last executing test programs: 14.712978073s ago: executing program 4 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5e3c}}, 0x40) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r4, &(0x7f0000000300)={0x2, 0x2, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) 14.610155245s ago: executing program 0 (id=1524): creat(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c00000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x40, 0x4040800}}], 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r1, @ANYBLOB="000000000001000000d08c8ed1000000003541350000", @ANYRES32=0x0, @ANYRES32], 0x50) 12.789552335s ago: executing program 1 (id=1528): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000bf030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11.790657382s ago: executing program 1 (id=1529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xd, &(0x7f00000002c0)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000300)) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r4, 0x4, 0x2) r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x5a, &(0x7f0000000040)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r6}, 0x18) io_uring_enter(r3, 0x66a8, 0x4000, 0xf, 0x0, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0205647, &(0x7f0000000940)={0xf010003, @sliced={0x0, [0x80, 0x2, 0x5780, 0x4, 0x8, 0x9, 0x3, 0x4, 0x80, 0x1, 0x0, 0x36, 0x8, 0xbd, 0x7c0b, 0xa4d9, 0x0, 0x8, 0x400, 0x200, 0xff, 0xe, 0x1, 0x1057, 0x6, 0x1, 0x5, 0x9, 0x6ca, 0x8, 0x8, 0x8, 0x4, 0x8454, 0x9, 0x2, 0x4, 0x4, 0x401, 0xa, 0x8, 0x5, 0x3, 0x5, 0x6, 0x3, 0x3000, 0xfc4], 0x2}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000010000000000300000a20000000020a010300000000005203000000ffff0900010073797a310000000014000000efecbb94cf5190c290351100010000000000000000000000000a"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x240000c4) 11.759954862s ago: executing program 4 (id=1530): syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0xa) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1810141000000000100fffa0000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x12) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x8010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000380)="ca091cc2e088", 0xffe3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@netfilter={0x0, 0x0, 0x4, 0x1}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 11.507330695s ago: executing program 0 (id=1531): timerfd_create(0x8, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="a2ea563040d8dcf2e367a9951ed9fe70203fca5a5d17581c8b3f2909559afacc366390ff3447c1f6d1b29ad6e589e9011c612f7b039cb25abd6adc6c970c0cd38e1284fc5765004c45e308a5179ed9762d6a77625cfe36104aae262e3b0e9c4ac18a34508577b184c0d188a6b829cb2a25f4dd659bd738d1878016b21d4a02f25776955e5fa48c1eb38a9f6729fa91"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x5c}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1409, 0x1, 0x0, 0x0, "", [{{0x4, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0xa, 0x33, 'wg0\x00'}}]}, 0x38}}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x800003, 0x60000, 0x0, 0x800, 0x7, 0x0}) 10.889447286s ago: executing program 0 (id=1534): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='g'], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x60000094) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cpu.max.burst\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x5) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x26}, 0x0, "c97cbd0dd8d8951e89617a86745693cd935b25ef6e17af527b727ed8f0695ae4", 0x0, 0x0, 0xfffffffa, 0x7f}, 0x3c) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7.935176376s ago: executing program 4 (id=1537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0x3c1c, 0xc000, 0x3, 0x38}) r2 = syz_io_uring_setup(0x1029, &(0x7f0000000440)={0x0, 0xffffffff, 0x2, 0x0, 0x108000}, &(0x7f0000000100), &(0x7f0000ffe000)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r2, 0x14, &(0x7f00000003c0), 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000180), 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) 7.599827595s ago: executing program 0 (id=1539): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x40077, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r6, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r1, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 7.587228414s ago: executing program 1 (id=1540): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000bf030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.752098315s ago: executing program 1 (id=1543): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) accept$unix(r4, 0x0, &(0x7f0000000300)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x2c044010) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r9, &(0x7f0000000180)="282fa8c2", 0x4, 0x85}]) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0100001a00130700000000fcdbdf2520010000000000000000000000000001200100000000000000000000000000010000fffc4e210018020000203b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r11 = socket$netlink(0x10, 0x3, 0x1) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010425bd7000ffdbdf25000000009518715df9ac47d442c60f8b9e338d0a14156b2482b860eab38afcff94b31014d40774b46aeb6e11edc91ef7b9ac187861a2ee3500b5ebc61f8bdca1323d158a62f69ddc4a0cb4323812ac2d59b35b36fd4ab64a5188e570361a6fdabc230de42fbecf4c93af76271a32ce9d41e866770152886dbdcfea7d278f8675a9410d4d941f2dc2d571d2d1f5c399ffb0b7e37b73b0ad76f9eddd484fa87290392779d2309f2adbbf40b72f27140d46186e783deeff9d4d9c8db5566dc75d880139840383ddf4c809bcd860ef01d02ccc5eebf93380f0c75a4486", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a05002100050000001400030064766d72703000"/36], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 5.603257108s ago: executing program 3 (id=1544): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) close(r1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$packet(0x11, 0x3, 0x300) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 5.201763428s ago: executing program 0 (id=1545): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', r5, 0x700, 0x40, 0x8, 0x0, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0xfb, 0x1, 0x3, [{@remote, 0x2}, {@loopback, 0x101}, {@empty, 0x400}]}]}}}}}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r8, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) 4.703647988s ago: executing program 3 (id=1546): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4004000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.700897193s ago: executing program 4 (id=1547): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x22000085) r0 = socket$inet6(0xa, 0x3, 0x3c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000400)={0x0, @bt={0xfffffffc, 0x100, 0x0, 0x3, 0x0, 0x8, 0x10001, 0x3, 0xe, 0x9, 0x5, 0xfff, 0xc1c5, 0xffffffff, 0x14, 0x14, {0x2, 0x80000000}, 0xba, 0x6}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_vs_stats\x00') read$eventfd(r4, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x108) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x40000080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000130000000030a03000000000000000000030000010900030073797a30000000000900010073797a30000000000400040714000000110001"], 0xa0}}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 4.28998017s ago: executing program 3 (id=1548): syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') gettid() timer_settime(0x0, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006210600903900001000"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0xb, 0xa, 0x80, 0x0, 0x2b}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x6, 0x4, 0x800000000001}, {0x5, 0xffffffffffffffff, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x210000, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000400)={r6, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x4}, 0x90) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) 4.238656579s ago: executing program 4 (id=1549): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='g'], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x60000094) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cpu.max.burst\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x5) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x26}, 0x0, "c97cbd0dd8d8951e89617a86745693cd935b25ef6e17af527b727ed8f0695ae4", 0x0, 0x0, 0xfffffffa, 0x7f}, 0x3c) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.431078972s ago: executing program 3 (id=1550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)={[], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) 3.163467463s ago: executing program 1 (id=1551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) sendfile(r1, r1, 0x0, 0xb) clock_settime(0xfffffffc, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f0000000100)='fusectl\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) munlockall() fcntl$lock(r3, 0x25, &(0x7f0000000240)={0x2, 0x0, 0x7fffffffffffffff, 0x9}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) socket$inet(0x10, 0x3, 0x7a5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026400"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 3.024632599s ago: executing program 2 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='ext4_allocate_inode\x00', r5}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x1f, &(0x7f0000003480)={0x0, 0x0, 0x4, 0x0, 0x0}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) getsockopt$packet_buf(r8, 0x107, 0x12, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, r8, 0x2a22000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.762548959s ago: executing program 2 (id=1554): timerfd_create(0x8, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="a2ea563040d8dcf2e367a9951ed9fe70203fca5a5d17581c8b3f2909559afacc366390ff3447c1f6d1b29ad6e589e9011c612f7b039cb25abd6adc6c970c0cd38e1284fc5765004c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={r2, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x5c}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1409, 0x1, 0x0, 0x0, "", [{{0x4, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0xa, 0x33, 'wg0\x00'}}]}, 0x38}}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x800003, 0x60000, 0x0, 0x800, 0x7, 0x0}) 1.273788295s ago: executing program 2 (id=1555): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 1.232738392s ago: executing program 3 (id=1556): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffffffffbffc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/169, 0xa9) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r8, 0x0, &(0x7f0000000500)=""/120}, 0x20) 1.177573815s ago: executing program 2 (id=1557): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000580)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') socket$packet(0x11, 0x2, 0x300) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x10000, 0x9, 0x8, 0xfffffbf9, 0xfffffffc, 0x40000000, 0x800000, 0x100100, 0x2, 0x1, 0x1, 0xfffffffe, 0x404, 0xf, 0xfffffffc, 0x0, 0x3, 0x40000003, 0x89, 0xfffffff7, 0x0, 0x20001e52, 0x400000b, 0xfff, 0x3a, 0x7fffffff, 0x7, 0x8000000, 0xfffffff8]}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x12, r1, 0x37085000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0xc000) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) bind$can_j1939(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 643.790314ms ago: executing program 2 (id=1558): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4004000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 637.691074ms ago: executing program 3 (id=1559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffffffffbffc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/169, 0xa9) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r8, 0x0, &(0x7f0000000500)=""/120}, 0x20) 617.350129ms ago: executing program 4 (id=1560): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$msr(r0, &(0x7f0000000180)=""/100, 0x64) 616.121391ms ago: executing program 2 (id=1561): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) socket$can_j1939(0x1d, 0x2, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x40010, 0xffffffffffffffff, 0x9eab4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) 431.922811ms ago: executing program 0 (id=1562): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r6, 0x3, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(r3, r4) 0s ago: executing program 1 (id=1563): memfd_create(&(0x7f0000002b80)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x3) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r1 = socket(0x1e, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f00000016c0)=""/204, 0xcc}, {&(0x7f00000017c0)=""/241, 0xf1}, {&(0x7f00000018c0)=""/182, 0xb6}, {&(0x7f0000001980)=""/226, 0xe2}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002a80)=""/193, 0xc1}, 0x3}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x1, 0x400000, 0xfffffffd, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c051}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r7 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r7}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) kernel console output (not intermixed with test programs): ][ T5825] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 370.872260][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.825'. [ 371.775357][ T9239] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 372.701650][ T5938] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 372.967963][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 373.055404][ T5938] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.061157][ T9261] bridge0: entered promiscuous mode [ 373.101562][ T9261] bridge0: left promiscuous mode [ 373.106689][ T5938] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.120533][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 373.135133][ T5938] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 373.185593][ T5938] usb 1-1: Product: syz [ 373.206483][ T5938] usb 1-1: Manufacturer: syz [ 373.239234][ T5938] hub 1-1:4.0: USB hub found [ 373.441044][ T5938] hub 1-1:4.0: 2 ports detected [ 374.064285][ T30] audit: type=1400 audit(1765202228.072:667): avc: denied { connect } for pid=9254 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.167967][ T30] audit: type=1400 audit(1765202228.112:668): avc: denied { create } for pid=9277 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.250855][ T30] audit: type=1400 audit(1765202228.112:669): avc: denied { setopt } for pid=9277 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.328275][ T30] audit: type=1400 audit(1765202228.122:670): avc: denied { connect } for pid=9277 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 374.386463][ T30] audit: type=1400 audit(1765202228.152:671): avc: denied { ioctl } for pid=9254 comm="syz.0.835" path="socket:[23696]" dev="sockfs" ino=23696 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.462564][ T9283] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 375.153546][ T5938] hub 1-1:4.0: hub_ext_port_status failed (err = -32) [ 375.401184][ T6078] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 375.537124][ T5886] usb 1-1: USB disconnect, device number 13 [ 376.092325][ T6078] usb 2-1: Using ep0 maxpacket: 8 [ 376.105309][ T6078] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 376.115299][ T6078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.264915][ T6078] pvrusb2: Hardware description: Terratec Grabster AV400 [ 376.330598][ T6078] pvrusb2: ********** [ 376.352460][ T6078] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 376.396019][ T6078] pvrusb2: Important functionality might not be entirely working. [ 376.691382][ T9308] bridge0: entered promiscuous mode [ 376.703409][ T9308] bridge0: left promiscuous mode [ 377.066385][ T6078] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 377.105629][ T6078] pvrusb2: ********** [ 377.114847][ T2337] pvrusb2: Invalid write control endpoint [ 377.298724][ T2337] pvrusb2: Invalid write control endpoint [ 377.317411][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 377.329172][ T5938] usb 2-1: USB disconnect, device number 20 [ 377.791818][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 377.811470][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 377.855517][ T2337] pvrusb2: Device being rendered inoperable [ 377.881682][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 377.909466][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 377.940743][ T2337] pvrusb2: Attached sub-driver cx25840 [ 377.956474][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 378.003422][ T9318] trusted_key: encrypted_key: insufficient parameters specified [ 378.059361][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.117015][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.182998][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 378.423557][ T9316] netlink: 36 bytes leftover after parsing attributes in process `syz.3.854'. [ 378.438128][ T30] audit: type=1400 audit(1765202232.462:672): avc: denied { lock } for pid=9315 comm="syz.3.854" path="socket:[24636]" dev="sockfs" ino=24636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 382.056185][ T30] audit: type=1400 audit(1765202236.072:673): avc: denied { ioctl } for pid=9354 comm="syz.1.865" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 382.238221][ T30] audit: type=1400 audit(1765202236.192:674): avc: denied { connect } for pid=9354 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 382.283685][ T30] audit: type=1400 audit(1765202236.242:675): avc: denied { read } for pid=9354 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 382.565598][ T30] audit: type=1400 audit(1765202236.592:676): avc: denied { lock } for pid=9359 comm="syz.2.868" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 384.270854][ T9374] netlink: set zone limit has 4 unknown bytes [ 385.054911][ T9400] random: crng reseeded on system resumption [ 385.792117][ T9404] misc userio: Invalid payload size [ 386.379580][ T9409] Restarting kernel threads ... [ 386.388201][ T9409] Done restarting kernel threads. [ 386.511430][ T30] audit: type=1400 audit(1765202240.532:677): avc: denied { sqpoll } for pid=9398 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 388.451342][ T9432] rdma_rxe: rxe_newlink: failed to add syz_tun [ 389.881309][ T30] audit: type=1400 audit(1765202243.532:678): avc: denied { write } for pid=9439 comm="syz.0.892" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 390.201332][ T30] audit: type=1326 audit(1765202244.202:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 390.225734][ T30] audit: type=1326 audit(1765202244.202:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 390.278386][ T30] audit: type=1326 audit(1765202244.212:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f7a58df90 code=0x7ffc0000 [ 391.458032][ T30] audit: type=1326 audit(1765202244.212:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 391.481565][ T30] audit: type=1326 audit(1765202244.212:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 391.793426][ T30] audit: type=1326 audit(1765202244.212:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 391.908230][ T30] audit: type=1326 audit(1765202244.282:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 392.031372][ T30] audit: type=1326 audit(1765202244.282:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 392.113011][ T30] audit: type=1326 audit(1765202244.282:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f7a5c2005 code=0x7ffc0000 [ 395.055478][ T9501] random: crng reseeded on system resumption [ 395.391364][ T9504] Restarting kernel threads ... [ 395.518456][ T9504] Done restarting kernel threads. [ 396.542543][ T9514] netlink: 96 bytes leftover after parsing attributes in process `syz.3.909'. [ 398.003419][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.916'. [ 398.270610][ T9538] random: crng reseeded on system resumption [ 398.392555][ T9533] netlink: 96 bytes leftover after parsing attributes in process `syz.0.911'. [ 398.762589][ T9545] Restarting kernel threads ... [ 398.771664][ T9545] Done restarting kernel threads. [ 401.969602][ T9578] ip6gretap0: entered promiscuous mode [ 401.975256][ T9578] vlan2: entered promiscuous mode [ 402.304440][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 402.304457][ T30] audit: type=1400 audit(1765202256.332:702): avc: denied { setopt } for pid=9559 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 402.334902][ T9581] netlink: 'syz.2.923': attribute type 8 has an invalid length. [ 402.359920][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 402.407145][ T9581] netlink: 'syz.2.923': attribute type 8 has an invalid length. [ 402.442318][ T190] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.544497][ T190] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.554864][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 402.566075][ T190] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.582586][ T190] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.216746][ T9589] netlink: 96 bytes leftover after parsing attributes in process `syz.0.926'. [ 404.026580][ T30] audit: type=1400 audit(1765202258.052:703): avc: denied { read } for pid=9595 comm="syz.2.934" name="file0" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 404.074781][ T9599] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 404.077855][ T30] audit: type=1400 audit(1765202258.052:704): avc: denied { open } for pid=9595 comm="syz.2.934" path="/194/file0" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 404.161559][ T30] audit: type=1400 audit(1765202258.082:705): avc: denied { ioctl } for pid=9595 comm="syz.2.934" path="/194/file0" dev="tmpfs" ino=1027 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 404.245865][ T30] audit: type=1326 audit(1765202258.232:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 404.273943][ T30] audit: type=1326 audit(1765202258.232:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 404.302299][ T30] audit: type=1326 audit(1765202258.232:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 404.327401][ T30] audit: type=1326 audit(1765202258.232:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe326d8df90 code=0x7ffc0000 [ 404.354483][ T30] audit: type=1326 audit(1765202258.242:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 404.462473][ T9605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.935'. [ 404.475191][ T30] audit: type=1326 audit(1765202258.242:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 404.511172][ T6078] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 404.661166][ T6078] usb 4-1: Using ep0 maxpacket: 8 [ 404.667884][ T6078] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 404.752259][ T6078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.853355][ T9614] SQUASHFS error: Failed to read block 0x0: -5 [ 404.859798][ T9614] unable to read squashfs_super_block [ 405.279900][ T6078] pvrusb2: Hardware description: Terratec Grabster AV400 [ 405.304406][ T6078] pvrusb2: ********** [ 405.340344][ T6078] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 405.859743][ T6078] pvrusb2: Important functionality might not be entirely working. [ 405.965586][ T6078] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 406.125489][ T6078] pvrusb2: ********** [ 406.177128][ T2337] pvrusb2: Invalid write control endpoint [ 406.461824][ T2337] pvrusb2: Invalid write control endpoint [ 406.467639][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 406.570268][ T6078] usb 4-1: USB disconnect, device number 15 [ 406.587902][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 406.662752][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 406.682923][ T2337] pvrusb2: Device being rendered inoperable [ 406.689142][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 406.698804][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 406.712867][ T2337] pvrusb2: Attached sub-driver cx25840 [ 406.723191][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 406.735303][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 408.861452][ T9654] SQUASHFS error: Failed to read block 0x0: -5 [ 408.867623][ T9654] unable to read squashfs_super_block [ 409.370996][ T9660] IPVS: sh: FWM 3 0x00000003 - no destination available [ 409.418611][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 409.418710][ T9649] IPVS: sh: FWM 3 0x00000003 - no destination available [ 409.658761][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 409.899664][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 409.899905][ T30] audit: type=1326 audit(1765202263.922:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 410.476842][ T30] audit: type=1326 audit(1765202264.022:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 410.682048][ T30] audit: type=1326 audit(1765202264.112:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 410.884641][ T30] audit: type=1326 audit(1765202264.162:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 411.421852][ T30] audit: type=1326 audit(1765202264.182:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe326d8df90 code=0x7ffc0000 [ 411.446107][ T30] audit: type=1326 audit(1765202264.182:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 411.607908][ T30] audit: type=1326 audit(1765202264.272:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 411.672759][ T30] audit: type=1326 audit(1765202264.392:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 411.965297][ T9692] comedi comedi1: adq12b: I/O port conflict (0xffffffffffffffff,16) [ 411.966331][ T30] audit: type=1326 audit(1765202264.392:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe326d8f749 code=0x7ffc0000 [ 412.058871][ T30] audit: type=1326 audit(1765202264.442:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe326dc2005 code=0x7ffc0000 [ 412.371166][ T6078] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 412.426237][ T9700] bridge0: entered promiscuous mode [ 412.432658][ T9700] bridge0: left promiscuous mode [ 412.522610][ T6078] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 412.530009][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 412.548589][ T6078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.614923][ T6078] usb 1-1: config 0 descriptor?? [ 412.902607][ T5878] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 412.964308][ T6078] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 413.322152][ T6078] [drm:udl_init] *ERROR* Selecting channel failed [ 413.369336][ T5878] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 413.421956][ T6078] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 413.428668][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.473956][ T6078] [drm] Initialized udl on minor 2 [ 413.489848][ T5878] usb 4-1: Product: syz [ 413.513002][ T5878] usb 4-1: Manufacturer: syz [ 413.520483][ T6078] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 413.571660][ T5878] usb 4-1: SerialNumber: syz [ 413.592503][ T6078] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 413.706200][ T5878] usb 4-1: config 0 descriptor?? [ 413.876709][ T5878] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 016 [ 413.917776][ T9722] netlink: 'syz.1.969': attribute type 10 has an invalid length. [ 413.927040][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 413.939467][ T6078] usb 1-1: USB disconnect, device number 14 [ 413.951982][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 414.332860][ T9706] SELinux: syz.3.965 (9706) set checkreqprot to 1. This is no longer supported. [ 414.365999][ T5878] (null): failure reading functionality [ 414.371817][ T6078] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 414.394367][ T5878] i2c i2c-1: failure reading functionality [ 414.410726][ T5878] i2c i2c-1: connected i2c-tiny-usb device [ 414.454378][ T5878] usb 4-1: USB disconnect, device number 16 [ 414.551169][ T6078] usb 2-1: Using ep0 maxpacket: 8 [ 414.560222][ T6078] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 414.569866][ T9729] rdma_rxe: rxe_newlink: failed to add syz_tun [ 414.577829][ T6078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.608218][ T6078] pvrusb2: Hardware description: Terratec Grabster AV400 [ 414.615472][ T6078] pvrusb2: ********** [ 414.619592][ T6078] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 414.647018][ T6078] pvrusb2: Important functionality might not be entirely working. [ 414.669488][ T6078] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 414.701602][ T6078] pvrusb2: ********** [ 414.805273][ T2337] pvrusb2: Invalid write control endpoint [ 415.711011][ T6077] usb 2-1: USB disconnect, device number 21 [ 415.740117][ T2337] pvrusb2: Invalid write control endpoint [ 415.746339][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 415.755880][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 415.766720][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 415.785408][ T2337] pvrusb2: Device being rendered inoperable [ 415.794276][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 415.801817][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 415.809976][ T2337] pvrusb2: Attached sub-driver cx25840 [ 415.822210][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 415.833499][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 415.833514][ T30] audit: type=1326 audit(1765202269.862:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9737 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 415.871851][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 415.911184][ T30] audit: type=1326 audit(1765202269.862:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9737 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 415.971253][ T30] audit: type=1326 audit(1765202269.862:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9737 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 416.113601][ T30] audit: type=1326 audit(1765202269.862:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9737 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 416.994989][ T9751] bridge0: entered promiscuous mode [ 417.000409][ T9751] bridge0: left promiscuous mode [ 417.182504][ T6077] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 417.558387][ T6077] usb 4-1: Using ep0 maxpacket: 16 [ 417.586203][ T6077] usb 4-1: config 1 has an invalid interface number: 57 but max is 0 [ 417.596694][ T6077] usb 4-1: config 1 has no interface number 0 [ 417.610330][ T6077] usb 4-1: config 1 interface 57 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 417.626362][ T6077] usb 4-1: config 1 interface 57 has no altsetting 0 [ 417.641733][ T6077] usb 4-1: New USB device found, idVendor=045e, idProduct=0439, bcdDevice=72.31 [ 417.656699][ T6077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.678044][ T6077] usb 4-1: Product: syz [ 417.686474][ T6077] usb 4-1: Manufacturer: syz [ 417.698176][ T6077] usb 4-1: SerialNumber: syz [ 418.165810][ T9750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 418.822364][ T6078] usb 4-1: USB disconnect, device number 17 [ 419.203422][ T30] audit: type=1400 audit(1765202273.232:751): avc: denied { create } for pid=9773 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 419.276024][ T30] audit: type=1400 audit(1765202273.302:752): avc: denied { bind } for pid=9773 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 419.410364][ T30] audit: type=1326 audit(1765202273.432:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 419.517600][ T30] audit: type=1326 audit(1765202273.432:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 419.720372][ T30] audit: type=1326 audit(1765202273.432:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 420.232892][ T30] audit: type=1326 audit(1765202273.432:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 421.111161][ T30] audit: type=1326 audit(1765202273.432:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 421.331194][ T30] audit: type=1400 audit(1765202275.352:758): avc: denied { ioctl } for pid=9800 comm="syz.3.991" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 422.966649][ T9817] SQUASHFS error: Failed to read block 0x0: -5 [ 422.973296][ T9817] unable to read squashfs_super_block [ 423.393638][ T9818] bridge0: entered promiscuous mode [ 423.403588][ T9818] bridge0: left promiscuous mode [ 423.539479][ T5938] Process accounting resumed [ 423.554519][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.997'. [ 423.651211][ T6077] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 423.911674][ T6077] usb 1-1: Using ep0 maxpacket: 16 [ 424.000349][ T6077] usb 1-1: config 1 has an invalid interface number: 57 but max is 0 [ 424.015008][ T6077] usb 1-1: config 1 has no interface number 0 [ 424.024844][ T6077] usb 1-1: config 1 interface 57 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 424.041341][ T6077] usb 1-1: config 1 interface 57 has no altsetting 0 [ 424.061671][ T6077] usb 1-1: New USB device found, idVendor=045e, idProduct=0439, bcdDevice=72.31 [ 424.082091][ T6077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.091816][ T6077] usb 1-1: Product: syz [ 424.096976][ T6077] usb 1-1: Manufacturer: syz [ 424.103085][ T6077] usb 1-1: SerialNumber: syz [ 424.328878][ T9820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 424.546934][ T6077] usb 1-1: USB disconnect, device number 15 [ 424.920128][ T9846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1004'. [ 426.370111][ T9863] bridge0: entered promiscuous mode [ 426.376900][ T9863] bridge0: left promiscuous mode [ 426.928336][ T9870] SQUASHFS error: Failed to read block 0x0: -5 [ 426.934611][ T9870] unable to read squashfs_super_block [ 427.069749][ T5825] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 430.278792][ T9898] vlan2: entered promiscuous mode [ 432.253156][ T30] audit: type=1400 audit(1765202286.272:759): avc: denied { write } for pid=9908 comm="syz.4.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 433.315639][ T9921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1021'. [ 433.506067][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 433.647723][ T9932] vlan2: entered promiscuous mode [ 433.791380][ T5938] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 434.162754][ T5938] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 434.181614][ T5938] usb 2-1: config 0 has no interface number 0 [ 434.197530][ T5938] usb 2-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 434.224994][ T5938] usb 2-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 434.253927][ T5938] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 434.278570][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.319659][ T5938] usb 2-1: config 0 descriptor?? [ 434.358374][ T5938] port100 2-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 435.287565][ T6078] usb 2-1: USB disconnect, device number 22 [ 436.131824][ T9955] Bluetooth: MGMT ver 1.23 [ 436.153294][ T30] audit: type=1400 audit(1765202290.182:760): avc: denied { read } for pid=9953 comm="syz.4.1036" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 436.243139][ T30] audit: type=1400 audit(1765202290.202:761): avc: denied { open } for pid=9953 comm="syz.4.1036" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 436.287676][ T30] audit: type=1400 audit(1765202290.202:762): avc: denied { ioctl } for pid=9953 comm="syz.4.1036" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 436.641152][ T5938] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 437.135727][ T5938] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 437.144874][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.196867][ T5938] usb 1-1: config 0 descriptor?? [ 437.426356][ T5938] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 437.637890][ T5938] [drm:udl_init] *ERROR* Selecting channel failed [ 437.657609][ T5938] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 437.795705][ T5938] [drm] Initialized udl on minor 2 [ 437.818994][ T5938] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 437.851680][ T5938] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 437.912574][ T6077] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 437.923854][ T5938] usb 1-1: USB disconnect, device number 16 [ 437.937941][ T6077] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 439.495306][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.501718][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.817816][T10018] bridge0: entered promiscuous mode [ 440.851699][T10018] bridge0: left promiscuous mode [ 440.989335][ T6077] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 441.171178][ T6077] usb 1-1: device descriptor read/64, error -71 [ 441.464885][ T6077] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 441.909289][ T6077] usb 1-1: device descriptor read/64, error -71 [ 442.081484][ T6077] usb usb1-port1: attempt power cycle [ 442.298940][T10042] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 442.426839][ T30] audit: type=1400 audit(1765202296.452:763): avc: denied { bind } for pid=10044 comm="syz.3.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 442.453113][ T6077] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 442.463861][ T30] audit: type=1400 audit(1765202296.482:764): avc: denied { node_bind } for pid=10044 comm="syz.3.1066" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 442.493271][ T6077] usb 1-1: device descriptor read/8, error -71 [ 442.535925][T10045] XFS (nullb0): Invalid superblock magic number [ 442.641170][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 442.848297][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 443.082739][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 443.100914][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.111793][ T6077] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 443.126343][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 443.142294][ T30] audit: type=1400 audit(1765202297.162:765): avc: denied { setopt } for pid=10053 comm="syz.2.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 443.166014][ T24] pvrusb2: ********** [ 443.170012][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 443.186871][ T6077] usb 1-1: device descriptor read/8, error -71 [ 443.193162][ T24] pvrusb2: Important functionality might not be entirely working. [ 443.205329][ T30] audit: type=1400 audit(1765202297.162:766): avc: denied { bind } for pid=10053 comm="syz.2.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 443.227711][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 443.241720][ T24] pvrusb2: ********** [ 443.311433][ T6077] usb usb1-port1: unable to enumerate USB device [ 443.337460][ T2337] pvrusb2: Invalid write control endpoint [ 443.518260][ T2337] pvrusb2: Invalid write control endpoint [ 443.532109][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 443.576773][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 443.603319][T10061] SQUASHFS error: Failed to read block 0x0: -5 [ 443.609702][T10061] unable to read squashfs_super_block [ 443.676821][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 443.767834][ T24] usb 2-1: USB disconnect, device number 23 [ 443.862377][ T2337] pvrusb2: Device being rendered inoperable [ 443.938800][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 444.000681][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 444.016719][ T30] audit: type=1400 audit(1765202298.042:767): avc: denied { sys_module } for pid=10055 comm="syz.2.1068" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 444.041969][ T2337] pvrusb2: Attached sub-driver cx25840 [ 444.047450][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 444.058069][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 444.145176][T10071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1071'. [ 444.170373][T10071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 444.898699][T10085] bridge0: entered promiscuous mode [ 444.977883][T10086] bridge0: left promiscuous mode [ 445.015240][T10087] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1075'. [ 445.331504][ T6077] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 446.301351][ T6077] usb 2-1: Using ep0 maxpacket: 16 [ 446.314014][ T6077] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 446.341171][ T6077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.379744][ T6077] usb 2-1: Product: syz [ 446.384141][ T6077] usb 2-1: Manufacturer: syz [ 446.388721][ T6077] usb 2-1: SerialNumber: syz [ 446.424812][ T6077] usb 2-1: config 0 descriptor?? [ 446.442766][ T6077] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 446.939438][ T6077] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 447.040637][ T6077] usb 2-1: USB disconnect, device number 24 [ 447.052497][ T6077] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 447.075605][ T6077] visor 2-1:0.0: device disconnected [ 449.698647][T10127] rdma_rxe: rxe_newlink: failed to add syz_tun [ 449.986620][T10134] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 450.029304][T10134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.085123][T10135] bond2: (slave geneve0): making interface the new active one [ 450.094202][T10135] bond2: (slave geneve0): Enslaving as an active interface with an up link [ 451.487041][ T6077] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 451.643598][ T6077] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.670072][ T6077] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.712681][ T6077] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 451.738704][ T6077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.812645][ T6077] usb 1-1: SerialNumber: syz [ 451.834271][ T6077] usb 1-1: 0:2 : does not exist [ 452.341604][T10172] bridge0: entered promiscuous mode [ 452.350475][T10172] bridge0: left promiscuous mode [ 452.506150][ T5878] usb 1-1: USB disconnect, device number 21 [ 453.453284][ T30] audit: type=1326 audit(1765202307.482:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c4b8f749 code=0x7ffc0000 [ 453.484754][ T30] audit: type=1326 audit(1765202307.482:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f07c4b8f749 code=0x7ffc0000 [ 453.756726][ T30] audit: type=1326 audit(1765202307.482:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c4b8f749 code=0x7ffc0000 [ 453.781943][ T30] audit: type=1326 audit(1765202307.482:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07c4b8df90 code=0x7ffc0000 [ 453.806460][ T30] audit: type=1326 audit(1765202307.482:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c4b8f749 code=0x7ffc0000 [ 453.848288][ T30] audit: type=1326 audit(1765202307.482:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f07c4b8f749 code=0x7ffc0000 [ 453.990324][ T30] audit: type=1326 audit(1765202307.872:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c4b8f749 code=0x7ffc0000 [ 454.133569][ T30] audit: type=1326 audit(1765202307.872:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c4b8f749 code=0x7ffc0000 [ 454.306991][ T30] audit: type=1326 audit(1765202307.872:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07c4bc2005 code=0x7ffc0000 [ 454.450854][ T30] audit: type=1326 audit(1765202308.082:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f07c4b8f749 code=0x7ffc0000 [ 455.873129][T10227] bridge0: entered promiscuous mode [ 455.879919][T10227] bridge0: left promiscuous mode [ 459.432027][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 459.432043][ T30] audit: type=1400 audit(1765202313.462:786): avc: denied { setopt } for pid=10262 comm="syz.2.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 460.442621][T10276] vlan2: entered promiscuous mode [ 462.329793][T10295] syz.3.1134 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 462.406949][T10297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1137'. [ 462.451773][T10299] comedi comedi1: rti802: I/O port conflict (0x4f27,4) [ 463.453470][T10315] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1144'. [ 463.519407][T10315] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1144'. [ 463.575539][T10316] batman_adv: batadv0: Adding interface: dummy0 [ 463.593516][T10316] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.681620][T10316] batman_adv: batadv0: Interface activated: dummy0 [ 463.772658][T10317] batadv0: mtu less than device minimum [ 463.793650][T10317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.805284][T10317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.816668][T10317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.828027][T10317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.838828][T10317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.849618][T10317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.860412][T10317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.871233][T10317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.882019][T10317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.015515][T10337] bridge0: entered promiscuous mode [ 465.350809][T10337] bridge0: left promiscuous mode [ 465.444753][ T30] audit: type=1400 audit(1765202319.472:787): avc: denied { getopt } for pid=10346 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 465.711221][ T5878] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 465.942477][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 466.574996][ T5878] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 466.767630][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.274676][ T5878] pvrusb2: Hardware description: Terratec Grabster AV400 [ 467.301138][ T5878] pvrusb2: ********** [ 467.305152][ T5878] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 467.426545][ T5878] pvrusb2: Important functionality might not be entirely working. [ 467.442732][ T5878] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 467.535278][T10374] vlan2: entered promiscuous mode [ 467.556516][ T5878] pvrusb2: ********** [ 467.567570][ T2337] pvrusb2: Invalid write control endpoint [ 467.871974][ T5878] usb 5-1: USB disconnect, device number 10 [ 468.036061][ T2337] pvrusb2: Invalid write control endpoint [ 468.043180][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 468.054039][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 468.062641][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 468.075863][ T2337] pvrusb2: Device being rendered inoperable [ 468.082884][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 468.104811][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 468.128277][ T2337] pvrusb2: Attached sub-driver cx25840 [ 468.140219][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 468.166038][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 468.475832][T10385] bridge0: entered promiscuous mode [ 468.498196][T10385] bridge0: left promiscuous mode [ 468.584348][T10387] SQUASHFS error: Failed to read block 0x0: -5 [ 468.590756][T10387] unable to read squashfs_super_block [ 469.208425][ T30] audit: type=1400 audit(1765202323.232:788): avc: denied { read } for pid=10390 comm="syz.0.1168" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 469.871947][ T6077] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 470.306124][ T6077] usb 2-1: Using ep0 maxpacket: 32 [ 470.368330][ T6077] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 470.377877][ T6077] usb 2-1: config 0 has no interface number 0 [ 470.384311][ T6077] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 470.396626][ T6077] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 470.407814][ T6077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.417716][ T6077] usb 2-1: Product: syz [ 470.422097][ T6077] usb 2-1: Manufacturer: syz [ 470.427183][ T6077] usb 2-1: SerialNumber: syz [ 470.490513][ T6077] usb 2-1: config 0 descriptor?? [ 470.541425][T10394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 470.581235][ T30] audit: type=1400 audit(1765202323.232:789): avc: denied { open } for pid=10390 comm="syz.0.1168" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 471.317322][T10394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 472.128480][ T6077] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 472.141039][ T6077] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 472.161568][ T6077] asix 2-1:0.188: probe with driver asix failed with error -61 [ 472.422934][T10417] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1174'. [ 473.501337][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 473.621356][ T6077] usb 2-1: USB disconnect, device number 25 [ 473.910501][T10438] SQUASHFS error: Failed to read block 0x0: -5 [ 473.916896][T10438] unable to read squashfs_super_block [ 474.136941][T10440] vlan2: entered promiscuous mode [ 474.200828][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 474.269070][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 474.282133][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.302231][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 474.309398][ T24] pvrusb2: ********** [ 474.313985][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 474.324498][ T24] pvrusb2: Important functionality might not be entirely working. [ 474.332708][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 474.345636][ T24] pvrusb2: ********** [ 474.458774][ T30] audit: type=1400 audit(1765202328.482:790): avc: denied { getopt } for pid=10443 comm="syz.0.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 474.513799][ T2337] pvrusb2: Invalid write control endpoint [ 474.638740][ T2337] pvrusb2: Invalid write control endpoint [ 474.647219][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 474.659736][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 474.667689][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 474.681883][ T2337] pvrusb2: Device being rendered inoperable [ 474.687850][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 474.720612][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 474.734257][ T6078] usb 5-1: USB disconnect, device number 11 [ 474.761820][ T2337] pvrusb2: Attached sub-driver cx25840 [ 474.780171][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 474.781718][T10448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1185'. [ 475.665852][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 479.066902][T10487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1197'. [ 479.681134][T10493] SQUASHFS error: Failed to read block 0x0: -5 [ 479.687532][T10493] unable to read squashfs_super_block [ 480.417305][T10503] vlan2: entered promiscuous mode [ 480.499498][T10505] SQUASHFS error: Failed to read block 0x0: -5 [ 480.505991][T10505] unable to read squashfs_super_block [ 480.994939][T10507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1202'. [ 481.584259][T10521] SQUASHFS error: Failed to read block 0x0: -5 [ 481.590660][T10521] unable to read squashfs_super_block [ 482.722581][T10535] rdma_rxe: rxe_newlink: failed to add syz_tun [ 483.481447][ T30] audit: type=1400 audit(1765202337.262:791): avc: denied { ioctl } for pid=10537 comm="syz.0.1208" path="socket:[29825]" dev="sockfs" ino=29825 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 483.525230][ T30] audit: type=1400 audit(1765202337.492:792): avc: denied { search } for pid=10540 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.641171][ T30] audit: type=1400 audit(1765202337.492:793): avc: denied { search } for pid=10540 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.771927][ T30] audit: type=1400 audit(1765202337.492:794): avc: denied { search } for pid=10540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.864424][ T30] audit: type=1400 audit(1765202337.492:795): avc: denied { search } for pid=10540 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.156336][T10553] random: crng reseeded on system resumption [ 484.238794][ T30] audit: type=1400 audit(1765202337.542:796): avc: denied { read open } for pid=10542 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.330960][ T30] audit: type=1400 audit(1765202337.542:797): avc: denied { getattr } for pid=10542 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.396415][T10560] Restarting kernel threads ... [ 484.416129][T10560] Done restarting kernel threads. [ 484.476677][ T30] audit: type=1400 audit(1765202337.542:798): avc: denied { getattr } for pid=10542 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 484.506233][ T30] audit: type=1400 audit(1765202337.752:799): avc: denied { read } for pid=10545 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 484.528792][ T30] audit: type=1400 audit(1765202337.752:800): avc: denied { open } for pid=10545 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 485.727944][T10576] syz.0.1216 (10576): drop_caches: 2 [ 487.042239][T10618] SQUASHFS error: Failed to read block 0x0: -5 [ 487.048495][T10618] unable to read squashfs_super_block [ 490.619237][T10636] SQUASHFS error: Failed to read block 0x0: -5 [ 490.625535][T10636] unable to read squashfs_super_block [ 490.676384][ T6077] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 490.695617][ T5938] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 490.861162][ T6077] usb 4-1: Using ep0 maxpacket: 16 [ 490.866321][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 490.874974][ T6077] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 490.887545][ T5938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.898626][ T5938] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 490.909804][ T6077] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 490.920147][ T6077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.931904][ T6077] usb 4-1: Product: syz [ 490.936356][ T6077] usb 4-1: Manufacturer: syz [ 490.941718][ T6077] usb 4-1: SerialNumber: syz [ 490.946805][ T5938] usb 3-1: New USB device found, idVendor=045e, idProduct=0439, bcdDevice=72.31 [ 490.956878][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.965426][ T6077] usb 4-1: config 0 descriptor?? [ 491.178424][ T6077] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 491.193850][ T5938] usb 3-1: Product: syz [ 491.199255][ T6077] usb 4-1: Detected FT232R [ 491.204020][ T5938] usb 3-1: Manufacturer: syz [ 491.208816][ T5938] usb 3-1: SerialNumber: syz [ 491.564606][T10624] binder: 10623:10624 ioctl c0306201 2000000003c0 returned -14 [ 491.614411][ T24] usb 3-1: USB disconnect, device number 11 [ 492.712830][T10624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.171599][T10624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.463814][T10626] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1229'. [ 493.614947][T10626] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 493.676837][T10626] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 496.215808][ T6077] ftdi_sio ttyUSB0: Unable to read latency timer: -110 [ 497.121554][ T6077] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 497.128882][ T6077] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 497.362147][ T6077] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 497.447866][T10678] SQUASHFS error: Failed to read block 0x0: -5 [ 497.483315][T10678] unable to read squashfs_super_block [ 497.780179][ T6077] usb 4-1: USB disconnect, device number 18 [ 497.812741][ T6077] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 497.831475][ T6077] ftdi_sio 4-1:0.0: device disconnected [ 498.831178][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 498.970085][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 498.970102][ T30] audit: type=1400 audit(1765202352.992:823): avc: denied { ioctl } for pid=10692 comm="syz.0.1248" path="socket:[30123]" dev="sockfs" ino=30123 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 499.231335][ T30] audit: type=1400 audit(1765202353.232:824): avc: denied { write } for pid=10692 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 499.396800][T10702] SQUASHFS error: Failed to read block 0x0: -5 [ 499.403065][T10702] unable to read squashfs_super_block [ 499.784195][ T30] audit: type=1400 audit(1765202353.422:825): avc: denied { mounton } for pid=10697 comm="syz.4.1250" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 499.874771][ T30] audit: type=1400 audit(1765202353.892:826): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.901370][ T30] audit: type=1400 audit(1765202353.892:827): avc: denied { open } for pid=5816 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.953616][ T30] audit: type=1400 audit(1765202353.892:828): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 500.151550][ T30] audit: type=1400 audit(1765202354.182:829): avc: denied { create } for pid=10703 comm="syz.2.1251" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 500.184120][ T30] audit: type=1400 audit(1765202354.212:830): avc: denied { read write } for pid=10703 comm="syz.2.1251" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 500.238232][ T30] audit: type=1400 audit(1765202354.232:831): avc: denied { open } for pid=10703 comm="syz.2.1251" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 500.313602][ T30] audit: type=1400 audit(1765202354.292:832): avc: denied { mounton } for pid=10703 comm="syz.2.1251" path="/263/file0" dev="tmpfs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 500.393229][T10706] syz1: rxe_newlink: already configured on syz_tun [ 501.286638][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.293117][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.815751][T10721] SQUASHFS error: Failed to read block 0x0: -5 [ 501.822138][T10721] unable to read squashfs_super_block [ 504.359519][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 504.359534][ T30] audit: type=1400 audit(1765202358.382:880): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 504.502760][ T30] audit: type=1400 audit(1765202358.532:881): avc: denied { read write } for pid=10745 comm="syz.3.1264" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 504.557249][ T30] audit: type=1400 audit(1765202358.532:882): avc: denied { open } for pid=10745 comm="syz.3.1264" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 504.623206][ T30] audit: type=1400 audit(1765202358.622:883): avc: denied { create } for pid=10751 comm="syz.4.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 504.974074][ T30] audit: type=1400 audit(1765202358.652:884): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 505.298528][ T30] audit: type=1400 audit(1765202358.722:885): avc: denied { create } for pid=10753 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 505.322235][T10765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10765 comm=syz.1.1266 [ 505.344189][ T30] audit: type=1400 audit(1765202358.762:886): avc: denied { create } for pid=10753 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 505.395525][ T30] audit: type=1400 audit(1765202358.792:887): avc: denied { bind } for pid=10753 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 505.430937][ T30] audit: type=1400 audit(1765202359.122:888): avc: denied { prog_run } for pid=10753 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 505.454511][T10766] qnx4: unable to read the superblock [ 505.479487][ T30] audit: type=1400 audit(1765202359.432:889): avc: denied { setopt } for pid=10763 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 506.484874][T10786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1273'. [ 508.452256][ T5959] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 508.919023][ T5959] usb 3-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config [ 508.938713][ T5959] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.029548][ T5959] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.063218][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.080407][ T5959] usb 3-1: SerialNumber: syz [ 509.107038][ T5959] usb 3-1: bad CDC descriptors [ 509.931164][ T5878] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 510.046870][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 510.046881][ T30] audit: type=1400 audit(1765202364.072:921): avc: denied { ioctl } for pid=10829 comm="syz.4.1289" path="socket:[30413]" dev="sockfs" ino=30413 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.079498][T10832] syzkaller0: entered promiscuous mode [ 510.087502][T10832] syzkaller0: entered allmulticast mode [ 510.124224][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.144531][ T5878] usb 2-1: config 0 has no interfaces? [ 510.152439][ T30] audit: type=1400 audit(1765202364.122:922): avc: denied { setopt } for pid=10829 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.231442][ T5878] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.250673][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.259559][T10837] tipc: Started in network mode [ 510.264729][T10837] tipc: Node identity eab2ef5c2b8d, cluster identity 4711 [ 510.272177][T10837] tipc: Enabled bearer , priority 0 [ 510.308715][ T5878] usb 2-1: Product: syz [ 510.329285][ T5878] usb 2-1: Manufacturer: syz [ 510.350293][ T5878] usb 2-1: SerialNumber: syz [ 510.369739][ T5878] usb 2-1: config 0 descriptor?? [ 510.478002][T10829] tipc: Resetting bearer [ 510.549768][T10829] tipc: Disabling bearer [ 510.599960][T10830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.643017][T10830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.654295][ T30] audit: type=1400 audit(1765202364.682:923): avc: denied { append } for pid=10840 comm="syz.3.1291" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 510.841182][ T30] audit: type=1400 audit(1765202364.722:924): avc: denied { read write } for pid=10840 comm="syz.3.1291" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 510.844066][ T5959] usb 2-1: USB disconnect, device number 26 [ 511.504746][ T30] audit: type=1400 audit(1765202364.722:925): avc: denied { open } for pid=10840 comm="syz.3.1291" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 512.426059][ T5878] usb 3-1: USB disconnect, device number 12 [ 512.940419][ T30] audit: type=1400 audit(1765202364.722:926): avc: denied { write } for pid=10828 comm="syz.1.1288" path="socket:[31263]" dev="sockfs" ino=31263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.000880][ T30] audit: type=1400 audit(1765202365.032:927): avc: denied { map } for pid=10840 comm="syz.3.1291" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 513.362055][ T6077] tipc: Node number set to 3242192732 [ 513.829388][ T30] audit: type=1400 audit(1765202367.852:928): avc: denied { ioctl } for pid=10849 comm="syz.3.1293" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30518 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 514.394761][ T30] audit: type=1400 audit(1765202368.422:929): avc: denied { write } for pid=10862 comm="syz.2.1298" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 514.730867][T10867] vlan2: entered promiscuous mode [ 515.606640][ T30] audit: type=1400 audit(1765202369.632:930): avc: denied { write } for pid=10872 comm="syz.1.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 515.715540][ T30] audit: type=1400 audit(1765202369.632:931): avc: denied { read } for pid=10872 comm="syz.1.1299" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 515.843434][ T30] audit: type=1400 audit(1765202369.632:932): avc: denied { ioctl } for pid=10872 comm="syz.1.1299" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 515.991677][ T30] audit: type=1400 audit(1765202369.672:933): avc: denied { append } for pid=10872 comm="syz.1.1299" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 516.063040][ T30] audit: type=1400 audit(1765202369.672:934): avc: denied { map } for pid=10872 comm="syz.1.1299" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 516.446774][ T30] audit: type=1400 audit(1765202369.672:935): avc: denied { write execute } for pid=10872 comm="syz.1.1299" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 516.621888][ T5938] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 516.638571][ T30] audit: type=1400 audit(1765202370.072:936): avc: denied { sqpoll } for pid=10873 comm="syz.0.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 516.971733][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 517.128330][ T30] audit: type=1400 audit(1765202370.582:937): avc: denied { ioctl } for pid=10892 comm="syz.1.1302" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x564b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 517.155764][ T30] audit: type=1400 audit(1765202370.582:938): avc: denied { create } for pid=10892 comm="syz.1.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 517.217478][ T5938] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 517.248031][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.279189][ T5938] usb 1-1: Product: syz [ 517.300444][ T5938] usb 1-1: Manufacturer: syz [ 517.324885][ T5938] usb 1-1: SerialNumber: syz [ 517.483935][ T5938] usb 1-1: config 0 descriptor?? [ 517.608559][ T30] audit: type=1400 audit(1765202371.632:939): avc: denied { bind } for pid=10922 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 517.706156][T10931] random: crng reseeded on system resumption [ 517.840961][ T5938] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 518.945218][ T5938] usb 1-1: reset high-speed USB device number 22 using dummy_hcd [ 519.485338][ T5938] usb 1-1: [UEAGLE-ATM] interface 1 not found [ 519.496158][ T5938] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 519.545568][T10941] Restarting kernel threads ... [ 519.578627][T10941] Done restarting kernel threads. [ 520.882397][ T5938] usb 1-1: USB disconnect, device number 22 [ 521.007908][T10969] vlan2: entered promiscuous mode [ 522.098645][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 522.180504][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 522.180520][ T30] audit: type=1400 audit(1765202376.202:953): avc: denied { sys_module } for pid=10972 comm="syz.0.1317" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 522.961154][ T5878] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 523.232650][ T5878] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 523.232676][ T5878] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 523.232691][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 523.232717][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 523.232732][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 523.234061][ T5878] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 523.234081][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 523.234092][ T5878] usb 1-1: Product: syz [ 523.234101][ T5878] usb 1-1: Manufacturer: syz [ 523.236349][ T5878] cdc_wdm 1-1:1.0: skipping garbage [ 523.236360][ T5878] cdc_wdm 1-1:1.0: skipping garbage [ 523.238190][ T5878] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 523.238202][ T5878] cdc_wdm 1-1:1.0: Unknown control protocol [ 523.842123][T10993] SQUASHFS error: Failed to read block 0x0: -5 [ 523.848472][T10993] unable to read squashfs_super_block [ 524.481123][ T5878] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 524.642487][ T5878] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 524.655828][ T5878] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 524.675109][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 524.770283][ T5878] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 524.784360][ T5878] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 524.797538][ T5878] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 524.809657][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 524.820914][ T5878] usb 3-1: Product: syz [ 524.827344][ T5878] usb 3-1: Manufacturer: syz [ 524.845567][ T5878] cdc_wdm 3-1:1.0: skipping garbage [ 524.850784][ T5878] cdc_wdm 3-1:1.0: skipping garbage [ 524.865885][ T5878] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 524.885031][ T5878] cdc_wdm 3-1:1.0: Unknown control protocol [ 525.653548][ T7499] usb 1-1: USB disconnect, device number 23 [ 526.144602][ T30] audit: type=1400 audit(1765202380.172:954): avc: denied { bind } for pid=11011 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.189119][ T30] audit: type=1400 audit(1765202380.172:955): avc: denied { setopt } for pid=11011 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.314292][ T30] audit: type=1400 audit(1765202380.172:956): avc: denied { accept } for pid=11011 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.478463][ T30] audit: type=1400 audit(1765202380.172:957): avc: denied { write } for pid=11011 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.559710][ T30] audit: type=1400 audit(1765202380.172:958): avc: denied { read } for pid=11011 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.608341][ T30] audit: type=1400 audit(1765202380.332:959): avc: denied { write } for pid=11015 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 526.654882][T11024] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1333'. [ 526.666075][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1333'. [ 526.675409][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1333'. [ 527.106255][T11025] SQUASHFS error: Failed to read block 0x0: -5 [ 527.112529][T11025] unable to read squashfs_super_block [ 527.136224][ T5878] usb 3-1: USB disconnect, device number 13 [ 527.200081][ T30] audit: type=1400 audit(1765202381.222:960): avc: denied { create } for pid=11033 comm="syz.4.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 527.372339][ T30] audit: type=1400 audit(1765202381.262:961): avc: denied { mount } for pid=11033 comm="syz.4.1334" name="/" dev="ramfs" ino=31783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 528.397826][ T30] audit: type=1400 audit(1765202382.422:962): avc: denied { unlink } for pid=11043 comm="syz.0.1337" name="#d" dev="tmpfs" ino=1346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 529.182304][ T30] audit: type=1400 audit(1765202383.142:963): avc: denied { read append } for pid=11048 comm="syz.3.1340" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 529.363281][T11050] syzkaller1: entered promiscuous mode [ 529.368958][T11050] syzkaller1: entered allmulticast mode [ 529.375454][ T30] audit: type=1400 audit(1765202383.302:964): avc: denied { read write } for pid=11048 comm="syz.3.1340" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 529.461833][ T30] audit: type=1400 audit(1765202383.302:965): avc: denied { open } for pid=11048 comm="syz.3.1340" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 529.515184][ T30] audit: type=1400 audit(1765202383.312:966): avc: denied { ioctl } for pid=11048 comm="syz.3.1340" path="/dev/sg0" dev="devtmpfs" ino=755 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 529.549517][ T30] audit: type=1400 audit(1765202383.392:967): avc: denied { ioctl } for pid=11049 comm="syz.2.1339" path="socket:[31571]" dev="sockfs" ino=31571 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 529.575793][ T30] audit: type=1400 audit(1765202383.492:968): avc: denied { execute } for pid=11049 comm="syz.2.1339" path="/278/cgroup.controllers" dev="tmpfs" ino=1468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 529.599892][ T30] audit: type=1400 audit(1765202383.492:969): avc: denied { setopt } for pid=11049 comm="syz.2.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 529.640449][T11055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 529.667283][T11055] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 529.696162][T11069] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1345'. [ 529.708116][T11069] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1345'. [ 529.718684][T11055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 529.727417][T11055] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 529.771240][T11055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 529.781334][T11055] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 529.798891][T11073] ALSA: mixer_oss: invalid OSS volume 'AL' [ 529.811998][T11055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 529.819089][T11055] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 529.832952][T11055] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 529.855213][T11055] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 530.014324][T11075] SQUASHFS error: Failed to read block 0x0: -5 [ 530.020685][T11075] unable to read squashfs_super_block [ 530.881104][ T7499] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 531.441773][ T7499] usb 5-1: Using ep0 maxpacket: 32 [ 531.456760][ T7499] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 531.491819][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 531.759849][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 531.821134][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 531.844105][ T7499] usb 5-1: config 0 has no interface number 0 [ 531.863786][ T7499] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 531.888479][T11089] evm: overlay not supported [ 531.901195][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 531.907236][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 531.908734][ T7499] usb 5-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 531.983370][ T7499] usb 5-1: Product: syz [ 532.003093][ T7499] usb 5-1: Manufacturer: syz [ 532.007738][ T7499] usb 5-1: SerialNumber: syz [ 532.024232][ T7499] usb 5-1: config 0 descriptor?? [ 532.262248][ T30] audit: type=1326 audit(1765202386.282:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 532.352647][ T7499] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 532.374938][ T30] audit: type=1326 audit(1765202386.282:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 532.377024][ T7499] usb 5-1: selecting invalid altsetting 1 [ 532.492564][ T30] audit: type=1326 audit(1765202386.292:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 532.517526][ T30] audit: type=1326 audit(1765202386.362:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 532.549168][ T30] audit: type=1326 audit(1765202386.362:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 532.675707][T11108] vlan2: entered promiscuous mode [ 533.095742][ T30] audit: type=1326 audit(1765202387.122:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 533.143135][ T30] audit: type=1326 audit(1765202387.122:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 533.167619][ T30] audit: type=1326 audit(1765202387.122:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2d38f749 code=0x7ffc0000 [ 533.240975][ T7499] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 533.477742][T11113] vlan2: entered promiscuous mode [ 533.582880][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 533.872675][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 533.891404][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 533.912784][ T7499] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 533.943601][ T7499] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 533.971478][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 533.979821][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 534.022999][ T7499] usb 5-1: media controller created [ 534.046618][ T7499] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 534.062332][ T30] audit: type=1400 audit(1765202388.082:978): avc: denied { append } for pid=11114 comm="syz.0.1356" name="pfkey" dev="proc" ino=4026533457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 534.169459][ T30] audit: type=1326 audit(1765202388.192:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11115 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a58f749 code=0x7ffc0000 [ 534.230067][ T7499] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 534.280060][ T7499] zl10353_read_register: readreg error (reg=127, ret==-71) [ 534.297830][ T7499] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 534.444338][ T7499] usb 5-1: USB disconnect, device number 12 [ 537.325949][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 537.325961][ T30] audit: type=1400 audit(1765202391.352:1000): avc: denied { write } for pid=11138 comm="syz.1.1361" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 537.422238][T11160] SQUASHFS error: Failed to read block 0x0: -5 [ 537.428588][T11160] unable to read squashfs_super_block [ 537.946425][ T30] audit: type=1400 audit(1765202391.962:1001): avc: denied { name_connect } for pid=11138 comm="syz.1.1361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 538.065593][ T30] audit: type=1400 audit(1765202392.082:1002): avc: denied { mount } for pid=11164 comm="syz.4.1366" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 538.162543][ T30] audit: type=1400 audit(1765202392.132:1003): avc: denied { read } for pid=11164 comm="syz.4.1366" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 538.346604][ T30] audit: type=1400 audit(1765202392.132:1004): avc: denied { open } for pid=11164 comm="syz.4.1366" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 538.496018][T11169] overlayfs: overlapping lowerdir path [ 538.527073][ T30] audit: type=1400 audit(1765202392.142:1005): avc: denied { ioctl } for pid=11164 comm="syz.4.1366" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 538.693182][ T30] audit: type=1400 audit(1765202392.542:1006): avc: denied { write } for pid=11164 comm="syz.4.1366" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 539.031029][ T30] audit: type=1400 audit(1765202392.592:1007): avc: denied { setopt } for pid=11138 comm="syz.1.1361" lport=40015 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 539.241198][ T30] audit: type=1400 audit(1765202392.782:1008): avc: denied { connect } for pid=11174 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 539.326147][ T30] audit: type=1400 audit(1765202392.792:1009): avc: denied { read } for pid=11174 comm="syz.2.1368" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 539.461451][ T6078] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 539.934772][ T6078] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 539.993467][ T6078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.309068][ T6078] usb 4-1: Product: syz [ 540.321248][ T6078] usb 4-1: Manufacturer: syz [ 540.342972][ T6078] usb 4-1: SerialNumber: syz [ 540.390960][ T6078] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 540.418507][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 541.220203][T11201] random: crng reseeded on system resumption [ 541.256512][T11202] bridge0: entered promiscuous mode [ 541.276859][T11202] bridge0: left promiscuous mode [ 541.553078][T11204] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1369'. [ 541.870490][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 541.927783][ T24] ath9k_htc: Failed to initialize the device [ 541.978825][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 545.427835][ T24] usb 4-1: USB disconnect, device number 19 [ 546.883643][T11238] SQUASHFS error: Failed to read block 0x0: -5 [ 546.889836][T11238] unable to read squashfs_super_block [ 548.029162][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 548.029178][ T30] audit: type=1400 audit(1765202402.042:1015): avc: denied { create } for pid=11247 comm="syz.3.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 548.234550][ T30] audit: type=1400 audit(1765202402.232:1016): avc: denied { accept } for pid=11247 comm="syz.3.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 548.487194][T11257] futex_wake_op: syz.0.1389 tries to shift op by -1; fix this program [ 549.342948][T11261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 549.363918][T11261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.369897][T11261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.411306][T11261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.417321][T11261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 550.316949][T11283] FAULT_INJECTION: forcing a failure. [ 550.316949][T11283] name failslab, interval 1, probability 0, space 0, times 0 [ 550.431944][T11283] CPU: 0 UID: 0 PID: 11283 Comm: syz.2.1394 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.431974][T11283] Tainted: [L]=SOFTLOCKUP [ 550.431980][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.431990][T11283] Call Trace: [ 550.431995][T11283] [ 550.432002][T11283] dump_stack_lvl+0x16c/0x1f0 [ 550.432033][T11283] should_fail_ex+0x512/0x640 [ 550.432052][T11283] ? __kmalloc_noprof+0xca/0x910 [ 550.432080][T11283] should_failslab+0xc2/0x120 [ 550.432102][T11283] __kmalloc_noprof+0xeb/0x910 [ 550.432126][T11283] ? __might_fault+0x13b/0x190 [ 550.432141][T11283] ? sk_prot_alloc+0x1a8/0x2a0 [ 550.432168][T11283] ? sk_prot_alloc+0x1a8/0x2a0 [ 550.432192][T11283] sk_prot_alloc+0x1a8/0x2a0 [ 550.432219][T11283] sk_alloc+0x36/0xe30 [ 550.432241][T11283] bpf_prog_test_run_skb+0x4cd/0x31a0 [ 550.432271][T11283] ? find_held_lock+0x2b/0x80 [ 550.432304][T11283] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 550.432331][T11283] ? fput+0x70/0xf0 [ 550.432357][T11283] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 550.432381][T11283] __sys_bpf+0x1035/0x4980 [ 550.432408][T11283] ? __pfx___sys_bpf+0x10/0x10 [ 550.432431][T11283] ? find_held_lock+0x2b/0x80 [ 550.432459][T11283] ? find_held_lock+0x2b/0x80 [ 550.432486][T11283] ? __mutex_unlock_slowpath+0x161/0x790 [ 550.432527][T11283] ? fput+0x70/0xf0 [ 550.432551][T11283] ? ksys_write+0x1ac/0x250 [ 550.432572][T11283] ? __pfx_ksys_write+0x10/0x10 [ 550.432598][T11283] __x64_sys_bpf+0x78/0xc0 [ 550.432621][T11283] ? lockdep_hardirqs_on+0x7c/0x110 [ 550.432654][T11283] do_syscall_64+0xcd/0xf80 [ 550.432680][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.432698][T11283] RIP: 0033:0x7f07c4b8f749 [ 550.432713][T11283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.432730][T11283] RSP: 002b:00007f07c596d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 550.432747][T11283] RAX: ffffffffffffffda RBX: 00007f07c4de5fa0 RCX: 00007f07c4b8f749 [ 550.432758][T11283] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 550.432769][T11283] RBP: 00007f07c596d090 R08: 0000000000000000 R09: 0000000000000000 [ 550.432779][T11283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.432788][T11283] R13: 00007f07c4de6038 R14: 00007f07c4de5fa0 R15: 00007ffd5a1620c8 [ 550.432812][T11283] [ 551.323818][ T30] audit: type=1400 audit(1765202405.352:1017): avc: denied { execute_no_trans } for pid=11278 comm="syz.1.1396" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 551.353442][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 551.605556][T11290] SQUASHFS error: Failed to read block 0x0: -5 [ 551.612145][T11290] unable to read squashfs_super_block [ 551.712964][T11292] sd 0:0:1:0: device reset [ 551.821202][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 551.829577][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 551.889818][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 551.896140][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 552.006202][ T30] audit: type=1400 audit(1765202406.032:1018): avc: denied { map } for pid=11289 comm="syz.2.1398" path="socket:[32126]" dev="sockfs" ino=32126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 552.111417][ T30] audit: type=1400 audit(1765202406.032:1019): avc: denied { read accept } for pid=11289 comm="syz.2.1398" path="socket:[32126]" dev="sockfs" ino=32126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 552.172786][ T30] audit: type=1400 audit(1765202406.202:1020): avc: denied { write } for pid=11298 comm="syz.3.1399" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 552.198096][T11300] netlink: 'syz.3.1399': attribute type 10 has an invalid length. [ 552.443025][T11303] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1398'. [ 552.970481][ T30] audit: type=1400 audit(1765202406.992:1021): avc: denied { nlmsg_write } for pid=11289 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 552.995297][T11307] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1398'. [ 553.147140][ T30] audit: type=1400 audit(1765202407.122:1022): avc: denied { connect } for pid=11289 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 553.289078][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 553.339395][ T30] audit: type=1400 audit(1765202407.122:1023): avc: denied { write } for pid=11289 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 553.601327][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 553.798681][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 553.807958][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.193930][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 554.264796][ T24] pvrusb2: ********** [ 554.268853][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 554.291801][ T24] pvrusb2: Important functionality might not be entirely working. [ 554.346025][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 555.021279][ T24] pvrusb2: ********** [ 555.401374][ T2337] pvrusb2: Invalid write control endpoint [ 555.501758][ T2337] pvrusb2: Invalid write control endpoint [ 555.512597][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 555.536345][ T7499] usb 4-1: USB disconnect, device number 20 [ 555.571197][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 555.583181][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 555.621112][ T2337] pvrusb2: Device being rendered inoperable [ 555.637182][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 555.657974][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 555.691481][ T2337] pvrusb2: Attached sub-driver cx25840 [ 555.696936][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 555.759342][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 556.556102][ T30] audit: type=1400 audit(1765202410.572:1024): avc: denied { create } for pid=11337 comm="syz.2.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 556.593612][ T30] audit: type=1400 audit(1765202410.572:1025): avc: denied { listen } for pid=11337 comm="syz.2.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 556.624217][ T30] audit: type=1400 audit(1765202410.572:1026): avc: denied { accept } for pid=11337 comm="syz.2.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 558.040821][T11356] netlink: 17780 bytes leftover after parsing attributes in process `syz.0.1415'. [ 558.209982][ T7499] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 558.403344][ T7499] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.421306][ T6078] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 558.421355][ T7499] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.452258][ T7499] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 558.516287][ T7499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 558.544480][ T7499] usb 3-1: SerialNumber: syz [ 558.623198][ T6078] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 558.642333][ T6078] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 558.789228][ T6078] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 558.814926][ T6078] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 558.846401][ T6078] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 558.972712][ T6078] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 558.982835][ T6078] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 558.994043][ T6078] usb 5-1: Product: syz [ 558.998836][ T6078] usb 5-1: Manufacturer: syz [ 559.187391][T11371] syz.3.1417 (11371): /proc/11360/oom_adj is deprecated, please use /proc/11360/oom_score_adj instead. [ 559.268609][T11372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11372 comm=syz.1.1419 [ 559.357170][ T30] audit: type=1400 audit(1765202413.382:1027): avc: denied { accept } for pid=11365 comm="syz.1.1419" lport=46464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 559.416987][ T6078] cdc_wdm 5-1:1.0: skipping garbage [ 559.422318][ T6078] cdc_wdm 5-1:1.0: skipping garbage [ 559.435973][ T6078] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 559.442314][ T6078] cdc_wdm 5-1:1.0: Unknown control protocol [ 559.698356][T11379] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1420'. [ 559.809802][T11379] netlink: 'syz.3.1420': attribute type 2 has an invalid length. [ 559.878453][T11383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1422'. [ 560.160608][ T30] audit: type=1400 audit(1765202414.182:1028): avc: denied { write } for pid=11389 comm="syz.1.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 560.261216][ T6078] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 560.285315][ T30] audit: type=1400 audit(1765202414.312:1029): avc: denied { append } for pid=11389 comm="syz.1.1425" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 560.444429][ T6078] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 560.456073][ T6078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.469911][ T6078] usb 1-1: Product: syz [ 560.474832][ T6078] usb 1-1: Manufacturer: syz [ 560.488351][ T6078] usb 1-1: SerialNumber: syz [ 560.507745][ T6078] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 560.522620][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 561.009517][ T7499] usb 3-1: 0:2 : does not exist [ 561.020444][ T7499] usb 3-1: unit 6 not found! [ 561.037008][ T7499] usb 3-1: USB disconnect, device number 14 [ 561.042289][ T30] audit: type=1400 audit(1765202415.072:1030): avc: denied { kexec_image_load } for pid=11397 comm="syz.3.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 561.080311][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 561.229903][T11402] random: crng reseeded on system resumption [ 561.244197][ T30] audit: type=1400 audit(1765202415.272:1031): avc: denied { create } for pid=11397 comm="syz.3.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 561.267555][ T30] audit: type=1400 audit(1765202415.292:1032): avc: denied { ioctl } for pid=11397 comm="syz.3.1428" path="socket:[33365]" dev="sockfs" ino=33365 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 561.338446][T11404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1427'. [ 561.816352][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 561.834455][ T24] ath9k_htc: Failed to initialize the device [ 561.843592][ T5938] usb 5-1: USB disconnect, device number 13 [ 561.865402][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 562.086578][ T7499] usb 1-1: USB disconnect, device number 24 [ 562.191777][T11416] SQUASHFS error: Failed to read block 0x0: -5 [ 562.200149][T11416] unable to read squashfs_super_block [ 562.331427][T11417] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.1431'. [ 562.374607][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.381226][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.844843][ T30] audit: type=1400 audit(1765202417.402:1033): avc: denied { watch } for pid=11428 comm="syz.0.1437" path="/272" dev="tmpfs" ino=1462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 563.867223][T11434] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 563.886807][ T30] audit: type=1400 audit(1765202417.402:1034): avc: denied { watch_sb watch_reads } for pid=11428 comm="syz.0.1437" path="/272" dev="tmpfs" ino=1462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 563.887840][T11434] IPVS: set_ctl: invalid protocol: 28719 99.47.115.121:29487 [ 563.920443][ T30] audit: type=1400 audit(1765202417.412:1035): avc: denied { watch_sb watch_reads } for pid=11428 comm="syz.0.1437" path="/272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 564.022988][T11440] bridge0: entered promiscuous mode [ 564.077193][T11440] bridge0: left promiscuous mode [ 564.118794][ T30] audit: type=1400 audit(1765202417.892:1036): avc: denied { getopt } for pid=11430 comm="syz.4.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 564.433428][ T30] audit: type=1400 audit(1765202418.462:1037): avc: denied { watch } for pid=11447 comm="syz.1.1442" path="/284" dev="tmpfs" ino=1528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 564.461338][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 564.683462][ T30] audit: type=1400 audit(1765202418.712:1038): avc: denied { read write } for pid=11453 comm="syz.3.1444" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 564.880691][ T30] audit: type=1400 audit(1765202418.712:1039): avc: denied { open } for pid=11453 comm="syz.3.1444" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 564.955002][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.966273][ T24] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 564.977166][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 565.220814][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 565.232072][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 565.259089][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 565.404744][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 565.418092][ T24] usb 5-1: Product: syz [ 565.422593][ T24] usb 5-1: Manufacturer: syz [ 565.435697][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 565.441267][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 565.457031][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 565.468236][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 565.527663][T11458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1445'. [ 565.528308][T11459] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1445'. [ 565.610393][ T30] audit: type=1400 audit(1765202419.632:1041): avc: denied { connect } for pid=11457 comm="syz.3.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.977510][ T30] audit: type=1400 audit(1765202419.632:1040): avc: denied { connect } for pid=11457 comm="syz.3.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 566.135857][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 566.341178][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 566.377772][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 566.404611][ T24] usb 4-1: config 4 interface 0 has no altsetting 0 [ 566.416210][ T24] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 566.425794][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.434122][ T24] usb 4-1: Product: syz [ 566.440561][ T24] usb 4-1: Manufacturer: syz [ 566.464404][ T24] usb 4-1: SerialNumber: syz [ 566.871993][ T24] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 567.001529][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 567.033389][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 567.040552][ T24] usb 4-1: media controller created [ 567.120046][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.533371][ T5959] usb 5-1: USB disconnect, device number 14 [ 567.565247][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 567.599995][ T30] audit: type=1400 audit(1765202421.622:1042): avc: denied { setopt } for pid=11482 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 567.622226][T11484] x_tables: duplicate underflow at hook 2 [ 567.690085][ T30] audit: type=1400 audit(1765202421.712:1043): avc: denied { create } for pid=11482 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 567.735005][ T30] audit: type=1400 audit(1765202421.742:1044): avc: denied { setopt } for pid=11482 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 567.801142][ T30] audit: type=1400 audit(1765202421.792:1045): avc: denied { ioctl } for pid=11482 comm="syz.1.1453" path="socket:[32555]" dev="sockfs" ino=32555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 567.828242][ T24] usb 4-1: USB disconnect, device number 21 [ 567.954704][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 568.038280][T11492] FAULT_INJECTION: forcing a failure. [ 568.038280][T11492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.051820][T11492] CPU: 1 UID: 0 PID: 11492 Comm: syz.0.1455 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.051846][T11492] Tainted: [L]=SOFTLOCKUP [ 568.051853][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.051864][T11492] Call Trace: [ 568.051870][T11492] [ 568.051876][T11492] dump_stack_lvl+0x16c/0x1f0 [ 568.051907][T11492] should_fail_ex+0x512/0x640 [ 568.051927][T11492] _copy_to_user+0x32/0xd0 [ 568.051944][T11492] simple_read_from_buffer+0xcb/0x170 [ 568.051965][T11492] proc_fail_nth_read+0x197/0x240 [ 568.051980][T11492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 568.051997][T11492] ? rw_verify_area+0xcf/0x6c0 [ 568.052012][T11492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 568.052027][T11492] vfs_read+0x1e4/0xcf0 [ 568.052044][T11492] ? __pfx___mutex_lock+0x10/0x10 [ 568.052069][T11492] ? __pfx_vfs_read+0x10/0x10 [ 568.052092][T11492] ? __fget_files+0x20e/0x3c0 [ 568.052110][T11492] ? lockdep_hardirqs_on+0x10/0x110 [ 568.052138][T11492] ksys_read+0x12a/0x250 [ 568.052154][T11492] ? __pfx_ksys_read+0x10/0x10 [ 568.052177][T11492] do_syscall_64+0xcd/0xf80 [ 568.052200][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.052217][T11492] RIP: 0033:0x7fe326d8e15c [ 568.052231][T11492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 568.052245][T11492] RSP: 002b:00007fe324f4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 568.052261][T11492] RAX: ffffffffffffffda RBX: 00007fe326fe6180 RCX: 00007fe326d8e15c [ 568.052270][T11492] RDX: 000000000000000f RSI: 00007fe324f4f0a0 RDI: 000000000000000a [ 568.052279][T11492] RBP: 00007fe324f4f090 R08: 0000000000000000 R09: 0000000000000000 [ 568.052287][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.052296][T11492] R13: 00007fe326fe6218 R14: 00007fe326fe6180 R15: 00007fff0799daa8 [ 568.052316][T11492] [ 568.065530][ T30] audit: type=1400 audit(1765202421.792:1046): avc: denied { ioctl } for pid=11482 comm="syz.1.1453" path="socket:[32558]" dev="sockfs" ino=32558 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 569.455390][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 569.455401][ T30] audit: type=1400 audit(1765202423.482:1056): avc: denied { ioctl } for pid=11524 comm="syz.1.1463" path="socket:[32640]" dev="sockfs" ino=32640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 569.781136][ T5959] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 570.165622][ T30] audit: type=1400 audit(1765202424.172:1057): avc: denied { create } for pid=11535 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 570.306906][ T30] audit: type=1400 audit(1765202424.192:1058): avc: denied { sys_admin } for pid=11535 comm="syz.2.1467" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 570.336460][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 570.660351][ T30] audit: type=1400 audit(1765202424.442:1059): avc: denied { mount } for pid=11535 comm="syz.2.1467" name="/" dev="autofs" ino=33573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 570.729315][ T5959] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 570.739474][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.854120][ T5959] usb 1-1: Product: syz [ 570.859406][ T5959] usb 1-1: Manufacturer: syz [ 571.342390][ T5959] usb 1-1: SerialNumber: syz [ 571.349129][ T5959] usb 1-1: config 0 descriptor?? [ 571.383019][ T5959] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 573.923524][ T5959] gspca_topro: reg_w err -110 [ 573.971224][ T7499] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 573.984458][ T5959] gspca_topro: Sensor soi763a [ 574.187014][ T7499] usb 2-1: config 0 has an invalid interface number: 139 but max is 0 [ 574.202370][ T5959] usb 1-1: USB disconnect, device number 25 [ 574.210883][ T7499] usb 2-1: config 0 has no interface number 0 [ 574.217212][ T7499] usb 2-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 574.231470][ T7499] usb 2-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 574.247723][ T7499] usb 2-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 574.268353][ T7499] usb 2-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 574.288858][ T7499] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 574.299492][ T7499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.315211][ T7499] usb 2-1: Product: syz [ 574.319401][ T7499] usb 2-1: Manufacturer: syz [ 574.331369][ T7499] usb 2-1: SerialNumber: syz [ 574.333819][T11554] SQUASHFS error: Failed to read block 0x0: -5 [ 574.337785][ T7499] usb 2-1: config 0 descriptor?? [ 574.342232][T11554] unable to read squashfs_super_block [ 574.347769][T11545] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 574.360052][T11545] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 574.694052][ T7499] mct_u232 2-1:0.139: MCT U232 converter detected [ 574.737202][ T7499] usb 2-1: MCT U232 converter now attached to ttyUSB0 [ 574.774747][ T7499] usb 2-1: USB disconnect, device number 27 [ 575.450827][ T7499] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 575.459773][ T7499] mct_u232 2-1:0.139: device disconnected [ 575.696952][T11568] overlayfs: conflicting options: nfs_export=on,index=off [ 575.738503][ T30] audit: type=1400 audit(1765202429.752:1060): avc: denied { ioctl } for pid=11565 comm="syz.0.1475" path="socket:[32709]" dev="sockfs" ino=32709 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 575.794257][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 575.830620][ T30] audit: type=1400 audit(1765202429.852:1061): avc: denied { connect } for pid=11565 comm="syz.0.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 575.889149][ T30] audit: type=1400 audit(1765202429.852:1062): avc: denied { setopt } for pid=11565 comm="syz.0.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 575.955121][ T30] audit: type=1400 audit(1765202429.862:1063): avc: denied { bind } for pid=11565 comm="syz.0.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 576.038695][ T30] audit: type=1400 audit(1765202429.862:1064): avc: denied { write } for pid=11565 comm="syz.0.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 576.509889][T11582] FAULT_INJECTION: forcing a failure. [ 576.509889][T11582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.577463][T11582] CPU: 1 UID: 0 PID: 11582 Comm: syz.3.1480 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.577495][T11582] Tainted: [L]=SOFTLOCKUP [ 576.577501][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.577511][T11582] Call Trace: [ 576.577522][T11582] [ 576.577531][T11582] dump_stack_lvl+0x16c/0x1f0 [ 576.577563][T11582] should_fail_ex+0x512/0x640 [ 576.577588][T11582] _copy_from_user+0x2e/0xd0 [ 576.577608][T11582] copy_msghdr_from_user+0x98/0x160 [ 576.577631][T11582] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 576.577665][T11582] ___sys_sendmsg+0xfe/0x1d0 [ 576.577689][T11582] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.577741][T11582] __sys_sendmsg+0x16d/0x220 [ 576.577765][T11582] ? __pfx___sys_sendmsg+0x10/0x10 [ 576.577802][T11582] do_syscall_64+0xcd/0xf80 [ 576.577830][T11582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.577847][T11582] RIP: 0033:0x7f3e2d38f749 [ 576.577861][T11582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.577879][T11582] RSP: 002b:00007f3e2e299038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.577896][T11582] RAX: ffffffffffffffda RBX: 00007f3e2d5e5fa0 RCX: 00007f3e2d38f749 [ 576.577908][T11582] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 576.577919][T11582] RBP: 00007f3e2e299090 R08: 0000000000000000 R09: 0000000000000000 [ 576.577929][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.577940][T11582] R13: 00007f3e2d5e6038 R14: 00007f3e2d5e5fa0 R15: 00007ffe2d5bf4e8 [ 576.577965][T11582] [ 580.239749][T11626] bridge0: entered promiscuous mode [ 580.245466][T11626] bridge0: left promiscuous mode [ 581.591003][T11650] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1497'. [ 584.913402][ T7499] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 585.089084][ T7499] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 585.271849][ T30] audit: type=1400 audit(1765202439.272:1065): avc: denied { mounton } for pid=11677 comm="syz.2.1502" path="/314/file0" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 585.430645][T11687] vlan2: entered promiscuous mode [ 585.678695][ T7499] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.689800][ T7499] usb 5-1: config 0 descriptor?? [ 585.902501][ T7499] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 585.926449][ T30] audit: type=1400 audit(1765202439.462:1066): avc: denied { setopt } for pid=11677 comm="syz.2.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 585.968239][ T30] audit: type=1400 audit(1765202439.952:1067): avc: denied { getopt } for pid=11689 comm="syz.3.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 586.103048][ T7499] [drm:udl_init] *ERROR* Selecting channel failed [ 586.119505][ T7499] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 586.135570][ T7499] [drm] Initialized udl on minor 2 [ 586.153046][ T7499] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 586.166307][ T7499] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 586.174204][ T5959] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 586.183350][ T5959] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 586.193216][ T7499] usb 5-1: USB disconnect, device number 15 [ 586.955763][ T30] audit: type=1400 audit(1765202440.982:1068): avc: denied { ioctl } for pid=11694 comm="syz.3.1512" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 587.877875][ T30] audit: type=1400 audit(1765202441.902:1069): avc: denied { setopt } for pid=11707 comm="syz.4.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 588.736353][T11720] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1515'. [ 588.875829][T11722] SQUASHFS error: Failed to read block 0x0: -5 [ 588.882221][T11722] unable to read squashfs_super_block [ 590.381509][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 590.553243][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 590.691161][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.707513][ T24] usb 3-1: Product: syz [ 590.721420][ T24] usb 3-1: Manufacturer: syz [ 590.726120][ T24] usb 3-1: SerialNumber: syz [ 591.214888][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 591.241468][ T6078] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 591.886887][T11757] random: crng reseeded on system resumption [ 591.919967][T11754] SQUASHFS error: Failed to read block 0x0: -5 [ 591.926588][T11754] unable to read squashfs_super_block [ 592.341185][ T6078] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 592.408068][ T6078] ath9k_htc: Failed to initialize the device [ 592.482437][ T6078] usb 3-1: ath9k_htc: USB layer deinitialized [ 592.830836][ T5959] usb 3-1: USB disconnect, device number 15 [ 592.966989][T11766] netlink: 'syz.4.1530': attribute type 10 has an invalid length. [ 593.102639][ T7499] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 593.471236][ T7499] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 593.481116][ T7499] usb 2-1: config 0 has no interface number 0 [ 593.487227][ T7499] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 593.581576][ T6078] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 593.631149][ T7499] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 593.646781][T11773] SQUASHFS error: Failed to read block 0x0: -5 [ 593.654039][T11773] unable to read squashfs_super_block [ 593.689336][ T7499] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 593.729652][ T7499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.742181][ T6078] usb 5-1: Using ep0 maxpacket: 8 [ 593.754573][ T7499] usb 2-1: Product: syz [ 593.755728][ T6078] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 593.775239][ T7499] usb 2-1: Manufacturer: syz [ 593.789036][ T6078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.922449][ T6078] pvrusb2: Hardware description: Terratec Grabster AV400 [ 593.954859][ T6078] pvrusb2: ********** [ 593.974933][ T6078] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 594.042592][ T6078] pvrusb2: Important functionality might not be entirely working. [ 594.085226][ T6078] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 594.162881][ T6078] pvrusb2: ********** [ 594.316839][ T2337] pvrusb2: Invalid write control endpoint [ 594.636895][ T7499] usb 2-1: SerialNumber: syz [ 594.643606][ T7499] usb 2-1: config 0 descriptor?? [ 594.649139][T11763] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 594.672465][ T7499] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 594.683994][ T7499] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 594.735219][ T5878] usb 5-1: USB disconnect, device number 16 [ 594.831010][ T2337] pvrusb2: Invalid write control endpoint [ 594.841125][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 594.902201][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 594.910240][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 594.951119][ T2337] pvrusb2: Device being rendered inoperable [ 594.957323][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 594.985603][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_k) [ 595.016242][ T2337] pvrusb2: Attached sub-driver cx25840 [ 596.249444][ T5959] usb 2-1: USB disconnect, device number 28 [ 596.258416][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 596.269835][ T5959] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 596.281328][ T5959] cyberjack 2-1:0.69: device disconnected [ 596.287696][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 597.641306][ T5878] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 598.821163][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 598.846801][ T5878] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 598.874572][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.896312][ T5878] usb 3-1: config 0 descriptor?? [ 598.937132][ T5878] gspca_main: sq930x-2.14.0 probing 041e:403c [ 599.407088][ T30] audit: type=1400 audit(1765202453.432:1070): avc: denied { append } for pid=11816 comm="syz.3.1544" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 599.582441][T11821] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1543'. [ 599.682793][T11817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1543'. [ 599.802812][ T30] audit: type=1400 audit(1765202453.722:1071): avc: denied { accept } for pid=11813 comm="syz.1.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 599.803372][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.913754][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.285336][ T5878] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 600.297674][ T5878] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 601.400523][ T7499] usb 3-1: USB disconnect, device number 16 [ 601.433065][T11834] net_ratelimit: 10 callbacks suppressed [ 601.433093][T11834] IPVS: sh: FWM 3 0x00000003 - no destination available [ 601.447138][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 602.359813][ T30] audit: type=1400 audit(1765202456.372:1072): avc: denied { getopt } for pid=11841 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 602.469323][ T30] audit: type=1400 audit(1765202456.372:1073): avc: denied { map } for pid=11841 comm="syz.2.1553" path="socket:[34152]" dev="sockfs" ino=34152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 602.498676][ T30] audit: type=1400 audit(1765202456.372:1074): avc: denied { read accept } for pid=11841 comm="syz.2.1553" path="socket:[34152]" dev="sockfs" ino=34152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 602.581749][ T5959] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 602.833658][ T5959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.857044][ T5959] usb 2-1: config 0 has no interfaces? [ 602.875072][ T5959] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.894469][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.139970][ T5959] usb 2-1: Product: syz [ 603.159422][ T5959] usb 2-1: Manufacturer: syz [ 603.171100][ T5959] usb 2-1: SerialNumber: syz [ 603.198512][ T5959] usb 2-1: config 0 descriptor?? [ 603.372774][T11855] SQUASHFS error: Failed to read block 0x0: -5 [ 603.379003][T11855] unable to read squashfs_super_block [ 603.464013][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.496871][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.762698][ T5959] usb 2-1: USB disconnect, device number 29 [ 603.846594][ T30] audit: type=1400 audit(1765202457.872:1075): avc: denied { ioctl } for pid=11859 comm="syz.2.1557" path="socket:[35249]" dev="sockfs" ino=35249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 603.874140][ T30] audit: type=1400 audit(1765202457.872:1076): avc: denied { bind } for pid=11859 comm="syz.2.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 604.530829][T11875] bridge0: entered promiscuous mode [ 604.542156][T11875] bridge0: left promiscuous mode [ 709.790987][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 709.797942][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11874/1:b..l [ 709.806337][ C0] rcu: (detected by 0, t=10502 jiffies, g=42937, q=133 ncpus=2) [ 709.814037][ C0] task:syz.0.1562 state:R running task stack:26520 pid:11874 tgid:11871 ppid:5808 task_flags:0x400040 flags:0x00080000 [ 709.828202][ C0] Call Trace: [ 709.831468][ C0] [ 709.834390][ C0] ? __schedule+0x10b9/0x6150 [ 709.839063][ C0] __schedule+0x1139/0x6150 [ 709.843556][ C0] ? __pfx___schedule+0x10/0x10 [ 709.848393][ C0] ? mark_held_locks+0x49/0x80 [ 709.853131][ C0] preempt_schedule_irq+0x51/0x90 [ 709.858135][ C0] irqentry_exit+0x1d8/0x8c0 [ 709.862705][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 709.868668][ C0] RIP: 0010:unwind_next_frame+0x51e/0x20a0 [ 709.874547][ C0] Code: b8 00 00 00 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 4c 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 68 14 00 00 <0f> b6 41 05 83 e0 07 0f 84 53 fe ff ff 3c 01 0f 84 7b fe ff ff 4c [ 709.894125][ C0] RSP: 0018:ffffc90003e7eca8 EFLAGS: 00000246 [ 709.900163][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff9119e7e4 [ 709.908105][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff9098a4e0 [ 709.916047][ C0] RBP: ffffc90003e7ed60 R08: ffffffff9119e826 R09: 000000002accd784 [ 709.923991][ C0] R10: 0000000000000002 R11: 0000000000000012 R12: ffffc90003e7ed68 [ 709.931934][ C0] R13: ffffc90003e7ed18 R14: ffffc90003e7ed4d R15: ffffffff9119e7e9 [ 709.939884][ C0] ? unwind_next_frame+0x2ec/0x20a0 [ 709.945060][ C0] ? asm_exc_page_fault+0x26/0x30 [ 709.950066][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 709.956202][ C0] arch_stack_walk+0x94/0x100 [ 709.960861][ C0] ? asm_exc_page_fault+0x26/0x30 [ 709.965861][ C0] stack_trace_save+0x8e/0xc0 [ 709.970530][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 709.975889][ C0] ? __lock_acquire+0x436/0x2890 [ 709.980833][ C0] save_stack+0x160/0x1f0 [ 709.985156][ C0] ? __pfx_save_stack+0x10/0x10 [ 709.989994][ C0] ? post_alloc_hook+0x1af/0x220 [ 709.994944][ C0] ? get_page_from_freelist+0xd0b/0x31a0 [ 710.000557][ C0] ? __alloc_frozen_pages_noprof+0x25f/0x2430 [ 710.006596][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 710.011607][ C0] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 710.017126][ C0] ? vma_alloc_folio_noprof+0xed/0x1e0 [ 710.022558][ C0] ? do_wp_page+0x1183/0x5010 [ 710.027215][ C0] ? __handle_mm_fault+0x1bd2/0x2bb0 [ 710.032476][ C0] ? handle_mm_fault+0x3fe/0xad0 [ 710.037387][ C0] ? do_user_addr_fault+0x7a6/0x1370 [ 710.042648][ C0] ? exc_page_fault+0x64/0xc0 [ 710.047304][ C0] ? asm_exc_page_fault+0x26/0x30 [ 710.052305][ C0] ? __lock_acquire+0x436/0x2890 [ 710.057416][ C0] __set_page_owner+0x91/0x560 [ 710.062180][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 710.067626][ C0] ? bad_range+0x261/0x4c0 [ 710.072030][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.077224][ C0] post_alloc_hook+0x1af/0x220 [ 710.081980][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 710.087421][ C0] ? __pfx___might_resched+0x10/0x10 [ 710.092770][ C0] ? should_fail_alloc_page+0xee/0x130 [ 710.098207][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 710.104074][ C0] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 710.110208][ C0] ? __lock_acquire+0x436/0x2890 [ 710.115120][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 710.121420][ C0] ? smp_call_function_many_cond+0x120f/0x15e0 [ 710.127545][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.132717][ C0] ? smp_call_function_many_cond+0x457/0x15e0 [ 710.138759][ C0] ? __lock_acquire+0x436/0x2890 [ 710.143667][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 710.149533][ C0] ? policy_nodemask+0xea/0x4e0 [ 710.154365][ C0] alloc_pages_mpol+0x1fb/0x550 [ 710.159193][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 710.164558][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 710.169929][ C0] vma_alloc_folio_noprof+0xed/0x1e0 [ 710.175202][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 710.181076][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 710.185838][ C0] do_wp_page+0x1183/0x5010 [ 710.190322][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 710.195150][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 710.200501][ C0] __handle_mm_fault+0x1bd2/0x2bb0 [ 710.205593][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 710.211034][ C0] ? find_vma+0xbf/0x140 [ 710.215250][ C0] ? __pfx_find_vma+0x10/0x10 [ 710.219899][ C0] handle_mm_fault+0x3fe/0xad0 [ 710.224638][ C0] do_user_addr_fault+0x7a6/0x1370 [ 710.229723][ C0] ? rcu_is_watching+0x12/0xc0 [ 710.234458][ C0] exc_page_fault+0x64/0xc0 [ 710.238940][ C0] asm_exc_page_fault+0x26/0x30 [ 710.243760][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 710.249453][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 11 c1 03 00 90 90 90 90 90 90 90 90 90 90 [ 710.269037][ C0] RSP: 0018:ffffc90003e7f9e8 EFLAGS: 00050246 [ 710.275081][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000015b030 [ 710.283035][ C0] RDX: 0000000000080000 RSI: ffffffff893a4f73 RDI: 0000000000000005 [ 710.290988][ C0] RBP: ffffc90003e7fd88 R08: 0000000000000005 R09: 0000000000000000 [ 710.298952][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 710.306900][ C0] R13: 000020000015b000 R14: ffffc90003e7fdcc R15: 0000000000000002 [ 710.314846][ C0] ? ____sys_recvmsg+0x2e3/0x6b0 [ 710.319772][ C0] ____sys_recvmsg+0x2ee/0x6b0 [ 710.324513][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 710.329778][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 710.334537][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.339710][ C0] ___sys_recvmsg+0x114/0x1a0 [ 710.344364][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 710.349542][ C0] ? __pfx___might_resched+0x10/0x10 [ 710.354801][ C0] do_recvmmsg+0x2fe/0x750 [ 710.359228][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 710.364161][ C0] ? finish_task_switch.isra.0+0x207/0xbd0 [ 710.369958][ C0] ? rcu_is_watching+0x12/0xc0 [ 710.374704][ C0] ? trace_sched_exit_tp+0xd1/0x110 [ 710.379873][ C0] ? __schedule+0x10b9/0x6150 [ 710.384535][ C0] ? __schedule+0x114c/0x6150 [ 710.389193][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 710.394201][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 710.399721][ C0] do_syscall_64+0xcd/0xf80 [ 710.404199][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.410066][ C0] RIP: 0033:0x7fe326d8f749 [ 710.414449][ C0] RSP: 002b:00007fe324fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 710.422832][ C0] RAX: ffffffffffffffda RBX: 00007fe326fe6090 RCX: 00007fe326d8f749 [ 710.430780][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 710.438731][ C0] RBP: 00007fe326e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 710.446675][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 710.454614][ C0] R13: 00007fe326fe6128 R14: 00007fe326fe6090 R15: 00007fff0799daa8 [ 710.462567][ C0] [ 710.465560][ C0] rcu: rcu_preempt kthread starved for 10346 jiffies! g42937 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 710.476730][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 710.486668][ C0] rcu: RCU grace-period kthread stack dump: [ 710.492523][ C0] task:rcu_preempt state:R running task stack:28296 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 710.505965][ C0] Call Trace: [ 710.509226][ C0] [ 710.512130][ C0] ? __schedule+0x10b9/0x6150 [ 710.516782][ C0] __schedule+0x1139/0x6150 [ 710.521270][ C0] ? __pfx___schedule+0x10/0x10 [ 710.526092][ C0] ? find_held_lock+0x2b/0x80 [ 710.530763][ C0] ? schedule+0x2d7/0x3a0 [ 710.535083][ C0] schedule+0xe7/0x3a0 [ 710.539126][ C0] schedule_timeout+0x123/0x290 [ 710.543948][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 710.549298][ C0] ? __pfx_process_timeout+0x10/0x10 [ 710.554556][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 710.560334][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 710.565764][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 710.570500][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 710.575761][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.580936][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 710.585847][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 710.590671][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 710.596451][ C0] rcu_gp_kthread+0x26d/0x380 [ 710.601100][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 710.606277][ C0] ? rcu_is_watching+0x12/0xc0 [ 710.611012][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.616184][ C0] ? __kthread_parkme+0x19e/0x250 [ 710.621188][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 710.626356][ C0] kthread+0x3c5/0x780 [ 710.630400][ C0] ? __pfx_kthread+0x10/0x10 [ 710.634964][ C0] ? rcu_is_watching+0x12/0xc0 [ 710.639712][ C0] ? __pfx_kthread+0x10/0x10 [ 710.644274][ C0] ret_from_fork+0x983/0xb10 [ 710.648838][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 710.653922][ C0] ? __switch_to+0x7af/0x10d0 [ 710.658573][ C0] ? __pfx_kthread+0x10/0x10 [ 710.663142][ C0] ret_from_fork_asm+0x1a/0x30 [ 710.667889][ C0] [ 710.670879][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 710.677171][ C0] Sending NMI from CPU 0 to CPUs 1: [ 710.682365][ C1] NMI backtrace for cpu 1 [ 710.682379][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.682398][ C1] Tainted: [L]=SOFTLOCKUP [ 710.682403][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.682411][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 710.682433][ C1] Code: 06 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 13 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 710.682446][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 710.682459][ C1] RAX: 0000000003d8df4d RBX: 0000000000000001 RCX: ffffffff8b7706d9 [ 710.682468][ C1] RDX: 0000000000000000 RSI: ffffffff8dac200a RDI: ffffffff8bf24280 [ 710.682478][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 710.682487][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 710.682495][ C1] R13: ffff88801dab24c0 R14: ffffffff9087f7d0 R15: 0000000000000000 [ 710.682505][ C1] FS: 0000000000000000(0000) GS:ffff888124a09000(0000) knlGS:0000000000000000 [ 710.682520][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 710.682529][ C1] CR2: 00007f086224144c CR3: 0000000060592000 CR4: 00000000003526f0 [ 710.682538][ C1] Call Trace: [ 710.682543][ C1] [ 710.682548][ C1] default_idle+0x13/0x20 [ 710.682566][ C1] default_idle_call+0x6c/0xb0 [ 710.682580][ C1] do_idle+0x38d/0x510 [ 710.682601][ C1] ? __pfx_do_idle+0x10/0x10 [ 710.682623][ C1] cpu_startup_entry+0x4f/0x60 [ 710.682642][ C1] start_secondary+0x21d/0x2d0 [ 710.682657][ C1] ? __pfx_start_secondary+0x10/0x10 [ 710.682673][ C1] common_startup_64+0x13e/0x148 [ 710.682695][ C1]