last executing test programs: 9.865552145s ago: executing program 2 (id=350): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x40, 0x102, 0x0, 0x10}, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, 0x40400}, 0x0, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB='trans\f\x00\x00\x00\x00\x00\x00\x00o=', @ANYBLOB="000000006e6f3d4613ef95f42e45832839a4d49f977960213821e18fffd60230259f003c3d1e659501a2e6afd5747ed728624f2a7a09c133acdfc19403ab0b049f34376010259272bc6ad454c228159e2f524beff49875b1fb65a2d7489be3c6fb6ba97cf361ed7bf9205ff55c6c67af6d7d07", @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRESHEX, @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000002ac0)={'sit0\x00', &(0x7f0000002a00)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x7, 0x4, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1}}}}) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe0, 0xce, 0x20, 0x8, 0x2c4e, 0x107, 0xe21f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0x3a, 0x5c, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 8.159451139s ago: executing program 0 (id=362): prlimit64(0x0, 0xe, &(0x7f0000002040)={0xc, 0x8b}, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={'\x00', 0xff7f, 0xc, 0x800, 0x6, 0xad09, 0xffffffffffffffff}) fcntl$setown(r0, 0x8, r1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xa713, 0xffffffff}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) utimes(0x0, &(0x7f0000000600)={{}, {0x0, 0x2710}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001114410029bd70000000000008004a000000000008000100000000"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1, 0x0, 0x6}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000000c0)=@mmap={0x100, 0x1, 0x4, 0x0, 0x4dbf, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}, 0x36d, 0x1, {}, 0x20000000}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) 7.603113794s ago: executing program 4 (id=363): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb635773f04ebbeea, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000019c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x40305828, &(0x7f0000000200)={{r3}, "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"}) write$FUSE_WRITE(r5, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x2) r7 = msgget$private(0x0, 0x0) msgrcv(r7, &(0x7f0000001080)={0x0, ""/1}, 0x5, 0x1, 0x3000) socketpair(0x26, 0x100000005, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) 7.011926828s ago: executing program 3 (id=366): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 6.94417934s ago: executing program 1 (id=367): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r0, 0xc048aeca, &(0x7f0000000440)={0x3, 0x0, [{0xaed, 0x0, 0x100000005}, {0x975, 0x0, 0x7}, {0xadc, 0x0, 0x800000000}]}) 6.845132287s ago: executing program 1 (id=368): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000061", @ANYRES32=r2, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb0500040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {0x0, 0xffffffdd}, {}, {}, 0x0, 0x40, 0xaa, 0x4000000, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r10 = socket$netlink(0x10, 0x3, 0xb) preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/153, 0x99}], 0x1, 0x0, 0x32a) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x100008) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) 6.844909669s ago: executing program 3 (id=369): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000007f000000060000000000000000010000", @ANYRES32, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, 0x0, &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) setresuid(0x0, 0xee00, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab000000000200000032000000080001006000000008000300", @ANYRES32=r2, @ANYBLOB="eabb7a9034db6de0495346b00470e2a896ab3f40c302068315b5b902c54b015ebb66dca20de2e8eeb962cb496a676eaf227915124b1aabdab3570d1c449059a834d8e9e95842703e450611b9d02ee12da98717c2150c7e91105398f5b5ae7b8cdb20a119dc52cfb359fabcce9b1a82937cd275e91ca8b393bf41f4496bf45430a9e273391aa29942b8feb9a50f2d738ee97d091b0290fc21ef18d43cd5339841eced6e6a688cbc7ccf392092bc5c994e5c55fc61086552dbfb1cd756f67f347014e243454b6719b2ae6030f78d43543d6ce173994fd1fe6928de5501cea9"], 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 6.81940999s ago: executing program 0 (id=370): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x0, 0x2, 0xfc}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.720073021s ago: executing program 2 (id=371): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r2, 0x2, &(0x7f0000000140)) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r3, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)=0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mkdirat(r5, &(0x7f0000000340)='./file0\x00', 0xf3) (async) chdir(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async, rerun: 64) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000008c0)={0xc0}) (rerun: 64) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) close_range(r7, 0xffffffffffffffff, 0x0) 6.711930948s ago: executing program 4 (id=372): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x2, "184871541d0000000800000055a6abcd00d60017000000005200", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x40000002, "fa02791d2a69a2610f02000000000000001100010000000800", 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) shutdown(r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = signalfd4(r5, &(0x7f0000000000)={[0x5]}, 0x8, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r7, &(0x7f0000048040)=""/102392, 0x18ff8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004402, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}], 0x10) sendmmsg$inet6(r9, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="de", 0x1}], 0x1}}], 0x2, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYBLOB="d3c211a0562d1bbeb44ecd5bc1b73644cccbd6425eb837d1d34afadfb7c553b511618e33119b3ae2efec7a4d2f7c4aff98f60e15e23071187016ee01ae8c372893b390d9049b775593a7535a5245b70628f10d6c836b03a031ff79063d8d3a6805e72f3b501804e33a83bc648e2b100ff8b2b40f2166d9cd358b0752d38ac663e3d99fbf0fef0228f633cc10"], 0xc) r10 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739a34dd06472f036ebf314e262816800", r1, 0xffffffffffffffff}) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f0000000100)={0x0, "246035ceeae376c42317afad010000000000000400", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r14, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r13, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r15}) 5.912567904s ago: executing program 0 (id=373): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x5, &(0x7f00000002c0)=[{0x6, 0x1, 0x1, 0x2}, {0x0, 0xf, 0x9, 0x4}, {0x65b, 0x9, 0x1, 0x80}, {0x4, 0x24, 0x0, 0x1fd}, {0x9, 0xa, 0x5, 0x1}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) r3 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r4, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44050) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{0xfc, 0xffffffffffffffff}, {0xffffffffffffffff, 0x69b7}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'dvmrp1\x00', &(0x7f0000000180)=@ethtool_rxfh_indir={0x39, 0x8, [0x4, 0x8, 0xe, 0x2, 0x6780, 0x4002, 0x6, 0x0]}}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) 5.579821229s ago: executing program 2 (id=374): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x100, 0x7ff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() mount$pvfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x801000, &(0x7f0000000980)={[{'{\x00'}, {'@$.(:+}-'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_lt={'uid<', r0}}, {@uid_eq={'uid', 0x3d, r1}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) getrlimit(0x2, &(0x7f0000000400)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='n']) creat(&(0x7f0000000080)='./bus\x00', 0x154) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000440)='trans=rdma,') close_range(r3, 0xffffffffffffffff, 0x0) 5.568494869s ago: executing program 4 (id=375): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000007c0)={r2, 0x1, 0xdc24, 0x1}) write$sequencer(r1, &(0x7f0000000000), 0xca80) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, {0xa, 0x4e22, 0x40, @local, 0x8}, 0xffffffffffffffff, 0x80}}, 0x48) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) (async) fcntl$dupfd(r0, 0x0, r0) (async) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000007c0)={r2, 0x1, 0xdc24, 0x1}) (async) write$sequencer(r1, &(0x7f0000000000), 0xca80) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, {0xa, 0x4e22, 0x40, @local, 0x8}, 0xffffffffffffffff, 0x80}}, 0x48) (async) io_setup(0x2278, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) (async) 5.544748806s ago: executing program 1 (id=376): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000000}}}, 0x108) 5.366825807s ago: executing program 1 (id=377): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000090a010400000000000000000a00dd030900010073797a310000000008000540000000020900020073797a310000000008000ab7e482c25094f11f80140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x840) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4050000000000007110870000000000a6000400000000009500000004000000e43de4fbf0ba01ca0c758a65369a36f060837490a429835468fac65e0443bb873b66567f551a60f6b19ffd82f45d098f87ab1b3458de1908ec319901e5b1c0b201362c42ac016762b357a4e7f8d858cb1083b02cdc83cb228f5016aed881e41f68f8317860bc002354ae8d26a1859253ea607dce6e004f7ad36323f15ee45e819e1fa7629a4dafc721ce6cdd5514e9fcdde608e21310be96d67c126d97b3cb1080a9f182490713ca05cac74b8a00c61a1a38179de33a46525ca4b6f04e342506ea2434d729e228d834823cd4049a"], 0x0, 0x5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000300012800c0001006d6163766c616e002000028010000580080004"], 0x50}, 0x1, 0x0, 0x0, 0x20000881}, 0x20000090) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(authenc(blake2s-224-generic,xts-aes-neonbs))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0xfffffffffffffe4c) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f900f500180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6000001e000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019440)={0x20, 0xc, &(0x7f0000019500)=ANY=[@ANYBLOB="1800000001800000000000000300000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000020000000850000000c000000b785000000000000cc74fcfff0ffffff04a6ffff010000001800000001000080000000000000aae9103216b1e7ff586cca12bd00009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x2e, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x1, 0x5}, &(0x7f0000000200)) getrlimit(0x7, &(0x7f0000019300)) 4.363536382s ago: executing program 2 (id=378): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r0, 0xc048aeca, &(0x7f0000000440)={0x3, 0x0, [{0xaed, 0x0, 0x100000005}, {0x975, 0x0, 0x7}, {0xadc, 0x0, 0x800000000}]}) 4.265594819s ago: executing program 4 (id=379): setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x141}, 0x80c0) 3.495823184s ago: executing program 3 (id=380): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200005801c0001800a00010072656469720000000c00028008000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x74}}, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607eef2", 0x27}, {0x0}, {&(0x7f0000000280)}], 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x509) close(0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000030c0)={'ip_vti0\x00', &(0x7f0000003080)={'gre0\x00', 0x0, 0x7800, 0x20, 0x10001, 0x6, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x64010100}}}}) mq_open(&(0x7f00000002c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {}, 0x3000000, 0x0, 0x1}}, 0xb8}}, 0x4000800) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 3.41974817s ago: executing program 2 (id=381): prlimit64(0x0, 0xe, &(0x7f0000002040)={0xc, 0x8b}, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={'\x00', 0xff7f, 0xc, 0x800, 0x6, 0xad09, 0xffffffffffffffff}) fcntl$setown(r0, 0x8, r1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xa713, 0xffffffff}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) utimes(0x0, &(0x7f0000000600)={{}, {0x0, 0x2710}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001114410029bd70000000000008004a000000000008000100000000"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1, 0x0, 0x6}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000000c0)=@mmap={0x100, 0x1, 0x4, 0x0, 0x4dbf, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}, 0x36d, 0x1, {}, 0x20000000}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) 2.638675192s ago: executing program 0 (id=382): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x4, @win={{0x9, 0x7, 0xb, 0x8}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x4, @win={{0x9, 0x7, 0xb, 0x8}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) 2.588879808s ago: executing program 4 (id=383): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff7}]}}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000d80)=""/261, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000880)={0x0, 0x2, 0x4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) 2.532205868s ago: executing program 3 (id=384): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x0, 0x2, 0xfc}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0xff0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.914753055s ago: executing program 3 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000fdff0000b7040000fdffffff8500000033000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.814418097s ago: executing program 3 (id=386): r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}}, 0x24) r3 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) 1.673629323s ago: executing program 2 (id=387): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500feffff7f08001240000000000500050002000000050004000000000014000300686173683a69702c706f"], 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xfe800000, 0x0, 0x20040001}, 0x80c0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18dd0000200000000000f4ffffffffff9400000000000000778e53ed95879e8ec80089bc1ded8e03c100000000a762c1a0f4bc913849"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYBLOB='.'], 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a000000000000000800000000", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f747082f52a9d212fad09cdb0e8f", 0x16}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x0, 0x81, 0x1, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x20}}, 0x4000810) 1.150580723s ago: executing program 0 (id=388): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00') read$nci(r2, &(0x7f0000000280)=""/134, 0x86) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x48003, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') fchdir(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0xa031, 0xffffffffffffffff, 0xeb92e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x8) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) 1.099894062s ago: executing program 1 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@ipv6_newnexthop={0x1c, 0x68, 0xa898cf170ab9f9b9, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="78890400051006001400030076657468315f746f5f687372000000001c001680180001801400050001000080"], 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x4048040) 1.041054134s ago: executing program 4 (id=390): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0xff040000, 0x0, 0x800}, 0x2000000) 772.228086ms ago: executing program 1 (id=391): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000007f000000060000000000000000010000", @ANYRES32, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, 0x0, &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) setresuid(0x0, 0xee00, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab000000000200000032000000080001006000000008000300", @ANYRES32=r2, @ANYBLOB="eabb7a9034db6de0495346b00470e2a896ab3f40c302068315b5b902c54b015ebb66dca20de2e8eeb962cb496a676eaf227915124b1aabdab3570d1c449059a834d8e9e95842703e450611b9d02ee12da98717c2150c7e91105398f5b5ae7b8cdb20a119dc52cfb359fabcce9b1a82937cd275e91ca8b393bf41f4496bf45430a9e273391aa29942b8feb9a50f2d738ee97d091b0290fc21ef18d43cd5339841eced6e6a688cbc7ccf392092bc5c994e5c55fc61086552dbfb1cd756f67f347014e243454b6719b2ae6030f78d43543d6ce173994fd1fe6928de5501cea9"], 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 0s ago: executing program 0 (id=392): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0xf0ff, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 57.327685][ T30] audit: type=1400 audit(1770666608.637:62): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.350863][ T30] audit: type=1400 audit(1770666608.667:63): avc: denied { mount } for pid=5792 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.353038][ T5792] cgroup: Unknown subsys name 'net' [ 57.379407][ T30] audit: type=1400 audit(1770666608.697:64): avc: denied { unmount } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.542630][ T5792] cgroup: Unknown subsys name 'cpuset' [ 57.551146][ T5792] cgroup: Unknown subsys name 'rlimit' [ 57.669148][ T30] audit: type=1400 audit(1770666608.977:65): avc: denied { setattr } for pid=5792 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.702034][ T30] audit: type=1400 audit(1770666608.977:66): avc: denied { create } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.748966][ T30] audit: type=1400 audit(1770666608.977:67): avc: denied { write } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.759955][ T5794] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.769770][ T30] audit: type=1400 audit(1770666608.987:68): avc: denied { read } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.798362][ T30] audit: type=1400 audit(1770666608.987:69): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.823537][ T30] audit: type=1400 audit(1770666608.987:70): avc: denied { mount } for pid=5792 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.847675][ T30] audit: type=1400 audit(1770666609.097:71): avc: denied { relabelto } for pid=5794 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.770266][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.636748][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.650795][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.660115][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.669499][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.677193][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.696363][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.711632][ T5130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.720766][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.728455][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.747471][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.749905][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.762019][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.762819][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.769615][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.784018][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.784388][ T5130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.791753][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.798952][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.806098][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.812908][ T5130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.826067][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.834067][ T5130] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.845534][ T5130] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.853056][ T5130] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.871241][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.180238][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 61.257133][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 61.305463][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 61.362843][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 61.373744][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.381373][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.388509][ T5804] bridge_slave_0: entered allmulticast mode [ 61.395320][ T5804] bridge_slave_0: entered promiscuous mode [ 61.426397][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.433531][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.440870][ T5804] bridge_slave_1: entered allmulticast mode [ 61.447769][ T5804] bridge_slave_1: entered promiscuous mode [ 61.508922][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 61.521453][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.528529][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.535714][ T5815] bridge_slave_0: entered allmulticast mode [ 61.542296][ T5815] bridge_slave_0: entered promiscuous mode [ 61.551220][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.577353][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.585022][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.592130][ T5815] bridge_slave_1: entered allmulticast mode [ 61.598672][ T5815] bridge_slave_1: entered promiscuous mode [ 61.606760][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.658921][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.666064][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.673335][ T5819] bridge_slave_0: entered allmulticast mode [ 61.679888][ T5819] bridge_slave_0: entered promiscuous mode [ 61.686834][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.694319][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.701427][ T5807] bridge_slave_0: entered allmulticast mode [ 61.707985][ T5807] bridge_slave_0: entered promiscuous mode [ 61.725056][ T5804] team0: Port device team_slave_0 added [ 61.731354][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.738445][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.745556][ T5819] bridge_slave_1: entered allmulticast mode [ 61.752219][ T5819] bridge_slave_1: entered promiscuous mode [ 61.758644][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.765755][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.773023][ T5807] bridge_slave_1: entered allmulticast mode [ 61.779536][ T5807] bridge_slave_1: entered promiscuous mode [ 61.790876][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.801320][ T5804] team0: Port device team_slave_1 added [ 61.808416][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.876209][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.883347][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.909475][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.922353][ T5815] team0: Port device team_slave_0 added [ 61.928264][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.935194][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.961055][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.973344][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.984141][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.995020][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.011659][ T5815] team0: Port device team_slave_1 added [ 62.017306][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.024442][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.031578][ T5809] bridge_slave_0: entered allmulticast mode [ 62.038454][ T5809] bridge_slave_0: entered promiscuous mode [ 62.064977][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.093951][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.101112][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.108251][ T5809] bridge_slave_1: entered allmulticast mode [ 62.115143][ T5809] bridge_slave_1: entered promiscuous mode [ 62.129362][ T5804] hsr_slave_0: entered promiscuous mode [ 62.135574][ T5804] hsr_slave_1: entered promiscuous mode [ 62.169377][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.176448][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.202472][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.222757][ T5819] team0: Port device team_slave_0 added [ 62.229395][ T5807] team0: Port device team_slave_0 added [ 62.236580][ T5807] team0: Port device team_slave_1 added [ 62.247986][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.254959][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.280934][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.297463][ T5819] team0: Port device team_slave_1 added [ 62.318085][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.350620][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.381550][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.388498][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.414606][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.426002][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.433225][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.459329][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.471647][ T5809] team0: Port device team_slave_0 added [ 62.487401][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.494381][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.520261][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.531625][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.538547][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.564778][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.576965][ T5809] team0: Port device team_slave_1 added [ 62.610635][ T5815] hsr_slave_0: entered promiscuous mode [ 62.616588][ T5815] hsr_slave_1: entered promiscuous mode [ 62.622597][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 62.628350][ T5815] Cannot create hsr debugfs directory [ 62.655240][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.662194][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.688195][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.699748][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.706706][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.732600][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.790945][ T5130] Bluetooth: hci0: command tx timeout [ 62.813497][ T5819] hsr_slave_0: entered promiscuous mode [ 62.819436][ T5819] hsr_slave_1: entered promiscuous mode [ 62.825666][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 62.831409][ T5819] Cannot create hsr debugfs directory [ 62.840639][ T5807] hsr_slave_0: entered promiscuous mode [ 62.846890][ T5807] hsr_slave_1: entered promiscuous mode [ 62.852909][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 62.858611][ T5807] Cannot create hsr debugfs directory [ 62.860152][ T5130] Bluetooth: hci1: command tx timeout [ 62.884203][ T5809] hsr_slave_0: entered promiscuous mode [ 62.890333][ T5809] hsr_slave_1: entered promiscuous mode [ 62.896180][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 62.902035][ T5809] Cannot create hsr debugfs directory [ 62.940286][ T52] Bluetooth: hci3: command tx timeout [ 62.945882][ T52] Bluetooth: hci4: command tx timeout [ 62.951656][ T5130] Bluetooth: hci2: command tx timeout [ 63.172240][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.196176][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.210888][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.220655][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.261716][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.272211][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.283097][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.300492][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.346676][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.356391][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.372960][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.390496][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.454741][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.496359][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.505424][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.517082][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.532204][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.541642][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.583448][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.592673][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.623364][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.631855][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.638601][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.662350][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.673159][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.680320][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.703368][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.710446][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.719109][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.726192][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.749456][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.756533][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.792303][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.808685][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.848419][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.866152][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.876174][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.883296][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.908793][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.915907][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.927306][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 63.927318][ T30] audit: type=1400 audit(1770666615.237:84): avc: denied { sys_module } for pid=5819 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.928501][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.961657][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.986000][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.993119][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.096990][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.145031][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.226823][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.303838][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.324929][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.332058][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.414723][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.421860][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.440702][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.470700][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.539872][ T5804] veth0_vlan: entered promiscuous mode [ 64.562323][ T5804] veth1_vlan: entered promiscuous mode [ 64.607065][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.631569][ T5819] veth0_vlan: entered promiscuous mode [ 64.642828][ T5809] veth0_vlan: entered promiscuous mode [ 64.659250][ T5804] veth0_macvtap: entered promiscuous mode [ 64.675986][ T5819] veth1_vlan: entered promiscuous mode [ 64.687245][ T5809] veth1_vlan: entered promiscuous mode [ 64.709425][ T5804] veth1_macvtap: entered promiscuous mode [ 64.754501][ T5807] veth0_vlan: entered promiscuous mode [ 64.763715][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.786756][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.796540][ T5807] veth1_vlan: entered promiscuous mode [ 64.806388][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.816629][ T5809] veth0_macvtap: entered promiscuous mode [ 64.829131][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.843330][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.862006][ T5809] veth1_macvtap: entered promiscuous mode [ 64.870543][ T52] Bluetooth: hci0: command tx timeout [ 64.876733][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.889895][ T5819] veth0_macvtap: entered promiscuous mode [ 64.902769][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.914345][ T5819] veth1_macvtap: entered promiscuous mode [ 64.937997][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.945897][ T52] Bluetooth: hci1: command tx timeout [ 64.951662][ T5807] veth0_macvtap: entered promiscuous mode [ 64.962130][ T5807] veth1_macvtap: entered promiscuous mode [ 64.983858][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.005490][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.017309][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.027297][ T52] Bluetooth: hci4: command tx timeout [ 65.030545][ T5130] Bluetooth: hci2: command tx timeout [ 65.032760][ T5818] Bluetooth: hci3: command tx timeout [ 65.049735][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.057906][ T5815] veth0_vlan: entered promiscuous mode [ 65.064095][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.079834][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.098021][ T5815] veth1_vlan: entered promiscuous mode [ 65.105972][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.137378][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.146764][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.166683][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.175584][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.190615][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.201512][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.206831][ T5815] veth0_macvtap: entered promiscuous mode [ 65.217919][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.226741][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.255572][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.273389][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.285676][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.297187][ T5815] veth1_macvtap: entered promiscuous mode [ 65.308147][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.339599][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.359251][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.391802][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.399803][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.402215][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.415859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.427907][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.432254][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.453232][ T30] audit: type=1400 audit(1770666616.767:85): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.OazQUE/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.483216][ T30] audit: type=1400 audit(1770666616.767:86): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.515443][ T30] audit: type=1400 audit(1770666616.767:87): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.OazQUE/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.529300][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.557272][ T5804] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.564397][ T30] audit: type=1400 audit(1770666616.767:88): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.574049][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.605801][ T2968] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.617854][ T30] audit: type=1400 audit(1770666616.767:89): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.OazQUE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.647646][ T2968] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.656663][ T30] audit: type=1400 audit(1770666616.767:90): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.OazQUE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.693929][ T30] audit: type=1400 audit(1770666616.767:91): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.716071][ T30] audit: type=1400 audit(1770666616.797:92): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.727637][ T2968] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.739374][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.759448][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.775828][ T30] audit: type=1400 audit(1770666616.797:93): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="gadgetfs" ino=8367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.799040][ T2968] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.866898][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.884768][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.923520][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.937568][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.046265][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.073198][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.157077][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 66.178429][ T5925] loop5: detected capacity change from 0 to 7 [ 66.194919][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.214131][ T5926] mmap: syz.0.7 (5926) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.230163][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.231643][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.239817][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.262077][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.271673][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.279676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 66.299047][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.308638][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.324778][ T5926] Invalid source name [ 66.329313][ T5926] UBIFS error (pid: 5926): cannot open "/dev/sg0", error -22 [ 66.442885][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.459904][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.632796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.633188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.735496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.735928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.837573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.880666][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.890297][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.937278][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.942683][ T5818] Bluetooth: hci0: command tx timeout [ 66.946873][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.963817][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.973390][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.981223][ T5925] ldm_validate_partition_table(): Disk read failed. [ 66.998327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 67.006570][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.016116][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 67.024215][ T5818] Bluetooth: hci1: command tx timeout [ 67.024247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 67.040437][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.050011][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 67.060019][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.069578][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 67.077556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 67.080145][ T5925] Dev loop5: unable to read RDB block 0 [ 67.095508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 67.107897][ T52] Bluetooth: hci4: command tx timeout [ 67.113690][ T5818] Bluetooth: hci3: command tx timeout [ 67.114644][ T5130] Bluetooth: hci2: command tx timeout [ 67.175762][ T5925] loop5: unable to read partition table [ 67.219627][ T5925] loop5: partition table beyond EOD, truncated [ 67.229719][ T5925] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ëÜ%õ«`ÉíÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 67.301632][ T5940] IPv6: addrconf: prefix option has invalid lifetime [ 67.310830][ T5940] IPv6: addrconf: prefix option has invalid lifetime [ 67.404537][ T5945] Illegal XDP return value 38 on prog (id 2) dev N/A, expect packet loss! [ 67.876476][ T5956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13'. [ 68.421660][ T1593] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 69.025919][ T1593] usb 3-1: no configurations [ 69.026077][ T5130] Bluetooth: hci0: command tx timeout [ 69.040078][ T1593] usb 3-1: can't read configurations, error -22 [ 69.101013][ T5130] Bluetooth: hci1: command tx timeout [ 69.184817][ T5130] Bluetooth: hci3: command tx timeout [ 69.184829][ T5818] Bluetooth: hci4: command tx timeout [ 69.184855][ T5818] Bluetooth: hci2: command tx timeout [ 69.240067][ T1593] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 69.623268][ T5980] input: syz1 as /devices/virtual/input/input5 [ 69.690199][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 69.690228][ T30] audit: type=1400 audit(1770666620.917:152): avc: denied { read write } for pid=5977 comm="syz.3.20" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.867866][ T1593] usb 3-1: no configurations [ 69.890088][ T1593] usb 3-1: can't read configurations, error -22 [ 69.896988][ T1593] usb usb3-port1: attempt power cycle [ 69.928578][ T30] audit: type=1400 audit(1770666620.917:153): avc: denied { open } for pid=5977 comm="syz.3.20" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.000594][ T5986] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 70.059957][ T30] audit: type=1400 audit(1770666620.927:154): avc: denied { ioctl } for pid=5977 comm="syz.3.20" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.219419][ T30] audit: type=1400 audit(1770666620.987:155): avc: denied { write } for pid=5977 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.301708][ T1593] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 70.513823][ T30] audit: type=1400 audit(1770666621.517:156): avc: denied { create } for pid=5989 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.550991][ T30] audit: type=1400 audit(1770666621.517:157): avc: denied { setopt } for pid=5989 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.551417][ T1593] usb 3-1: no configurations [ 70.593108][ T5994] netlink: 'syz.3.23': attribute type 4 has an invalid length. [ 70.619685][ T1593] usb 3-1: can't read configurations, error -22 [ 70.807027][ T30] audit: type=1400 audit(1770666621.897:158): avc: denied { create } for pid=5989 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.847719][ T1593] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 70.876082][ T1593] usb 3-1: no configurations [ 70.883893][ T30] audit: type=1400 audit(1770666621.907:159): avc: denied { write } for pid=5989 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.884392][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.919558][ T1593] usb 3-1: can't read configurations, error -22 [ 70.932017][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.932034][ T30] audit: type=1400 audit(1770666621.907:160): avc: denied { name_bind } for pid=5989 comm="syz.3.23" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.997921][ T1593] usb usb3-port1: unable to enumerate USB device [ 71.016730][ T30] audit: type=1400 audit(1770666621.907:161): avc: denied { node_bind } for pid=5989 comm="syz.3.23" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 72.089776][ T5864] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.753535][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.771968][ T5864] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 72.780121][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 72.828666][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.924892][ T5864] usb 2-1: config 0 descriptor?? [ 73.933042][ T6006] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 73.943287][ T6006] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 74.050064][ T5811] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 74.253387][ T5811] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 74.270017][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.288295][ T5811] usb 3-1: config 0 has no interface number 0 [ 74.294973][ T5811] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 74.311598][ T5811] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.344781][ T5811] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 74.365862][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.392043][ T5864] usbhid 2-1:0.0: can't add hid device: -71 [ 74.402794][ T5864] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 74.412049][ T5811] usb 3-1: Product: syz [ 74.426597][ T5811] usb 3-1: Manufacturer: syz [ 74.476922][ T6043] fuse: Bad value for 'rootmode' [ 74.478729][ T5864] usb 2-1: USB disconnect, device number 2 [ 74.487770][ T5811] usb 3-1: SerialNumber: syz [ 74.506828][ T5811] usb 3-1: config 0 descriptor?? [ 74.518991][ T6049] syz_tun: entered allmulticast mode [ 74.880112][ T5864] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.141359][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 75.155155][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 26232, setting to 64 [ 75.170457][ T5864] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 75.185336][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.226909][ T5864] usb 4-1: config 0 descriptor?? [ 75.692148][ T5864] ath6kl: Failed to submit usb control message: -71 [ 75.699976][ T5864] ath6kl: unable to send the bmi data to the device: -71 [ 75.725783][ T5864] ath6kl: Unable to send get target info: -71 [ 75.779373][ T5864] ath6kl: Failed to init ath6kl core: -71 [ 75.813950][ T5864] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 75.884599][ T6073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6073 comm=syz.0.44 [ 75.899599][ T5864] usb 4-1: USB disconnect, device number 2 [ 75.934140][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 76.225354][ T6073] vlan2: entered allmulticast mode [ 76.252348][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.254191][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 76.254203][ T30] audit: type=1400 audit(1770666627.537:186): avc: denied { ioctl } for pid=6076 comm="syz.4.46" path="socket:[8076]" dev="sockfs" ino=8076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.261468][ T6073] team_slave_1: entered allmulticast mode [ 76.397920][ T5811] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 76.480048][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 76.487672][ T5811] usb 3-1: USB disconnect, device number 6 [ 76.501211][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 76.584845][ T30] audit: type=1400 audit(1770666627.887:187): avc: denied { write } for pid=6081 comm="syz.2.48" name="ip6_tables_matches" dev="proc" ino=4026533482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.617004][ T5864] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 76.840101][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 76.848283][ T5864] usb 4-1: Product: syz [ 76.937106][ T5864] usb 4-1: Manufacturer: syz [ 76.976988][ T30] audit: type=1400 audit(1770666628.237:188): avc: denied { create } for pid=6085 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.990017][ T5864] usb 4-1: SerialNumber: syz [ 77.268934][ T5864] usb 4-1: config 0 descriptor?? [ 77.283910][ T6071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.299259][ T30] audit: type=1400 audit(1770666628.237:189): avc: denied { setopt } for pid=6085 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.394052][ T6094] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 77.415407][ T30] audit: type=1400 audit(1770666628.247:190): avc: denied { ioctl } for pid=6085 comm="syz.1.49" path="socket:[8100]" dev="sockfs" ino=8100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.510608][ T10] usb 4-1: USB disconnect, device number 3 [ 77.540060][ T30] audit: type=1400 audit(1770666628.447:191): avc: denied { create } for pid=6081 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.656058][ T30] audit: type=1400 audit(1770666628.467:192): avc: denied { write } for pid=6081 comm="syz.2.48" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 77.693231][ T30] audit: type=1400 audit(1770666628.467:193): avc: denied { bind } for pid=6081 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.810197][ T30] audit: type=1400 audit(1770666628.467:194): avc: denied { name_bind } for pid=6081 comm="syz.2.48" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 77.843928][ T30] audit: type=1400 audit(1770666628.467:195): avc: denied { node_bind } for pid=6081 comm="syz.2.48" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 77.993321][ T6105] can0: slcan on ttyS3. [ 79.131487][ T6099] can0 (unregistered): slcan off ttyS3. [ 81.022166][ T6139] warning: `syz.1.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.379114][ T914] cfg80211: failed to load regulatory.db [ 81.540069][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 81.804705][ T10] usb 3-1: no configurations [ 81.832471][ T10] usb 3-1: can't read configurations, error -22 [ 81.952946][ T6150] input: syz1 as /devices/virtual/input/input7 [ 82.391766][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 82.391802][ T30] audit: type=1400 audit(1770666633.687:223): avc: denied { name_bind } for pid=6147 comm="syz.1.64" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 82.457489][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 82.657737][ T30] audit: type=1400 audit(1770666633.867:224): avc: denied { read } for pid=6158 comm="syz.4.63" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 82.693906][ T30] audit: type=1400 audit(1770666633.887:225): avc: denied { open } for pid=6158 comm="syz.4.63" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 82.773673][ T30] audit: type=1400 audit(1770666633.977:226): avc: denied { create } for pid=6119 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.840055][ T30] audit: type=1400 audit(1770666633.977:227): avc: denied { write } for pid=6119 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2177 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.871955][ T10] usb 3-1: no configurations [ 82.876550][ T10] usb 3-1: can't read configurations, error -22 [ 82.902193][ T10] usb usb3-port1: attempt power cycle [ 82.920158][ T5878] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.939808][ T30] audit: type=1400 audit(1770666633.977:228): avc: denied { append } for pid=6119 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2177 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.014663][ T30] audit: type=1400 audit(1770666634.287:229): avc: denied { unlink } for pid=6164 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2177 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.095154][ T30] audit: type=1400 audit(1770666634.307:230): avc: denied { create } for pid=6165 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.143364][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.182174][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.228531][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.260804][ T30] audit: type=1400 audit(1770666634.537:231): avc: denied { ioctl } for pid=6165 comm="syz.3.66" path="socket:[10270]" dev="sockfs" ino=10270 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.300627][ T5878] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.427308][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.448509][ T30] audit: type=1400 audit(1770666634.567:232): avc: denied { search } for pid=6167 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.500560][ T5878] usb 5-1: config 0 descriptor?? [ 83.551111][ T6149] hfsplus: unable to find HFS+ superblock [ 84.228119][ T5878] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 84.317548][ T5878] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 84.709355][ T6159] fuse: Unknown parameter 'fd0x00000000000000080000000000000000000000000000000000000000' [ 84.927840][ T6194] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.890738][ T5811] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 86.009642][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.167289][ T6215] input: syz1 as /devices/virtual/input/input9 [ 87.346012][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.357963][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.370052][ T10] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 87.448791][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.459926][ T10] usb 2-1: config 0 descriptor?? [ 87.618924][ T6231] Invalid source name [ 87.622959][ T6231] UBIFS error (pid: 6231): cannot open "/dev/sg0", error -22 [ 88.118068][ T6241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6241 comm=syz.3.82 [ 88.144572][ T10] ntrig 0003:1B96:0012.0002: item fetching failed at offset 5/7 [ 88.155217][ T10] ntrig 0003:1B96:0012.0002: parse failed [ 88.163196][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 88.172267][ T10] ntrig 0003:1B96:0012.0002: probe with driver ntrig failed with error -22 [ 88.296239][ T6243] vlan2: entered allmulticast mode [ 88.307812][ T6243] bond1: entered allmulticast mode [ 88.330297][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.357793][ T10] usb 2-1: USB disconnect, device number 3 [ 88.481041][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 88.491557][ T5916] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 88.501667][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.509713][ T5916] usb 1-1: Product: syz [ 88.514473][ T5916] usb 1-1: Manufacturer: syz [ 88.519061][ T5916] usb 1-1: SerialNumber: syz [ 88.542463][ T5916] usb 1-1: config 0 descriptor?? [ 88.551464][ T5811] usb 5-1: device descriptor read/64, error -71 [ 88.568126][ T6247] Invalid source name [ 88.572200][ T6247] UBIFS error (pid: 6247): cannot open "/dev/sg0", error -22 [ 88.592648][ T5916] gspca_main: se401-2.14.0 probing 047d:5003 [ 89.127195][ T6254] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 89.156837][ T6254] bond2: entered promiscuous mode [ 89.162979][ T6254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.170490][ T5811] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 89.178919][ T5811] usb 5-1: device reset changed ep0 maxpacket size! [ 89.189805][ T5864] usb 5-1: USB disconnect, device number 2 [ 89.191302][ T6254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.202629][ T6254] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 89.212661][ T6254] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 89.224479][ T6254] bond2: (slave gre1): making interface the new active one [ 89.231723][ T6254] gre1: entered promiscuous mode [ 89.237746][ T6254] bond2: (slave gre1): Enslaving as an active interface with an up link [ 89.252512][ T5916] gspca_se401: Bayer format not supported! [ 89.400060][ T5864] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.507294][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 89.507309][ T30] audit: type=1400 audit(1770666640.817:240): avc: denied { ioctl } for pid=6235 comm="syz.0.80" path="socket:[10525]" dev="sockfs" ino=10525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.553686][ T30] audit: type=1400 audit(1770666640.867:241): avc: denied { ioctl } for pid=6235 comm="syz.0.80" path="socket:[10529]" dev="sockfs" ino=10529 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.640193][ T6266] input: syz1 as /devices/virtual/input/input10 [ 89.978893][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.80'. [ 89.997934][ T30] audit: type=1400 audit(1770666640.897:242): avc: denied { write } for pid=6235 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.004578][ T5811] usb 1-1: USB disconnect, device number 2 [ 90.040055][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 90.053961][ T5864] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 90.069040][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.078437][ T5864] usb 5-1: Product: syz [ 90.090312][ T5864] usb 5-1: Manufacturer: syz [ 90.098202][ T5864] usb 5-1: SerialNumber: syz [ 90.108453][ T5864] usb 5-1: config 0 descriptor?? [ 90.121097][ T5864] gspca_main: se401-2.14.0 probing 047d:5003 [ 90.331212][ T30] audit: type=1400 audit(1770666641.637:243): avc: denied { nlmsg_write } for pid=6274 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.402146][ T30] audit: type=1400 audit(1770666641.687:244): avc: denied { create } for pid=6274 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.430978][ T6281] FAULT_INJECTION: forcing a failure. [ 90.430978][ T6281] name failslab, interval 1, probability 0, space 0, times 1 [ 90.444126][ T6281] CPU: 0 UID: 0 PID: 6281 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT(full) [ 90.444148][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 90.444158][ T6281] Call Trace: [ 90.444163][ T6281] [ 90.444169][ T6281] dump_stack_lvl+0x100/0x190 [ 90.444196][ T6281] should_fail_ex.cold+0x5/0xa [ 90.444216][ T6281] should_failslab+0xc2/0x120 [ 90.444238][ T6281] ? sock_kmalloc+0x111/0x170 [ 90.444252][ T6281] __kmalloc_noprof+0xf6/0x9c0 [ 90.444269][ T6281] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 90.444294][ T6281] ? sock_kmalloc+0x111/0x170 [ 90.444307][ T6281] sock_kmalloc+0x111/0x170 [ 90.444323][ T6281] alg_setsockopt+0x390/0xe90 [ 90.444346][ T6281] ? __pfx_alg_setsockopt+0x10/0x10 [ 90.444367][ T6281] ? selinux_socket_setsockopt+0x6a/0x80 [ 90.444394][ T6281] ? __pfx_alg_setsockopt+0x10/0x10 [ 90.444416][ T6281] do_sock_setsockopt+0xf3/0x1d0 [ 90.444451][ T6281] __sys_setsockopt+0x195/0x220 [ 90.444476][ T6281] __x64_sys_setsockopt+0xbd/0x160 [ 90.444497][ T6281] ? do_syscall_64+0x94/0xf80 [ 90.444515][ T6281] ? lockdep_hardirqs_on+0x78/0x100 [ 90.444533][ T6281] do_syscall_64+0xc9/0xf80 [ 90.444554][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.444571][ T6281] RIP: 0033:0x7f975b19af79 [ 90.444585][ T6281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.444600][ T6281] RSP: 002b:00007f975c10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.444617][ T6281] RAX: ffffffffffffffda RBX: 00007f975b415fa0 RCX: 00007f975b19af79 [ 90.444627][ T6281] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 90.444637][ T6281] RBP: 00007f975c10a090 R08: 0000000000000020 R09: 0000000000000000 [ 90.444647][ T6281] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 90.444657][ T6281] R13: 00007f975b416038 R14: 00007f975b415fa0 R15: 00007ffc6b779268 [ 90.444681][ T6281] [ 91.031492][ T5864] gspca_se401: Bayer format not supported! [ 91.194846][ T30] audit: type=1400 audit(1770666642.507:245): avc: denied { write } for pid=6274 comm="syz.3.91" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 91.231817][ T6290] fuse: Bad value for 'rootmode' [ 91.730458][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 91.750070][ T30] audit: type=1400 audit(1770666642.627:246): avc: denied { ioctl } for pid=6285 comm="syz.2.95" path="socket:[10557]" dev="sockfs" ino=10557 ioctlcmd=0x42d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.775544][ T30] audit: type=1400 audit(1770666643.017:247): avc: denied { create } for pid=6274 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.810416][ T24] usb 5-1: USB disconnect, device number 3 [ 91.816307][ T30] audit: type=1400 audit(1770666643.037:248): avc: denied { bind } for pid=6274 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.232797][ T6300] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.520435][ T30] audit: type=1400 audit(1770666643.037:249): avc: denied { write } for pid=6274 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.850156][ T5878] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.284410][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 93.352740][ T5878] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 93.374937][ T5878] usb 5-1: config 0 has no interface number 0 [ 93.405407][ T5878] usb 5-1: config 0 interface 11 has no altsetting 0 [ 93.434832][ T5878] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 93.540770][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.630901][ T5878] usb 5-1: config 0 descriptor?? [ 93.635798][ T6316] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 94.078148][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.094197][ T6317] input: syz1 as /devices/virtual/input/input11 [ 94.097856][ T5878] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 94.120320][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 7 [ 94.149272][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 94.178700][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 94.196658][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 94.235551][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 94.342563][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 94.477631][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 94.621135][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 94.671989][ T10] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 94.716603][ T5878] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 94.724783][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.756182][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 94.775718][ T10] usb 1-1: config 0 descriptor?? [ 94.794368][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 94.810642][ T10] as10x_usb: device has been detected [ 94.818101][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 94.859630][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 94.888157][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 94.996319][ T6335] netlink: 'syz.3.108': attribute type 4 has an invalid length. [ 95.022279][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 95.187560][ T5878] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 95.204939][ T10] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 95.807984][ T5878] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 95.936524][ T10] as10x_usb: error during firmware upload part1 [ 95.991103][ T5878] usb 5-1: USB disconnect, device number 4 [ 96.015514][ T10] Registered device nBox DVB-T Dongle [ 96.017077][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 96.017087][ T30] audit: type=1400 audit(1770666647.247:251): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 96.090082][ T10] usb 1-1: USB disconnect, device number 3 [ 96.188082][ T5878] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 96.254265][ T10] Unregistered device nBox DVB-T Dongle [ 96.270664][ T5878] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 96.285877][ T10] as10x_usb: device has been disconnected [ 96.302330][ T5878] keyspan 5-1:0.11: device disconnected [ 96.339629][ T30] audit: type=1400 audit(1770666647.637:252): avc: denied { create } for pid=6339 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.442300][ T30] audit: type=1400 audit(1770666647.757:253): avc: denied { create } for pid=6342 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.991508][ T30] audit: type=1400 audit(1770666648.297:254): avc: denied { ioctl } for pid=6357 comm="syz.4.113" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9534 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.102683][ T30] audit: type=1400 audit(1770666648.417:255): avc: denied { create } for pid=6357 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.488362][ T6368] FAULT_INJECTION: forcing a failure. [ 98.488362][ T6368] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.523908][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.1.115 Not tainted syzkaller #0 PREEMPT(full) [ 98.523931][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 98.523941][ T6368] Call Trace: [ 98.523946][ T6368] [ 98.523953][ T6368] dump_stack_lvl+0x100/0x190 [ 98.523972][ T6368] should_fail_ex.cold+0x5/0xa [ 98.523984][ T6368] _copy_from_user+0x2e/0xd0 [ 98.524000][ T6368] alg_setsockopt+0x88f/0xe90 [ 98.524015][ T6368] ? __pfx_alg_setsockopt+0x10/0x10 [ 98.524029][ T6368] ? selinux_socket_setsockopt+0x6a/0x80 [ 98.524048][ T6368] ? __pfx_alg_setsockopt+0x10/0x10 [ 98.524062][ T6368] do_sock_setsockopt+0xf3/0x1d0 [ 98.524085][ T6368] __sys_setsockopt+0x195/0x220 [ 98.524101][ T6368] __x64_sys_setsockopt+0xbd/0x160 [ 98.524115][ T6368] ? do_syscall_64+0x94/0xf80 [ 98.524130][ T6368] ? lockdep_hardirqs_on+0x78/0x100 [ 98.524148][ T6368] do_syscall_64+0xc9/0xf80 [ 98.524169][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.524186][ T6368] RIP: 0033:0x7f91eb19af79 [ 98.524196][ T6368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.524206][ T6368] RSP: 002b:00007f91ec0d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.524217][ T6368] RAX: ffffffffffffffda RBX: 00007f91eb415fa0 RCX: 00007f91eb19af79 [ 98.524223][ T6368] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 98.524229][ T6368] RBP: 00007f91ec0d3090 R08: 0000000000000020 R09: 0000000000000000 [ 98.524235][ T6368] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 98.524242][ T6368] R13: 00007f91eb416038 R14: 00007f91eb415fa0 R15: 00007ffd6c797298 [ 98.524255][ T6368] [ 98.543526][ T30] audit: type=1400 audit(1770666649.837:256): avc: denied { write } for pid=6356 comm="syz.2.112" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.028653][ T6376] input: syz1 as /devices/virtual/input/input12 [ 99.828405][ T30] audit: type=1400 audit(1770666649.837:257): avc: denied { ioctl } for pid=6356 comm="syz.2.112" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.853339][ T30] audit: type=1400 audit(1770666650.187:258): avc: denied { write } for pid=6373 comm="syz.3.117" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.876598][ T30] audit: type=1400 audit(1770666650.787:259): avc: denied { name_connect } for pid=6373 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 100.032509][ T30] audit: type=1400 audit(1770666650.867:260): avc: denied { listen } for pid=6373 comm="syz.3.117" lport=35546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.137708][ T6388] syz.3.119 uses obsolete (PF_INET,SOCK_PACKET) [ 100.310054][ T5878] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.470623][ T5878] usb 2-1: device descriptor read/64, error -71 [ 100.720077][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.860730][ T5878] usb 2-1: device descriptor read/64, error -71 [ 100.982421][ T5878] usb usb2-port1: attempt power cycle [ 101.732335][ T5878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.974950][ T5878] usb 2-1: device descriptor read/8, error -71 [ 102.230401][ T5878] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.260940][ T5878] usb 2-1: device descriptor read/8, error -71 [ 102.373887][ T5878] usb usb2-port1: unable to enumerate USB device [ 102.375638][ T6438] ======================================================= [ 102.375638][ T6438] WARNING: The mand mount option has been deprecated and [ 102.375638][ T6438] and is ignored by this kernel. Remove the mand [ 102.375638][ T6438] option from the mount to silence this warning. [ 102.375638][ T6438] ======================================================= [ 102.514905][ T6439] input: syz1 as /devices/virtual/input/input13 [ 102.664236][ T6438] NILFS (nullb0): couldn't find nilfs on the device [ 102.875148][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 102.875164][ T30] audit: type=1400 audit(1770666654.187:274): avc: denied { getopt } for pid=6437 comm="syz.4.132" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.150130][ T5864] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.232958][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.136'. [ 103.400042][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 103.428542][ T5864] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 103.437195][ T5864] usb 5-1: config 0 has no interface number 1 [ 103.549869][ T6449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.136'. [ 103.565372][ T5864] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 103.596587][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.136'. [ 103.605924][ T6449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.136'. [ 103.718196][ T5864] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 103.850304][ T5864] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 103.869351][ T5864] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 103.891233][ T5864] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.909619][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 104.005412][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 28004, setting to 1024 [ 104.018733][ T5864] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 104.032809][ T5864] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 104.042070][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.050215][ T5864] usb 5-1: Product: syz [ 104.060827][ T5864] usb 5-1: Manufacturer: syz [ 104.065729][ T5864] usb 5-1: SerialNumber: syz [ 104.479889][ T5864] usb 5-1: config 0 descriptor?? [ 104.485684][ T6438] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 104.495467][ T5864] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.504623][ T5864] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.841064][ T6438] Zero length message leads to an empty skb [ 104.852896][ T5878] usb 5-1: USB disconnect, device number 5 [ 104.860105][ T5969] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.977726][ T30] audit: type=1400 audit(1770666656.267:275): avc: denied { mount } for pid=6476 comm="syz.0.142" name="/" dev="overlay" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.040512][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.054644][ T5969] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 105.064432][ T30] audit: type=1400 audit(1770666656.277:276): avc: denied { create } for pid=6476 comm="syz.0.142" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.074427][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.094782][ T6482] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 105.124159][ T5969] usb 4-1: Product: syz [ 105.130099][ T30] audit: type=1400 audit(1770666656.277:277): avc: denied { link } for pid=6476 comm="syz.0.142" name="#7" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.133859][ T5969] usb 4-1: Manufacturer: syz [ 105.165678][ T5969] usb 4-1: SerialNumber: syz [ 105.191352][ T30] audit: type=1400 audit(1770666656.277:278): avc: denied { rename } for pid=6476 comm="syz.0.142" name="#8" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.221994][ T5969] usb 4-1: config 0 descriptor?? [ 105.230433][ T5969] cytherm 4-1:0.0: Cypress thermometer device now attached [ 105.264218][ T30] audit: type=1400 audit(1770666656.287:279): avc: denied { setopt } for pid=6476 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.303545][ T30] audit: type=1400 audit(1770666656.287:280): avc: denied { read } for pid=6476 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.474599][ T5864] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 105.827965][ T6490] input: syz1 as /devices/virtual/input/input14 [ 106.250610][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 106.274967][ T5864] usb 3-1: config 2 has an invalid interface number: 171 but max is 0 [ 106.283340][ T5864] usb 3-1: config 2 has no interface number 0 [ 106.289598][ T5864] usb 3-1: config 2 interface 171 has no altsetting 0 [ 106.307917][ T5864] usb 3-1: New USB device found, idVendor=0499, idProduct=1012, bcdDevice=a6.83 [ 106.319533][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.340021][ T5864] usb 3-1: Product: syz [ 106.353387][ T5864] usb 3-1: Manufacturer: syz [ 106.365370][ T5864] usb 3-1: SerialNumber: syz [ 106.408802][ T30] audit: type=1400 audit(1770666657.717:281): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 106.443907][ T30] audit: type=1400 audit(1770666657.747:282): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.669524][ T5864] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.723751][ T5864] snd-usb-audio 3-1:2.171: probe with driver snd-usb-audio failed with error -2 [ 106.778512][ T5864] usb 3-1: USB disconnect, device number 10 [ 106.801568][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.171/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.200095][ T5864] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.540191][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 107.549156][ T6520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.150'. [ 107.558251][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 107.647265][ T6520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.150'. [ 107.931272][ T5864] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 107.950016][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.957982][ T5864] usb 2-1: Product: syz [ 108.060447][ T5864] usb 2-1: Manufacturer: syz [ 108.065058][ T5864] usb 2-1: SerialNumber: syz [ 108.182333][ T5864] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 108.217154][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.320089][ T5878] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.425747][ T1593] usb 2-1: USB disconnect, device number 8 [ 108.560072][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 108.620264][ T5878] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 108.628756][ T5878] usb 1-1: config 179 has no interface number 0 [ 108.635008][ T5878] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 108.815858][ T5878] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 108.845137][ T5878] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.856423][ T5878] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 108.884781][ T5878] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.899874][ T5878] usb 1-1: New USB device found, idVendor=12ab, idProduct=909d, bcdDevice=1e.eb [ 108.909016][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.046668][ T30] audit: type=1400 audit(1770666660.357:283): avc: denied { block_suspend } for pid=6533 comm="syz.2.156" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.968476][ T6537] input: syz1 as /devices/virtual/input/input15 [ 110.355868][ T6538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.789829][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 110.850208][ T6526] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 110.870749][ T24] ath9k_htc: Failed to initialize the device [ 110.895140][ T30] audit: type=1400 audit(1770666661.717:284): avc: denied { read } for pid=6533 comm="syz.2.156" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 110.899667][ T1593] usb 2-1: ath9k_htc: USB layer deinitialized [ 110.918167][ T30] audit: type=1400 audit(1770666661.717:285): avc: denied { open } for pid=6533 comm="syz.2.156" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 111.114736][ T5916] usb 1-1: USB disconnect, device number 4 [ 111.114818][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.130559][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 111.232238][ T1593] usb 4-1: USB disconnect, device number 4 [ 111.238667][ T1593] cytherm 4-1:0.0: Cypress thermometer now disconnected [ 111.490435][ T6559] fuse: Bad value for 'rootmode' [ 111.575408][ T30] audit: type=1400 audit(1770666662.887:286): avc: denied { name_bind } for pid=6563 comm="syz.1.166" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 111.754307][ T6564] syzkaller1: entered promiscuous mode [ 111.759858][ T6564] syzkaller1: entered allmulticast mode [ 112.048909][ T30] audit: type=1400 audit(1770666663.067:287): avc: denied { ioctl } for pid=6563 comm="syz.1.166" path="socket:[10936]" dev="sockfs" ino=10936 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.398953][ T30] audit: type=1400 audit(1770666663.637:288): avc: denied { mount } for pid=6563 comm="syz.1.166" name="/" dev="autofs" ino=10940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 112.463600][ T5916] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.765443][ T5916] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 112.780277][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.788364][ T5916] usb 1-1: Product: syz [ 112.792627][ T5916] usb 1-1: Manufacturer: syz [ 112.797283][ T5916] usb 1-1: SerialNumber: syz [ 112.906404][ T6580] input: syz1 as /devices/virtual/input/input16 [ 113.804111][ T30] audit: type=1400 audit(1770666665.107:289): avc: denied { read } for pid=6556 comm="syz.0.165" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.216579][ T6558] loop7: detected capacity change from 0 to 2640 [ 114.280418][ T30] audit: type=1400 audit(1770666665.117:290): avc: denied { append } for pid=6556 comm="syz.0.165" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.349704][ T6593] buffer_io_error: 10 callbacks suppressed [ 114.349720][ T6593] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 114.406909][ T6593] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 114.716687][ T6593] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 114.747907][ T6593] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 114.776242][ T6593] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 114.786050][ T6593] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 114.797854][ T6593] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 114.807414][ T6593] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 114.817055][ T6593] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 114.826647][ T6593] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 114.983500][ T6605] loop5: detected capacity change from 0 to 7 [ 115.014275][ T6604] Invalid source name [ 115.018258][ T6604] UBIFS error (pid: 6604): cannot open "/dev/sg0", error -22 [ 115.298258][ T6338] Dev loop5: unable to read RDB block 7 [ 115.324409][ T6338] loop5: unable to read partition table [ 115.330326][ T6338] loop5: partition table beyond EOD, truncated [ 115.390618][ T6605] Dev loop5: unable to read RDB block 7 [ 115.396527][ T6605] loop5: unable to read partition table [ 115.410217][ T6605] loop5: partition table beyond EOD, truncated [ 115.425446][ T6605] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.462243][ T5916] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 115.508815][ T5916] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 115.595713][ T5916] usb 1-1: USB disconnect, device number 5 [ 116.266014][ T6624] xt_hashlimit: max too large, truncated to 1048576 [ 116.294133][ T6624] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 116.303887][ T6624] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 116.316404][ T6624] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 118.561956][ T6640] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 118.569605][ T6640] netlink: 224 bytes leftover after parsing attributes in process `syz.3.184'. [ 119.022853][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.167035][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'. [ 119.283417][ T6647] input: syz1 as /devices/virtual/input/input17 [ 119.737165][ T1593] kernel read not supported for file /vga_arbiter (pid: 1593 comm: kworker/0:3) [ 119.746946][ T30] audit: type=1400 audit(1770666671.047:291): avc: denied { write } for pid=6649 comm="syz.0.186" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.855761][ T30] audit: type=1400 audit(1770666671.047:292): avc: denied { open } for pid=6649 comm="syz.0.186" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.860027][ T24] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 119.880120][ T30] audit: type=1400 audit(1770666671.047:293): avc: denied { read } for pid=6649 comm="syz.0.186" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.967966][ T24] usb 2-1: config 0 has no interface number 0 [ 119.974825][ T24] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.982057][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 119.989844][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 119.999536][ T30] audit: type=1400 audit(1770666671.047:294): avc: denied { mounton } for pid=6649 comm="syz.0.186" path="/syzcgroup/net/syz0/cgroup.procs" dev="cgroup" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 120.216744][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.225814][ T24] usb 2-1: Product: syz [ 120.230084][ T24] usb 2-1: Manufacturer: syz [ 120.234739][ T24] usb 2-1: SerialNumber: syz [ 120.257125][ T24] usb 2-1: config 0 descriptor?? [ 120.640331][ T1593] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.661900][ T30] audit: type=1326 audit(1770666671.647:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975b19af79 code=0x7ffc0000 [ 120.738485][ T24] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 120.778111][ T30] audit: type=1326 audit(1770666671.647:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975b19af79 code=0x7ffc0000 [ 120.834774][ T1593] usb 4-1: Using ep0 maxpacket: 32 [ 120.892429][ T1593] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 120.910596][ T1593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.933158][ T30] audit: type=1326 audit(1770666671.647:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f975b19af79 code=0x7ffc0000 [ 120.935793][ T24] usb 2-1: USB disconnect, device number 9 [ 120.979944][ T1593] usb 4-1: Product: syz [ 120.984249][ T1593] usb 4-1: Manufacturer: syz [ 120.998495][ T24] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 121.014580][ T1593] usb 4-1: SerialNumber: syz [ 121.022148][ T1593] usb 4-1: config 0 descriptor?? [ 121.027257][ T30] audit: type=1400 audit(1770666671.727:298): avc: denied { remount } for pid=6654 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.057083][ T30] audit: type=1326 audit(1770666672.037:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975b19af79 code=0x7ffc0000 [ 121.111035][ T30] audit: type=1326 audit(1770666672.037:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975b19af79 code=0x7ffc0000 [ 121.455171][ T6682] FAULT_INJECTION: forcing a failure. [ 121.455171][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 121.509715][ T1593] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 005 [ 121.586867][ T6682] CPU: 1 UID: 0 PID: 6682 Comm: syz.2.192 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.586894][ T6682] Tainted: [L]=SOFTLOCKUP [ 121.586900][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 121.586909][ T6682] Call Trace: [ 121.586914][ T6682] [ 121.586920][ T6682] dump_stack_lvl+0x100/0x190 [ 121.586947][ T6682] should_fail_ex.cold+0x5/0xa [ 121.586965][ T6682] should_failslab+0xc2/0x120 [ 121.586985][ T6682] ? dma_fence_array_create+0x28/0x70 [ 121.587003][ T6682] __kmalloc_noprof+0xf6/0x9c0 [ 121.587027][ T6682] ? dma_fence_array_create+0x28/0x70 [ 121.587045][ T6682] dma_fence_array_create+0x28/0x70 [ 121.587067][ T6682] __dma_fence_unwrap_merge+0x8c8/0xaa0 [ 121.587096][ T6682] sync_file_merge.constprop.0+0x109/0x270 [ 121.587123][ T6682] ? __pfx_sync_file_merge.constprop.0+0x10/0x10 [ 121.587149][ T6682] ? find_held_lock+0x2b/0x80 [ 121.587171][ T6682] ? __fget_files+0x215/0x3d0 [ 121.587197][ T6682] ? __fget_files+0x21f/0x3d0 [ 121.587222][ T6682] sync_file_ioctl+0xc68/0xf60 [ 121.587252][ T6682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.587276][ T6682] ? __pfx_sync_file_ioctl+0x10/0x10 [ 121.587302][ T6682] ? do_vfs_ioctl+0x226/0x13e0 [ 121.587319][ T6682] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 121.587332][ T6682] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 121.587354][ T6682] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 121.587387][ T6682] ? selinux_file_ioctl+0x139/0x290 [ 121.587404][ T6682] ? selinux_file_ioctl+0xb4/0x290 [ 121.587424][ T6682] ? __pfx_sync_file_ioctl+0x10/0x10 [ 121.587452][ T6682] __x64_sys_ioctl+0x18e/0x210 [ 121.587471][ T6682] do_syscall_64+0xc9/0xf80 [ 121.587492][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.587510][ T6682] RIP: 0033:0x7f975b19af79 [ 121.587524][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.587540][ T6682] RSP: 002b:00007f975c10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.587557][ T6682] RAX: ffffffffffffffda RBX: 00007f975b415fa0 RCX: 00007f975b19af79 [ 121.587568][ T6682] RDX: 0000200000000040 RSI: 00000000c0303e03 RDI: 0000000000000009 [ 121.587578][ T6682] RBP: 00007f975c10a090 R08: 0000000000000000 R09: 0000000000000000 [ 121.587588][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.587597][ T6682] R13: 00007f975b416038 R14: 00007f975b415fa0 R15: 00007ffc6b779268 [ 121.587619][ T6682] [ 121.930447][ T6686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.194'. [ 121.980237][ T6659] netlink: 660 bytes leftover after parsing attributes in process `syz.3.189'. [ 121.989185][ T6659] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 122.245651][ T6699] fuse: Bad value for 'fd' [ 122.300168][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.358434][ T6703] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read) [ 122.460246][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 122.483007][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 122.571578][ T24] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 122.585046][ T6706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.195'. [ 122.715110][ T24] usb 5-1: Product: syz [ 122.722500][ T24] usb 5-1: Manufacturer: syz [ 122.739051][ T24] usb 5-1: SerialNumber: syz [ 122.772515][ T24] usb 5-1: config 0 descriptor?? [ 122.804731][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 123.075298][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.107253][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.147542][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.178392][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.235247][ T24] gspca_zc3xx: reg_r err -71 [ 123.239899][ T24] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 123.276997][ T24] usb 5-1: USB disconnect, device number 6 [ 123.350099][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 123.523224][ T10] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 123.532470][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.589900][ T10] usb 1-1: Product: syz [ 123.601410][ T10] usb 1-1: Manufacturer: syz [ 123.610793][ T24] usb 4-1: USB disconnect, device number 5 [ 123.617091][ T10] usb 1-1: SerialNumber: syz [ 124.137470][ T10] usb 1-1: config 0 descriptor?? [ 124.186485][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 124.373532][ T10] gspca_sq930x: reg_r 001f failed -32 [ 124.380773][ T10] sq930x 1-1:0.0: probe with driver sq930x failed with error -32 [ 124.450340][ T10] usb 1-1: USB disconnect, device number 6 [ 124.473942][ T6736] fuse: Unknown parameter 'fd0x00000000000000060000000000000000000000000000000000000000' [ 124.805675][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 125.023317][ T6745] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 125.031313][ T24] usb 4-1: device descriptor read/64, error -71 [ 125.340364][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 125.638373][ T24] usb 4-1: device descriptor read/64, error -71 [ 125.833677][ T24] usb usb4-port1: attempt power cycle [ 126.174383][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 126.174397][ T30] audit: type=1400 audit(1770666677.477:337): avc: denied { append } for pid=6756 comm="syz.1.212" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 126.440028][ T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 126.471284][ T24] usb 4-1: device descriptor read/8, error -71 [ 126.595041][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 126.604177][ T6770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.215'. [ 126.613079][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 126.622322][ T6770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.215'. [ 126.782442][ T6773] syzkaller0: entered promiscuous mode [ 126.797135][ T6773] syzkaller0: entered allmulticast mode [ 126.844967][ T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 126.944224][ T24] usb 4-1: device descriptor read/8, error -71 [ 127.062405][ T24] usb usb4-port1: unable to enumerate USB device [ 128.793086][ T6780] 9p: Bad value for 'source' [ 130.540206][ T6817] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.830824][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 130.969408][ T30] audit: type=1400 audit(1770666682.277:338): avc: denied { ioctl } for pid=6818 comm="syz.2.228" path="socket:[11409]" dev="sockfs" ino=11409 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 131.140660][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.242843][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.272003][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 131.286789][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 64 [ 131.304009][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 131.326409][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.481994][ T6817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.560083][ T5916] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.562800][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 131.581278][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 131.590594][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 131.595769][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 131.601346][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 131.724180][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 131.738447][ T5916] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 131.750197][ T5916] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.762481][ T30] audit: type=1400 audit(1770666683.077:339): avc: denied { create } for pid=6829 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.799023][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.110113][ T6836] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.380334][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.389357][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.417325][ T30] audit: type=1400 audit(1770666683.157:340): avc: denied { getopt } for pid=6829 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.440225][ T5916] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.478756][ T5916] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.497221][ T30] audit: type=1400 audit(1770666683.417:341): avc: denied { write } for pid=6829 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.519069][ T5916] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.528353][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.618770][ T5916] usbtmc 1-1:16.0: bulk endpoints not found [ 132.642865][ T5916] usb 5-1: USB disconnect, device number 7 [ 132.702119][ T6838] Invalid source name [ 132.706096][ T6838] UBIFS error (pid: 6838): cannot open "/dev/sg0", error -22 [ 133.973753][ T6857] syzkaller0: entered promiscuous mode [ 133.998395][ T6857] syzkaller0: entered allmulticast mode [ 134.225660][ T30] audit: type=1400 audit(1770666685.517:342): avc: denied { map } for pid=6856 comm="syz.3.240" path="socket:[11479]" dev="sockfs" ino=11479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 134.343519][ T5864] usb 1-1: USB disconnect, device number 7 [ 134.474150][ T30] audit: type=1400 audit(1770666685.737:343): avc: denied { create } for pid=6868 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.547437][ T30] audit: type=1400 audit(1770666685.737:344): avc: denied { setopt } for pid=6868 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.180227][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 135.534088][ T30] audit: type=1400 audit(1770666686.847:345): avc: denied { name_bind } for pid=6889 comm="syz.0.247" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 136.606607][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 136.729389][ T6905] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 136.907415][ T30] audit: type=1400 audit(1770666688.187:346): avc: denied { write } for pid=6904 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.127895][ T30] audit: type=1400 audit(1770666688.247:347): avc: denied { ioctl } for pid=6904 comm="syz.1.251" path="socket:[11600]" dev="sockfs" ino=11600 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 137.270935][ T6913] input: syz1 as /devices/virtual/input/input18 [ 139.140149][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.414811][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 139.459019][ T24] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 139.470225][ T24] usb 5-1: config 251 has no interface number 0 [ 139.476511][ T24] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 139.553452][ T24] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 139.618304][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.257'. [ 139.680400][ T24] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 139.711902][ T24] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 139.769520][ T6942] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 139.793104][ T24] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 139.830018][ T24] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 139.855000][ T24] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.892419][ T24] usb 5-1: config 251 interface 202 has no altsetting 0 [ 139.920493][ T24] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 139.940061][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.969898][ T24] usb 5-1: Product: syz [ 139.980023][ T24] usb 5-1: Manufacturer: syz [ 139.990105][ T24] usb 5-1: SerialNumber: syz [ 140.005462][ T6925] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.023962][ T6925] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.144691][ T6928] 9p: Bad value for 'source' [ 140.208829][ T6945] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.421793][ T24] cxacru 5-1:251.202: send of cm 0x90 failed (-71) [ 140.439547][ T24] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 140.464203][ T24] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 140.608144][ T24] usb 5-1: USB disconnect, device number 8 [ 141.297677][ T6955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 141.308105][ T6955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 141.647514][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 142.366459][ T30] audit: type=1400 audit(1770666693.677:348): avc: denied { map } for pid=6959 comm="syz.2.265" path="socket:[11739]" dev="sockfs" ino=11739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 143.083850][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.333045][ T9] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 143.350080][ T9] usb 2-1: config 1 has no interface number 0 [ 143.700334][ T9] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x5 has invalid maxpacket 1719, setting to 1024 [ 144.232905][ T9] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.246228][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 144.255917][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.280327][ T9] usb 2-1: Product: syz [ 144.311981][ T9] usb 2-1: Manufacturer: syz [ 144.507673][ T9] usb 2-1: SerialNumber: syz [ 144.642745][ T6968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.678586][ T6979] syzkaller0: entered promiscuous mode [ 144.691626][ T9] usb 2-1: Error in usbnet_get_endpoints (-22) [ 144.734712][ T6979] syzkaller0: entered allmulticast mode [ 145.063516][ T6997] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.544205][ T7000] FAULT_INJECTION: forcing a failure. [ 145.544205][ T7000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.558876][ T7000] CPU: 0 UID: 0 PID: 7000 Comm: syz.4.276 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.558901][ T7000] Tainted: [L]=SOFTLOCKUP [ 145.558907][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 145.558916][ T7000] Call Trace: [ 145.558921][ T7000] [ 145.558926][ T7000] dump_stack_lvl+0x100/0x190 [ 145.558953][ T7000] should_fail_ex.cold+0x5/0xa [ 145.558971][ T7000] _copy_from_user+0x2e/0xd0 [ 145.558995][ T7000] kstrtouint_from_user+0xd6/0x1d0 [ 145.559011][ T7000] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 145.559025][ T7000] ? __lock_acquire+0x4a5/0x2630 [ 145.559045][ T7000] ? lock_acquire+0x17c/0x330 [ 145.559066][ T7000] proc_fail_nth_write+0x83/0x220 [ 145.559089][ T7000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 145.559117][ T7000] vfs_write+0x2aa/0x1070 [ 145.559136][ T7000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 145.559160][ T7000] ? __pfx_vfs_write+0x10/0x10 [ 145.559176][ T7000] ? find_held_lock+0x2b/0x80 [ 145.559198][ T7000] ? __fget_files+0x215/0x3d0 [ 145.559221][ T7000] ? __fget_files+0x21f/0x3d0 [ 145.559247][ T7000] ksys_write+0x12a/0x250 [ 145.559264][ T7000] ? __pfx_ksys_write+0x10/0x10 [ 145.559283][ T7000] ? fput+0x79/0x100 [ 145.559308][ T7000] do_syscall_64+0xc9/0xf80 [ 145.559328][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.559345][ T7000] RIP: 0033:0x7f10a9f5b84e [ 145.559359][ T7000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.559373][ T7000] RSP: 002b:00007f10aadaafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.559388][ T7000] RAX: ffffffffffffffda RBX: 00007f10aadab6c0 RCX: 00007f10a9f5b84e [ 145.559413][ T7000] RDX: 0000000000000001 RSI: 00007f10aadab0a0 RDI: 000000000000000c [ 145.559433][ T7000] RBP: 00007f10aadab090 R08: 0000000000000000 R09: 0000000000000000 [ 145.559442][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.559451][ T7000] R13: 00007f10aa216038 R14: 00007f10aa215fa0 R15: 00007ffd830483b8 [ 145.559474][ T7000] [ 146.526404][ T9] usb 2-1: USB disconnect, device number 10 [ 149.293256][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.285'. [ 149.327989][ T7037] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 150.583655][ T7044] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 150.619785][ T7044] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.288'. [ 150.650025][ T7044] netlink: 1 bytes leftover after parsing attributes in process `syz.2.288'. [ 150.718980][ T7046] syzkaller0: entered promiscuous mode [ 150.725138][ T7046] syzkaller0: entered allmulticast mode [ 151.076053][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 151.784921][ T7064] fuse: Unknown parameter 'fd0x00000000000000060000000000000000000000000000000000000000' [ 153.728328][ T7083] syzkaller0: entered promiscuous mode [ 153.733828][ T7083] syzkaller0: entered allmulticast mode [ 155.882061][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.306'. [ 155.907219][ T7127] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 156.851502][ T7132] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 157.456741][ T7136] Invalid source name [ 157.460800][ T7136] UBIFS error (pid: 7136): cannot open "/dev/sg0", error -22 [ 157.597070][ T5916] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.845237][ T5916] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 157.862574][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.902946][ T5916] usb 1-1: config 0 has no interface number 0 [ 157.916890][ T5916] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 158.388665][ T30] audit: type=1400 audit(1770666709.458:349): avc: denied { create } for pid=7142 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.431791][ T5916] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.519942][ T5916] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 158.559844][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.568063][ T5916] usb 1-1: Product: syz [ 158.572482][ T5916] usb 1-1: Manufacturer: syz [ 158.577117][ T5916] usb 1-1: SerialNumber: syz [ 158.596683][ T5916] usb 1-1: config 0 descriptor?? [ 158.660331][ T7154] syzkaller0: entered promiscuous mode [ 158.665965][ T7154] syzkaller0: entered allmulticast mode [ 160.029152][ T5916] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.117/input/input19 [ 160.216849][ T30] audit: type=1400 audit(1770666711.528:350): avc: denied { create } for pid=7166 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.220008][ T1593] IPVS: starting estimator thread 0... [ 160.274902][ T30] audit: type=1400 audit(1770666711.528:351): avc: denied { write } for pid=7166 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.420293][ T7169] IPVS: using max 37 ests per chain, 88800 per kthread [ 160.721208][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 160.900313][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 160.924265][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 160.959146][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.983018][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.998001][ T24] usb 4-1: Product: syz [ 161.004832][ T24] usb 4-1: Manufacturer: syz [ 161.009554][ T24] usb 4-1: SerialNumber: syz [ 161.016317][ T24] usb 4-1: config 0 descriptor?? [ 161.035148][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.061495][ T24] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 161.119600][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'. [ 161.206601][ T1593] usb 1-1: USB disconnect, device number 8 [ 161.245583][ T7180] capability: warning: `syz.1.322' uses 32-bit capabilities (legacy support in use) [ 161.296592][ T7178] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 161.668112][ T7180] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7180 comm=syz.1.322 [ 161.802920][ T7197] syzkaller0: entered promiscuous mode [ 161.808428][ T7197] syzkaller0: entered allmulticast mode [ 161.819317][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 162.140056][ T5811] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.286233][ T7206] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.494961][ T24] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 162.506554][ T24] em28xx 4-1:0.0: board has no eeprom [ 162.714619][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 162.721766][ T5811] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 162.734828][ T5811] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.748062][ T5811] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.762304][ T5811] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.775474][ T5811] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.842795][ T7211] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.307217][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.570069][ T5811] usb 5-1: GET_CAPABILITIES returned 0 [ 163.580909][ T5811] usbtmc 5-1:16.0: can't read capabilities [ 163.602094][ T7174] em28xx 4-1:0.0: writing to i2c device at 0x2 failed (error=-5) [ 163.650076][ T24] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 164.077736][ T9] usb 5-1: USB disconnect, device number 9 [ 164.090083][ T24] em28xx 4-1:0.0: dvb set to bulk mode. [ 164.139634][ T5916] em28xx 4-1:0.0: Binding DVB extension [ 164.416181][ T24] usb 4-1: USB disconnect, device number 10 [ 164.446331][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 164.544403][ T5916] em28xx 4-1:0.0: Registering input extension [ 164.571878][ T24] em28xx 4-1:0.0: Closing input extension [ 164.659047][ T30] audit: type=1400 audit(1770666715.968:352): avc: denied { bind } for pid=7235 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.663442][ T24] em28xx 4-1:0.0: Freeing device [ 164.754957][ T7234] syzkaller0: entered promiscuous mode [ 164.764224][ T7239] netlink: 'syz.0.334': attribute type 10 has an invalid length. [ 164.777291][ T7234] syzkaller0: entered allmulticast mode [ 164.783137][ T30] audit: type=1400 audit(1770666716.068:353): avc: denied { create } for pid=7214 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.125535][ T7243] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 165.251532][ T7246] IPv6: addrconf: prefix option has invalid lifetime [ 165.284137][ T7246] IPv6: addrconf: prefix option has invalid lifetime [ 165.881899][ T7241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 165.891972][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.335'. [ 165.901061][ T7241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 165.910263][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.335'. [ 166.311886][ T7265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.340'. [ 166.342938][ T7265] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 166.420505][ T1593] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.750791][ T1593] usb 5-1: Using ep0 maxpacket: 8 [ 166.758058][ T1593] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 166.766500][ T1593] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 166.788204][ T1593] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 166.808986][ T1593] usb 5-1: config 127 has no interface number 0 [ 166.820047][ T1593] usb 5-1: config 127 interface 171 has no altsetting 0 [ 166.856781][ T1593] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 167.288627][ T1593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.307101][ T1593] usb 5-1: Product: syz [ 167.311354][ T1593] usb 5-1: Manufacturer: syz [ 167.315997][ T1593] usb 5-1: SerialNumber: syz [ 167.595346][ T7258] netlink: 88 bytes leftover after parsing attributes in process `syz.4.341'. [ 167.605924][ T30] audit: type=1400 audit(1770666718.908:354): avc: denied { ioctl } for pid=7256 comm="syz.4.341" path="socket:[13511]" dev="sockfs" ino=13511 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.706943][ T7288] fuse: Unknown parameter '0x00000000000000250x0000000000000004' [ 167.733391][ T30] audit: type=1400 audit(1770666719.018:355): avc: denied { create } for pid=7287 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.851191][ T1593] usb 5-1: USB disconnect, device number 10 [ 168.160415][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 168.170454][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 168.446055][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 168.498808][ T7312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.356'. [ 168.508171][ T7312] netlink: 'syz.1.356': attribute type 7 has an invalid length. [ 168.526695][ T7312] netlink: 'syz.1.356': attribute type 8 has an invalid length. [ 168.544328][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 168.611536][ T24] usb 3-1: config 4 has an invalid interface number: 58 but max is 0 [ 168.619784][ T24] usb 3-1: config 4 has no interface number 0 [ 168.707021][ T24] usb 3-1: config 4 interface 58 has no altsetting 0 [ 168.783172][ T7316] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.193206][ T24] usb 3-1: New USB device found, idVendor=2c4e, idProduct=0107, bcdDevice=e2.1f [ 169.203359][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.220057][ T24] usb 3-1: Product: syz [ 169.224644][ T24] usb 3-1: Manufacturer: syz [ 169.229307][ T24] usb 3-1: SerialNumber: syz [ 169.495734][ T30] audit: type=1400 audit(1770666720.698:356): avc: denied { watch watch_reads } for pid=7318 comm="syz.4.357" path="/68" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 169.529433][ T7319] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.357'. [ 169.557585][ T30] audit: type=1400 audit(1770666720.838:357): avc: denied { setopt } for pid=7318 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.620433][ T7326] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 169.655913][ T30] audit: type=1400 audit(1770666720.968:358): avc: denied { append } for pid=7320 comm="syz.3.358" name="frontend0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.744426][ T30] audit: type=1400 audit(1770666720.968:359): avc: denied { execute } for pid=7320 comm="syz.3.358" path="/74/cpuacct.usage_percpu" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.091752][ T7338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.362'. [ 170.120138][ T7338] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 170.504584][ T30] audit: type=1400 audit(1770666721.788:360): avc: denied { setopt } for pid=7339 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 170.945385][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 170.954723][ T30] audit: type=1400 audit(1770666722.258:361): avc: denied { nlmsg_read } for pid=7349 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.125068][ T24] usb 3-1: USB disconnect, device number 11 [ 171.710426][ T1593] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 171.910663][ T30] audit: type=1400 audit(1770666723.218:362): avc: denied { append } for pid=7361 comm="syz.4.372" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.961515][ T1593] usb 4-1: Using ep0 maxpacket: 8 [ 171.967946][ T1593] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 171.978142][ T1593] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.990181][ T1593] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.020215][ T30] audit: type=1400 audit(1770666723.228:363): avc: denied { map } for pid=7361 comm="syz.4.372" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.230072][ T1593] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.241919][ T1593] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.275200][ T1593] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.300031][ T1593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.385136][ T1593] usbtmc 4-1:16.0: bulk endpoints not found [ 173.543217][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 173.790379][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 173.802128][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 173.811292][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.819249][ T10] usb 2-1: Product: syz [ 174.360404][ T24] usb 4-1: USB disconnect, device number 11 [ 174.398274][ T10] usb 2-1: Manufacturer: syz [ 174.434201][ T10] usb 2-1: SerialNumber: syz [ 174.472290][ T10] usb 2-1: config 0 descriptor?? [ 174.793457][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 175.170523][ T10] gspca_se401: Bayer format not supported! [ 175.235394][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'. [ 175.471134][ T30] audit: type=1400 audit(1770666726.788:364): avc: denied { bind } for pid=7414 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.472395][ T7416] tipc: Failed to remove unknown binding: 66,0,0/0:705188239/705188240 [ 175.524288][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 175.615220][ T7413] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 175.633702][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 175.634222][ T7418] tipc: Failed to remove unknown binding: 66,0,0/0:705188239/705188240 [ 175.890013][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 175.925846][ T10] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 175.956339][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.975352][ T10] usb 1-1: Product: syz [ 175.989999][ T10] usb 1-1: Manufacturer: syz [ 175.997903][ T10] usb 1-1: SerialNumber: syz [ 176.012083][ T10] usb 1-1: config 0 descriptor?? [ 176.117922][ T1593] usb 2-1: USB disconnect, device number 11 [ 176.300003][ T30] audit: type=1400 audit(1770666727.608:365): avc: denied { bind } for pid=7427 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.419047][ T30] audit: type=1400 audit(1770666727.638:366): avc: denied { write } for pid=7427 comm="syz.3.386" path="socket:[14436]" dev="sockfs" ino=14436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.451514][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 176.469309][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.491584][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 176.608578][ T10] usb 1-1: media controller created [ 176.644515][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.656032][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.807804][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.927793][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 177.615585][ T7445] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 177.627864][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 177.630273][ T7443] Invalid source name [ 177.639795][ T7443] UBIFS error (pid: 7443): cannot open "/dev/sg0", error -22 [ 177.640755][ T30] audit: type=1400 audit(1770666728.948:367): avc: denied { mounton } for pid=7432 comm="syz.2.387" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 177.720524][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 177.734666][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 177.860084][ T5916] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 177.870986][ T7451] ------------[ cut here ]------------ [ 177.876573][ T7451] usb 1-1: BOGUS control dir, pipe 80000980 doesn't match bRequestType c0 [ 177.885167][ T7451] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.2.387/7451 [ 177.895392][ T7451] Modules linked in: [ 177.899393][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: syz.2.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.910309][ T7451] Tainted: [L]=SOFTLOCKUP [ 177.914964][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 177.925098][ T7451] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 177.930865][ T7451] Code: d2 74 5d 48 89 54 24 40 e8 ef d2 c8 fa 4c 89 ef e8 e7 f8 df fe 48 89 c6 48 8d 3d cd ad 85 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 c3 d2 c8 fa 89 ee bf ff 00 00 00 [ 177.951920][ T7451] RSP: 0018:ffffc900055ef680 EFLAGS: 00010283 [ 177.958037][ T7451] RAX: ffffffff8c5f4d00 RBX: ffff88802aedc400 RCX: 0000000080000980 [ 177.966283][ T7451] RDX: ffff888055444720 RSI: ffffffff8c5f4d00 RDI: ffffffff90c3da30 [ 177.974573][ T7451] RBP: ffff888029ec7058 R08: 00000000000000c0 R09: 0000000000000000 [ 177.982643][ T7451] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801fed2500 [ 177.990732][ T7451] R13: ffff888029ec70b0 R14: 0000000080000980 R15: 00000000000000c0 [ 177.998715][ T7451] FS: 00007f975c0c86c0(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 178.007719][ T7451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.014398][ T7451] CR2: 0000200000307030 CR3: 000000004c436000 CR4: 00000000003526f0 [ 178.022515][ T7451] Call Trace: [ 178.025818][ T7451] [ 178.028767][ T7451] ? __init_swait_queue_head+0xca/0x150 [ 178.034409][ T7451] usb_start_wait_urb+0x106/0x4c0 [ 178.039466][ T7451] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 178.046392][ T7451] ? __asan_memset+0x23/0x50 [ 178.051100][ T7451] usb_control_msg+0x326/0x4a0 [ 178.055894][ T7451] ? __pfx_usb_control_msg+0x10/0x10 [ 178.061254][ T7451] dtv5100_i2c_msg+0x1be/0x340 [ 178.066062][ T7451] dtv5100_i2c_xfer+0x131/0x3d0 [ 178.070004][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 178.070959][ T7451] ? kvm_sched_clock_read+0x11/0x20 [ 178.077378][ T5916] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 178.081132][ T7451] ? sched_clock+0x38/0x60 [ 178.081161][ T7451] __i2c_transfer+0x5e1/0x1610 [ 178.098483][ T7451] ? __pfx___i2c_transfer+0x10/0x10 [ 178.103747][ T7451] ? __schedule+0x2f0b/0x5fa0 [ 178.108439][ T7451] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 178.114143][ T7451] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 178.120258][ T7451] ? __bpf_trace_drv_configure_filter+0x170/0x180 [ 178.126700][ T7451] __i2c_smbus_xfer+0x5b7/0xf10 [ 178.131646][ T7451] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 178.137039][ T7451] ? rt_mutex_slowtrylock+0x93/0x100 [ 178.142416][ T7451] i2c_smbus_xfer+0x185/0x3c0 [ 178.148417][ T7451] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 178.153519][ T7451] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 178.159077][ T7451] ? __might_fault+0xc5/0x140 [ 178.163809][ T7451] ? __might_fault+0xc5/0x140 [ 178.168519][ T7451] i2cdev_ioctl+0x3cf/0x830 [ 178.173076][ T7451] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 178.178132][ T7451] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 178.183230][ T7451] __x64_sys_ioctl+0x18e/0x210 [ 178.188005][ T7451] do_syscall_64+0xc9/0xf80 [ 178.192578][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.198487][ T7451] RIP: 0033:0x7f975b19af79 [ 178.202962][ T7451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.222625][ T7451] RSP: 002b:00007f975c0c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.231124][ T7451] RAX: ffffffffffffffda RBX: 00007f975b416180 RCX: 00007f975b19af79 [ 178.239101][ T7451] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000008 [ 178.247156][ T7451] RBP: 00007f975b2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 178.255905][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.264622][ T7451] R13: 00007f975b416218 R14: 00007f975b416180 R15: 00007ffc6b779268 [ 178.272715][ T7451] [ 178.275762][ T7451] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.283031][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: syz.2.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.293765][ T7451] Tainted: [L]=SOFTLOCKUP [ 178.298059][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 178.308089][ T7451] Call Trace: [ 178.311359][ T7451] [ 178.314270][ T7451] dump_stack_lvl+0x100/0x190 [ 178.318937][ T7451] vpanic+0x20d/0x630 [ 178.322912][ T7451] panic+0xd1/0xd1 [ 178.326612][ T7451] ? __pfx_panic+0x10/0x10 [ 178.331009][ T7451] check_panic_on_warn.cold+0x19/0x34 [ 178.336366][ T7451] ? usb_submit_urb+0x1573/0x1910 [ 178.341363][ T7451] __warn.cold+0x191/0x2f8 [ 178.345753][ T7451] __report_bug+0x296/0x3d0 [ 178.350228][ T7451] ? usb_submit_urb+0x1573/0x1910 [ 178.355229][ T7451] ? __pfx___report_bug+0x10/0x10 [ 178.360225][ T7451] ? irqentry_exit+0x180/0x670 [ 178.364966][ T7451] ? lockdep_hardirqs_on+0x78/0x100 [ 178.370150][ T7451] ? usb_submit_urb+0x157e/0x1910 [ 178.375162][ T7451] report_bug_entry+0xe1/0x290 [ 178.379901][ T7451] ? usb_submit_urb+0x157e/0x1910 [ 178.384911][ T7451] handle_bug+0x1c9/0x2a0 [ 178.389218][ T7451] exc_invalid_op+0x17/0x50 [ 178.393698][ T7451] asm_exc_invalid_op+0x1a/0x20 [ 178.398518][ T7451] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 178.404121][ T7451] Code: d2 74 5d 48 89 54 24 40 e8 ef d2 c8 fa 4c 89 ef e8 e7 f8 df fe 48 89 c6 48 8d 3d cd ad 85 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 c3 d2 c8 fa 89 ee bf ff 00 00 00 [ 178.423698][ T7451] RSP: 0018:ffffc900055ef680 EFLAGS: 00010283 [ 178.429735][ T7451] RAX: ffffffff8c5f4d00 RBX: ffff88802aedc400 RCX: 0000000080000980 [ 178.437680][ T7451] RDX: ffff888055444720 RSI: ffffffff8c5f4d00 RDI: ffffffff90c3da30 [ 178.445623][ T7451] RBP: ffff888029ec7058 R08: 00000000000000c0 R09: 0000000000000000 [ 178.453577][ T7451] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801fed2500 [ 178.461541][ T7451] R13: ffff888029ec70b0 R14: 0000000080000980 R15: 00000000000000c0 [ 178.469501][ T7451] ? __init_swait_queue_head+0xca/0x150 [ 178.475053][ T7451] usb_start_wait_urb+0x106/0x4c0 [ 178.480056][ T7451] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 178.485576][ T7451] ? __asan_memset+0x23/0x50 [ 178.490142][ T7451] usb_control_msg+0x326/0x4a0 [ 178.494881][ T7451] ? __pfx_usb_control_msg+0x10/0x10 [ 178.500144][ T7451] dtv5100_i2c_msg+0x1be/0x340 [ 178.504890][ T7451] dtv5100_i2c_xfer+0x131/0x3d0 [ 178.509718][ T7451] ? kvm_sched_clock_read+0x11/0x20 [ 178.514887][ T7451] ? sched_clock+0x38/0x60 [ 178.519281][ T7451] __i2c_transfer+0x5e1/0x1610 [ 178.524034][ T7451] ? __pfx___i2c_transfer+0x10/0x10 [ 178.529214][ T7451] ? __schedule+0x2f0b/0x5fa0 [ 178.533865][ T7451] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 178.539393][ T7451] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 178.545366][ T7451] ? __bpf_trace_drv_configure_filter+0x170/0x180 [ 178.551758][ T7451] __i2c_smbus_xfer+0x5b7/0xf10 [ 178.556591][ T7451] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 178.561941][ T7451] ? rt_mutex_slowtrylock+0x93/0x100 [ 178.567204][ T7451] i2c_smbus_xfer+0x185/0x3c0 [ 178.571866][ T7451] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 178.576877][ T7451] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 178.582394][ T7451] ? __might_fault+0xc5/0x140 [ 178.587045][ T7451] ? __might_fault+0xc5/0x140 [ 178.591701][ T7451] i2cdev_ioctl+0x3cf/0x830 [ 178.596179][ T7451] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 178.601179][ T7451] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 178.606177][ T7451] __x64_sys_ioctl+0x18e/0x210 [ 178.610914][ T7451] do_syscall_64+0xc9/0xf80 [ 178.615391][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.621256][ T7451] RIP: 0033:0x7f975b19af79 [ 178.625648][ T7451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.645228][ T7451] RSP: 002b:00007f975c0c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.653612][ T7451] RAX: ffffffffffffffda RBX: 00007f975b416180 RCX: 00007f975b19af79 [ 178.661556][ T7451] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000008 [ 178.669499][ T7451] RBP: 00007f975b2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 178.677440][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.685386][ T7451] R13: 00007f975b416218 R14: 00007f975b416180 R15: 00007ffc6b779268 [ 178.693337][ T7451] [ 178.696590][ T7451] Kernel Offset: disabled [ 178.700884][ T7451] Rebooting in 86400 seconds..