last executing test programs: 11.374326639s ago: executing program 1 (id=525): socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f0000808cff00140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 10.770579837s ago: executing program 1 (id=527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x82, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0xffffffff, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff7, 0x2, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x1, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xbffffffd, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0xfffffffc, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0xfff, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0x1, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x4000, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x36, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc414, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x3550, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x13, 0x1, 0x0, 0x4, 0x3, {0x6, 0x2, 0x2, 0x3, 0x81, 0x9}, {0x4, 0x2, 0x6, 0x1, 0x7, 0x4}, 0x1, 0x6, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x2, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x1ff, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x2, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x0, 0x8006, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x6, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x2, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8, 0x2]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x1c00000000000000) 10.03185342s ago: executing program 1 (id=529): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000280)={0x0, 0xfd93, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r3, 0x301, 0x0, 0xfffffffe}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x78, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x12000, 0x200, 0xbb, 0x7f, 0x6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x40, 0x3, 0x6, 0xcc7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x200040d1}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x3c, 0x0, 0x801, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 9.819460078s ago: executing program 1 (id=532): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000000c0)=[{0x1, 0xd810, 0x0, 0x0}], 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="30fa5a43a932ca22c09fcd44be781a1563359cb7f7ab9025cf87976bf05621a20e970cb37b3d1c379eb2d3812ed256a0f91947e1a52f8a0a28d5cbc4689ce7d9fe1948f9b2ce7b2101c92ce41d5fda835e5ebfe6e62c65f05892db24e04d42685dbb154c6193517b1008173dc4d20b908815293f2c5fdf909ac277569f923f50fe8a57a6934febc128deb57e5f", 0x8d}, {&(0x7f0000000540)="2433a33545f5518dd43e109dfe8609d2f9798cd04d94fc6451864bc08c3b264a114a83c285aa655928eecb4b2ba4904cbf29f7bd1529315eb0164c914d0890dad61dba9bad675778dc01681b70c1319cf46dab1be0b55e67f8be58a17d362b", 0x5f}], 0x2, 0x0, 0x0, 0x4}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000640)="1861278a9b94a7bf052c3e98749bca3f55debf25915a4ae622f6147c204df9663fdbe538f182f4c1adc88d03fc5b823ef814b7a18c0683b56e51d9d60604b3cff2716b6b9a9fbfdfc9446f0590c026c18516b9f3ceb7011e2ad6a1272cb6e177f696cd090031bb24aefe8cc8615addf824a107a250831a2c3685e18580a70e06533e6586ec4c4007ee4aad144d2220e02b1d3a703f0b90e178777180fcc8f90217dd57c8cdfc8ec224ffc046ec380aa7056933a4d84d3c01463898d0d3a2edb43b5b11545513cc", 0xc7}, {&(0x7f0000000740)="663ae3d8e9f2f3c8970535512da863af2bc36c0dd24bca27e4dbc931d8f848a7b78e4c1260a2b39cd9a214cdb8a9e5c97138b75d4855a2123eac32d6ba2c7b0369d4f9ab8c9bd7f3d974af3d72baacbe41e7530afd9883f98992455a20ad4a401583eada51f621d75d5006255b4112d7e3b4344af06f363483a86fe0b1527b111171480b15ab7ef66f84f8ca9a1a23727739275160f406438fd30932ec9ed52281314cfb3e78e2e7edefab0fc9c7d82a3ba900ff0cb17a52735d434a9d620edcb56c8fa87ddacbbbda4c5fea668801a11828364feb4dc4487d15f49d6a4fc85ea4d670555bd427f82b9a302ab8a30f869211c1fc4021", 0xf6}], 0x2, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r3, r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xb8}}], 0x2, 0x4000) recvmmsg(r2, &(0x7f0000000180), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x208001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x50) r5 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000001c0), &(0x7f00000004c0)=@tcp=r5, 0x2}, 0x20) getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') listen(0xffffffffffffffff, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="fd1b97", 0x3}], 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8.874171901s ago: executing program 4 (id=535): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = getuid() quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000200)=@nullb, r2, &(0x7f0000000240)={0x10000, 0x201c}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x12, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r3, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) unshare(0x40000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) setsockopt$MRT_PIM(r3, 0x0, 0xcf, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) 8.421514608s ago: executing program 3 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731320800c0001000000000000e000000e"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8.10197021s ago: executing program 3 (id=538): r0 = socket(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = syz_genetlink_get_family_id$tipc2(0x0, r0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203030000000000000000f8485eaefaff0000000819df537bcca93b4a5b0e000100"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x1c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {0x7}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0xfffffffffffffeb5, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10004080) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f00000000c0)={0x8, 0x1, 0xffffffff}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, 0x0) futex(0x0, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$sg(0x0, 0x0, 0x8002) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x587343, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 6.432097893s ago: executing program 2 (id=543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000003}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000500000000007d01ff020000000000000000000000000001"], 0xfdef) 6.357158929s ago: executing program 0 (id=544): openat$comedi(0xffffffffffffff9c, 0x0, 0x20841, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000002f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @loopback, 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r2, 0x84, 0x14, &(0x7f0000000040)="0100000000000000", 0x8) 6.234305299s ago: executing program 3 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES8=r2], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='c *:* rw'], 0x9) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 6.031343484s ago: executing program 2 (id=546): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040200}}], 0x1, 0x4000000) 6.0219397s ago: executing program 0 (id=547): socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000020001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000000000000007000000000800009500000000000000811b0140b1fc5ef0d27d51f59a544e3c6a300a8572726394e0e03a4f7fe3647d637003a2d3c7ef8bdb07ba0bca65aeaa051efd615868c30fd983307cef6f566e8ddcf3ed2d2ef78b5273dbb5a8cea91b62d88814a5437782a1a8fc7a3b050000000000005b1479079e5bc4f9d209537b7798f7659f9a7889735689b9bde61c311f17a527500000000000ab3f87a81d75ecf509c32d7b49956d2813859eff2c817def00dfc3680ed0cb2d9ff59d288072ea560cd0f16d6e0a125c0e88d536c6b617b19f8b024ff69b2befef18398c76f61237949129ba1976"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x14, &(0x7f00000000c0)={0x20, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6a182, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000007c0)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x2080483) syz_emit_ethernet(0x53, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xa, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @local, @broadcast, {[@lsrr={0x83, 0xf, 0x4e, [@loopback, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0x8}]}}, '2'}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x129842, 0xfe2b713d19bde504) 5.960217729s ago: executing program 3 (id=548): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f9"], 0x30}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80012000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 5.617410654s ago: executing program 2 (id=549): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x7, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 5.611770611s ago: executing program 1 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@dyn}]}) r0 = socket(0xa, 0x3, 0x3a) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) eventfd(0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r5, 0x3, 0x1) getdents64(r5, 0x0, 0x0) 5.494952898s ago: executing program 4 (id=551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3a00, 0xffffdd86}}}}}}}, 0xfdef) 5.398073794s ago: executing program 0 (id=552): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000050002"], 0x58}}, 0x0) 5.361010212s ago: executing program 2 (id=553): syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0xd, 0x141341) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0xa, 0x3, 0x3a) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_setup(0x1b7a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.317746913s ago: executing program 3 (id=554): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) socket$inet_sctp(0x2, 0x1, 0x84) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22040000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.173570939s ago: executing program 0 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000002e00090027bd700005000000040000002900118031f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.50918629s ago: executing program 1 (id=556): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x39, 0x31, 0x33, 0x38, 0x66, 0x36, 0x5c, 0x33, 0x30, 0x61, 0x65, 0x61]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) 4.332107964s ago: executing program 0 (id=557): syz_socket_connect_nvme_tcp() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000018000100000000000000000002000000000000090000000006001e0005000000280016802400010002"], 0x4c}}, 0x0) 3.718032335s ago: executing program 3 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)={0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000004c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x3, 0x1, 0x4000, 0xfffffffffffffffe, 0x0, 0x0, 0x2]}) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) fsmount(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000300)="3e03bf40e733ef93012f997edf26de", 0xf}, {&(0x7f0000000a40)="19a58c380094d99c17c0d2e2d01f00cee989b9687810301d82c9c946831a0c1bb139974c7a984eb6ae1ec1428e5c1636064dcca2e6f8f9fc4dec9fb99ae8cda4f963437d52973f887885fefd0598a1a6a8e9b8c14046ec0853fb7b249f3f0f7fa0e5d1db73f4598d5208a08276b534e0febdb0928dd5ea88089b33e8a1a7d6a457bfaff289398076d79ff4d9ce50011fc5b68e7a9b36b5e2f523038cc5786e7a5e4003a1e564bab00146771c9c6f663854bd6d52f492d3a0a02eea3542a896cdfd291f178f03", 0xc6}, {&(0x7f0000000b40)="2c65ea07468a286bb78f4de506bd68f8eb7687c4b459d8cf887f8550ebc61fb4759d2d451d08e9a67b2fc3778430f7a602c79f4bafac2b5b0d090e42132157348d06620befbe2ff2facbdbab2a7cca247675a41d1bdb9613ab3f9bed3ace9c1bc77a9cd78c10d49af0dc567191215933ffd7c58b60ec2e27c68a463eb5197b675704372bb3d609c6d286be021f2d889949e77d419510cf87564501f3dba2cd1a12626281b03dc5a6887c14a2e9e0a205fbbe019fe466643b42a03dfe64f2b7ee84652c38d5c838c9b617be96097debfd12d6", 0xd2}, {&(0x7f0000000340)="9f68a2", 0x3}, {&(0x7f0000000380)="2b6a8fb998c89d8516f7ce75cb8d61c805d2d2c7929c9220e1f864421921a80d7e9849c10eaeba40ee2bfd8cc08b3387706c5aa5b009556b2ec2286ff97839399c796e5c5eb5dc8aa818b4ff4a981de503df541eb5f298029cd1", 0x5a}, {&(0x7f0000000c40)="11c8c3ebd6b7e124338a2b8428f37a13e4c121039d4ca4e0e20d6d3fd2130262e5ef502bcc59da6b235cdb98214ffae03b7e9862bb3b8f6288bc99a4b8173a7f2677545247f24d1c244c0ed5ca64ac6e0ef979d93fe4b2f9467de35bbc7aefaf520a8752dbbb45496b2cb79c4264fa5940bfbe1224f92597e458e57d8ecceefe3ed4f7adf19f8ec1c63d4c5eb61b6cb207e48636f7", 0x95}, {&(0x7f0000000d00)="8e3d0015067ac29c0d346955d692f571fb10dbf753a948525a95a4a11872e3b414ed3cc525766e5b9d69d5bd5f6024d0331e09d616d86300c9b436e36820525c41975be7c4cf554c707dbcc0f1e33144a5e224bc30e2ed2587f2d470525c637f6242a1021793123f4e3a034abd8f56652d0e3471030aeee00363bd55be77580f0e68cdd41bf6f0a332fb502495c21ed046cd15b4c9fa7eb9f233d457e93551c6e1ab20", 0xa3}], 0x7, 0x0, 0x0, 0x7400}, 0x40094) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r11, &(0x7f0000000100)=@nl=@unspec, 0x80) 3.656788796s ago: executing program 0 (id=559): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x80) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9c5c2000) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='limits\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') read$FUSE(r2, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x401}}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue0\x00', 0x1ffffc}) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xb, 0x0, {{0x3, 0x2, 0x7ffc, 0x2, 0x6, 0x51, {0x800000001, 0x8040, 0x20ff, 0x9, 0x89, 0x7fffffff, 0x5, 0x80000041, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1a}}}, 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) getsockopt(r4, 0xe5, 0x6, &(0x7f0000000300)=""/115, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYRES64, @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0) 3.568316887s ago: executing program 2 (id=560): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) epoll_create1(0x80000) (async) r1 = epoll_create1(0x80000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000000c0)={0xf, 0xffffc410, {0x51, 0x6ef0, 0x7, {0xfa6b}, {0x8af3, 0xf1}, @cond=[{0x45, 0x9, 0x5aa8, 0x5, 0x80, 0xd}, {0x5, 0x3ff, 0x5, 0x2, 0x3, 0xb}]}, {0x56, 0xb, 0xa69, {0x5, 0x7ff}, {0x5, 0x3e}, @ramp={0x0, 0x1, {0x3, 0x8000, 0x1, 0x9e}}}}) unshare(0x28000600) (async) unshare(0x28000600) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000080)={0x2, @raw_data="05e482d1e822d9b0ccb37ea397d2ae54807734fc362f106b4fd6b72d5dc842a26966d9dfcd5c11c4c16a007901d9fe3d35ee966cf9198f74892b3fa3802aa6c9da9d29c879702601457dede4204a71fe09478193cd80fe67a04ed40054d4f1622127b9dfb5463c6a330db3fcdbe882e27936a7392b81bb7f84efcbc5524da35a7208dff0d1f3877f0f0f6c83d588ef678894f164cd70d8bbc2513e99bb9a449f6c415faf2001795abb880e51071b1326b9e43d571124366422745932d5335f532e9f6def8474fe2d"}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r4}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffd2a, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b, 0x3}}}}]}]}, 0x68}}, 0x24048040) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) (async) sendmsg$key(r9, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x60002016}) unshare(0x40000) (async) unshare(0x40000) socket(0x10, 0x80002, 0x0) (async) r10 = socket(0x10, 0x80002, 0x0) getsockopt$sock_buf(r10, 0x1, 0x37, 0x0, &(0x7f0000000280)) fcntl$setpipe(r0, 0x407, 0x10005) (async) fcntl$setpipe(r0, 0x407, 0x10005) 3.49487528s ago: executing program 4 (id=561): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 2.273687053s ago: executing program 2 (id=562): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x6, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[], 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index=0x5, 0x9fc, 0x101, 0xe, 0x0, 0x0, {0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2, 0x0, 0x0, 0x300}, 0x0) 2.237219329s ago: executing program 4 (id=563): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) io_destroy(0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 1.30524123s ago: executing program 4 (id=564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0xfffffff5, 0x0, 0x4000850}, 0x0) 0s ago: executing program 4 (id=565): gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) timer_create(0x3, &(0x7f0000000080)={0x0, 0x200021, 0x1, @thr={&(0x7f0000000400)="75188367e404877b5438841c3ff482732c9f4841deee1739b3f95727a597fd9326531dadbe5b6720f688a84d565c621a626343495dc772dabfd81c8401eff6b136005ea12da49bf6e02577d11f495c28c1bebce9e87b6439bada51e679af7184a75f2f5792604d51e2cb4eaa377300fa386423263972982fb4e0626196c30c1839777f7e553248eca0", &(0x7f00000004c0)="c5ed3af370e845cf223b4f5770dd9c2b6c37cff29b9b3e534ff07c6eda8d1cee0e97612020050576f3ee63b66e82a9fc0385657442a3b6d229e621adf1b87952bb40f0752847f2bc1fb638534287ab07d21cdaf53963ab575534cddf1ace18af807d287166"}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2000) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x1, 0xff, 0xa7, 0x10, 0x1199, 0x9009, 0xdda5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2a, 0x10, 0x0, [{{0x9, 0x4, 0xb5, 0x6, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x4, 0x100000000, 0x80005, 0x0, 0x0, 0x1, '&\x00', 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pimreg0\x00', 0x0}) r5 = geteuid() r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) lseek(r6, 0x0, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000002000000325bd7000fddbdf25fff100effe020000000000000066ff34bbee973dbd7f8d8e247ce6ffffff0000000000000000000100004e2400054e2000060200", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="08001d00020000000800180081000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) ioctl$CEC_DQEVENT(r2, 0xc0506107, &(0x7f00000000c0)={0x0, 0x0, 0x0, @lost_msgs}) kernel console output (not intermixed with test programs): e to linux-mm@kvack.org if you depend on this functionality. [ 70.217125][ T30] audit: type=1400 audit(1765486463.378:95): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 70.253292][ T30] audit: type=1400 audit(1765486463.378:96): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 70.259198][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.317128][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.325886][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.353391][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.365265][ T722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.390664][ T722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.425823][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.588950][ T3976] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.617582][ T3976] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.626946][ T722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.639479][ T722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.669200][ T3976] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.762533][ T5934] bond0: (slave gretap0): Opening slave failed [ 70.901954][ T5821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.998318][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.015056][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.053416][ T3976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.064951][ T3976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.111611][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.128150][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.144585][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 71.154520][ T5825] Bluetooth: hci3: command tx timeout [ 71.159506][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.165092][ T5821] usb 5-1: too many configurations: 49, using maximum allowed: 8 [ 71.179330][ T5821] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 71.191350][ T5821] usb 5-1: can't read configurations, error -61 [ 71.205717][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.234061][ T5136] Bluetooth: hci2: command tx timeout [ 71.240114][ T5825] Bluetooth: hci0: command tx timeout [ 71.313841][ T5136] Bluetooth: hci4: command tx timeout [ 71.319335][ T5825] Bluetooth: hci1: command tx timeout [ 71.325139][ T5821] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.438952][ T5948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 71.472979][ T5947] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 71.499295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.503711][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 71.525351][ T5821] usb 5-1: too many configurations: 49, using maximum allowed: 8 [ 71.634648][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'. [ 71.698914][ T5950] loop9: detected capacity change from 0 to 7 [ 71.729877][ T5950] Dev loop9: unable to read RDB block 7 [ 71.736575][ T5950] loop9: unable to read partition table [ 71.743130][ T5950] loop9: partition table beyond EOD, truncated [ 71.749680][ T5950] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 71.859591][ T5821] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 71.867767][ T5821] usb 5-1: can't read configurations, error -61 [ 71.891167][ T5821] usb usb5-port1: attempt power cycle [ 71.911682][ T5951] GUP no longer grows the stack in syz.1.2 (5951): 200000005000-200000008000 (200000004000) [ 72.131447][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 72.131478][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.131486][ T5951] Call Trace: [ 72.131490][ T5951] [ 72.131495][ T5951] dump_stack_lvl+0x16c/0x1f0 [ 72.131512][ T5951] gup_vma_lookup+0x1d2/0x220 [ 72.131527][ T5951] fixup_user_fault+0x26e/0x540 [ 72.131542][ T5951] ? futex_lock_pi+0x687/0x7c0 [ 72.131554][ T5951] fault_in_user_writeable+0x70/0xe0 [ 72.131571][ T5951] futex_lock_pi+0x690/0x7c0 [ 72.131583][ T5951] ? __pfx_futex_lock_pi+0x10/0x10 [ 72.131592][ T5951] ? __futex_wait+0x24b/0x2f0 [ 72.131614][ T5951] ? futex_private_hash_put+0x160/0x1b0 [ 72.131630][ T5951] ? __pfx_futex_wake_mark+0x10/0x10 [ 72.131648][ T5951] do_futex+0x11a/0x350 [ 72.131663][ T5951] ? __pfx_do_futex+0x10/0x10 [ 72.131676][ T5951] ? __vm_munmap+0x1d2/0x380 [ 72.131689][ T5951] __x64_sys_futex+0x1e0/0x4c0 [ 72.131705][ T5951] ? __pfx___x64_sys_futex+0x10/0x10 [ 72.131718][ T5951] ? xfd_validate_state+0x61/0x180 [ 72.131728][ T5951] ? __sys_setsockopt+0x1c0/0x230 [ 72.131747][ T5951] do_syscall_64+0xcd/0xf80 [ 72.131758][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.131769][ T5951] RIP: 0033:0x7ffac018f749 [ 72.131778][ T5951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.131788][ T5951] RSP: 002b:00007ffabdbf2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 72.131798][ T5951] RAX: ffffffffffffffda RBX: 00007ffac03e6360 RCX: 00007ffac018f749 [ 72.131804][ T5951] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 72.131810][ T5951] RBP: 00007ffac0213f91 R08: 0000000000000000 R09: 0000000000000000 [ 72.131816][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.131821][ T5951] R13: 00007ffac03e63f8 R14: 00007ffac03e6360 R15: 00007ffe9cf807f8 [ 72.131834][ T5951] [ 72.331444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.340094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.423747][ T5821] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.456805][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 72.463606][ T5821] usb 5-1: too many configurations: 49, using maximum allowed: 8 [ 72.477461][ T5821] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 72.485193][ T5821] usb 5-1: can't read configurations, error -61 [ 72.653938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.662727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.703712][ T5821] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.734161][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 72.841270][ T5821] usb 5-1: too many configurations: 49, using maximum allowed: 8 [ 72.932628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.941636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 72.955008][ T5821] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 72.980621][ T5821] usb 5-1: can't read configurations, error -61 [ 73.015013][ T5821] usb usb5-port1: unable to enumerate USB device [ 73.035657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.079686][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.113831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.122459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.323734][ T5825] Bluetooth: hci3: command tx timeout [ 73.343652][ T5825] Bluetooth: hci0: command tx timeout [ 73.353083][ T5825] Bluetooth: hci2: command tx timeout [ 73.394041][ T5820] Bluetooth: hci4: command tx timeout [ 73.401872][ T5136] Bluetooth: hci1: command tx timeout [ 73.523678][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 73.534843][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.582093][ T24] usb 1-1: config 0 has no interface number 0 [ 73.605332][ T24] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 73.658626][ T5820] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 73.752460][ T24] usb 1-1: config 0 interface 1 has no altsetting 0 [ 73.770210][ T24] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 73.779974][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.789521][ T24] usb 1-1: Product: syz [ 73.841266][ T24] usb 1-1: Manufacturer: syz [ 73.846387][ T24] usb 1-1: SerialNumber: syz [ 74.057140][ T24] usb 1-1: config 0 descriptor?? [ 74.821466][ T89] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.958959][ T5992] lo speed is unknown, defaulting to 1000 [ 74.965210][ T5992] lo speed is unknown, defaulting to 1000 [ 74.979503][ T5992] lo speed is unknown, defaulting to 1000 [ 75.021344][ T5992] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.074564][ T5992] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 75.263021][ T5992] lo speed is unknown, defaulting to 1000 [ 75.269748][ T5992] lo speed is unknown, defaulting to 1000 [ 75.276419][ T5992] lo speed is unknown, defaulting to 1000 [ 75.282945][ T5992] lo speed is unknown, defaulting to 1000 [ 75.289953][ T5992] lo speed is unknown, defaulting to 1000 [ 75.315301][ T89] usb 3-1: Using ep0 maxpacket: 8 [ 75.322555][ T89] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 75.359299][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 75.359317][ T30] audit: type=1400 audit(1765486468.368:152): avc: denied { write } for pid=5989 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.406380][ T89] usb 3-1: config 0 has no interface number 0 [ 75.444704][ T89] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 75.523642][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.531856][ T30] audit: type=1400 audit(1765486468.618:153): avc: denied { read write } for pid=5989 comm="syz.1.15" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.556585][ T89] usb 3-1: Product: syz [ 75.653617][ T89] usb 3-1: Manufacturer: syz [ 75.683906][ T89] usb 3-1: SerialNumber: syz [ 75.725652][ T89] usb 3-1: config 0 descriptor?? [ 75.762303][ T89] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 75.774337][ T30] audit: type=1400 audit(1765486468.618:154): avc: denied { open } for pid=5989 comm="syz.1.15" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.815029][ T89] pctv452e: pctv452e_power_ctrl: 1 [ 75.815029][ T89] [ 75.827196][ T24] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 75.833294][ T89] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 75.833294][ T89] [ 75.857154][ T24] cx231xx 1-1:0.1: Not found matching IAD interface [ 75.863629][ T30] audit: type=1400 audit(1765486468.748:155): avc: denied { map } for pid=5969 comm="syz.3.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.896818][ T89] dvb-usb: bulk message failed: -22 (5/0) [ 75.917081][ T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.942741][ T89] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 75.944373][ T24] usb 1-1: USB disconnect, device number 2 [ 75.964443][ T30] audit: type=1400 audit(1765486468.748:156): avc: denied { read write } for pid=5969 comm="syz.3.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.968203][ T5999] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 76.000397][ T89] usb 3-1: media controller created [ 76.023336][ T89] dvb-usb: bulk message failed: -22 (8/0) [ 76.039402][ T89] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 76.058895][ T30] audit: type=1400 audit(1765486469.348:157): avc: denied { append } for pid=5985 comm="syz.2.14" name="i2c-1" dev="devtmpfs" ino=2797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.093305][ T89] dvb-usb: MAC address reading failed. [ 76.141405][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.315739][ T89] DVB: Unable to find symbol stb0899_attach() [ 76.337998][ T89] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 76.453624][ T5881] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.468996][ T89] rc_core: IR keymap rc-tt-1500 not found [ 76.484850][ T89] Registered IR keymap rc-empty [ 76.497646][ T89] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 76.537103][ T89] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5 [ 76.541334][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.566199][ T5994] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.587118][ T89] dvb-usb: schedule remote query interval to 100 msecs. [ 76.596279][ T89] pctv452e: pctv452e_power_ctrl: 0 [ 76.596279][ T89] [ 76.604597][ T89] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 76.634569][ T89] usb 3-1: USB disconnect, device number 2 [ 76.638543][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.641294][ T5881] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 76.674913][ T5881] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 76.704389][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.733874][ T5994] usb 1-1: Using ep0 maxpacket: 16 [ 76.739489][ T5881] usb 5-1: Product: syz [ 76.763887][ T5994] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.794856][ T5881] usb 5-1: Manufacturer: syz [ 76.807487][ T5881] usb 5-1: SerialNumber: syz [ 76.813211][ T5994] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.826343][ T89] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 76.840524][ T5881] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 76.849995][ T5994] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 76.865506][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.948860][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 76.978283][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 77.010634][ T5994] usb 1-1: config 0 descriptor?? [ 78.303068][ T6028] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 78.314333][ T6028] team0: Device dummy0 is up. Set it down before adding it as a team port [ 78.333687][ T6028] Zero length message leads to an empty skb [ 78.348339][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.363671][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.585480][ T5881] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 78.599570][ T89] usb 1-1: USB disconnect, device number 3 [ 78.720612][ T30] audit: type=1400 audit(1765486472.128:158): avc: denied { ioctl } for pid=6032 comm="syz.1.26" path="socket:[8154]" dev="sockfs" ino=8154 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.750951][ T5881] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 78.920323][ T5881] usb 5-1: media controller created [ 78.965531][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.010660][ T6039] kAFS: No cell specified [ 79.257136][ T30] audit: type=1400 audit(1765486472.648:159): avc: denied { bind } for pid=6041 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.718138][ T30] audit: type=1400 audit(1765486473.088:160): avc: denied { create } for pid=6038 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.765446][ T5881] usb 5-1: USB disconnect, device number 6 [ 79.817033][ T30] audit: type=1400 audit(1765486473.148:161): avc: denied { listen } for pid=6038 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.745098][ T30] audit: type=1400 audit(1765486474.128:162): avc: denied { bind } for pid=6052 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.884380][ T30] audit: type=1400 audit(1765486474.158:163): avc: denied { write } for pid=6058 comm="syz.2.33" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.064755][ T30] audit: type=1400 audit(1765486474.158:164): avc: denied { open } for pid=6058 comm="syz.2.33" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.128673][ T30] audit: type=1400 audit(1765486474.538:165): avc: denied { ioctl } for pid=6062 comm="syz.2.35" path="socket:[8191]" dev="sockfs" ino=8191 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.155833][ T30] audit: type=1400 audit(1765486474.548:166): avc: denied { write } for pid=6062 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.537756][ T43] cfg80211: failed to load regulatory.db [ 81.571034][ T6064] team0: Device xfrm1 is of different type [ 82.235751][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.440330][ T6074] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 82.728594][ T9] usb 1-1: device descriptor read/64, error -71 [ 82.753777][ T30] audit: type=1400 audit(1765486475.868:167): avc: denied { read write } for pid=6070 comm="syz.4.29" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.779097][ T30] audit: type=1400 audit(1765486475.868:168): avc: denied { open } for pid=6070 comm="syz.4.29" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.821007][ T30] audit: type=1400 audit(1765486475.868:169): avc: denied { ioctl } for pid=6070 comm="syz.4.29" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.003745][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.091870][ T30] audit: type=1400 audit(1765486476.498:170): avc: denied { getopt } for pid=6075 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.207105][ T9] usb 1-1: device descriptor read/64, error -71 [ 83.425160][ T6082] netlink: 60 bytes leftover after parsing attributes in process `syz.4.38'. [ 83.968247][ T9] usb usb1-port1: attempt power cycle [ 84.051509][ T30] audit: type=1400 audit(1765486477.458:171): avc: denied { read } for pid=6088 comm="syz.4.41" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.076385][ T6089] binder: 6088:6089 ioctl c0306201 0 returned -14 [ 84.753711][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.774026][ T9] usb 1-1: device descriptor read/8, error -71 [ 84.808529][ T6102] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.013636][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 85.083635][ T6105] libceph: resolve '400' (ret=-3): failed [ 85.182239][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 85.235706][ T9] usb 1-1: device not accepting address 7, error -71 [ 85.258294][ T9] usb usb1-port1: unable to enumerate USB device [ 85.350996][ T6117] netlink: 'syz.3.50': attribute type 10 has an invalid length. [ 85.436053][ T6122] Cannot find set identified by id 0 to match [ 85.574338][ T6117] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.804165][ T6116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.940834][ T6125] capability: warning: `syz.1.52' uses deprecated v2 capabilities in a way that may be insecure [ 86.127958][ T6114] delete_channel: no stack [ 86.191358][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 86.191371][ T30] audit: type=1400 audit(1765486479.598:192): avc: denied { mounton } for pid=6124 comm="syz.1.52" path="/13/file0" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.896260][ T30] audit: type=1400 audit(1765486480.308:193): avc: denied { write } for pid=6130 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.979737][ T30] audit: type=1400 audit(1765486480.328:194): avc: denied { nlmsg_write } for pid=6130 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.024433][ T30] audit: type=1400 audit(1765486480.438:195): avc: denied { read write } for pid=6135 comm="syz.3.56" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.048844][ T30] audit: type=1400 audit(1765486480.458:196): avc: denied { open } for pid=6135 comm="syz.3.56" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.533675][ T30] audit: type=1400 audit(1765486480.548:197): avc: denied { connect } for pid=6133 comm="syz.2.55" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.604493][ T30] audit: type=1400 audit(1765486480.558:198): avc: denied { write } for pid=6133 comm="syz.2.55" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.688511][ T30] audit: type=1400 audit(1765486480.938:199): avc: denied { ioctl } for pid=6135 comm="syz.3.56" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.800084][ T6147] openvswitch: netlink: Actions may not be safe on all matching packets [ 87.809498][ T30] audit: type=1400 audit(1765486481.218:200): avc: denied { read write } for pid=6146 comm="syz.0.59" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.817320][ T6147] vlan2: entered promiscuous mode [ 87.874462][ T30] audit: type=1400 audit(1765486481.218:201): avc: denied { open } for pid=6146 comm="syz.0.59" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.924543][ T6147] vlan2: entered allmulticast mode [ 87.933350][ T6147] hsr_slave_1: entered allmulticast mode [ 87.995415][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 88.333621][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.417642][ T6167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.439771][ T6169] netlink: 'syz.4.66': attribute type 10 has an invalid length. [ 88.473677][ T9] usb 3-1: device descriptor read/64, error -71 [ 88.499545][ T6169] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.515869][ T6168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.728855][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.123605][ T9] usb 3-1: device descriptor read/64, error -71 [ 89.271612][ T9] usb usb3-port1: attempt power cycle [ 89.448007][ T6175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.535277][ T6175] bond0: (slave bond1): Enslaving as an active interface with an up link [ 89.676955][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.714526][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.475440][ T6179] netlink: 14 bytes leftover after parsing attributes in process `syz.3.68'. [ 90.542426][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.554695][ T6179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.586151][ T6179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.599085][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.616104][ T6179] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 90.631305][ T6179] bond0 (unregistering): (slave bond1): Releasing backup interface [ 90.644690][ T6179] bond0 (unregistering): Released all slaves [ 90.746452][ T9] usb usb3-port1: unable to enumerate USB device [ 91.462706][ T9] IPVS: starting estimator thread 0... [ 91.469856][ T6195] IPVS: rr: FWM 3 0x00000003 - no destination available [ 91.623644][ T6196] IPVS: using max 78 ests per chain, 187200 per kthread [ 91.770565][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 91.770580][ T30] audit: type=1400 audit(1765486485.178:209): avc: denied { write } for pid=6208 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.972329][ T30] audit: type=1400 audit(1765486485.348:210): avc: denied { execute } for pid=6208 comm="syz.1.77" path="/19/cpuacct.usage_percpu" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.554345][ T30] audit: type=1400 audit(1765486486.958:211): avc: denied { read write } for pid=6228 comm="syz.2.83" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.275619][ T30] audit: type=1400 audit(1765486486.958:212): avc: denied { open } for pid=6228 comm="syz.2.83" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.711015][ T30] audit: type=1400 audit(1765486486.998:213): avc: denied { ioctl } for pid=6228 comm="syz.2.83" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.737306][ T30] audit: type=1400 audit(1765486487.118:214): avc: denied { accept } for pid=6230 comm="syz.1.85" lport=60507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.750133][ T30] audit: type=1400 audit(1765486487.158:215): avc: denied { write } for pid=6230 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.881188][ T30] audit: type=1400 audit(1765486487.578:216): avc: denied { create } for pid=6230 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.071439][ T30] audit: type=1400 audit(1765486487.578:217): avc: denied { write } for pid=6230 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.176389][ T30] audit: type=1400 audit(1765486488.388:218): avc: denied { name_connect } for pid=6243 comm="syz.4.86" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 96.764758][ T6259] Illegal XDP return value 4294967262 on prog (id 18) dev N/A, expect packet loss! [ 97.024220][ T6265] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 97.138531][ T30] audit: type=1400 audit(1765486490.548:219): avc: denied { create } for pid=6262 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.333223][ T6270] openvswitch: netlink: Flow key attr not present in new flow. [ 97.356222][ T5933] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.529688][ T30] audit: type=1400 audit(1765486490.938:220): avc: denied { name_bind } for pid=6272 comm="syz.3.96" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 97.535041][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.611625][ T5933] usb 2-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 97.639724][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.653352][ T5933] usb 2-1: config 0 descriptor?? [ 98.668365][ T5933] holtek_mouse 0003:04D9:A0C2.0001: unknown global tag 0xc [ 98.786662][ T5933] holtek_mouse 0003:04D9:A0C2.0001: item 0 1 1 12 parsing failed [ 98.798804][ T5933] holtek_mouse 0003:04D9:A0C2.0001: hid parse failed: -22 [ 98.810207][ T5933] holtek_mouse 0003:04D9:A0C2.0001: probe with driver holtek_mouse failed with error -22 [ 99.197951][ T6289] lo speed is unknown, defaulting to 1000 [ 99.341080][ T30] audit: type=1400 audit(1765486492.328:221): avc: denied { write } for pid=6279 comm="syz.4.99" name="tcp6" dev="proc" ino=4026533335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 99.401047][ T30] audit: type=1400 audit(1765486492.788:222): avc: denied { create } for pid=6279 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.416654][ T6293] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 99.434843][ T5933] usb 2-1: USB disconnect, device number 2 [ 99.442574][ T6287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.100'. [ 99.561043][ T6293] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.598822][ T6292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.854506][ T6299] warning: `syz.3.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.891692][ T6299] comedi comedi4: bad chanlist[0]=0x0000000e chan=14 range length=2 [ 100.514398][ T5925] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.545607][ T6309] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 100.658249][ T6309] bond0: (slave lo): Enslaving as a backup interface with an up link [ 100.676783][ T30] audit: type=1400 audit(1765486494.088:223): avc: denied { read } for pid=6316 comm="syz.0.111" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 100.736804][ T6309] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 100.761998][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.779578][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.837733][ T6322] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.140441][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.153475][ T30] audit: type=1400 audit(1765486494.108:224): avc: denied { open } for pid=6316 comm="syz.0.111" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 101.178423][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.191107][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.243957][ T5925] usb 3-1: config 0 descriptor?? [ 101.246947][ T30] audit: type=1400 audit(1765486494.278:225): avc: denied { create } for pid=6313 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 101.286596][ T30] audit: type=1400 audit(1765486494.278:226): avc: denied { node_bind } for pid=6313 comm="syz.1.110" saddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 101.346314][ T30] audit: type=1400 audit(1765486494.688:227): avc: denied { write } for pid=6316 comm="syz.0.111" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 101.369830][ T30] audit: type=1400 audit(1765486494.688:228): avc: denied { mount } for pid=6326 comm="syz.4.112" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 101.556972][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 101.563039][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 101.650539][ T5925] usb 3-1: USB disconnect, device number 7 [ 101.973809][ T6087] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.225809][ T6087] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 102.344063][ T6087] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 102.401835][ T6342] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 102.545969][ T6350] loop9: detected capacity change from 0 to 7 [ 102.583223][ T6350] Dev loop9: unable to read RDB block 7 [ 102.591358][ T6350] loop9: AHDI p4 [ 102.596657][ T6350] loop9: partition table partially beyond EOD, truncated [ 102.782359][ T6087] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 103.000346][ T6087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.167029][ T6343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.993616][ T5925] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.030597][ T6087] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 104.044560][ T6087] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6 [ 104.074336][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 104.074350][ T30] audit: type=1400 audit(1765486497.428:230): avc: denied { name_bind } for pid=6358 comm="syz.0.124" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 104.149040][ T6087] usb 2-1: USB disconnect, device number 3 [ 104.149073][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 104.215639][ T30] audit: type=1400 audit(1765486497.628:231): avc: denied { mount } for pid=6360 comm="syz.0.125" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 104.254355][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 104.262961][ T5925] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 104.305220][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.315304][ T30] audit: type=1400 audit(1765486497.668:232): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 104.336704][ T5925] usb 5-1: config 0 descriptor?? [ 104.400340][ T5925] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 104.506352][ T6363] lo speed is unknown, defaulting to 1000 [ 104.572467][ T6354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.122'. [ 104.640847][ T5925] usb 5-1: Detected FT232A [ 104.643801][ T30] audit: type=1400 audit(1765486498.018:233): avc: denied { read } for pid=6353 comm="syz.4.122" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.680408][ T5820] Bluetooth: hci4: unexpected event 0x3e length: 262 > 260 [ 104.680438][ T5820] Bluetooth: hci4: unexpected subevent 0x0d length: 261 > 260 [ 104.695738][ T5820] Bluetooth: hci4: adv larger than maximum supported [ 104.695774][ T5820] Bluetooth: hci4: adv larger than maximum supported [ 104.708586][ T5925] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 104.737081][ T5925] usb 5-1: USB disconnect, device number 7 [ 104.747329][ T5925] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 104.757475][ T5925] ftdi_sio 5-1:0.0: device disconnected [ 104.814311][ T30] audit: type=1400 audit(1765486498.018:234): avc: denied { open } for pid=6353 comm="syz.4.122" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.004906][ T30] audit: type=1400 audit(1765486498.018:235): avc: denied { ioctl } for pid=6353 comm="syz.4.122" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.072243][ T6378] netlink: 'syz.3.130': attribute type 2 has an invalid length. [ 105.099302][ T6378] : entered promiscuous mode [ 105.150142][ T6378] lo speed is unknown, defaulting to 1000 [ 105.389931][ T30] audit: type=1400 audit(1765486498.798:236): avc: denied { create } for pid=6385 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.014509][ T30] audit: type=1400 audit(1765486498.828:237): avc: denied { ioctl } for pid=6385 comm="syz.4.133" path="socket:[10707]" dev="sockfs" ino=10707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.041854][ T30] audit: type=1400 audit(1765486498.828:238): avc: denied { write } for pid=6385 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.061509][ T30] audit: type=1400 audit(1765486498.828:239): avc: denied { create } for pid=6382 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.958407][ T6405] netlink: 'syz.0.135': attribute type 2 has an invalid length. [ 107.002530][ T6405] : entered promiscuous mode [ 107.019599][ T6087] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.173589][ T6087] usb 5-1: Using ep0 maxpacket: 16 [ 107.213057][ T6087] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.234885][ T6087] usb 5-1: config 0 interface 0 has no altsetting 0 [ 107.252475][ T6087] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 107.272708][ T6087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.336559][ T6405] lo speed is unknown, defaulting to 1000 [ 107.927881][ T6087] usb 5-1: config 0 descriptor?? [ 108.147946][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.160209][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.552457][ T6087] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 108.926284][ T6087] usb 5-1: USB disconnect, device number 8 [ 108.968351][ T6420] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 109.012587][ T6417] fido_id[6417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 109.227502][ T6420] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 109.689011][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 109.689025][ T30] audit: type=1400 audit(1765486502.728:249): avc: denied { unlink } for pid=6418 comm="syz.3.141" name="#1" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.856006][ T6420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.856057][ T6419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.929960][ T30] audit: type=1400 audit(1765486502.748:250): avc: denied { mount } for pid=6418 comm="syz.3.141" name="/" dev="overlay" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.105207][ T30] audit: type=1400 audit(1765486503.228:251): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.660610][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 110.694707][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 110.769631][ T6439] netlink: 164 bytes leftover after parsing attributes in process `syz.0.147'. [ 110.780252][ T6439] unsupported nla_type 13342 [ 111.043499][ T30] audit: type=1400 audit(1765486504.438:252): avc: denied { bind } for pid=6440 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.236576][ T30] audit: type=1400 audit(1765486504.648:253): avc: denied { mounton } for pid=6442 comm="syz.0.150" path="/proc/87/task" dev="proc" ino=10019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 111.295876][ T30] audit: type=1400 audit(1765486504.648:254): avc: denied { create } for pid=6447 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.359699][ T6452] loop4: detected capacity change from 0 to 7 [ 111.363884][ T30] audit: type=1400 audit(1765486504.678:255): avc: denied { name_bind } for pid=6442 comm="syz.0.150" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 111.479675][ T6452] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 111.513721][ T6452] loop4: partition table partially beyond EOD, truncated [ 111.521085][ T6452] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 111.750069][ T792] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.944645][ T6087] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.962258][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 112.069606][ T6460] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 112.095735][ T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.107170][ T792] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 112.109266][ T6460] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 112.116437][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.126442][ T792] usb 2-1: config 0 descriptor?? [ 112.981103][ T6087] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.981881][ T792] pwc: Askey VC010 type 2 USB webcam detected. [ 113.001607][ T6087] usb 4-1: config 0 has no interface number 0 [ 113.017133][ T6087] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 113.020856][ T30] audit: type=1400 audit(1765486506.428:256): avc: denied { create } for pid=6459 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 113.029735][ T6087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.049305][ T30] audit: type=1400 audit(1765486506.428:257): avc: denied { write } for pid=6459 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 113.055748][ T6460] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 113.092744][ T6087] usb 4-1: Product: syz [ 113.097161][ T6087] usb 4-1: Manufacturer: syz [ 113.102063][ T6087] usb 4-1: SerialNumber: syz [ 113.122667][ T6087] usb 4-1: config 0 descriptor?? [ 113.194280][ T30] audit: type=1400 audit(1765486506.608:258): avc: denied { kexec_image_load } for pid=6465 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 113.266803][ T6466] netlink: 44 bytes leftover after parsing attributes in process `syz.2.156'. [ 113.286100][ T792] pwc: send_video_command error -71 [ 113.291338][ T792] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 113.300860][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'. [ 113.336531][ T6087] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 113.337906][ T6464] bond1: (slave gretap1): making interface the new active one [ 113.352570][ T6481] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6481 comm=syz.0.157 [ 113.371810][ T792] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 113.397922][ T792] usb 2-1: USB disconnect, device number 4 [ 113.420392][ T6087] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 113.457811][ T6087] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 113.525088][ T6464] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 113.573260][ T6087] usb 4-1: media controller created [ 113.581866][ T6467] macvlan2: entered promiscuous mode [ 113.587418][ T6467] macvlan2: entered allmulticast mode [ 113.602692][ T6087] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.639043][ T6467] bond1: entered promiscuous mode [ 113.644577][ T6467] gretap1: entered promiscuous mode [ 113.656572][ T6467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.122748][ T6467] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 114.139039][ T6467] bond1: left promiscuous mode [ 114.144063][ T6467] gretap1: left promiscuous mode [ 114.158344][ T6087] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 114.220031][ T6492] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[6492] [ 114.801667][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 114.801696][ T30] audit: type=1400 audit(1765486508.208:260): avc: denied { write } for pid=6498 comm="syz.1.161" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.989516][ T6506] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 115.025509][ T6506] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 115.057856][ T6505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.315242][ T30] audit: type=1400 audit(1765486508.728:261): avc: denied { watch } for pid=6509 comm="syz.4.165" path="/30/net_prio.prioidx" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.340399][ T30] audit: type=1400 audit(1765486508.758:262): avc: denied { watch_sb watch_reads } for pid=6509 comm="syz.4.165" path="/30/net_prio.prioidx" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.494244][ T6512] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 115.520442][ T6512] CIFS mount error: No usable UNC path provided in device string! [ 115.520442][ T6512] [ 115.531178][ T6512] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.759950][ T30] audit: type=1400 audit(1765486509.048:263): avc: denied { mount } for pid=6509 comm="syz.4.165" name="/" dev="hugetlbfs" ino=10155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 116.826303][ T43] usb 4-1: USB disconnect, device number 2 [ 118.185183][ T43] IPVS: starting estimator thread 0... [ 118.196030][ T6541] overlayfs: missing 'lowerdir' [ 118.204386][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 118.345518][ T6543] ALSA: mixer_oss: invalid OSS volume '' [ 118.351365][ T6543] ALSA: mixer_oss: invalid OSS volume 'I' [ 118.396758][ T6544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.171'. [ 118.423794][ T30] audit: type=1400 audit(1765486511.828:264): avc: denied { write } for pid=6528 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.529120][ T5933] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.556415][ T30] audit: type=1400 audit(1765486511.848:265): avc: denied { create } for pid=6528 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.557572][ T6542] IPVS: using max 77 ests per chain, 184800 per kthread [ 118.694955][ T5933] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 118.710441][ T5933] usb 3-1: config 0 has no interface number 0 [ 118.726674][ T5933] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 118.741671][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.760404][ T5933] usb 3-1: config 0 descriptor?? [ 119.130473][ T5933] usb 3-1: string descriptor 0 read error: -71 [ 119.133637][ T6553] capability: warning: `syz.4.177' uses 32-bit capabilities (legacy support in use) [ 119.160844][ T5933] usb-storage 3-1:0.168: USB Mass Storage device detected [ 119.209322][ T5933] usb-storage 3-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 119.284924][ T6563] overlayfs: missing 'lowerdir' [ 119.367415][ T5933] usb 3-1: USB disconnect, device number 8 [ 119.530934][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 119.544075][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 119.555418][ T6569] netlink: 'syz.0.180': attribute type 11 has an invalid length. [ 119.571888][ T6569] netlink: 'syz.0.180': attribute type 13 has an invalid length. [ 119.643680][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.674395][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.682493][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.743763][ T6569] bridge0: entered allmulticast mode [ 119.813630][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 119.820732][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 119.854570][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.874513][ T10] usb 5-1: config 1 has no interface number 1 [ 119.884904][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 119.906834][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.908031][ T6569] bridge_slave_1: left allmulticast mode [ 119.931728][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.947819][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.971552][ T10] usb 5-1: Product: syz [ 119.985089][ T10] usb 5-1: Manufacturer: syz [ 120.014316][ T10] usb 5-1: SerialNumber: syz [ 120.038593][ T6569] bridge_slave_1: left promiscuous mode [ 120.048348][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.073931][ T5933] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 120.088002][ T6569] bridge_slave_0: left allmulticast mode [ 120.103810][ T6569] bridge_slave_0: left promiscuous mode [ 120.126593][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.148602][ T6580] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 120.248313][ T5933] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.264151][ T5933] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.277555][ T5933] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.278769][ T6579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.297753][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.588151][ T30] audit: type=1400 audit(1765486513.978:266): avc: denied { bind } for pid=6577 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.632551][ T30] audit: type=1400 audit(1765486513.988:267): avc: denied { ioctl } for pid=6577 comm="syz.2.183" path="socket:[11029]" dev="sockfs" ino=11029 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.933764][ T6087] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.096699][ T6087] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 121.220669][ T6087] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 121.466640][ T6087] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 121.560287][ T6087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.860478][ T6583] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.095287][ T10] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 122.263188][ T5933] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.271484][ T5933] usb 3-1: invalid MIDI out EP 0 [ 122.303883][ T10] usb 5-1: USB disconnect, device number 9 [ 122.327999][ T6596] loop2: detected capacity change from 0 to 7 [ 122.336303][ T6596] loop2: p1 [ 122.339573][ T6596] loop2: partition table partially beyond EOD, truncated [ 122.347003][ T6596] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 122.382614][ T30] audit: type=1400 audit(1765486515.788:268): avc: denied { read } for pid=6597 comm="syz.3.190" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.421267][ T30] audit: type=1400 audit(1765486515.828:269): avc: denied { open } for pid=6597 comm="syz.3.190" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.448629][ T30] audit: type=1400 audit(1765486515.868:270): avc: denied { ioctl } for pid=6597 comm="syz.3.190" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.505294][ T6592] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 122.534639][ T6087] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 122.553907][ T6087] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input7 [ 122.655355][ T6087] usb 1-1: USB disconnect, device number 8 [ 122.655406][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 122.737374][ T5933] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 122.794364][ T5933] usb 3-1: USB disconnect, device number 9 [ 123.070920][ T6589] delete_channel: no stack [ 123.206338][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.216429][ T6611] team0: Device xfrm1 is of different type [ 123.259211][ T6613] netlink: 'syz.4.196': attribute type 10 has an invalid length. [ 123.297045][ T6612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.308523][ T43] libceph: connect (1)[c::]:6789 error -101 [ 123.316589][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 123.326187][ T43] libceph: connect (1)[c::]:6789 error -101 [ 123.332887][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 123.369356][ T30] audit: type=1400 audit(1765486516.778:271): avc: denied { read } for pid=6619 comm="syz.2.198" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 123.373637][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 123.392393][ T30] audit: type=1400 audit(1765486516.778:272): avc: denied { open } for pid=6619 comm="syz.2.198" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 123.434249][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.443796][ T24] usb 4-1: config 1 has an invalid interface number: 85 but max is 0 [ 123.445841][ T6615] ceph: No mds server is up or the cluster is laggy [ 123.455922][ T24] usb 4-1: config 1 has no interface number 0 [ 123.466469][ T24] usb 4-1: config 1 interface 85 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 123.478637][ T24] usb 4-1: config 1 interface 85 has no altsetting 0 [ 123.517500][ T6624] openvswitch: netlink: Actions may not be safe on all matching packets [ 123.523279][ T24] usb 4-1: string descriptor 0 read error: -22 [ 123.541888][ T6624] vlan2: entered promiscuous mode [ 123.548325][ T6624] vlan2: entered allmulticast mode [ 123.553950][ T6624] hsr_slave_1: entered allmulticast mode [ 123.555886][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=8c.a2 [ 123.577627][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 123.582900][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.606494][ T30] audit: type=1400 audit(1765486517.018:273): avc: denied { write } for pid=6625 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.634426][ T6606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.639359][ T30] audit: type=1400 audit(1765486517.018:274): avc: denied { setopt } for pid=6625 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 123.661515][ T30] audit: type=1400 audit(1765486517.018:275): avc: denied { write } for pid=6625 comm="syz.2.200" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.702945][ T24] ftdi_sio 4-1:1.85: FTDI USB Serial Device converter detected [ 123.730791][ T24] ftdi_sio ttyUSB0: unknown device type: 0x8ca2 [ 123.743790][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.903745][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 123.963575][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.074833][ T6630] netlink: 48 bytes leftover after parsing attributes in process `syz.3.193'. [ 124.084266][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 124.122708][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 124.165307][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 124.178421][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.238611][ T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 124.274028][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 124.484575][ T10] usb 2-1: Product: syz [ 124.503256][ T10] usb 2-1: Manufacturer: syz [ 124.512744][ T10] usb 2-1: SerialNumber: syz [ 124.528876][ T10] usb 2-1: config 0 descriptor?? [ 125.059408][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 125.205769][ T10] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 125.215173][ T10] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 125.230667][ T10] usb 2-1: USB disconnect, device number 5 [ 125.374711][ T24] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 125.386130][ T24] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 125.397951][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 125.407125][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.417915][ T6640] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 125.757058][ T5933] usb 4-1: USB disconnect, device number 3 [ 125.772652][ T5933] ftdi_sio 4-1:1.85: device disconnected [ 126.035964][ T6662] netlink: 'syz.3.210': attribute type 2 has an invalid length. [ 126.292274][ T6662] lo speed is unknown, defaulting to 1000 [ 126.375399][ T24] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 126.536361][ T24] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input9 [ 126.911031][ T6674] netlink: 'syz.4.215': attribute type 10 has an invalid length. [ 126.911589][ T24] usb 1-1: USB disconnect, device number 9 [ 126.911628][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 126.927266][ T6676] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 126.979451][ T6673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.129583][ T6676] : entered promiscuous mode [ 127.140731][ T6677] lo speed is unknown, defaulting to 1000 [ 127.260586][ T6680] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 127.260586][ T6680] program syz.0.216 not setting count and/or reply_len properly [ 127.386986][ T6682] team0: Device xfrm1 is of different type [ 128.430416][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.222'. [ 129.583829][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 129.766952][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 129.894714][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 130.064697][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 130.157264][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.388773][ T6706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.379282][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 131.427572][ T9] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 131.456228][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input10 [ 132.010190][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 132.037298][ T9] usb 3-1: USB disconnect, device number 10 [ 132.466043][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 132.466063][ T30] audit: type=1400 audit(1765486525.848:283): avc: denied { write } for pid=6723 comm="syz.0.229" path="socket:[11630]" dev="sockfs" ino=11630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 132.502393][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.517998][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.720990][ T6729] team0: Device xfrm1 is of different type [ 133.272699][ T6751] netlink: 'syz.1.236': attribute type 2 has an invalid length. [ 133.369596][ T6745] netlink: 'syz.0.232': attribute type 10 has an invalid length. [ 133.381361][ T30] audit: type=1400 audit(1765486526.668:284): avc: denied { execute } for pid=6747 comm="syz.4.237" path="/48/cpuacct.usage_percpu" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.442634][ T6751] lo speed is unknown, defaulting to 1000 [ 133.553461][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.239166][ T6744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.272589][ T24] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 134.284583][ T24] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 134.299524][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 134.309879][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.344864][ T6740] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.032958][ T24] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 135.063387][ T24] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input11 [ 135.105062][ T24] usb 4-1: USB disconnect, device number 4 [ 135.110941][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 135.353746][ T5888] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.525097][ T5888] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 135.561231][ T5888] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 135.605547][ T5888] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 135.637697][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.659392][ T6764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.000825][ T30] audit: type=1400 audit(1765486530.408:285): avc: denied { execute } for pid=6769 comm="syz.4.244" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 137.644410][ T5888] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 137.703989][ T5888] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input12 [ 137.783380][ T5888] usb 3-1: USB disconnect, device number 11 [ 137.789385][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 138.756909][ T30] audit: type=1400 audit(1765486532.148:286): avc: denied { read write } for pid=6789 comm="syz.2.249" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.975749][ T30] audit: type=1400 audit(1765486532.158:287): avc: denied { open } for pid=6789 comm="syz.2.249" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.055995][ T30] audit: type=1400 audit(1765486532.178:288): avc: denied { ioctl } for pid=6789 comm="syz.2.249" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.169165][ T30] audit: type=1400 audit(1765486532.498:289): avc: denied { connect } for pid=6792 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.387762][ T6798] team0: Device xfrm1 is of different type [ 139.881197][ T30] audit: type=1400 audit(1765486533.288:290): avc: denied { read } for pid=6797 comm="syz.1.252" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.980212][ T30] audit: type=1400 audit(1765486533.288:291): avc: denied { ioctl } for pid=6797 comm="syz.1.252" path="/dev/sg0" dev="devtmpfs" ino=755 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.136320][ T30] audit: type=1400 audit(1765486533.548:292): avc: denied { bind } for pid=6811 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.233651][ T30] audit: type=1400 audit(1765486533.568:293): avc: denied { listen } for pid=6811 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.293335][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 140.323676][ T30] audit: type=1400 audit(1765486533.578:294): avc: denied { accept } for pid=6811 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.427137][ T6817] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 140.494825][ T6821] loop9: detected capacity change from 0 to 7 [ 140.504772][ T6821] Dev loop9: unable to read RDB block 7 [ 140.510371][ T6821] loop9: AHDI p4 [ 140.515101][ T6821] loop9: partition table partially beyond EOD, truncated [ 140.742465][ T30] audit: type=1400 audit(1765486533.578:295): avc: denied { wake_alarm } for pid=6811 comm="syz.0.256" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.883237][ T43] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 141.085166][ T43] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 141.118719][ T6826] netlink: 'syz.3.258': attribute type 2 has an invalid length. [ 141.167248][ T6826] lo speed is unknown, defaulting to 1000 [ 141.213599][ T43] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 141.233629][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.266740][ T6807] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.867015][ T43] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 141.883044][ T43] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input13 [ 142.137248][ T43] usb 3-1: USB disconnect, device number 12 [ 142.143244][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 142.218706][ T6839] xt_limit: Overflow, try lower: 167772/2147483648 [ 142.733797][ T792] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.212484][ T6856] team0: Device xfrm1 is of different type [ 143.237902][ T6857] openvswitch: netlink: Flow key attr not present in new flow. [ 143.293580][ T792] usb 1-1: Using ep0 maxpacket: 16 [ 143.301449][ T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.323638][ T792] usb 1-1: config 0 has no interfaces? [ 143.341548][ T792] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 143.362949][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.488655][ T792] usb 1-1: config 0 descriptor?? [ 143.690183][ T6859] block nbd2: shutting down sockets [ 143.822428][ T6863] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 143.929377][ T6863] team0: Port device dummy0 added [ 143.955566][ T6864] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 144.065788][ T6864] team0: Port device dummy0 removed [ 144.068753][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.081901][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.198976][ T6864] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.359233][ T10] usb 1-1: USB disconnect, device number 10 [ 144.615717][ T6869] overlayfs: unescaped trailing colons in lowerdir mount option. [ 144.698652][ T6870] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 144.714360][ T6870] netlink: 72 bytes leftover after parsing attributes in process `syz.3.272'. [ 145.120199][ T6867] : renamed from lo (while UP) [ 145.312989][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 145.313005][ T30] audit: type=1400 audit(1765486538.718:299): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.461700][ T5925] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 146.509166][ T6897] team0: Device xfrm1 is of different type [ 146.691221][ T5925] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 146.711893][ T5925] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 146.724145][ T30] audit: type=1400 audit(1765486540.118:300): avc: denied { create } for pid=6898 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.755799][ T5925] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 146.773808][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.783421][ T30] audit: type=1400 audit(1765486540.158:301): avc: denied { write } for pid=6898 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.833900][ T6888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.953691][ T30] audit: type=1326 audit(1765486540.338:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecf998f749 code=0x0 [ 147.374044][ T5925] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 147.386241][ T5925] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input14 [ 147.451302][ T5925] usb 1-1: USB disconnect, device number 11 [ 147.457331][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 147.560666][ T30] audit: type=1400 audit(1765486540.968:303): avc: denied { connect } for pid=6909 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.603030][ T30] audit: type=1400 audit(1765486540.998:304): avc: denied { ioctl } for pid=6909 comm="syz.1.287" path="socket:[12030]" dev="sockfs" ino=12030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.667799][ T30] audit: type=1400 audit(1765486540.998:305): avc: denied { write } for pid=6909 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.966260][ T30] audit: type=1400 audit(1765486541.378:306): avc: denied { nlmsg_read } for pid=6918 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.986913][ T6926] netlink: 104 bytes leftover after parsing attributes in process `syz.2.290'. [ 148.064771][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 150.203169][ T6939] lo speed is unknown, defaulting to 1000 [ 150.219917][ T30] audit: type=1400 audit(1765486543.628:307): avc: denied { bind } for pid=6948 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.278600][ T30] audit: type=1400 audit(1765486543.678:308): avc: denied { setopt } for pid=6948 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.001655][ T6958] overlayfs: failed to resolve './file0': -2 [ 151.007792][ T30] audit: type=1400 audit(1765486544.408:309): avc: denied { create } for pid=6957 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 151.636160][ T6972] syzkaller0: entered promiscuous mode [ 151.654558][ T6972] syzkaller0: entered allmulticast mode [ 152.571939][ T30] audit: type=1400 audit(1765486545.978:310): avc: denied { write } for pid=6980 comm="syz.1.308" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.201278][ T30] audit: type=1400 audit(1765486546.558:311): avc: denied { ioctl } for pid=6980 comm="syz.1.308" path="/dev/input/mouse0" dev="devtmpfs" ino=974 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.368370][ T6984] input: syz0 as /devices/virtual/input/input15 [ 153.490563][ T6992] CIFS mount error: No usable UNC path provided in device string! [ 153.490563][ T6992] [ 153.500655][ T6992] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 153.822358][ T30] audit: type=1400 audit(1765486546.668:312): avc: denied { connect } for pid=6971 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.863595][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 154.045147][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 154.064499][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 154.148656][ T6995] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 154.155370][ T6995] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 154.208597][ T6995] vhci_hcd vhci_hcd.0: Device attached [ 154.214460][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.349699][ T30] audit: type=1400 audit(1765486547.698:313): avc: denied { bind } for pid=6989 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.543303][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.577693][ T6981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.585909][ T6981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.595033][ T43] usb 40-1: SetAddress Request (2) to port 0 [ 154.598457][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.603679][ T43] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 154.703578][ T792] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.862128][ T5925] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.898586][ T9] usb 2-1: USB disconnect, device number 6 [ 155.003992][ T792] usb 4-1: Using ep0 maxpacket: 16 [ 155.077639][ T792] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 155.086895][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 155.115156][ T792] usb 4-1: Product: syz [ 155.119431][ T792] usb 4-1: Manufacturer: syz [ 155.131675][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.131846][ T792] usb 4-1: SerialNumber: syz [ 155.160396][ T792] usb 4-1: config 0 descriptor?? [ 155.184555][ T5925] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 155.214944][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.236503][ T5925] usb 1-1: config 0 descriptor?? [ 155.595952][ T7006] sctp: [Deprecated]: syz.0.313 (pid 7006) Use of int in maxseg socket option. [ 155.595952][ T7006] Use struct sctp_assoc_value instead [ 156.914895][ T5937] usb 4-1: USB disconnect, device number 5 [ 156.925404][ T6996] vhci_hcd: connection reset by peer [ 156.939156][ T13] vhci_hcd vhci_hcd.3: stop threads [ 156.946637][ T13] vhci_hcd vhci_hcd.3: release socket [ 156.952892][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 157.518714][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 157.552440][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 157.575685][ T5925] usb 1-1: USB disconnect, device number 12 [ 158.775537][ T30] audit: type=1400 audit(1765486551.798:314): avc: denied { read } for pid=7028 comm="syz.3.320" path="socket:[13067]" dev="sockfs" ino=13067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.893274][ T7016] ip6tnl1: entered promiscuous mode [ 159.084114][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 159.092923][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 159.137899][ T7043] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 159.201057][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 159.213840][ T7048] overlay: filesystem on ./file1 not supported as upperdir [ 159.796229][ T43] usb 40-1: device descriptor read/8, error -110 [ 159.917389][ T7061] netlink: 'syz.3.330': attribute type 2 has an invalid length. [ 160.035868][ T7061] lo speed is unknown, defaulting to 1000 [ 160.254929][ T7071] team0: Device xfrm1 is of different type [ 160.434821][ T43] usb usb40-port1: attempt power cycle [ 161.170837][ T30] audit: type=1400 audit(1765486554.578:315): avc: denied { lock } for pid=7080 comm="syz.1.336" path="socket:[13448]" dev="sockfs" ino=13448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.414572][ T43] usb usb40-port1: unable to enumerate USB device [ 161.455931][ T7091] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 161.455931][ T7091] program syz.4.339 not setting count and/or reply_len properly [ 161.478601][ T7089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.593045][ T30] audit: type=1400 audit(1765486554.998:316): avc: denied { read write } for pid=7085 comm="syz.2.338" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 161.712494][ T30] audit: type=1400 audit(1765486555.038:317): avc: denied { open } for pid=7085 comm="syz.2.338" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 162.126857][ T5925] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 162.263598][ T5925] usb 5-1: device descriptor read/64, error -71 [ 162.923836][ T5925] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 163.073596][ T5925] usb 5-1: device descriptor read/64, error -71 [ 163.776310][ T7125] mmap: syz.0.345 (7125) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.867885][ T30] audit: type=1400 audit(1765486557.178:318): avc: denied { ioctl } for pid=7116 comm="syz.0.345" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13257 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 163.955068][ T5925] usb usb5-port1: attempt power cycle [ 164.051083][ T30] audit: type=1400 audit(1765486557.268:319): avc: denied { mounton } for pid=7116 comm="syz.0.345" path="/65/file0" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.273572][ T30] audit: type=1400 audit(1765486557.678:320): avc: denied { write } for pid=7131 comm="syz.3.349" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.323773][ T5925] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 164.426920][ T5925] usb 5-1: device descriptor read/8, error -71 [ 164.663568][ T5925] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 166.599245][ T5925] usb 5-1: device descriptor read/8, error -71 [ 166.723335][ T7166] netlink: 'syz.2.358': attribute type 2 has an invalid length. [ 166.747096][ T7166] : entered promiscuous mode [ 166.761587][ T5925] usb usb5-port1: unable to enumerate USB device [ 166.871015][ T7166] lo speed is unknown, defaulting to 1000 [ 166.999788][ T7175] batman_adv: batadv0: Adding interface: vxlan0 [ 167.011895][ T7175] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.166954][ T7179] FAULT_INJECTION: forcing a failure. [ 167.166954][ T7179] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.180197][ T7179] CPU: 1 UID: 0 PID: 7179 Comm: syz.3.362 Not tainted syzkaller #0 PREEMPT(full) [ 167.180220][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.180230][ T7179] Call Trace: [ 167.180236][ T7179] [ 167.180244][ T7179] dump_stack_lvl+0x16c/0x1f0 [ 167.180266][ T7179] should_fail_ex+0x512/0x640 [ 167.180294][ T7179] _copy_to_user+0x32/0xd0 [ 167.180317][ T7179] simple_read_from_buffer+0xcb/0x170 [ 167.180348][ T7179] proc_fail_nth_read+0x197/0x240 [ 167.180368][ T7179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.180387][ T7179] ? rw_verify_area+0xcf/0x6c0 [ 167.180406][ T7179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.180423][ T7179] vfs_read+0x1e4/0xcf0 [ 167.180444][ T7179] ? __pfx___mutex_lock+0x10/0x10 [ 167.180463][ T7179] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 167.180489][ T7179] ? __pfx_vfs_read+0x10/0x10 [ 167.180512][ T7179] ? __rcu_read_unlock+0x2b5/0x5a0 [ 167.180535][ T7179] ? __fget_files+0x20e/0x3c0 [ 167.180565][ T7179] ksys_read+0x12a/0x250 [ 167.180584][ T7179] ? __pfx_ksys_read+0x10/0x10 [ 167.180611][ T7179] do_syscall_64+0xcd/0xf80 [ 167.180630][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.180647][ T7179] RIP: 0033:0x7fecf998e15c [ 167.180661][ T7179] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.180677][ T7179] RSP: 002b:00007fecfa7ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.180695][ T7179] RAX: ffffffffffffffda RBX: 00007fecf9be6180 RCX: 00007fecf998e15c [ 167.180706][ T7179] RDX: 000000000000000f RSI: 00007fecfa7ed0a0 RDI: 0000000000000007 [ 167.180716][ T7179] RBP: 00007fecfa7ed090 R08: 0000000000000000 R09: 0000000000000000 [ 167.180726][ T7179] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.180736][ T7179] R13: 00007fecf9be6218 R14: 00007fecf9be6180 R15: 00007fffdea9ee28 [ 167.180761][ T7179] [ 167.575828][ T7175] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 167.670078][ T10] IPVS: starting estimator thread 0... [ 167.763684][ T7187] IPVS: using max 41 ests per chain, 98400 per kthread [ 167.961413][ T7195] process 'syz.3.366' launched './file2' with NULL argv: empty string added [ 168.002570][ T30] audit: type=1400 audit(1765486561.408:321): avc: denied { execute_no_trans } for pid=7194 comm="syz.3.366" path="/70/file2" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.194420][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.201752][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.262989][ T7201] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 168.386352][ T7202] loop9: detected capacity change from 0 to 7 [ 168.576895][ T30] audit: type=1400 audit(1765486561.988:322): avc: denied { lock } for pid=7194 comm="syz.3.366" path="socket:[13592]" dev="sockfs" ino=13592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 168.686462][ T7202] Dev loop9: unable to read RDB block 7 [ 168.723661][ T7202] loop9: unable to read partition table [ 168.744530][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.756558][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.764274][ T7202] loop9: partition table beyond EOD, truncated [ 168.869931][ T7202] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 169.010782][ T5933] lo speed is unknown, defaulting to 1000 [ 169.022124][ T7197] delete_channel: no stack [ 169.028561][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.079626][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.089715][ T5933] syz0: Port: 1 Link DOWN [ 169.206240][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.225546][ T133] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.025245][ T7221] sd 0:0:1:0: device reset [ 170.035952][ T30] audit: type=1400 audit(1765486563.448:323): avc: denied { sqpoll } for pid=7217 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.763663][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 170.981804][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 171.037056][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 171.075602][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 171.643629][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.725036][ T7249] netlink: 'syz.4.380': attribute type 21 has an invalid length. [ 171.754008][ T7249] netlink: 132 bytes leftover after parsing attributes in process `syz.4.380'. [ 171.772529][ T7235] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 173.089395][ T30] audit: type=1400 audit(1765486566.498:324): avc: denied { append } for pid=7254 comm="syz.3.383" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 173.284037][ T9] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 173.295999][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input16 [ 173.383741][ T9] usb 1-1: USB disconnect, device number 13 [ 173.383774][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 173.404081][ T30] audit: type=1400 audit(1765486566.528:325): avc: denied { read } for pid=7254 comm="syz.3.383" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.532555][ T30] audit: type=1400 audit(1765486566.528:326): avc: denied { open } for pid=7254 comm="syz.3.383" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.731450][ T7276] CUSE: info not properly terminated [ 173.744724][ T7271] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 174.146220][ T7283] gfs2: not a GFS2 filesystem [ 174.166921][ T30] audit: type=1400 audit(1765486567.578:327): avc: denied { connect } for pid=7282 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.224163][ T30] audit: type=1400 audit(1765486567.618:328): avc: denied { append } for pid=7282 comm="syz.1.390" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.765595][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 174.774735][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 174.894962][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 174.903962][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 175.444988][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 175.453922][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 175.829575][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 176.483588][ T9] usb 4-1: config 0 has no interfaces? [ 176.493070][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 176.508505][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.516654][ T9] usb 4-1: Product: syz [ 176.521211][ T9] usb 4-1: Manufacturer: syz [ 176.529502][ T9] usb 4-1: SerialNumber: syz [ 176.546479][ T9] usb 4-1: config 0 descriptor?? [ 176.595651][ T7322] netlink: 'syz.1.400': attribute type 23 has an invalid length. [ 176.659793][ T9] libceph: connect (1)[c::]:6789 error -101 [ 176.667007][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 176.686918][ T7325] ======================================================= [ 176.686918][ T7325] WARNING: The mand mount option has been deprecated and [ 176.686918][ T7325] and is ignored by this kernel. Remove the mand [ 176.686918][ T7325] option from the mount to silence this warning. [ 176.686918][ T7325] ======================================================= [ 176.747382][ T7325] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 176.755438][ T7325] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 176.764409][ T7325] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 176.772479][ T7325] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 176.816668][ T30] audit: type=1400 audit(1765486570.138:329): avc: denied { mount } for pid=7317 comm="syz.1.400" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 177.486818][ T7322] ceph: No mds server is up or the cluster is laggy [ 177.534571][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.545697][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.706312][ T7310] comedi comedi4: bad chanlist[0]=0x0000000e chan=14 range length=2 [ 177.723631][ T30] audit: type=1400 audit(1765486570.138:330): avc: denied { mounton } for pid=7317 comm="syz.1.400" path="/90/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 177.872816][ T30] audit: type=1400 audit(1765486570.148:331): avc: denied { mounton } for pid=7317 comm="syz.1.400" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 177.992682][ T30] audit: type=1400 audit(1765486570.928:332): avc: denied { create } for pid=7319 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 178.013320][ T30] audit: type=1400 audit(1765486571.128:333): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 178.288516][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 178.842432][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 178.875662][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 178.892866][ T5933] usb 4-1: USB disconnect, device number 6 [ 178.899793][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 178.920911][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.946985][ T7331] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 179.017062][ T7346] netlink: 'syz.4.406': attribute type 2 has an invalid length. [ 179.033227][ T7346] : entered promiscuous mode [ 179.068578][ T7346] lo speed is unknown, defaulting to 1000 [ 179.401202][ T5933] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.583595][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 179.590850][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.611763][ T5933] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 179.691454][ T7356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.835681][ T9] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 180.035307][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.053584][ T6087] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.062402][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input17 [ 180.073836][ T5933] usb 4-1: Product: syz [ 180.087083][ T5933] usb 4-1: Manufacturer: syz [ 180.094251][ T5933] usb 4-1: SerialNumber: syz [ 180.117267][ T5933] usb 4-1: config 0 descriptor?? [ 180.138773][ T5933] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 180.140823][ T9] usb 3-1: USB disconnect, device number 13 [ 180.147065][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 180.243628][ T6087] usb 1-1: Using ep0 maxpacket: 32 [ 180.253778][ T6087] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.271370][ T6087] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.309602][ T6087] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.319523][ T6087] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 180.389230][ T6087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.411468][ T30] audit: type=1400 audit(1765486573.818:334): avc: denied { read } for pid=7361 comm="syz.2.412" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.451853][ T6087] usb 1-1: config 0 descriptor?? [ 180.608733][ T30] audit: type=1400 audit(1765486573.868:335): avc: denied { open } for pid=7361 comm="syz.2.412" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.803290][ T7370] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 180.878159][ T7371] loop9: detected capacity change from 0 to 7 [ 180.896541][ T7371] Dev loop9: unable to read RDB block 7 [ 180.902221][ T7371] loop9: AHDI p4 [ 180.906065][ T7371] loop9: partition table partially beyond EOD, truncated [ 181.671814][ T5888] usb 4-1: USB disconnect, device number 7 [ 182.683080][ T6087] usbhid 1-1:0.0: can't add hid device: -71 [ 182.695782][ T6087] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 182.786584][ T6087] usb 1-1: USB disconnect, device number 14 [ 183.049653][ T30] audit: type=1400 audit(1765486576.428:336): avc: denied { setopt } for pid=7381 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.438546][ T7419] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 184.490186][ T7412] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 185.385987][ T30] audit: type=1400 audit(1765486578.798:337): avc: denied { bind } for pid=7438 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.419277][ T7439] tmpfs: Bad value for 'mpol' [ 185.513700][ T30] audit: type=1400 audit(1765486578.818:338): avc: denied { name_bind } for pid=7438 comm="syz.4.432" src=18464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 185.585763][ T30] audit: type=1400 audit(1765486578.818:339): avc: denied { node_bind } for pid=7438 comm="syz.4.432" saddr=255.255.255.255 src=18464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 185.645326][ T7444] team0: Device xfrm1 is of different type [ 185.874269][ T7449] 9p: Bad value for 'rfdno' [ 185.983684][ T30] audit: type=1400 audit(1765486579.298:340): avc: denied { mount } for pid=7442 comm="syz.0.433" name="/" dev="ramfs" ino=14988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.086935][ T30] audit: type=1400 audit(1765486579.428:341): avc: denied { mounton } for pid=7442 comm="syz.0.433" path="/file0" dev="ramfs" ino=14077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 186.153563][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 186.326227][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 186.357943][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.383807][ T9] usb 5-1: Product: syz [ 186.507561][ T9] usb 5-1: Manufacturer: syz [ 186.521515][ T9] usb 5-1: SerialNumber: syz [ 186.586407][ T9] hub 5-1:24.0: bad descriptor, ignoring hub [ 186.592506][ T9] hub 5-1:24.0: probe with driver hub failed with error -5 [ 186.714440][ T30] audit: type=1800 audit(1765486580.108:342): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.433" name="bus" dev="ramfs" ino=14989 res=0 errno=0 [ 186.791906][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 186.860474][ T30] audit: type=1400 audit(1765486580.268:343): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 186.866854][ T7462] binder: 7461:7462 ioctl c0306201 0 returned -14 [ 186.886875][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 186.918831][ T9] dib0700: firmware download failed at 7 with -22 [ 186.965018][ T30] audit: type=1400 audit(1765486580.378:344): avc: denied { mounton } for pid=7458 comm="syz.1.439" path="/proc/333/task" dev="proc" ino=15029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 187.005936][ T7464] lo speed is unknown, defaulting to 1000 [ 187.094307][ T30] audit: type=1400 audit(1765486580.378:345): avc: denied { associate } for pid=7458 comm="syz.1.439" name="net_prio.prioidx" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 187.208706][ T43] usb 5-1: USB disconnect, device number 14 [ 187.417739][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 187.427158][ T7439] netlink: 'syz.4.432': attribute type 5 has an invalid length. [ 187.503894][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.640471][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 187.658748][ T7439] netlink: 'syz.4.432': attribute type 5 has an invalid length. [ 187.785748][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 187.807979][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 187.839983][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 187.865106][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.891982][ T7467] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.804121][ T9] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 188.817342][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input18 [ 188.871232][ T9] usb 2-1: USB disconnect, device number 7 [ 188.871280][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 189.015584][ T7491] netlink: 52 bytes leftover after parsing attributes in process `syz.3.449'. [ 189.477863][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 189.477879][ T30] audit: type=1400 audit(1765486582.888:347): avc: denied { read } for pid=7501 comm="syz.1.453" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 189.660966][ T30] audit: type=1400 audit(1765486582.928:348): avc: denied { open } for pid=7501 comm="syz.1.453" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 189.684699][ T30] audit: type=1400 audit(1765486582.928:349): avc: denied { ioctl } for pid=7501 comm="syz.1.453" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.132003][ T7515] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20001 [ 190.833708][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 190.835872][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 190.842172][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 190.851845][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 190.929126][ T30] audit: type=1326 audit(1765486584.338:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5a18f749 code=0x7ffc0000 [ 191.310295][ T30] audit: type=1326 audit(1765486584.368:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5a18f749 code=0x7ffc0000 [ 191.333749][ T30] audit: type=1326 audit(1765486584.368:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5a18f749 code=0x7ffc0000 [ 191.403634][ T30] audit: type=1326 audit(1765486584.368:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5a18f749 code=0x7ffc0000 [ 191.432840][ T30] audit: type=1326 audit(1765486584.368:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5a18f749 code=0x7ffc0000 [ 191.457235][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 191.561835][ T30] audit: type=1326 audit(1765486584.368:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5a18f749 code=0x7ffc0000 [ 191.763557][ T7540] netlink: 164 bytes leftover after parsing attributes in process `syz.2.462'. [ 191.970805][ T30] audit: type=1326 audit(1765486584.368:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5a18f749 code=0x7ffc0000 [ 192.684258][ T7552] loop4: detected capacity change from 0 to 7 [ 192.732835][ T7552] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 192.908897][ T7552] loop4: partition table partially beyond EOD, truncated [ 192.943904][ T7552] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 193.042472][ T7559] netlink: 'syz.1.466': attribute type 2 has an invalid length. [ 193.088533][ T7559] lo speed is unknown, defaulting to 1000 [ 193.160416][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 193.461681][ T7568] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 193.573693][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.886696][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 193.921082][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.927554][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.952131][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 194.181847][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 194.270881][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.301137][ T7565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.416675][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 194.433322][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 194.847097][ T7591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7591 comm=syz.3.474 [ 194.868552][ T7591] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 194.876372][ T7591] netlink: 'syz.3.474': attribute type 2 has an invalid length. [ 195.173028][ T7594] openvswitch: netlink: Flow key attr not present in new flow. [ 195.202599][ T7593] netlink: 'syz.4.477': attribute type 10 has an invalid length. [ 195.237143][ T7592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.248079][ T9] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 195.262055][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input19 [ 195.443376][ T9] usb 3-1: USB disconnect, device number 14 [ 195.449486][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 197.651234][ T7620] team0: Device xfrm1 is of different type [ 197.989147][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 198.825625][ T5933] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 199.217266][ T7638] netlink: 52 bytes leftover after parsing attributes in process `syz.0.492'. [ 199.236890][ T7638] netlink: 52 bytes leftover after parsing attributes in process `syz.0.492'. [ 199.274995][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.299525][ T7638] netlink: 52 bytes leftover after parsing attributes in process `syz.0.492'. [ 199.303727][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 199.303743][ T30] audit: type=1400 audit(1765486592.718:386): avc: denied { ioctl } for pid=7637 comm="syz.0.492" path="socket:[15468]" dev="sockfs" ino=15468 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 199.350198][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.396412][ T5933] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 199.433564][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.521232][ T5933] usb 5-1: config 0 descriptor?? [ 200.047060][ T7651] netlink: 7 bytes leftover after parsing attributes in process `syz.3.497'. [ 200.094694][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 200.152884][ T5933] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 200.168114][ T5933] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 200.190091][ T5933] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 200.224792][ T5933] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 200.255723][ T5933] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 200.257564][ T7666] xt_hashlimit: size too large, truncated to 1048576 [ 200.279946][ T5933] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 200.315393][ T5933] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 200.393267][ T5933] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 200.537424][ T5933] cp2112 0003:10C4:EA90.0003: error requesting version [ 200.572852][ T5933] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32 [ 201.214064][ T9] usb 5-1: USB disconnect, device number 15 [ 202.001829][ T7704] FAULT_INJECTION: forcing a failure. [ 202.001829][ T7704] name failslab, interval 1, probability 0, space 0, times 1 [ 202.054056][ T7704] CPU: 0 UID: 0 PID: 7704 Comm: syz.4.513 Not tainted syzkaller #0 PREEMPT(full) [ 202.054082][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.054092][ T7704] Call Trace: [ 202.054098][ T7704] [ 202.054105][ T7704] dump_stack_lvl+0x16c/0x1f0 [ 202.054128][ T7704] should_fail_ex+0x512/0x640 [ 202.054148][ T7704] ? fs_reclaim_acquire+0xae/0x150 [ 202.054174][ T7704] should_failslab+0xc2/0x120 [ 202.054196][ T7704] __kmalloc_noprof+0xeb/0x910 [ 202.054223][ T7704] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 202.054249][ T7704] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 202.054267][ T7704] tomoyo_realpath_from_path+0xc2/0x6e0 [ 202.054289][ T7704] ? tomoyo_profile+0x47/0x60 [ 202.054314][ T7704] tomoyo_path_number_perm+0x245/0x580 [ 202.054340][ T7704] ? tomoyo_path_number_perm+0x237/0x580 [ 202.054369][ T7704] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.054397][ T7704] ? find_held_lock+0x2b/0x80 [ 202.054446][ T7704] ? find_held_lock+0x2b/0x80 [ 202.054469][ T7704] ? hook_file_ioctl_common+0x144/0x410 [ 202.054497][ T7704] ? __fget_files+0x20e/0x3c0 [ 202.054525][ T7704] security_file_ioctl+0x9b/0x240 [ 202.054545][ T7704] __x64_sys_ioctl+0xb7/0x210 [ 202.054566][ T7704] do_syscall_64+0xcd/0xf80 [ 202.054586][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.054603][ T7704] RIP: 0033:0x7f0fe938f749 [ 202.054616][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.054637][ T7704] RSP: 002b:00007f0fe75f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.054653][ T7704] RAX: ffffffffffffffda RBX: 00007f0fe95e5fa0 RCX: 00007f0fe938f749 [ 202.054664][ T7704] RDX: 0000200000000040 RSI: 00000000c01064b5 RDI: 0000000000000003 [ 202.054674][ T7704] RBP: 00007f0fe75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.054684][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.054693][ T7704] R13: 00007f0fe95e6038 R14: 00007f0fe95e5fa0 R15: 00007ffff7e70478 [ 202.054718][ T7704] [ 202.054726][ T7704] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.411716][ T7706] netlink: 'syz.0.514': attribute type 10 has an invalid length. [ 202.426620][ T30] audit: type=1400 audit(1765486595.818:387): avc: denied { bind } for pid=7705 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.474580][ T30] audit: type=1400 audit(1765486595.878:388): avc: denied { setopt } for pid=7705 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 202.538514][ T7706] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.595936][ T7706] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.604582][ T30] audit: type=1400 audit(1765486596.008:389): avc: denied { name_bind } for pid=7705 comm="syz.0.514" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 202.728457][ T30] audit: type=1400 audit(1765486596.138:390): avc: denied { node_bind } for pid=7705 comm="syz.0.514" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 202.750844][ T7714] team0: Device xfrm1 is of different type [ 202.756883][ T5933] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 202.800885][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'. [ 202.820818][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 202.845510][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 202.924256][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 202.931859][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.953334][ T5933] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.987025][ T5933] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 202.999513][ T7705] delete_channel: no stack [ 203.025439][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.055458][ T5933] usb 4-1: config 0 descriptor?? [ 203.072472][ T30] audit: type=1400 audit(1765486596.478:391): avc: denied { write } for pid=7726 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 203.485972][ T792] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 203.491598][ T7735] netlink: 'syz.3.516': attribute type 10 has an invalid length. [ 203.501825][ T7735] team0: Device dummy0 is up. Set it down before adding it as a team port [ 203.649682][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.663961][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.762058][ T6087] usb 4-1: USB disconnect, device number 8 [ 203.764821][ T792] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 203.778421][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.791851][ T792] usb 5-1: config 0 descriptor?? [ 203.811505][ T792] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 203.811564][ T30] audit: type=1400 audit(1765486597.218:392): avc: denied { create } for pid=7737 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.856712][ T7738] batman_adv: batadv0: Adding interface: vxlan0 [ 203.864104][ T7738] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.889937][ T7738] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 204.016516][ T792] gp8psk: usb in 128 operation failed. [ 204.567862][ T792] gp8psk: usb in 146 operation failed. [ 204.574697][ T792] gp8psk: failed to get FW version [ 204.592542][ T7743] 0: reclassify loop, rule prio 0, protocol 800 [ 204.785022][ T792] gp8psk: FPGA Version = 191 [ 204.902512][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 205.055118][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.078593][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.110157][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 205.121491][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 205.141130][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 205.162687][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.173912][ T10] usb 3-1: Product: syz [ 205.178458][ T10] usb 3-1: Manufacturer: syz [ 205.184163][ T10] usb 3-1: SerialNumber: syz [ 205.193853][ T10] usb 3-1: config 0 descriptor?? [ 205.205151][ T10] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 205.213665][ T5933] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 205.215634][ T10] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 205.413262][ T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 205.511888][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 205.616361][ T5933] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 205.627350][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.639038][ T5933] usb 2-1: Product: syz [ 205.643389][ T5933] usb 2-1: Manufacturer: syz [ 205.648226][ T5933] usb 2-1: SerialNumber: syz [ 205.665895][ T10] usb 3-1: USB disconnect, device number 15 [ 205.675431][ T792] gp8psk: usb in 138 operation failed. [ 205.680919][ T792] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 205.685038][ T10] garmin_gps 3-1:0.0: device disconnected [ 205.692070][ T5933] usb 2-1: config 0 descriptor?? [ 205.733604][ T792] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 205.756618][ T792] usb 5-1: USB disconnect, device number 16 [ 205.934432][ T5933] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 008 [ 206.110832][ T7769] netlink: 'syz.4.535': attribute type 2 has an invalid length. [ 206.148620][ T7769] lo speed is unknown, defaulting to 1000 [ 206.371192][ T7772] overlayfs: missing 'lowerdir' [ 206.490069][ T7777] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.500101][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.515526][ T7777] vlan2: entered promiscuous mode [ 206.527704][ T7777] vlan2: entered allmulticast mode [ 206.540142][ T7777] hsr_slave_1: entered allmulticast mode [ 206.569635][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 206.714044][ T7780] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 206.796231][ T7782] loop9: detected capacity change from 0 to 7 [ 206.809968][ T7782] Dev loop9: unable to read RDB block 7 [ 206.816348][ T7782] loop9: unable to read partition table [ 206.818053][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 206.825695][ T7782] loop9: partition table beyond EOD, truncated [ 206.837372][ T7782] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 208.403590][ T7755] i2c i2c-1: failure writing data [ 209.064946][ T30] audit: type=1400 audit(1765486602.478:393): avc: denied { append } for pid=7813 comm="syz.3.548" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.102645][ T7814] loop5: detected capacity change from 0 to 7 [ 209.135090][ T5937] usb 2-1: USB disconnect, device number 8 [ 209.164910][ T5811] Dev loop5: unable to read RDB block 7 [ 209.195147][ T5811] loop5: unable to read partition table [ 209.225891][ T5811] loop5: partition table beyond EOD, truncated [ 209.292962][ T7814] Dev loop5: unable to read RDB block 7 [ 209.312449][ T7814] loop5: unable to read partition table [ 209.319864][ T7814] loop5: partition table beyond EOD, truncated [ 209.333945][ T7814] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 209.449497][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.552'. [ 209.566654][ T7827] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 210.076255][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.093346][ T7834] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 211.033234][ T7842] netlink: 'syz.0.557': attribute type 30 has an invalid length. [ 211.203624][ T5924] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 211.436112][ T5924] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 211.585160][ T5924] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 211.752971][ T5924] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 211.868070][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.110632][ T7843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.299449][ T7848] netlink: 64 bytes leftover after parsing attributes in process `syz.2.560'. [ 212.308389][ T7848] netlink: 64 bytes leftover after parsing attributes in process `syz.2.560'. [ 212.319957][ T30] audit: type=1400 audit(1765486605.728:394): avc: denied { block_suspend } for pid=7847 comm="syz.2.560" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.428150][ T5924] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 213.468484][ T5924] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input22 [ 213.500055][ T7860] netlink: 'syz.2.562': attribute type 21 has an invalid length. [ 213.508958][ T7860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.562'. [ 213.534787][ T30] audit: type=1400 audit(1765486606.948:395): avc: denied { read } for pid=5170 comm="acpid" name="mouse1" dev="devtmpfs" ino=3180 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.569107][ T5924] usb 2-1: USB disconnect, device number 9 [ 213.569147][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 213.635504][ T30] audit: type=1400 audit(1765486606.948:396): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3180 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.717506][ T30] audit: type=1400 audit(1765486606.948:397): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3180 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.317447][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.323834][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.515284][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 319.763466][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 319.770438][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7863 P5809/1:b..l P7836/1:b..l P7846/1:b..l [ 319.781584][ C0] rcu: (detected by 0, t=10502 jiffies, g=20181, q=366 ncpus=2) [ 319.789320][ C0] task:syz.0.559 state:R running task stack:25960 pid:7846 tgid:7845 ppid:5808 task_flags:0x400140 flags:0x00080001 [ 319.803467][ C0] Call Trace: [ 319.806751][ C0] [ 319.809674][ C0] ? __schedule+0x10b9/0x6150 [ 319.814354][ C0] __schedule+0x1139/0x6150 [ 319.818871][ C0] ? __pfx___schedule+0x10/0x10 [ 319.823727][ C0] ? mark_held_locks+0x49/0x80 [ 319.828496][ C0] preempt_schedule_irq+0x51/0x90 [ 319.833513][ C0] irqentry_exit+0x1d8/0x8c0 [ 319.838115][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.844196][ C0] RIP: 0010:lock_is_held_type+0x107/0x150 [ 319.849924][ C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 5c 10 3b 08 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 2c 03 00 45 31 ed eb [ 319.869521][ C0] RSP: 0018:ffffc9000bcf74b0 EFLAGS: 00000292 [ 319.875582][ C0] RAX: 0000000000000046 RBX: ffff88802c3fb018 RCX: 0000000000000001 [ 319.883544][ C0] RDX: 0000000000000000 RSI: ffffffff8daa563c RDI: ffffffff8bf2a580 [ 319.891502][ C0] RBP: ffffffff8e3c9620 R08: 0000000000000005 R09: 0000000000000000 [ 319.899461][ C0] R10: 0000000000000000 R11: ffff88802c3faff0 R12: ffff88802c3fa4c0 [ 319.907425][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000001 [ 319.915408][ C0] xas_start+0x477/0x790 [ 319.919652][ C0] xas_load+0x22/0x5b0 [ 319.923720][ C0] filemap_get_entry+0x109/0x3b0 [ 319.928650][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 319.934111][ C0] shmem_get_folio_gfp+0x221/0x1610 [ 319.939314][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 319.944957][ C0] ? filemap_map_pages+0x12dd/0x1e00 [ 319.950260][ C0] shmem_fault+0x1fe/0xa00 [ 319.954697][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 319.959648][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 319.965129][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 319.970581][ C0] __do_fault+0x10d/0x490 [ 319.974906][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 319.980363][ C0] do_fault+0xae4/0x1ad0 [ 319.984598][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 319.990095][ C0] __handle_mm_fault+0x1919/0x2bb0 [ 319.995210][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 320.000665][ C0] ? __pte_offset_map_lock+0x174/0x310 [ 320.006119][ C0] ? find_held_lock+0x2b/0x80 [ 320.010812][ C0] ? follow_page_pte+0x5cf/0x1390 [ 320.015838][ C0] handle_mm_fault+0x3fe/0xad0 [ 320.020603][ C0] __get_user_pages+0x54e/0x3590 [ 320.025546][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 320.030922][ C0] populate_vma_page_range+0x267/0x3f0 [ 320.036420][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 320.042393][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 320.048194][ C0] ? do_mmap+0x69c/0x1210 [ 320.052526][ C0] __mm_populate+0x1d8/0x380 [ 320.057116][ C0] ? __pfx___mm_populate+0x10/0x10 [ 320.062226][ C0] ? up_write+0x282/0x4e0 [ 320.066551][ C0] vm_mmap_pgoff+0x37f/0x470 [ 320.071137][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 320.076248][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 320.081184][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 320.086125][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 320.090798][ C0] ? xfd_validate_state+0x61/0x180 [ 320.095905][ C0] __x64_sys_mmap+0x125/0x190 [ 320.100578][ C0] do_syscall_64+0xcd/0xf80 [ 320.105077][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.110960][ C0] RIP: 0033:0x7f4554b8f749 [ 320.115365][ C0] RSP: 002b:00007f4555a50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 320.123781][ C0] RAX: ffffffffffffffda RBX: 00007f4554de5fa0 RCX: 00007f4554b8f749 [ 320.131762][ C0] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 320.139735][ C0] RBP: 00007f4554c13f91 R08: ffffffffffffffff R09: 0000000000000000 [ 320.147697][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 320.155657][ C0] R13: 00007f4554de6038 R14: 00007f4554de5fa0 R15: 00007ffdfd1a10a8 [ 320.163639][ C0] [ 320.166652][ C0] task:syz.1.556 state:R running task stack:26824 pid:7836 tgid:7836 ppid:5812 task_flags:0x40044c flags:0x00080002 [ 320.180219][ C0] Call Trace: [ 320.183485][ C0] [ 320.186408][ C0] ? __schedule+0x10b9/0x6150 [ 320.191094][ C0] __schedule+0x1139/0x6150 [ 320.195595][ C0] ? unwind_next_frame+0x3fe/0x20a0 [ 320.200814][ C0] ? __pfx___schedule+0x10/0x10 [ 320.205667][ C0] ? mark_held_locks+0x49/0x80 [ 320.210430][ C0] preempt_schedule_irq+0x51/0x90 [ 320.215445][ C0] irqentry_exit+0x1d8/0x8c0 [ 320.220031][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.226003][ C0] RIP: 0010:lock_acquire+0x4e/0x330 [ 320.231195][ C0] Code: 48 8b 05 dd 36 18 12 48 89 44 24 30 31 c0 66 90 65 8b 05 f9 36 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 82 83 ee 0e <0f> 82 74 02 00 00 8b 35 1a b4 ee 0e 85 f6 0f 85 8d 00 00 00 48 8b [ 320.250794][ C0] RSP: 0018:ffffc9000eb3f198 EFLAGS: 00000297 [ 320.256870][ C0] RAX: 0000000000000000 RBX: ffffffff8e3c9620 RCX: 0000000000000002 [ 320.264831][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3c9620 [ 320.272808][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 320.280789][ C0] R10: 0000000000000002 R11: 00000000000a776d R12: 0000000000000000 [ 320.288843][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.296825][ C0] ? find_held_lock+0x2b/0x80 [ 320.301511][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 320.306709][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 320.312855][ C0] unwind_next_frame+0xd1/0x20a0 [ 320.317798][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 320.322903][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.329054][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 320.335200][ C0] arch_stack_walk+0x94/0x100 [ 320.339878][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.346029][ C0] stack_trace_save+0x8e/0xc0 [ 320.350717][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 320.356117][ C0] ? __lock_acquire+0x436/0x2890 [ 320.361050][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 320.366855][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.372046][ C0] save_stack+0x160/0x1f0 [ 320.376375][ C0] ? __pfx_save_stack+0x10/0x10 [ 320.381218][ C0] ? free_unref_folios+0xa22/0x1610 [ 320.386407][ C0] ? folios_put_refs+0x4be/0x750 [ 320.391336][ C0] ? free_pages_and_swap_cache+0x3f0/0x4a0 [ 320.397137][ C0] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 320.403293][ C0] ? tlb_finish_mmu+0x168/0x7c0 [ 320.408138][ C0] ? exit_mmap+0x3f9/0xb60 [ 320.412547][ C0] ? __mmput+0x12a/0x410 [ 320.416786][ C0] ? mmput+0x62/0x70 [ 320.420676][ C0] ? do_exit+0x7d7/0x2bd0 [ 320.424996][ C0] ? do_group_exit+0xd3/0x2a0 [ 320.429664][ C0] ? get_signal+0x2671/0x26d0 [ 320.434339][ C0] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 320.440053][ C0] ? irqentry_exit+0x38a/0x8c0 [ 320.444809][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.450955][ C0] ? page_ext_put+0x3e/0xd0 [ 320.455458][ C0] __reset_page_owner+0x84/0x1a0 [ 320.460393][ C0] free_unref_folios+0xa22/0x1610 [ 320.465415][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 320.471224][ C0] folios_put_refs+0x4be/0x750 [ 320.475988][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 320.481275][ C0] free_pages_and_swap_cache+0x3f0/0x4a0 [ 320.486901][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 320.493082][ C0] ? __pfx___might_resched+0x10/0x10 [ 320.498362][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 320.504343][ C0] tlb_finish_mmu+0x168/0x7c0 [ 320.509024][ C0] exit_mmap+0x3f9/0xb60 [ 320.513261][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 320.518039][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 320.523402][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.528607][ C0] __mmput+0x12a/0x410 [ 320.532673][ C0] mmput+0x62/0x70 [ 320.536389][ C0] do_exit+0x7d7/0x2bd0 [ 320.540539][ C0] ? __lock_acquire+0x436/0x2890 [ 320.545475][ C0] ? __pfx_do_exit+0x10/0x10 [ 320.550059][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 320.555077][ C0] ? find_held_lock+0x2b/0x80 [ 320.559755][ C0] do_group_exit+0xd3/0x2a0 [ 320.564253][ C0] get_signal+0x2671/0x26d0 [ 320.568754][ C0] ? finish_task_switch.isra.0+0x207/0xbd0 [ 320.574557][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.579752][ C0] ? rcu_is_watching+0x12/0xc0 [ 320.584510][ C0] ? __pfx_get_signal+0x10/0x10 [ 320.589362][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 320.594907][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 320.601082][ C0] irqentry_exit+0x38a/0x8c0 [ 320.605695][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.611686][ C0] RIP: 0033:0x7ffac0068314 [ 320.616105][ C0] RSP: 002b:00007ffe9cf80770 EFLAGS: 00000287 [ 320.622168][ C0] RAX: 00007ffabec90f40 RBX: 00007ffabec909f0 RCX: ffffffff826a87c8 [ 320.630130][ C0] RDX: ffffffff826a87c8 RSI: ffffffff826a87c8 RDI: 00007ffabec90fd8 [ 320.638092][ C0] RBP: 00007ffabec90928 R08: 00007ffabec90c78 R09: 00007ffac03d2000 [ 320.646055][ C0] R10: 00007ffabebf9008 R11: 00000000000000ff R12: 00007ffabec90920 [ 320.654012][ C0] R13: 0000000000000017 R14: ffffffffffffffff R15: 00007ffabebf9008 [ 320.661978][ C0] ? __kernfs_remove+0x2a8/0x920 [ 320.666913][ C0] ? __kernfs_remove+0x2a8/0x920 [ 320.671842][ C0] ? __kernfs_remove+0x2a8/0x920 [ 320.676779][ C0] [ 320.679788][ C0] task:syz-executor state:R running task stack:23656 pid:5809 tgid:5809 ppid:5806 task_flags:0x400140 flags:0x00080000 [ 320.693264][ C0] Call Trace: [ 320.696552][ C0] [ 320.699491][ C0] ? __schedule+0x10b9/0x6150 [ 320.704170][ C0] __schedule+0x1139/0x6150 [ 320.708705][ C0] ? __pfx___schedule+0x10/0x10 [ 320.713556][ C0] ? mark_held_locks+0x49/0x80 [ 320.718320][ C0] preempt_schedule_irq+0x51/0x90 [ 320.723337][ C0] irqentry_exit+0x1d8/0x8c0 [ 320.727924][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.733904][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 320.739101][ C0] Code: 36 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 82 83 ee 0e 0f 82 74 02 00 00 8b 35 1a b4 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 99 36 18 12 0f 85 ad 02 00 00 48 83 c4 [ 320.758797][ C0] RSP: 0018:ffffc900034c7558 EFLAGS: 00000206 [ 320.764877][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 000000002d7dfedc [ 320.772933][ C0] RDX: 0000000000000000 RSI: ffffffff8daa563c RDI: ffffffff8bf2a580 [ 320.780899][ C0] RBP: 0000000000000002 R08: 000000003a9e7578 R09: 0000000083a9e757 [ 320.788870][ C0] R10: 0000000000000002 R11: ffff888079188b30 R12: 0000000000000000 [ 320.796832][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.804824][ C0] page_ext_get+0x36/0x1a0 [ 320.809258][ C0] ? page_ext_get+0x25/0x1a0 [ 320.813868][ C0] __reset_page_owner+0x2b/0x1a0 [ 320.818810][ C0] free_unref_folios+0xa22/0x1610 [ 320.823843][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 320.829651][ C0] folios_put_refs+0x4be/0x750 [ 320.834411][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 320.839687][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 320.846010][ C0] shmem_undo_range+0x58f/0x1140 [ 320.850944][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 320.856347][ C0] ? mark_held_locks+0x49/0x80 [ 320.861103][ C0] ? finish_task_switch.isra.0+0x207/0xbd0 [ 320.866915][ C0] shmem_evict_inode+0x39e/0xbe0 [ 320.871852][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 320.877572][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 320.883021][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 320.889084][ C0] ? find_held_lock+0x2b/0x80 [ 320.893764][ C0] ? evict+0x37e/0xad0 [ 320.897841][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 320.903292][ C0] evict+0x3c2/0xad0 [ 320.907214][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 320.912580][ C0] ? __pfx_evict+0x10/0x10 [ 320.916992][ C0] ? iput.part.0+0x619/0x1190 [ 320.921665][ C0] iput.part.0+0x621/0x1190 [ 320.926168][ C0] iput+0x35/0x40 [ 320.929795][ C0] do_unlinkat+0x3d2/0x660 [ 320.934213][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 320.939161][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 320.944527][ C0] __x64_sys_unlink+0xc5/0x110 [ 320.949285][ C0] do_syscall_64+0xcd/0xf80 [ 320.953784][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.959667][ C0] RIP: 0033:0x7fecf998ecf7 [ 320.964073][ C0] RSP: 002b:00007fffdea9e0b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 320.972562][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fecf998ecf7 [ 320.980527][ C0] RDX: 00007fffdea9e0e0 RSI: 00007fffdea9e170 RDI: 00007fffdea9e170 [ 320.988488][ C0] RBP: 00007fffdea9e170 R08: 0000000000000000 R09: 0000000000000000 [ 320.996450][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fffdea9f200 [ 321.004410][ C0] R13: 00007fecf9a13d7d R14: 00000000000337a5 R15: 00007fffdea9f240 [ 321.012388][ C0] [ 321.015399][ C0] task:syz.0.559 state:R running task stack:26824 pid:7863 tgid:7845 ppid:5808 task_flags:0x400140 flags:0x00080000 [ 321.028878][ C0] Call Trace: [ 321.032149][ C0] [ 321.035070][ C0] ? rcu_is_watching+0x12/0xc0 [ 321.039844][ C0] ? trace_sched_exit_tp+0xd1/0x110 [ 321.045052][ C0] ? __schedule+0x10b9/0x6150 [ 321.049848][ C0] ? __schedule+0x114c/0x6150 [ 321.054548][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 321.059300][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.064499][ C0] ? __lock_acquire+0x436/0x2890 [ 321.069432][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 321.074196][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.079388][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 321.084146][ C0] ? lock_acquire+0x179/0x330 [ 321.088821][ C0] ? bpf_get_current_ancestor_cgroup_id+0x1f0/0x480 [ 321.095412][ C0] ? lock_is_held_type+0xb0/0x150 [ 321.100430][ C0] ? bpf_get_current_ancestor_cgroup_id+0x3a/0x480 [ 321.106940][ C0] ? bpf_get_current_ancestor_cgroup_id+0x1fa/0x480 [ 321.113527][ C0] ? __asan_memset+0x23/0x50 [ 321.118107][ C0] ? bpf_prog_2a80ded90d5f4b4b+0x41/0x4c [ 321.123752][ C0] ? bpf_prog_test_run_flow_dissector+0x438/0x980 [ 321.130201][ C0] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 321.136972][ C0] ? find_held_lock+0x2b/0x80 [ 321.141652][ C0] ? __fget_files+0x204/0x3c0 [ 321.146331][ C0] ? __fget_files+0x20e/0x3c0 [ 321.151001][ C0] ? __might_fault+0xc0/0x190 [ 321.155672][ C0] ? fput+0x70/0xf0 [ 321.159476][ C0] ? __bpf_prog_get+0x97/0x2a0 [ 321.164229][ C0] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 321.170987][ C0] ? __sys_bpf+0x1035/0x4980 [ 321.175586][ C0] ? futex_private_hash_put+0x160/0x1b0 [ 321.181156][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 321.185938][ C0] ? __pfx_futex_wait+0x10/0x10 [ 321.190788][ C0] ? percpu_counter_add_batch+0xca/0x200 [ 321.196468][ C0] ? errseq_sample+0x53/0x70 [ 321.201088][ C0] ? do_futex+0x122/0x350 [ 321.205442][ C0] ? __sys_socket+0xac/0x260 [ 321.210031][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 321.215316][ C0] ? xfd_validate_state+0x61/0x180 [ 321.220416][ C0] ? __pfx_ksys_write+0x10/0x10 [ 321.225265][ C0] ? __x64_sys_bpf+0x78/0xc0 [ 321.229856][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.235045][ C0] ? do_syscall_64+0xcd/0xf80 [ 321.239725][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.245826][ C0] [ 321.248849][ C0] rcu: rcu_preempt kthread starved for 10409 jiffies! g20181 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 321.260031][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 321.269987][ C0] rcu: RCU grace-period kthread stack dump: [ 321.275859][ C0] task:rcu_preempt state:R running task stack:28320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 321.289338][ C0] Call Trace: [ 321.292618][ C0] [ 321.295540][ C0] ? __schedule+0x10b9/0x6150 [ 321.300222][ C0] __schedule+0x1139/0x6150 [ 321.304742][ C0] ? __pfx___schedule+0x10/0x10 [ 321.309588][ C0] ? find_held_lock+0x2b/0x80 [ 321.314266][ C0] ? schedule+0x2d7/0x3a0 [ 321.318595][ C0] schedule+0xe7/0x3a0 [ 321.322664][ C0] schedule_timeout+0x123/0x290 [ 321.327511][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 321.332878][ C0] ? __pfx_process_timeout+0x10/0x10 [ 321.338160][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 321.343963][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 321.349416][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 321.354180][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 321.359465][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.364656][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 321.369584][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 321.374434][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 321.380265][ C0] rcu_gp_kthread+0x26d/0x380 [ 321.384937][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 321.390126][ C0] ? rcu_is_watching+0x12/0xc0 [ 321.394879][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.400087][ C0] ? __kthread_parkme+0x19e/0x250 [ 321.405100][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 321.410291][ C0] kthread+0x3c5/0x780 [ 321.414358][ C0] ? __pfx_kthread+0x10/0x10 [ 321.418941][ C0] ? rcu_is_watching+0x12/0xc0 [ 321.423692][ C0] ? __pfx_kthread+0x10/0x10 [ 321.428276][ C0] ret_from_fork+0x983/0xb10 [ 321.432861][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 321.437963][ C0] ? __switch_to+0x7af/0x10d0 [ 321.442653][ C0] ? __pfx_kthread+0x10/0x10 [ 321.447238][ C0] ret_from_fork_asm+0x1a/0x30 [ 321.452012][ C0] [ 321.455019][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 321.461331][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 321.470254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.480301][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 321.485926][ C0] Code: 36 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 e9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 321.505523][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 321.511580][ C0] RAX: 0000000000c3a5dd RBX: 0000000000000000 RCX: ffffffff8b7776d9 [ 321.519539][ C0] RDX: 0000000000000000 RSI: ffffffff8dacb6cd RDI: ffffffff8bf2a580 [ 321.527502][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 321.535459][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 321.543509][ C0] R13: ffffffff8e097b40 R14: ffffffff90887cd0 R15: 0000000000000000 [ 321.551466][ C0] FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 321.560386][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.566961][ C0] CR2: 0000555568bea5c8 CR3: 000000007c6df000 CR4: 00000000003526f0 [ 321.574926][ C0] Call Trace: [ 321.578198][ C0] [ 321.581117][ C0] default_idle+0x13/0x20 [ 321.585438][ C0] default_idle_call+0x6c/0xb0 [ 321.590192][ C0] do_idle+0x38d/0x510 [ 321.594263][ C0] ? __pfx_do_idle+0x10/0x10 [ 321.598854][ C0] cpu_startup_entry+0x4f/0x60 [ 321.603617][ C0] rest_init+0x16b/0x2b0 [ 321.607850][ C0] ? acpi_subsystem_init+0x133/0x180 [ 321.613128][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 321.618666][ C0] start_kernel+0x3ef/0x4d0 [ 321.623163][ C0] x86_64_start_reservations+0x18/0x30 [ 321.628612][ C0] x86_64_start_kernel+0x130/0x190 [ 321.633717][ C0] common_startup_64+0x13e/0x148 [ 321.638661][ C0] [ 322.143987][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.150294][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.557591][ T30] audit: type=1400 audit(1765486715.968:398): avc: denied { relabelfrom } for pid=7869 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 325.243820][ T5185] udevd[5185]: worker [5811] /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input22/mouse1 is taking a long time