last executing test programs: 2m9.508886171s ago: executing program 3 (id=271): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x5a, &(0x7f0000000080)={0x0, 0xfffffdda}}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) move_pages(r0, 0x3, &(0x7f0000000400)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f00002f3000/0x1000)=nil, &(0x7f0000bfe000/0x400000)=nil], &(0x7f0000000440)=[0x4, 0x6, 0x8, 0x0], &(0x7f0000000480)=[0x0], 0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kvm_msi_set_irq\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYBLOB="00000000c100000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4604}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x44, 0xf, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000080) syz_usb_connect(0x5, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 2m6.160655946s ago: executing program 3 (id=279): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0xfe, 0x7}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0xe1, &(0x7f0000000040)={@local, @random="90ebae7ad069", @void, {@llc_tr={0x11, {@llc={0x8e, 0x4, "816e", "bf5038db4dbfeb32f43a78691e4aeef5266df91e623f1eafabaa5d2ee66f7ba1fde7e0e6ea1e7676ac7907a091973854785ef1f0dbfa78504d2d208fd530d291cb9feef53532c835f94e403770926a8a8134853660d70c8293592c9440aba09f63b6eee397ecbc40fa035f701f758ca905c8dd30f77d8faae76bb54c63aa7fd56ab4fde045bcd0f9617755666cff4428c47d6e83b9fd664d0d86f2e1d16ca0e5cbcc1f5d7d29bddd251666f0e64fe02cd9118069c2f40189182eba052f02288ee26518cb8e5757f0d798ab9979d7f9"}}}}}, &(0x7f0000000140)={0x0, 0x3, [0xb4e, 0xdc8, 0x1d4, 0x537]}) flock(r0, 0x4) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='ip6tnl0\x00', 0x10) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x7500, 0x3, 0x2}, 0x18, 0x3) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000200)="da7c88b6c83a655492d6ee56393abaefb74efce49b2da276adfaf19ed519d3b168", 0x21}, {&(0x7f0000000240)="d24e9f9d26d5e6da392879a30763db1c6383839e08c038da48f7d845e2f58137db1e94366fa173ed3701ddca0c0e28e1db8b35bc3136ceb51922c821229497c9b16af5e913e1f4c0916210a1c755ecb6a8bca7216682e133f3fa655841938e16d98dd284fe53e722365bf62b876096243100556df2ae7eab16548315fc10d75684467b", 0x83}], 0x2) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x3fc, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x37c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x184, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',.&*{%\xb0\\)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x61731a10}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.])$\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb14}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x115}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x96, 0x4, "e5d04d33c3d56c627785f0a06a44d96e065679f3e3f96a2ce70326cb242686aa6ee830ab7fd6ec7f9a2bd3dae502117dfcb820af085784b9646ba177c2153bbf9e2d207394c0d2b5a0d58aebd9a73b54a83e930f987dda6c44858b53ba15986d4284ee3cf3d5367d6362bfbade60072bcf30be87d8f86c4af85500e91422132364eb498a7a3a24c6d3911ec77987954c31f5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "0512c26e2d890e917cbb079605e01eb2c9b35d80823c9ad2e8652c298cc792b1698f343437d3d9f27b6a8806992c04d7620624dc37d8b281aef96489cab1459befb8b09bfb935de9d86cbf50693c3a59346e8f4d66e76570f4d3d504b3f38027eafb1897bdabacb826f332a295841e35a990b31fb8830db68b8dfe86c4ce29b160a58a50bdf81c5d1f3c9322775cdadcda4247577cfe008dfb766f954931b210"}, @ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "316e0604d2f5edde4c101b331adc0c45cf5618bd6d8024aa87bde6c1e96400215d7ab8f2452d56c57cc06512bbcd502d8c6cce066ca33725ec1ed89201152ec751c9c38e3d89ef17900a752266e7940eb765b9f5b95c0ee41cf2eb80fc655bd40c7bffa39e6ce4b1881aae0f119d3f52abddc221c0dacaacb2fc892e55f9f6a1ad8e3dad484ee8423acf7d48f41ad4e7aa5939ec5fc91f73e7068793062bf984"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_EEE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async, rerun: 32) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000840)=[@wr_drn={0x68, 0x20, {0x4, 0x3}}, @wrmsr={0x65, 0x20, {0x17, 0x7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xae, 0x4, 0x5, 0xa59b}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x60, 0x9, 0x2, 0x7e5800}}, @wr_crn={0x67, 0x20, {0x4, 0x2aae}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0xd5c8, 0x1, 0x8001}}, @nested_vmresume={0x130, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0x4064, 0x4, 0x6}}, @in_dx={0x69, 0x20, {0xc389, 0x4}}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x4c, 0x1}}, @wr_drn={0x68, 0x20, {0x4, 0x9}}], 0x1e0}) (rerun: 32) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000a80)={0x10000, 0x0, {[0xb1f, 0x4, 0xf, 0x8, 0x4, 0x2, 0xabea, 0x5e9e]}}) (async) accept4$bt_l2cap(r0, &(0x7f0000000b00)={0x1f, 0x0, @fixed}, &(0x7f0000000b40)=0xe, 0x80800) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000b80)={0x4}) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e23, 0x200, @mcast1, 0xffffffff}}, 0x7, 0x3, 0x0, 0x80, 0x14, 0x3a9, 0x1}, 0x9c) (async, rerun: 64) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000c80), 0x400000, 0x0) (rerun: 64) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000cc0)={0x2, 0x80, 0x0, 0x0, 0xb, "f92c94fa722ab1fb"}) r7 = syz_open_dev$ndb(&(0x7f0000000d00), 0x0, 0x21000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) (async) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x190, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8d24b1c9e7873605}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_EXP={0x18, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, @NFQA_PAYLOAD={0x8b, 0xa, "2fd800b00c298ee8e51a9b940edadf277a41f5ffcc5d6710c7a95539ca9776f962123a2166b14c303d71581c56ce40649aaa5438b80df632d72b298c1cb72417c16efbe0f60b7a389bd9f1e66f7b9eb25e22bdc8e606cdbad4fa82521932eb4e9bf49d3e6c013b91fb10e985d0b88abab74fd88b1334cf8529ec7649a0fc03a2104470ce25e387"}, @NFQA_PAYLOAD={0xae, 0xa, "3cac1f0f2448d83c1cc7e72b888fb6ee00f8f4efc5a5702853a4a2c9d55da44e8f7a3c33d50553b63b6871f68db9bd8b6d2cd789de1c2361f846eaeb816e3f42449b00a32bea6cc248ef51b496927661cff86d82f5ac65f4dc8d143e3e56ff5053341f17a1c95f37683568dfb1e4e991e44c1c937372952576b3d14dba30aeacbcc5700941d936773be2d915d507d4ceb2a487c48279208324b749e72db96be369b8feb3696c2dfe51ed"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40044}, 0x8000) (async) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000), 0x14900, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000001040)=@s={0x5, @generic=0x8, 0x0, 0x6}) (async) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000001080)=0x0) sched_setattr(r10, &(0x7f00000010c0)={0x38, 0x0, 0x9dcea5b0910eaafc, 0x3, 0x1, 0xf670, 0x1, 0x6, 0x223, 0x9}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), r1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001280)={'gretap0\x00', &(0x7f0000001180)={'syztnl0\x00', 0x0, 0x8787, 0x8, 0x4, 0x5, {{0x29, 0x4, 0x3, 0x5, 0xa4, 0x68, 0x0, 0xf7, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @noop, @cipso={0x86, 0x17, 0x1, [{0x7, 0x6, "00ba6ebd"}, {0x2, 0xb, "36a2ca90a2e551a397"}]}, @lsrr={0x83, 0x1f, 0x8e, [@broadcast, @broadcast, @private=0xa010102, @broadcast, @empty, @broadcast, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x54, 0x4b, 0x3, 0xb, [{@remote, 0x3}, {@multicast2, 0x1ff}, {@remote, 0x2}, {@multicast2, 0xffffffff}, {@local, 0x101}, {@local, 0x9}, {@multicast1, 0xa}, {@rand_addr=0x64010101, 0x80}, {@rand_addr=0x64010100, 0x7}, {@local, 0x44a3}]}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001900)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)={0x1dc, r11, 0x808, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x24004002}, 0xc014) 2m5.209894729s ago: executing program 3 (id=283): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x3f}}], 0x400000000000172, 0x4001c00) 2m5.025825788s ago: executing program 3 (id=287): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@shmem={0xc, 0x1, {0xfffffc00, 0x2}}, &(0x7f00000003c0), 0x1200) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x90) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc) syncfs(0xffffffffffffffff) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) 2m2.436785241s ago: executing program 3 (id=290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0xcc, 0x6, 0xa, 0x409, 0xf5, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xa0, 0x4, 0x0, 0x1, [{0x9c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x88, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x7c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "7d59075216f7b2bfe60f3eb0422491528d0e243dad35239862ca3b4278aecbd1d441573ad542010fa28ec98ba99cc833fb5ff7390fa2cb7c77453fda3bc2a2b402aeeea7a05c7b58a1033bd4f94fbe5b4ecd8f3ab81b0f749f63c7becbe294fa749b6cc651df2466584f990e2ffcc7c952"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14}}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m2.243167369s ago: executing program 3 (id=292): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="18001d000500000000000000110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='tlb_flush\x00', r2, 0x0, 0x6}, 0x18) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x80100) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000900)={0x0, @reserved}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x200041, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x20, 0x8, 0xe9, {0xe9, 0x7, "e575d0b6b95bf36b9c45f819b7aca313ee9fb67afff230b57a498c376a4a62cdf5822d16c64e719d14f8bae8a0afe6064254d61d4086ce92c99963a407ac8b54b5f442d29b66b5c65ef145ccc5d57b8d1afe3bd84161ac27afbdb4b68098331e97652efc81542664495d28938cbd403bc047581b7788b6561db130c747dbabbb694ebf6a1f00b014998f62dd04f5dc7c7ad815a961130789f6de053ad6767c66ac5a9175b9f1b5e3f57c7776e742406364aab42411543652c18bcfb866278ce60df72176da93624d8dbf8acfb5e837b7abb02a3dc67ccf994e1582741c9e7f4d7b900e6ac7ccfc"}}, &(0x7f0000000340)={0x0, 0x3, 0x96, @string={0x96, 0x3, "4002884ee4f896e06e2d2df50681ed86e367ecf8d71c1548964e5031ea7b2bd5fe8ad72f22455b99582990470abf869132584240a2fa683c8f1c707effcf5a1da6c325032666a3799ded14cb9edc8780abad49ca98285c7c53a3b8b5ff30c8464b02f9a0e54a144f52c1771484ffcdd1f83ff8cb1d9d363c377082afaa653f9bc11a80bf3e4aeb1bde0d8795cc0a1bc6fb4706a3"}}, &(0x7f00000001c0)={0x0, 0x22, 0x4, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x0, 0x2, 0xa}, @local=@item_012={0x1, 0x2, 0x5, "da"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x39, 0x1, {0x22, 0xff8}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x40, 0xe, 0x81, "d7f493ed1f324244870c6de289e44a4d2be2c66723f538008e2ff35691d28f14a54b594ba29cd9f9b7d18d3a4be1b1884bdab066ba213ad55064b4568f46714f3f766e6aefeeeebf053f61dba8340b9820cab1b02b8e4f85e61abbb4ce47900b445c50702f8abad73fe3e90cccd6a77781299d46610895ad9a6d4f06d7cad088b0"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0)={0x20, 0x1, 0x9a, "e466867da6c76f25c787e073881ade16b600cdab462d13597d18847e9c52e66ad418352e6825fdf9379daae524e876426b61b26a4faa9c8e86f2bc75e14e48f88ce2b8065f11b14eacbf0015bc6df4cd40b55b9ea9a58090c876de81bd6710c9fb804559ced8f73c89844d315a0c3dd1c03601135a117d63fa61b8d18144656e551d4e7c4a443ce3730bcee7189ef33209b84ae2767cbc859add"}, &(0x7f0000000740)={0x20, 0x3, 0x1}}) shutdown(r0, 0x9708d23d7984b812) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fde1000000000011907800000000000000000000ff07000090780400"/58], 0x0) 1m47.073389906s ago: executing program 32 (id=292): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="18001d000500000000000000110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='tlb_flush\x00', r2, 0x0, 0x6}, 0x18) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x80100) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000900)={0x0, @reserved}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x200041, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x20, 0x8, 0xe9, {0xe9, 0x7, "e575d0b6b95bf36b9c45f819b7aca313ee9fb67afff230b57a498c376a4a62cdf5822d16c64e719d14f8bae8a0afe6064254d61d4086ce92c99963a407ac8b54b5f442d29b66b5c65ef145ccc5d57b8d1afe3bd84161ac27afbdb4b68098331e97652efc81542664495d28938cbd403bc047581b7788b6561db130c747dbabbb694ebf6a1f00b014998f62dd04f5dc7c7ad815a961130789f6de053ad6767c66ac5a9175b9f1b5e3f57c7776e742406364aab42411543652c18bcfb866278ce60df72176da93624d8dbf8acfb5e837b7abb02a3dc67ccf994e1582741c9e7f4d7b900e6ac7ccfc"}}, &(0x7f0000000340)={0x0, 0x3, 0x96, @string={0x96, 0x3, "4002884ee4f896e06e2d2df50681ed86e367ecf8d71c1548964e5031ea7b2bd5fe8ad72f22455b99582990470abf869132584240a2fa683c8f1c707effcf5a1da6c325032666a3799ded14cb9edc8780abad49ca98285c7c53a3b8b5ff30c8464b02f9a0e54a144f52c1771484ffcdd1f83ff8cb1d9d363c377082afaa653f9bc11a80bf3e4aeb1bde0d8795cc0a1bc6fb4706a3"}}, &(0x7f00000001c0)={0x0, 0x22, 0x4, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x0, 0x2, 0xa}, @local=@item_012={0x1, 0x2, 0x5, "da"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x39, 0x1, {0x22, 0xff8}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x40, 0xe, 0x81, "d7f493ed1f324244870c6de289e44a4d2be2c66723f538008e2ff35691d28f14a54b594ba29cd9f9b7d18d3a4be1b1884bdab066ba213ad55064b4568f46714f3f766e6aefeeeebf053f61dba8340b9820cab1b02b8e4f85e61abbb4ce47900b445c50702f8abad73fe3e90cccd6a77781299d46610895ad9a6d4f06d7cad088b0"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0)={0x20, 0x1, 0x9a, "e466867da6c76f25c787e073881ade16b600cdab462d13597d18847e9c52e66ad418352e6825fdf9379daae524e876426b61b26a4faa9c8e86f2bc75e14e48f88ce2b8065f11b14eacbf0015bc6df4cd40b55b9ea9a58090c876de81bd6710c9fb804559ced8f73c89844d315a0c3dd1c03601135a117d63fa61b8d18144656e551d4e7c4a443ce3730bcee7189ef33209b84ae2767cbc859add"}, &(0x7f0000000740)={0x20, 0x3, 0x1}}) shutdown(r0, 0x9708d23d7984b812) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fde1000000000011907800000000000000000000ff07000090780400"/58], 0x0) 16.261127473s ago: executing program 0 (id=612): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_create1(0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x4, 0x70bd2b, 0x25dddbfe}, 0x10}, 0x1, 0x0, 0xa00000000000000, 0x20000000}, 0x1000) 16.259463582s ago: executing program 2 (id=613): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001780), 0x101880, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 64) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000) (async, rerun: 64) close(0x3) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r3 = getpid() (rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 14.730876596s ago: executing program 0 (id=617): mkdir(0x0, 0x0) chdir(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r3 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xec27, 0x0, 0x1, 0x193}, &(0x7f00000006c0)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x16) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 14.516261683s ago: executing program 1 (id=619): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x80100) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$nci(r1, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x0, 0x1}, 0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000900)={&(0x7f0000000080)="61f2", 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r2, 0x801, 0x0}) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1f00000000000000a4d1980ff00c8a9450fa664d3c6dfe85cedbd1e923fa4373cba345b429603c0e17b470c9cc2341f8e76d4256d0f997"], 0x8) r5 = dup3(r4, r3, 0x0) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}], 0x18}}], 0x1, 0x810) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x40, 0x80, 0x475e, 0x2, {{0x36, 0x4, 0x3, 0x0, 0xd8, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @remote, {[@generic={0x44, 0x10, "4c7ff77c4a8d2a6743ee783129cc"}, @lsrr={0x83, 0x2b, 0x72, [@multicast1, @loopback, @empty, @private=0xa010101, @rand_addr=0x64010102, @multicast2, @private=0xa010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}]}, @rr={0x7, 0x23, 0x94, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @broadcast]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0xd, "d0a7e4b464f4382d0ff115"}, @timestamp_prespec={0x44, 0x44, 0x1f, 0x3, 0xd, [{@empty, 0x3}, {@loopback, 0x6}, {@local, 0x1ff}, {@loopback, 0x5}, {@private=0xa010102, 0x1}, {@local, 0x3}, {@empty, 0x80}, {@multicast1, 0xe}]}, @timestamp={0x44, 0x10, 0x98, 0x0, 0x5, [0x7fffffff, 0x80000000, 0x2]}, @end]}}}}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_mreq(r8, 0x29, 0x1e, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r6, 0x25, 0x7, @val=@netkit={@void, @value=r0}}, 0x1c) 13.014587405s ago: executing program 1 (id=622): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000a10008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 11.988073498s ago: executing program 1 (id=624): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) read(r0, &(0x7f00000003c0)=""/163, 0xa3) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r2, &(0x7f0000003740)=[{&(0x7f00000001c0)}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001700010325bd7000fcffffff0a"], 0x14}, 0x1, 0xf0, 0x0, 0x200448d3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000001000000", 0x10) ioctl$TCXONC(r1, 0x540a, 0x2) 11.784555955s ago: executing program 5 (id=625): socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setrlimit(0xd, &(0x7f0000000040)={0x3ab9, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getpid() recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x1a, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r6) 10.614946127s ago: executing program 2 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@ipv6_getrule={0x1c, 0x22, 0x101, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x14, 0x10, 0x3, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0xe246875800c31e72}, 0x10844) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') r5 = socket$kcm(0x21, 0x2, 0x2) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r6, &(0x7f00000000c0)={'system_u:object_r:kmsg_device_t:s0', 0x20, 'user_u\x00'}, 0x2a) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000002"], 0x18}, 0x0) 10.380625657s ago: executing program 1 (id=627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="e43df1fb7ad171cd5983c0dad3c33d356d0d01e65b6332dcb991820f0000000000000049ead0b95b27f03019cb6ab614da3ae78c0d9c0000000000000000000000a19b3ed3e7c220b30c9399fb65c25a0d0994dd623c", 0x56, 0x8011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)="94129d", 0x3, 0x0, 0x0, 0x0) 8.629887319s ago: executing program 1 (id=629): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000140), 0x8, 0x140) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x890d, 0xc00c, 0x9, 0x5, 0x6, 0xffffff36, 0xfffffffa}, &(0x7f0000000080)=0x20) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r10, 0xb}}, 0x48) 7.417848224s ago: executing program 5 (id=632): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x85}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x30, 0x30, 0x0, @in6={0xa, 0x4e24, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}, @in={0x2, 0x4e21, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0xa, r5, 0x0, 0x0, 0x1}}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000040)={0x8641, 0x1, [{0x1, 0x1}]}) 6.895065863s ago: executing program 4 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x83625fc5352ba305}, 0x14}, 0x1, 0xf000}, 0x2000040) 6.86436575s ago: executing program 0 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6.726298036s ago: executing program 4 (id=635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x4984f78, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.620238235s ago: executing program 0 (id=636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000190003090000005127000000025800000004fd0000000000080021002c141400"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000003c0)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {r3}}, './file1\x00'}) accept$phonet_pipe(r5, &(0x7f0000000180), &(0x7f0000000480)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000009575133e88038645c5a017c432aed7fb424a84a1f9ed13e5aab05e8f4e843fcc8688af82c86d60b02c1bcc291e83effc92df2351", @ANYRES32=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) syz_pidfd_open(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) ioctl$VHOST_VDPA_GET_AS_NUM(r6, 0x8004af7a, &(0x7f0000000400)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10080, 0x61) fsync(r8) 6.435130691s ago: executing program 4 (id=637): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x4000000, 0x0, 0x1, r0}]) 6.275802794s ago: executing program 1 (id=638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f00002b1000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000cc0)="f30fa7e80f78460066b8ff4f00000f23d00f21f86635000000090f23f8f2d958ce3ef20f0f779094f3dc3766b9800000c00f326635000400000f300f20c06635000000400f22c00f09baf80c66b8e8f5818566efbafc0cf9", 0x58}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setrlimit(0x7, &(0x7f00000000c0)={0x4, 0x6}) r6 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0x20) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000140095942fbd7000ffdbdf250a1720ff", @ANYRES32=0x0, @ANYBLOB="080008001800000014000100200100000000000000000000000000000800090202000000140006"], 0xa4}, 0x1, 0x0, 0x0, 0x20048090}, 0x20000840) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.58125867s ago: executing program 4 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mlock(&(0x7f0000143000/0x2000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$isdn(0x22, 0x3, 0x26) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0xffffffffffffffff}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$dri(0x0, 0x1, 0x400) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) socket$isdn(0x22, 0x3, 0x11) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4048aecb, &(0x7f00000034c0)={{0x1, 0x0, 0x80, {0x2, 0x2, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.211091758s ago: executing program 5 (id=640): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 4.89490246s ago: executing program 5 (id=641): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x13}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14}}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) syz_open_pts(r6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 4.848089263s ago: executing program 2 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@delqdisc={0x1f0, 0x25, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff3, 0xa}, {}, {0x2, 0x10}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x98, 0x2, {{0xf, [0x7, 0x4, 0x8, 0xa, 0xc, 0xd, 0xb, 0x8, 0x4, 0xb, 0xb, 0xc, 0x5, 0x9, 0x10, 0x1], 0x1, [0x0, 0x40, 0xff00, 0x2, 0x9, 0x83, 0xffff, 0xb7c1, 0xee0, 0x0, 0x4, 0x9, 0x8, 0xb628, 0x800, 0x65], [0xfff4, 0x3, 0xc70, 0xbf, 0x5, 0x40, 0x1, 0x6, 0x0, 0x4, 0x4, 0xfffb, 0x5, 0x200, 0x4e2a]}, [@TCA_MQPRIO_MAX_RATE64={0x1c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0xe4}]}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xfffffffffffffffa}, {0xc, 0x3, 0x3}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x246}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0xc}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0xc4, 0xb, 0x1, 0x1, 0x3ff, 0x7}}, {0x12, 0x2, [0xf001, 0xb1, 0xa, 0x5, 0x4, 0x9, 0x7]}}, {{0x1c, 0x1, {0x8, 0x3f, 0x3, 0x9, 0x1, 0xfff, 0xdc4, 0x4}}, {0xc, 0x2, [0x3a9e, 0x6, 0x5, 0x4edc]}}, {{0x1c, 0x1, {0xbc, 0x3, 0x0, 0x6, 0x0, 0x3, 0xf, 0x9}}, {0x16, 0x2, [0x0, 0x5, 0x1000, 0x2, 0x3, 0x18, 0xe, 0x2e, 0x3]}}]}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x8, 0x7fffffff, 0x1, 0x7, 0xfffffff7, 0x9}}, {0x16, 0x2, [0x1, 0x4, 0x3, 0x4, 0x3cad, 0x6, 0xff, 0x0, 0x4]}}, {{0x1c, 0x1, {0x7f, 0x6, 0x4, 0x8, 0x2, 0xd4a, 0x3, 0x5}}, {0xe, 0x2, [0x3, 0x9, 0xe913, 0x7, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x8c, 0x8}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='skb_copy_datagram_iovec\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) 4.70963162s ago: executing program 2 (id=643): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'lo\x00', &(0x7f0000000180)=@ethtool_rxfh={0x46, 0x6213, 0x5, 0x1, 0x5, "f356f0", 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r9, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4040000) r10 = open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20) pwritev2(r10, &(0x7f0000000700)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0xfff, 0x9, 0x1f) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x800, '\x00', r9, r10, 0x1, 0x3, 0x4}, 0x50) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r7}}], 0x20, 0x2400e044}, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="ca498a99fa7affc2f16e7a968cf6539a87e6ac23ed205a769389ed72782450f087aa9658891e1e5034899e3d1748add3aa35ec749e2fe64102048dd07dc66eed091e919a54fee826116f766cda59df52e7b1af47d213c3aab5af6b73a2aa9f96379f0a93f665034c05d183d4e5a09261f31dfbcf983a00cc5b11702fe4193a2c0202177a8c853895787ef4befb62fdd7dde7d7fb98d4360fa6daf9", 0x9b}, {&(0x7f00000000c0)="29eaeb1b3f7d2ae889593f85495b5b7d886a95081f5145ecdb2bbc967525b4f664a219b3bee2239911d142e3dda9164afb64e397b12406947009a3829a2bc4369a06bd8cd44207bf9707b71a451feb4228fbd15bd101", 0x56}], 0x2}, 0x15) 3.435042972s ago: executing program 5 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20008814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_io_uring_setup(0xb55, &(0x7f00000004c0)={0x0, 0xca79, 0x200, 0x3, 0x1400}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0}) 3.434628906s ago: executing program 2 (id=645): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = syz_open_pts(r0, 0xc0a00) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x5, 0x81, 0x4, 0x1, 0xd, "1747f41726c9c2df"}) 3.407411669s ago: executing program 0 (id=646): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x1, r3, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21f) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x200}) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40081271, &(0x7f0000000980)=0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0) 3.380759521s ago: executing program 4 (id=647): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) name_to_handle_at(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@shmem={0xc, 0x1, {0xfffffc00, 0x2}}, &(0x7f00000003c0), 0x1200) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc) syncfs(0xffffffffffffffff) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) 887.833599ms ago: executing program 0 (id=648): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x1, r3, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21f) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x200}) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40081271, &(0x7f0000000980)=0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0) 774.210896ms ago: executing program 5 (id=649): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x29, 0x4, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2404c0c0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x24, 0x1004, 0x7ff, 0x9, 0x0, 0x400, 0xffffffffffffffff, 0x89, 0x0, 0x8, 0x8d], 0xdddd1000}) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x514}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$unix(0x1, 0x2, 0x0) 315.195124ms ago: executing program 2 (id=650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000080), 0x32, 0x40) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x4, 0x11, 0x41, &(0x7f0000000140)="578e39a5f81b0501a313babf2e6f38a9b64c9217e66818e571f96ce1449ce5c1d10d74b87d10a1abd056dd5ecabf4ee10f6d74213797ccd92fe645b5daae34f402"}, {0x3, 0x8401, 0x0, 0x0}], 0x2}) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0xffffffffffffffff, 0x2b) 0s ago: executing program 4 (id=651): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) kernel console output (not intermixed with test programs): setopt } for pid=6508 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 136.942992][ T30] audit: type=1400 audit(1767045342.056:262): avc: denied { read } for pid=6517 comm="syz.2.148" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 137.011975][ T30] audit: type=1400 audit(1767045342.076:263): avc: denied { open } for pid=6517 comm="syz.2.148" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 137.042215][ T5927] usb usb1-port1: attempt power cycle [ 137.412792][ T30] audit: type=1400 audit(1767045342.456:264): avc: denied { ioctl } for pid=6523 comm="syz.1.150" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.742183][ T5927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.765415][ T5927] usb 1-1: device descriptor read/8, error -71 [ 137.787010][ T6529] could not allocate digest TFM handle rmd128-generic [ 137.986229][ T6538] vxfs: WRONG superblock magic 00000000 at 1 [ 137.993368][ T6538] vxfs: WRONG superblock magic 00000000 at 8 [ 137.999430][ T6538] vxfs: can't find superblock. [ 138.413662][ T5927] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.571028][ T6542] netlink: 'syz.1.152': attribute type 30 has an invalid length. [ 138.605597][ T5927] usb 1-1: device descriptor read/8, error -71 [ 138.640806][ T6541] netlink: 'syz.1.152': attribute type 30 has an invalid length. [ 138.823421][ T5927] usb usb1-port1: unable to enumerate USB device [ 139.382272][ T6551] 9pnet_virtio: no channels available for device syz [ 139.421489][ T6548] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 140.401150][ T6554] input: syz0 as /devices/virtual/input/input6 [ 140.572041][ T30] audit: type=1400 audit(1767045345.636:265): avc: denied { setopt } for pid=6553 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.769927][ T30] audit: type=1400 audit(1767045345.656:266): avc: denied { bind } for pid=6553 comm="syz.0.155" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.795840][ T30] audit: type=1400 audit(1767045345.666:267): avc: denied { connect } for pid=6553 comm="syz.0.155" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.823412][ T30] audit: type=1400 audit(1767045345.666:268): avc: denied { write } for pid=6553 comm="syz.0.155" path="socket:[11715]" dev="sockfs" ino=11715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.955266][ T5813] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 140.964550][ T5813] Bluetooth: hci3: Injecting HCI hardware error event [ 140.974019][ T5833] Bluetooth: hci3: hardware error 0x00 [ 140.983102][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 141.335260][ T30] audit: type=1400 audit(1767045346.396:269): avc: denied { execute } for pid=6568 comm="syz.2.160" path="/26/cpu.stat" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.673866][ T6574] FAULT_INJECTION: forcing a failure. [ 141.673866][ T6574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.952042][ T6574] CPU: 1 UID: 0 PID: 6574 Comm: syz.4.161 Not tainted syzkaller #0 PREEMPT(full) [ 141.952070][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.952081][ T6574] Call Trace: [ 141.952088][ T6574] [ 141.952097][ T6574] dump_stack_lvl+0x16c/0x1f0 [ 141.952125][ T6574] should_fail_ex+0x512/0x640 [ 141.952156][ T6574] _copy_to_iter+0x463/0x1710 [ 141.952194][ T6574] ? __pfx__copy_to_iter+0x10/0x10 [ 141.952233][ T6574] seq_read_iter+0xd02/0x12d0 [ 141.952271][ T6574] seq_read+0x3a3/0x570 [ 141.952296][ T6574] ? __pfx_seq_read+0x10/0x10 [ 141.952321][ T6574] ? lock_acquire+0x179/0x330 [ 141.952348][ T6574] ? __pfx___might_resched+0x10/0x10 [ 141.952366][ T6574] ? avc_policy_seqno+0x9/0x20 [ 141.952403][ T6574] ? rw_verify_area+0xcf/0x6c0 [ 141.952424][ T6574] ? __pfx_seq_read+0x10/0x10 [ 141.952448][ T6574] vfs_read+0x1e4/0xcf0 [ 141.952470][ T6574] ? __pfx___mutex_lock+0x10/0x10 [ 141.952497][ T6574] ? __pfx_vfs_read+0x10/0x10 [ 141.952524][ T6574] ? __fget_files+0x20e/0x3c0 [ 141.952556][ T6574] ksys_read+0x12a/0x250 [ 141.952577][ T6574] ? __pfx_ksys_read+0x10/0x10 [ 141.952608][ T6574] do_syscall_64+0xcd/0xf80 [ 141.952632][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.952651][ T6574] RIP: 0033:0x7f061798f749 [ 141.952667][ T6574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.952685][ T6574] RSP: 002b:00007f0618804038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.952708][ T6574] RAX: ffffffffffffffda RBX: 00007f0617be5fa0 RCX: 00007f061798f749 [ 141.952721][ T6574] RDX: 0000000000002020 RSI: 0000200000003680 RDI: 0000000000000003 [ 141.952732][ T6574] RBP: 00007f0618804090 R08: 0000000000000000 R09: 0000000000000000 [ 141.952743][ T6574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.952753][ T6574] R13: 00007f0617be6038 R14: 00007f0617be5fa0 R15: 00007ffe7dbe72a8 [ 141.952781][ T6574] [ 142.278653][ T30] audit: type=1400 audit(1767045347.386:270): avc: denied { setopt } for pid=6560 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.942153][ T6582] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 142.971936][ T30] audit: type=1400 audit(1767045347.656:271): avc: denied { append } for pid=6579 comm="syz.2.163" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.051694][ T30] audit: type=1400 audit(1767045347.776:272): avc: denied { connect } for pid=6579 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.192288][ T5833] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 143.272430][ T30] audit: type=1400 audit(1767045348.386:273): avc: denied { bind } for pid=6586 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.333582][ T6589] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 144.203500][ T6601] vxfs: WRONG superblock magic 00000000 at 1 [ 144.209678][ T6601] vxfs: WRONG superblock magic 00000000 at 8 [ 144.215870][ T6601] vxfs: can't find superblock. [ 145.066691][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 145.642851][ T6612] sctp: [Deprecated]: syz.3.170 (pid 6612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.642851][ T6612] Use struct sctp_sack_info instead [ 145.705083][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 145.705102][ T30] audit: type=1400 audit(1767045350.816:274): avc: denied { ioctl } for pid=6611 comm="syz.3.170" path="socket:[11863]" dev="sockfs" ino=11863 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 146.304517][ T30] audit: type=1400 audit(1767045351.416:275): avc: denied { nlmsg_write } for pid=6617 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.328836][ T6618] netlink: 269 bytes leftover after parsing attributes in process `syz.2.173'. [ 146.521847][ T30] audit: type=1400 audit(1767045351.626:276): avc: denied { mount } for pid=6620 comm="syz.4.174" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 146.717966][ T30] audit: type=1400 audit(1767045351.826:277): avc: denied { getopt } for pid=6622 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.898775][ T30] audit: type=1400 audit(1767045352.006:278): avc: denied { getopt } for pid=6624 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.233822][ T30] audit: type=1400 audit(1767045352.346:279): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 148.648788][ T30] audit: type=1400 audit(1767045353.736:280): avc: denied { mount } for pid=6644 comm="syz.4.179" name="/" dev="ramfs" ino=10837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 148.796622][ T80] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.183332][ T80] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 149.215478][ T80] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.315149][ T80] usb 1-1: config 0 descriptor?? [ 149.331878][ T30] audit: type=1400 audit(1767045353.756:281): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 149.404906][ T30] audit: type=1400 audit(1767045353.986:282): avc: denied { write } for pid=6640 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 149.855574][ T5833] Bluetooth: hci4: unexpected event for opcode 0x000c [ 150.522375][ T30] audit: type=1400 audit(1767045355.416:283): avc: denied { setattr } for pid=6663 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 152.887533][ T30] audit: type=1400 audit(1767045357.996:284): avc: denied { append } for pid=6682 comm="syz.2.191" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 153.211975][ T80] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 153.248534][ T80] [drm:udl_init] *ERROR* Selecting channel failed [ 154.344739][ T80] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 154.373043][ T80] [drm] Initialized udl on minor 2 [ 154.484890][ T80] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.512613][ T80] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 154.520602][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.542535][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.736601][ T30] audit: type=1400 audit(1767045359.716:285): avc: denied { create } for pid=6696 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.946803][ T80] usb 1-1: USB disconnect, device number 7 [ 154.954730][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 155.160488][ T6695] process 'syz.3.194' launched './file1' with NULL argv: empty string added [ 155.196018][ T30] audit: type=1400 audit(1767045360.306:286): avc: denied { execute_no_trans } for pid=6694 comm="syz.3.194" path="/32/file1" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.374312][ T30] audit: type=1400 audit(1767045360.486:287): avc: denied { write } for pid=6702 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.394743][ T6703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6703 comm=syz.1.196 [ 155.433063][ T80] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 156.094323][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.111905][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.129712][ T80] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 156.213168][ T80] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.342616][ T80] usb 1-1: config 0 descriptor?? [ 156.646499][ T6717] 9pnet_virtio: no channels available for device syz [ 156.731868][ T6717] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.806754][ T6717] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 157.550072][ T80] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 157.570314][ T30] audit: type=1400 audit(1767045361.756:288): avc: denied { mounton } for pid=6712 comm="syz.4.189" path="/45/file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 157.571303][ T80] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 157.702234][ T6720] sd 0:0:1:0: device reset [ 158.065218][ T80] cp2112 0003:10C4:EA90.0001: error requesting version [ 158.091541][ T30] audit: type=1400 audit(1767045362.806:289): avc: denied { listen } for pid=6714 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.162673][ T6725] ubi31: attaching mtd0 [ 158.170432][ T80] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 158.203930][ T6725] ubi31: scanning is finished [ 158.237281][ T6725] ubi31: empty MTD device detected [ 158.260264][ T30] audit: type=1400 audit(1767045362.806:290): avc: denied { read } for pid=6714 comm="syz.3.198" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 158.377503][ T30] audit: type=1400 audit(1767045362.806:291): avc: denied { open } for pid=6714 comm="syz.3.198" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 158.484676][ T30] audit: type=1400 audit(1767045362.816:292): avc: denied { ioctl } for pid=6714 comm="syz.3.198" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 158.645887][ T6725] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 158.679780][ T6725] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 158.701877][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 158.909446][ T6725] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 158.931918][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 158.965334][ T6725] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 158.993292][ T10] usb 4-1: config 32 has an invalid interface number: 85 but max is 0 [ 159.015411][ T6725] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 159.065596][ T10] usb 4-1: config 32 has no interface number 0 [ 159.072600][ T6301] usb 1-1: USB disconnect, device number 8 [ 159.134141][ T6725] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 159.151975][ T6725] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2945654799 [ 159.175289][ T10] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.184127][ T6725] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 159.247578][ T10] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.318908][ T10] usb 4-1: config 32 interface 85 has no altsetting 0 [ 159.325803][ T6731] ubi31: background thread "ubi_bgt31d" started, PID 6731 [ 159.355664][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 159.436976][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 159.486552][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.537291][ T10] usb 4-1: Product: syz [ 159.541486][ T10] usb 4-1: Manufacturer: syz [ 160.206679][ T30] audit: type=1400 audit(1767045365.316:293): avc: denied { ioctl } for pid=6750 comm="syz.2.209" path="socket:[11089]" dev="sockfs" ino=11089 ioctlcmd=0x42c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.656550][ T10] usb 4-1: SerialNumber: syz [ 160.762716][ T6301] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 160.791672][ T30] audit: type=1400 audit(1767045365.886:294): avc: denied { read write } for pid=6755 comm="syz.4.211" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.849473][ T30] audit: type=1400 audit(1767045365.896:295): avc: denied { open } for pid=6755 comm="syz.4.211" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.888840][ T30] audit: type=1400 audit(1767045365.896:296): avc: denied { relabelfrom } for pid=6755 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 160.910029][ T30] audit: type=1400 audit(1767045365.896:297): avc: denied { relabelto } for pid=6755 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 160.953748][ T10] appletouch 4-1:32.85: Failed to read mode from device. [ 160.972787][ T30] audit: type=1400 audit(1767045365.936:298): avc: denied { ioctl } for pid=6755 comm="syz.4.211" path="socket:[11104]" dev="sockfs" ino=11104 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.061904][ T6301] usb 2-1: Using ep0 maxpacket: 32 [ 161.070820][ T6758] TCP: TCP_TX_DELAY enabled [ 161.094816][ T10] appletouch 4-1:32.85: probe with driver appletouch failed with error -5 [ 161.122337][ T6758] binder: 6757:6758 ioctl c00c620f 2000000003c0 returned -22 [ 161.280763][ T10] usb 4-1: USB disconnect, device number 2 [ 161.451962][ T80] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 161.592068][ T80] usb 1-1: device descriptor read/64, error -71 [ 161.695283][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 161.846866][ T80] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 162.001898][ T80] usb 1-1: device descriptor read/64, error -71 [ 162.174224][ T80] usb usb1-port1: attempt power cycle [ 162.491990][ T6301] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.499734][ T6301] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 162.539613][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.590194][ T6301] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 162.604347][ T80] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 162.628869][ T6301] usb 2-1: can't read configurations, error -71 [ 162.645940][ T80] usb 1-1: device descriptor read/8, error -71 [ 162.722233][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 162.746934][ T9] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 162.769268][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 162.782122][ T9] usb 3-1: can't read configurations, error -61 [ 162.902080][ T80] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 162.932125][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.957184][ T80] usb 1-1: device descriptor read/8, error -71 [ 163.010085][ T6785] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 163.073705][ T80] usb usb1-port1: unable to enumerate USB device [ 163.103238][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 163.119936][ T9] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 163.144852][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 163.158649][ T9] usb 3-1: can't read configurations, error -61 [ 163.171236][ T9] usb usb3-port1: attempt power cycle [ 163.536500][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.579351][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 163.585842][ T9] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 163.610639][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 163.610654][ T30] audit: type=1400 audit(1767045368.696:301): avc: denied { write } for pid=6781 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.610826][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 163.675811][ T9] usb 3-1: can't read configurations, error -61 [ 163.822471][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 163.843748][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 163.851350][ T9] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 163.874225][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 163.886342][ T9] usb 3-1: can't read configurations, error -61 [ 163.910902][ T9] usb usb3-port1: unable to enumerate USB device [ 164.474498][ T6802] [U]  [ 164.477473][ T6802] [U] K{‘ [ 164.480635][ T6802] [U] ÄT Ž1ĘŔŠŞFĚÇÄFËŠÎ`GĘJÇÜGÖĆŻą¬ˇ—ŢČOŐŃ/ÜMCÇ [ 164.489663][ T6802] [U] TžŘ–/,ť~Äś­‹JŐßĘ}8ÎĘŢ'O1ŹÜ"™7-΂JQśK—¤WşĎQÉ5C%"¬H12–¦Y“„‰ž€ĘXÍ`‚ÍČĽ`+łŰ(·Âż!(ÉŰÉZ'ŔTXLN»I®GĹJ– °ÜÝ­·PĹ~÷7Í!‘ŐŇ"بÎ ľŞ(Č5OBܤ‡ÍJÖ [ 164.505576][ T6802] [U] ±K\&—}6Ł6śXÎHXŹ ĄÔµ„ĚŢ.`¸A“$Ű40|϶ż9°Řި„ŻŔ ĎU‚Ň4ŤÔÄ®VBZĂĐ}ĚWÔM”TşŽÍQźÝΦR’ 4”ß [ 164.517101][ T6802] [U] ".H6ŘŢ"ÖKÇ[›‰¤ŚJÁ4ÇŘIťN¨™[Z(•„C|TË]Z{Â3źC=»¨XÎԞ˅Î4żW‰)\T‘XJŘŹSH{Q;Ěą˘…ÖTÔÇ+‹¦÷GÍČß®D„.Ë‚ł>Yž÷ÉWUH„FN—ŽťÇHL]SÔ2ŠÇŮ\G%ŠOĽ&Z)µĐš'¨PUL‚_<Ă ˘Ř°‰Ň®ÔĹ`ұTÔÁŢśĐËŢ;_Ô"(‘U{7Jśż2X ‘/€'ÝŮCŃĚŐIş©ŔĎHżCťŐłžV¦=Ť‘AIÇ%WĽESž RšźJŠÎśÚ”GÂ÷RÁąÍˇHI˘śAĎĚ6-ÚDŹÚV¨Á I"ŘĹNƨ ŢÚASC~4ÁŞą8CŘ*­OO5/ßśJš~ş§ˇW—VK+¬®‰Ś3ČÇY)ŽąM°¸ĆV¶ĚYQĆ˝€DTRŻOTPEM%F×ĘEJÍA5ĆÔT_-X~ ^AAŰ‚Ň˝QÖĹ [ 164.526376][ T30] audit: type=1400 audit(1767045369.636:302): avc: denied { read } for pid=6801 comm="syz.3.225" path="socket:[11201]" dev="sockfs" ino=11201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.580226][ T6802] [U] +W‰G?]ŁÓ'A: »Ú)ŐĎÓ™“' B>T˘ ˇF/™÷<'ČUÓ'–ĽH§IÉ.+]Eź.˝-ÉżßżŇ%÷Č>2`¶^Uß8F.Š6¤Ĺ3ÓŘ+ËAľÂ««„°G3ÓPÂÓ6:Ť^0ŔŹTÉČV÷'EŐTĽ€ŰÂYC‰NľŢRĎ©ŢNČPJ× ;ĆZ†ĘÔŃŰ‘8!ŻČ\Ů…¸AŘĘ–2ÁŁ$е™Â­WI.ÍÇ#ŠČ/BAIĽÄ`ĐÁ4J’ÔDÎY@ÓZ„ÜGW÷5ËżBÄ µŮś NÓY"VI2ŰĚ [ 164.622267][ T30] audit: type=1400 audit(1767045369.726:303): avc: denied { write } for pid=6801 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.627001][ T6802] [U] Üľ4B`Ë—HÔT¦_K5¸T¬YJĐŢÎ9ĐŐCĘ$BRźLÚNUL ¶Ü9WČÝÍ|žGĹ"ĘĆ%ÇÚ¶ĘCŞŘť°¶şQÎŮ źÇ3‹ĆQŻÔN^HP*˝Ü$ µ.Î7YÓ±ś2ł [ 164.677854][ T6802] [U] ˝?©ß HÜÄ*ŮÁ”Î3Íť7ÜÉŤľ^#Qť"0~‡ ‚Đ(ÉOĎX LŚBŁ,'VÎÓ=‹ÝËCĚS«…’G‚S¶Ţ0•Ö‚‹Ů`›žŮ‡ź†=1(÷Îľ™÷P#Ň2DO*É [ 164.690545][ T6802] [U] ©Są“Gžµ˛¶“GUĐÔD-{¸™Â|&“Ź®źźŃ2µ›LŢC_©ś!`¨ÍOZÖĄ˘B¶ł%>ĘRѶÖWχݎSSÂH"ŁYA4ŁO.šYŮŰÄŹ„RTÔ¶ŚBÚ[+/<>—ˇ{Q˘Ú×_˛ŐťLX8ĘU„ÇŘÎ{ĐZłÍŘ)ßŇ7?ËRR;ßCżR HײڣÁ»¨Č1Ĺ>)©MĉĎT§˛Ú(ĚÇAĎť„}9·ÚĄĂJ*MŃśĄÄˇ«'LąŁQ ĚDWźŇظ=Ř˝|Q¬ ĎÆ™W;5ĆŮĹ˝Ş!ŃDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 164.795647][ T6802] [U] M¢XÎÂ"Ä{;Ž ŐĄÂŮ_O2«Ń)ÎO®›.2ĐW2ʲ¨ĐYŮĂĂX_ HPϱśSŞD­Ť¦Ř:]‚{Ë©ÔÝĆČ˝ [ 164.805821][ T6802] [U] I,Ç>ÇÓ¤ ÎŮ51Ń÷^1ŇN4ŻOǶŢ'0Ý?Ö’IŮ9W.Ď_.¶WŠAĽŠŤV±`)ŃZ¬ĎĆC6GIÓą˛A»¬XL[˘›˝ˇFÜ*ŔŃO‰W)+‡Ç'\NĆ[K@ŃËÄÜ2ÇǬ–®ˇP"^`Á‰Í Řż [ 164.820149][ T6802] [U] 22˝“Ć©ĐŰ©X?0;3U± [ 164.825004][ T6802] [U] ŢśŐĆŤÓSOBX 8”W4Á‘(Đ~/§żÍKÇUžĂÔ–OQËE+·G®-YµGY_•>V˘ÜČË—3.HÁÓ™]Í„˛2‘”)™DË, ‘Ä ŢD~×D©Łˇ+ĂW; A\FPÉŢČ|$şŘ)ťKŘIłÉĐÉżKŃYT^RÍÜŮÇ™µ“ËA=±#–Üś ÝÍżËAE©TĹ1·ÎÝŻ4KŻ.E"RÚS|ĐźŔSÖ’Á:•Ů>P ™…RĐ"Z‰Ú­ŰÚÉ#P!KY"›}ĂĆFżN84ÜłĹHޱŁO•ČSż™Ě«%DLWŮMĆ˛Ç [ 164.853742][ T6802] [U] [Ş['XN€'˛÷ ÁżÜ,MR¦«/žšśÂ1D=!DŽX91BŮWÇ»R—LF…ĆK̤ZŐĘ# `Ě‘ LŘ›§Ëś»×B~ĹMŇÔÖ [ 164.863528][ T6802] [U] ™LÖ>ŃD+DŻ§—®Ě"5ŽĘŤťH3<ިĹIR=F^”FŤNŐÓÜŔ‰żŰ­VŰ÷śDÁOIOÚ:UÖ>ÖY [ 164.872677][ T6802] [U] 'B—6VÝ20łÄ·ÇžĄ·×ŚĎ"T8Ń{9ĆFWťŤ]ÔĘÄĚ©Ť [ 164.883207][ T6802] [U] Ů72މĎÂĂUŢC6™ÎÜÔĎ„I]8CŞŁTۨQSKYŢÎIŇŔÂą ż|V'ŰTV/ŮĹG•$[ 9KH`Ú"Ü‘ÚŐ}€Ń[^=Ú0Á]˝Ă%ĆĚ‚T“ŠžąŘFĚ_VÖ4C¸ŇĹ [ 164.895703][ T6802] [U] ą EC [ 164.899093][ T6802] [U] Ź—”|‚ĘĚ<ÄÎ:^Ü3$7NK~Ř-™@÷¦?ź–/MTL·Űľ©IWȬ@G~TŘ{ĘÜPż+Ć$ŞJP|µ ŽÇIŰRIÓŤPMĐ Ő·YÓ Ú”8ĚTÉĐŢVžŮßĆË,ÎLÂ,Ő [ 164.917706][ T6802] [U] KĚÚŰŐ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓŇśZÚŢR¬™ß @BÓ]Â5ÝĘ{­©ĘĽÔ'Ŕ8ĹĆĄF‡ąUTQUDÇ©¤K;7ÍŞ0C[„ĂY–ĽČYC¦¶»Ř°MŞ™LŇ8’T…ÍšÎ5łÝÝRX™¶ĐWÍ X¤˛ÓOQHVI'8śĄÎ…Lµ [ 165.127287][ T6806] FAULT_INJECTION: forcing a failure. [ 165.127287][ T6806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.160685][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.0.226 Not tainted syzkaller #0 PREEMPT(full) [ 165.160713][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.160725][ T6806] Call Trace: [ 165.160732][ T6806] [ 165.160740][ T6806] dump_stack_lvl+0x16c/0x1f0 [ 165.160771][ T6806] should_fail_ex+0x512/0x640 [ 165.160805][ T6806] _copy_from_iter+0x2a4/0x16c0 [ 165.160838][ T6806] ? __alloc_skb+0x220/0x410 [ 165.160864][ T6806] ? __alloc_skb+0x35d/0x410 [ 165.160892][ T6806] ? __pfx__copy_from_iter+0x10/0x10 [ 165.160926][ T6806] ? netlink_autobind.isra.0+0x158/0x370 [ 165.160961][ T6806] netlink_sendmsg+0x820/0xdd0 [ 165.160990][ T6806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.161025][ T6806] ____sys_sendmsg+0xa5d/0xc30 [ 165.161051][ T6806] ? copy_msghdr_from_user+0x10a/0x160 [ 165.161072][ T6806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.161109][ T6806] ___sys_sendmsg+0x134/0x1d0 [ 165.161131][ T6806] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.161187][ T6806] __sys_sendmsg+0x16d/0x220 [ 165.161208][ T6806] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.161247][ T6806] do_syscall_64+0xcd/0xf80 [ 165.161275][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.161296][ T6806] RIP: 0033:0x7f7b5258f749 [ 165.161312][ T6806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.161331][ T6806] RSP: 002b:00007f7b534e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.161351][ T6806] RAX: ffffffffffffffda RBX: 00007f7b527e5fa0 RCX: 00007f7b5258f749 [ 165.161365][ T6806] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 165.161377][ T6806] RBP: 00007f7b534e2090 R08: 0000000000000000 R09: 0000000000000000 [ 165.161389][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.161401][ T6806] R13: 00007f7b527e6038 R14: 00007f7b527e5fa0 R15: 00007ffccaa52b78 [ 165.161431][ T6806] [ 166.260885][ T30] audit: type=1400 audit(1767045371.006:304): avc: denied { read } for pid=6812 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 168.412439][ T5927] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 168.509422][ T30] audit: type=1400 audit(1767045373.606:305): avc: denied { mount } for pid=6846 comm="syz.0.239" name="/" dev="ramfs" ino=12305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 168.533661][ T6848] fuse: Unknown parameter '0x0000000000000003' [ 168.567792][ T6829] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 168.598027][ T30] audit: type=1400 audit(1767045373.706:306): avc: denied { execute } for pid=6846 comm="syz.0.239" path="/pids.current" dev="ramfs" ino=12255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 168.663180][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 168.674207][ T5927] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 168.690583][ T6854] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 168.697989][ T5927] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 168.698017][ T5927] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 168.698038][ T5927] usb 3-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 168.698059][ T5927] usb 3-1: config 0 has no interface number 0 [ 168.700241][ T5927] usb 3-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=45.0a [ 169.058643][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.066764][ T5927] usb 3-1: Product: syz [ 169.070937][ T5927] usb 3-1: Manufacturer: syz [ 169.076357][ T5927] usb 3-1: SerialNumber: syz [ 169.083507][ T5927] usb 3-1: config 0 descriptor?? [ 169.282432][ T6862] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.446561][ T5927] hub 3-1:0.167: bad descriptor, ignoring hub [ 169.453163][ T5927] hub 3-1:0.167: probe with driver hub failed with error -5 [ 169.465001][ T5927] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 169.481912][ T5927] dw2102: su3000_power_ctrl: 1, initialized 0 [ 169.507847][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 169.518963][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.529613][ T6862] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.540491][ T5927] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 169.562173][ T5927] usb 3-1: media controller created [ 169.570467][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 169.584825][ T6864] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 169.603175][ T5927] dw2102: i2c transfer failed. [ 169.618375][ T6862] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.630331][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 169.631132][ T30] audit: type=1400 audit(1767045374.746:307): avc: denied { bind } for pid=6865 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.690368][ T30] audit: type=1400 audit(1767045374.776:308): avc: denied { setopt } for pid=6865 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.714469][ T5927] dw2102: i2c transfer failed. [ 169.719268][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 169.723254][ T6862] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.753220][ T5927] dw2102: i2c transfer failed. [ 169.765446][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 169.790807][ T5927] dw2102: i2c transfer failed. [ 169.801153][ T30] audit: type=1400 audit(1767045374.906:309): avc: denied { create } for pid=6869 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 169.801687][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 169.827783][ T5927] dw2102: i2c transfer failed. [ 169.836777][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 169.843006][ T5927] dw2102: i2c transfer failed. [ 169.849262][ T5927] dvb-usb: MAC address: 02:02:02:02:02:02 [ 169.871752][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.871940][ T30] audit: type=1400 audit(1767045374.956:310): avc: denied { ioctl } for pid=6869 comm="syz.1.245" path="socket:[12349]" dev="sockfs" ino=12349 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 169.953811][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 169.984212][ T5927] dw2102: command 0x0e transfer failed. [ 169.990069][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 169.999272][ T30] audit: type=1400 audit(1767045375.106:311): avc: denied { map } for pid=6872 comm="syz.1.246" path="socket:[12353]" dev="sockfs" ino=12353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.001835][ T5927] dw2102: command 0x0e transfer failed. [ 170.051894][ T30] audit: type=1400 audit(1767045375.146:312): avc: denied { read accept } for pid=6872 comm="syz.1.246" path="socket:[12353]" dev="sockfs" ino=12353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.307987][ T6880] netlink: 35 bytes leftover after parsing attributes in process `syz.1.246'. [ 170.392951][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 170.410548][ T30] audit: type=1400 audit(1767045375.516:313): avc: denied { nlmsg_read } for pid=6872 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.432908][ T30] audit: type=1400 audit(1767045375.546:314): avc: denied { write } for pid=6872 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.455751][ T5927] dw2102: command 0x0e transfer failed. [ 170.486556][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 170.494596][ T4480] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.524141][ T5927] dw2102: command 0x0e transfer failed. [ 170.538311][ T4480] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.573101][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 170.595222][ T5927] dw2102: command 0x51 transfer failed. [ 170.636739][ T4480] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.681636][ T4480] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.736412][ T5927] DVB: Unable to find symbol ds3000_attach() [ 170.774164][ T5927] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 170.951878][ T5927] rc_core: IR keymap rc-su3000 not found [ 170.957825][ T5927] Registered IR keymap rc-empty [ 170.983369][ T5927] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 171.023940][ T5927] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 171.051629][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 171.109089][ T5927] dvb-usb: schedule remote query interval to 150 msecs. [ 171.116391][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 171.138676][ T5927] dw2102: su3000_power_ctrl: 0, initialized 1 [ 171.161917][ T5927] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 171.241686][ T5927] usb 3-1: USB disconnect, device number 9 [ 171.292916][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 171.298856][ T5882] dw2102: i2c transfer failed. [ 171.433915][ T6892] FAULT_INJECTION: forcing a failure. [ 171.433915][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 171.469340][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.2.250 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.469374][ T6892] Tainted: [L]=SOFTLOCKUP [ 171.469381][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.469393][ T6892] Call Trace: [ 171.469400][ T6892] [ 171.469409][ T6892] dump_stack_lvl+0x16c/0x1f0 [ 171.469439][ T6892] should_fail_ex+0x512/0x640 [ 171.469467][ T6892] ? fs_reclaim_acquire+0xae/0x150 [ 171.469496][ T6892] should_failslab+0xc2/0x120 [ 171.469528][ T6892] __kmalloc_noprof+0xeb/0x910 [ 171.469558][ T6892] ? tomoyo_encode2+0x100/0x3e0 [ 171.469590][ T6892] ? tomoyo_encode2+0x100/0x3e0 [ 171.469614][ T6892] tomoyo_encode2+0x100/0x3e0 [ 171.469643][ T6892] tomoyo_encode+0x29/0x50 [ 171.469668][ T6892] tomoyo_realpath_from_path+0x18f/0x6e0 [ 171.469703][ T6892] tomoyo_path_number_perm+0x245/0x580 [ 171.469725][ T6892] ? tomoyo_path_number_perm+0x237/0x580 [ 171.469750][ T6892] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.469775][ T6892] ? find_held_lock+0x2b/0x80 [ 171.469831][ T6892] ? find_held_lock+0x2b/0x80 [ 171.469858][ T6892] ? hook_file_ioctl_common+0x144/0x410 [ 171.469894][ T6892] ? __fget_files+0x20e/0x3c0 [ 171.469926][ T6892] security_file_ioctl+0x9b/0x240 [ 171.469954][ T6892] __x64_sys_ioctl+0xb7/0x210 [ 171.469978][ T6892] do_syscall_64+0xcd/0xf80 [ 171.470006][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.470026][ T6892] RIP: 0033:0x7f5f1e98f749 [ 171.470044][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.470063][ T6892] RSP: 002b:00007f5f1cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.470082][ T6892] RAX: ffffffffffffffda RBX: 00007f5f1ebe5fa0 RCX: 00007f5f1e98f749 [ 171.470096][ T6892] RDX: 0000200000000100 RSI: 00000000400454d8 RDI: 0000000000000005 [ 171.470109][ T6892] RBP: 00007f5f1cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.470121][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.470133][ T6892] R13: 00007f5f1ebe6038 R14: 00007f5f1ebe5fa0 R15: 00007ffcc80c60e8 [ 171.470162][ T6892] [ 171.591891][ T6892] ERROR: Out of memory at tomoyo_realpath_from_path. [ 171.739540][ T5927] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 173.391897][ T6902] bridge2: entered promiscuous mode [ 173.397180][ T6902] bridge2: entered allmulticast mode [ 174.219694][ T30] audit: type=1400 audit(1767045379.316:315): avc: denied { mounton } for pid=6918 comm="syz.0.257" path="/47/bus/bus" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.220162][ T5927] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 174.540047][ T5188] udevd[5188]: worker [5815] terminated by signal 33 (Unknown signal 33) [ 174.560639][ T5188] udevd[5188]: worker [5815] failed while handling '/devices/virtual/block/loop1' [ 174.588478][ T30] audit: type=1400 audit(1767045379.696:316): avc: denied { bind } for pid=6928 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.679302][ T5927] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.699923][ T6922] Mount JFS Failure: -22 [ 174.704218][ T6922] jfs_mount failed w/return code = -22 [ 174.711892][ T6922] SELinux: syz.2.258 (6922) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 174.749396][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.766733][ T30] audit: type=1400 audit(1767045379.816:317): avc: denied { create } for pid=6920 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.822594][ T5927] usb 5-1: config 0 descriptor?? [ 174.873674][ T5927] cp210x 5-1:0.0: cp210x converter detected [ 175.064638][ T6934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.199372][ T6934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.330344][ T6934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.491637][ T5927] usb 5-1: cp210x converter now attached to ttyUSB0 [ 175.510707][ T6934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.550193][ T5927] usb 5-1: USB disconnect, device number 8 [ 175.577072][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 175.592148][ T5927] cp210x 5-1:0.0: device disconnected [ 175.857249][ T4077] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.941045][ T6429] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.090239][ T6429] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.158287][ T4077] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.821045][ T30] audit: type=1400 audit(1767045381.786:318): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.847765][ T30] audit: type=1400 audit(1767045381.956:319): avc: denied { mount } for pid=6953 comm="syz.4.266" name="/" dev="configfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 176.915481][ T30] audit: type=1400 audit(1767045381.956:320): avc: denied { search } for pid=6953 comm="syz.4.266" name="/" dev="configfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.014640][ T30] audit: type=1400 audit(1767045382.126:321): avc: denied { create } for pid=6957 comm="syz.1.267" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=blk_file permissive=1 [ 177.073825][ T30] audit: type=1400 audit(1767045382.126:322): avc: denied { read } for pid=6957 comm="syz.1.267" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.097273][ T30] audit: type=1400 audit(1767045382.126:323): avc: denied { open } for pid=6957 comm="syz.1.267" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.147043][ T30] audit: type=1400 audit(1767045382.156:324): avc: denied { ioctl } for pid=6957 comm="syz.1.267" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.172563][ T30] audit: type=1400 audit(1767045382.176:325): avc: denied { write } for pid=6957 comm="syz.1.267" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.363467][ T5953] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 177.532094][ T5953] usb 1-1: device descriptor read/64, error -71 [ 177.742977][ T6974] ubi: mtd0 is already attached to ubi31 [ 178.243726][ T6972] vxfs: WRONG superblock magic 00000000 at 1 [ 178.249357][ T5953] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 178.250807][ T6972] vxfs: WRONG superblock magic 00000000 at 8 [ 178.264496][ T6972] vxfs: can't find superblock. [ 178.383462][ T6978] vxfs: WRONG superblock magic 00000000 at 1 [ 178.390674][ T6978] vxfs: WRONG superblock magic 00000000 at 8 [ 178.396773][ T6978] vxfs: can't find superblock. [ 178.752553][ T5953] usb 1-1: device descriptor read/64, error -71 [ 178.862417][ T5953] usb usb1-port1: attempt power cycle [ 179.211960][ T5953] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 179.232303][ T5953] usb 1-1: device descriptor read/8, error -71 [ 179.471958][ T5953] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 179.512706][ T5953] usb 1-1: device descriptor read/8, error -71 [ 179.622465][ T5953] usb usb1-port1: unable to enumerate USB device [ 180.462635][ T6991] netlink: 120 bytes leftover after parsing attributes in process `syz.2.275'. [ 180.501409][ T30] audit: type=1400 audit(1767045385.496:326): avc: denied { read write } for pid=6986 comm="syz.2.275" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 180.781913][ T30] audit: type=1400 audit(1767045385.496:327): avc: denied { open } for pid=6986 comm="syz.2.275" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 181.751300][ T30] audit: type=1400 audit(1767045386.856:328): avc: denied { ioctl } for pid=7007 comm="syz.3.279" path="socket:[12660]" dev="sockfs" ino=12660 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.800429][ T30] audit: type=1400 audit(1767045386.876:329): avc: denied { accept } for pid=7007 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.415903][ T7031] 9pnet_virtio: no channels available for device syz [ 182.449450][ T7031] overlayfs: overlapping lowerdir path [ 182.587276][ T7033] Mount JFS Failure: -22 [ 182.591600][ T7033] jfs_mount failed w/return code = -22 [ 183.263603][ T30] audit: type=1400 audit(1767045387.716:330): avc: denied { write } for pid=7020 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.143729][ T7041] vxfs: WRONG superblock magic 00000000 at 1 [ 184.150775][ T7041] vxfs: WRONG superblock magic 00000000 at 8 [ 184.156889][ T7041] vxfs: can't find superblock. [ 185.091985][ T30] audit: type=1400 audit(1767045390.176:331): avc: denied { write } for pid=7048 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.301937][ T1066] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.571913][ T1066] usb 4-1: Using ep0 maxpacket: 32 [ 185.581033][ T1066] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 185.601919][ T1066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.610070][ T1066] usb 4-1: Product: syz [ 185.615508][ T1066] usb 4-1: Manufacturer: syz [ 185.620550][ T1066] usb 4-1: SerialNumber: syz [ 185.631082][ T1066] usb 4-1: config 0 descriptor?? [ 185.639268][ T1066] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 186.440542][ T30] audit: type=1400 audit(1767045391.546:332): avc: denied { ioctl } for pid=7068 comm="syz.0.297" path="socket:[14167]" dev="sockfs" ino=14167 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.102788][ T7078] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 187.233453][ T30] audit: type=1400 audit(1767045392.346:333): avc: denied { create } for pid=7084 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.635392][ T1066] gspca_topro: Sensor cx0342 [ 187.645478][ T30] audit: type=1400 audit(1767045392.756:334): avc: denied { connect } for pid=7086 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.667611][ T7087] netlink: 68 bytes leftover after parsing attributes in process `syz.0.303'. [ 187.675481][ T30] audit: type=1400 audit(1767045392.756:335): avc: denied { name_connect } for pid=7086 comm="syz.0.303" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 187.709226][ T7087] netlink: 44 bytes leftover after parsing attributes in process `syz.0.303'. [ 187.727849][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 187.781294][ T7095] overlayfs: missing 'lowerdir' [ 187.847310][ T7097] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 187.884751][ T7097] overlayfs: overlapping lowerdir path [ 187.885910][ T7082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.621235][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.307'. [ 189.781893][ T1066] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.966376][ T1066] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 189.980259][ T1066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.057903][ T1066] usb 2-1: config 0 descriptor?? [ 190.085023][ T1066] cp210x 2-1:0.0: cp210x converter detected [ 190.584108][ T1066] usb 2-1: cp210x converter now attached to ttyUSB0 [ 190.626435][ T1066] usb 2-1: USB disconnect, device number 9 [ 190.672550][ T1066] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.722424][ T1066] cp210x 2-1:0.0: device disconnected [ 190.775655][ T7121] Invalid logical block size (1792) [ 191.006363][ T30] audit: type=1400 audit(1767045396.116:336): avc: denied { ioctl } for pid=7126 comm="syz.0.314" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 191.183580][ T7131] veth0_to_bridge: entered promiscuous mode [ 191.216784][ T7131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.316'. [ 191.406552][ T7140] fuse: Invalid rootmode [ 191.462073][ T30] audit: type=1400 audit(1767045396.576:337): avc: denied { setopt } for pid=7134 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 191.575555][ T6027] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 191.599030][ T7142] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 191.780180][ T6027] usb 5-1: config 3 has an invalid interface number: 3 but max is 2 [ 191.791936][ T6027] usb 5-1: config 3 has an invalid interface number: 186 but max is 2 [ 191.805809][ T6027] usb 5-1: config 3 has an invalid interface number: 153 but max is 2 [ 191.841309][ T6027] usb 5-1: config 3 has no interface number 0 [ 191.857496][ T6027] usb 5-1: config 3 has no interface number 1 [ 191.885087][ T6027] usb 5-1: config 3 has no interface number 2 [ 191.912658][ T6027] usb 5-1: config 3 interface 3 has no altsetting 0 [ 191.939039][ T6027] usb 5-1: config 3 interface 186 has no altsetting 0 [ 191.974400][ T6027] usb 5-1: config 3 interface 153 has no altsetting 0 [ 191.991552][ T6027] usb 5-1: New USB device found, idVendor=05c6, idProduct=9222, bcdDevice=a0.55 [ 192.008367][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.025280][ T6027] usb 5-1: Product: syz [ 192.031022][ T6027] usb 5-1: Manufacturer: syz [ 192.037884][ T6027] usb 5-1: SerialNumber: syz [ 192.196840][ T7152] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 192.265245][ T7152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.316051][ T7131] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7131 comm=syz.4.316 [ 192.340856][ T7154] bond1: (slave veth3): Enslaving as an active interface with a down link [ 192.370234][ T7154] netlink: 'syz.2.321': attribute type 10 has an invalid length. [ 192.378277][ T7154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.321'. [ 192.415363][ T7152] bond1: (slave dummy0): making interface the new active one [ 192.435060][ T6027] usb 5-1: USB disconnect, device number 9 [ 192.446101][ T7152] dummy0: entered promiscuous mode [ 192.474161][ T7152] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 192.492969][ T7130] veth0_to_bridge: left promiscuous mode [ 192.531270][ T7154] bond1: (slave dummy0): Releasing active interface [ 192.574176][ T30] audit: type=1400 audit(1767045397.686:338): avc: denied { unlink } for pid=7156 comm="syz.0.322" name="#1" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.655399][ T30] audit: type=1400 audit(1767045397.686:339): avc: denied { mount } for pid=7156 comm="syz.0.322" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 192.699091][ T30] audit: type=1400 audit(1767045397.766:340): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 193.116197][ T30] audit: type=1400 audit(1767045398.226:341): avc: denied { map } for pid=7158 comm="syz.2.323" path="socket:[14418]" dev="sockfs" ino=14418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 193.162402][ T30] audit: type=1400 audit(1767045398.266:342): avc: denied { setopt } for pid=7158 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.439564][ T7169] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.477580][ T7169] binfmt_misc: register: failed to install interpreter file ./file0 [ 193.569824][ T30] audit: type=1400 audit(1767045398.556:343): avc: denied { getopt } for pid=7164 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.790613][ T30] audit: type=1400 audit(1767045398.576:344): avc: denied { mounton } for pid=7164 comm="syz.0.325" path="/67/file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 193.863960][ T30] audit: type=1400 audit(1767045398.976:345): avc: denied { mounton } for pid=7172 comm="syz.1.328" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 193.864001][ T7174] tmpfs: Bad value for 'mpol' [ 194.078737][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.086912][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.181932][ T1066] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 194.234359][ T3908] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 194.371638][ T1066] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 194.391186][ T1066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.424001][ T1066] usb 3-1: config 0 descriptor?? [ 194.447725][ T1066] cp210x 3-1:0.0: cp210x converter detected [ 194.666819][ T7192] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 194.811884][ T5813] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 194.820487][ T5813] Bluetooth: hci2: Injecting HCI hardware error event [ 195.142795][ T1066] usb 3-1: cp210x converter now attached to ttyUSB0 [ 195.163949][ T1066] usb 3-1: USB disconnect, device number 10 [ 195.183649][ T1066] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 195.202352][ T1066] cp210x 3-1:0.0: device disconnected [ 196.151932][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 196.158246][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 196.166209][ T5813] Bluetooth: hci4: command 0x0405 tx timeout [ 196.172994][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 196.655925][ T7203] openvswitch: netlink: Missing key (keys=40, expected=100) [ 197.164370][ T5830] Bluetooth: hci2: hardware error 0x00 [ 197.446499][ T30] audit: type=1400 audit(1767045402.546:346): avc: denied { getopt } for pid=7208 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.738916][ T7218] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.337'. [ 197.782478][ T7218] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 197.951906][ T5926] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 198.122152][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 198.152364][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.342572][ T5926] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 198.351356][ T5926] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 198.401487][ T5926] usb 3-1: config 4 has no interface number 0 [ 198.514133][ T5926] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 198.523580][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.532268][ T5926] usb 3-1: Product: syz [ 198.536413][ T5926] usb 3-1: Manufacturer: syz [ 198.540975][ T5926] usb 3-1: SerialNumber: syz [ 199.018376][ T7229] kAFS: unable to lookup cell 'Ţ({^ú@' [ 199.214054][ T5830] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 199.351940][ T30] audit: type=1400 audit(1767045404.456:347): avc: denied { bind } for pid=7216 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 199.432025][ T30] audit: type=1400 audit(1767045404.466:348): avc: denied { accept } for pid=7216 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 199.668633][ T7240] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.828384][ T30] audit: type=1400 audit(1767045404.936:349): avc: denied { connect } for pid=7241 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.899872][ T7240] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.946355][ T30] audit: type=1400 audit(1767045405.056:350): avc: denied { ioctl } for pid=7241 comm="syz.0.346" path="socket:[13053]" dev="sockfs" ino=13053 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.034586][ T7240] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.161993][ T7240] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.372379][ T3496] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.389572][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.400233][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.409295][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.417148][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.425203][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.494744][ T6441] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.545413][ T6441] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.647530][ T6441] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.768827][ T5926] uvcvideo 3-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 200.798547][ T5926] uvcvideo 3-1:4.147: No valid video chain found. [ 200.817495][ T5926] usb 3-1: USB disconnect, device number 11 [ 200.850710][ T7253] FAULT_INJECTION: forcing a failure. [ 200.850710][ T7253] name failslab, interval 1, probability 0, space 0, times 0 [ 200.866927][ T7253] CPU: 0 UID: 0 PID: 7253 Comm: syz.1.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.866961][ T7253] Tainted: [L]=SOFTLOCKUP [ 200.866969][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.866988][ T7253] Call Trace: [ 200.866995][ T7253] [ 200.867004][ T7253] dump_stack_lvl+0x16c/0x1f0 [ 200.867035][ T7253] should_fail_ex+0x512/0x640 [ 200.867063][ T7253] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 200.867092][ T7253] should_failslab+0xc2/0x120 [ 200.867118][ T7253] __kmalloc_cache_node_noprof+0x83/0x830 [ 200.867148][ T7253] ? __get_vm_area_node+0x101/0x330 [ 200.867181][ T7253] ? __get_vm_area_node+0x101/0x330 [ 200.867207][ T7253] __get_vm_area_node+0x101/0x330 [ 200.867233][ T7253] ? qp_host_map_queues+0x26a/0x380 [ 200.867263][ T7253] get_vm_area_caller+0x71/0xa0 [ 200.867290][ T7253] ? qp_host_map_queues+0x26a/0x380 [ 200.867320][ T7253] vmap+0x135/0x320 [ 200.867346][ T7253] ? __pfx_vmap+0x10/0x10 [ 200.867380][ T7253] qp_host_map_queues+0x26a/0x380 [ 200.867409][ T7253] ? __pfx_qp_host_map_queues+0x10/0x10 [ 200.867447][ T7253] vmci_qp_broker_unmap+0x852/0xb60 [ 200.867472][ T7253] ? __pfx_vmci_qp_broker_unmap+0x10/0x10 [ 200.867503][ T7253] vmci_host_unlocked_ioctl+0xdd0/0x2040 [ 200.867536][ T7253] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 200.867565][ T7253] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.867591][ T7253] ? do_vfs_ioctl+0x128/0x14f0 [ 200.867614][ T7253] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 200.867637][ T7253] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 200.867675][ T7253] ? hook_file_ioctl_common+0x144/0x410 [ 200.867716][ T7253] ? selinux_file_ioctl+0x180/0x270 [ 200.867741][ T7253] ? selinux_file_ioctl+0xb4/0x270 [ 200.867768][ T7253] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 200.867799][ T7253] __x64_sys_ioctl+0x18e/0x210 [ 200.867822][ T7253] do_syscall_64+0xcd/0xf80 [ 200.867848][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.867869][ T7253] RIP: 0033:0x7f46eab8f749 [ 200.867884][ T7253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.867903][ T7253] RSP: 002b:00007f46eb940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.867920][ T7253] RAX: ffffffffffffffda RBX: 00007f46eade5fa0 RCX: 00007f46eab8f749 [ 200.867933][ T7253] RDX: 0000200000000540 RSI: 00000000000007a4 RDI: 0000000000000003 [ 200.867945][ T7253] RBP: 00007f46eb940090 R08: 0000000000000000 R09: 0000000000000000 [ 200.867957][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.867969][ T7253] R13: 00007f46eade6038 R14: 00007f46eade5fa0 R15: 00007ffdac6b0d78 [ 200.868003][ T7253] [ 200.868013][ T7253] vmap failed [ 200.931999][ T5961] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 201.180921][ T30] audit: type=1400 audit(1767045406.286:351): avc: denied { module_request } for pid=7245 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 201.255054][ T7245] chnl_net:caif_netlink_parms(): no params data found [ 201.401732][ T7253] Failed to save queue headers for queue pair (handle=0x1:0x2,result=-3) [ 201.421869][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 201.428620][ T5961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.438768][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 201.471570][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 201.508332][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.675250][ T5961] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 201.708249][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.741931][ T5961] usb 5-1: Product: syz [ 201.752583][ T5961] usb 5-1: Manufacturer: syz [ 201.758691][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.773430][ T5961] usb 5-1: SerialNumber: syz [ 201.778226][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.804218][ T5961] usb 5-1: config 0 descriptor?? [ 201.812161][ T7245] bridge_slave_0: entered allmulticast mode [ 201.832810][ T7245] bridge_slave_0: entered promiscuous mode [ 201.855426][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.869340][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.892935][ T7245] bridge_slave_1: entered allmulticast mode [ 201.908502][ T7245] bridge_slave_1: entered promiscuous mode [ 201.997146][ T7245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.015616][ T5961] rc_core: IR keymap rc-xbox-dvd not found [ 202.022330][ T6237] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 202.035954][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.348'. [ 202.050171][ T5961] Registered IR keymap rc-empty [ 202.052095][ T7245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.077954][ T5961] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 202.104706][ T5961] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 202.135765][ T30] audit: type=1400 audit(1767045407.246:352): avc: denied { read } for pid=5173 comm="acpid" name="event4" dev="devtmpfs" ino=2883 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.202354][ T6237] usb 2-1: too many endpoints for config 0 interface 0 altsetting 1: 65, using maximum allowed: 30 [ 202.214884][ T30] audit: type=1400 audit(1767045407.266:353): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2883 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.227092][ T5961] usb 5-1: USB disconnect, device number 10 [ 202.238635][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 202.260106][ T6237] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.305263][ T6237] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 202.324205][ T7245] team0: Port device team_slave_0 added [ 202.355048][ T6237] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.364594][ T30] audit: type=1400 audit(1767045407.266:354): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2883 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.385409][ T6237] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 202.392094][ T7245] team0: Port device team_slave_1 added [ 202.471896][ T5138] Bluetooth: hci5: command tx timeout [ 202.539946][ T7279] FAULT_INJECTION: forcing a failure. [ 202.539946][ T7279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.571912][ T7279] CPU: 0 UID: 0 PID: 7279 Comm: syz.2.355 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.571947][ T7279] Tainted: [L]=SOFTLOCKUP [ 202.571955][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.571967][ T7279] Call Trace: [ 202.571973][ T7279] [ 202.571982][ T7279] dump_stack_lvl+0x16c/0x1f0 [ 202.572012][ T7279] should_fail_ex+0x512/0x640 [ 202.572045][ T7279] _copy_to_user+0x32/0xd0 [ 202.572077][ T7279] simple_read_from_buffer+0xcb/0x170 [ 202.572107][ T7279] proc_fail_nth_read+0x197/0x240 [ 202.572130][ T7279] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.572154][ T7279] ? rw_verify_area+0xcf/0x6c0 [ 202.572180][ T7279] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.572201][ T7279] vfs_read+0x1e4/0xcf0 [ 202.572227][ T7279] ? __pfx___mutex_lock+0x10/0x10 [ 202.572256][ T7279] ? __pfx_vfs_read+0x10/0x10 [ 202.572289][ T7279] ? __fget_files+0x20e/0x3c0 [ 202.572324][ T7279] ksys_read+0x12a/0x250 [ 202.572348][ T7279] ? __pfx_ksys_read+0x10/0x10 [ 202.572381][ T7279] do_syscall_64+0xcd/0xf80 [ 202.572408][ T7279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.572429][ T7279] RIP: 0033:0x7f5f1e98e15c [ 202.572446][ T7279] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.572466][ T7279] RSP: 002b:00007f5f1cbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.572491][ T7279] RAX: ffffffffffffffda RBX: 00007f5f1ebe5fa0 RCX: 00007f5f1e98e15c [ 202.572505][ T7279] RDX: 000000000000000f RSI: 00007f5f1cbf60a0 RDI: 0000000000000004 [ 202.572518][ T7279] RBP: 00007f5f1cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.572528][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.572540][ T7279] R13: 00007f5f1ebe6038 R14: 00007f5f1ebe5fa0 R15: 00007ffcc80c60e8 [ 202.572571][ T7279] [ 202.585988][ T6237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.778805][ T6237] usb 2-1: config 0 descriptor?? [ 202.821745][ T7283] xt_hashlimit: size too large, truncated to 1048576 [ 202.931340][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.941591][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.984503][ T7245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.008912][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.027142][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.084327][ T7245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.152925][ T7245] hsr_slave_0: entered promiscuous mode [ 203.159901][ T7245] hsr_slave_1: entered promiscuous mode [ 203.167255][ T7245] debugfs: 'hsr0' already exists in 'hsr' [ 203.173676][ T7245] Cannot create hsr debugfs directory [ 203.261589][ T6237] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 203.761557][ T7245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.777590][ T7245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.789981][ T7245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.803414][ T7245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.023757][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.041018][ T30] audit: type=1400 audit(1767045409.116:355): avc: denied { ioctl } for pid=7308 comm="syz.4.361" path="socket:[15654]" dev="sockfs" ino=15654 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.090406][ T7245] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.108905][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.116097][ T6441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.192669][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.199847][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.270109][ T7311] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 204.295957][ T7311] audit: out of memory in audit_log_start [ 204.514119][ T30] audit: type=1400 audit(1767045409.626:356): avc: denied { setopt } for pid=7318 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.552558][ T5138] Bluetooth: hci5: command tx timeout [ 204.778831][ T5926] usb 2-1: USB disconnect, device number 10 [ 205.351929][ T30] audit: type=1326 audit(1767045410.436:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f1e98f749 code=0x0 [ 206.229719][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.631899][ T5138] Bluetooth: hci5: command tx timeout [ 207.266542][ T6237] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 207.472883][ T6237] usb 1-1: Using ep0 maxpacket: 16 [ 207.740799][ T6237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.768435][ T6237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.779420][ T7367] IPVS: set_ctl: invalid protocol: 92 172.30.0.2:20004 [ 207.788857][ T6237] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.823982][ T6237] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 207.858519][ T6237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.890126][ T6237] usb 1-1: config 0 descriptor?? [ 207.904618][ T7245] veth0_vlan: entered promiscuous mode [ 207.956111][ T7245] veth1_vlan: entered promiscuous mode [ 208.362641][ T7352] random: crng reseeded on system resumption [ 208.410613][ T30] audit: type=1400 audit(1767045413.466:358): avc: denied { read write } for pid=7339 comm="syz.0.371" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 208.821018][ T5138] Bluetooth: hci5: command tx timeout [ 209.009666][ T7245] veth0_macvtap: entered promiscuous mode [ 209.024838][ T7245] veth1_macvtap: entered promiscuous mode [ 209.038736][ T30] audit: type=1400 audit(1767045413.466:359): avc: denied { ioctl open } for pid=7339 comm="syz.0.371" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 209.324559][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.442591][ T6237] usbhid 1-1:0.0: can't add hid device: -71 [ 209.455181][ T6237] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 209.464315][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.479618][ T6237] usb 1-1: USB disconnect, device number 17 [ 209.495664][ T1155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.541254][ T1155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.583342][ T1155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.745800][ T1155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.766396][ T30] audit: type=1400 audit(1767045414.726:360): avc: denied { create } for pid=7378 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.110408][ T6429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.143078][ T6429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.194134][ T3793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.715675][ T3793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.746612][ T30] audit: type=1400 audit(1767045415.406:361): avc: denied { setopt } for pid=7389 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.850913][ T30] audit: type=1400 audit(1767045415.906:362): avc: denied { mounton } for pid=7245 comm="syz-executor" path="/root/syzkaller.EXf7Ej/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 210.950094][ T30] audit: type=1400 audit(1767045415.926:363): avc: denied { mounton } for pid=7245 comm="syz-executor" path="/root/syzkaller.EXf7Ej/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 211.110167][ T30] audit: type=1400 audit(1767045415.926:364): avc: denied { mounton } for pid=7245 comm="syz-executor" path="/root/syzkaller.EXf7Ej/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 211.382183][ T30] audit: type=1400 audit(1767045415.936:365): avc: denied { mounton } for pid=7245 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 211.414915][ T30] audit: type=1400 audit(1767045416.526:366): avc: denied { read write } for pid=7397 comm="syz.4.384" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 211.895561][ T30] audit: type=1400 audit(1767045416.526:367): avc: denied { open } for pid=7397 comm="syz.4.384" path="/86/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 212.150139][ T7407] ubi: mtd0 is already attached to ubi31 [ 212.548248][ T7416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.666732][ T7416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.847269][ T7416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.080311][ T7416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.220500][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 213.716409][ T7341] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.962143][ T1155] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.990340][ T1155] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.007528][ T1155] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.681917][ T30] audit: type=1400 audit(1767045420.776:368): avc: denied { read } for pid=7449 comm="syz.0.400" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 215.803429][ T30] audit: type=1400 audit(1767045420.786:369): avc: denied { open } for pid=7449 comm="syz.0.400" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 216.416409][ T7464] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 216.422953][ T7464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.436156][ T7464] vhci_hcd vhci_hcd.0: Device attached [ 216.568732][ T7464] bridge_slave_0: left allmulticast mode [ 216.590881][ T7464] bridge_slave_0: left promiscuous mode [ 216.601487][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.715832][ T7464] bridge_slave_1: left allmulticast mode [ 216.723965][ T7464] bridge_slave_1: left promiscuous mode [ 216.730383][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.752028][ T5971] usb 34-1: SetAddress Request (2) to port 0 [ 216.759143][ T5971] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 216.874573][ T7464] bond0: (slave bond_slave_0): Releasing backup interface [ 216.943345][ T7464] bond0: (slave bond_slave_1): Releasing backup interface [ 217.084282][ T7464] team0: Port device team_slave_0 removed [ 217.206670][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 217.266993][ T7464] team0: Port device team_slave_1 removed [ 217.854191][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.861629][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.912347][ T10] usb 2-1: device descriptor read/64, error -71 [ 218.026262][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.034849][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.054515][ T7464] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.119132][ T7465] vhci_hcd: connection reset by peer [ 218.133616][ T3793] vhci_hcd vhci_hcd.0: stop threads [ 218.149141][ T3793] vhci_hcd vhci_hcd.0: release socket [ 218.171982][ T3793] vhci_hcd vhci_hcd.0: disconnect device [ 218.211906][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 218.378332][ T10] usb 2-1: device descriptor read/64, error -71 [ 218.962207][ T10] usb usb2-port1: attempt power cycle [ 219.311902][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 219.355537][ T7497] netlink: 'syz.2.417': attribute type 1 has an invalid length. [ 219.363176][ T10] usb 2-1: device descriptor read/8, error -71 [ 219.668534][ T7501] netlink: 256 bytes leftover after parsing attributes in process `syz.5.416'. [ 219.683438][ T7501] netlink: 64 bytes leftover after parsing attributes in process `syz.5.416'. [ 219.712012][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 219.773661][ T10] usb 2-1: device descriptor read/8, error -71 [ 220.005026][ T10] usb usb2-port1: unable to enumerate USB device [ 220.176724][ T7512] fuse: Bad value for 'fd' [ 221.807049][ T30] audit: type=1400 audit(1767045426.916:370): avc: denied { write } for pid=7522 comm="syz.1.423" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.862789][ T7529] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 221.862789][ T7529] program syz.1.423 not setting count and/or reply_len properly [ 221.918491][ T5971] usb 34-1: device descriptor read/8, error -110 [ 222.117079][ T7535] 9p: Bad value for 'wfdno' [ 222.342717][ T5971] usb usb34-port1: attempt power cycle [ 222.558062][ T30] audit: type=1400 audit(1767045427.666:371): avc: denied { create } for pid=7541 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.053746][ T30] audit: type=1400 audit(1767045428.166:372): avc: denied { ioctl } for pid=7541 comm="syz.4.430" path="socket:[16774]" dev="sockfs" ino=16774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.078709][ T30] audit: type=1400 audit(1767045428.166:373): avc: denied { bind } for pid=7541 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.601651][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 223.630058][ T5971] usb usb34-port1: unable to enumerate USB device [ 223.708177][ T30] audit: type=1400 audit(1767045428.676:374): avc: denied { setopt } for pid=7541 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.835830][ T7548] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.902546][ T30] audit: type=1400 audit(1767045428.706:375): avc: denied { write } for pid=7541 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.997509][ T7548] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.002256][ T30] audit: type=1400 audit(1767045428.706:376): avc: denied { connect } for pid=7541 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.145069][ T7548] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.245435][ T7548] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.824603][ T7555] netlink: 44 bytes leftover after parsing attributes in process `syz.5.433'. [ 224.981978][ T30] audit: type=1400 audit(1767045429.636:377): avc: denied { bind } for pid=7552 comm="syz.5.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.052144][ T30] audit: type=1400 audit(1767045429.636:378): avc: denied { name_bind } for pid=7552 comm="syz.5.433" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 225.115000][ T6433] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.199918][ T1129] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.246970][ T30] audit: type=1400 audit(1767045429.636:379): avc: denied { node_bind } for pid=7552 comm="syz.5.433" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 225.313821][ T1129] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.322214][ T1129] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.500349][ T7591] netlink: 27 bytes leftover after parsing attributes in process `syz.1.444'. [ 229.405307][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.448'. [ 229.625034][ T5926] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 229.923830][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 230.702292][ T5926] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 230.747102][ T7619] syzkaller0: entered promiscuous mode [ 230.767953][ T7619] syzkaller0: entered allmulticast mode [ 231.004138][ T7629] netlink: 'syz.5.455': attribute type 9 has an invalid length. [ 231.030038][ T7629] netlink: 'syz.5.455': attribute type 11 has an invalid length. [ 231.062061][ T7629] netlink: 'syz.5.455': attribute type 12 has an invalid length. [ 231.069852][ T7629] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.455'. [ 231.203661][ T7630] SELinux: Context system_u:object_r:syslogd_exec_t:s0 is not valid (left unmapped). [ 231.215526][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 231.215542][ T30] audit: type=1400 audit(1767045436.336:381): avc: denied { relabelto } for pid=7625 comm="syz.5.455" name="12" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:syslogd_exec_t:s0" [ 231.301936][ T30] audit: type=1400 audit(1767045436.336:382): avc: denied { associate } for pid=7625 comm="syz.5.455" name="12" dev="tmpfs" ino=78 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_exec_t:s0" [ 231.462090][ T30] audit: type=1400 audit(1767045436.366:383): avc: denied { mounton } for pid=7625 comm="syz.5.455" path="/12" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:syslogd_exec_t:s0" [ 231.820129][ T30] audit: type=1400 audit(1767045436.366:384): avc: denied { mount } for pid=7625 comm="syz.5.455" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 231.978142][ T30] audit: type=1400 audit(1767045437.086:385): avc: denied { unmount } for pid=7245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 232.122005][ T30] audit: type=1400 audit(1767045437.126:386): avc: denied { remove_name } for pid=7245 comm="syz-executor" name="binderfs" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:syslogd_exec_t:s0" [ 232.240373][ T30] audit: type=1400 audit(1767045437.136:387): avc: denied { rmdir } for pid=7245 comm="syz-executor" name="12" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:syslogd_exec_t:s0" [ 233.418156][ T5933] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 233.641899][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 233.771995][ T5933] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 233.803095][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.827890][ T5933] usb 6-1: Product: syz [ 233.842461][ T5933] usb 6-1: Manufacturer: syz [ 233.862674][ T5933] usb 6-1: SerialNumber: syz [ 233.899302][ T5933] usb 6-1: config 0 descriptor?? [ 233.944890][ T5933] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 233.993726][ T5933] dvb-usb: bulk message failed: -22 (2/0) [ 234.022803][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.074782][ T5933] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 234.102223][ T5933] usb 6-1: media controller created [ 234.195359][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.268295][ T5933] usb 6-1: selecting invalid altsetting 7 [ 234.294332][ T5933] cxusb: set interface failed [ 234.316280][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 234.547227][ T5933] DVB: Unable to find symbol lgdt330x_attach() [ 234.582909][ T5933] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 234.820943][ T30] audit: type=1400 audit(1767045439.906:388): avc: denied { mounton } for pid=7664 comm="syz.4.462" path="/105/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 234.871858][ T5933] rc_core: IR keymap rc-dvico-portable not found [ 234.891893][ T5933] Registered IR keymap rc-empty [ 234.923277][ T5933] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 234.962215][ T30] audit: type=1400 audit(1767045439.926:389): avc: denied { getopt } for pid=7664 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.159086][ T5933] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input12 [ 235.246440][ T30] audit: type=1400 audit(1767045440.346:390): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 235.271044][ T5933] dvb-usb: schedule remote query interval to 100 msecs. [ 235.342481][ T5933] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 235.430167][ T5933] usb 6-1: USB disconnect, device number 2 [ 235.723860][ T5933] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 237.056235][ T7681] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 237.072423][ T5926] usb 2-1: unable to read config index 7 descriptor/all [ 237.079426][ T5926] usb 2-1: can't read configurations, error -110 [ 237.198636][ T7683] bond2 (unregistering): Released all slaves [ 237.241972][ T5926] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 237.372705][ T5926] usb 2-1: device descriptor read/64, error -32 [ 237.503690][ T5926] usb usb2-port1: attempt power cycle [ 238.072660][ T5926] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 238.092200][ T5926] usb 2-1: device descriptor read/8, error -32 [ 238.401891][ T30] audit: type=1400 audit(1767045443.416:391): avc: denied { listen } for pid=7687 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.914183][ T7712] Mount JFS Failure: -22 [ 238.918509][ T7712] jfs_mount failed w/return code = -22 [ 238.939989][ T7712] SELinux: syz.1.473 (7712) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 239.221616][ T7709] binder: 7705:7709 ioctl c0306201 2000000003c0 returned -22 [ 239.345691][ T30] audit: type=1400 audit(1767045444.456:392): avc: denied { map } for pid=7721 comm="syz.4.477" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.423722][ T30] audit: type=1400 audit(1767045444.536:393): avc: denied { write } for pid=7721 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 239.473549][ T30] audit: type=1400 audit(1767045444.566:394): avc: denied { ioctl } for pid=7721 comm="syz.4.477" path="socket:[17642]" dev="sockfs" ino=17642 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 241.001951][ T5933] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 241.166040][ T5933] usb 6-1: unable to get BOS descriptor or descriptor too short [ 241.192080][ T5933] usb 6-1: config 5 interface 0 has no altsetting 0 [ 241.227974][ T5933] usb 6-1: New USB device found, idVendor=13d3, idProduct=3402, bcdDevice=a4.60 [ 241.253663][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.291897][ T5933] usb 6-1: Product: syz [ 241.308123][ T5933] usb 6-1: Manufacturer: syz [ 241.324548][ T5933] usb 6-1: SerialNumber: syz [ 241.588666][ T5933] usb 6-1: USB disconnect, device number 3 [ 241.656339][ T30] audit: type=1326 audit(1767045446.766:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b5258f749 code=0x0 [ 241.758267][ T30] audit: type=1400 audit(1767045446.866:396): avc: denied { block_suspend } for pid=7753 comm="syz.0.487" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.807092][ T30] audit: type=1400 audit(1767045446.906:397): avc: denied { cmd } for pid=7753 comm="syz.0.487" path="socket:[17844]" dev="sockfs" ino=17844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 disconnect aa:aa:aa:aa:aa:11 0[ 242.282042][ T6027] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 242.472241][ T6027] usb 3-1: Using ep0 maxpacket: 8 [ 242.575431][ T6027] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.757421][ T6027] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 242.780287][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.829509][ T6027] usb 3-1: Product: syz [ 242.842049][ T6027] usb 3-1: Manufacturer: syz [ 242.846682][ T6027] usb 3-1: SerialNumber: syz [ 242.957244][ T6027] usb 3-1: config 0 descriptor?? [ 245.102069][ T5863] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 245.354924][ T5863] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.379662][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.417482][ T5863] usb 2-1: config 0 descriptor?? [ 245.434013][ T5863] cp210x 2-1:0.0: cp210x converter detected [ 245.592085][ T5882] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 245.688356][ T5863] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 245.764431][ T5863] cp210x 2-1:0.0: querying part number failed [ 245.886939][ T5863] usb 2-1: cp210x converter now attached to ttyUSB0 [ 246.052583][ T5863] usb 2-1: USB disconnect, device number 19 [ 246.275622][ T5863] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.360839][ T5863] cp210x 2-1:0.0: device disconnected [ 246.455419][ T5933] usb 3-1: USB disconnect, device number 12 [ 246.571887][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 246.632175][ T5882] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 246.671248][ T5882] usb 5-1: config 0 has no interface number 0 [ 246.674866][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 246.791885][ T5882] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 246.842233][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.851462][ T5882] usb 5-1: Product: syz [ 246.879517][ T5882] usb 5-1: Manufacturer: syz [ 246.884469][ T5882] usb 5-1: SerialNumber: syz [ 246.987054][ T5882] usb 5-1: config 0 descriptor?? [ 247.015823][ T5882] smsc95xx v2.0.0 [ 247.019589][ T5882] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 247.068593][ T5882] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 247.091499][ T7802] faux_driver vgem: [drm] Unknown color mode 4091; guessing buffer size. [ 247.157678][ T30] audit: type=1400 audit(1767045452.266:398): avc: denied { map } for pid=7800 comm="syz.1.504" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 247.503267][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 247.531995][ T30] audit: type=1400 audit(1767045452.296:399): avc: denied { execute } for pid=7800 comm="syz.1.504" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 247.599570][ T7812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.497'. [ 247.844956][ T30] audit: type=1400 audit(1767045452.956:400): avc: denied { append } for pid=7786 comm="syz.4.498" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.018977][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.497'. [ 248.042167][ T5882] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 248.070681][ T30] audit: type=1400 audit(1767045453.176:401): avc: denied { bind } for pid=7807 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 248.110530][ T1066] usb 5-1: USB disconnect, device number 11 [ 248.199869][ T7823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7823 comm=syz.0.497 [ 248.214467][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.228745][ T5882] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 248.238333][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.251899][ T5882] usb 3-1: config 0 descriptor?? [ 248.266862][ T5882] pwc: Askey VC010 type 2 USB webcam detected. disconnect aa:aa:aa:aa:aa:11 0[ 250.517637][ T6027] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 250.562280][ T5882] pwc: recv_control_msg error -71 req 02 val 2700 [ 250.589565][ T5882] pwc: recv_control_msg error -71 req 02 val 2c00 [ 250.645822][ T5882] pwc: recv_control_msg error -71 req 04 val 1000 [ 250.656570][ T5882] pwc: recv_control_msg error -71 req 04 val 1300 [ 250.682528][ T5882] pwc: recv_control_msg error -71 req 04 val 1400 [ 250.690437][ T6027] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 250.709938][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.720692][ T5882] pwc: recv_control_msg error -71 req 02 val 2000 [ 250.735339][ T5882] pwc: recv_control_msg error -71 req 02 val 2100 [ 250.742266][ T7854] netlink: 44 bytes leftover after parsing attributes in process `syz.0.511'. [ 250.751131][ T6027] usb 6-1: config 0 descriptor?? [ 250.758699][ T6027] cp210x 6-1:0.0: cp210x converter detected [ 250.766758][ T5882] pwc: recv_control_msg error -71 req 04 val 1500 [ 250.782497][ T5882] pwc: recv_control_msg error -71 req 02 val 2500 [ 250.799894][ T5882] pwc: recv_control_msg error -71 req 02 val 2400 [ 250.824209][ T5882] pwc: recv_control_msg error -71 req 02 val 2600 [ 250.841500][ T5882] pwc: recv_control_msg error -71 req 02 val 2900 [ 250.869011][ T5882] pwc: recv_control_msg error -71 req 02 val 2800 [ 250.890400][ T5882] pwc: recv_control_msg error -71 req 04 val 1100 [ 250.902460][ T5882] pwc: recv_control_msg error -71 req 04 val 1200 [ 250.909216][ T5882] videodev: could not get a free minor [ 250.915387][ T5882] pwc: Failed to register as video device (-23). [ 250.924396][ T5882] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -23 [ 250.938835][ T5882] usb 3-1: USB disconnect, device number 13 [ 250.998079][ T6027] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 251.027341][ T6027] cp210x 6-1:0.0: querying part number failed [ 251.088433][ T6027] usb 6-1: cp210x converter now attached to ttyUSB0 [ 251.134099][ T6027] usb 6-1: USB disconnect, device number 4 [ 251.160905][ T6027] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 251.179916][ T6027] cp210x 6-1:0.0: device disconnected [ 253.450095][ T7864] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.550039][ T7864] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.619050][ T7864] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 disconnect aa:aa:aa:aa:aa:11 0[ 253.683180][ T7864] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.803784][ T6064] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.338165][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.527'. [ 254.936513][ T6064] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.975471][ T6064] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.005050][ T6064] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.872333][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.878662][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.970012][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 256.032518][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 256.212184][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 257.176639][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.188347][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 257.202686][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.381760][ T10] usb 6-1: config 0 descriptor?? [ 257.849300][ T10] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 258.228360][ T30] audit: type=1400 audit(1767045463.336:402): avc: denied { create } for pid=7900 comm="syz.5.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.377657][ T10] usb 6-1: USB disconnect, device number 5 [ 258.701914][ T5971] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 258.873787][ T5971] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.912089][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.952982][ T5971] usb 3-1: config 0 descriptor?? [ 258.982957][ T5971] cp210x 3-1:0.0: cp210x converter detected disconnect aa:aa:aa:aa:aa:11 0[ 259.174445][ T5971] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 259.207200][ T5971] cp210x 3-1:0.0: querying part number failed [ 259.249330][ T5971] usb 3-1: cp210x converter now attached to ttyUSB0 [ 259.281426][ T5971] usb 3-1: USB disconnect, device number 14 [ 259.342442][ T5971] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 259.387642][ T5971] cp210x 3-1:0.0: device disconnected [ 259.567258][ T7932] netlink: 'syz.5.540': attribute type 2 has an invalid length. [ 259.575529][ T7932] netlink: 'syz.5.540': attribute type 1 has an invalid length. [ 259.583290][ T7932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.614020][ T7934] fuse: Unknown parameter '00000000000000000000003˙' [ 259.631035][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'. [ 259.660755][ T30] audit: type=1400 audit(1767045464.766:403): avc: denied { create } for pid=7933 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 259.745401][ T30] audit: type=1400 audit(1767045464.856:404): avc: denied { ioctl } for pid=7933 comm="syz.1.541" path="socket:[18637]" dev="sockfs" ino=18637 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 260.731468][ T7947] netlink: 596 bytes leftover after parsing attributes in process `syz.5.543'. [ 261.787206][ T5138] Bluetooth: hci0: command 0x0406 tx timeout [ 262.522869][ T7937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.581156][ T7943] netlink: 'syz.5.543': attribute type 29 has an invalid length. [ 262.597503][ T7944] netlink: 'syz.5.543': attribute type 29 has an invalid length. [ 262.675072][ T7937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.811997][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 262.855412][ T7937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.971534][ T30] audit: type=1400 audit(1767045468.076:405): avc: denied { mount } for pid=7953 comm="syz.5.548" name="/" dev="hugetlbfs" ino=18657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 263.003172][ T7954] trusted_key: encrypted_key: master key parameter 'dŕ'ˇI=×3örusted:' is invalid [ 263.149883][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.167690][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 263.200656][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.285477][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.400218][ T10] usb 2-1: Product: syz [ 263.465890][ T10] usb 2-1: Manufacturer: syz [ 263.506823][ T7846] Set syz1 is full, maxelem 65536 reached [ 263.519183][ T10] usb 2-1: SerialNumber: syz [ 263.576146][ T7937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.719294][ T6431] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.195316][ T63] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.208426][ T63] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.233610][ T63] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.631438][ T7969] binder: 7951:7969 ioctl c018620c 200000000380 returned -22 [ 264.644256][ T7969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 264.664578][ T7967] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.739824][ T7967] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.799916][ T7967] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.817013][ T30] audit: type=1400 audit(1767045469.926:406): avc: denied { getopt } for pid=7973 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 264.886991][ T7967] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.952986][ T6237] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 265.026380][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.061019][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.098130][ T4480] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.122632][ T6237] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.158296][ T6237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.169486][ T77] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.229513][ T6237] usb 3-1: config 0 descriptor?? [ 265.257031][ T6237] cp210x 3-1:0.0: cp210x converter detected [ 265.493984][ T6237] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 265.503004][ T6237] cp210x 3-1:0.0: querying part number failed [ 265.534965][ T6237] usb 3-1: cp210x converter now attached to ttyUSB0 [ 265.613670][ T7982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.621195][ T7982] IPv6: NLM_F_CREATE should be set when creating new route [ 265.628525][ T7982] IPv6: NLM_F_CREATE should be set when creating new route [ 265.642072][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 265.650928][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 266.066516][ T6237] usb 3-1: USB disconnect, device number 15 [ 266.106616][ T6237] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.157032][ T6237] cp210x 3-1:0.0: device disconnected [ 266.692227][ T7989] capability: warning: `syz.4.555' uses deprecated v2 capabilities in a way that may be insecure [ 267.371327][ T10] cdc_ncm 2-1:1.0: bind() failure [ 267.385430][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 267.394029][ T10] cdc_ncm 2-1:1.1: bind() failure [ 267.504488][ T10] usb 2-1: USB disconnect, device number 20 disconnect aa:aa:aa:aa:aa:11 0[ 270.647146][ T30] audit: type=1400 audit(1767045475.726:407): avc: denied { lock } for pid=8014 comm="syz.4.563" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.706361][ T30] audit: type=1400 audit(1767045476.816:408): avc: denied { read write } for pid=8030 comm="syz.1.568" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 271.779555][ T30] audit: type=1400 audit(1767045476.836:409): avc: denied { open } for pid=8030 comm="syz.1.568" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 271.840063][ T10] kernel read not supported for file /vga_arbiter (pid: 10 comm: kworker/0:1) [ 271.853728][ T30] audit: type=1400 audit(1767045476.936:410): avc: denied { create } for pid=8030 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 271.945172][ T8036] vxfs: WRONG superblock magic 00000000 at 1 [ 271.953181][ T8036] vxfs: WRONG superblock magic 00000000 at 8 [ 271.959216][ T8036] vxfs: can't find superblock. [ 272.125693][ T30] audit: type=1400 audit(1767045476.936:411): avc: denied { write } for pid=8030 comm="syz.1.568" path="socket:[18782]" dev="sockfs" ino=18782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 272.204812][ T30] audit: type=1400 audit(1767045476.936:412): avc: denied { read } for pid=8030 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 272.541915][ T5933] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 272.696787][ T5933] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 272.715292][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.739840][ T5933] usb 6-1: config 0 descriptor?? [ 272.814124][ T5933] cp210x 6-1:0.0: cp210x converter detected [ 272.909916][ T8041] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.001364][ T5933] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 273.019165][ T5933] cp210x 6-1:0.0: querying part number failed [ 273.054765][ T5933] usb 6-1: cp210x converter now attached to ttyUSB0 [ 273.113611][ T5933] usb 6-1: USB disconnect, device number 6 [ 273.198973][ T5933] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 273.200306][ T8041] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.309125][ T5933] cp210x 6-1:0.0: device disconnected [ 273.769490][ T8041] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.946736][ T8041] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.174997][ T30] audit: type=1400 audit(1767045479.286:413): avc: denied { connect } for pid=8052 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.932615][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 276.728486][ T6437] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.887378][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.321616][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.991952][ T5926] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 278.020073][ T7341] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.259674][ T5926] usb 3-1: too many configurations: 20, using maximum allowed: 8 [ 278.532209][ T5971] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 279.219869][ T5926] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 279.233168][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.241171][ T5926] usb 3-1: Product: syz [ 279.245559][ T5926] usb 3-1: Manufacturer: syz [ 279.250124][ T5926] usb 3-1: SerialNumber: syz [ 279.973596][ T30] audit: type=1400 audit(1767045485.086:414): avc: denied { setopt } for pid=8089 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 280.043774][ T5971] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 280.134725][ T5926] usb 3-1: can't set config #1, error -71 [ 280.168522][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.695511][ T5926] usb 3-1: USB disconnect, device number 16 [ 280.751488][ T5971] usb 5-1: config 0 descriptor?? [ 280.991009][ T8101] vxfs: WRONG superblock magic 00000000 at 1 [ 280.998415][ T8101] vxfs: WRONG superblock magic 00000000 at 8 [ 281.004524][ T8101] vxfs: can't find superblock. [ 281.373471][ T8098] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.409365][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 281.434791][ T5971] usb 5-1: can't set config #0, error -32 [ 281.476051][ T5971] usb 5-1: USB disconnect, device number 12 [ 281.511175][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.587'. disconnect aa:aa:aa:aa:aa:11 0[ 281.716865][ T8098] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.761026][ T8108] netlink: 32 bytes leftover after parsing attributes in process `syz.5.587'. [ 281.827662][ T8098] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.996688][ T8098] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.968923][ T7373] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 283.181242][ T7373] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.191416][ T7373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.199696][ T7373] usb 5-1: Product: syz [ 283.204117][ T7373] usb 5-1: Manufacturer: syz [ 283.208773][ T7373] usb 5-1: SerialNumber: syz [ 283.609103][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 283.618914][ T8125] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 283.650053][ T8125] vxlan0: entered promiscuous mode [ 283.660308][ T6064] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.677175][ T6064] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.689451][ T6064] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.803478][ T6064] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.963630][ T3908] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.979002][ T3908] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.024367][ T3908] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.062330][ T3908] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.091895][ T5971] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 284.364770][ T7373] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 284.371527][ T7373] cdc_ncm 5-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 284.381885][ T5971] usb 3-1: Using ep0 maxpacket: 16 [ 284.392006][ T7373] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 284.403174][ T5971] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 284.411565][ T5971] usb 3-1: config 254 has no interface number 0 [ 284.440252][ T5971] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 284.462434][ T5971] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.473843][ T5971] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 284.514319][ T5971] usb 3-1: config 254 interface 235 has no altsetting 0 [ 284.610550][ T5971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 284.698529][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 284.753340][ T5971] usb 3-1: Product: syz [ 284.818706][ T5971] usb 3-1: Manufacturer: syz [ 284.879743][ T5971] usb 3-1: SerialNumber: syz [ 285.091791][ T8128] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 285.102438][ T7373] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 285.145113][ T7373] usb 5-1: USB disconnect, device number 13 [ 285.173999][ T7373] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 285.327952][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.594'. [ 285.395580][ T30] audit: type=1400 audit(1767045490.506:415): avc: denied { connect } for pid=8127 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 285.521894][ T30] audit: type=1400 audit(1767045490.546:416): avc: denied { read } for pid=8127 comm="syz.2.594" path="socket:[20065]" dev="sockfs" ino=20065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 285.611995][ T30] audit: type=1400 audit(1767045490.556:417): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 285.669639][ T30] audit: type=1400 audit(1767045490.706:418): avc: denied { read write } for pid=8127 comm="syz.2.594" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.721921][ T30] audit: type=1400 audit(1767045490.706:419): avc: denied { open } for pid=8127 comm="syz.2.594" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.907390][ T5971] usbtest 3-1:254.235: couldn't get endpoints, -71 [ 285.923762][ T8145] i2c i2c-0: Invalid block write size 58 [ 285.940928][ T5971] usbtest 3-1:254.235: probe with driver usbtest failed with error -71 [ 285.992185][ T8152] input: syz1 as /devices/virtual/input/input15 [ 286.056278][ T30] audit: type=1400 audit(1767045491.086:420): avc: denied { append } for pid=8150 comm="syz.2.601" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 286.065112][ T5971] usb 3-1: USB disconnect, device number 17 [ 286.564368][ T30] audit: type=1400 audit(1767045491.096:421): avc: denied { write } for pid=8150 comm="syz.2.601" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 286.632659][ T7373] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 286.801908][ T5961] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 286.891913][ T7373] usb 5-1: Using ep0 maxpacket: 32 [ 286.913648][ T7373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.017248][ T7373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.127927][ T7373] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 287.138194][ T5961] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 287.159319][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.177769][ T7373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.302280][ T5961] usb 2-1: config 0 descriptor?? [ 287.315027][ T7373] usb 5-1: config 0 descriptor?? [ 287.331669][ T5961] cp210x 2-1:0.0: cp210x converter detected [ 287.339061][ T7373] hub 5-1:0.0: USB hub found [ 287.797788][ T7373] hub 5-1:0.0: 1 port detected [ 287.853458][ T8161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.979409][ T8171] netlink: 'syz.2.605': attribute type 5 has an invalid length. [ 287.980052][ T8161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.011751][ T5961] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 288.085480][ T5961] cp210x 2-1:0.0: querying part number failed [ 288.115895][ T5961] usb 2-1: cp210x converter now attached to ttyUSB0 [ 288.142828][ T5961] usb 2-1: USB disconnect, device number 21 [ 288.162485][ T5961] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 288.170779][ T5961] cp210x 2-1:0.0: device disconnected [ 288.249749][ T8161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.274902][ T8180] netlink: 48 bytes leftover after parsing attributes in process `syz.0.606'. [ 288.341663][ T8161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.478626][ T7373] hub 5-1:0.0: activate --> -90 [ 288.524972][ T6437] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.703525][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 288.711359][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 288.723402][ T5961] usb 5-1: USB disconnect, device number 14 [ 289.739374][ T1009] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.776272][ T1009] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.844794][ T6437] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.879355][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.614'. [ 292.358190][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.5.614'. [ 294.211873][ T30] audit: type=1400 audit(1767045499.296:422): avc: denied { execute } for pid=8230 comm="syz.5.623" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 297.069957][ T8260] Mount JFS Failure: -22 [ 297.074345][ T8260] jfs_mount failed w/return code = -22 [ 297.091920][ T8260] SELinux: syz.2.626 (8260) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 299.574165][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 299.844796][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 299.853525][ T10] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 299.881970][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.889986][ T10] usb 2-1: Product: syz [ 299.921958][ T10] usb 2-1: Manufacturer: syz [ 299.931950][ T10] usb 2-1: SerialNumber: syz [ 299.955784][ T10] usb 2-1: config 0 descriptor?? [ 299.984698][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 300.043971][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 300.054729][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.092432][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 300.100437][ T10] usb 2-1: media controller created [ 300.176118][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.328900][ T10] usb 2-1: selecting invalid altsetting 7 [ 300.369032][ T10] cxusb: set interface failed [ 300.389335][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 300.482756][ T8281] usb usb8: usbfs: process 8281 (syz.5.632) did not claim interface 0 before use [ 300.589652][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 300.615354][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 300.841186][ T8294] program syz.0.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.102843][ T5933] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 301.399075][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 301.412722][ T10] rc_core: IR keymap rc-dvico-portable not found [ 301.413511][ T5933] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 301.427629][ T10] Registered IR keymap rc-empty [ 301.439853][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 301.471339][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input17 [ 301.484386][ T5933] usb 1-1: config 0 has no interface number 1 [ 301.523493][ T5933] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 301.545904][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.564635][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 301.571609][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 301.621997][ T5933] usb 1-1: Product: syz [ 301.631075][ T10] usb 2-1: USB disconnect, device number 22 [ 301.636514][ T5933] usb 1-1: Manufacturer: syz [ 301.641594][ T5933] usb 1-1: SerialNumber: syz [ 301.694914][ T5933] usb 1-1: config 0 descriptor?? [ 301.794514][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 301.796506][ T5933] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 301.928264][ T8293] overlayfs: workdir and upperdir must be separate subtrees [ 302.147696][ T8151] udevd[8151]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.604092][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.641'. [ 303.335104][ T8324] bridge_slave_1: invalid flags given to default FDB implementation [ 303.673214][ T5933] usb 1-1: USB disconnect, device number 18 [ 306.151941][ T30] audit: type=1400 audit(1767045509.206:423): avc: denied { create } for pid=8327 comm="syz.5.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 306.321975][ T30] audit: type=1400 audit(1767045509.266:424): avc: denied { sys_admin } for pid=8327 comm="syz.5.644" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 412.191807][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 412.198793][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8354/1:b..l P8355/1:b..l [ 412.208154][ C1] rcu: (detected by 1, t=10502 jiffies, g=24733, q=418 ncpus=2) [ 412.215868][ C1] task:syz.4.651 state:R running task stack:27656 pid:8355 tgid:8355 ppid:5816 task_flags:0x40004c flags:0x00080000 [ 412.230060][ C1] Call Trace: [ 412.233326][ C1] [ 412.236242][ C1] ? __schedule+0x10b9/0x6150 [ 412.240902][ C1] __schedule+0x1139/0x6150 [ 412.245392][ C1] ? lock_acquire+0x179/0x330 [ 412.250054][ C1] ? __pfx___schedule+0x10/0x10 [ 412.254881][ C1] ? find_held_lock+0x2b/0x80 [ 412.259545][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 412.264894][ C1] preempt_schedule_common+0x44/0xc0 [ 412.270165][ C1] preempt_schedule_thunk+0x16/0x30 [ 412.275342][ C1] _raw_spin_unlock+0x3e/0x50 [ 412.279997][ C1] unmap_page_range+0x1047/0x43c0 [ 412.285013][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 412.290368][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 412.295292][ C1] ? uprobe_munmap+0x20/0x600 [ 412.299955][ C1] unmap_single_vma+0x153/0x240 [ 412.304788][ C1] unmap_vmas+0x218/0x470 [ 412.309095][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 412.313922][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 412.318847][ C1] exit_mmap+0x1b0/0xb60 [ 412.323072][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 412.327821][ C1] ? __lock_acquire+0x436/0x2890 [ 412.332744][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 412.338275][ C1] __mmput+0x12a/0x410 [ 412.342336][ C1] mmput+0x62/0x70 [ 412.346040][ C1] do_exit+0x7d7/0x2bd0 [ 412.350174][ C1] ? __pfx_do_exit+0x10/0x10 [ 412.354743][ C1] ? rcu_is_watching+0x12/0xc0 [ 412.359486][ C1] do_group_exit+0xd3/0x2a0 [ 412.363964][ C1] __x64_sys_exit_group+0x3e/0x50 [ 412.369062][ C1] x64_sys_call+0x151c/0x1740 [ 412.373719][ C1] do_syscall_64+0xcd/0xf80 [ 412.378205][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.384091][ C1] RIP: 0033:0x7f061798f749 [ 412.388498][ C1] RSP: 002b:00007ffe7dbe7608 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 412.396886][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f061798f749 [ 412.404839][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.412787][ C1] RBP: 00007ffe7dbe766c R08: 000000017dbe76ff R09: 00000000000927c0 [ 412.420733][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000087 [ 412.428683][ C1] R13: 00000000000927c0 R14: 000000000004adda R15: 00007ffe7dbe76c0 [ 412.436642][ C1] [ 412.439644][ C1] task:modprobe state:R running task stack:25800 pid:8354 tgid:8354 ppid:1129 task_flags:0x40000c flags:0x00080001 [ 412.453149][ C1] Call Trace: [ 412.456424][ C1] [ 412.459330][ C1] ? __schedule+0x10b9/0x6150 [ 412.463982][ C1] __schedule+0x1139/0x6150 [ 412.468472][ C1] ? __pfx___schedule+0x10/0x10 [ 412.473299][ C1] preempt_schedule_irq+0x51/0x90 [ 412.478322][ C1] irqentry_exit+0x1d8/0x8c0 [ 412.482896][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 412.488853][ C1] RIP: 0010:unwind_next_frame+0x1f6/0x20b0 [ 412.494647][ C1] Code: 89 c3 39 d0 0f 83 17 16 00 00 48 ba 00 00 00 00 00 fc ff df 89 c1 48 8d 3c 8d 9c 9b dc 91 49 89 f8 49 c1 e8 03 45 0f b6 04 10 <48> 89 fa 83 e2 07 83 c2 03 44 38 c2 7c 2f 45 84 c0 74 2a 48 89 4c [ 412.514232][ C1] RSP: 0018:ffffc90003497898 EFLAGS: 00000a07 [ 412.520273][ C1] RAX: 0000000000008840 RBX: 0000000000000001 RCX: 0000000000008840 [ 412.528219][ C1] RDX: dffffc0000000000 RSI: 00000000000a7c15 RDI: ffffffff91debc9c [ 412.536166][ C1] RBP: ffffc90003497950 R08: 0000000000000000 R09: 00000000ffffffff [ 412.544114][ C1] R10: 0000000000000002 R11: 0000000000008840 R12: ffffc90003497958 [ 412.552065][ C1] R13: ffffc90003497908 R14: ffffc9000349793d R15: ffffffff818840df [ 412.560010][ C1] ? __put_cred+0x10f/0x170 [ 412.564500][ C1] ? unwind_next_frame+0xa86/0x20b0 [ 412.569679][ C1] ? __put_cred+0x110/0x170 [ 412.574161][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 412.580290][ C1] arch_stack_walk+0x94/0x100 [ 412.584950][ C1] ? __put_cred+0x110/0x170 [ 412.589435][ C1] stack_trace_save+0x8e/0xc0 [ 412.594090][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 412.599440][ C1] ? __lock_acquire+0x436/0x2890 [ 412.604356][ C1] kasan_save_stack+0x33/0x60 [ 412.609012][ C1] ? kasan_save_stack+0x33/0x60 [ 412.613836][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 412.619190][ C1] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 412.625236][ C1] ? __put_cred+0x110/0x170 [ 412.629740][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 412.634919][ C1] ? __pfx_put_cred_rcu+0x10/0x10 [ 412.639920][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 412.645801][ C1] __put_cred+0x110/0x170 [ 412.650136][ C1] __fput+0x78c/0xb70 [ 412.654108][ C1] task_work_run+0x150/0x240 [ 412.658683][ C1] ? __pfx_task_work_run+0x10/0x10 [ 412.663776][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 412.668956][ C1] do_exit+0x87f/0x2bd0 [ 412.673086][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 412.678087][ C1] ? __pfx_do_exit+0x10/0x10 [ 412.682650][ C1] ? rcu_is_watching+0x12/0xc0 [ 412.687393][ C1] do_group_exit+0xd3/0x2a0 [ 412.691878][ C1] __x64_sys_exit_group+0x3e/0x50 [ 412.696891][ C1] x64_sys_call+0x151c/0x1740 [ 412.701551][ C1] do_syscall_64+0xcd/0xf80 [ 412.706034][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.711901][ C1] RIP: 0033:0x7fab8fdee6c5 [ 412.716290][ C1] RSP: 002b:00007ffcbb2a9408 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 412.724676][ C1] RAX: ffffffffffffffda RBX: 00007fab8feeffe8 RCX: 00007fab8fdee6c5 [ 412.732622][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 412.740566][ C1] RBP: 0000000000000001 R08: 00007ffcbb2a9398 R09: 0000000000000000 [ 412.748521][ C1] R10: 00007ffcbb2a9230 R11: 0000000000000206 R12: 0000000000000000 [ 412.756472][ C1] R13: 0000000000000001 R14: 00007fab8feee680 R15: 00007fab8fef0000 [ 412.764430][ C1] [ 412.767427][ C1] rcu: rcu_preempt kthread starved for 10555 jiffies! g24733 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 412.778593][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 412.788534][ C1] rcu: RCU grace-period kthread stack dump: [ 412.794397][ C1] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 412.807878][ C1] Call Trace: [ 412.811135][ C1] [ 412.814068][ C1] ? __schedule+0x10b9/0x6150 [ 412.818723][ C1] __schedule+0x1139/0x6150 [ 412.823211][ C1] ? __pfx___schedule+0x10/0x10 [ 412.828038][ C1] ? find_held_lock+0x2b/0x80 [ 412.832694][ C1] ? schedule+0x2d7/0x3a0 [ 412.837000][ C1] schedule+0xe7/0x3a0 [ 412.841046][ C1] schedule_timeout+0x123/0x290 [ 412.845874][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 412.851229][ C1] ? __pfx_process_timeout+0x10/0x10 [ 412.856499][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 412.862286][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 412.867723][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 412.872465][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 412.877726][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 412.882899][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 412.887815][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 412.892643][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 412.898429][ C1] rcu_gp_kthread+0x26d/0x380 [ 412.903088][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 412.908268][ C1] ? rcu_is_watching+0x12/0xc0 [ 412.913011][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 412.918278][ C1] ? __kthread_parkme+0x19e/0x250 [ 412.923277][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 412.928453][ C1] kthread+0x3c5/0x780 [ 412.932499][ C1] ? __pfx_kthread+0x10/0x10 [ 412.937062][ C1] ? rcu_is_watching+0x12/0xc0 [ 412.941807][ C1] ? __pfx_kthread+0x10/0x10 [ 412.946388][ C1] ret_from_fork+0x983/0xb10 [ 412.950966][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 412.956082][ C1] ? __switch_to+0x7af/0x10d0 [ 412.960744][ C1] ? __pfx_kthread+0x10/0x10 [ 412.965313][ C1] ret_from_fork_asm+0x1a/0x30 [ 412.970067][ C1] [ 412.973063][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 412.979357][ C1] Sending NMI from CPU 1 to CPUs 0: [ 412.984556][ C0] NMI backtrace for cpu 0 [ 412.984580][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.984609][ C0] Tainted: [L]=SOFTLOCKUP [ 412.984616][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.984628][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 412.984657][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 412.984677][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 412.984693][ C0] RAX: 0000000000d5d527 RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 412.984706][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdeb7 RDI: ffffffff8bf2b400 [ 412.984720][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 412.984733][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 412.984746][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 412.984759][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 412.984778][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.984791][ C0] CR2: 0000001b30211ff8 CR3: 00000000305ed000 CR4: 00000000003526f0 [ 412.984804][ C0] Call Trace: [ 412.984812][ C0] [ 412.984818][ C0] default_idle+0x13/0x20 [ 412.984846][ C0] default_idle_call+0x6c/0xb0 [ 412.984873][ C0] do_idle+0x38d/0x510 [ 412.984904][ C0] ? __pfx_do_idle+0x10/0x10 [ 412.984937][ C0] cpu_startup_entry+0x4f/0x60 [ 412.984966][ C0] rest_init+0x16b/0x2b0 [ 412.984994][ C0] ? acpi_subsystem_init+0x133/0x180 [ 412.985014][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 412.985034][ C0] start_kernel+0x3ef/0x4d0 [ 412.985065][ C0] x86_64_start_reservations+0x18/0x30 [ 412.985096][ C0] x86_64_start_kernel+0x130/0x190 [ 412.985126][ C0] common_startup_64+0x13e/0x148 [ 412.985164][ C0]