last executing test programs: 19.559467302s ago: executing program 1 (id=243): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000180), 0x20, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}, {0x0}], 0x2) userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004100000000000000100e40018220000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) syz_usb_connect(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0xf4, 0x40, 0x54c, 0x6c1, 0xbe87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x0, 0x0, 0x60, 0xd, 0x18}}]}}]}}, 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, 0x0, &(0x7f0000ff4000)) 16.065210247s ago: executing program 1 (id=252): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000000c0)=""/206, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000d00)="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", 0x2ef}], 0x2}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x4000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) 14.917027117s ago: executing program 1 (id=255): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000440)=""/200, 0x200000, 0x1000, 0x0, 0x3}, 0x20) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x10}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c00"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "bdab7e9d"}, @main=@item_4={0x3, 0x0, 0xa, "582a6eb3"}]}}, 0x0}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x100000002, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500000040001e01fe04bb9b0b000000017c0000040042a31400018008000300", @ANYRES32=0x0, @ANYBLOB="08000f00", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x30}}, 0xc000) 11.935696703s ago: executing program 1 (id=262): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000180), 0x20, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}, {0x0}], 0x2) userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004100000000000000100e40018220000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) syz_usb_connect(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0xf4, 0x40, 0x54c, 0x6c1, 0xbe87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x0, 0x0, 0x60, 0xd, 0x18}}]}}]}}, 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, 0x0, &(0x7f0000ff4000)) 9.855012207s ago: executing program 4 (id=268): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 9.436338325s ago: executing program 2 (id=270): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000440)=""/200, 0x200000, 0x1000, 0x0, 0x3}, 0x20) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x10}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c00"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "bdab7e9d"}, @main=@item_4={0x3, 0x0, 0xa, "582a6eb3"}]}}, 0x0}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x100000002, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500000040001e01fe04bb9b0b000000017c0000040042a31400018008000300", @ANYRES32=0x0, @ANYBLOB="08000f00", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x30}}, 0xc000) 8.25729261s ago: executing program 1 (id=272): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180), 0x20, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}, {0x0}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004100000000000000100e40018220000", @ANYRES32=r7, @ANYBLOB="000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x30, 0x20, 0x301, 0x800000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x27}, @FRA_DST={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x80) syz_usb_connect(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0xf4, 0x40, 0x54c, 0x6c1, 0xbe87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x0, 0x0, 0x60, 0xd, 0x18}}]}}]}}, 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, 0x0, &(0x7f0000ff4000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 7.871032801s ago: executing program 0 (id=273): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/226, 0xe2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010101}, @RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x2c}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000400)=0xc) r5 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000280)={0x9, {0xf8001004, 0x9, 0x8, 0x80b}}) 7.387686113s ago: executing program 0 (id=274): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x4f27, 0x6, 0x3, 0x4, 0x5, 0x20000cc5, 0x5, 0x1004, 0xa, 0xfffffffc, 0x2, 0x3, 0x3, 0x1, 0x4000007, 0x101, 0x0, 0x1a449, 0x9, 0x7, 0xd, 0xcaa7, 0x9, 0x20001e58, 0x200007, 0x63e, 0x39, 0x8, 0x3, 0x274f, 0x6]}) 7.351139357s ago: executing program 4 (id=275): syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x40c01) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000800)=""/246) 7.212643815s ago: executing program 0 (id=276): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000010000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 6.212833399s ago: executing program 0 (id=277): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket(0x1e, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}]}}) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x1f, 0x300) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0xfffffcf3, 0x14014541, 0xa, 0x2, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)={0x29, 0x4, 0x0, {0x1, 0xefff, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.187057136s ago: executing program 4 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYRES16], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0x80000008, 0x428}, 0x0) r2 = getpid() sched_setaffinity(r2, 0xfed0, &(0x7f0000000280)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) fchdir(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x102) lseek(r4, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c0000000400000004000000090000"], 0x48) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x1, 0xfffffffe, 0x2be, 0x7}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r5, 0x0, 0x0, 0x9200000000000000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x800, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 6.122351569s ago: executing program 3 (id=279): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10001, 0x2c0, 0x40, &(0x7f0000000180)=[0x6bd1a312, 0xec68, 0x8000000000000000, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffd, 0x100000000000004, 0x10000, 0x100, 0x9, 0x0, 0x3, 0x8, 0x5, 0x517, 0x3ff, 0x7, 0x1ff, 0x9, 0x8, 0x7, 0x1, 0x1000000003, 0x2, 0x7ff, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x800, 0xd49, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x401, 0x8, 0x40005c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x8, 0xac, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x4000000007, 0x40000005, 0xc39d, 0xc, 0xd, 0x9, 0xeb, 0x80000000, 0xfffffffffffffbff, 0x84, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8001, 0xfff, 0x8, 0x8, 0x6, 0xab6, 0x0, 0x2, 0xfff, 0x32, 0x9, 0xff, 0x80000000000006, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x9, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0xa, 0x4, 0x8, 0x5, 0x0, 0xd, 0x2, 0x6, 0x2, 0xffffffffffffffff, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4, 0x8, 0x1, 0x53e8f0fe, 0xeb4, 0x6, 0x6, 0xecf, 0x8, 0x8, 0xfffffffffffffffc]}) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x42603ddc, 0x3c0, 0x1, @discrete={0x1ff, 0x40013}}) 6.038072871s ago: executing program 2 (id=280): times(&(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x10, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x3, 0xffff}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20008850) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x4048010) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x80042, 0x50) pwrite64(r5, &(0x7f00000005c0), 0x0, 0x4fed0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) pwrite64(r5, 0x0, 0x34, 0xffffffff) r6 = syz_open_dev$video(0x0, 0x800000001, 0x41) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) 5.092570742s ago: executing program 1 (id=281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) fallocate(r3, 0x2, 0x100000000, 0x9c7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_open_procfs(0x0, &(0x7f0000000300)='attr/keycreate\x00') 5.056508799s ago: executing program 0 (id=282): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "00e100"}]}}, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x67, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x3, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0xd9, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x9, 0x24, 0x6, 0x0, 0x0, "77a9f588"}, {0x5, 0x24, 0x0, 0xb95}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x4, 0x4, 0x12}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x80, 0x95}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x47}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0xb}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xad, 0x6a, 0x6}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x4, 0x5, 0x4, 0x40, 0x1}, 0x8b, &(0x7f0000000200)={0x5, 0xf, 0x8b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "8beb3d47f0c2fe2eb18dfa252de0b241"}, @ptm_cap={0x3}, @generic={0x4b, 0x10, 0x2, "612792904975a0913b3606536ea97cb87192775e675dd743c50821807178ee69bb01c518e685a08a5f95555723e835b0e579edd4a5f520495de86f98c33f4dbc18a606f3952a972a"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x7, 0xf000, 0x8, [0x30, 0xff6030, 0xff3f00, 0x0, 0xf, 0x30]}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x444}}]}) 4.829205507s ago: executing program 2 (id=283): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) 4.696421932s ago: executing program 2 (id=284): listen(0xffffffffffffffff, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(0xffffffffffffffff, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x18, 0x1, 0x0, 0x10, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0xb00000000000000, 0x0, 0x14}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r8, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x800000000006}, 0x18) 4.356529692s ago: executing program 3 (id=285): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/226, 0xe2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010101}, @RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x2c}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000400)=0xc) r5 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000280)={0x9, {0xf8001004, 0x9, 0x8, 0x80b}}) 3.715053679s ago: executing program 3 (id=286): r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x40}, {@in=@local, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x400) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000280)={0xb, 0x8, 0x4}) close(0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0xfe, 0x4}]) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 3.640436073s ago: executing program 2 (id=287): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3) shutdown(r2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000070851d40cd061201183e01020301090224000100006f900904eb1002617c7d000905020240000000eb09050502"], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x12, r5, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd4, r8, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x19200}, @IPVS_CMD_ATTR_DEST={0x84, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0x8}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1a}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff922}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010030bd7400fddbdf251f0000002000018008000100", @ANYRES32, @ANYBLOB="14000200776731"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0xfffe, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='mm_migrate_pages\x00', r12, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.776889879s ago: executing program 3 (id=288): syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x40c01) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) shutdown(r0, 0x0) close(0x3) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000800)=""/246) 2.761191646s ago: executing program 4 (id=289): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @p_u32=&(0x7f00000000c0)=0xffffffff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3f) 1.74841095s ago: executing program 4 (id=290): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x600}}, 0x1c) 1.747553789s ago: executing program 3 (id=291): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed277fac258083ca490d31f341236eccf4507576c4d033dfc3e4f695143a1ad", 0x36) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r5, 0x0, 0x0, 0x1}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe44, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)) r6 = syz_io_uring_setup(0x5c53, &(0x7f0000000540)={0x0, 0x203bce, 0x10900, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x400e000) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f0000000300)=""/104, &(0x7f0000001700)=""/4096, &(0x7f00000003c0)=""/124, 0xc000}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 1.719362722s ago: executing program 0 (id=292): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000180), 0x20, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}, {0x0}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004100000000000000100e40018220000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x30, 0x20, 0x301, 0x800000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x27}, @FRA_DST={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x80) syz_usb_connect(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0xf4, 0x40, 0x54c, 0x6c1, 0xbe87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x0, 0x0, 0x60, 0xd, 0x18}}]}}]}}, 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, 0x0, &(0x7f0000ff4000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 841.037294ms ago: executing program 4 (id=293): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000040)='0\x00', 0x2) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002400)={'geneve0\x00', 0x0}) r3 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r3, 0x200000000000000) fallocate(r3, 0x3, 0x4, 0xfffffffb) r4 = getpid() r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) r6 = fcntl$getown(r1, 0x9) mq_notify(r5, &(0x7f0000000400)={0x0, 0x7, 0x0, @tid=r6}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) prlimit64(r4, 0x4, &(0x7f0000000000)={0x400}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 719.552336ms ago: executing program 2 (id=294): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=""/56, &(0x7f0000000340)=0x38) ioctl$TCSETS(r2, 0x89f1, &(0x7f0000000100)={0x65d79be9, 0x0, 0x3, 0x7ff, 0x40, "5d000000fdcf40000000000f00"}) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x4049a0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 3 (id=295): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10001, 0x2c0, 0x40, &(0x7f0000000180)=[0x6bd1a312, 0xec68, 0x8000000000000000, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffd, 0x100000000000004, 0x10000, 0x100, 0x9, 0x0, 0x3, 0x8, 0x5, 0x517, 0x3ff, 0x7, 0x1ff, 0x9, 0x8, 0x7, 0x1, 0x1000000003, 0x2, 0x7ff, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x800, 0xd49, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x401, 0x8, 0x40005c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x8, 0xac, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x4000000007, 0x40000005, 0xc39d, 0xc, 0xd, 0x9, 0xeb, 0x80000000, 0xfffffffffffffbff, 0x84, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8001, 0xfff, 0x8, 0x8, 0x6, 0xab6, 0x0, 0x2, 0xfff, 0x32, 0x9, 0xff, 0x80000000000006, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x9, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0xa, 0x4, 0x8, 0x5, 0x0, 0xd, 0x2, 0x6, 0x2, 0xffffffffffffffff, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4, 0x8, 0x1, 0x53e8f0fe, 0xeb4, 0x6, 0x6, 0xecf, 0x8, 0x8, 0xfffffffffffffffc]}) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x42603ddc, 0x3c0, 0x1, @discrete={0x1ff, 0x40013}}) kernel console output (not intermixed with test programs): 9] bridge_slave_0: entered promiscuous mode [ 64.644898][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.652032][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.659086][ T5809] bridge_slave_1: entered allmulticast mode [ 64.666001][ T5809] bridge_slave_1: entered promiscuous mode [ 64.691571][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.715558][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.725000][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.732444][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.739511][ T5812] bridge_slave_0: entered allmulticast mode [ 64.746361][ T5812] bridge_slave_0: entered promiscuous mode [ 64.755160][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.783877][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.793308][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.800445][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.807492][ T5812] bridge_slave_1: entered allmulticast mode [ 64.814888][ T5812] bridge_slave_1: entered promiscuous mode [ 64.829567][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.838824][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.846445][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.853607][ T5817] bridge_slave_0: entered allmulticast mode [ 64.860453][ T5817] bridge_slave_0: entered promiscuous mode [ 64.893696][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.903039][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.910355][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.917406][ T5817] bridge_slave_1: entered allmulticast mode [ 64.924359][ T5817] bridge_slave_1: entered promiscuous mode [ 64.944752][ T5808] team0: Port device team_slave_0 added [ 64.964755][ T5823] team0: Port device team_slave_0 added [ 64.972256][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.982531][ T5808] team0: Port device team_slave_1 added [ 65.004252][ T5823] team0: Port device team_slave_1 added [ 65.011234][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.028010][ T5809] team0: Port device team_slave_0 added [ 65.035605][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.065596][ T5809] team0: Port device team_slave_1 added [ 65.077073][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.101900][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.108829][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.134989][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.159702][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.166813][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.192689][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.204647][ T5812] team0: Port device team_slave_0 added [ 65.210923][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.217847][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.243954][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.268752][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.275693][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.301757][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.313886][ T5812] team0: Port device team_slave_1 added [ 65.324081][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.331028][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.357344][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.369485][ T5817] team0: Port device team_slave_0 added [ 65.386059][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.395625][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.421917][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.433678][ T5817] team0: Port device team_slave_1 added [ 65.473584][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.480562][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.506920][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.532347][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.539261][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.565250][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.576495][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.583834][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.609979][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.624501][ T5808] hsr_slave_0: entered promiscuous mode [ 65.630652][ T5808] hsr_slave_1: entered promiscuous mode [ 65.643500][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.650469][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.676603][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.703425][ T5823] hsr_slave_0: entered promiscuous mode [ 65.709380][ T5823] hsr_slave_1: entered promiscuous mode [ 65.715496][ T5828] Bluetooth: hci1: command tx timeout [ 65.715840][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 65.727430][ T5823] Cannot create hsr debugfs directory [ 65.748937][ T5809] hsr_slave_0: entered promiscuous mode [ 65.755257][ T5809] hsr_slave_1: entered promiscuous mode [ 65.761229][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 65.766933][ T5809] Cannot create hsr debugfs directory [ 65.790133][ T5828] Bluetooth: hci2: command tx timeout [ 65.790299][ T5822] Bluetooth: hci4: command tx timeout [ 65.795639][ T5136] Bluetooth: hci0: command tx timeout [ 65.848945][ T5817] hsr_slave_0: entered promiscuous mode [ 65.855342][ T5817] hsr_slave_1: entered promiscuous mode [ 65.861297][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 65.866997][ T5817] Cannot create hsr debugfs directory [ 65.880132][ T5828] Bluetooth: hci3: command tx timeout [ 65.894394][ T5812] hsr_slave_0: entered promiscuous mode [ 65.900410][ T5812] hsr_slave_1: entered promiscuous mode [ 65.906203][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 65.911944][ T5812] Cannot create hsr debugfs directory [ 66.205453][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.219085][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.228875][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.243265][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.288002][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.297247][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.307275][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.323140][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.392598][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.402136][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.413864][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.427416][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.501853][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.511971][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.522128][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.533087][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.570176][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.621421][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.638049][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.653497][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.664180][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.675373][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.689479][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.712660][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.719815][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.735946][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.743092][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.782228][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.809598][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.822023][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.829087][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.848238][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.855292][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.887458][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.920828][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.927927][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.945940][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.953149][ T30] audit: type=1400 audit(1766877034.870:84): avc: denied { sys_module } for pid=5808 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.992815][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.999930][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.050676][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.068974][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.096911][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.104040][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.130392][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.137494][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.152170][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.168914][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.176009][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.213210][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.228091][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.235215][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.325529][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.486717][ T5817] veth0_vlan: entered promiscuous mode [ 67.516019][ T5817] veth1_vlan: entered promiscuous mode [ 67.589088][ T5817] veth0_macvtap: entered promiscuous mode [ 67.623962][ T5817] veth1_macvtap: entered promiscuous mode [ 67.652623][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.690013][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.705360][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.714457][ T5808] veth0_vlan: entered promiscuous mode [ 67.725875][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.739304][ T5808] veth1_vlan: entered promiscuous mode [ 67.758351][ T3807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.768318][ T3807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.778476][ T3807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.788387][ T3807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.797888][ T5828] Bluetooth: hci1: command tx timeout [ 67.810775][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.870597][ T5136] Bluetooth: hci0: command tx timeout [ 67.870645][ T5822] Bluetooth: hci4: command tx timeout [ 67.876022][ T5828] Bluetooth: hci2: command tx timeout [ 67.893552][ T5809] veth0_vlan: entered promiscuous mode [ 67.917702][ T3807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.918640][ T5823] veth0_vlan: entered promiscuous mode [ 67.930005][ T3807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.950747][ T5828] Bluetooth: hci3: command tx timeout [ 67.964741][ T5809] veth1_vlan: entered promiscuous mode [ 67.980578][ T4512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.988362][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.004656][ T5823] veth1_vlan: entered promiscuous mode [ 68.016619][ T5808] veth0_macvtap: entered promiscuous mode [ 68.024123][ T5812] veth0_vlan: entered promiscuous mode [ 68.032014][ T30] audit: type=1400 audit(1766877035.950:85): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.ngxQPx/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.072575][ T5808] veth1_macvtap: entered promiscuous mode [ 68.082626][ T5809] veth0_macvtap: entered promiscuous mode [ 68.083621][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.091963][ T5812] veth1_vlan: entered promiscuous mode [ 68.117651][ T5809] veth1_macvtap: entered promiscuous mode [ 68.181748][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.208105][ T5823] veth0_macvtap: entered promiscuous mode [ 68.210288][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.218533][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.245783][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.253513][ T5823] veth1_macvtap: entered promiscuous mode [ 68.262639][ T1104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.276666][ T5812] veth0_macvtap: entered promiscuous mode [ 68.283912][ T1104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.292807][ T1104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.304564][ T1104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.316018][ T1104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.326236][ T5812] veth1_macvtap: entered promiscuous mode [ 68.333527][ T1104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.345369][ T1104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.354686][ T1104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.373718][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.407577][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.438471][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.482686][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.497770][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.505885][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 68.505899][ T30] audit: type=1400 audit(1766877036.420:107): avc: denied { bpf } for pid=5935 comm="syz.3.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.544884][ T30] audit: type=1400 audit(1766877036.420:108): avc: denied { map_read map_write } for pid=5935 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.564497][ T1104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.573513][ T1104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.583735][ T30] audit: type=1400 audit(1766877036.450:109): avc: denied { prog_load } for pid=5935 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.585742][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.612169][ T30] audit: type=1400 audit(1766877036.450:110): avc: denied { perfmon } for pid=5935 comm="syz.3.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.614341][ T5938] xfs: Unknown parameter 'discardu/#/msr' [ 68.633908][ T30] audit: type=1400 audit(1766877036.460:111): avc: denied { read } for pid=5935 comm="syz.3.6" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.650083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.661359][ T30] audit: type=1400 audit(1766877036.460:112): avc: denied { open } for pid=5935 comm="syz.3.6" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.762270][ T30] audit: type=1400 audit(1766877036.530:113): avc: denied { mounton } for pid=5935 comm="syz.3.6" path="/1/bus" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 68.785632][ T30] audit: type=1400 audit(1766877036.550:114): avc: denied { bind } for pid=5935 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.805551][ T30] audit: type=1400 audit(1766877036.550:115): avc: denied { name_bind } for pid=5935 comm="syz.3.6" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.825217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.849924][ T30] audit: type=1400 audit(1766877036.550:116): avc: denied { node_bind } for pid=5935 comm="syz.3.6" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 68.884006][ T1104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.894820][ T1104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.927710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.033956][ T1104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.091150][ T1104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.103697][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.111737][ T1104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.124698][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.134926][ T1104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.233721][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.251174][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.328158][ T4512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.355516][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.379918][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 69.433645][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.455275][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.471505][ T5928] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.494530][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.502619][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.644105][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.646173][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.689329][ T3807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.793422][ T3807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.878367][ T5828] Bluetooth: hci1: command tx timeout [ 69.892062][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.949885][ T5828] Bluetooth: hci4: command tx timeout [ 69.958816][ T5828] Bluetooth: hci2: command tx timeout [ 69.966733][ T5828] Bluetooth: hci0: command tx timeout [ 70.026651][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.034536][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.043124][ T5828] Bluetooth: hci3: command tx timeout [ 70.064472][ T5928] usb 4-1: Product: syz [ 70.068707][ T5928] usb 4-1: Manufacturer: syz [ 70.074974][ T5928] usb 4-1: SerialNumber: syz [ 70.470111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 70.489838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.530249][ T891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.611952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 70.789181][ T891] usb 1-1: device descriptor read/64, error -71 [ 70.946906][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.954910][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.000022][ T5959] mmap: syz.1.10 (5959): VmData 26030080 exceed data ulimit 72. Update limits or use boot option ignore_rlimit_data. [ 71.012504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 71.079802][ T891] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.109934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 71.139792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 71.159895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 71.266819][ T5928] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 71.329807][ T891] usb 1-1: device descriptor read/64, error -71 [ 71.462615][ T891] usb usb1-port1: attempt power cycle [ 71.677957][ T5928] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 71.829855][ T891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.288759][ T5828] Bluetooth: hci1: command tx timeout [ 72.288798][ T5822] Bluetooth: hci2: command tx timeout [ 72.294233][ T5819] Bluetooth: hci4: command tx timeout [ 72.299574][ T5825] Bluetooth: hci3: command tx timeout [ 72.311170][ T891] usb 1-1: device descriptor read/8, error -71 [ 72.317676][ T5982] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12'. [ 72.328910][ T5136] Bluetooth: hci0: command tx timeout [ 72.433720][ T5928] usb 4-1: USB disconnect, device number 2 [ 72.443430][ T5928] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 72.549811][ T891] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 72.580770][ T891] usb 1-1: device descriptor read/8, error -71 [ 72.710211][ T891] usb usb1-port1: unable to enumerate USB device [ 72.729403][ T5989] netlink: 188 bytes leftover after parsing attributes in process `syz.2.15'. [ 72.963849][ T6006] faux_driver vgem: [drm] Unknown color mode 511; guessing buffer size. [ 73.678564][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 73.678588][ T30] audit: type=1400 audit(1766877041.590:158): avc: denied { name_bind } for pid=6013 comm="syz.0.21" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 73.863648][ T6024] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 73.928460][ T6022] warning: `syz.0.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.011625][ T30] audit: type=1400 audit(1766877041.590:159): avc: denied { node_bind } for pid=6013 comm="syz.0.21" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 74.282084][ T30] audit: type=1400 audit(1766877041.690:160): avc: denied { create } for pid=6013 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.467138][ T30] audit: type=1400 audit(1766877041.730:161): avc: denied { write } for pid=6013 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.488289][ T30] audit: type=1400 audit(1766877041.900:162): avc: denied { create } for pid=6011 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.538292][ T30] audit: type=1400 audit(1766877041.910:163): avc: denied { read } for pid=6015 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.680356][ T30] audit: type=1400 audit(1766877041.910:164): avc: denied { open } for pid=6015 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.759787][ T30] audit: type=1400 audit(1766877041.920:165): avc: denied { getattr } for pid=6015 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.806052][ T6039] Bluetooth: MGMT ver 1.23 [ 74.829110][ T30] audit: type=1400 audit(1766877042.280:166): avc: denied { unlink } for pid=6031 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=2015 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.852421][ T30] audit: type=1400 audit(1766877042.370:167): avc: denied { create } for pid=6033 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.901112][ T6046] binder: 6044:6046 unknown command 0 [ 74.909881][ T6046] binder: 6044:6046 ioctl c0306201 200000000080 returned -22 [ 75.384964][ T6051] overlayfs: conflicting lowerdir path [ 76.618364][ T10] cfg80211: failed to load regulatory.db [ 78.310669][ T6067] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 78.440322][ T6078] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.30'. [ 78.568240][ T6074] FAULT_INJECTION: forcing a failure. [ 78.568240][ T6074] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.699795][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.1.31 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.699822][ T6074] Tainted: [L]=SOFTLOCKUP [ 78.699827][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.699837][ T6074] Call Trace: [ 78.699843][ T6074] [ 78.699849][ T6074] dump_stack_lvl+0x16c/0x1f0 [ 78.699882][ T6074] should_fail_ex+0x512/0x640 [ 78.699909][ T6074] _copy_from_user+0x2e/0xd0 [ 78.699934][ T6074] restore_sigcontext+0xcb/0x6a0 [ 78.699957][ T6074] ? __pfx_restore_sigcontext+0x10/0x10 [ 78.699999][ T6074] ? __pfx_restore_altstack+0x10/0x10 [ 78.700019][ T6074] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.700036][ T6074] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.700059][ T6074] __do_sys_rt_sigreturn+0x229/0x2c0 [ 78.700081][ T6074] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 78.700108][ T6074] do_syscall_64+0xcd/0xf80 [ 78.700129][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.700144][ T6074] RIP: 0033:0x7f252a32b829 [ 78.700157][ T6074] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 78.700171][ T6074] RSP: 002b:00007f252b2b9340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 78.700187][ T6074] RAX: ffffffffffffffda RBX: 00007f252a5e5fa0 RCX: 00007f252a32b829 [ 78.700197][ T6074] RDX: 00007f252b2b9340 RSI: 00007f252b2b9470 RDI: 0000000000000021 [ 78.700206][ T6074] RBP: 00007f252b2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 78.700214][ T6074] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 78.700223][ T6074] R13: 00007f252a5e6038 R14: 00007f252a5e5fa0 R15: 00007ffda438db28 [ 78.700244][ T6074] [ 79.054801][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 79.054815][ T30] audit: type=1400 audit(1766877046.970:201): avc: denied { create } for pid=6035 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.083604][ T30] audit: type=1400 audit(1766877046.970:202): avc: denied { write } for pid=6035 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=2061 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.109561][ T30] audit: type=1400 audit(1766877046.970:203): avc: denied { append } for pid=6035 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=2061 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.134872][ T6076] SELinux: failed to load policy [ 79.140092][ T30] audit: type=1400 audit(1766877047.050:204): avc: denied { load_policy } for pid=6075 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.820058][ T6030] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.864254][ T30] audit: type=1400 audit(1766877047.780:205): avc: denied { name_bind } for pid=6096 comm="syz.1.36" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 80.061312][ T6098] Zero length message leads to an empty skb [ 80.079854][ T6030] usb 4-1: Using ep0 maxpacket: 8 [ 80.119887][ T48] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 80.290738][ T10] IPVS: starting estimator thread 0... [ 80.310240][ T6030] usb 4-1: config 125 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 80.342382][ T30] audit: type=1400 audit(1766877048.260:206): avc: denied { ioctl } for pid=6100 comm="syz.2.38" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8148 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.372590][ T6030] usb 4-1: config 125 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.383049][ T6030] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 80.407424][ T6030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.461355][ T6099] IPVS: using max 46 ests per chain, 110400 per kthread [ 80.464069][ T30] audit: type=1400 audit(1766877048.380:207): avc: denied { mounton } for pid=6102 comm="syz.4.37" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 80.472214][ T6104] omfs: Invalid superblock (0) [ 80.749678][ T48] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 80.770481][ T48] usb 2-1: config 0 has no interface number 0 [ 80.777954][ T48] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.793597][ T48] usb 2-1: config 0 interface 235 has no altsetting 0 [ 80.802573][ T48] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 80.810207][ T6107] netlink: 100 bytes leftover after parsing attributes in process `syz.2.38'. [ 80.826899][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.835538][ T48] usb 2-1: Product: syz [ 80.840144][ T48] usb 2-1: Manufacturer: syz [ 80.845669][ T48] usb 2-1: SerialNumber: syz [ 80.932829][ T48] usb 2-1: config 0 descriptor?? [ 81.257446][ T48] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 81.281247][ T48] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 81.304693][ T48] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 81.444802][ T6030] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 81.452334][ T6097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.474282][ T48] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 81.482248][ T30] audit: type=1400 audit(1766877049.390:208): avc: denied { ioctl } for pid=6096 comm="syz.1.36" path="socket:[8168]" dev="sockfs" ino=8168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.509984][ T6030] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 81.516835][ T6030] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 81.883645][ T48] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 81.896313][ T6030] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 81.919481][ T48] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 81.954020][ T48] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 81.996762][ T48] usb 2-1: USB disconnect, device number 2 [ 82.047644][ T48] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 82.075933][ T48] keyspan 2-1:0.235: device disconnected [ 82.520554][ T30] audit: type=1400 audit(1766877050.440:209): avc: denied { setopt } for pid=6128 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.562870][ T6133] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 82.570928][ T6030] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.582676][ T6133] netlink: 68 bytes leftover after parsing attributes in process `syz.0.44'. [ 83.016321][ T6062] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.031364][ T48] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.084728][ T24] usb 4-1: USB disconnect, device number 3 [ 83.210713][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 83.217249][ T48] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 83.230224][ T6062] usb 2-1: Using ep0 maxpacket: 32 [ 83.241053][ T6062] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 83.241600][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.249312][ T6062] usb 2-1: config 0 has no interface number 0 [ 83.267194][ T48] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 83.284024][ T48] usb 5-1: config 3 has no interface number 0 [ 83.291542][ T6030] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 83.300772][ T48] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.320335][ T6030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.326742][ T6062] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 95, changing to 10 [ 83.328338][ T48] usb 5-1: config 3 interface 45 has no altsetting 0 [ 83.352923][ T6030] usb 3-1: config 0 descriptor?? [ 83.369566][ T48] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 83.382229][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.394998][ T6062] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid maxpacket 24934, setting to 1024 [ 83.399902][ T48] usb 5-1: Product: syz [ 83.410751][ T48] usb 5-1: Manufacturer: syz [ 83.415362][ T48] usb 5-1: SerialNumber: syz [ 83.460307][ T6062] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 83.470933][ T6062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.478922][ T6062] usb 2-1: Product: syz [ 83.483954][ T6062] usb 2-1: Manufacturer: syz [ 83.488638][ T6062] usb 2-1: SerialNumber: syz [ 83.505599][ T6062] usb 2-1: config 0 descriptor?? [ 83.516214][ T6062] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 84.347380][ T48] usb 5-1: USB disconnect, device number 2 [ 84.393992][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.529872][ T5951] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.588693][ T30] audit: type=1400 audit(1766877052.500:210): avc: denied { name_bind } for pid=6148 comm="syz.0.48" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 84.613111][ T30] audit: type=1400 audit(1766877052.510:211): avc: denied { connect } for pid=6148 comm="syz.0.48" laddr=172.20.20.36 lport=128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.635031][ T30] audit: type=1400 audit(1766877052.510:212): avc: denied { name_connect } for pid=6148 comm="syz.0.48" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.661308][ T30] audit: type=1400 audit(1766877052.570:213): avc: denied { getopt } for pid=6130 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.836109][ T5951] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 84.844494][ T5951] usb 4-1: config 0 has no interface number 0 [ 84.850655][ T5951] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 84.859950][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.871146][ T5951] usb 4-1: config 0 descriptor?? [ 84.884564][ T5951] port100 4-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 84.960214][ T6062] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 84.972351][ T6062] gspca_pac7302 2-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 84.996816][ T30] audit: type=1400 audit(1766877052.910:214): avc: denied { name_bind } for pid=6153 comm="syz.4.49" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.041408][ T30] audit: type=1400 audit(1766877052.960:215): avc: denied { write } for pid=6153 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.153951][ T30] audit: type=1400 audit(1766877053.070:216): avc: denied { sqpoll } for pid=6139 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.176240][ T30] audit: type=1400 audit(1766877053.070:217): avc: denied { add_name } for pid=6155 comm="syz.4.50" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.177314][ T6156] o2cb: This node has not been configured. [ 85.197291][ T30] audit: type=1400 audit(1766877053.090:218): avc: denied { create } for pid=6155 comm="syz.4.50" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 85.232819][ T30] audit: type=1400 audit(1766877053.090:219): avc: denied { associate } for pid=6155 comm="syz.4.50" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.233112][ T6062] usb 4-1: USB disconnect, device number 4 [ 85.272189][ T6156] o2cb: Cluster check failed. Fix errors before retrying. [ 85.281105][ T6156] (syz.4.50,6156,0):user_dlm_register:674 ERROR: status = -22 [ 85.292939][ T6156] (syz.4.50,6156,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 85.383077][ T6030] usbhid 3-1:0.0: can't add hid device: -71 [ 85.398163][ T6030] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 85.425529][ T6030] usb 3-1: USB disconnect, device number 2 [ 85.549526][ T6167] netlink: 100 bytes leftover after parsing attributes in process `syz.0.51'. [ 85.873884][ T6030] usb 2-1: USB disconnect, device number 3 [ 86.634589][ T6184] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 89.141887][ T48] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.639803][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 89.700413][ T6062] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 89.700655][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.788032][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 89.794240][ T30] audit: type=1400 audit(1766877057.700:231): avc: denied { read } for pid=6227 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.817791][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.885174][ T6062] usb 2-1: device descriptor read/64, error -71 [ 89.972579][ T48] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 89.982322][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.001502][ T48] usb 3-1: config 0 descriptor?? [ 90.280152][ T6062] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 90.495691][ T6062] usb 2-1: device descriptor read/64, error -71 [ 90.509030][ T6236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.661718][ T6062] usb usb2-port1: attempt power cycle [ 90.667711][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.894329][ T6236] batadv_slave_0: entered promiscuous mode [ 91.070648][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 91.884696][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.180800][ T6239] Set syz1 is full, maxelem 65536 reached [ 92.205127][ T6062] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 92.243099][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.257369][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 92.270502][ T6062] usb 2-1: device descriptor read/8, error -71 [ 92.278809][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.315455][ T10] usb 5-1: config 0 descriptor?? [ 92.603081][ T6062] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 92.749994][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.819864][ T6062] usb 2-1: device not accepting address 7, error -71 [ 92.828585][ T6062] usb usb2-port1: unable to enumerate USB device [ 93.002520][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.022371][ T9] usb 4-1: config 0 has no interfaces? [ 93.032406][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 93.047286][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.288577][ T9] usb 4-1: config 0 descriptor?? [ 93.337303][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 93.563716][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 93.573900][ T48] usb 3-1: USB disconnect, device number 3 [ 94.355187][ T6250] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 94.365979][ T6250] netlink: 68 bytes leftover after parsing attributes in process `syz.1.74'. [ 94.986985][ T6251] Set syz1 is full, maxelem 65536 reached [ 95.840295][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 95.853868][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 95.866176][ T10] usb 5-1: USB disconnect, device number 3 [ 96.012161][ T30] audit: type=1400 audit(1766877063.900:232): avc: denied { mounton } for pid=6262 comm="syz.4.76" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.578066][ T30] audit: type=1400 audit(1766877064.480:233): avc: denied { create } for pid=6267 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.939367][ T30] audit: type=1400 audit(1766877064.480:234): avc: denied { write } for pid=6267 comm="syz.2.77" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.960088][ T30] audit: type=1400 audit(1766877064.570:235): avc: denied { read } for pid=6262 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.191271][ T6030] usb 4-1: USB disconnect, device number 5 [ 97.393401][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 97.555856][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 97.689783][ T6030] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 98.116473][ T30] audit: type=1400 audit(1766877066.030:236): avc: denied { ioctl } for pid=6290 comm="syz.0.84" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.176720][ T30] audit: type=1400 audit(1766877066.060:237): avc: denied { map } for pid=6290 comm="syz.0.84" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.241671][ T6030] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 98.323254][ T6030] usb 4-1: config 0 has no interface number 0 [ 98.329358][ T6030] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.368231][ T30] audit: type=1400 audit(1766877066.280:238): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.393092][ T6030] usb 4-1: config 0 interface 235 has no altsetting 0 [ 98.400630][ T30] audit: type=1400 audit(1766877066.280:239): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.461268][ T6030] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 98.492037][ T30] audit: type=1400 audit(1766877066.280:240): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.865231][ T6030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.884967][ T6030] usb 4-1: Product: syz [ 98.889521][ T6030] usb 4-1: Manufacturer: syz [ 98.894422][ T6030] usb 4-1: SerialNumber: syz [ 98.904828][ T6030] usb 4-1: config 0 descriptor?? [ 98.914447][ T6030] keyspan 4-1:0.235: Keyspan 1 port adapter converter detected [ 98.922448][ T6030] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 87 [ 98.931376][ T6030] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 7 [ 98.940905][ T6030] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 81 [ 98.948833][ T6030] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 1 [ 98.956714][ T6030] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 85 [ 98.966197][ T6030] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 99.007945][ T30] audit: type=1400 audit(1766877066.920:241): avc: denied { read write } for pid=6303 comm="syz.1.86" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.169806][ T935] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.217735][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 100.119836][ T935] usb 3-1: Using ep0 maxpacket: 16 [ 100.140263][ T935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.151587][ T935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.254072][ T5951] usb 4-1: USB disconnect, device number 6 [ 100.285646][ T935] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 100.321520][ T5951] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 100.343156][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.427555][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 100.831559][ T5951] keyspan 4-1:0.235: device disconnected [ 100.857802][ T935] usb 3-1: config 0 descriptor?? [ 101.031374][ T10] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 101.051552][ T10] usb 2-1: config 0 has no interface number 0 [ 101.059001][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 101.185627][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 101.185638][ T30] audit: type=1400 audit(1766877069.100:245): avc: denied { add_name } for pid=6302 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.221704][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.368687][ T10] usb 2-1: config 0 descriptor?? [ 101.515053][ T10] port100 2-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 101.529045][ T30] audit: type=1400 audit(1766877069.440:246): avc: denied { read } for pid=6332 comm="syz.4.90" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 101.577714][ T30] audit: type=1400 audit(1766877069.470:247): avc: denied { open } for pid=6332 comm="syz.4.90" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 101.641706][ T6328] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 101.932188][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.325357][ T30] audit: type=1400 audit(1766877070.240:248): avc: denied { remove_name } for pid=6339 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2339 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.497980][ T5937] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.534724][ T10] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 102.542955][ T10] usb 4-1: config 0 has no interface number 0 [ 102.549167][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 102.558845][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.572809][ T10] usb 4-1: config 0 descriptor?? [ 102.600440][ T10] port100 4-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 102.705542][ T5937] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 102.721864][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.734113][ T5937] usb 5-1: Product: syz [ 102.740759][ T5937] usb 5-1: Manufacturer: syz [ 102.747479][ T5937] usb 5-1: SerialNumber: syz [ 102.772949][ T5942] usb 2-1: USB disconnect, device number 8 [ 102.777522][ T5937] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 102.820730][ T30] audit: type=1400 audit(1766877070.720:249): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 102.874532][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.098217][ T30] audit: type=1400 audit(1766877071.010:250): avc: denied { write } for pid=6332 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.098644][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 103.174116][ T5942] usb 5-1: USB disconnect, device number 4 [ 103.190839][ T30] audit: type=1400 audit(1766877071.010:251): avc: denied { nlmsg_write } for pid=6332 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.198465][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 103.228760][ T30] audit: type=1400 audit(1766877071.140:252): avc: denied { setopt } for pid=6358 comm="syz.0.93" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.356777][ T30] audit: type=1400 audit(1766877071.270:253): avc: denied { ioctl } for pid=6369 comm="syz.0.95" path="/dev/vbi1" dev="devtmpfs" ino=953 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 103.501339][ T30] audit: type=1400 audit(1766877071.420:254): avc: denied { write } for pid=6369 comm="syz.0.95" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.610024][ T935] usbhid 3-1:0.0: can't add hid device: -71 [ 103.615999][ T935] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 103.633151][ T935] usb 3-1: USB disconnect, device number 4 [ 103.945977][ T6373] netlink: 100 bytes leftover after parsing attributes in process `syz.0.96'. [ 103.964470][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 104.092862][ T10] ath9k_htc: Failed to initialize the device [ 104.272410][ T5942] usb 5-1: ath9k_htc: USB layer deinitialized [ 104.324513][ T48] usb 4-1: USB disconnect, device number 7 [ 105.650600][ T6401] overlayfs: missing 'lowerdir' [ 106.005422][ T6403] openvswitch: netlink: Key 32 has unexpected len 12 expected 2 [ 106.060444][ T6403] libceph: resolve '400' (ret=-3): failed [ 106.444714][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 106.459797][ T30] audit: type=1400 audit(1766877074.190:304): avc: denied { shutdown } for pid=6405 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.759833][ T935] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.879441][ T6414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.106'. [ 106.971921][ T30] audit: type=1400 audit(1766877074.780:305): avc: denied { create } for pid=6411 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 107.286518][ T30] audit: type=1400 audit(1766877074.790:306): avc: denied { connect } for pid=6411 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 107.306532][ T30] audit: type=1400 audit(1766877074.810:307): avc: denied { bind } for pid=6411 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 107.327934][ T30] audit: type=1400 audit(1766877074.810:308): avc: denied { accept } for pid=6411 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 107.339759][ T935] usb 1-1: Using ep0 maxpacket: 16 [ 107.372441][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.911916][ T30] audit: type=1400 audit(1766877075.830:309): avc: denied { create } for pid=6417 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 107.931956][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.941731][ T935] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.987494][ T30] audit: type=1400 audit(1766877075.860:310): avc: denied { write } for pid=6417 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.140151][ T935] usb 1-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 108.669921][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.707994][ T935] usb 1-1: config 0 descriptor?? [ 109.335039][ T30] audit: type=1326 audit(1766877077.250:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1b58f749 code=0x7ffc0000 [ 109.360251][ T30] audit: type=1326 audit(1766877077.280:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad1b58f749 code=0x7ffc0000 [ 109.367568][ T6430] binder: 6429:6430 ioctl 9000aecf 200000ffc000 returned -22 [ 109.384933][ T30] audit: type=1326 audit(1766877077.280:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1b58f749 code=0x7ffc0000 [ 109.428989][ T6432] binder: 6429:6432 unknown command 0 [ 109.438052][ T6432] binder: 6429:6432 ioctl c0306201 2000000001c0 returned -22 [ 109.544058][ T935] hid-generic 0003:045E:00DA.0002: unknown main item tag 0x0 [ 109.559529][ T935] hid-generic 0003:045E:00DA.0002: unknown main item tag 0x0 [ 109.719868][ T935] hid-generic 0003:045E:00DA.0002: unknown main item tag 0x0 [ 109.734420][ T935] hid-generic 0003:045E:00DA.0002: unknown main item tag 0x0 [ 109.949783][ T6440] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.113'. [ 109.990275][ T6439] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.113'. [ 110.094689][ T5937] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.980647][ T6450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.114'. [ 111.039788][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 111.104256][ T5937] usb 4-1: config index 0 descriptor too short (expected 16420, got 36) [ 111.426335][ T5937] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 111.479791][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.492373][ T5937] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.504387][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.515637][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.534345][ T5937] usb 4-1: config index 1 descriptor too short (expected 16420, got 36) [ 111.553565][ T5937] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 111.569759][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.615720][ T5937] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.670747][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.676570][ T935] hid-generic 0003:045E:00DA.0002: unknown main item tag 0x0 [ 111.682153][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.703036][ T5937] usb 4-1: config index 2 descriptor too short (expected 16420, got 36) [ 111.712542][ T935] hid-generic 0003:045E:00DA.0002: unknown main item tag 0x0 [ 111.768519][ T5937] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 111.791866][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.808273][ T5937] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.823232][ T935] hid-generic 0003:045E:00DA.0002: unknown main item tag 0x0 [ 111.829590][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.856985][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.874382][ T5937] usb 4-1: string descriptor 0 read error: -22 [ 111.880758][ T5937] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 111.971116][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.980798][ T935] hid-generic 0003:045E:00DA.0002: unknown main item tag 0x0 [ 111.988250][ T935] hid-generic 0003:045E:00DA.0002: unknown main item tag 0x0 [ 112.023843][ T935] hid-generic 0003:045E:00DA.0002: unknown main item tag 0x0 [ 112.024057][ T5937] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 113.129409][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 113.129425][ T30] audit: type=1400 audit(1766877081.040:342): avc: denied { create } for pid=6483 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.275931][ T5937] usb 4-1: USB disconnect, device number 8 [ 113.401353][ T935] hid-generic 0003:045E:00DA.0002: unbalanced collection at end of report description [ 113.558307][ T6497] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.610180][ T935] hid-generic 0003:045E:00DA.0002: probe with driver hid-generic failed with error -22 [ 113.646354][ T935] usb 1-1: USB disconnect, device number 6 [ 113.806761][ T6506] vivid-000: ================= START STATUS ================= [ 113.815017][ T6506] vivid-000: Generate PTS: true [ 113.820133][ T6506] vivid-000: Generate SCR: true [ 113.825183][ T6506] tpg source WxH: 320x240 (Y'CbCr) [ 113.830399][ T6506] tpg field: 1 [ 113.833837][ T6506] tpg crop: (0,0)/320x240 [ 113.838226][ T6506] tpg compose: (0,0)/320x240 [ 113.843016][ T6506] tpg colorspace: 8 [ 113.846997][ T6506] tpg transfer function: 0/2 [ 113.851697][ T6506] tpg Y'CbCr encoding: 0/1 [ 113.856314][ T6506] tpg quantization: 0/2 [ 113.861077][ T6506] tpg RGB range: 0/2 [ 113.865053][ T6506] vivid-000: ================== END STATUS ================== [ 113.980327][ T935] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.290461][ T935] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 114.299125][ T935] usb 1-1: config 1 has no interface number 0 [ 114.308781][ T935] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 114.339847][ T935] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 114.390740][ T6510] netlink: 'syz.2.124': attribute type 1 has an invalid length. [ 114.439369][ T30] audit: type=1400 audit(1766877082.290:343): avc: denied { mount } for pid=6509 comm="syz.2.124" name="/" dev="overlay" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.463249][ T935] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 114.473533][ T935] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.489966][ T30] audit: type=1400 audit(1766877082.310:344): avc: denied { create } for pid=6509 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.535046][ T30] audit: type=1400 audit(1766877082.310:345): avc: denied { write } for pid=6509 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.566711][ T935] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 114.591393][ T935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.611869][ T935] usb 1-1: Product: syz [ 114.616079][ T935] usb 1-1: Manufacturer: syz [ 114.629896][ T935] usb 1-1: SerialNumber: syz [ 114.634817][ T30] audit: type=1400 audit(1766877082.440:346): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.745348][ T6478] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.752689][ T6478] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.813736][ T6513] FAULT_INJECTION: forcing a failure. [ 114.813736][ T6513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.863054][ T6513] CPU: 1 UID: 0 PID: 6513 Comm: syz.2.125 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.863073][ T6513] Tainted: [L]=SOFTLOCKUP [ 114.863077][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.863083][ T6513] Call Trace: [ 114.863087][ T6513] [ 114.863090][ T6513] dump_stack_lvl+0x16c/0x1f0 [ 114.863107][ T6513] should_fail_ex+0x512/0x640 [ 114.863125][ T6513] _copy_to_user+0x32/0xd0 [ 114.863142][ T6513] copy_siginfo_to_user+0x27/0xc0 [ 114.863155][ T6513] x64_setup_rt_frame+0xa1c/0xcf0 [ 114.863172][ T6513] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 114.863187][ T6513] ? __pfx_vfs_read+0x10/0x10 [ 114.863199][ T6513] ? find_held_lock+0x2b/0x80 [ 114.863216][ T6513] arch_do_signal_or_restart+0x5da/0x7e0 [ 114.863231][ T6513] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 114.863248][ T6513] ? fput+0x70/0xf0 [ 114.863259][ T6513] exit_to_user_mode_loop+0x8c/0x540 [ 114.863276][ T6513] do_syscall_64+0x4ee/0xf80 [ 114.863291][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.863302][ T6513] RIP: 0033:0x7fad1b58f747 [ 114.863310][ T6513] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 114.863320][ T6513] RSP: 002b:00007fad1c494038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.863330][ T6513] RAX: 0000000000000000 RBX: 00007fad1b7e5fa0 RCX: 00007fad1b58f749 [ 114.863336][ T6513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 114.863342][ T6513] RBP: 00007fad1c494090 R08: 0000000000000000 R09: 0000000000000000 [ 114.863348][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.863353][ T6513] R13: 00007fad1b7e6038 R14: 00007fad1b7e5fa0 R15: 00007fff24c22428 [ 114.863366][ T6513] [ 115.317765][ T935] usb 1-1: can't set config #1, error -71 [ 115.363931][ T935] usb 1-1: USB disconnect, device number 7 [ 116.079783][ T935] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.131304][ T30] audit: type=1400 audit(1766877084.050:347): avc: denied { create } for pid=6531 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.251383][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.260304][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 116.396495][ T935] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 116.405757][ T5951] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.451556][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.473503][ T935] usb 1-1: config 0 descriptor?? [ 116.597123][ T6539] netlink: 100 bytes leftover after parsing attributes in process `syz.3.134'. [ 116.599776][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 116.883499][ T5951] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 116.906622][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.917372][ T5951] usb 3-1: Product: syz [ 116.921805][ T5951] usb 3-1: Manufacturer: syz [ 117.440957][ T5951] usb 3-1: SerialNumber: syz [ 117.458984][ T935] usbhid 1-1:0.0: can't add hid device: -71 [ 117.466992][ T5951] usb 3-1: config 0 descriptor?? [ 117.488274][ T935] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 117.512390][ T5951] ttusb_dec_send_command: command bulk message failed: error -22 [ 117.617341][ T935] usb 1-1: USB disconnect, device number 8 [ 117.630279][ T5951] ttusb-dec 3-1:0.0: probe with driver ttusb-dec failed with error -22 [ 118.136688][ T10] usb 3-1: USB disconnect, device number 5 [ 118.299967][ T30] audit: type=1400 audit(1766877086.050:348): avc: denied { connect } for pid=6531 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.493685][ T30] audit: type=1400 audit(1766877086.050:349): avc: denied { bind } for pid=6531 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.832300][ T30] audit: type=1400 audit(1766877086.750:350): avc: denied { write } for pid=6552 comm="syz.4.138" name="event3" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 118.966019][ T891] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.081977][ T935] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 119.356798][ T935] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 119.358434][ T891] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.365728][ T935] usb 1-1: config 0 has no interface number 0 [ 119.380153][ T935] usb 1-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.390228][ T935] usb 1-1: config 0 interface 235 has no altsetting 0 [ 119.390803][ T891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.399214][ T935] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 119.427521][ T935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.436336][ T935] usb 1-1: Product: syz [ 119.441348][ T935] usb 1-1: Manufacturer: syz [ 119.446040][ T935] usb 1-1: SerialNumber: syz [ 119.638119][ T30] audit: type=1400 audit(1766877087.540:351): avc: denied { wake_alarm } for pid=6557 comm="syz.1.140" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.686082][ T6560] ceph: No mds server is up or the cluster is laggy [ 119.698769][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 119.723384][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 119.732160][ T891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.745728][ T935] usb 1-1: config 0 descriptor?? [ 119.753134][ T891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.772867][ T935] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 119.781391][ T935] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 119.814093][ T891] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.817252][ T935] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 119.824534][ T891] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.840611][ T891] usb 4-1: Product: syz [ 119.844818][ T891] usb 4-1: Manufacturer: syz [ 119.867788][ T891] cdc_wdm 4-1:1.0: skipping garbage [ 119.870916][ T935] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 119.874442][ T891] cdc_wdm 4-1:1.0: skipping garbage [ 119.881865][ T935] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 119.895857][ T935] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 119.896442][ T891] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 119.905615][ T935] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 119.910585][ T891] cdc_wdm 4-1:1.0: Unknown control protocol [ 120.108256][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 120.292843][ T891] usb 1-1: USB disconnect, device number 9 [ 120.341892][ T891] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 120.353641][ T30] audit: type=1400 audit(1766877088.270:352): avc: denied { block_suspend } for pid=6548 comm="syz.3.136" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.398128][ T891] keyspan 1-1:0.235: device disconnected [ 120.453947][ T30] audit: type=1400 audit(1766877088.370:353): avc: denied { read write } for pid=6548 comm="syz.3.136" name="cdc-wdm0" dev="devtmpfs" ino=2856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 120.505632][ T6577] No control pipe specified [ 120.509996][ T30] audit: type=1400 audit(1766877088.400:354): avc: denied { open } for pid=6548 comm="syz.3.136" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 120.560973][ T30] audit: type=1400 audit(1766877088.400:355): avc: denied { ioctl } for pid=6548 comm="syz.3.136" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2856 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 120.945892][ T6586] can: request_module (can-proto-3) failed. [ 121.341742][ T6600] ======================================================= [ 121.341742][ T6600] WARNING: The mand mount option has been deprecated and [ 121.341742][ T6600] and is ignored by this kernel. Remove the mand [ 121.341742][ T6600] option from the mount to silence this warning. [ 121.341742][ T6600] ======================================================= [ 121.529983][ T30] audit: type=1400 audit(1766877089.140:356): avc: denied { create } for pid=6588 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.623699][ T30] audit: type=1326 audit(1766877089.160:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5058f749 code=0x7ffc0000 [ 121.703712][ T5942] usb 4-1: USB disconnect, device number 9 [ 122.613367][ T6623] overlayfs: missing 'lowerdir' [ 123.489887][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 123.496060][ T30] audit: type=1400 audit(1766877091.350:371): avc: denied { write } for pid=6628 comm="syz.2.151" path="socket:[10953]" dev="sockfs" ino=10953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 124.302783][ T6644] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 124.961558][ T6643] netlink: 76 bytes leftover after parsing attributes in process `syz.4.152'. [ 126.030140][ T6672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.417042][ T30] audit: type=1400 audit(1766877094.030:372): avc: denied { append } for pid=6665 comm="syz.0.160" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.658679][ T30] audit: type=1400 audit(1766877094.570:373): avc: denied { getopt } for pid=6668 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 127.815851][ T6685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.882409][ T30] audit: type=1400 audit(1766877094.830:374): avc: denied { ioctl } for pid=6686 comm="syz.0.162" path="socket:[11023]" dev="sockfs" ino=11023 ioctlcmd=0x42d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.064653][ T6684] veth1_to_bond: mtu less than device minimum [ 130.347606][ T30] audit: type=1400 audit(1766877098.260:375): avc: denied { getopt } for pid=6688 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.496370][ T30] audit: type=1400 audit(1766877098.290:376): avc: denied { ioctl } for pid=6701 comm="syz.1.166" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.910768][ T5937] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.070364][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 132.104034][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.115129][ T5937] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.124266][ T5937] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 132.133546][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.179927][ T5937] usb 5-1: config 0 descriptor?? [ 132.272087][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.278438][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.432494][ T5942] usb 5-1: USB disconnect, device number 5 [ 134.709799][ T6745] overlayfs: missing 'lowerdir' [ 135.035751][ T30] audit: type=1400 audit(1766877102.950:377): avc: denied { mount } for pid=6747 comm="syz.3.175" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 135.120173][ T30] audit: type=1400 audit(1766877102.980:378): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 135.401934][ T6762] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 135.414247][ T6772] vivid-000: ================= START STATUS ================= [ 135.423140][ T6772] vivid-000: Generate PTS: true [ 135.428176][ T6772] vivid-000: Generate SCR: true [ 135.433263][ T6772] tpg source WxH: 320x240 (Y'CbCr) [ 135.438462][ T6772] tpg field: 1 [ 135.445252][ T6772] tpg crop: (0,0)/320x240 [ 135.445643][ T6762] FAULT_INJECTION: forcing a failure. [ 135.445643][ T6762] name failslab, interval 1, probability 0, space 0, times 0 [ 135.457355][ T30] audit: type=1400 audit(1766877103.350:379): avc: denied { bind } for pid=6757 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.485829][ T6772] tpg compose: (0,0)/320x240 [ 135.491785][ T6772] tpg colorspace: 8 [ 135.495619][ T6772] tpg transfer function: 0/2 [ 135.500274][ T6772] tpg Y'CbCr encoding: 0/1 [ 135.504707][ T6772] tpg quantization: 0/2 [ 135.508868][ T6772] tpg RGB range: 0/2 [ 135.512817][ T6772] vivid-000: ================== END STATUS ================== [ 135.697333][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz.1.180 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.697358][ T6762] Tainted: [L]=SOFTLOCKUP [ 135.697363][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.697372][ T6762] Call Trace: [ 135.697378][ T6762] [ 135.697385][ T6762] dump_stack_lvl+0x16c/0x1f0 [ 135.697410][ T6762] should_fail_ex+0x512/0x640 [ 135.697432][ T6762] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 135.697452][ T6762] should_failslab+0xc2/0x120 [ 135.697473][ T6762] kmem_cache_alloc_node_noprof+0x86/0x800 [ 135.697487][ T6762] ? __alloc_skb+0x156/0x410 [ 135.697514][ T6762] ? __alloc_skb+0x156/0x410 [ 135.697534][ T6762] __alloc_skb+0x156/0x410 [ 135.697556][ T6762] ? __alloc_skb+0x35d/0x410 [ 135.697579][ T6762] ? __pfx___alloc_skb+0x10/0x10 [ 135.697612][ T6762] ? genl_rcv_msg+0x4bb/0x800 [ 135.697639][ T6762] netlink_ack+0x15d/0xb80 [ 135.697666][ T6762] netlink_rcv_skb+0x332/0x420 [ 135.697686][ T6762] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.697709][ T6762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.697739][ T6762] ? netlink_deliver_tap+0x1ae/0xd30 [ 135.697761][ T6762] genl_rcv+0x28/0x40 [ 135.697781][ T6762] netlink_unicast+0x5aa/0x870 [ 135.697805][ T6762] ? __pfx_netlink_unicast+0x10/0x10 [ 135.697834][ T6762] netlink_sendmsg+0x8c8/0xdd0 [ 135.697857][ T6762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.697887][ T6762] ____sys_sendmsg+0xa5d/0xc30 [ 135.697910][ T6762] ? copy_msghdr_from_user+0x10a/0x160 [ 135.697926][ T6762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.697955][ T6762] ___sys_sendmsg+0x134/0x1d0 [ 135.697972][ T6762] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.698018][ T6762] __sys_sendmsg+0x16d/0x220 [ 135.698036][ T6762] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.698070][ T6762] do_syscall_64+0xcd/0xf80 [ 135.698093][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.698110][ T6762] RIP: 0033:0x7f252a38f749 [ 135.698125][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.698140][ T6762] RSP: 002b:00007f252b2ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.698157][ T6762] RAX: ffffffffffffffda RBX: 00007f252a5e5fa0 RCX: 00007f252a38f749 [ 135.698168][ T6762] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 000000000000000a [ 135.698178][ T6762] RBP: 00007f252b2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 135.698187][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.698197][ T6762] R13: 00007f252a5e6038 R14: 00007f252a5e5fa0 R15: 00007ffda438db28 [ 135.698221][ T6762] [ 135.954129][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.993079][ T6775] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 136.003871][ T6775] netlink: 76 bytes leftover after parsing attributes in process `syz.0.179'. [ 136.049776][ T5942] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.309780][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 136.317056][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 136.334831][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 136.343846][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 136.353861][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.363859][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.375481][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.389844][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 136.391059][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 136.399056][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.416362][ T10] usb 5-1: config 0 descriptor?? [ 136.455568][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.479958][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.516201][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.539856][ T6789] capability: warning: `syz.3.184' uses deprecated v2 capabilities in a way that may be insecure [ 136.639757][ T30] audit: type=1400 audit(1766877104.530:380): avc: denied { append } for pid=6783 comm="syz.1.183" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 136.640750][ T5942] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 136.640775][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.642674][ T5942] usb 3-1: config 0 descriptor?? [ 136.678334][ T30] audit: type=1400 audit(1766877104.590:381): avc: denied { map } for pid=6753 comm="syz.4.178" path="socket:[11643]" dev="sockfs" ino=11643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.678575][ T30] audit: type=1400 audit(1766877104.590:382): avc: denied { read write } for pid=6753 comm="syz.4.178" path="socket:[11643]" dev="sockfs" ino=11643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.685779][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 137.065465][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.199237][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.235415][ T5942] nzxt-kraken2 0003:1E71:170E.0003: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.2-1/input0 [ 137.278045][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.338510][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.819029][ T6802] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 137.937385][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 138.066962][ T6802] bond1: entered promiscuous mode [ 138.090782][ T6802] bond1: entered allmulticast mode [ 138.108498][ T30] audit: type=1400 audit(1766877106.020:383): avc: denied { ioctl } for pid=6801 comm="syz.0.185" path="socket:[12551]" dev="sockfs" ino=12551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.156901][ T891] usb 5-1: USB disconnect, device number 6 [ 138.172100][ T891] usblp0: removed [ 138.213512][ T6802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.269794][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.276497][ T5942] usb 3-1: USB disconnect, device number 6 [ 138.386988][ T30] audit: type=1400 audit(1766877106.300:384): avc: denied { write } for pid=6817 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.387220][ T6808] erspan1: entered allmulticast mode [ 138.407840][ T6822] netlink: zone id is out of range [ 138.469769][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 138.490826][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.581556][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.634449][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 138.665670][ T6808] bond1: (slave erspan1): making interface the new active one [ 138.677534][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.697308][ T10] usb 4-1: config 0 descriptor?? [ 138.706681][ T6808] erspan1: entered promiscuous mode [ 138.727631][ T6808] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 138.989191][ T891] IPVS: starting estimator thread 0... [ 139.028680][ T6812] bond1 (unregistering): (slave erspan1): Releasing active interface [ 139.066444][ T6812] erspan1: left promiscuous mode [ 139.079818][ T6827] IPVS: using max 51 ests per chain, 122400 per kthread [ 139.226431][ T6812] bond1 (unregistering): Released all slaves [ 139.252058][ T6826] SELinux: policydb magic number 0x2b45ff8c does not match expected magic number 0xf97cff8c [ 139.282336][ T6826] SELinux: failed to load policy [ 140.682016][ T6828] Set syz1 is full, maxelem 65536 reached [ 140.957826][ T30] audit: type=1400 audit(1766877108.870:385): avc: denied { create } for pid=6833 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.071087][ T30] audit: type=1400 audit(1766877108.880:386): avc: denied { setopt } for pid=6833 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.289858][ T5927] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.431776][ T30] audit: type=1400 audit(1766877109.350:387): avc: denied { append } for pid=6843 comm="syz.0.194" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.479809][ T5927] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 141.492125][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.504522][ T30] audit: type=1400 audit(1766877109.380:388): avc: denied { create } for pid=6843 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.533558][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.557761][ T5927] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.573129][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.582248][ T5927] usb 2-1: Product: syz [ 141.586667][ T5927] usb 2-1: Manufacturer: syz [ 141.593380][ T5927] usb 2-1: SerialNumber: syz [ 141.721910][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 141.799538][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 142.132957][ T10] usb 4-1: USB disconnect, device number 10 [ 142.166657][ T30] audit: type=1400 audit(1766877110.080:389): avc: denied { execute } for pid=6836 comm="syz.1.191" path="/36/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.206805][ T6849] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 142.216373][ T6849] netlink: 76 bytes leftover after parsing attributes in process `syz.0.195'. [ 142.227015][ T6848] netlink: 32 bytes leftover after parsing attributes in process `syz.4.193'. [ 142.552574][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.784504][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.015385][ T30] audit: type=1400 audit(1766877110.930:390): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 143.050679][ T5927] usb 2-1: 0:2 : does not exist [ 143.097198][ T5927] usb 2-1: USB disconnect, device number 9 [ 143.114875][ T6864] netlink: 100 bytes leftover after parsing attributes in process `syz.3.197'. [ 143.149833][ T5960] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 143.159414][ T30] audit: type=1400 audit(1766877111.070:391): avc: denied { mount } for pid=6865 comm="syz.2.198" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 143.176692][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.258890][ T30] audit: type=1400 audit(1766877111.170:392): avc: denied { mounton } for pid=6865 comm="syz.2.198" path="/47/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 143.373873][ T6870] FAULT_INJECTION: forcing a failure. [ 143.373873][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 143.386579][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.0.199 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.386602][ T6870] Tainted: [L]=SOFTLOCKUP [ 143.386608][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.386616][ T6870] Call Trace: [ 143.386621][ T6870] [ 143.386628][ T6870] dump_stack_lvl+0x16c/0x1f0 [ 143.386652][ T6870] should_fail_ex+0x512/0x640 [ 143.386673][ T6870] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 143.386690][ T6870] should_failslab+0xc2/0x120 [ 143.386710][ T6870] kmem_cache_alloc_noprof+0x83/0x770 [ 143.386722][ T6870] ? skb_clone+0x190/0x3f0 [ 143.386735][ T6870] ? skb_clone+0x190/0x3f0 [ 143.386744][ T6870] skb_clone+0x190/0x3f0 [ 143.386755][ T6870] netlink_deliver_tap+0xabd/0xd30 [ 143.386770][ T6870] netlink_unicast+0x64c/0x870 [ 143.386791][ T6870] ? __pfx_netlink_unicast+0x10/0x10 [ 143.386819][ T6870] netlink_sendmsg+0x8c8/0xdd0 [ 143.386840][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.386862][ T6870] ____sys_sendmsg+0xa5d/0xc30 [ 143.386875][ T6870] ? copy_msghdr_from_user+0x10a/0x160 [ 143.386885][ T6870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.386905][ T6870] ___sys_sendmsg+0x134/0x1d0 [ 143.386916][ T6870] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.386959][ T6870] __sys_sendmsg+0x16d/0x220 [ 143.386975][ T6870] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.387002][ T6870] do_syscall_64+0xcd/0xf80 [ 143.387016][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.387027][ T6870] RIP: 0033:0x7f5d5058f749 [ 143.387036][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.387045][ T6870] RSP: 002b:00007f5d513e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.387055][ T6870] RAX: ffffffffffffffda RBX: 00007f5d507e6090 RCX: 00007f5d5058f749 [ 143.387063][ T6870] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000009 [ 143.387072][ T6870] RBP: 00007f5d513e7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.387081][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.387089][ T6870] R13: 00007f5d507e6128 R14: 00007f5d507e6090 R15: 00007ffdd7937a28 [ 143.387111][ T6870] [ 143.786462][ T30] audit: type=1400 audit(1766877111.530:393): avc: denied { connect } for pid=6868 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.830088][ T5960] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 143.839111][ T5960] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 143.871099][ T5960] usb 5-1: Product: syz [ 143.878590][ T5960] usb 5-1: Manufacturer: syz [ 143.889751][ T5960] usb 5-1: SerialNumber: syz [ 144.102745][ T5960] usb 5-1: config 0 descriptor?? [ 144.141661][ T5960] ch341 5-1:0.0: ch341-uart converter detected [ 144.267000][ T30] audit: type=1400 audit(1766877112.180:394): avc: denied { write } for pid=6875 comm="syz.1.201" path="socket:[11912]" dev="sockfs" ino=11912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.349804][ T5960] usb 5-1: failed to receive control message: -71 [ 144.356268][ T5960] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 144.389944][ T5960] usb 5-1: USB disconnect, device number 7 [ 144.399497][ T5960] ch341 5-1:0.0: device disconnected [ 145.751683][ T6901] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 146.538030][ T6910] FAULT_INJECTION: forcing a failure. [ 146.538030][ T6910] name failslab, interval 1, probability 0, space 0, times 0 [ 146.553408][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.0.210 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.553433][ T6910] Tainted: [L]=SOFTLOCKUP [ 146.553438][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.553447][ T6910] Call Trace: [ 146.553452][ T6910] [ 146.553458][ T6910] dump_stack_lvl+0x16c/0x1f0 [ 146.553481][ T6910] should_fail_ex+0x512/0x640 [ 146.553496][ T6910] ? kmem_cache_alloc_noprof+0x62/0x770 [ 146.553508][ T6910] should_failslab+0xc2/0x120 [ 146.553522][ T6910] kmem_cache_alloc_noprof+0x83/0x770 [ 146.553531][ T6910] ? __pfx_stack_trace_save+0x10/0x10 [ 146.553543][ T6910] ? getname_kernel+0x52/0x370 [ 146.553561][ T6910] ? getname_kernel+0x52/0x370 [ 146.553575][ T6910] getname_kernel+0x52/0x370 [ 146.553591][ T6910] do_file_open_root+0x19d/0x610 [ 146.553605][ T6910] ? do_syscall_64+0xcd/0xf80 [ 146.553617][ T6910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.553629][ T6910] ? __pfx_do_file_open_root+0x10/0x10 [ 146.553655][ T6910] ? do_raw_spin_lock+0x12c/0x2b0 [ 146.553671][ T6910] file_open_root+0x2a7/0x450 [ 146.553685][ T6910] ? __pfx_file_open_root+0x10/0x10 [ 146.553698][ T6910] ? _raw_spin_unlock+0x28/0x50 [ 146.553713][ T6910] ? __pfx_nsfs_export_open+0x10/0x10 [ 146.553728][ T6910] do_handle_open+0x844/0xd10 [ 146.553746][ T6910] ? __pfx_do_handle_open+0x10/0x10 [ 146.553764][ T6910] ? ksys_write+0x1ac/0x250 [ 146.553780][ T6910] ? do_syscall_64+0xcd/0xf80 [ 146.553792][ T6910] do_syscall_64+0xcd/0xf80 [ 146.553805][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.553815][ T6910] RIP: 0033:0x7f5d5058f749 [ 146.553824][ T6910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.553833][ T6910] RSP: 002b:00007f5d513e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 146.553843][ T6910] RAX: ffffffffffffffda RBX: 00007f5d507e6090 RCX: 00007f5d5058f749 [ 146.553850][ T6910] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 146.553855][ T6910] RBP: 00007f5d513e7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.553861][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.553867][ T6910] R13: 00007f5d507e6128 R14: 00007f5d507e6090 R15: 00007ffdd7937a28 [ 146.553880][ T6910] [ 147.957528][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 147.957542][ T30] audit: type=1400 audit(1766877115.870:399): avc: denied { unlink } for pid=5808 comm="syz-executor" name="file0" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.009795][ T5927] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.218183][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 148.230565][ T5927] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 148.239310][ T5927] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 148.248254][ T5927] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 148.257155][ T5927] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 148.267330][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 148.720296][ T5927] usb 1-1: config 0 has no interface number 0 [ 148.735251][ T6926] netlink: 100 bytes leftover after parsing attributes in process `syz.4.213'. [ 148.739763][ T5927] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 148.790747][ T5927] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 148.819264][ T5927] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 148.834842][ T5927] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.854411][ T5927] usb 1-1: config 0 interface 125 has no altsetting 2 [ 148.867019][ T5927] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 148.886347][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.936395][ T5927] usb 1-1: Product: syz [ 148.955764][ T5927] usb 1-1: Manufacturer: syz [ 149.051427][ T5927] usb 1-1: SerialNumber: syz [ 149.101719][ T5927] usb 1-1: config 0 descriptor?? [ 149.126718][ T5927] usb 1-1: selecting invalid altsetting 2 [ 149.542872][ T30] audit: type=1400 audit(1766877117.360:400): avc: denied { write } for pid=6927 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.752695][ T5960] usb 1-1: USB disconnect, device number 10 [ 149.880284][ T30] audit: type=1400 audit(1766877117.360:401): avc: denied { read } for pid=6927 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.479762][ T5937] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 150.683700][ T30] audit: type=1400 audit(1766877118.570:402): avc: denied { remount } for pid=6947 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 150.912287][ T5937] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.932679][ T5937] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.959411][ T5937] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.970666][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.200034][ T5937] usb 2-1: usb_control_msg returned -32 [ 151.210552][ T5937] usbtmc 2-1:16.0: can't read capabilities [ 151.331612][ T6951] kvm: kvm [6949]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 151.350360][ T6951] kvm: kvm [6949]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 151.842301][ T5927] usb 2-1: USB disconnect, device number 10 [ 152.089851][ T5960] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.097867][ T30] audit: type=1400 audit(1766877120.010:403): avc: denied { ioctl } for pid=6971 comm="syz.1.225" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 152.401460][ T5960] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 152.417170][ T5960] usb 5-1: config 0 has no interface number 0 [ 152.423469][ T5960] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 152.439754][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.920259][ T5960] usb 5-1: config 0 descriptor?? [ 152.930983][ T30] audit: type=1400 audit(1766877120.850:404): avc: denied { name_bind } for pid=6982 comm="syz.3.229" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 152.958267][ T5960] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 153.025015][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 153.036876][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.044499][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.216548][ T5937] usb 5-1: USB disconnect, device number 8 [ 153.322809][ T6951] syz.2.221 (6951) used greatest stack depth: 19224 bytes left [ 153.323347][ T6992] vivid-000: ================= START STATUS ================= [ 153.338019][ T6992] vivid-000: Generate PTS: true [ 153.343043][ T6992] vivid-000: Generate SCR: true [ 153.348024][ T6992] tpg source WxH: 320x240 (Y'CbCr) [ 153.354313][ T6992] tpg field: 1 [ 153.357904][ T6992] tpg crop: (0,0)/320x240 [ 153.362524][ T6992] tpg compose: (0,0)/320x240 [ 153.367139][ T6992] tpg colorspace: 8 [ 153.370992][ T6992] tpg transfer function: 0/2 [ 153.375605][ T6992] tpg Y'CbCr encoding: 0/1 [ 153.380116][ T6992] tpg quantization: 0/2 [ 153.384300][ T6992] tpg RGB range: 0/2 [ 153.388206][ T6992] vivid-000: ================== END STATUS ================== [ 153.555807][ T5960] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 153.856546][ T5960] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.876467][ T5960] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.896761][ T5960] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.422915][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.718833][ T5960] usb 2-1: usb_control_msg returned -32 [ 154.753782][ T5960] usbtmc 2-1:16.0: can't read capabilities [ 155.915902][ T5942] usb 2-1: USB disconnect, device number 11 [ 156.089749][ T30] audit: type=1326 audit(1766877123.990:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34218f749 code=0x7fc00000 [ 156.135009][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.240'. [ 156.260193][ T30] audit: type=1326 audit(1766877123.990:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34218f749 code=0x7fc00000 [ 156.553722][ T5942] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.643329][ T30] audit: type=1326 audit(1766877124.000:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34218f749 code=0x7fc00000 [ 156.761566][ T7030] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 156.809777][ T30] audit: type=1400 audit(1766877124.000:408): avc: denied { mounton } for pid=7016 comm="syz.3.240" path="/41/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.995779][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 157.001199][ T30] audit: type=1326 audit(1766877124.050:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34218f749 code=0x7fc00000 [ 157.024459][ T30] audit: type=1326 audit(1766877124.050:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34218f749 code=0x7fc00000 [ 157.060181][ T5942] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 157.081364][ T5942] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 157.111632][ T5942] usb 3-1: config 3 has no interface number 0 [ 157.117728][ T5942] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.151913][ T30] audit: type=1326 audit(1766877124.560:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34218f749 code=0x7fc00000 [ 157.182155][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 157.199732][ T5942] usb 3-1: config 3 interface 45 has no altsetting 0 [ 157.219971][ T30] audit: type=1326 audit(1766877124.560:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34218f749 code=0x7fc00000 [ 157.255488][ T5942] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 157.274549][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.299907][ T5942] usb 3-1: Product: syz [ 157.304115][ T5942] usb 3-1: Manufacturer: syz [ 157.317781][ T7021] SELinux: failed to load policy [ 157.328958][ T30] audit: type=1326 audit(1766877124.560:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34218f749 code=0x7fc00000 [ 157.353999][ T5942] usb 3-1: SerialNumber: syz [ 157.404994][ T30] audit: type=1326 audit(1766877124.940:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34218f749 code=0x7fc00000 [ 157.604826][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 157.887296][ T9] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 157.901004][ T9] usb 2-1: config 0 has no interface number 0 [ 157.907975][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 157.935712][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.976902][ T9] usb 2-1: config 0 descriptor?? [ 157.998346][ T9] port100 2-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 158.080932][ T5942] usb 3-1: USB disconnect, device number 7 [ 158.112373][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.270934][ T7055] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 158.406186][ T7055] CIFS mount error: No usable UNC path provided in device string! [ 158.406186][ T7055] [ 158.438483][ T7055] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 159.422378][ T24] usb 2-1: USB disconnect, device number 12 [ 159.609951][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.701552][ T7084] kAFS: unparsable volume name [ 160.753164][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.832676][ T7103] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 160.840756][ T7103] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.857177][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.960809][ T7105] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 160.968813][ T7105] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.987982][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.119728][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.170006][ T7073] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.322285][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.792503][ T7105] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 162.880476][ T5937] usb 5-1: USB disconnect, device number 9 [ 164.362408][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 164.362424][ T30] audit: type=1800 audit(1766877132.280:458): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.264" name="/" dev="fuse" ino=1 res=0 errno=0 [ 164.449780][ T5951] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 164.866818][ T5951] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 165.109118][ T5951] usb 2-1: config 0 has no interface number 0 [ 165.119242][ T30] audit: type=1400 audit(1766877132.340:459): avc: denied { lock } for pid=7150 comm="syz.3.265" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.143100][ T5951] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 165.152173][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.167302][ T5951] usb 2-1: config 0 descriptor?? [ 165.172367][ T30] audit: type=1400 audit(1766877132.910:460): avc: denied { ioctl } for pid=7150 comm="syz.3.265" path="socket:[13646]" dev="sockfs" ino=13646 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.203894][ T5951] port100 2-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 165.285740][ T30] audit: type=1800 audit(1766877133.000:461): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.266" name="/" dev="fuse" ino=1 res=0 errno=0 [ 166.637561][ T30] audit: type=1400 audit(1766877134.550:462): avc: denied { read } for pid=7178 comm="syz.0.271" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.769092][ T7184] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 166.805307][ T7184] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 166.830688][ T30] audit: type=1400 audit(1766877134.550:463): avc: denied { open } for pid=7178 comm="syz.0.271" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.863068][ T30] audit: type=1400 audit(1766877134.550:464): avc: denied { ioctl } for pid=7178 comm="syz.0.271" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.222780][ T9] usb 2-1: USB disconnect, device number 13 [ 167.386771][ T30] audit: type=1400 audit(1766877134.610:465): avc: denied { write } for pid=7176 comm="syz.2.270" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.131125][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 168.344076][ T9] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 168.352687][ T9] usb 2-1: config 0 has no interface number 0 [ 168.369764][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 168.706515][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.283948][ T9] usb 2-1: config 0 descriptor?? [ 169.396341][ T9] port100 2-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 169.491717][ T30] audit: type=1800 audit(1766877137.410:466): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.277" name="/" dev="fuse" ino=1 res=0 errno=0 [ 169.679856][ T935] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.774529][ T5942] usb 2-1: USB disconnect, device number 14 [ 170.013137][ T935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.025547][ T935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 170.050157][ T935] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 170.480377][ T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.534006][ T935] usb 5-1: config 0 descriptor?? [ 170.544088][ T30] audit: type=1400 audit(1766877138.460:467): avc: denied { ioctl } for pid=7232 comm="syz.1.281" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 170.630835][ T30] audit: type=1400 audit(1766877138.510:468): avc: denied { mounton } for pid=7226 comm="syz.2.280" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 170.720471][ T9] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 170.810271][ T30] audit: type=1400 audit(1766877138.730:469): avc: denied { setopt } for pid=7221 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.080936][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 171.129799][ T9] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 171.169251][ T935] ath6kl: Failed to submit usb control message: -71 [ 171.185217][ T935] ath6kl: unable to send the bmi data to the device: -71 [ 171.246824][ T935] ath6kl: Unable to send get target info: -71 [ 171.248877][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.265370][ T935] ath6kl: Failed to init ath6kl core: -71 [ 171.269495][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 171.275797][ T935] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 171.291667][ T30] audit: type=1400 audit(1766877139.200:470): avc: denied { call } for pid=7238 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 171.295194][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.311334][ T7240] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.793275][ T935] usb 5-1: USB disconnect, device number 10 [ 171.822980][ T9] usb 1-1: config 0 descriptor?? [ 172.469786][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 172.625743][ T9] koneplus 0003:1E7D:2E22.0004: unbalanced delimiter at end of report description [ 172.642484][ T10] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 172.653544][ T9] koneplus 0003:1E7D:2E22.0004: parse failed [ 172.661063][ T10] usb 3-1: config 0 has no interface number 0 [ 172.669887][ T10] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.679861][ T9] koneplus 0003:1E7D:2E22.0004: probe with driver koneplus failed with error -22 [ 172.691936][ T10] usb 3-1: config 0 interface 235 has no altsetting 0 [ 172.700447][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 172.709472][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.717596][ T10] usb 3-1: Product: syz [ 172.751261][ T10] usb 3-1: Manufacturer: syz [ 172.756338][ T7252] x_tables: unsorted entry at hook 2 [ 172.771135][ T10] usb 3-1: SerialNumber: syz [ 172.788120][ T10] usb 3-1: config 0 descriptor?? [ 172.807480][ T10] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 172.826299][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 172.981024][ T9] usb 1-1: USB disconnect, device number 11 [ 173.009099][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 173.291355][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 173.299394][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 173.307652][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 173.320452][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 173.334499][ T10] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 173.426735][ T977] usb 3-1: USB disconnect, device number 8 [ 173.440411][ T977] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 173.453547][ T977] keyspan 3-1:0.235: device disconnected [ 175.380664][ T977] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 175.429626][ T7275] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x48f pfn:0x2a31a [ 175.449029][ T7273] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x48d pfn:0x2a31c [ 175.469973][ T7273] memcg:ffff8881404627c0 [ 175.478417][ T7275] memcg:ffff8881404627c0 [ 175.488527][ T7273] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 175.526380][ T7275] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 175.541211][ T977] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 175.549509][ T977] usb 1-1: config 0 has no interface number 0 [ 175.555624][ T7273] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 175.555658][ T7273] raw: 000000000000048d 0000000000000000 00000001ffffffff ffff8881404627c0 [ 175.555669][ T7273] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 175.555680][ T7273] page_owner tracks the page as allocated [ 175.555700][ T7273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7273, tgid 7273 (syz.2.294), ts 175448997473, free_ts 175400989470 [ 175.555731][ T7273] post_alloc_hook+0x1af/0x220 [ 175.555759][ T7273] get_page_from_freelist+0xd0b/0x31a0 [ 175.555774][ T7273] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 175.555790][ T7273] alloc_pages_mpol+0x1fb/0x550 [ 175.555811][ T7273] folio_alloc_noprof+0x20/0x2d0 [ 175.555832][ T7273] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 175.555854][ T7273] filemap_alloc_folio_noprof+0x5e/0x80 [ 175.555873][ T7273] page_cache_ra_order+0x571/0xed0 [ 175.576145][ T977] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 175.599732][ T7273] filemap_fault+0x16ac/0x29d0 [ 175.659743][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.684748][ T7273] __do_fault+0x10d/0x490 [ 175.689151][ T30] audit: type=1400 audit(1766877143.590:471): avc: denied { read } for pid=5167 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 175.704902][ T7275] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 175.714908][ T7273] do_fault+0x302/0x1ad0 [ 175.727960][ T7275] raw: 000000000000048f 0000000000000000 00000001ffffffff ffff8881404627c0 [ 175.737339][ T7275] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 175.749428][ T7273] __handle_mm_fault+0x1919/0x2bb0 [ 175.755081][ T7273] handle_mm_fault+0x3fe/0xad0 [ 175.760153][ T7273] do_user_addr_fault+0x60c/0x1370 [ 175.765285][ T7273] exc_page_fault+0x64/0xc0 [ 175.778307][ T7275] page_owner tracks the page as allocated [ 175.785020][ T7275] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7275, tgid 7273 (syz.2.294), ts 175429606939, free_ts 175401007314 [ 175.854874][ T977] usb 1-1: config 0 descriptor?? [ 175.859959][ T30] audit: type=1400 audit(1766877143.590:472): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.886667][ T7273] asm_exc_page_fault+0x26/0x30 [ 175.892169][ T977] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 175.917006][ T7273] page last free pid 7274 tgid 7273 stack trace: [ 175.927877][ T30] audit: type=1400 audit(1766877143.590:473): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.954300][ T7273] free_unref_folios+0xa22/0x1610 [ 175.957884][ T7275] post_alloc_hook+0x1af/0x220 [ 175.965877][ T7273] folios_put_refs+0x4be/0x750 [ 175.966437][ T7275] get_page_from_freelist+0xd0b/0x31a0 [ 175.994560][ T7273] truncate_inode_pages_range+0x326/0xe40 [ 176.003676][ T7275] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 176.006821][ T30] audit: type=1400 audit(1766877143.590:474): avc: denied { add_name } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.047443][ T7275] alloc_pages_mpol+0x1fb/0x550 [ 176.049705][ T7273] set_blocksize+0x2b8/0x500 [ 176.060042][ T7275] folio_alloc_noprof+0x20/0x2d0 [ 176.066447][ T7275] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 176.075223][ T30] audit: type=1400 audit(1766877143.590:475): avc: denied { create } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.095868][ T7273] blkdev_bszset+0x19b/0x240 [ 176.096104][ T7275] filemap_alloc_folio_noprof+0x5e/0x80 [ 176.109612][ T10] usb 1-1: USB disconnect, device number 12 [ 176.121899][ T30] audit: type=1400 audit(1766877143.590:476): avc: denied { append open } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.155391][ T7273] blkdev_ioctl+0x2ef/0x6e0 [ 176.165734][ T7275] page_cache_ra_order+0x571/0xed0 [ 176.170408][ T7273] __x64_sys_ioctl+0x18e/0x210 [ 176.171169][ T30] audit: type=1400 audit(1766877143.590:477): avc: denied { getattr } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.198307][ T7273] do_syscall_64+0xcd/0xf80 [ 176.198331][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.198446][ T7273] ------------[ cut here ]------------ [ 176.214444][ T7273] kernel BUG at mm/filemap.c:858! [ 176.249758][ T7275] filemap_fault+0x16ac/0x29d0 [ 176.264037][ T7275] __do_fault+0x10d/0x490 [ 176.269457][ T7275] do_fault+0xae4/0x1ad0 [ 176.289762][ T7275] __handle_mm_fault+0x1919/0x2bb0 [ 176.296654][ T7273] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 176.299896][ T7275] handle_mm_fault+0x3fe/0xad0 [ 176.303069][ T7273] CPU: 0 UID: 0 PID: 7273 Comm: syz.2.294 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.317910][ T7275] __get_user_pages+0x54e/0x3590 [ 176.318519][ T7273] Tainted: [L]=SOFTLOCKUP [ 176.327715][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.337739][ T7273] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 176.343691][ T7273] Code: 97 c6 ff 48 c7 c6 80 ed 99 8b 4c 89 ef e8 0f 74 11 00 90 0f 0b e8 07 97 c6 ff 48 c7 c6 e0 ed 99 8b 4c 89 ef e8 f8 73 11 00 90 <0f> 0b e8 f0 96 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 e2 96 c6 ff 48 [ 176.363267][ T7273] RSP: 0018:ffffc9001c2bf840 EFLAGS: 00010293 [ 176.369302][ T7273] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 176.377242][ T7273] RDX: ffff88802a0e0000 RSI: ffffffff81f84fc8 RDI: ffff88802a0e0484 [ 176.385183][ T7273] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 176.393123][ T7273] R10: ffffffff9088b4d7 R11: ffff88802a0e0b30 R12: 0000000000000004 [ 176.401069][ T7273] R13: ffffea0000a8c700 R14: 0000000000000000 R15: 0000000000000000 [ 176.409009][ T7273] FS: 0000555564d7b500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 176.417924][ T7273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.424479][ T7273] CR2: 000020000023b030 CR3: 00000000319c8000 CR4: 00000000003526f0 [ 176.432421][ T7273] Call Trace: [ 176.435672][ T7273] [ 176.438576][ T7273] ? __pfx___filemap_add_folio+0x10/0x10 [ 176.444182][ T7273] filemap_add_folio+0x19a/0x610 [ 176.449088][ T7273] ? __pfx_filemap_add_folio+0x10/0x10 [ 176.454516][ T7273] page_cache_ra_order+0x637/0xed0 [ 176.459603][ T7273] filemap_fault+0x16ac/0x29d0 [ 176.464337][ T7273] ? __pfx_filemap_fault+0x10/0x10 [ 176.469416][ T7273] ? pte_alloc_one+0x24d/0x3d0 [ 176.474154][ T7273] ? pte_alloc_one+0x25b/0x3d0 [ 176.478889][ T7273] ? __sanitizer_cov_trace_pc+0x17/0x70 [ 176.484409][ T7273] __do_fault+0x10d/0x490 [ 176.488707][ T7273] do_fault+0x302/0x1ad0 [ 176.492922][ T7273] ? __pfx_filemap_map_pages+0x10/0x10 [ 176.498349][ T7273] ? __handle_mm_fault+0x74d/0x2bb0 [ 176.503521][ T7273] __handle_mm_fault+0x1919/0x2bb0 [ 176.508606][ T7273] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.513782][ T7273] ? __pfx___handle_mm_fault+0x10/0x10 [ 176.519240][ T7273] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 176.525830][ T7273] handle_mm_fault+0x3fe/0xad0 [ 176.530588][ T7273] do_user_addr_fault+0x60c/0x1370 [ 176.535673][ T7273] ? rcu_is_watching+0x12/0xc0 [ 176.540405][ T7273] exc_page_fault+0x64/0xc0 [ 176.544879][ T7273] asm_exc_page_fault+0x26/0x30 [ 176.549705][ T7273] RIP: 0033:0x7fad1b558b08 [ 176.554099][ T7273] Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f [ 176.573675][ T7273] RSP: 002b:00007fff24c22588 EFLAGS: 00010202 [ 176.579713][ T7273] RAX: 0000200000000000 RBX: 0000000000000004 RCX: 00786d74702f7665 [ 176.587652][ T7273] RDX: 000000000000000a RSI: 6d74702f7665642f RDI: 0000200000000000 [ 176.595592][ T7273] RBP: 00007fad1b7e7da0 R08: 0000001b2ed20000 R09: 0000000000000001 [ 176.603533][ T7273] R10: 0000000000000001 R11: 0000000000000009 R12: 00007fad1b7e609c [ 176.611471][ T7273] R13: 00007fff24c22680 R14: fffffffffffffffe R15: 00007fff24c226a0 [ 176.619417][ T7273] [ 176.622408][ T7273] Modules linked in: [ 176.626844][ T7273] ---[ end trace 0000000000000000 ]--- [ 176.669838][ T7275] populate_vma_page_range+0x267/0x3f0 [ 176.703905][ T7273] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 176.711313][ T7275] __mm_populate+0x1d8/0x380 [ 176.715961][ T7275] page last free pid 7274 tgid 7273 stack trace: [ 176.722684][ T7273] Code: 97 c6 ff 48 c7 c6 80 ed 99 8b 4c 89 ef e8 0f 74 11 00 90 0f 0b e8 07 97 c6 ff 48 c7 c6 e0 ed 99 8b 4c 89 ef e8 f8 73 11 00 90 <0f> 0b e8 f0 96 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 e2 96 c6 ff 48 [ 176.742522][ T7275] free_unref_folios+0xa22/0x1610 [ 176.747574][ T7275] folios_put_refs+0x4be/0x750 [ 176.753586][ T7275] truncate_inode_pages_range+0x326/0xe40 [ 176.759602][ T7273] RSP: 0018:ffffc9001c2bf840 EFLAGS: 00010293 [ 176.766239][ T7275] set_blocksize+0x2b8/0x500 [ 176.770987][ T7275] blkdev_bszset+0x19b/0x240 [ 176.775611][ T7273] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 176.783771][ T7275] blkdev_ioctl+0x2ef/0x6e0 [ 176.788316][ T7273] RDX: ffff88802a0e0000 RSI: ffffffff81f84fc8 RDI: ffff88802a0e0484 [ 176.796448][ T7275] __x64_sys_ioctl+0x18e/0x210 [ 176.804233][ T7275] do_syscall_64+0xcd/0xf80 [ 176.808741][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.814788][ T7273] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 176.828739][ T7275] ------------[ cut here ]------------ [ 176.834359][ T7275] kernel BUG at mm/filemap.c:858! [ 176.842122][ T7273] R10: ffffffff9088b4d7 R11: ffff88802a0e0b30 R12: 0000000000000004 [ 176.850247][ T7275] Oops: invalid opcode: 0000 [#2] SMP KASAN NOPTI [ 176.856654][ T7275] CPU: 0 UID: 0 PID: 7275 Comm: syz.2.294 Tainted: G D L syzkaller #0 PREEMPT(full) [ 176.867386][ T7275] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 176.872462][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.882488][ T7275] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 176.888440][ T7275] Code: 97 c6 ff 48 c7 c6 80 ed 99 8b 4c 89 ef e8 0f 74 11 00 90 0f 0b e8 07 97 c6 ff 48 c7 c6 e0 ed 99 8b 4c 89 ef e8 f8 73 11 00 90 <0f> 0b e8 f0 96 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 e2 96 c6 ff 48 [ 176.908016][ T7275] RSP: 0018:ffffc9001c5ef490 EFLAGS: 00010246 [ 176.914054][ T7275] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000ddbd000 [ 176.922003][ T7275] RDX: 0000000000080000 RSI: ffffffff81f84fc8 RDI: ffff88803240ce04 [ 176.929948][ T7275] RBP: 0000000000112cc0 R08: 0000000000000000 R09: 0000000000000000 [ 176.937893][ T7275] R10: ffffffff9088b4d7 R11: 0000000000000000 R12: 0000000000000004 [ 176.945838][ T7275] R13: ffffea0000a8c680 R14: 0000000000000000 R15: 0000000000000000 [ 176.953784][ T7275] FS: 00007fad1c4736c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 176.962692][ T7275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.969253][ T7275] CR2: 0000200000404030 CR3: 00000000319c8000 CR4: 00000000003526f0 [ 176.977203][ T7275] Call Trace: [ 176.980459][ T7275] [ 176.983371][ T7275] ? __pfx___filemap_add_folio+0x10/0x10 [ 176.988990][ T7275] filemap_add_folio+0x19a/0x610 [ 176.993905][ T7275] ? __pfx_filemap_add_folio+0x10/0x10 [ 176.999339][ T7275] page_cache_ra_order+0x637/0xed0 [ 177.004438][ T7275] filemap_fault+0x16ac/0x29d0 [ 177.009178][ T7275] ? __pfx_filemap_fault+0x10/0x10 [ 177.014264][ T7275] ? mark_held_locks+0x49/0x80 [ 177.019010][ T7275] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 177.024796][ T7275] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 177.031366][ T7275] ? __pfx_filemap_map_pages+0x10/0x10 [ 177.036800][ T7275] __do_fault+0x10d/0x490 [ 177.041104][ T7275] ? __pfx_filemap_map_pages+0x10/0x10 [ 177.046535][ T7275] do_fault+0xae4/0x1ad0 [ 177.050757][ T7275] ? __pfx_filemap_map_pages+0x10/0x10 [ 177.056193][ T7275] __handle_mm_fault+0x1919/0x2bb0 [ 177.061287][ T7275] ? __pfx___handle_mm_fault+0x10/0x10 [ 177.066731][ T7275] ? irqentry_exit+0x1dd/0x8c0 [ 177.071476][ T7275] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.076655][ T7275] ? irqentry_exit+0x1dd/0x8c0 [ 177.081400][ T7275] handle_mm_fault+0x3fe/0xad0 [ 177.086145][ T7275] __get_user_pages+0x54e/0x3590 [ 177.091064][ T7275] ? __pfx___get_user_pages+0x10/0x10 [ 177.096418][ T7275] populate_vma_page_range+0x267/0x3f0 [ 177.101859][ T7275] ? __pfx_populate_vma_page_range+0x10/0x10 [ 177.107818][ T7275] ? __pfx_find_vma_intersection+0x10/0x10 [ 177.113610][ T7275] ? do_mmap+0x69c/0x1210 [ 177.117919][ T7275] __mm_populate+0x1d8/0x380 [ 177.122491][ T7275] ? __pfx___mm_populate+0x10/0x10 [ 177.127583][ T7275] ? up_write+0x282/0x4e0 [ 177.131892][ T7275] vm_mmap_pgoff+0x37f/0x470 [ 177.136460][ T7275] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 177.141548][ T7275] ? __rcu_read_unlock+0x2b5/0x5a0 [ 177.146639][ T7275] ? __fget_files+0x20e/0x3c0 [ 177.151299][ T7275] ksys_mmap_pgoff+0x32c/0x5c0 [ 177.156041][ T7275] __x64_sys_mmap+0x125/0x190 [ 177.160695][ T7275] do_syscall_64+0xcd/0xf80 [ 177.165181][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.171050][ T7275] RIP: 0033:0x7fad1b58f749 [ 177.175442][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.195024][ T7275] RSP: 002b:00007fad1c473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 177.203411][ T7275] RAX: ffffffffffffffda RBX: 00007fad1b7e6090 RCX: 00007fad1b58f749 [ 177.211360][ T7275] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 177.219308][ T7275] RBP: 00007fad1b613f91 R08: 0000000000000004 R09: 000000002c93a000 [ 177.227252][ T7275] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 177.235200][ T7275] R13: 00007fad1b7e6128 R14: 00007fad1b7e6090 R15: 00007fff24c22428 [ 177.243153][ T7275] [ 177.246147][ T7275] Modules linked in: [ 177.250549][ T7275] ---[ end trace 0000000000000000 ]--- [ 177.257867][ T7273] R13: ffffea0000a8c700 R14: 0000000000000000 R15: 0000000000000000 [ 177.275113][ T7273] FS: 0000555564d7b500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 177.284137][ T7273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.290773][ T7273] CR2: 00007f5d507b7198 CR3: 00000000319c8000 CR4: 00000000003526f0 [ 177.298738][ T7273] Kernel panic - not syncing: Fatal exception [ 177.305047][ T7273] Kernel Offset: disabled [ 177.309343][ T7273] Rebooting in 86400 seconds..