcd.3: stop threads [ 266.223000][ T30] audit: type=1400 audit(1766693280.945:2880): avc: denied { create } for pid=8909 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 266.243935][ T3804] vhci_hcd vhci_hcd.3: release socket [ 266.249562][ T6244] usb 5-1: device descriptor read/64, error -71 [ 266.256526][ T30] audit: type=1400 audit(1766693280.945:2881): avc: denied { bind } for pid=8909 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 266.276606][ T3804] vhci_hcd vhci_hcd.3: disconnect device [ 266.283056][ T30] audit: type=1400 audit(1766693281.005:2882): avc: denied { read } for pid=8911 comm="syz.2.741" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 266.305818][ T3804] vhci_hcd vhci_hcd.3: stop threads [ 266.312317][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 266.320064][ T3804] vhci_hcd vhci_hcd.3: release socket [ 266.326364][ T5866] usb 2-1: too many configurations: 242, using maximum allowed: 8 [ 266.335360][ T3804] vhci_hcd vhci_hcd.3: disconnect device [ 266.341487][ T30] audit: type=1400 audit(1766693281.005:2883): avc: denied { open } for pid=8911 comm="syz.2.741" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 266.341866][ T3804] vhci_hcd vhci_hcd.3: stop threads [ 266.371090][ T6244] usb usb5-port1: attempt power cycle [ 266.371253][ T5866] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 266.385702][ T5866] usb 2-1: can't read configurations, error -61 [ 266.393081][ T3804] vhci_hcd vhci_hcd.3: release socket [ 266.399071][ T3804] vhci_hcd vhci_hcd.3: disconnect device [ 266.404859][ T3804] vhci_hcd vhci_hcd.3: stop threads [ 266.410151][ T3804] vhci_hcd vhci_hcd.3: release socket [ 266.416393][ T3804] vhci_hcd vhci_hcd.3: disconnect device [ 266.518917][ T5866] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 266.668606][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 266.674710][ T5866] usb 2-1: too many configurations: 242, using maximum allowed: 8 [ 266.685599][ T5866] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 266.693937][ T5866] usb 2-1: can't read configurations, error -61 [ 266.701591][ T5866] usb usb2-port1: attempt power cycle [ 266.718612][ T6244] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 266.740194][ T6244] usb 5-1: device descriptor read/8, error -71 [ 266.978650][ T6244] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 266.999657][ T6244] usb 5-1: device descriptor read/8, error -71 [ 267.058625][ T5866] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 267.079115][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 267.084742][ T5866] usb 2-1: too many configurations: 242, using maximum allowed: 8 [ 267.095382][ T5866] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 267.104904][ T5866] usb 2-1: can't read configurations, error -61 [ 267.111792][ T6244] usb usb5-port1: unable to enumerate USB device [ 268.468821][ T5866] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 268.546265][ T5866] usb 2-1: device descriptor read/8, error -71 [ 268.678899][ T5866] usb usb2-port1: unable to enumerate USB device [ 269.285272][ T8938] cgroup: Unexpected value for 'xattr' [ 269.466152][ T8941] netlink: 220 bytes leftover after parsing attributes in process `syz.1.749'. [ 270.058332][ T8958] FAULT_INJECTION: forcing a failure. [ 270.058332][ T8958] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 270.094891][ T8958] CPU: 0 UID: 0 PID: 8958 Comm: syz.2.755 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.094924][ T8958] Tainted: [L]=SOFTLOCKUP [ 270.094931][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.094942][ T8958] Call Trace: [ 270.094949][ T8958] [ 270.094957][ T8958] dump_stack_lvl+0x16c/0x1f0 [ 270.094985][ T8958] should_fail_ex+0x512/0x640 [ 270.095017][ T8958] should_fail_alloc_page+0xe7/0x130 [ 270.095043][ T8958] prepare_alloc_pages+0x401/0x670 [ 270.095068][ T8958] ? kernel_text_address+0x8d/0x100 [ 270.095095][ T8958] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 270.095126][ T8958] ? stack_trace_save+0x8e/0xc0 [ 270.095147][ T8958] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 270.095167][ T8958] ? trace_mm_page_alloc+0x11b/0x180 [ 270.095196][ T8958] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 270.095213][ T8958] ? __pmd_alloc+0xbf/0x9c0 [ 270.095234][ T8958] ? __handle_mm_fault+0xbeb/0x2bb0 [ 270.095258][ T8958] ? handle_mm_fault+0x3fe/0xad0 [ 270.095283][ T8958] ? do_user_addr_fault+0x7a6/0x1370 [ 270.095304][ T8958] ? exc_page_fault+0x64/0xc0 [ 270.095325][ T8958] ? asm_exc_page_fault+0x26/0x30 [ 270.095341][ T8958] ? rep_movs_alternative+0x30/0x90 [ 270.095367][ T8958] ? _copy_from_user+0x98/0xd0 [ 270.095391][ T8958] ? move_addr_to_kernel+0x65/0x170 [ 270.095414][ T8958] ? __sys_bind+0x11b/0x260 [ 270.095436][ T8958] ? __x64_sys_bind+0x72/0xb0 [ 270.095458][ T8958] ? do_syscall_64+0xcd/0xf80 [ 270.095479][ T8958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.095501][ T8958] ? policy_nodemask+0xea/0x4e0 [ 270.095527][ T8958] alloc_pages_mpol+0x1fb/0x550 [ 270.095551][ T8958] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 270.095588][ T8958] alloc_pages_noprof+0x131/0x390 [ 270.095613][ T8958] pte_alloc_one+0x1e/0x3d0 [ 270.095639][ T8958] __pte_alloc+0x6d/0x3f0 [ 270.095660][ T8958] ? __pfx___pte_alloc+0x10/0x10 [ 270.095683][ T8958] ? do_raw_spin_lock+0x12c/0x2b0 [ 270.095711][ T8958] ? find_held_lock+0x2b/0x80 [ 270.095740][ T8958] do_anonymous_page+0x1092/0x2190 [ 270.095768][ T8958] ? do_raw_spin_unlock+0x172/0x230 [ 270.095794][ T8958] ? _raw_spin_unlock+0x28/0x50 [ 270.095814][ T8958] ? __pmd_alloc+0x6aa/0x9c0 [ 270.095839][ T8958] __handle_mm_fault+0x1ecf/0x2bb0 [ 270.095874][ T8958] ? __pfx___handle_mm_fault+0x10/0x10 [ 270.095916][ T8958] ? find_vma+0xbf/0x140 [ 270.095936][ T8958] ? __pfx_find_vma+0x10/0x10 [ 270.095960][ T8958] handle_mm_fault+0x3fe/0xad0 [ 270.095992][ T8958] do_user_addr_fault+0x7a6/0x1370 [ 270.096017][ T8958] ? rcu_is_watching+0x12/0xc0 [ 270.096037][ T8958] exc_page_fault+0x64/0xc0 [ 270.096060][ T8958] asm_exc_page_fault+0x26/0x30 [ 270.096076][ T8958] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 270.096105][ T8958] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 270.096122][ T8958] RSP: 0018:ffffc900039cfd78 EFLAGS: 00050216 [ 270.096138][ T8958] RAX: 0000000000000001 RBX: 0000200000000080 RCX: 0000000000000014 [ 270.096150][ T8958] RDX: fffff52000739fc3 RSI: 0000200000000080 RDI: ffffc900039cfe00 [ 270.096162][ T8958] RBP: 0000000000000014 R08: 0000000000000001 R09: fffff52000739fc2 [ 270.096173][ T8958] R10: ffffc900039cfe13 R11: ffff888079a10b30 R12: 0000000000000000 [ 270.096184][ T8958] R13: ffffc900039cfe00 R14: ffff888030ef2700 R15: ffff888023c85080 [ 270.096210][ T8958] _copy_from_user+0x98/0xd0 [ 270.096237][ T8958] move_addr_to_kernel+0x65/0x170 [ 270.096262][ T8958] __sys_bind+0x11b/0x260 [ 270.096288][ T8958] ? __pfx___sys_bind+0x10/0x10 [ 270.096310][ T8958] ? __fget_files+0x20e/0x3c0 [ 270.096343][ T8958] ? __pfx_ksys_write+0x10/0x10 [ 270.096372][ T8958] __x64_sys_bind+0x72/0xb0 [ 270.096395][ T8958] ? lockdep_hardirqs_on+0x7c/0x110 [ 270.096417][ T8958] do_syscall_64+0xcd/0xf80 [ 270.096442][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.096460][ T8958] RIP: 0033:0x7ffb3cb8f749 [ 270.096474][ T8958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.096490][ T8958] RSP: 002b:00007ffb3d9d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 270.096507][ T8958] RAX: ffffffffffffffda RBX: 00007ffb3cde5fa0 RCX: 00007ffb3cb8f749 [ 270.096518][ T8958] RDX: 0000000000000014 RSI: 0000200000000080 RDI: 0000000000000004 [ 270.096529][ T8958] RBP: 00007ffb3d9d9090 R08: 0000000000000000 R09: 0000000000000000 [ 270.096539][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.096550][ T8958] R13: 00007ffb3cde6038 R14: 00007ffb3cde5fa0 R15: 00007ffc558bd208 [ 270.096575][ T8958] [ 270.692563][ T5943] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 270.912227][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 270.912242][ T30] audit: type=1400 audit(1766693285.665:2934): avc: denied { read write } for pid=8962 comm="syz.2.756" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.942953][ T30] audit: type=1400 audit(1766693285.665:2935): avc: denied { open } for pid=8962 comm="syz.2.756" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.966756][ T30] audit: type=1400 audit(1766693285.665:2936): avc: denied { ioctl } for pid=8962 comm="syz.2.756" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.140177][ T30] audit: type=1400 audit(1766693285.895:2937): avc: denied { prog_run } for pid=8959 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 271.159281][ T5822] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 271.308542][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 271.315350][ T5822] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 271.325970][ T5822] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 271.335556][ T5822] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.368776][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.579778][ T30] audit: type=1400 audit(1766693286.335:2938): avc: denied { create } for pid=8966 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 271.617046][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.627540][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.636768][ T30] audit: type=1400 audit(1766693286.385:2939): avc: denied { name_bind } for pid=8966 comm="syz.4.758" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 271.638346][ T5866] usb 3-1: USB disconnect, device number 39 [ 271.780692][ T30] audit: type=1400 audit(1766693286.535:2940): avc: denied { write } for pid=8968 comm="syz.4.759" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 271.886926][ T30] audit: type=1400 audit(1766693286.575:2941): avc: denied { open } for pid=8968 comm="syz.4.759" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 271.927201][ T30] audit: type=1400 audit(1766693286.635:2942): avc: denied { execmem } for pid=8974 comm="syz.3.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 272.397770][ T8982] bond0: entered promiscuous mode [ 272.402960][ T8982] bond_slave_0: entered promiscuous mode [ 272.411138][ T8982] bond_slave_1: entered promiscuous mode [ 272.436277][ T8982] dummy0: entered promiscuous mode [ 272.459722][ T8982] hsr1: entered promiscuous mode [ 272.464810][ T8982] hsr1: entered allmulticast mode [ 272.469931][ T8982] bond0: entered allmulticast mode [ 272.475140][ T8982] bond_slave_0: entered allmulticast mode [ 272.481066][ T8982] bond_slave_1: entered allmulticast mode [ 272.486963][ T8982] dummy0: entered allmulticast mode [ 272.507004][ T30] audit: type=1400 audit(1766693286.715:2943): avc: denied { read } for pid=8972 comm="syz.1.762" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 272.757519][ T5822] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 272.768531][ T5866] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 272.790881][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.764'. [ 272.811493][ T8989] kAFS: unable to lookup cell 'Þ({^ú@' [ 272.857001][ T8991] SELinux: Context Ü is not valid (left unmapped). [ 272.908590][ T5822] usb 2-1: device descriptor read/64, error -71 [ 272.923234][ T8993] FAULT_INJECTION: forcing a failure. [ 272.923234][ T8993] name failslab, interval 1, probability 0, space 0, times 0 [ 272.939751][ T8993] CPU: 0 UID: 0 PID: 8993 Comm: syz.2.767 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.939780][ T8993] Tainted: [L]=SOFTLOCKUP [ 272.939786][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.939797][ T8993] Call Trace: [ 272.939803][ T8993] [ 272.939809][ T8993] dump_stack_lvl+0x16c/0x1f0 [ 272.939837][ T8993] should_fail_ex+0x512/0x640 [ 272.939864][ T8993] ? kmem_cache_alloc_noprof+0x62/0x770 [ 272.939891][ T8993] should_failslab+0xc2/0x120 [ 272.939916][ T8993] kmem_cache_alloc_noprof+0x83/0x770 [ 272.939934][ T8993] ? ptlock_alloc+0x1f/0x70 [ 272.939965][ T8993] ? ptlock_alloc+0x1f/0x70 [ 272.939989][ T8993] ptlock_alloc+0x1f/0x70 [ 272.940015][ T8993] pte_alloc_one+0x84/0x3d0 [ 272.940042][ T8993] __pte_alloc+0x6d/0x3f0 [ 272.940062][ T8993] ? __pfx___pte_alloc+0x10/0x10 [ 272.940084][ T8993] ? do_raw_spin_lock+0x12c/0x2b0 [ 272.940108][ T8993] ? find_held_lock+0x2b/0x80 [ 272.940135][ T8993] do_anonymous_page+0x1092/0x2190 [ 272.940163][ T8993] ? do_raw_spin_unlock+0x172/0x230 [ 272.940187][ T8993] ? _raw_spin_unlock+0x28/0x50 [ 272.940207][ T8993] ? __pmd_alloc+0x6aa/0x9c0 [ 272.940232][ T8993] __handle_mm_fault+0x1ecf/0x2bb0 [ 272.940266][ T8993] ? __pfx___handle_mm_fault+0x10/0x10 [ 272.940308][ T8993] ? find_vma+0xbf/0x140 [ 272.940327][ T8993] ? __pfx_find_vma+0x10/0x10 [ 272.940351][ T8993] handle_mm_fault+0x3fe/0xad0 [ 272.940382][ T8993] do_user_addr_fault+0x7a6/0x1370 [ 272.940408][ T8993] ? rcu_is_watching+0x12/0xc0 [ 272.940428][ T8993] exc_page_fault+0x64/0xc0 [ 272.940452][ T8993] asm_exc_page_fault+0x26/0x30 [ 272.940470][ T8993] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 272.940499][ T8993] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 272.940516][ T8993] RSP: 0018:ffffc900037b7d78 EFLAGS: 00050216 [ 272.940532][ T8993] RAX: 0000000000000001 RBX: 0000200000000080 RCX: 0000000000000014 [ 272.940543][ T8993] RDX: fffff520006f6fc3 RSI: 0000200000000080 RDI: ffffc900037b7e00 [ 272.940554][ T8993] RBP: 0000000000000014 R08: 0000000000000001 R09: fffff520006f6fc2 [ 272.940565][ T8993] R10: ffffc900037b7e13 R11: ffff88804c852ff0 R12: 0000000000000000 [ 272.940575][ T8993] R13: ffffc900037b7e00 R14: ffff888032c13500 R15: ffff888055a0c500 [ 272.940601][ T8993] _copy_from_user+0x98/0xd0 [ 272.940629][ T8993] move_addr_to_kernel+0x65/0x170 [ 272.940656][ T8993] __sys_bind+0x11b/0x260 [ 272.940682][ T8993] ? __pfx___sys_bind+0x10/0x10 [ 272.940705][ T8993] ? __fget_files+0x20e/0x3c0 [ 272.940740][ T8993] ? __pfx_ksys_write+0x10/0x10 [ 272.940769][ T8993] __x64_sys_bind+0x72/0xb0 [ 272.940793][ T8993] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.940815][ T8993] do_syscall_64+0xcd/0xf80 [ 272.940840][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.940859][ T8993] RIP: 0033:0x7ffb3cb8f749 [ 272.940878][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.940895][ T8993] RSP: 002b:00007ffb3d9d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 272.940912][ T8993] RAX: ffffffffffffffda RBX: 00007ffb3cde5fa0 RCX: 00007ffb3cb8f749 [ 272.940923][ T8993] RDX: 0000000000000014 RSI: 0000200000000080 RDI: 0000000000000004 [ 272.940934][ T8993] RBP: 00007ffb3d9d9090 R08: 0000000000000000 R09: 0000000000000000 [ 272.940945][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.940956][ T8993] R13: 00007ffb3cde6038 R14: 00007ffb3cde5fa0 R15: 00007ffc558bd208 [ 272.940981][ T8993] [ 273.066208][ T8989] Cannot find del_set index 1 as target [ 273.325219][ T5866] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.60 [ 273.334376][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.344651][ T5866] usb 5-1: Product: syz [ 273.356195][ T5866] usb 5-1: Manufacturer: syz [ 273.361093][ T5866] usb 5-1: SerialNumber: syz [ 273.367884][ T5866] usb 5-1: config 0 descriptor?? [ 273.368536][ T5822] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 273.383604][ T5866] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 273.395535][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.407077][ T5866] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 273.419631][ T5866] usb 5-1: media controller created [ 273.446447][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.495132][ T5866] DVB: Unable to find symbol mt352_attach() [ 273.529411][ T5866] DVB: Unable to find symbol nxt6000_attach() [ 273.536645][ T5866] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 273.551049][ T5866] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 273.580749][ T5866] dvb-usb: schedule remote query interval to 1000 msecs. [ 273.592167][ T5822] usb 2-1: device descriptor read/64, error -71 [ 273.618333][ T5866] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 273.639556][ T5866] dvb-usb: bulk message failed: -22 (7/0) [ 273.645671][ T5866] dvb-usb: bulk message failed: -22 (7/0) [ 274.110068][ T5822] usb usb2-port1: attempt power cycle [ 274.525024][ T5822] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 274.569236][ T5822] usb 2-1: device descriptor read/8, error -71 [ 274.631206][ T5866] dvb-usb: bulk message failed: -22 (7/0) [ 274.661537][ T5866] dvb-usb: error while querying for an remote control event. [ 274.770335][ T8977] nvme_fabrics: missing parameter 'transport=%s' [ 274.773148][ T8984] netlink: 104 bytes leftover after parsing attributes in process `syz.4.763'. [ 274.776991][ T8977] nvme_fabrics: missing parameter 'nqn=%s' [ 274.818576][ T5822] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 274.827667][ T5866] usb 5-1: USB disconnect, device number 40 [ 274.850573][ T5822] usb 2-1: device descriptor read/8, error -71 [ 274.978948][ T5822] usb usb2-port1: unable to enumerate USB device [ 274.988405][ T5866] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 275.962683][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 275.962699][ T30] audit: type=1400 audit(1766693290.715:2974): avc: denied { create } for pid=9021 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 276.011154][ T30] audit: type=1400 audit(1766693290.765:2975): avc: denied { connect } for pid=9021 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 276.419806][ T9035] kAFS: unable to lookup cell '(,' [ 276.425016][ T30] audit: type=1400 audit(1766693290.935:2976): avc: denied { read write } for pid=9024 comm="syz.1.775" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 276.477790][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.778'. [ 276.517243][ T9036] overlayfs: failed to resolve './file1': -2 [ 276.563278][ T30] audit: type=1400 audit(1766693290.935:2977): avc: denied { open } for pid=9024 comm="syz.1.775" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 276.847324][ T9044] netlink: 7 bytes leftover after parsing attributes in process `syz.4.779'. [ 276.859382][ T9044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.779'. [ 276.881634][ T30] audit: type=1400 audit(1766693291.265:2978): avc: denied { mounton } for pid=9032 comm="syz.3.778" path="/175/bus" dev="tmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 277.170631][ T30] audit: type=1400 audit(1766693291.505:2979): avc: denied { name_bind } for pid=9037 comm="syz.2.780" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 277.234082][ T30] audit: type=1400 audit(1766693291.505:2980): avc: denied { node_bind } for pid=9037 comm="syz.2.780" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 277.307644][ T30] audit: type=1400 audit(1766693291.505:2981): avc: denied { read write } for pid=9037 comm="syz.2.780" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 277.481439][ T30] audit: type=1400 audit(1766693291.505:2982): avc: denied { open } for pid=9037 comm="syz.2.780" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 277.901240][ T9055] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 277.984304][ T30] audit: type=1400 audit(1766693291.665:2983): avc: denied { ioctl } for pid=9039 comm="syz.4.779" path="socket:[23669]" dev="sockfs" ino=23669 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.108030][ T9093] sctp: [Deprecated]: syz.3.794 (pid 9093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.108030][ T9093] Use struct sctp_sack_info instead [ 280.268596][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 280.402500][ T9102] delete_channel: no stack [ 280.442297][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 280.456887][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.465260][ T10] usb 3-1: Product: syz [ 280.471611][ T10] usb 3-1: Manufacturer: syz [ 280.476365][ T10] usb 3-1: SerialNumber: syz [ 280.486296][ T10] usb 3-1: config 0 descriptor?? [ 280.494350][ T10] hso 3-1:0.0: Not our interface [ 280.502339][ T10] usb-storage 3-1:0.0: USB Mass Storage device detected [ 280.558587][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 280.700578][ T5822] usb 3-1: USB disconnect, device number 40 [ 280.719881][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 280.729130][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.739580][ T24] usb 4-1: config 0 descriptor?? [ 280.746499][ T24] cp210x 4-1:0.0: cp210x converter detected [ 281.148302][ T24] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 281.272284][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 281.272300][ T30] audit: type=1400 audit(1766693296.025:3028): avc: denied { mount } for pid=9115 comm="syz.2.802" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 281.274986][ T9116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 281.288627][ T30] audit: type=1400 audit(1766693296.025:3029): avc: denied { unlink } for pid=9115 comm="syz.2.802" name="#f" dev="tmpfs" ino=892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 281.381351][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 281.398994][ T30] audit: type=1400 audit(1766693296.095:3030): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 281.498565][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 281.745435][ T9128] netlink: 182 bytes leftover after parsing attributes in process `syz.4.804'. [ 282.270115][ T30] audit: type=1400 audit(1766693297.015:3031): avc: denied { ioctl } for pid=9124 comm="syz.2.805" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 282.271890][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.320431][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 282.371410][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 282.371437][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.376252][ T10] usb 2-1: config 0 descriptor?? [ 282.487909][ T30] audit: type=1400 audit(1766693297.235:3032): avc: denied { write } for pid=9133 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.529673][ T9129] overlayfs: failed to verify upper (178/file1, ino=973, err=-116) [ 282.537885][ T30] audit: type=1400 audit(1766693297.265:3033): avc: denied { connect } for pid=9133 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.558165][ T30] audit: type=1400 audit(1766693297.265:3034): avc: denied { name_connect } for pid=9133 comm="syz.4.806" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 282.588822][ T9129] overlayfs: failed to verify index dir 'upper' xattr [ 282.623606][ T9129] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 282.637876][ T30] audit: type=1400 audit(1766693297.285:3035): avc: denied { create } for pid=9133 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 282.672077][ T30] audit: type=1400 audit(1766693297.315:3036): avc: denied { read } for pid=9133 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 282.962697][ T30] audit: type=1400 audit(1766693297.595:3037): avc: denied { setopt } for pid=9139 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.005521][ T10] logitech-hidpp-device 0003:046D:C262.000D: unknown main item tag 0x0 [ 283.034088][ T10] logitech-hidpp-device 0003:046D:C262.000D: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.1-1/input0 [ 283.093849][ T9147] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 283.237190][ T973] usb 2-1: USB disconnect, device number 37 [ 284.004445][ T6244] usb 4-1: USB disconnect, device number 38 [ 284.021698][ T6244] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 284.198723][ T6244] cp210x 4-1:0.0: device disconnected [ 285.712129][ T9173] netlink: 'syz.3.815': attribute type 4 has an invalid length. [ 285.869393][ T9178] lo speed is unknown, defaulting to 1000 [ 285.931230][ T9178] lo speed is unknown, defaulting to 1000 [ 285.980613][ T9178] lo speed is unknown, defaulting to 1000 [ 286.526238][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 286.549795][ T1316] wlan0: Trigger new scan to find an IBSS to join [ 286.572245][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 286.572259][ T30] audit: type=1400 audit(1766693301.325:3058): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 286.616370][ T30] audit: type=1400 audit(1766693301.365:3059): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.638422][ T30] audit: type=1400 audit(1766693301.365:3060): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.688196][ T30] audit: type=1400 audit(1766693301.365:3061): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.725178][ T30] audit: type=1400 audit(1766693301.365:3062): avc: denied { read } for pid=5479 comm="dhcpcd" name="n103" dev="tmpfs" ino=5134 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 286.747149][ T30] audit: type=1400 audit(1766693301.365:3063): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=5134 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 286.853223][ T30] audit: type=1400 audit(1766693301.365:3064): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=5134 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 286.968578][ T30] audit: type=1400 audit(1766693301.635:3065): avc: denied { read open } for pid=9198 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.004650][ T9200] cgroup: Unexpected value for 'xattr' [ 287.235434][ T30] audit: type=1400 audit(1766693301.635:3066): avc: denied { getattr } for pid=9198 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.483684][ T30] audit: type=1400 audit(1766693301.765:3067): avc: denied { write } for pid=9196 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.566939][ T9178] infiniband syz0: set down [ 287.576418][ T10] lo speed is unknown, defaulting to 1000 [ 287.590440][ T9178] infiniband syz0: added lo [ 287.624874][ T9178] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 287.637481][ T9178] infiniband syz0: Couldn't open port 1 [ 287.825895][ T9178] RDS/IB: syz0: added [ 287.900642][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 288.275213][ T9178] smc: adding ib device syz0 with port count 1 [ 288.284608][ T9178] smc: ib device syz0 port 1 has no pnetid [ 288.304024][ T5943] lo speed is unknown, defaulting to 1000 [ 288.328426][ T9178] lo speed is unknown, defaulting to 1000 [ 288.448540][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 288.455122][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.478354][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.548738][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 288.560835][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 288.626385][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.673569][ T10] usb 3-1: config 0 descriptor?? [ 289.071399][ T9178] lo speed is unknown, defaulting to 1000 [ 289.942151][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 289.957252][ T9178] lo speed is unknown, defaulting to 1000 [ 290.072938][ T9178] lo speed is unknown, defaulting to 1000 [ 290.163161][ T9178] lo speed is unknown, defaulting to 1000 [ 290.218563][ T5943] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 290.423612][ T5943] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 290.439901][ T5943] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 290.444705][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.835'. [ 290.447685][ T5943] usb 5-1: can't read configurations, error -61 [ 290.470013][ T1036] wlan0: Trigger new scan to find an IBSS to join [ 290.968655][ T5943] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 291.058369][ T5866] usb 3-1: USB disconnect, device number 41 [ 291.200340][ T9287] netlink: 'syz.3.836': attribute type 2 has an invalid length. [ 291.562773][ T9289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'. [ 291.572211][ T5943] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 291.581769][ T5943] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 291.589900][ T5943] usb 5-1: can't read configurations, error -61 [ 291.597140][ T5943] usb usb5-port1: attempt power cycle [ 292.300661][ T5943] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 292.315000][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 292.315017][ T30] audit: type=1400 audit(1766693307.065:3141): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 292.360518][ T5943] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 292.426988][ T30] audit: type=1400 audit(1766693307.155:3142): avc: denied { read write } for pid=9283 comm="syz.1.837" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 292.568550][ T30] audit: type=1400 audit(1766693307.175:3143): avc: denied { open } for pid=9283 comm="syz.1.837" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 292.710558][ T5943] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 292.718146][ T5943] usb 5-1: can't read configurations, error -61 [ 292.748834][ T5952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.816808][ T30] audit: type=1400 audit(1766693307.565:3144): avc: denied { name_bind } for pid=9295 comm="syz.3.840" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 292.843773][ T30] audit: type=1400 audit(1766693307.565:3145): avc: denied { node_bind } for pid=9295 comm="syz.3.840" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 292.871181][ T5943] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 293.150718][ T30] audit: type=1400 audit(1766693307.705:3146): avc: denied { ioctl } for pid=9304 comm="syz.2.842" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 293.189036][ T5943] usb 5-1: device descriptor read/8, error -71 [ 293.286907][ T30] audit: type=1400 audit(1766693307.945:3147): avc: denied { watch } for pid=9304 comm="syz.2.842" path="/174" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 293.317425][ T30] audit: type=1400 audit(1766693307.945:3148): avc: denied { watch_sb watch_reads } for pid=9304 comm="syz.2.842" path="/174" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 293.319721][ T5943] usb usb5-port1: unable to enumerate USB device [ 293.634832][ T30] audit: type=1400 audit(1766693308.115:3149): avc: denied { setopt } for pid=9310 comm="syz.4.843" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 293.672378][ T30] audit: type=1400 audit(1766693308.115:3150): avc: denied { create } for pid=9310 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 293.796754][ T9302] batman_adv: batadv0: Adding interface: vlan2 [ 293.804483][ T9302] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.834386][ T9324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.848993][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.903766][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.928707][ T9302] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 293.998862][ T9330] tmpfs: Bad value for 'mpol' [ 294.129399][ T5943] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 294.268305][ T5866] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 294.288922][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 294.581014][ T5943] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.797667][ T5943] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 224, changing to 7 [ 294.839287][ T5943] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 294.849088][ T5943] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 294.867540][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.156679][ T5943] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 295.169321][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 295.348400][ T5866] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.378521][ T5866] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.388313][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.399848][ T5866] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 295.419672][ T5943] usb 2-1: config 0 descriptor?? [ 295.425487][ T5866] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 295.449795][ T5866] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.475559][ T5866] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.498846][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.507950][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 295.763283][ T5866] usb 4-1: GET_CAPABILITIES returned 0 [ 295.831886][ T5866] usbtmc 4-1:16.0: can't read capabilities [ 295.917168][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.928012][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.937089][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.946144][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.955287][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.964415][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.973538][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.982617][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.991672][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.004826][ T5943] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 296.028620][ T5943] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 296.036897][ T5943] hid-thrustmaster 0003:044F:B65D.000E: item fetching failed at offset 4/5 [ 296.058701][ T6015] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 296.069141][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.076072][ T5943] hid-thrustmaster 0003:044F:B65D.000E: parse failed with error -22 [ 296.078226][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.088138][ T9359] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 296.095582][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.112114][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.119685][ T5943] hid-thrustmaster 0003:044F:B65D.000E: probe with driver hid-thrustmaster failed with error -22 [ 296.121182][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.140702][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.149731][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.180073][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.219364][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.228989][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.238254][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.247280][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.256314][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.265349][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.274373][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.283383][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.292486][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.355927][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.364986][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.374073][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.383111][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.392132][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 296.413246][ T5822] usb 2-1: USB disconnect, device number 38 [ 296.425720][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 296.437750][ T6015] usb 5-1: Using ep0 maxpacket: 16 [ 296.446726][ T6015] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 296.461477][ T6015] usb 5-1: config 0 has no interface number 0 [ 296.468110][ T6015] usb 5-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.468361][ T5866] usb 4-1: USB disconnect, device number 39 [ 296.481270][ T6015] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 296.498118][ T6015] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 296.507764][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 296.515939][ T6015] usb 5-1: Manufacturer: syz [ 296.520964][ T6015] usb 5-1: SerialNumber: syz [ 296.540511][ T6015] usb 5-1: config 0 descriptor?? [ 296.616423][ T9363] lo speed is unknown, defaulting to 1000 [ 296.688828][ T5943] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 296.849135][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 296.855843][ T5943] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 296.868727][ T5943] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 296.881254][ T5943] usb 3-1: config 179 has no interface number 0 [ 296.887530][ T5943] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 296.897906][ T5866] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 296.916185][ T5943] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 296.930665][ T5943] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 296.947035][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.986814][ T6015] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 297.040092][ T6015] usb 5-1: USB disconnect, device number 45 [ 297.066181][ T5866] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 297.074737][ T5866] usb 4-1: config 0 has no interface number 0 [ 297.087059][ T5866] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 297.096779][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.106735][ T5866] usb 4-1: Product: syz [ 297.112950][ T5866] usb 4-1: Manufacturer: syz [ 297.128298][ T5866] usb 4-1: SerialNumber: syz [ 297.144047][ T5866] usb 4-1: config 0 descriptor?? [ 297.153874][ T5866] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 297.172783][ T5866] ems_usb 4-1:0.204: probe with driver ems_usb failed with error -22 [ 297.176766][ T9361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.211551][ T9361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.234226][ T6015] usb 3-1: USB disconnect, device number 42 [ 297.355121][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 297.355136][ T30] audit: type=1400 audit(1766693312.105:3197): avc: denied { connect } for pid=9362 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.385103][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.398802][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.398819][ T30] audit: type=1400 audit(1766693312.135:3198): avc: denied { name_connect } for pid=9362 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 297.430571][ T973] usb 4-1: USB disconnect, device number 40 [ 297.455221][ T30] audit: type=1400 audit(1766693312.185:3199): avc: denied { read } for pid=9378 comm="syz.1.862" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 297.547934][ T30] audit: type=1400 audit(1766693312.185:3200): avc: denied { open } for pid=9378 comm="syz.1.862" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 297.822547][ T30] audit: type=1400 audit(1766693312.555:3201): avc: denied { mount } for pid=9381 comm="syz.3.863" name="/" dev="ramfs" ino=24676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 297.998846][ T6015] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 298.149961][ T30] audit: type=1400 audit(1766693312.695:3202): avc: denied { module_request } for pid=9390 comm="syz.1.865" kmod="net-pf-10-proto-133-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 298.566004][ T6015] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 298.577559][ T30] audit: type=1400 audit(1766693313.095:3203): avc: denied { read } for pid=9397 comm="syz.2.866" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 298.655272][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 298.663921][ T6015] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 298.674788][ T30] audit: type=1400 audit(1766693313.095:3204): avc: denied { open } for pid=9397 comm="syz.2.866" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 298.675545][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 298.734705][ T6015] usb 5-1: Product: syz [ 298.770104][ T6015] usb 5-1: Manufacturer: syz [ 298.775076][ T6015] usb 5-1: SerialNumber: syz [ 298.799504][ T5822] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 298.882548][ T30] audit: type=1400 audit(1766693313.115:3205): avc: denied { ioctl } for pid=9397 comm="syz.2.866" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 298.908040][ T30] audit: type=1400 audit(1766693313.195:3206): avc: denied { ioctl } for pid=9397 comm="syz.2.866" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 298.943221][ T6015] usb 5-1: config 0 descriptor?? [ 298.953581][ T6015] usb 5-1: selecting invalid altsetting 0 [ 299.170105][ T9411] netdevsim netdevsim3: Direct firmware load for lookup_extent_enter failed with error -2 [ 299.184057][ T9411] netdevsim netdevsim3: Falling back to sysfs fallback for: lookup_extent_enter [ 299.479027][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 299.504706][ T5822] usb 3-1: unable to get BOS descriptor or descriptor too short [ 299.521698][ T5822] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 299.530108][ T5822] usb 3-1: config 13 has no interface number 0 [ 299.536344][ T5822] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 299.561416][ T5822] usb 3-1: config 13 interface 50 has no altsetting 0 [ 299.576293][ T5822] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 299.671672][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.683414][ T5822] usb 3-1: Product: syz [ 299.687600][ T5822] usb 3-1: Manufacturer: syz [ 299.696161][ T5822] usb 3-1: SerialNumber: syz [ 299.733680][ T9401] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 299.749711][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 299.905666][ T9421] loop5: detected capacity change from 0 to 7 [ 299.945914][ T9421] Dev loop5: unable to read RDB block 7 [ 300.033415][ T9423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.043029][ T9423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.577759][ T5822] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.592098][ T5822] usb 3-1: MIDIStreaming interface descriptor not found [ 300.614284][ T9421] loop5: AHDI p1 p2 p3 [ 300.629545][ T9424] netlink: 64 bytes leftover after parsing attributes in process `syz.3.870'. [ 300.641985][ T9421] loop5: partition table partially beyond EOD, truncated [ 300.649690][ T9421] loop5: p1 start 1601398130 is beyond EOD, truncated [ 300.688555][ T9421] loop5: p2 start 1702059890 is beyond EOD, truncated [ 300.753395][ T5822] usb 3-1: USB disconnect, device number 43 [ 301.010910][ T9424] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 301.562349][ T5822] usb 5-1: USB disconnect, device number 46 [ 301.828703][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 316.793863][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.800620][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.749090][ T6155] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 357.108989][ T6155] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.230212][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.236587][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.108805][ T6091] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 420.468904][ T3804] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.671681][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.677984][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.828592][ T6091] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 483.828791][ T6155] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.109917][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.116221][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.921119][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 503.921135][ T30] audit: type=1400 audit(1766693518.675:3216): avc: denied { create } for pid=9441 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 503.950872][ T9442] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=9442 comm=syz.0.871 [ 503.972593][ T30] audit: type=1400 audit(1766693518.705:3217): avc: denied { watch } for pid=9441 comm="syz.0.871" path="/174" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 504.408473][ T30] audit: type=1400 audit(1766693519.155:3218): avc: denied { setopt } for pid=9453 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 504.813456][ T30] audit: type=1400 audit(1766693519.505:3219): avc: denied { setopt } for pid=9466 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 505.035521][ T30] audit: type=1400 audit(1766693519.505:3220): avc: denied { accept } for pid=9466 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 505.148484][ T5822] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 505.298459][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 505.305429][ T5822] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 505.341705][ T5822] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 505.369715][ T5822] usb 5-1: config 179 has no interface number 0 [ 505.388098][ T5822] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 505.419897][ T5822] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 505.461461][ T5822] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 505.513445][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.626712][ T30] audit: type=1400 audit(1766693520.375:3221): avc: denied { mounton } for pid=9479 comm="syz.2.880" path="/180/file0" dev="tmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 505.777636][ T9462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.788930][ T9462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.800601][ T5822] usb 5-1: USB disconnect, device number 47 [ 507.310020][ T30] audit: type=1400 audit(1766693520.405:3222): avc: denied { append } for pid=9478 comm="syz.3.881" name="userfaultfd" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 507.443277][ T30] audit: type=1400 audit(1766693522.095:3223): avc: denied { shutdown } for pid=9493 comm="syz.3.883" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 507.508543][ T30] audit: type=1400 audit(1766693522.095:3224): avc: denied { name_connect } for pid=9493 comm="syz.3.883" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 507.588514][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 507.617351][ T9504] input: syz0 as /devices/virtual/input/input32 [ 507.625118][ T30] audit: type=1400 audit(1766693522.365:3225): avc: denied { write } for pid=9503 comm="syz.0.886" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 507.658741][ T5943] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 507.753903][ T9504] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 507.784193][ T9506] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.887'. [ 507.808900][ T5866] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 507.869003][ T5943] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 507.897966][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.916823][ T5943] usb 2-1: Product: syz [ 507.926941][ T5943] usb 2-1: Manufacturer: syz [ 507.937042][ T5943] usb 2-1: SerialNumber: syz [ 507.949454][ T5943] usb 2-1: config 0 descriptor?? [ 507.988580][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 507.996645][ T5866] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.008409][ T5866] usb 4-1: config 0 has no interface number 0 [ 508.027888][ T5866] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 508.051774][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.070021][ T5866] usb 4-1: Product: syz [ 508.074223][ T5866] usb 4-1: Manufacturer: syz [ 508.088800][ T5866] usb 4-1: SerialNumber: syz [ 508.105678][ T5866] usb 4-1: config 0 descriptor?? [ 508.115300][ T5866] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 508.170456][ T5943] usb-storage 2-1:0.0: USB Mass Storage device detected [ 508.178852][ T5825] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 508.178890][ T5825] Bluetooth: hci2: Dropping invalid advertising data [ 508.193380][ T5825] Bluetooth: hci2: Malformed LE Event: 0x02 [ 508.264512][ T5943] usb 2-1: USB disconnect, device number 39 [ 508.272810][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 508.489809][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 508.547554][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 508.560975][ T10] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 508.574115][ T10] usb 5-1: config 0 has no interface number 0 [ 508.585575][ T10] usb 5-1: config 0 interface 3 altsetting 142 bulk endpoint 0x5 has invalid maxpacket 32 [ 508.596249][ T10] usb 5-1: config 0 interface 3 altsetting 142 endpoint 0x6 has invalid wMaxPacketSize 0 [ 508.606873][ T10] usb 5-1: config 0 interface 3 has no altsetting 0 [ 508.619236][ T10] usb 5-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=4e.46 [ 508.748547][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.764084][ T10] usb 5-1: Product: syz [ 508.771617][ T10] usb 5-1: Manufacturer: syz [ 508.782713][ T10] usb 5-1: SerialNumber: syz [ 509.224725][ T10] usb 5-1: config 0 descriptor?? [ 509.241110][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.256254][ T9514] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 509.267801][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.478489][ T5943] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 509.545662][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 509.545823][ T30] audit: type=1400 audit(1766693524.295:3238): avc: denied { write } for pid=9543 comm="syz.0.895" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 509.698998][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 509.795860][ T9548] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 509.883760][ T9548] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 509.894585][ T9548] overlayfs: failed to look up (tracing) for ino (-66) [ 509.915296][ T9548] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 510.668115][ T5866] gspca_spca1528: reg_w err -110 [ 510.674980][ T5866] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 510.694278][ T30] audit: type=1400 audit(1766693524.445:3239): avc: denied { read } for pid=9510 comm="syz.4.889" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 511.673793][ T30] audit: type=1400 audit(1766693524.445:3240): avc: denied { open } for pid=9510 comm="syz.4.889" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 511.748661][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.794832][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.075916][ T30] audit: type=1400 audit(1766693524.545:3241): avc: denied { mounton } for pid=9543 comm="syz.0.895" path="/179/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 512.241223][ T5958] usb 4-1: USB disconnect, device number 41 [ 512.257531][ T30] audit: type=1400 audit(1766693526.875:3242): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 512.284656][ T5943] usb 2-1: unable to read config index 0 descriptor/all [ 512.294793][ T5943] usb 2-1: can't read configurations, error -71 [ 512.395144][ T9553] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 512.497996][ T9553] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 512.508062][ T9553] overlayfs: failed to look up (tracing) for ino (-66) [ 512.627252][ T9553] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 513.359870][ T10] kvaser_usb 5-1:0.3: error -ENODEV: Cannot get usb endpoint(s) [ 513.376967][ T10] usb 5-1: USB disconnect, device number 48 [ 513.625211][ T30] audit: type=1400 audit(1766693528.375:3243): avc: denied { read } for pid=9559 comm="syz.4.900" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 513.657086][ T9557] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 514.722176][ T30] audit: type=1400 audit(1766693529.475:3244): avc: denied { create } for pid=9568 comm="syz.4.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 514.759490][ T9574] dlm: non-version read from control device 3 [ 514.761562][ T9576] 9pnet_virtio: no channels available for device syz [ 515.099255][ T30] audit: type=1400 audit(1766693529.855:3245): avc: denied { read } for pid=9568 comm="syz.4.902" path="socket:[26304]" dev="sockfs" ino=26304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 515.320732][ T10] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 515.445717][ T9591] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 515.465970][ T9591] netlink: 224 bytes leftover after parsing attributes in process `syz.1.907'. [ 515.508066][ T30] audit: type=1400 audit(1766693530.255:3246): avc: denied { nlmsg_read } for pid=9568 comm="syz.4.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 515.557243][ T10] usb 4-1: device descriptor read/64, error -71 [ 515.647184][ T9596] xt_connbytes: Forcing CT accounting to be enabled [ 515.665797][ T9596] Cannot find set identified by id 0 to match [ 515.797856][ T30] audit: type=1400 audit(1766693530.545:3247): avc: denied { listen } for pid=9586 comm="syz.1.907" lport=54948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 515.863686][ T10] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 515.869863][ T30] audit: type=1400 audit(1766693530.615:3248): avc: denied { accept } for pid=9586 comm="syz.1.907" lport=54948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 515.871495][ T5957] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 516.057509][ T10] usb 4-1: device descriptor read/64, error -71 [ 516.074342][ T30] audit: type=1400 audit(1766693530.825:3249): avc: denied { create } for pid=9602 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 516.139137][ T30] audit: type=1400 audit(1766693530.825:3250): avc: denied { getopt } for pid=9602 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 516.169922][ T10] usb usb4-port1: attempt power cycle [ 516.390891][ T30] audit: type=1400 audit(1766693531.145:3251): avc: denied { read } for pid=9606 comm="syz.1.911" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 516.422432][ T30] audit: type=1400 audit(1766693531.175:3252): avc: denied { open } for pid=9606 comm="syz.1.911" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 516.501588][ T30] audit: type=1400 audit(1766693531.175:3253): avc: denied { ioctl } for pid=9606 comm="syz.1.911" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 516.813217][ T10] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 516.824996][ T9610] binder: 9606:9610 ioctl 4008af12 200000000280 returned -22 [ 516.910077][ T10] usb 4-1: device descriptor read/8, error -71 [ 517.148567][ T10] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 517.179325][ T10] usb 4-1: device descriptor read/8, error -71 [ 517.298313][ T10] usb usb4-port1: unable to enumerate USB device [ 519.580771][ T9643] No such timeout policy "syz1" [ 519.593880][ T9643] No control pipe specified [ 519.605382][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 520.259487][ T5958] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 520.998167][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 520.998185][ T30] audit: type=1400 audit(1766693535.495:3258): avc: denied { shutdown } for pid=9648 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 521.200162][ T5958] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.238430][ T5958] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 521.248344][ T5958] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 521.271900][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.294236][ T9646] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 521.340657][ T5958] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.418923][ T30] audit: type=1400 audit(1766693536.175:3259): avc: denied { getopt } for pid=9659 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 521.678575][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 521.743852][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 521.786207][ T9] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 521.868685][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 521.888945][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 521.918967][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 521.928089][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 521.936522][ T10] usb 5-1: Product: syz [ 521.940821][ T10] usb 5-1: Manufacturer: syz [ 521.947535][ T10] usb 5-1: SerialNumber: syz [ 522.180346][ T10] usb 5-1: config 0 descriptor?? [ 522.190849][ T9660] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 522.208662][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.219878][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 522.241859][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 522.248258][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 522.257490][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 522.266346][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.369588][ T9] usb 2-1: config 0 descriptor?? [ 522.394795][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 522.406026][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 522.420000][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 522.437181][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 522.470067][ T9] usb 2-1: media controller created [ 522.487122][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.519879][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 522.533899][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 522.563856][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 522.578691][ T24] usb 5-1: USB disconnect, device number 49 [ 522.599775][ T9663] dvb-usb: bulk message failed: -22 (2/0) [ 522.624533][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 522.642324][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 522.677228][ T9] usb 2-1: USB disconnect, device number 42 [ 522.826374][ T9672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.916064][ T9676] netlink: 104 bytes leftover after parsing attributes in process `syz.2.929'. [ 523.376251][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 523.645125][ T9678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9678 comm=syz.4.930 [ 523.667990][ T30] audit: type=1400 audit(1766693538.415:3260): avc: denied { create } for pid=9677 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 523.691573][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 523.712739][ T9677] delete_channel: no stack [ 523.745744][ T30] audit: type=1400 audit(1766693538.445:3261): avc: denied { bind } for pid=9677 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 523.785085][ T9672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.106245][ T30] audit: type=1400 audit(1766693538.445:3262): avc: denied { setopt } for pid=9677 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 524.330972][ T30] audit: type=1400 audit(1766693538.465:3263): avc: denied { bind } for pid=9679 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 524.331465][ T5822] usb 4-1: USB disconnect, device number 46 [ 524.350686][ T30] audit: type=1400 audit(1766693538.465:3264): avc: denied { listen } for pid=9679 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 629.828369][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 629.835351][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9664/1:b..l [ 629.843606][ C1] rcu: (detected by 1, t=10502 jiffies, g=38289, q=1086 ncpus=2) [ 629.851381][ C1] task:syz.3.922 state:R running task stack:23448 pid:9664 tgid:9664 ppid:5817 task_flags:0x40064c flags:0x00080003 [ 629.865394][ C1] Call Trace: [ 629.868656][ C1] [ 629.871562][ C1] ? __schedule+0x10b9/0x6150 [ 629.876216][ C1] __schedule+0x1139/0x6150 [ 629.880709][ C1] ? __pfx___schedule+0x10/0x10 [ 629.885539][ C1] preempt_schedule_irq+0x51/0x90 [ 629.890538][ C1] irqentry_exit+0x1d8/0x8c0 [ 629.895104][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.901055][ C1] RIP: 0010:unwind_next_frame+0x5e4/0x20b0 [ 629.906847][ C1] Code: 14 00 00 45 88 7d 35 44 0f b6 71 04 41 83 e6 0f 41 80 fe 06 0f 84 90 0c 00 00 0f 87 20 02 00 00 41 80 fe 04 0f 84 e3 0b 00 00 <41> 80 fe 05 0f 85 cf 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 629.926425][ C1] RSP: 0018:ffffc90003886f38 EFLAGS: 00000202 [ 629.932472][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff912ea7ca [ 629.940415][ C1] RDX: 0000000000000005 RSI: 0000000000000001 RDI: ffffffff90a6b130 [ 629.948365][ C1] RBP: ffffc90003886ff0 R08: ffffffff912ea7ce R09: 00000000ffffffff [ 629.956313][ C1] R10: 0000000000000002 R11: 0000000000011a9d R12: ffffc90003886ff8 [ 629.964256][ C1] R13: ffffc90003886fa8 R14: 0000000000000005 R15: 0000000000000000 [ 629.972206][ C1] ? unwind_next_frame+0x2ec/0x20b0 [ 629.977555][ C1] ? free_unref_folios+0xa22/0x1610 [ 629.982726][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 629.988853][ C1] arch_stack_walk+0x94/0x100 [ 629.993507][ C1] ? free_unref_folios+0xa22/0x1610 [ 629.998678][ C1] stack_trace_save+0x8e/0xc0 [ 630.003333][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 630.008679][ C1] ? __lock_acquire+0x436/0x2890 [ 630.013589][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 630.018771][ C1] save_stack+0x160/0x1f0 [ 630.023088][ C1] ? __pfx_save_stack+0x10/0x10 [ 630.027910][ C1] ? free_unref_folios+0xa22/0x1610 [ 630.033104][ C1] ? page_ext_put+0x3e/0xd0 [ 630.037583][ C1] __reset_page_owner+0x84/0x1a0 [ 630.042497][ C1] free_unref_folios+0xa22/0x1610 [ 630.047495][ C1] ? rcu_is_watching+0x12/0xc0 [ 630.052232][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 630.058012][ C1] folios_put_refs+0x4be/0x750 [ 630.062748][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 630.068006][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 630.074305][ C1] shmem_undo_range+0x58f/0x1140 [ 630.079235][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 630.084586][ C1] ? find_held_lock+0x2b/0x80 [ 630.089257][ C1] shmem_evict_inode+0x39e/0xbe0 [ 630.094170][ C1] ? inode_wait_for_writeback+0x170/0x390 [ 630.099879][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 630.105310][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 630.111363][ C1] ? find_held_lock+0x2b/0x80 [ 630.116019][ C1] ? evict+0x37e/0xad0 [ 630.120059][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 630.125486][ C1] evict+0x3c2/0xad0 [ 630.129491][ C1] ? find_held_lock+0x2b/0x80 [ 630.134147][ C1] ? __pfx_evict+0x10/0x10 [ 630.138540][ C1] ? iput.part.0+0x619/0x1190 [ 630.143193][ C1] iput.part.0+0x621/0x1190 [ 630.147670][ C1] iput+0x35/0x40 [ 630.151275][ C1] dentry_unlink_inode+0x29c/0x480 [ 630.156363][ C1] __dentry_kill+0x1d0/0x600 [ 630.160924][ C1] finish_dput+0x76/0x480 [ 630.165243][ C1] dput.part.0+0x451/0x570 [ 630.169637][ C1] dput+0x1f/0x30 [ 630.173242][ C1] __fput+0x51c/0xb70 [ 630.177196][ C1] task_work_run+0x150/0x240 [ 630.181762][ C1] ? __pfx_task_work_run+0x10/0x10 [ 630.186854][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 630.192039][ C1] do_exit+0x87f/0x2bd0 [ 630.196171][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 630.200910][ C1] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 630.206950][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 630.212569][ C1] ? __pfx_do_exit+0x10/0x10 [ 630.217139][ C1] do_group_exit+0xd3/0x2a0 [ 630.221627][ C1] get_signal+0x2671/0x26d0 [ 630.226111][ C1] ? __pfx_get_signal+0x10/0x10 [ 630.230941][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 630.236462][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 630.242593][ C1] ? __bad_area_nosemaphore+0x350/0x690 [ 630.248117][ C1] irqentry_exit+0x38a/0x8c0 [ 630.252788][ C1] asm_exc_page_fault+0x26/0x30 [ 630.257610][ C1] RIP: 0033:0x7fd08298f751 [ 630.262009][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 630.268045][ C1] RAX: 0000000000000000 RBX: 00007fd082be5fa0 RCX: 00007fd08298f749 [ 630.275987][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 630.283930][ C1] RBP: 00007fd082a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 630.291873][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 630.299826][ C1] R13: 00007fd082be6038 R14: 00007fd082be5fa0 R15: 00007fffed18f998 [ 630.307781][ C1] [ 630.310782][ C1] rcu: rcu_preempt kthread starved for 10358 jiffies! g38289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 630.321951][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 630.331889][ C1] rcu: RCU grace-period kthread stack dump: [ 630.337760][ C1] task:rcu_preempt state:R running task stack:28320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 630.351407][ C1] Call Trace: [ 630.354674][ C1] [ 630.357588][ C1] ? __schedule+0x10b9/0x6150 [ 630.362252][ C1] __schedule+0x1139/0x6150 [ 630.366756][ C1] ? __pfx___schedule+0x10/0x10 [ 630.371579][ C1] ? find_held_lock+0x2b/0x80 [ 630.376233][ C1] ? schedule+0x2d7/0x3a0 [ 630.380536][ C1] schedule+0xe7/0x3a0 [ 630.384582][ C1] schedule_timeout+0x123/0x290 [ 630.389403][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 630.394755][ C1] ? __pfx_process_timeout+0x10/0x10 [ 630.400023][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 630.405811][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 630.411245][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 630.415992][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 630.421268][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 630.426443][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 630.431353][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 630.436180][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 630.441960][ C1] rcu_gp_kthread+0x26d/0x380 [ 630.446621][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 630.452051][ C1] ? rcu_is_watching+0x12/0xc0 [ 630.456785][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 630.461967][ C1] ? __kthread_parkme+0x19e/0x250 [ 630.467049][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 630.472219][ C1] kthread+0x3c5/0x780 [ 630.476294][ C1] ? __pfx_kthread+0x10/0x10 [ 630.480857][ C1] ? rcu_is_watching+0x12/0xc0 [ 630.485613][ C1] ? __pfx_kthread+0x10/0x10 [ 630.490189][ C1] ret_from_fork+0x983/0xb10 [ 630.494753][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 630.499921][ C1] ? __switch_to+0x7af/0x10d0 [ 630.504571][ C1] ? __pfx_kthread+0x10/0x10 [ 630.509135][ C1] ret_from_fork_asm+0x1a/0x30 [ 630.513885][ C1] [ 630.516874][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 630.523171][ C1] CPU: 1 UID: 0 PID: 9698 Comm: vhost-9696 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.533997][ C1] Tainted: [L]=SOFTLOCKUP [ 630.538289][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 630.548321][ C1] RIP: 0010:do_user_addr_fault+0x198/0x1370 [ 630.554217][ C1] Code: 31 ff 41 81 e5 00 02 00 00 4c 89 ee e8 c1 ed 50 00 4d 85 ed 0f 84 3c 09 00 00 e8 e3 f2 50 00 e8 4e 15 59 00 fb 0f 1f 44 00 00 d3 f2 50 00 48 89 d8 31 ff 41 bd 14 02 00 00 83 e0 40 49 89 c7 [ 630.573806][ C1] RSP: 0018:ffffc90003857888 EFLAGS: 00000202 [ 630.580375][ C1] RAX: 000000000d0daebf RBX: 0000000000000000 RCX: 0000000000000006 [ 630.588406][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 630.596348][ C1] RBP: ffffc90003857928 R08: 0000000000000001 R09: 0000000000000001 [ 630.604307][ C1] R10: ffffffff9088b4d7 R11: 0000000000000000 R12: 0000000000000000 [ 630.612251][ C1] R13: 0000000000000200 R14: ffff88802ff50c40 R15: 0000000000000000 [ 630.620200][ C1] FS: 00007f878cbea6c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 630.629190][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.635749][ C1] CR2: 0000000000000000 CR3: 0000000042a9d000 CR4: 00000000003526f0 [ 630.643696][ C1] Call Trace: [ 630.646959][ C1] [ 630.649868][ C1] ? rcu_is_watching+0x12/0xc0 [ 630.654629][ C1] exc_page_fault+0x64/0xc0 [ 630.659126][ C1] asm_exc_page_fault+0x26/0x30 [ 630.663947][ C1] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 630.669641][ C1] Code: c4 10 e9 44 81 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 [ 630.689652][ C1] RSP: 0018:ffffc900038579d8 EFLAGS: 00050212 [ 630.695688][ C1] RAX: 000000000000001d RBX: 0000000000000000 RCX: 0000000000000010 [ 630.703631][ C1] RDX: 0000000000100000 RSI: 0000000000000000 RDI: ffffc90003857ac0 [ 630.711773][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 630.719814][ C1] R10: 0000000000000000 R11: ffff8880226c8b30 R12: 0000000000000000 [ 630.727759][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888036ab4c00 [ 630.735725][ C1] vhost_get_vq_desc_n+0x19b4/0x26d0 [ 630.741012][ C1] ? trace_contention_end+0xdd/0x110 [ 630.746366][ C1] ? __mutex_lock+0x27b/0x1ca0 [ 630.751129][ C1] ? __pfx_vhost_get_vq_desc_n+0x10/0x10 [ 630.756764][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 630.761780][ C1] ? __mutex_unlock_slowpath+0x161/0x790 [ 630.767410][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 630.773380][ C1] vhost_get_vq_desc+0x42/0x60 [ 630.778122][ C1] vhost_vsock_handle_tx_kick+0x297/0xdb0 [ 630.783819][ C1] ? __pfx_vhost_vsock_handle_tx_kick+0x10/0x10 [ 630.790464][ C1] ? find_held_lock+0x2b/0x80 [ 630.795118][ C1] ? find_held_lock+0x2b/0x80 [ 630.799770][ C1] ? rcu_is_watching+0x12/0xc0 [ 630.804503][ C1] ? kcov_remote_start+0x399/0x680 [ 630.809680][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 630.814862][ C1] vhost_run_work_list+0x18b/0x230 [ 630.819957][ C1] vhost_task_fn+0x165/0x460 [ 630.824525][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 630.829619][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 630.834627][ C1] ? find_held_lock+0x2b/0x80 [ 630.839298][ C1] ? rcu_is_watching+0x12/0xc0 [ 630.844040][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 630.849124][ C1] ret_from_fork+0x983/0xb10 [ 630.853690][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 630.858785][ C1] ? __switch_to+0x7af/0x10d0 [ 630.863437][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 630.868535][ C1] ret_from_fork_asm+0x1a/0x30 [ 630.873290][ C1]